[Thu Nov 13 02:39:48.313972 2025] [:error] [pid 60405:tid 60414] [client 45.153.34.41:52404] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRTUdHMGv_mlVi6mf5pfJQAAAAY"]
[Thu Nov 13 03:42:30.136724 2025] [:error] [pid 31171:tid 31196] [client 45.153.34.41:43788] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRTjJm6_nGTJrMUjCctlPQAAAAM"]
[Thu Nov 13 07:22:41.010631 2025] [:error] [pid 34451:tid 34462] [client 85.203.36.143:36011] [client 85.203.36.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aRUWwTRcD8KetQb4RaqkdAAAAUk"]
[Thu Nov 13 21:39:38.779799 2025] [:error] [pid 4992:tid 5008] [client 157.245.103.95:64186] [client 157.245.103.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.103.95, incrementing brute counter"] [hostname "www.quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aRXfmimsutP7nusdj-B8hgAAAMw"]
[Thu Nov 13 21:39:38.790409 2025] [proxy_fcgi:error] [pid 4992:tid 5008] [client 157.245.103.95:64186] AH01071: Got error 'Primary script unknown'
[Fri Nov 14 12:31:48.685494 2025] [:error] [pid 16671:tid 16692] [client 20.48.160.218:39873] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRawtDsoHwEAmeIzZXDO0gAAAQ8"]
[Fri Nov 14 12:31:49.475203 2025] [:error] [pid 16574:tid 16609] [client 20.48.160.218:39590] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRawtf6XQqe4NqaoE9LGOgAAAII"]
[Fri Nov 14 12:31:51.420279 2025] [:error] [pid 16671:tid 16684] [client 20.48.160.218:39565] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRawtzsoHwEAmeIzZXDO2QAAAQc"]
[Fri Nov 14 12:31:53.584223 2025] [:error] [pid 16709:tid 16722] [client 20.48.160.218:39613] [client 20.48.160.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aRawuaNdzfVNC4oipLW1HAAAAUs"]
[Fri Nov 14 20:51:06.665900 2025] [:error] [pid 1170:tid 1189] [client 159.203.20.228:53520] [client 159.203.20.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.20.228, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aRclug5pkvzCDzzjItSAPgAAABE"]
[Fri Nov 14 20:51:06.676720 2025] [proxy_fcgi:error] [pid 1170:tid 1189] [client 159.203.20.228:53520] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 03:36:21.364481 2025] [:error] [pid 44437:tid 44478] [client 35.204.211.178:48874] [client 35.204.211.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aReEterO1g9UNCoZp04RMgAAAEc"]
[Sat Nov 15 06:21:23.897240 2025] [:error] [pid 27910:tid 27946] [client 54.93.248.27:44354] [client 54.93.248.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRerY46e1LusHMYkS7ZgNwAAAEU"]
[Sat Nov 15 06:38:43.386791 2025] [:error] [pid 27910:tid 27943] [client 43.207.2.179:38220] [client 43.207.2.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRevc46e1LusHMYkS7ZlMAAAAEI"]
[Sun Nov 16 02:40:23.771454 2025] [:error] [pid 19959:tid 19967] [client 143.198.193.18:45286] [client 143.198.193.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aRjJF8jejiTUP1-IawMlZgAAAYE"]
[Sun Nov 16 02:40:24.865455 2025] [:error] [pid 20654:tid 20664] [client 143.198.193.18:45306] [client 143.198.193.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRjJGHcS7eC8vO76_ydG_AAAA4c"]
[Tue Nov 18 00:28:43.256522 2025] [:error] [pid 40553:tid 40592] [client 159.65.153.77:46360] [client 159.65.153.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env"] [unique_id "aRtNO9uLE1BqoX0RcsLWQAAAABc"]
[Tue Nov 18 00:28:44.786346 2025] [:error] [pid 40793:tid 40853] [client 159.65.153.77:46380] [client 159.65.153.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aRtNPAzccxeNeH-NUVgWvwAAAEM"]
[Tue Nov 18 01:58:25.586855 2025] [:error] [pid 40793:tid 40868] [client 34.172.109.36:59476] [client 34.172.109.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aRtiQQzccxeNeH-NUVg6zAAAAFI"]
[Tue Nov 18 21:37:28.571867 2025] [:error] [pid 1387:tid 1413] [client 45.134.79.103:56242] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aRx2mEzBvalKyx3hMvWefgAAABQ"]
[Tue Nov 18 21:37:29.234703 2025] [:error] [pid 44624:tid 44651] [client 45.134.79.103:60228] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "aRx2mSllffozoBluWCXSkgAAAZg"]
[Tue Nov 18 21:37:29.907204 2025] [:error] [pid 3500:tid 3517] [client 45.134.79.103:51153] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mfCbRC7k2D7mjbSThwAAAc8"]
[Tue Nov 18 21:37:30.580433 2025] [:error] [pid 44470:tid 44482] [client 45.134.79.103:60408] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mjv-RLYfULjlgDb_QwAAAEc"]
[Tue Nov 18 21:37:31.243194 2025] [:error] [pid 44471:tid 44508] [client 45.134.79.103:52591] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRx2m-_6m0bQO14XwtOC1wAAAQQ"]
[Tue Nov 18 21:37:31.886390 2025] [:error] [pid 57578:tid 57580] [client 45.134.79.103:60995] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mz9_jVUQm7Io75ML0QAAAIA"]
[Tue Nov 18 21:37:32.570466 2025] [:error] [pid 57578:tid 57591] [client 45.134.79.103:54223] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nD9_jVUQm7Io75ML4AAAAIs"]
[Tue Nov 18 21:37:33.247705 2025] [:error] [pid 1387:tid 1389] [client 45.134.79.103:59326] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nUzBvalKyx3hMvWezAAAAAA"]
[Tue Nov 18 21:37:33.918140 2025] [:error] [pid 44624:tid 44637] [client 45.134.79.103:52488] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nSllffozoBluWCXS0gAAAYo"]
[Tue Nov 18 21:37:34.596568 2025] [:error] [pid 44624:tid 44647] [client 45.134.79.103:57294] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nillffozoBluWCXS1QAAAZQ"]
[Wed Nov 19 20:35:57.064389 2025] [:error] [pid 12672:tid 12697] [client 104.196.176.201:57853] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rf9vojl6X1cc5mUuyAAAAdQ"]
[Thu Nov 20 12:10:20.017889 2025] [:error] [pid 34444:tid 34457] [client 98.81.111.26:61925] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrFNEol4jlmmA_GPwrgAAAUs"]
[Thu Nov 20 12:10:20.423229 2025] [:error] [pid 55340:tid 55365] [client 98.81.111.26:52359] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrPOxD-NeMydTybBJgwAAABQ"]
[Thu Nov 20 12:10:20.827785 2025] [:error] [pid 34444:tid 34459] [client 98.81.111.26:49255] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrFNEol4jlmmA_GPwwgAAAU0"]
[Thu Nov 20 12:10:21.238543 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:59712] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrfPZXaIMEU4pE7ugegAAAMI"]
[Thu Nov 20 12:10:21.654266 2025] [:error] [pid 804:tid 820] [client 98.81.111.26:60359] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR6UrfaRHpUlPL9O0Lk1jgAAAYQ"]
[Thu Nov 20 12:10:22.066879 2025] [:error] [pid 55430:tid 55455] [client 98.81.111.26:52528] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UrvPZXaIMEU4pE7ugqgAAANY"]
[Thu Nov 20 12:10:22.476164 2025] [:error] [pid 55430:tid 55457] [client 98.81.111.26:53421] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UrvPZXaIMEU4pE7ugwwAAANg"]
[Thu Nov 20 12:10:22.895292 2025] [:error] [pid 55340:tid 55352] [client 98.81.111.26:54839] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6UrvOxD-NeMydTybBJ7QAAAAc"]
[Thu Nov 20 12:10:23.305883 2025] [:error] [pid 55340:tid 55365] [client 98.81.111.26:51321] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6Ur_OxD-NeMydTybBKAQAAABQ"]
[Thu Nov 20 12:10:23.715603 2025] [:error] [pid 55430:tid 55445] [client 98.81.111.26:63422] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aR6Ur_PZXaIMEU4pE7uhFgAAAMw"]
[Thu Nov 20 12:10:24.126331 2025] [:error] [pid 55430:tid 55445] [client 98.81.111.26:65152] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp"] [unique_id "aR6UsPPZXaIMEU4pE7uhPQAAAMw"]
[Thu Nov 20 12:10:24.535921 2025] [:error] [pid 34444:tid 34451] [client 98.81.111.26:49861] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp"] [unique_id "aR6UsFNEol4jlmmA_GPxJgAAAUU"]
[Thu Nov 20 12:10:24.943225 2025] [:error] [pid 34405:tid 34424] [client 98.81.111.26:50745] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp"] [unique_id "aR6UsDFpvu8oRK7ATfvJjwAAARE"]
[Thu Nov 20 12:10:25.351347 2025] [:error] [pid 804:tid 843] [client 98.81.111.26:56481] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp"] [unique_id "aR6UsfaRHpUlPL9O0Lk2BwAAAZM"]
[Thu Nov 20 12:10:25.757992 2025] [:error] [pid 55430:tid 55441] [client 98.81.111.26:64297] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp"] [unique_id "aR6UsfPZXaIMEU4pE7uhaQAAAMg"]
[Thu Nov 20 12:10:26.169121 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:60652] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog"] [unique_id "aR6UslNEol4jlmmA_GPxPgAAAUE"]
[Thu Nov 20 12:10:26.577693 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:51228] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog"] [unique_id "aR6UslWlO3EnyVMV7w5lewAAAIU"]
[Thu Nov 20 12:10:26.985749 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:63490] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog"] [unique_id "aR6UsjFpvu8oRK7ATfvJoAAAARc"]
[Thu Nov 20 12:10:27.391210 2025] [:error] [pid 34444:tid 34466] [client 98.81.111.26:63700] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog"] [unique_id "aR6Us1NEol4jlmmA_GPxRgAAAVQ"]
[Thu Nov 20 12:10:27.801016 2025] [:error] [pid 55343:tid 55419] [client 98.81.111.26:60591] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog"] [unique_id "aR6Us1WlO3EnyVMV7w5lhgAAAJQ"]
[Thu Nov 20 12:10:28.207303 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:64461] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new"] [unique_id "aR6UtPaRHpUlPL9O0Lk2OQAAAY0"]
[Thu Nov 20 12:10:28.614032 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:57766] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new"] [unique_id "aR6UtPPZXaIMEU4pE7uhgAAAAMY"]
[Thu Nov 20 12:10:29.019866 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:60503] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new"] [unique_id "aR6UtVWlO3EnyVMV7w5ljwAAAIU"]
[Thu Nov 20 12:10:29.429007 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:56998] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new"] [unique_id "aR6UtTFpvu8oRK7ATfvJtAAAARM"]
[Thu Nov 20 12:10:29.836135 2025] [:error] [pid 34444:tid 34448] [client 98.81.111.26:55419] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new"] [unique_id "aR6UtVNEol4jlmmA_GPxWQAAAUI"]
[Thu Nov 20 12:10:30.244259 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:65054] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old"] [unique_id "aR6UtjFpvu8oRK7ATfvJwQAAARI"]
[Thu Nov 20 12:10:30.651630 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:53423] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old"] [unique_id "aR6UtjFpvu8oRK7ATfvJxwAAARc"]
[Thu Nov 20 12:10:31.057471 2025] [:error] [pid 55343:tid 55412] [client 98.81.111.26:61591] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old"] [unique_id "aR6Ut1WlO3EnyVMV7w5lmwAAAI0"]
[Thu Nov 20 12:10:31.467613 2025] [:error] [pid 804:tid 824] [client 98.81.111.26:51089] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old"] [unique_id "aR6Ut_aRHpUlPL9O0Lk2WQAAAYg"]
[Thu Nov 20 12:10:31.874863 2025] [:error] [pid 34405:tid 34413] [client 98.81.111.26:51321] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old"] [unique_id "aR6UtzFpvu8oRK7ATfvJ0AAAAQY"]
[Thu Nov 20 12:10:32.280493 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:56903] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/newsite"] [unique_id "aR6UuPPZXaIMEU4pE7uhpQAAAMY"]
[Thu Nov 20 12:10:32.684793 2025] [:error] [pid 55342:tid 55393] [client 98.81.111.26:49633] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/newsite"] [unique_id "aR6UuLg6x32Tvk7fIG-MkgAAAFU"]
[Thu Nov 20 12:10:33.089062 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:58921] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/newsite"] [unique_id "aR6UufOxD-NeMydTybBKdQAAABM"]
[Thu Nov 20 12:10:33.493891 2025] [:error] [pid 34444:tid 34459] [client 98.81.111.26:62301] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/newsite"] [unique_id "aR6UuVNEol4jlmmA_GPxdwAAAU0"]
[Thu Nov 20 12:10:33.902327 2025] [:error] [pid 55343:tid 55419] [client 98.81.111.26:59252] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/newsite"] [unique_id "aR6UuVWlO3EnyVMV7w5lsAAAAJQ"]
[Thu Nov 20 12:10:34.310409 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:59188] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test"] [unique_id "aR6UuvPZXaIMEU4pE7uhwQAAANc"]
[Thu Nov 20 12:10:34.717195 2025] [:error] [pid 804:tid 808] [client 98.81.111.26:56279] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test"] [unique_id "aR6UuvaRHpUlPL9O0Lk2agAAAYI"]
[Thu Nov 20 12:10:35.124181 2025] [:error] [pid 55340:tid 55350] [client 98.81.111.26:57754] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test"] [unique_id "aR6Uu_OxD-NeMydTybBKiwAAAAU"]
[Thu Nov 20 12:10:35.532029 2025] [:error] [pid 34444:tid 34464] [client 98.81.111.26:55215] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test"] [unique_id "aR6Uu1NEol4jlmmA_GPxjAAAAVI"]
[Thu Nov 20 12:10:35.936801 2025] [:error] [pid 34444:tid 34468] [client 98.81.111.26:56277] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test"] [unique_id "aR6Uu1NEol4jlmmA_GPxlQAAAVY"]
[Thu Nov 20 12:10:36.345002 2025] [:error] [pid 34444:tid 34456] [client 98.81.111.26:64673] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/main"] [unique_id "aR6UvFNEol4jlmmA_GPxmwAAAUo"]
[Thu Nov 20 12:10:36.751451 2025] [:error] [pid 55343:tid 55413] [client 98.81.111.26:60869] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/main"] [unique_id "aR6UvFWlO3EnyVMV7w5lywAAAI4"]
[Thu Nov 20 12:10:37.156496 2025] [:error] [pid 804:tid 807] [client 98.81.111.26:54818] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/main"] [unique_id "aR6UvfaRHpUlPL9O0Lk2hwAAAYE"]
[Thu Nov 20 12:10:37.562424 2025] [:error] [pid 55342:tid 55379] [client 98.81.111.26:63083] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/main"] [unique_id "aR6Uvbg6x32Tvk7fIG-MyQAAAEc"]
[Thu Nov 20 12:10:37.968850 2025] [:error] [pid 55430:tid 55449] [client 98.81.111.26:55117] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/main"] [unique_id "aR6UvfPZXaIMEU4pE7uh3AAAANA"]
[Thu Nov 20 12:10:38.374899 2025] [:error] [pid 55430:tid 55435] [client 98.81.111.26:54819] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testing"] [unique_id "aR6UvvPZXaIMEU4pE7uh3QAAAMI"]
[Thu Nov 20 12:10:38.785735 2025] [:error] [pid 804:tid 807] [client 98.81.111.26:63083] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testing"] [unique_id "aR6UvvaRHpUlPL9O0Lk2mAAAAYE"]
[Thu Nov 20 12:10:39.192570 2025] [:error] [pid 34444:tid 34454] [client 98.81.111.26:55117] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testing"] [unique_id "aR6Uv1NEol4jlmmA_GPxtgAAAUg"]
[Thu Nov 20 12:10:39.598832 2025] [:error] [pid 55342:tid 55387] [client 98.81.111.26:51942] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testing"] [unique_id "aR6Uv7g6x32Tvk7fIG-M3wAAAE8"]
[Thu Nov 20 12:10:40.003758 2025] [:error] [pid 34444:tid 34458] [client 98.81.111.26:56852] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testing"] [unique_id "aR6UwFNEol4jlmmA_GPxwQAAAUw"]
[Thu Nov 20 12:10:40.415755 2025] [:error] [pid 55340:tid 55358] [client 98.81.111.26:64624] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site"] [unique_id "aR6UwPOxD-NeMydTybBKwgAAAA0"]
[Thu Nov 20 12:10:40.820563 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:50762] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site"] [unique_id "aR6UwPaRHpUlPL9O0Lk2swAAAZE"]
[Thu Nov 20 12:10:41.225595 2025] [:error] [pid 34444:tid 34470] [client 98.81.111.26:60610] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site"] [unique_id "aR6UwVNEol4jlmmA_GPx0QAAAVg"]
[Thu Nov 20 12:10:41.639356 2025] [:error] [pid 55343:tid 55405] [client 98.81.111.26:51575] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site"] [unique_id "aR6UwVWlO3EnyVMV7w5l4wAAAIY"]
[Thu Nov 20 12:10:42.054157 2025] [:error] [pid 55343:tid 55422] [client 98.81.111.26:51244] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site"] [unique_id "aR6UwlWlO3EnyVMV7w5l5gAAAJc"]
[Thu Nov 20 12:10:42.460721 2025] [:error] [pid 55343:tid 55415] [client 98.81.111.26:61972] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup"] [unique_id "aR6UwlWlO3EnyVMV7w5l6QAAAJA"]
[Thu Nov 20 12:10:42.864806 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:62383] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup"] [unique_id "aR6UwvPZXaIMEU4pE7uh_QAAANc"]
[Thu Nov 20 12:10:43.269501 2025] [:error] [pid 804:tid 807] [client 98.81.111.26:54270] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup"] [unique_id "aR6Uw_aRHpUlPL9O0Lk24wAAAYE"]
[Thu Nov 20 12:10:43.674723 2025] [:error] [pid 34405:tid 34415] [client 98.81.111.26:59965] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup"] [unique_id "aR6UwzFpvu8oRK7ATfvKRAAAAQg"]
[Thu Nov 20 12:10:44.085506 2025] [:error] [pid 55340:tid 55361] [client 98.81.111.26:54140] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup"] [unique_id "aR6UxPOxD-NeMydTybBK7AAAABA"]
[Thu Nov 20 12:10:44.490716 2025] [:error] [pid 55342:tid 55373] [client 98.81.111.26:53876] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/demo"] [unique_id "aR6UxLg6x32Tvk7fIG-NAQAAAEE"]
[Thu Nov 20 12:10:44.895712 2025] [:error] [pid 34405:tid 34416] [client 98.81.111.26:61567] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/demo"] [unique_id "aR6UxDFpvu8oRK7ATfvKUAAAAQk"]
[Thu Nov 20 12:10:45.298705 2025] [:error] [pid 34405:tid 34409] [client 98.81.111.26:62210] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/demo"] [unique_id "aR6UxTFpvu8oRK7ATfvKVgAAAQI"]
[Thu Nov 20 12:10:45.702618 2025] [:error] [pid 804:tid 824] [client 98.81.111.26:60028] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/demo"] [unique_id "aR6UxfaRHpUlPL9O0Lk2-wAAAYg"]
[Thu Nov 20 12:10:46.109671 2025] [:error] [pid 34444:tid 34454] [client 98.81.111.26:55764] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/demo"] [unique_id "aR6UxlNEol4jlmmA_GPyEgAAAUg"]
[Thu Nov 20 12:10:46.515604 2025] [:error] [pid 34444:tid 34464] [client 98.81.111.26:57061] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home"] [unique_id "aR6UxlNEol4jlmmA_GPyGwAAAVI"]
[Thu Nov 20 12:10:46.921480 2025] [:error] [pid 55430:tid 55443] [client 98.81.111.26:60028] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home"] [unique_id "aR6UxvPZXaIMEU4pE7uiHwAAAMo"]
[Thu Nov 20 12:10:47.327424 2025] [:error] [pid 34405:tid 34431] [client 98.81.111.26:55766] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home"] [unique_id "aR6UxzFpvu8oRK7ATfvKYAAAARg"]
[Thu Nov 20 12:10:47.730246 2025] [:error] [pid 34444:tid 34464] [client 98.81.111.26:63527] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home"] [unique_id "aR6Ux1NEol4jlmmA_GPyMAAAAVI"]
[Thu Nov 20 12:10:48.137577 2025] [:error] [pid 55430:tid 55457] [client 98.81.111.26:53025] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home"] [unique_id "aR6UyPPZXaIMEU4pE7uiOQAAANg"]
[Thu Nov 20 12:10:48.543231 2025] [:error] [pid 55343:tid 55404] [client 98.81.111.26:62739] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp"] [unique_id "aR6UyFWlO3EnyVMV7w5mHwAAAIU"]
[Thu Nov 20 12:10:48.960440 2025] [:error] [pid 804:tid 844] [client 98.81.111.26:63408] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp"] [unique_id "aR6UyPaRHpUlPL9O0Lk3FgAAAZQ"]
[Thu Nov 20 12:10:49.366903 2025] [:error] [pid 34444:tid 34452] [client 98.81.111.26:49774] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp"] [unique_id "aR6UyVNEol4jlmmA_GPyTgAAAUY"]
[Thu Nov 20 12:10:49.771332 2025] [:error] [pid 804:tid 839] [client 98.81.111.26:65095] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp"] [unique_id "aR6UyfaRHpUlPL9O0Lk3JgAAAY8"]
[Thu Nov 20 12:10:50.177447 2025] [:error] [pid 55430:tid 55450] [client 98.81.111.26:56999] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp"] [unique_id "aR6UyvPZXaIMEU4pE7uiWAAAANE"]
[Thu Nov 20 12:10:50.583889 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:64151] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev"] [unique_id "aR6UyvaRHpUlPL9O0Lk3LwAAAYM"]
[Thu Nov 20 12:10:50.989757 2025] [:error] [pid 804:tid 834] [client 98.81.111.26:51758] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev"] [unique_id "aR6UyvaRHpUlPL9O0Lk3MgAAAYo"]
[Thu Nov 20 12:10:51.394205 2025] [:error] [pid 55343:tid 55405] [client 98.81.111.26:57015] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev"] [unique_id "aR6Uy1WlO3EnyVMV7w5mOAAAAIY"]
[Thu Nov 20 12:10:51.800344 2025] [:error] [pid 34405:tid 34424] [client 98.81.111.26:51488] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev"] [unique_id "aR6UyzFpvu8oRK7ATfvKegAAARE"]
[Thu Nov 20 12:10:52.206791 2025] [:error] [pid 34405:tid 34413] [client 98.81.111.26:54959] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev"] [unique_id "aR6UzDFpvu8oRK7ATfvKgQAAAQY"]
[Thu Nov 20 12:10:52.610616 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:62373] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms"] [unique_id "aR6UzFWlO3EnyVMV7w5mSgAAAIc"]
[Thu Nov 20 12:10:53.020946 2025] [:error] [pid 55343:tid 55400] [client 98.81.111.26:55181] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms"] [unique_id "aR6UzVWlO3EnyVMV7w5mTwAAAIE"]
[Thu Nov 20 12:10:53.425144 2025] [:error] [pid 55343:tid 55423] [client 98.81.111.26:49230] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms"] [unique_id "aR6UzVWlO3EnyVMV7w5mUgAAAJg"]
[Thu Nov 20 12:10:53.828980 2025] [:error] [pid 55430:tid 55446] [client 98.81.111.26:63374] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms"] [unique_id "aR6UzfPZXaIMEU4pE7uigwAAAM0"]
[Thu Nov 20 12:10:54.233683 2025] [:error] [pid 804:tid 822] [client 98.81.111.26:61245] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms"] [unique_id "aR6UzvaRHpUlPL9O0Lk3RAAAAYY"]
[Thu Nov 20 12:10:54.643720 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:53961] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/portal"] [unique_id "aR6UzvOxD-NeMydTybBLMQAAAAM"]
[Thu Nov 20 12:10:55.048723 2025] [:error] [pid 34444:tid 34451] [client 98.81.111.26:61038] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/portal"] [unique_id "aR6Uz1NEol4jlmmA_GPyfQAAAUU"]
[Thu Nov 20 12:10:55.454217 2025] [:error] [pid 55430:tid 55444] [client 98.81.111.26:58979] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/portal"] [unique_id "aR6Uz_PZXaIMEU4pE7uikAAAAMs"]
[Thu Nov 20 12:10:55.859506 2025] [:error] [pid 34405:tid 34407] [client 98.81.111.26:59264] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/portal"] [unique_id "aR6UzzFpvu8oRK7ATfvKpAAAAQA"]
[Thu Nov 20 12:10:56.264293 2025] [:error] [pid 34444:tid 34466] [client 98.81.111.26:54575] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/portal"] [unique_id "aR6U0FNEol4jlmmA_GPyhwAAAVQ"]
[Thu Nov 20 12:10:56.667962 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:61847] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web"] [unique_id "aR6U0PPZXaIMEU4pE7uipgAAANc"]
[Thu Nov 20 12:10:57.073847 2025] [:error] [pid 34444:tid 34447] [client 98.81.111.26:56257] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web"] [unique_id "aR6U0VNEol4jlmmA_GPyjwAAAUE"]
[Thu Nov 20 12:10:57.478186 2025] [:error] [pid 55342:tid 55381] [client 98.81.111.26:50350] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web"] [unique_id "aR6U0bg6x32Tvk7fIG-NegAAAEk"]
[Thu Nov 20 12:10:57.883085 2025] [:error] [pid 34444:tid 34456] [client 98.81.111.26:62591] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web"] [unique_id "aR6U0VNEol4jlmmA_GPylAAAAUo"]
[Thu Nov 20 12:10:58.289835 2025] [:error] [pid 55340:tid 55349] [client 98.81.111.26:55748] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web"] [unique_id "aR6U0vOxD-NeMydTybBLWQAAAAQ"]
[Thu Nov 20 21:24:17.793567 2025] [proxy_fcgi:error] [pid 40508:tid 40514] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:17.912283 2025] [proxy_fcgi:error] [pid 40508:tid 40520] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:18.029849 2025] [proxy_fcgi:error] [pid 40508:tid 40531] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:18.168236 2025] [proxy_fcgi:error] [pid 40508:tid 40532] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:18.616935 2025] [proxy_fcgi:error] [pid 40508:tid 40515] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:18.748327 2025] [proxy_fcgi:error] [pid 40508:tid 40527] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:18.887429 2025] [proxy_fcgi:error] [pid 40508:tid 40526] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:19.007231 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:19.127092 2025] [proxy_fcgi:error] [pid 40508:tid 40517] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:19.244046 2025] [proxy_fcgi:error] [pid 40508:tid 40521] [client 20.27.30.201:45598] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:24:19.360019 2025] [:error] [pid 40508:tid 40529] [client 20.27.30.201:45598] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kki.php"] [unique_id "aR8Wg6xXNVCMW_ksxPvcFAAAApM"]
[Thu Nov 20 21:24:20.489189 2025] [:error] [pid 40415:tid 40425] [client 20.27.30.201:45759] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kki.php"] [unique_id "aR8WhKhjIyLSv09svwPNGwAAAcc"]
[Thu Nov 20 21:24:21.643489 2025] [:error] [pid 40508:tid 40514] [client 20.27.30.201:45710] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kki.php"] [unique_id "aR8WhaxXNVCMW_ksxPvcGgAAAoQ"]
[Thu Nov 20 21:24:24.776089 2025] [:error] [pid 55340:tid 55358] [client 20.27.30.201:45627] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kki.php"] [unique_id "aR8WiPOxD-NeMydTybC8YwAAAA0"]
[Thu Nov 20 21:24:29.267307 2025] [:error] [pid 55343:tid 55401] [client 20.27.30.201:45719] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js.php"] [unique_id "aR8WjVWlO3EnyVMV7w7OYQAAAII"]
[Thu Nov 20 21:24:29.905016 2025] [:error] [pid 55340:tid 55355] [client 20.27.30.201:45597] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js.php"] [unique_id "aR8WjfOxD-NeMydTybC8lAAAAAo"]
[Thu Nov 20 21:24:31.440619 2025] [:error] [pid 55342:tid 55380] [client 20.27.30.201:45756] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js.php"] [unique_id "aR8Wj7g6x32Tvk7fIG8AJwAAAEg"]
[Thu Nov 20 21:24:32.297349 2025] [:error] [pid 40636:tid 40646] [client 20.27.30.201:12314] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js.php"] [unique_id "aR8WkAK8BWUoW3xq0HAqwQAAA4Y"]
[Thu Nov 20 21:24:35.656814 2025] [:error] [pid 40508:tid 40515] [client 20.27.30.201:45743] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aR8Wk6xXNVCMW_ksxPvcPwAAAoU"]
[Thu Nov 20 21:24:40.769113 2025] [:error] [pid 55340:tid 55350] [client 20.27.30.201:45594] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aR8WmPOxD-NeMydTybC8lwAAAAU"]
[Thu Nov 20 21:24:45.938808 2025] [:error] [pid 40508:tid 40516] [client 20.27.30.201:45701] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aR8WnaxXNVCMW_ksxPvcSwAAAoY"]
[Thu Nov 20 21:24:47.007864 2025] [:error] [pid 40537:tid 40551] [client 20.27.30.201:45699] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aR8Wn6KlsL5kxTa3c1z-ugAAAso"]
[Thu Nov 20 21:24:47.862264 2025] [:error] [pid 55430:tid 55452] [client 20.27.30.201:45625] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "aR8Wn_PZXaIMEU4pE7sebgAAANM"]
[Thu Nov 20 21:24:49.190347 2025] [:error] [pid 40537:tid 40550] [client 20.27.30.201:45730] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "aR8WoaKlsL5kxTa3c1z-vwAAAsk"]
[Thu Nov 20 21:24:50.554625 2025] [:error] [pid 40445:tid 40481] [client 20.27.30.201:45729] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "aR8WolH-MuFcoWRjXpaSmwAAAkY"]
[Thu Nov 20 21:24:53.175280 2025] [:error] [pid 40415:tid 40418] [client 20.27.30.201:12290] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "aR8WpahjIyLSv09svwPNTwAAAcA"]
[Thu Nov 20 21:24:54.620039 2025] [:error] [pid 40636:tid 40652] [client 20.27.30.201:45570] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aR8WpgK8BWUoW3xq0HAqzgAAA4w"]
[Thu Nov 20 21:24:56.176525 2025] [:error] [pid 55342:tid 55374] [client 20.27.30.201:46003] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aR8WqLg6x32Tvk7fIG8ANQAAAEI"]
[Thu Nov 20 21:24:57.208994 2025] [:error] [pid 55430:tid 55450] [client 20.27.30.201:45568] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aR8WqfPZXaIMEU4pE7secQAAANE"]
[Thu Nov 20 21:24:58.611363 2025] [:error] [pid 40636:tid 40641] [client 20.27.30.201:45708] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aR8WqgK8BWUoW3xq0HAqzwAAA4E"]
[Thu Nov 20 21:24:59.104048 2025] [:error] [pid 55340:tid 55364] [client 20.27.30.201:45611] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "aR8Wq_OxD-NeMydTybC8oQAAABM"]
[Thu Nov 20 21:25:00.338934 2025] [:error] [pid 40415:tid 40426] [client 20.27.30.201:45969] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "aR8WrKhjIyLSv09svwPNVgAAAcg"]
[Thu Nov 20 21:25:00.828910 2025] [:error] [pid 55430:tid 55443] [client 20.27.30.201:45600] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "aR8WrPPZXaIMEU4pE7sedAAAAMo"]
[Thu Nov 20 21:25:04.652508 2025] [:error] [pid 40537:tid 40543] [client 20.27.30.201:45602] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "aR8WsKKlsL5kxTa3c1z-wwAAAsI"]
[Thu Nov 20 21:25:05.893287 2025] [:error] [pid 55342:tid 55383] [client 20.27.30.201:45589] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aR8Wsbg6x32Tvk7fIG8ANwAAAEs"]
[Thu Nov 20 21:25:07.070057 2025] [:error] [pid 40537:tid 40556] [client 20.27.30.201:56101] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aR8Ws6KlsL5kxTa3c1z-xgAAAs8"]
[Thu Nov 20 21:25:08.708413 2025] [:error] [pid 40636:tid 40659] [client 20.27.30.201:56107] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aR8WtAK8BWUoW3xq0HAq0wAAA5M"]
[Thu Nov 20 21:25:09.527324 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:45580] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aR8WtVWlO3EnyVMV7w7OdAAAAIU"]
[Thu Nov 20 21:25:10.582172 2025] [:error] [pid 55343:tid 55401] [client 20.27.30.201:56089] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "aR8WtlWlO3EnyVMV7w7OdQAAAII"]
[Thu Nov 20 21:25:11.696862 2025] [:error] [pid 34405:tid 34430] [client 20.27.30.201:45968] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "aR8WtzFpvu8oRK7ATfs9DAAAARc"]
[Thu Nov 20 21:25:12.505597 2025] [:error] [pid 34405:tid 34423] [client 20.27.30.201:56112] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "aR8WuDFpvu8oRK7ATfs9DQAAARA"]
[Thu Nov 20 21:25:13.708158 2025] [:error] [pid 34405:tid 34409] [client 20.27.30.201:46010] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "aR8WuTFpvu8oRK7ATfs9DgAAAQI"]
[Thu Nov 20 21:25:14.468848 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:56072] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4yps5d.php"] [unique_id "aR8WujFpvu8oRK7ATfs9EAAAAQ8"]
[Thu Nov 20 21:25:15.177253 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:45724] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4yps5d.php"] [unique_id "aR8Wu_PZXaIMEU4pE7seegAAAMU"]
[Thu Nov 20 21:25:16.748937 2025] [:error] [pid 40537:tid 40557] [client 20.27.30.201:45604] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4yps5d.php"] [unique_id "aR8WvKKlsL5kxTa3c1z-zAAAAtA"]
[Thu Nov 20 21:25:17.868694 2025] [:error] [pid 55340:tid 55359] [client 20.27.30.201:56084] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4yps5d.php"] [unique_id "aR8WvfOxD-NeMydTybC8pwAAAA4"]
[Thu Nov 20 21:25:19.071132 2025] [proxy_fcgi:error] [pid 40537:tid 40543] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.216832 2025] [proxy_fcgi:error] [pid 40537:tid 40552] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.350253 2025] [proxy_fcgi:error] [pid 40537:tid 40559] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.485443 2025] [proxy_fcgi:error] [pid 40537:tid 40562] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.606499 2025] [proxy_fcgi:error] [pid 40537:tid 40548] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.727931 2025] [proxy_fcgi:error] [pid 40537:tid 40555] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.845379 2025] [proxy_fcgi:error] [pid 40537:tid 40556] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:19.963331 2025] [proxy_fcgi:error] [pid 40537:tid 40542] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:20.081263 2025] [proxy_fcgi:error] [pid 40537:tid 40545] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:20.200401 2025] [proxy_fcgi:error] [pid 40537:tid 40558] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:20.316998 2025] [proxy_fcgi:error] [pid 40537:tid 40564] [client 20.27.30.201:45731] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:25:20.432313 2025] [:error] [pid 40537:tid 40554] [client 20.27.30.201:45731] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aR8WwKKlsL5kxTa3c1z-2gAAAs0"]
[Thu Nov 20 21:25:21.129219 2025] [:error] [pid 40508:tid 40532] [client 20.27.30.201:56123] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aR8WwaxXNVCMW_ksxPvcYgAAApY"]
[Thu Nov 20 21:25:23.003784 2025] [:error] [pid 40636:tid 40650] [client 20.27.30.201:45992] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aR8WwwK8BWUoW3xq0HAq2gAAA4o"]
[Thu Nov 20 21:25:24.577742 2025] [:error] [pid 40508:tid 40519] [client 20.27.30.201:46004] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aR8WxKxXNVCMW_ksxPvcYwAAAok"]
[Thu Nov 20 21:25:25.883270 2025] [:error] [pid 34405:tid 34425] [client 20.27.30.201:45961] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/icon.php"] [unique_id "aR8WxTFpvu8oRK7ATfs9FgAAARI"]
[Thu Nov 20 21:25:26.518670 2025] [:error] [pid 40508:tid 40518] [client 20.27.30.201:12304] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/icon.php"] [unique_id "aR8WxqxXNVCMW_ksxPvcZgAAAog"]
[Thu Nov 20 21:25:27.775368 2025] [:error] [pid 40508:tid 40511] [client 20.27.30.201:45739] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/icon.php"] [unique_id "aR8Wx6xXNVCMW_ksxPvcagAAAoE"]
[Thu Nov 20 21:25:29.674635 2025] [:error] [pid 40537:tid 40549] [client 20.27.30.201:45596] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/icon.php"] [unique_id "aR8WyaKlsL5kxTa3c1z-3gAAAsg"]
[Thu Nov 20 21:25:30.278824 2025] [:error] [pid 40508:tid 40525] [client 20.27.30.201:45988] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aR8WyqxXNVCMW_ksxPvcbAAAAo8"]
[Thu Nov 20 21:25:31.851661 2025] [:error] [pid 55430:tid 55442] [client 20.27.30.201:56066] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aR8Wy_PZXaIMEU4pE7seiAAAAMk"]
[Thu Nov 20 21:25:33.878710 2025] [:error] [pid 55430:tid 55443] [client 20.27.30.201:45601] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aR8WzfPZXaIMEU4pE7sejAAAAMo"]
[Thu Nov 20 21:25:34.657098 2025] [:error] [pid 55430:tid 55444] [client 20.27.30.201:56087] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aR8WzvPZXaIMEU4pE7sejgAAAMs"]
[Thu Nov 20 21:25:36.108823 2025] [:error] [pid 55340:tid 55349] [client 20.27.30.201:45954] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gm.php"] [unique_id "aR8W0POxD-NeMydTybC8rAAAAAQ"]
[Thu Nov 20 21:25:37.754027 2025] [:error] [pid 55340:tid 55351] [client 20.27.30.201:45990] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gm.php"] [unique_id "aR8W0fOxD-NeMydTybC8rwAAAAY"]
[Thu Nov 20 21:25:39.549037 2025] [:error] [pid 40508:tid 40514] [client 20.27.30.201:45997] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gm.php"] [unique_id "aR8W06xXNVCMW_ksxPvccgAAAoQ"]
[Thu Nov 20 21:25:41.025314 2025] [:error] [pid 40636:tid 40640] [client 20.27.30.201:12292] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gm.php"] [unique_id "aR8W1QK8BWUoW3xq0HAq4wAAA4A"]
[Thu Nov 20 21:25:42.593952 2025] [:error] [pid 34405:tid 34431] [client 20.27.30.201:56090] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iko.php"] [unique_id "aR8W1jFpvu8oRK7ATfs9LAAAARg"]
[Thu Nov 20 21:25:43.377274 2025] [:error] [pid 40445:tid 40479] [client 20.27.30.201:56097] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iko.php"] [unique_id "aR8W11H-MuFcoWRjXpaSxQAAAkQ"]
[Thu Nov 20 21:25:45.862266 2025] [:error] [pid 55340:tid 55364] [client 20.27.30.201:56119] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iko.php"] [unique_id "aR8W2fOxD-NeMydTybC8ugAAABM"]
[Thu Nov 20 21:25:46.722828 2025] [:error] [pid 40508:tid 40529] [client 20.27.30.201:56102] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iko.php"] [unique_id "aR8W2qxXNVCMW_ksxPvcdwAAApM"]
[Thu Nov 20 21:25:48.234909 2025] [:error] [pid 34405:tid 34429] [client 20.27.30.201:45952] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aR8W3DFpvu8oRK7ATfs9LQAAARY"]
[Thu Nov 20 21:25:50.460140 2025] [:error] [pid 55342:tid 55386] [client 20.27.30.201:56116] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aR8W3rg6x32Tvk7fIG8AYwAAAE4"]
[Thu Nov 20 21:25:52.028219 2025] [:error] [pid 55340:tid 55347] [client 20.27.30.201:46011] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aR8W4POxD-NeMydTybC8xwAAAAI"]
[Thu Nov 20 21:25:53.125646 2025] [:error] [pid 55340:tid 55354] [client 20.27.30.201:45590] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aR8W4fOxD-NeMydTybC8ygAAAAk"]
[Thu Nov 20 21:25:55.514507 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:46000] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moie.php"] [unique_id "aR8W46xXNVCMW_ksxPvcgAAAAo4"]
[Thu Nov 20 21:25:57.111674 2025] [:error] [pid 40415:tid 40434] [client 20.27.30.201:45573] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moie.php"] [unique_id "aR8W5ahjIyLSv09svwPNhAAAAdA"]
[Thu Nov 20 21:25:58.516634 2025] [:error] [pid 40445:tid 40485] [client 20.27.30.201:45603] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moie.php"] [unique_id "aR8W5lH-MuFcoWRjXpaS8QAAAko"]
[Thu Nov 20 21:26:00.012658 2025] [:error] [pid 40445:tid 40491] [client 20.27.30.201:56093] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moie.php"] [unique_id "aR8W6FH-MuFcoWRjXpaS8wAAAlA"]
[Thu Nov 20 21:26:03.621930 2025] [:error] [pid 40445:tid 40478] [client 20.27.30.201:45584] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shelp.php"] [unique_id "aR8W61H-MuFcoWRjXpaS9wAAAkM"]
[Thu Nov 20 21:26:05.814045 2025] [:error] [pid 40508:tid 40523] [client 20.27.30.201:45327] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shelp.php"] [unique_id "aR8W7axXNVCMW_ksxPvcigAAAo0"]
[Thu Nov 20 21:26:09.596647 2025] [:error] [pid 40445:tid 40489] [client 20.27.30.201:56073] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shelp.php"] [unique_id "aR8W8VH-MuFcoWRjXpaS-wAAAk4"]
[Thu Nov 20 21:26:11.475478 2025] [:error] [pid 40508:tid 40527] [client 20.27.30.201:56121] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shelp.php"] [unique_id "aR8W86xXNVCMW_ksxPvckgAAApE"]
[Thu Nov 20 21:26:15.571399 2025] [:error] [pid 55340:tid 55352] [client 20.27.30.201:52572] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/siln.php"] [unique_id "aR8W9_OxD-NeMydTybC83AAAAAc"]
[Thu Nov 20 21:26:16.567706 2025] [:error] [pid 40415:tid 40425] [client 20.27.30.201:52593] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/siln.php"] [unique_id "aR8W-KhjIyLSv09svwPNkQAAAcc"]
[Thu Nov 20 21:26:18.815545 2025] [:error] [pid 40508:tid 40525] [client 20.27.30.201:52563] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/siln.php"] [unique_id "aR8W-qxXNVCMW_ksxPvcmQAAAo8"]
[Thu Nov 20 21:26:20.040667 2025] [proxy_fcgi:error] [pid 55342:tid 55385] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.158520 2025] [proxy_fcgi:error] [pid 55342:tid 55386] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.277728 2025] [proxy_fcgi:error] [pid 55342:tid 55384] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.395941 2025] [proxy_fcgi:error] [pid 55342:tid 55393] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.525120 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.642682 2025] [proxy_fcgi:error] [pid 55342:tid 55374] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.760412 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:20.950436 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:21.089228 2025] [proxy_fcgi:error] [pid 55342:tid 55396] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:21.228062 2025] [proxy_fcgi:error] [pid 55342:tid 55395] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:21.377055 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 20.27.30.201:52584] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:26:21.491286 2025] [:error] [pid 55342:tid 55375] [client 20.27.30.201:52584] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jmfi2.php"] [unique_id "aR8W_bg6x32Tvk7fIG8AkgAAAEM"]
[Thu Nov 20 21:26:23.273736 2025] [:error] [pid 55342:tid 55380] [client 20.27.30.201:52569] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jmfi2.php"] [unique_id "aR8W_7g6x32Tvk7fIG8AkwAAAEg"]
[Thu Nov 20 21:26:26.279433 2025] [:error] [pid 40537:tid 40564] [client 20.27.30.201:45347] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jmfi2.php"] [unique_id "aR8XAqKlsL5kxTa3c1z-9QAAAtc"]
[Thu Nov 20 21:26:28.028926 2025] [:error] [pid 55340:tid 55360] [client 20.27.30.201:45338] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jmfi2.php"] [unique_id "aR8XBPOxD-NeMydTybC84wAAAA8"]
[Thu Nov 20 21:26:33.192470 2025] [:error] [pid 55342:tid 55377] [client 20.27.30.201:52565] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/scx.php7"] [unique_id "aR8XCbg6x32Tvk7fIG8AlQAAAEU"]
[Thu Nov 20 21:26:35.312782 2025] [:error] [pid 34405:tid 34431] [client 20.27.30.201:52591] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/scx.php7"] [unique_id "aR8XCzFpvu8oRK7ATfs9TAAAARg"]
[Thu Nov 20 21:26:37.241409 2025] [:error] [pid 40415:tid 40423] [client 20.27.30.201:52594] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/scx.php7"] [unique_id "aR8XDahjIyLSv09svwPNqAAAAcU"]
[Thu Nov 20 21:26:37.706155 2025] [:error] [pid 40445:tid 40484] [client 20.27.30.201:52568] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/scx.php7"] [unique_id "aR8XDVH-MuFcoWRjXpaTCQAAAkk"]
[Thu Nov 20 21:26:39.291733 2025] [:error] [pid 40636:tid 40640] [client 20.27.30.201:45355] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/777.php"] [unique_id "aR8XDwK8BWUoW3xq0HArCwAAA4A"]
[Thu Nov 20 21:26:40.195450 2025] [:error] [pid 40636:tid 40650] [client 20.27.30.201:45336] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/777.php"] [unique_id "aR8XEAK8BWUoW3xq0HArDQAAA4o"]
[Thu Nov 20 21:26:41.347884 2025] [:error] [pid 55340:tid 55352] [client 20.27.30.201:52580] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/777.php"] [unique_id "aR8XEfOxD-NeMydTybC86AAAAAc"]
[Thu Nov 20 21:26:42.312969 2025] [:error] [pid 55340:tid 55362] [client 20.27.30.201:52578] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/777.php"] [unique_id "aR8XEvOxD-NeMydTybC86QAAABE"]
[Thu Nov 20 21:26:43.920509 2025] [:error] [pid 34405:tid 34420] [client 20.27.30.201:45313] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aR8XEzFpvu8oRK7ATfs9UwAAAQ0"]
[Thu Nov 20 21:26:45.046194 2025] [:error] [pid 40508:tid 40521] [client 20.27.30.201:52590] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aR8XFaxXNVCMW_ksxPvcpQAAAos"]
[Thu Nov 20 21:26:46.984886 2025] [:error] [pid 34405:tid 34417] [client 20.27.30.201:45335] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aR8XFjFpvu8oRK7ATfs9VQAAAQo"]
[Thu Nov 20 21:26:47.794864 2025] [:error] [pid 55430:tid 55439] [client 20.27.30.201:52585] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aR8XF_PZXaIMEU4pE7setgAAAMY"]
[Thu Nov 20 21:26:49.407786 2025] [:error] [pid 55342:tid 55384] [client 20.27.30.201:45711] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8XGbg6x32Tvk7fIG8AmQAAAEw"]
[Thu Nov 20 21:26:50.335283 2025] [:error] [pid 34405:tid 34430] [client 20.27.30.201:52571] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8XGjFpvu8oRK7ATfs9WAAAARc"]
[Thu Nov 20 21:26:50.803766 2025] [:error] [pid 40636:tid 40645] [client 20.27.30.201:52595] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8XGgK8BWUoW3xq0HArEgAAA4U"]
[Thu Nov 20 21:26:52.011712 2025] [:error] [pid 34405:tid 34414] [client 20.27.30.201:45331] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8XHDFpvu8oRK7ATfs9WQAAAQc"]
[Thu Nov 20 21:26:53.703069 2025] [:error] [pid 40537:tid 40562] [client 20.27.30.201:45342] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/csv.php"] [unique_id "aR8XHaKlsL5kxTa3c1z-_wAAAtU"]
[Thu Nov 20 21:26:56.196887 2025] [:error] [pid 40537:tid 40556] [client 20.27.30.201:45346] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/csv.php"] [unique_id "aR8XIKKlsL5kxTa3c1z_AQAAAs8"]
[Thu Nov 20 21:26:57.384971 2025] [:error] [pid 34405:tid 34431] [client 20.27.30.201:45996] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/csv.php"] [unique_id "aR8XITFpvu8oRK7ATfs9WwAAARg"]
[Thu Nov 20 21:26:58.312147 2025] [:error] [pid 40415:tid 40419] [client 20.27.30.201:52561] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/csv.php"] [unique_id "aR8XIqhjIyLSv09svwPNvAAAAcE"]
[Thu Nov 20 21:27:01.356319 2025] [:error] [pid 55340:tid 55354] [client 20.27.30.201:52575] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aR8XJfOxD-NeMydTybC87gAAAAk"]
[Thu Nov 20 21:27:01.801956 2025] [:error] [pid 55340:tid 55364] [client 20.27.30.201:52582] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aR8XJfOxD-NeMydTybC88QAAABM"]
[Thu Nov 20 21:27:02.256505 2025] [:error] [pid 40415:tid 40430] [client 20.27.30.201:45372] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aR8XJqhjIyLSv09svwPNwQAAAcw"]
[Thu Nov 20 21:27:02.560358 2025] [:error] [pid 55342:tid 55386] [client 20.27.30.201:56077] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aR8XJrg6x32Tvk7fIG8AqwAAAE4"]
[Thu Nov 20 21:27:04.557519 2025] [:error] [pid 55342:tid 55377] [client 20.27.30.201:56095] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aR8XKLg6x32Tvk7fIG8AwgAAAEU"]
[Thu Nov 20 21:27:05.600422 2025] [:error] [pid 55430:tid 55444] [client 20.27.30.201:45364] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aR8XKfPZXaIMEU4pE7sezAAAAMs"]
[Thu Nov 20 21:27:07.073907 2025] [:error] [pid 40445:tid 40499] [client 20.27.30.201:56121] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aR8XK1H-MuFcoWRjXpaTGwAAAlg"]
[Thu Nov 20 21:27:08.429389 2025] [:error] [pid 55340:tid 55347] [client 20.27.30.201:56104] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aR8XLPOxD-NeMydTybC9BwAAAAI"]
[Thu Nov 20 21:27:09.793009 2025] [:error] [pid 55343:tid 55420] [client 20.27.30.201:52545] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc1.php"] [unique_id "aR8XLVWlO3EnyVMV7w7O8gAAAJU"]
[Thu Nov 20 21:27:13.093509 2025] [:error] [pid 55342:tid 55380] [client 20.27.30.201:45314] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc1.php"] [unique_id "aR8XMbg6x32Tvk7fIG8AywAAAEg"]
[Thu Nov 20 21:27:15.050203 2025] [:error] [pid 40415:tid 40434] [client 20.27.30.201:52605] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc1.php"] [unique_id "aR8XM6hjIyLSv09svwPN0wAAAdA"]
[Thu Nov 20 21:27:16.301753 2025] [:error] [pid 40445:tid 40480] [client 20.27.30.201:45371] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc1.php"] [unique_id "aR8XNFH-MuFcoWRjXpaTRwAAAkU"]
[Thu Nov 20 21:27:17.027519 2025] [:error] [pid 40508:tid 40512] [client 20.27.30.201:52557] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aR8XNaxXNVCMW_ksxPvcsgAAAoI"]
[Thu Nov 20 21:27:18.587715 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:52553] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aR8XNlH-MuFcoWRjXpaTTgAAAkc"]
[Thu Nov 20 21:27:20.503429 2025] [:error] [pid 40636:tid 40654] [client 20.27.30.201:45360] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aR8XOAK8BWUoW3xq0HArHAAAA44"]
[Thu Nov 20 21:27:21.948605 2025] [proxy_fcgi:error] [pid 40508:tid 40524] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.233832 2025] [proxy_fcgi:error] [pid 40508:tid 40516] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.383889 2025] [proxy_fcgi:error] [pid 40508:tid 40529] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.502457 2025] [proxy_fcgi:error] [pid 40508:tid 40533] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.624033 2025] [proxy_fcgi:error] [pid 40508:tid 40528] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.742880 2025] [proxy_fcgi:error] [pid 40508:tid 40525] [client 20.27.30.201:56067] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:22.862729 2025] [:error] [pid 40508:tid 40519] [client 20.27.30.201:56067] [client 20.27.30.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "aR8XOqxXNVCMW_ksxPvcvgAAAok"]
[Thu Nov 20 21:27:24.137958 2025] [proxy_fcgi:error] [pid 40415:tid 40438] [client 20.27.30.201:45324] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:24.259593 2025] [proxy_fcgi:error] [pid 40415:tid 40422] [client 20.27.30.201:45324] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:24.383790 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 20.27.30.201:45324] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:24.689876 2025] [proxy_fcgi:error] [pid 40415:tid 40436] [client 20.27.30.201:45324] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:24.829275 2025] [proxy_fcgi:error] [pid 40415:tid 40439] [client 20.27.30.201:45324] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:27:24.945098 2025] [:error] [pid 40415:tid 40440] [client 20.27.30.201:45324] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ae.php"] [unique_id "aR8XPKhjIyLSv09svwPN3AAAAdY"]
[Thu Nov 20 21:27:26.234929 2025] [:error] [pid 40508:tid 40526] [client 20.27.30.201:56079] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ae.php"] [unique_id "aR8XPqxXNVCMW_ksxPvcwAAAApA"]
[Thu Nov 20 21:27:27.252398 2025] [:error] [pid 55340:tid 55359] [client 20.27.30.201:56071] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ae.php"] [unique_id "aR8XP_OxD-NeMydTybC9EAAAAA4"]
[Thu Nov 20 21:27:28.585245 2025] [:error] [pid 40445:tid 40496] [client 20.27.30.201:45956] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ae.php"] [unique_id "aR8XQFH-MuFcoWRjXpaTXgAAAlU"]
[Thu Nov 20 21:27:29.399208 2025] [:error] [pid 40636:tid 40649] [client 20.27.30.201:45328] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smpx.php"] [unique_id "aR8XQQK8BWUoW3xq0HArHgAAA4k"]
[Thu Nov 20 21:27:30.124394 2025] [:error] [pid 40445:tid 40498] [client 20.27.30.201:52602] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smpx.php"] [unique_id "aR8XQlH-MuFcoWRjXpaTYgAAAlc"]
[Thu Nov 20 21:27:31.025238 2025] [:error] [pid 40636:tid 40645] [client 20.27.30.201:52589] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smpx.php"] [unique_id "aR8XQwK8BWUoW3xq0HArHwAAA4U"]
[Thu Nov 20 21:27:31.945869 2025] [:error] [pid 40445:tid 40493] [client 20.27.30.201:52567] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smpx.php"] [unique_id "aR8XQ1H-MuFcoWRjXpaTYwAAAlI"]
[Thu Nov 20 21:27:33.020924 2025] [:error] [pid 40445:tid 40484] [client 20.27.30.201:45317] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asd.php"] [unique_id "aR8XRVH-MuFcoWRjXpaTZwAAAkk"]
[Thu Nov 20 21:27:34.104167 2025] [:error] [pid 40445:tid 40499] [client 20.27.30.201:45958] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asd.php"] [unique_id "aR8XRlH-MuFcoWRjXpaTawAAAlg"]
[Thu Nov 20 21:27:35.661123 2025] [:error] [pid 55343:tid 55416] [client 20.27.30.201:45349] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asd.php"] [unique_id "aR8XR1WlO3EnyVMV7w7PGgAAAJE"]
[Thu Nov 20 21:27:37.037468 2025] [:error] [pid 55340:tid 55346] [client 20.27.30.201:45615] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asd.php"] [unique_id "aR8XSfOxD-NeMydTybC9HAAAAAE"]
[Thu Nov 20 21:27:37.737487 2025] [:error] [pid 55340:tid 55345] [client 20.27.30.201:56096] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class5.php"] [unique_id "aR8XSfOxD-NeMydTybC9HwAAAAA"]
[Thu Nov 20 21:27:40.483688 2025] [:error] [pid 40537:tid 40555] [client 20.27.30.201:52596] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class5.php"] [unique_id "aR8XTKKlsL5kxTa3c1z_CgAAAs4"]
[Thu Nov 20 21:27:42.519500 2025] [:error] [pid 40508:tid 40533] [client 20.27.30.201:56086] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class5.php"] [unique_id "aR8XTqxXNVCMW_ksxPvcyQAAApc"]
[Thu Nov 20 21:27:44.454109 2025] [:error] [pid 40445:tid 40476] [client 20.27.30.201:52544] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class5.php"] [unique_id "aR8XUFH-MuFcoWRjXpaTcgAAAkE"]
[Thu Nov 20 21:27:47.712159 2025] [:error] [pid 40508:tid 40511] [client 20.27.30.201:45362] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "aR8XU6xXNVCMW_ksxPvczAAAAoE"]
[Thu Nov 20 21:27:49.187901 2025] [:error] [pid 40537:tid 40558] [client 20.27.30.201:56076] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "aR8XVaKlsL5kxTa3c1z_DAAAAtE"]
[Thu Nov 20 21:27:51.167073 2025] [:error] [pid 40537:tid 40554] [client 20.27.30.201:45983] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "aR8XV6KlsL5kxTa3c1z_DgAAAs0"]
[Thu Nov 20 21:27:53.030713 2025] [:error] [pid 34405:tid 34407] [client 20.27.30.201:45375] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "aR8XWTFpvu8oRK7ATfs9aQAAAQA"]
[Thu Nov 20 21:27:55.182579 2025] [:error] [pid 40445:tid 40499] [client 20.27.30.201:56099] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aR8XW1H-MuFcoWRjXpaTlQAAAlg"]
[Thu Nov 20 21:27:56.784395 2025] [:error] [pid 40508:tid 40524] [client 20.27.30.201:56111] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aR8XXKxXNVCMW_ksxPvc0gAAAo4"]
[Thu Nov 20 21:27:59.031359 2025] [:error] [pid 55342:tid 55378] [client 20.27.30.201:45333] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aR8XX7g6x32Tvk7fIG8A4gAAAEY"]
[Thu Nov 20 21:28:01.207702 2025] [:error] [pid 40445:tid 40482] [client 20.27.30.201:56092] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aR8XYVH-MuFcoWRjXpaTmgAAAkc"]
[Thu Nov 20 21:28:02.713444 2025] [:error] [pid 40445:tid 40480] [client 20.27.30.201:52547] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g7y.php"] [unique_id "aR8XYlH-MuFcoWRjXpaTngAAAkU"]
[Thu Nov 20 21:28:04.217245 2025] [:error] [pid 40636:tid 40664] [client 20.27.30.201:52574] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g7y.php"] [unique_id "aR8XZAK8BWUoW3xq0HArVQAAA5g"]
[Thu Nov 20 21:28:05.469750 2025] [:error] [pid 40415:tid 40433] [client 20.27.30.201:45971] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g7y.php"] [unique_id "aR8XZahjIyLSv09svwPN8gAAAc8"]
[Thu Nov 20 21:28:06.232158 2025] [:error] [pid 55342:tid 55388] [client 20.27.30.201:56100] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g7y.php"] [unique_id "aR8XZrg6x32Tvk7fIG8A4wAAAFA"]
[Thu Nov 20 21:28:07.031630 2025] [:error] [pid 34405:tid 34415] [client 20.27.30.201:45332] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "aR8XZzFpvu8oRK7ATfs9cgAAAQg"]
[Thu Nov 20 21:28:08.376346 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:45315] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "aR8XaFH-MuFcoWRjXpaTpgAAAlE"]
[Thu Nov 20 21:28:09.700459 2025] [:error] [pid 40636:tid 40654] [client 20.27.30.201:45592] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "aR8XaQK8BWUoW3xq0HArVwAAA44"]
[Thu Nov 20 21:28:11.139816 2025] [:error] [pid 40415:tid 40437] [client 20.27.30.201:45344] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "aR8Xa6hjIyLSv09svwPN-QAAAdM"]
[Thu Nov 20 21:28:12.058183 2025] [:error] [pid 40415:tid 40426] [client 20.27.30.201:45341] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "aR8XbKhjIyLSv09svwPN-gAAAcg"]
[Thu Nov 20 21:28:13.136901 2025] [:error] [pid 40415:tid 40420] [client 20.27.30.201:45354] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "aR8XbahjIyLSv09svwPN_AAAAcI"]
[Thu Nov 20 21:28:14.274366 2025] [:error] [pid 55342:tid 55391] [client 20.27.30.201:45986] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "aR8Xbrg6x32Tvk7fIG8A6AAAAFM"]
[Thu Nov 20 21:28:15.609863 2025] [:error] [pid 34405:tid 34410] [client 20.27.30.201:56074] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "aR8XbzFpvu8oRK7ATfs9dAAAAQM"]
[Thu Nov 20 21:28:17.228928 2025] [:error] [pid 40415:tid 40433] [client 20.27.30.201:45359] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon.php"] [unique_id "aR8XcahjIyLSv09svwPOAAAAAc8"]
[Thu Nov 20 21:28:18.844108 2025] [:error] [pid 55343:tid 55421] [client 20.27.30.201:45599] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon.php"] [unique_id "aR8XclWlO3EnyVMV7w7PogAAAJY"]
[Thu Nov 20 21:28:19.862241 2025] [:error] [pid 55430:tid 55439] [client 20.27.30.201:45351] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon.php"] [unique_id "aR8Xc_PZXaIMEU4pE7se-AAAAMY"]
[Thu Nov 20 21:28:20.766074 2025] [:error] [pid 55430:tid 55454] [client 20.27.30.201:56094] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon.php"] [unique_id "aR8XdPPZXaIMEU4pE7se-QAAANU"]
[Thu Nov 20 21:28:22.533963 2025] [:error] [pid 55343:tid 55420] [client 20.27.30.201:45332] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wio.php"] [unique_id "aR8XdlWlO3EnyVMV7w7PowAAAJU"]
[Thu Nov 20 21:28:24.714440 2025] [proxy_fcgi:error] [pid 40415:tid 40438] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:24.833876 2025] [proxy_fcgi:error] [pid 40415:tid 40429] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.349363 2025] [proxy_fcgi:error] [pid 40415:tid 40418] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.467332 2025] [proxy_fcgi:error] [pid 40415:tid 40436] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.586135 2025] [proxy_fcgi:error] [pid 40415:tid 40439] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.704197 2025] [proxy_fcgi:error] [pid 40415:tid 40440] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.829291 2025] [proxy_fcgi:error] [pid 40415:tid 40425] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:25.950260 2025] [proxy_fcgi:error] [pid 40415:tid 40419] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:26.078652 2025] [proxy_fcgi:error] [pid 40415:tid 40423] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:26.345493 2025] [proxy_fcgi:error] [pid 40415:tid 40437] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:26.816674 2025] [proxy_fcgi:error] [pid 40415:tid 40426] [client 20.27.30.201:45322] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:28:26.931210 2025] [:error] [pid 40415:tid 40428] [client 20.27.30.201:45322] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp670.php"] [unique_id "aR8XeqhjIyLSv09svwPODQAAAco"]
[Thu Nov 20 21:28:27.911116 2025] [:error] [pid 40508:tid 40515] [client 20.27.30.201:56158] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp670.php"] [unique_id "aR8Xe6xXNVCMW_ksxPvc3QAAAoU"]
[Thu Nov 20 21:28:29.916903 2025] [:error] [pid 55340:tid 55350] [client 20.27.30.201:56152] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp670.php"] [unique_id "aR8XffOxD-NeMydTybC9NwAAAAU"]
[Thu Nov 20 21:28:31.029339 2025] [:error] [pid 40445:tid 40483] [client 20.27.30.201:52601] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp670.php"] [unique_id "aR8Xf1H-MuFcoWRjXpaTtQAAAkg"]
[Thu Nov 20 21:28:32.235577 2025] [:error] [pid 55340:tid 55361] [client 20.27.30.201:45348] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "aR8XgPOxD-NeMydTybC9PAAAABA"]
[Thu Nov 20 21:28:34.609595 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:56183] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "aR8XgjFpvu8oRK7ATfs9hAAAAQ8"]
[Thu Nov 20 21:28:35.907514 2025] [:error] [pid 40508:tid 40534] [client 20.27.30.201:46054] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "aR8Xg6xXNVCMW_ksxPvc3gAAApg"]
[Thu Nov 20 21:28:37.084624 2025] [:error] [pid 55430:tid 55434] [client 20.27.30.201:46073] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "aR8XhfPZXaIMEU4pE7se_AAAAME"]
[Thu Nov 20 21:28:38.711067 2025] [:error] [pid 34405:tid 34412] [client 20.27.30.201:46045] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aR8XhjFpvu8oRK7ATfs9hQAAAQU"]
[Thu Nov 20 21:28:40.560454 2025] [:error] [pid 40445:tid 40497] [client 20.27.30.201:46070] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aR8XiFH-MuFcoWRjXpaTtgAAAlY"]
[Thu Nov 20 21:28:42.098705 2025] [:error] [pid 55342:tid 55381] [client 20.27.30.201:56138] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aR8Xirg6x32Tvk7fIG8A-QAAAEk"]
[Thu Nov 20 21:28:42.846767 2025] [:error] [pid 55343:tid 55400] [client 20.27.30.201:54185] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aR8XilWlO3EnyVMV7w7PpwAAAIE"]
[Thu Nov 20 21:28:43.689202 2025] [:error] [pid 55340:tid 55360] [client 20.27.30.201:46038] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aR8Xi_OxD-NeMydTybC9RAAAAA8"]
[Thu Nov 20 21:28:45.148525 2025] [:error] [pid 55430:tid 55456] [client 20.27.30.201:54192] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aR8XjfPZXaIMEU4pE7se_wAAANc"]
[Thu Nov 20 21:28:46.226833 2025] [:error] [pid 40415:tid 40429] [client 20.27.30.201:56159] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aR8XjqhjIyLSv09svwPOEwAAAcs"]
[Thu Nov 20 21:28:47.174207 2025] [:error] [pid 40415:tid 40427] [client 20.27.30.201:56143] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aR8Xj6hjIyLSv09svwPOFAAAAck"]
[Thu Nov 20 21:28:48.375612 2025] [:error] [pid 40508:tid 40518] [client 20.27.30.201:54197] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7.php"] [unique_id "aR8XkKxXNVCMW_ksxPvc6AAAAog"]
[Thu Nov 20 21:28:49.189129 2025] [:error] [pid 55342:tid 55377] [client 20.27.30.201:54194] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7.php"] [unique_id "aR8Xkbg6x32Tvk7fIG8A_AAAAEU"]
[Thu Nov 20 21:28:50.016150 2025] [:error] [pid 40508:tid 40528] [client 20.27.30.201:54164] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7.php"] [unique_id "aR8XkqxXNVCMW_ksxPvc7AAAApI"]
[Thu Nov 20 21:28:53.553763 2025] [:error] [pid 34405:tid 34427] [client 20.27.30.201:46047] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7.php"] [unique_id "aR8XlTFpvu8oRK7ATfs9lwAAARQ"]
[Thu Nov 20 21:28:55.005166 2025] [:error] [pid 40445:tid 40485] [client 20.27.30.201:54180] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zex.php"] [unique_id "aR8Xl1H-MuFcoWRjXpaTxQAAAko"]
[Thu Nov 20 21:28:56.860411 2025] [:error] [pid 34405:tid 34430] [client 20.27.30.201:54186] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zex.php"] [unique_id "aR8XmDFpvu8oRK7ATfs9mgAAARc"]
[Thu Nov 20 21:28:59.102359 2025] [:error] [pid 34405:tid 34419] [client 20.27.30.201:54161] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zex.php"] [unique_id "aR8XmzFpvu8oRK7ATfs9ngAAAQw"]
[Thu Nov 20 21:29:00.549804 2025] [:error] [pid 55340:tid 55363] [client 20.27.30.201:46026] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zex.php"] [unique_id "aR8XnPOxD-NeMydTybC9TgAAABI"]
[Thu Nov 20 21:29:02.182223 2025] [:error] [pid 40537:tid 40553] [client 20.27.30.201:45542] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxin.php"] [unique_id "aR8XnqKlsL5kxTa3c1z_HQAAAsw"]
[Thu Nov 20 21:29:04.350075 2025] [:error] [pid 40537:tid 40543] [client 20.27.30.201:45506] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxin.php"] [unique_id "aR8XoKKlsL5kxTa3c1z_IgAAAsI"]
[Thu Nov 20 21:29:04.655113 2025] [:error] [pid 34405:tid 34412] [client 20.27.30.201:54147] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxin.php"] [unique_id "aR8XoDFpvu8oRK7ATfs9ogAAAQU"]
[Thu Nov 20 21:29:06.002750 2025] [:error] [pid 55430:tid 55435] [client 20.27.30.201:54176] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxin.php"] [unique_id "aR8XovPZXaIMEU4pE7sfCgAAAMI"]
[Thu Nov 20 21:29:06.755485 2025] [:error] [pid 40636:tid 40656] [client 20.27.30.201:54168] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aR8XogK8BWUoW3xq0HArZAAAA5A"]
[Thu Nov 20 21:29:07.280067 2025] [:error] [pid 55340:tid 55353] [client 20.27.30.201:45521] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aR8Xo_OxD-NeMydTybC9UgAAAAg"]
[Thu Nov 20 21:29:08.296715 2025] [:error] [pid 40636:tid 40642] [client 20.27.30.201:45889] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aR8XpAK8BWUoW3xq0HArZQAAA4I"]
[Thu Nov 20 21:29:09.810050 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:54172] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aR8XpVWlO3EnyVMV7w7PrwAAAIU"]
[Thu Nov 20 21:29:12.272089 2025] [:error] [pid 40636:tid 40653] [client 20.27.30.201:45556] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/st.php"] [unique_id "aR8XqAK8BWUoW3xq0HArawAAA40"]
[Thu Nov 20 21:29:13.459545 2025] [:error] [pid 40445:tid 40488] [client 20.27.30.201:45897] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/st.php"] [unique_id "aR8XqVH-MuFcoWRjXpaTyQAAAk0"]
[Thu Nov 20 21:29:14.146029 2025] [:error] [pid 55430:tid 55449] [client 20.27.30.201:45512] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/st.php"] [unique_id "aR8XqvPZXaIMEU4pE7sfDwAAANA"]
[Thu Nov 20 21:29:15.147905 2025] [:error] [pid 34405:tid 34428] [client 20.27.30.201:45938] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/st.php"] [unique_id "aR8XqzFpvu8oRK7ATfs9rQAAARU"]
[Thu Nov 20 21:29:15.924938 2025] [:error] [pid 40537:tid 40544] [client 20.27.30.201:52490] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aR8Xq6KlsL5kxTa3c1z_KQAAAsM"]
[Thu Nov 20 21:29:17.224044 2025] [:error] [pid 40636:tid 40641] [client 20.27.30.201:52482] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aR8XrQK8BWUoW3xq0HArbgAAA4E"]
[Thu Nov 20 21:29:19.897718 2025] [:error] [pid 40445:tid 40479] [client 20.27.30.201:52521] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aR8Xr1H-MuFcoWRjXpaT2gAAAkQ"]
[Thu Nov 20 21:29:22.911113 2025] [:error] [pid 55430:tid 55457] [client 20.27.30.201:46074] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aR8XsvPZXaIMEU4pE7sfGAAAANg"]
[Thu Nov 20 21:29:23.651531 2025] [:error] [pid 40415:tid 40432] [client 20.27.30.201:45905] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/enkkk.php"] [unique_id "aR8Xs6hjIyLSv09svwPOMgAAAc4"]
[Thu Nov 20 21:29:25.250401 2025] [:error] [pid 55430:tid 55445] [client 20.27.30.201:52519] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/enkkk.php"] [unique_id "aR8XtfPZXaIMEU4pE7sfGQAAAMw"]
[Thu Nov 20 21:29:27.991150 2025] [proxy_fcgi:error] [pid 55430:tid 55451] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:28.452360 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:28.581602 2025] [proxy_fcgi:error] [pid 55430:tid 55443] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:28.701223 2025] [proxy_fcgi:error] [pid 55430:tid 55453] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:28.831657 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:29.127567 2025] [proxy_fcgi:error] [pid 55430:tid 55454] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:29.246243 2025] [proxy_fcgi:error] [pid 55430:tid 55444] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:29.838588 2025] [proxy_fcgi:error] [pid 55430:tid 55437] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:29.958564 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:30.076433 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:30.194460 2025] [proxy_fcgi:error] [pid 55430:tid 55446] [client 20.27.30.201:52510] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:29:30.338322 2025] [:error] [pid 55430:tid 55436] [client 20.27.30.201:52510] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bes.php"] [unique_id "aR8XuvPZXaIMEU4pE7sfKAAAAMM"]
[Thu Nov 20 21:29:32.596056 2025] [:error] [pid 55340:tid 55351] [client 20.27.30.201:45934] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bes.php"] [unique_id "aR8XvPOxD-NeMydTybC9agAAAAY"]
[Thu Nov 20 21:29:33.533806 2025] [:error] [pid 34405:tid 34408] [client 20.27.30.201:52532] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bes.php"] [unique_id "aR8XvTFpvu8oRK7ATfs9vQAAAQE"]
[Thu Nov 20 21:29:36.326527 2025] [:error] [pid 40508:tid 40531] [client 20.27.30.201:45951] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bes.php"] [unique_id "aR8XwKxXNVCMW_ksxPvdAQAAApU"]
[Thu Nov 20 21:29:37.802011 2025] [:error] [pid 40508:tid 40521] [client 20.27.30.201:45933] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-swa.php"] [unique_id "aR8XwaxXNVCMW_ksxPvdAgAAAos"]
[Thu Nov 20 21:29:39.233051 2025] [:error] [pid 40508:tid 40534] [client 20.27.30.201:52501] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-swa.php"] [unique_id "aR8Xw6xXNVCMW_ksxPvdBQAAApg"]
[Thu Nov 20 21:29:40.342474 2025] [:error] [pid 55430:tid 55453] [client 20.27.30.201:52541] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-swa.php"] [unique_id "aR8XxPPZXaIMEU4pE7sfLAAAANQ"]
[Thu Nov 20 21:29:42.557514 2025] [:error] [pid 40445:tid 40495] [client 20.27.30.201:45947] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-swa.php"] [unique_id "aR8XxlH-MuFcoWRjXpaT_QAAAlQ"]
[Thu Nov 20 21:29:43.430433 2025] [:error] [pid 40537:tid 40548] [client 20.27.30.201:45941] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/42u.php"] [unique_id "aR8Xx6KlsL5kxTa3c1z_PwAAAsc"]
[Thu Nov 20 21:29:44.716820 2025] [:error] [pid 55342:tid 55372] [client 20.27.30.201:52542] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/42u.php"] [unique_id "aR8XyLg6x32Tvk7fIG8BGAAAAEA"]
[Thu Nov 20 21:29:45.576404 2025] [:error] [pid 55343:tid 55411] [client 20.27.30.201:45930] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/42u.php"] [unique_id "aR8XyVWlO3EnyVMV7w7PvgAAAIw"]
[Thu Nov 20 21:29:46.273245 2025] [:error] [pid 55340:tid 55361] [client 20.27.30.201:45916] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/42u.php"] [unique_id "aR8XyvOxD-NeMydTybC9bwAAABA"]
[Thu Nov 20 21:29:47.740912 2025] [:error] [pid 40415:tid 40426] [client 20.27.30.201:52506] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lc.php"] [unique_id "aR8Xy6hjIyLSv09svwPOPAAAAcg"]
[Thu Nov 20 21:29:48.950895 2025] [:error] [pid 34405:tid 34420] [client 20.27.30.201:45537] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lc.php"] [unique_id "aR8XzDFpvu8oRK7ATfs9wwAAAQ0"]
[Thu Nov 20 21:29:50.446635 2025] [:error] [pid 40537:tid 40564] [client 20.27.30.201:52543] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lc.php"] [unique_id "aR8XzqKlsL5kxTa3c1z_QQAAAtc"]
[Thu Nov 20 21:29:51.725025 2025] [:error] [pid 55343:tid 55415] [client 20.27.30.201:45932] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lc.php"] [unique_id "aR8Xz1WlO3EnyVMV7w7PxAAAAJA"]
[Thu Nov 20 21:29:53.953042 2025] [:error] [pid 40508:tid 40520] [client 20.27.30.201:52498] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "aR8X0axXNVCMW_ksxPvdEQAAAoo"]
[Thu Nov 20 21:29:54.960881 2025] [:error] [pid 55343:tid 55403] [client 20.27.30.201:52512] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "aR8X0lWlO3EnyVMV7w7PyQAAAIQ"]
[Thu Nov 20 21:29:55.928041 2025] [:error] [pid 40445:tid 40496] [client 20.27.30.201:52486] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "aR8X01H-MuFcoWRjXpaT_wAAAlU"]
[Thu Nov 20 21:29:56.530333 2025] [:error] [pid 55340:tid 55358] [client 20.27.30.201:45891] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "aR8X1POxD-NeMydTybC9cQAAAA0"]
[Thu Nov 20 21:29:57.888476 2025] [:error] [pid 40445:tid 40481] [client 20.27.30.201:45943] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CLA.php"] [unique_id "aR8X1VH-MuFcoWRjXpaUBAAAAkY"]
[Thu Nov 20 21:29:59.081411 2025] [:error] [pid 40636:tid 40643] [client 20.27.30.201:45530] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CLA.php"] [unique_id "aR8X1wK8BWUoW3xq0HAregAAA4M"]
[Thu Nov 20 21:30:00.086215 2025] [:error] [pid 55430:tid 55449] [client 20.27.30.201:52531] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CLA.php"] [unique_id "aR8X2PPZXaIMEU4pE7sfNwAAANA"]
[Thu Nov 20 21:30:00.634480 2025] [:error] [pid 55343:tid 55423] [client 20.27.30.201:52515] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CLA.php"] [unique_id "aR8X2FWlO3EnyVMV7w7P1QAAAJg"]
[Thu Nov 20 21:30:02.153942 2025] [:error] [pid 55430:tid 55453] [client 20.27.30.201:45948] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aR8X2vPZXaIMEU4pE7sfOQAAANQ"]
[Thu Nov 20 21:30:02.896887 2025] [:error] [pid 34405:tid 34428] [client 20.27.30.201:52507] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aR8X2jFpvu8oRK7ATfs9ywAAARU"]
[Thu Nov 20 21:30:03.943561 2025] [:error] [pid 34405:tid 34423] [client 20.27.30.201:45935] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aR8X2zFpvu8oRK7ATfs9zAAAARA"]
[Thu Nov 20 21:30:04.988296 2025] [:error] [pid 40415:tid 40427] [client 20.27.30.201:52523] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aR8X3KhjIyLSv09svwPOSAAAAck"]
[Thu Nov 20 21:30:06.415003 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:45919] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aR8X3jFpvu8oRK7ATfs90AAAAQ8"]
[Thu Nov 20 21:30:07.854806 2025] [:error] [pid 40537:tid 40557] [client 20.27.30.201:52480] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aR8X36KlsL5kxTa3c1z_RQAAAtA"]
[Thu Nov 20 21:30:08.460337 2025] [:error] [pid 40508:tid 40510] [client 20.27.30.201:45900] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aR8X4KxXNVCMW_ksxPvdOQAAAoA"]
[Thu Nov 20 21:30:12.431318 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:54183] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aR8X5FH-MuFcoWRjXpaUIAAAAlE"]
[Thu Nov 20 21:30:13.412647 2025] [:error] [pid 40445:tid 40480] [client 20.27.30.201:45907] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "aR8X5VH-MuFcoWRjXpaUKgAAAkU"]
[Thu Nov 20 21:30:14.018167 2025] [:error] [pid 40508:tid 40526] [client 20.27.30.201:45906] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "aR8X5qxXNVCMW_ksxPvdRQAAApA"]
[Thu Nov 20 21:30:14.751556 2025] [:error] [pid 34405:tid 34427] [client 20.27.30.201:45504] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "aR8X5jFpvu8oRK7ATfs91AAAARQ"]
[Thu Nov 20 21:30:15.410694 2025] [:error] [pid 40415:tid 40426] [client 20.27.30.201:45894] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "aR8X56hjIyLSv09svwPOSgAAAcg"]
[Thu Nov 20 21:30:15.981987 2025] [:error] [pid 40445:tid 40496] [client 20.27.30.201:45898] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aR8X51H-MuFcoWRjXpaUMgAAAlU"]
[Thu Nov 20 21:30:17.250669 2025] [:error] [pid 40636:tid 40644] [client 20.27.30.201:45909] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aR8X6QK8BWUoW3xq0HArfgAAA4Q"]
[Thu Nov 20 21:30:18.403622 2025] [:error] [pid 40415:tid 40439] [client 20.27.30.201:52516] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aR8X6qhjIyLSv09svwPOTAAAAdU"]
[Thu Nov 20 21:30:19.108565 2025] [:error] [pid 55340:tid 55368] [client 20.27.30.201:45950] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aR8X6_OxD-NeMydTybC9mAAAABc"]
[Thu Nov 20 21:30:21.071670 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:52494] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aR8X7fPZXaIMEU4pE7sfPQAAAMU"]
[Thu Nov 20 21:30:22.179244 2025] [:error] [pid 34405:tid 34415] [client 20.27.30.201:45925] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aR8X7jFpvu8oRK7ATfs92AAAAQg"]
[Thu Nov 20 21:30:23.470366 2025] [:error] [pid 55340:tid 55345] [client 20.27.30.201:45927] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aR8X7_OxD-NeMydTybC9nAAAAAA"]
[Thu Nov 20 21:30:25.629819 2025] [:error] [pid 34405:tid 34419] [client 20.27.30.201:45949] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aR8X8TFpvu8oRK7ATfs92gAAAQw"]
[Thu Nov 20 21:30:27.242532 2025] [:error] [pid 34405:tid 34422] [client 20.27.30.201:45531] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aR8X8zFpvu8oRK7ATfs93gAAAQ8"]
[Thu Nov 20 21:30:27.959514 2025] [:error] [pid 55342:tid 55372] [client 20.27.30.201:45940] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aR8X87g6x32Tvk7fIG8BNQAAAEA"]
[Thu Nov 20 21:30:29.075957 2025] [:error] [pid 40636:tid 40650] [client 20.27.30.201:45525] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aR8X9QK8BWUoW3xq0HArhAAAA4o"]
[Thu Nov 20 21:30:31.970121 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:32.415060 2025] [proxy_fcgi:error] [pid 40445:tid 40490] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:32.946262 2025] [proxy_fcgi:error] [pid 40445:tid 40491] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.068444 2025] [proxy_fcgi:error] [pid 40445:tid 40497] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.189825 2025] [proxy_fcgi:error] [pid 40445:tid 40498] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.313432 2025] [proxy_fcgi:error] [pid 40445:tid 40488] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.444224 2025] [proxy_fcgi:error] [pid 40445:tid 40480] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.562041 2025] [proxy_fcgi:error] [pid 40445:tid 40476] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.710021 2025] [proxy_fcgi:error] [pid 40445:tid 40483] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.835697 2025] [proxy_fcgi:error] [pid 40445:tid 40487] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:33.955747 2025] [proxy_fcgi:error] [pid 40445:tid 40499] [client 20.27.30.201:52526] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:30:34.249280 2025] [:error] [pid 40445:tid 40486] [client 20.27.30.201:52526] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vxonb.php"] [unique_id "aR8X-lH-MuFcoWRjXpaUSAAAAks"]
[Thu Nov 20 21:30:36.424010 2025] [:error] [pid 40445:tid 40492] [client 20.27.30.201:45893] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vxonb.php"] [unique_id "aR8X_FH-MuFcoWRjXpaUSwAAAlE"]
[Thu Nov 20 21:30:38.049750 2025] [:error] [pid 40537:tid 40556] [client 20.27.30.201:45910] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vxonb.php"] [unique_id "aR8X_qKlsL5kxTa3c1z_SwAAAs8"]
[Thu Nov 20 21:30:39.746734 2025] [:error] [pid 40508:tid 40513] [client 20.27.30.201:45527] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vxonb.php"] [unique_id "aR8X_6xXNVCMW_ksxPvdXQAAAoM"]
[Thu Nov 20 21:30:40.460450 2025] [:error] [pid 55340:tid 55346] [client 20.27.30.201:45908] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wozxsh.php"] [unique_id "aR8YAPOxD-NeMydTybC9oAAAAAE"]
[Thu Nov 20 21:30:41.205901 2025] [:error] [pid 40415:tid 40439] [client 20.27.30.201:45918] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wozxsh.php"] [unique_id "aR8YAahjIyLSv09svwPOWQAAAdU"]
[Thu Nov 20 21:30:42.943102 2025] [:error] [pid 40636:tid 40647] [client 20.27.30.201:54181] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wozxsh.php"] [unique_id "aR8YAgK8BWUoW3xq0HArhgAAA4c"]
[Thu Nov 20 21:30:44.213032 2025] [:error] [pid 40415:tid 40440] [client 20.27.30.201:52536] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wozxsh.php"] [unique_id "aR8YBKhjIyLSv09svwPOWwAAAdY"]
[Thu Nov 20 21:30:45.226430 2025] [:error] [pid 40445:tid 40478] [client 20.27.30.201:45516] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whf.php"] [unique_id "aR8YBVH-MuFcoWRjXpaUTQAAAkM"]
[Thu Nov 20 21:30:45.682620 2025] [:error] [pid 40445:tid 40493] [client 20.27.30.201:46029] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whf.php"] [unique_id "aR8YBVH-MuFcoWRjXpaUTgAAAlI"]
[Thu Nov 20 21:30:46.526048 2025] [:error] [pid 55342:tid 55395] [client 20.27.30.201:45635] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whf.php"] [unique_id "aR8YBrg6x32Tvk7fIG8BQAAAAFc"]
[Thu Nov 20 21:30:47.217251 2025] [:error] [pid 55342:tid 55374] [client 20.27.30.201:45912] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whf.php"] [unique_id "aR8YB7g6x32Tvk7fIG8BQQAAAEI"]
[Thu Nov 20 21:30:48.443024 2025] [:error] [pid 40537:tid 40546] [client 20.27.30.201:46039] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkxzo.php"] [unique_id "aR8YCKKlsL5kxTa3c1z_UgAAAsU"]
[Thu Nov 20 21:30:49.996916 2025] [:error] [pid 40508:tid 40531] [client 20.27.30.201:45658] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkxzo.php"] [unique_id "aR8YCaxXNVCMW_ksxPvdYQAAApU"]
[Thu Nov 20 21:30:52.680787 2025] [:error] [pid 40636:tid 40644] [client 20.27.30.201:45673] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkxzo.php"] [unique_id "aR8YDAK8BWUoW3xq0HArigAAA4Q"]
[Thu Nov 20 21:30:53.518946 2025] [:error] [pid 34405:tid 34426] [client 20.27.30.201:45677] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkxzo.php"] [unique_id "aR8YDTFpvu8oRK7ATfs94wAAARM"]
[Thu Nov 20 21:30:55.518403 2025] [:error] [pid 40508:tid 40530] [client 20.27.30.201:45890] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxoby.php"] [unique_id "aR8YD6xXNVCMW_ksxPvdYwAAApQ"]
[Thu Nov 20 21:30:58.925653 2025] [:error] [pid 40445:tid 40486] [client 20.27.30.201:45695] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxoby.php"] [unique_id "aR8YElH-MuFcoWRjXpaUVQAAAks"]
[Thu Nov 20 21:31:00.177970 2025] [:error] [pid 55340:tid 55367] [client 20.27.30.201:45634] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxoby.php"] [unique_id "aR8YFPOxD-NeMydTybC9pQAAABY"]
[Thu Nov 20 21:31:01.303023 2025] [:error] [pid 55340:tid 55353] [client 20.27.30.201:45895] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxoby.php"] [unique_id "aR8YFfOxD-NeMydTybC9pwAAAAg"]
[Thu Nov 20 21:31:02.050489 2025] [:error] [pid 40415:tid 40438] [client 20.27.30.201:45679] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error1.php"] [unique_id "aR8YFqhjIyLSv09svwPOYAAAAdQ"]
[Thu Nov 20 21:31:02.938192 2025] [:error] [pid 40415:tid 40421] [client 20.27.30.201:52540] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error1.php"] [unique_id "aR8YFqhjIyLSv09svwPOYgAAAcM"]
[Thu Nov 20 21:31:03.769995 2025] [:error] [pid 55343:tid 55404] [client 20.27.30.201:45684] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error1.php"] [unique_id "aR8YF1WlO3EnyVMV7w7P5QAAAIU"]
[Thu Nov 20 21:31:07.418310 2025] [:error] [pid 55342:tid 55376] [client 20.27.30.201:45654] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error1.php"] [unique_id "aR8YG7g6x32Tvk7fIG8BTwAAAEQ"]
[Thu Nov 20 21:31:08.549616 2025] [:error] [pid 55340:tid 55369] [client 20.27.30.201:45636] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aR8YHPOxD-NeMydTybC9qAAAABg"]
[Thu Nov 20 21:31:10.446404 2025] [:error] [pid 40508:tid 40531] [client 20.27.30.201:52504] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aR8YHqxXNVCMW_ksxPvdbQAAApU"]
[Thu Nov 20 21:31:12.712934 2025] [:error] [pid 34405:tid 34411] [client 20.27.30.201:52885] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aR8YIDFpvu8oRK7ATfs99wAAAQQ"]
[Thu Nov 20 21:31:14.588248 2025] [:error] [pid 55430:tid 55456] [client 20.27.30.201:52869] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aR8YIvPZXaIMEU4pE7sfSwAAANc"]
[Thu Nov 20 21:31:15.139689 2025] [:error] [pid 55340:tid 55346] [client 20.27.30.201:52493] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8YI_OxD-NeMydTybC9rgAAAAE"]
[Thu Nov 20 21:31:16.207191 2025] [:error] [pid 40445:tid 40497] [client 20.27.30.201:52511] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8YJFH-MuFcoWRjXpaUkgAAAlY"]
[Thu Nov 20 21:31:18.085729 2025] [:error] [pid 55340:tid 55347] [client 20.27.30.201:52906] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8YJvOxD-NeMydTybC9sQAAAAI"]
[Thu Nov 20 21:31:19.382360 2025] [:error] [pid 40445:tid 40487] [client 20.27.30.201:45681] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8YJ1H-MuFcoWRjXpaUpwAAAkw"]
[Thu Nov 20 21:31:20.148728 2025] [:error] [pid 40537:tid 40544] [client 20.27.30.201:45645] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcas.php"] [unique_id "aR8YKKKlsL5kxTa3c1z_WwAAAsM"]
[Thu Nov 20 21:31:21.311753 2025] [:error] [pid 40415:tid 40430] [client 20.27.30.201:45675] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcas.php"] [unique_id "aR8YKahjIyLSv09svwPOZwAAAcw"]
[Thu Nov 20 21:31:22.590836 2025] [:error] [pid 55343:tid 55405] [client 20.27.30.201:52918] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcas.php"] [unique_id "aR8YKlWlO3EnyVMV7w7P-gAAAIY"]
[Thu Nov 20 21:31:23.535302 2025] [:error] [pid 40537:tid 40541] [client 20.27.30.201:52924] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcas.php"] [unique_id "aR8YK6KlsL5kxTa3c1z_XgAAAsA"]
[Thu Nov 20 21:31:24.459020 2025] [:error] [pid 55342:tid 55380] [client 20.27.30.201:52925] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "aR8YLLg6x32Tvk7fIG8BdAAAAEg"]
[Thu Nov 20 21:31:25.271171 2025] [:error] [pid 40415:tid 40420] [client 20.27.30.201:52910] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "aR8YLahjIyLSv09svwPObAAAAcI"]
[Thu Nov 20 21:31:25.935158 2025] [:error] [pid 55430:tid 55438] [client 20.27.30.201:52912] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "aR8YLfPZXaIMEU4pE7sfVwAAAMU"]
[Thu Nov 20 21:31:26.852278 2025] [:error] [pid 55340:tid 55353] [client 20.27.30.201:52900] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "aR8YLvOxD-NeMydTybC9swAAAAg"]
[Thu Nov 20 21:31:28.209478 2025] [:error] [pid 40445:tid 40490] [client 20.27.30.201:52873] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aR8YMFH-MuFcoWRjXpaU4gAAAk8"]
[Thu Nov 20 21:31:28.803744 2025] [:error] [pid 40537:tid 40556] [client 20.27.30.201:52905] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aR8YMKKlsL5kxTa3c1z_YAAAAs8"]
[Thu Nov 20 21:31:29.475162 2025] [:error] [pid 34405:tid 34416] [client 20.27.30.201:45662] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aR8YMTFpvu8oRK7ATfs-CwAAAQk"]
[Thu Nov 20 21:31:30.318369 2025] [:error] [pid 55342:tid 55390] [client 20.27.30.201:45931] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aR8YMrg6x32Tvk7fIG8BegAAAFI"]
[Thu Nov 20 21:31:31.082131 2025] [:error] [pid 55340:tid 55369] [client 20.27.30.201:52524] [client 20.27.30.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aR8YM_OxD-NeMydTybC9tgAAABg"]
[Thu Nov 20 21:31:33.063499 2025] [proxy_fcgi:error] [pid 40636:tid 40661] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:33.239804 2025] [proxy_fcgi:error] [pid 40636:tid 40644] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:33.399263 2025] [proxy_fcgi:error] [pid 40636:tid 40646] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:33.553558 2025] [proxy_fcgi:error] [pid 40636:tid 40651] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:34.445705 2025] [proxy_fcgi:error] [pid 40636:tid 40658] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:34.709482 2025] [proxy_fcgi:error] [pid 40636:tid 40657] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:35.025704 2025] [proxy_fcgi:error] [pid 40636:tid 40650] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:35.178716 2025] [proxy_fcgi:error] [pid 40636:tid 40648] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 21:31:35.335827 2025] [proxy_fcgi:error] [pid 40636:tid 40643] [client 20.27.30.201:45349] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 18:45:32.323980 2025] [:error] [pid 25429:tid 25450] [client 104.28.240.81:34569] [client 104.28.240.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.81, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzD4rZbRSr7vu-NPbbQAAABE"]
[Fri Nov 21 18:45:32.348620 2025] [proxy_fcgi:error] [pid 25429:tid 25450] [client 104.28.240.81:34569] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:19.564863 2025] [proxy_fcgi:error] [pid 49641:tid 49835] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:19.688135 2025] [proxy_fcgi:error] [pid 49641:tid 49828] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:19.806465 2025] [proxy_fcgi:error] [pid 49641:tid 49836] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:19.965191 2025] [proxy_fcgi:error] [pid 49641:tid 49845] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:20.085696 2025] [proxy_fcgi:error] [pid 49641:tid 49847] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:20.214628 2025] [proxy_fcgi:error] [pid 49641:tid 49830] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:20.339915 2025] [proxy_fcgi:error] [pid 49641:tid 49837] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:20.779086 2025] [proxy_fcgi:error] [pid 49641:tid 49823] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:20.913244 2025] [proxy_fcgi:error] [pid 49641:tid 49826] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:21.034370 2025] [proxy_fcgi:error] [pid 49641:tid 49840] [client 74.176.58.69:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:33:21.149291 2025] [:error] [pid 49641:tid 49829] [client 74.176.58.69:24561] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp7.php"] [unique_id "aSCiYVnhuiDak938N_a7awAAAAY"]
[Sat Nov 22 01:33:21.849428 2025] [:error] [pid 9180:tid 9197] [client 74.176.58.69:24449] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp7.php"] [unique_id "aSCiYbrk9msixUFV2i-ZMQAAAE8"]
[Sat Nov 22 01:33:22.487080 2025] [:error] [pid 49641:tid 49832] [client 74.176.58.69:24537] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp7.php"] [unique_id "aSCiYlnhuiDak938N_a7dAAAAAk"]
[Sat Nov 22 01:33:28.276418 2025] [:error] [pid 9180:tid 9203] [client 74.176.58.69:24555] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp7.php"] [unique_id "aSCiaLrk9msixUFV2i-ZQAAAAFU"]
[Sat Nov 22 01:33:29.690849 2025] [:error] [pid 49642:tid 49915] [client 74.176.58.69:24522] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aSCiaYOXTPSuQfgUUtWTXAAAAJg"]
[Sat Nov 22 01:33:32.262911 2025] [:error] [pid 49643:tid 49941] [client 74.176.58.69:24534] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aSCibJwUojIRHhF_fj-RGQAAANU"]
[Sat Nov 22 01:33:34.716727 2025] [:error] [pid 49641:tid 49832] [client 74.176.58.69:24523] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aSCiblnhuiDak938N_a7jAAAAAk"]
[Sat Nov 22 01:33:35.852891 2025] [:error] [pid 9180:tid 9194] [client 74.176.58.69:24533] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aSCib7rk9msixUFV2i-ZUwAAAEw"]
[Sat Nov 22 01:33:39.292845 2025] [:error] [pid 9180:tid 9183] [client 74.176.58.69:24571] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aSCic7rk9msixUFV2i-ZWgAAAEE"]
[Sat Nov 22 01:33:39.647701 2025] [:error] [pid 50057:tid 50068] [client 74.176.58.69:24484] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aSCic1b9j9fTBoI0sRVNbQAAAQk"]
[Sat Nov 22 01:33:41.258448 2025] [:error] [pid 9180:tid 9198] [client 74.176.58.69:24551] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aSCidbrk9msixUFV2i-ZXQAAAFA"]
[Sat Nov 22 01:33:43.326413 2025] [:error] [pid 49642:tid 49912] [client 74.176.58.69:24503] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aSCid4OXTPSuQfgUUtWTbQAAAJU"]
[Sat Nov 22 01:33:44.298077 2025] [:error] [pid 49641:tid 49846] [client 74.176.58.69:24455] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unwattled.php"] [unique_id "aSCieFnhuiDak938N_a7kgAAABc"]
[Sat Nov 22 01:33:45.476318 2025] [:error] [pid 49641:tid 49841] [client 74.176.58.69:24514] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unwattled.php"] [unique_id "aSCieVnhuiDak938N_a7lgAAABI"]
[Sat Nov 22 01:33:47.032825 2025] [:error] [pid 49643:tid 49940] [client 74.176.58.69:24547] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unwattled.php"] [unique_id "aSCie5wUojIRHhF_fj-RIwAAANQ"]
[Sat Nov 22 01:33:47.739068 2025] [:error] [pid 9180:tid 9183] [client 74.176.58.69:24575] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unwattled.php"] [unique_id "aSCie7rk9msixUFV2i-ZYgAAAEE"]
[Sat Nov 22 01:33:49.206303 2025] [:error] [pid 49643:tid 49927] [client 74.176.58.69:24532] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "aSCifZwUojIRHhF_fj-RJQAAAMg"]
[Sat Nov 22 01:33:50.943817 2025] [:error] [pid 49641:tid 49823] [client 74.176.58.69:24516] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "aSCiflnhuiDak938N_a7nAAAAAA"]
[Sat Nov 22 01:33:53.373783 2025] [:error] [pid 9180:tid 9186] [client 74.176.58.69:24528] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "aSCigbrk9msixUFV2i-ZagAAAEQ"]
[Sat Nov 22 01:33:56.559815 2025] [:error] [pid 49643:tid 49939] [client 74.176.58.69:24464] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "aSCihJwUojIRHhF_fj-RKQAAANM"]
[Sat Nov 22 01:33:58.162547 2025] [:error] [pid 49641:tid 49844] [client 74.176.58.69:24454] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCihlnhuiDak938N_a7ogAAABU"]
[Sat Nov 22 01:33:59.643938 2025] [:error] [pid 9180:tid 9197] [client 74.176.58.69:24540] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCih7rk9msixUFV2i-ZpQAAAE8"]
[Sat Nov 22 01:34:01.383703 2025] [:error] [pid 49642:tid 49905] [client 74.176.58.69:24525] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCiiYOXTPSuQfgUUtWTjQAAAI4"]
[Sat Nov 22 01:34:03.804526 2025] [:error] [pid 50057:tid 50079] [client 74.176.58.69:24462] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSCii1b9j9fTBoI0sRVNfAAAARQ"]
[Sat Nov 22 01:34:04.409403 2025] [:error] [pid 49641:tid 49828] [client 74.176.58.69:24527] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aSCijFnhuiDak938N_a7pQAAAAU"]
[Sat Nov 22 01:34:10.455536 2025] [:error] [pid 9180:tid 9201] [client 74.176.58.69:24526] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aSCikrrk9msixUFV2i-ZswAAAFM"]
[Sat Nov 22 01:34:13.892252 2025] [:error] [pid 50057:tid 50064] [client 74.176.58.69:24468] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aSCilVb9j9fTBoI0sRVNjAAAAQU"]
[Sat Nov 22 01:34:17.051603 2025] [:error] [pid 49641:tid 49831] [client 74.176.58.69:24512] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "aSCimVnhuiDak938N_a7tgAAAAg"]
[Sat Nov 22 01:34:18.202013 2025] [:error] [pid 9180:tid 9202] [client 74.176.58.69:24558] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aSCimrrk9msixUFV2i-ZxAAAAFQ"]
[Sat Nov 22 01:34:18.981206 2025] [:error] [pid 9180:tid 9194] [client 74.176.58.69:24465] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aSCimrrk9msixUFV2i-ZxwAAAEw"]
[Sat Nov 22 01:34:20.938415 2025] [:error] [pid 50057:tid 50072] [client 74.176.58.69:24518] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "aSCinFb9j9fTBoI0sRVNnwAAAQ0"]
[Sat Nov 22 01:34:21.500890 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:21.617901 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:21.738398 2025] [proxy_fcgi:error] [pid 9180:tid 9188] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:21.862520 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:21.990966 2025] [proxy_fcgi:error] [pid 9180:tid 9195] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:22.111140 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:22.567862 2025] [proxy_fcgi:error] [pid 9180:tid 9185] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:22.690223 2025] [proxy_fcgi:error] [pid 9180:tid 9183] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:22.809829 2025] [proxy_fcgi:error] [pid 9180:tid 9188] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:22.939237 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:23.058157 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 74.176.58.69:24565] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:34:23.171101 2025] [:error] [pid 9180:tid 9200] [client 74.176.58.69:24565] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "aSCin7rk9msixUFV2i-Z_wAAAFI"]
[Sat Nov 22 01:34:24.335693 2025] [:error] [pid 9180:tid 9192] [client 74.176.58.69:24485] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "aSCioLrk9msixUFV2i-aAgAAAEo"]
[Sat Nov 22 01:34:27.106893 2025] [:error] [pid 49641:tid 49846] [client 74.176.58.69:24465] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "aSCio1nhuiDak938N_a7uQAAABc"]
[Sat Nov 22 01:34:28.104928 2025] [:error] [pid 49643:tid 49943] [client 74.176.58.69:24539] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "aSCipJwUojIRHhF_fj-RSQAAANc"]
[Sat Nov 22 01:34:29.406223 2025] [:error] [pid 49642:tid 49897] [client 74.176.58.69:24559] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krypton.php"] [unique_id "aSCipYOXTPSuQfgUUtWTzQAAAIY"]
[Sat Nov 22 01:34:30.759885 2025] [:error] [pid 50057:tid 50073] [client 74.176.58.69:24531] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krypton.php"] [unique_id "aSCiplb9j9fTBoI0sRVNtQAAAQ4"]
[Sat Nov 22 01:34:33.020916 2025] [:error] [pid 49643:tid 49935] [client 74.176.58.69:24457] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krypton.php"] [unique_id "aSCiqZwUojIRHhF_fj-RUAAAAM8"]
[Sat Nov 22 01:34:34.217762 2025] [:error] [pid 49643:tid 49927] [client 74.176.58.69:24517] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krypton.php"] [unique_id "aSCiqpwUojIRHhF_fj-RUwAAAMg"]
[Sat Nov 22 01:34:37.274184 2025] [:error] [pid 49641:tid 49825] [client 74.176.58.69:24513] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acholuria.php"] [unique_id "aSCirVnhuiDak938N_a7xAAAAAI"]
[Sat Nov 22 01:34:41.327077 2025] [:error] [pid 50057:tid 50062] [client 74.176.58.69:24550] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acholuria.php"] [unique_id "aSCisVb9j9fTBoI0sRVNvQAAAQM"]
[Sat Nov 22 01:34:42.169961 2025] [:error] [pid 9180:tid 9184] [client 74.176.58.69:24541] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acholuria.php"] [unique_id "aSCisrrk9msixUFV2i-aEQAAAEI"]
[Sat Nov 22 01:34:42.724541 2025] [:error] [pid 49641:tid 49836] [client 74.176.58.69:24461] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acholuria.php"] [unique_id "aSCislnhuiDak938N_a7ywAAAA0"]
[Sat Nov 22 01:34:43.630161 2025] [:error] [pid 49642:tid 49896] [client 74.176.58.69:24520] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "aSCis4OXTPSuQfgUUtWT9AAAAIU"]
[Sat Nov 22 01:34:44.844539 2025] [:error] [pid 9180:tid 9188] [client 74.176.58.69:24554] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "aSCitLrk9msixUFV2i-aFQAAAEY"]
[Sat Nov 22 01:34:48.264847 2025] [:error] [pid 50057:tid 50082] [client 74.176.58.69:24543] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "aSCiuFb9j9fTBoI0sRVNxQAAARc"]
[Sat Nov 22 01:34:48.769767 2025] [:error] [pid 50057:tid 50074] [client 74.176.58.69:24401] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "aSCiuFb9j9fTBoI0sRVNyQAAAQ8"]
[Sat Nov 22 01:34:50.328753 2025] [:error] [pid 49641:tid 49826] [client 74.176.58.69:24481] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "aSCiulnhuiDak938N_a70AAAAAM"]
[Sat Nov 22 01:34:51.745993 2025] [:error] [pid 49643:tid 49920] [client 74.176.58.69:24450] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "aSCiu5wUojIRHhF_fj-RXQAAAME"]
[Sat Nov 22 01:34:53.221083 2025] [:error] [pid 49643:tid 49933] [client 74.176.58.69:24407] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "aSCivZwUojIRHhF_fj-RXwAAAM0"]
[Sat Nov 22 01:34:55.576376 2025] [:error] [pid 49641:tid 49836] [client 74.176.58.69:24391] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "aSCiv1nhuiDak938N_a71AAAAA0"]
[Sat Nov 22 01:34:57.562173 2025] [:error] [pid 49642:tid 49891] [client 74.176.58.69:24570] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiwYOXTPSuQfgUUtWUCQAAAIA"]
[Sat Nov 22 01:34:59.639009 2025] [:error] [pid 9180:tid 9184] [client 74.176.58.69:24494] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCiw7rk9msixUFV2i-aKQAAAEI"]
[Sat Nov 22 01:35:01.590185 2025] [:error] [pid 49643:tid 49934] [client 74.176.58.69:24486] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCixZwUojIRHhF_fj-RcAAAAM4"]
[Sat Nov 22 01:35:03.756773 2025] [:error] [pid 50057:tid 50074] [client 74.176.58.69:24496] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ghreshttryu.php"] [unique_id "aSCix1b9j9fTBoI0sRVN0QAAAQ8"]
[Sat Nov 22 01:35:04.770625 2025] [:error] [pid 49643:tid 49932] [client 74.176.58.69:24564] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiyJwUojIRHhF_fj-RcwAAAMw"]
[Sat Nov 22 01:35:05.492619 2025] [:error] [pid 49642:tid 49908] [client 74.176.58.69:24572] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiyYOXTPSuQfgUUtWUDwAAAJE"]
[Sat Nov 22 01:35:06.896290 2025] [:error] [pid 49642:tid 49900] [client 74.176.58.69:24463] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCiyoOXTPSuQfgUUtWUEAAAAIk"]
[Sat Nov 22 01:35:08.845261 2025] [:error] [pid 50057:tid 50077] [client 74.176.58.69:24563] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aporrhiegma.php"] [unique_id "aSCizFb9j9fTBoI0sRVN1QAAARI"]
[Sat Nov 22 01:35:11.193587 2025] [:error] [pid 50057:tid 50078] [client 74.176.58.69:24549] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "aSCiz1b9j9fTBoI0sRVN2AAAARM"]
[Sat Nov 22 01:35:12.338628 2025] [:error] [pid 49642:tid 49911] [client 74.176.58.69:24573] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "aSCi0IOXTPSuQfgUUtWUGAAAAJQ"]
[Sat Nov 22 01:35:14.204381 2025] [:error] [pid 50057:tid 50076] [client 74.176.58.69:24500] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "aSCi0lb9j9fTBoI0sRVN3AAAARE"]
[Sat Nov 22 01:35:14.703458 2025] [:error] [pid 50057:tid 50059] [client 74.176.58.69:24467] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "aSCi0lb9j9fTBoI0sRVN3QAAAQA"]
[Sat Nov 22 01:35:15.901264 2025] [:error] [pid 50057:tid 50063] [client 74.176.58.69:24466] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "aSCi01b9j9fTBoI0sRVN4AAAAQQ"]
[Sat Nov 22 01:35:17.210800 2025] [:error] [pid 49643:tid 49924] [client 74.176.58.69:24562] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "aSCi1ZwUojIRHhF_fj-RhAAAAMU"]
[Sat Nov 22 01:35:19.290574 2025] [:error] [pid 49643:tid 49921] [client 74.176.58.69:24405] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "aSCi15wUojIRHhF_fj-RigAAAMI"]
[Sat Nov 22 01:35:20.155584 2025] [:error] [pid 49643:tid 49942] [client 74.176.58.69:24392] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "aSCi2JwUojIRHhF_fj-RjAAAANY"]
[Sat Nov 22 01:35:22.220840 2025] [:error] [pid 9180:tid 9183] [client 74.176.58.69:24548] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qaez.php56"] [unique_id "aSCi2rrk9msixUFV2i-aQQAAAEE"]
[Sat Nov 22 01:35:23.320821 2025] [proxy_fcgi:error] [pid 9180:tid 9204] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:23.477727 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:23.686360 2025] [proxy_fcgi:error] [pid 9180:tid 9200] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:23.804424 2025] [proxy_fcgi:error] [pid 9180:tid 9191] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.033680 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.168306 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.287440 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.484058 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.604161 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.721926 2025] [proxy_fcgi:error] [pid 9180:tid 9198] [client 74.176.58.69:24470] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 01:35:24.836656 2025] [:error] [pid 9180:tid 9195] [client 74.176.58.69:24470] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bunnies.php"] [unique_id "aSCi3Lrk9msixUFV2i-aUAAAAE0"]
[Sat Nov 22 01:35:27.221898 2025] [:error] [pid 49641:tid 49828] [client 74.176.58.69:24508] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bunnies.php"] [unique_id "aSCi31nhuiDak938N_a77QAAAAU"]
[Sat Nov 22 01:35:31.682947 2025] [:error] [pid 49641:tid 49831] [client 74.176.58.69:24492] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bunnies.php"] [unique_id "aSCi41nhuiDak938N_a79wAAAAg"]
[Sat Nov 22 01:35:32.669807 2025] [:error] [pid 9180:tid 9187] [client 74.176.58.69:24469] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bunnies.php"] [unique_id "aSCi5Lrk9msixUFV2i-aVgAAAEU"]
[Sat Nov 22 01:35:34.260502 2025] [:error] [pid 49642:tid 49900] [client 74.176.58.69:24544] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCi5oOXTPSuQfgUUtWUKQAAAIk"]
[Sat Nov 22 01:35:35.238223 2025] [:error] [pid 49643:tid 49929] [client 74.176.58.69:24536] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCi55wUojIRHhF_fj-RqwAAAMk"]
[Sat Nov 22 01:35:37.551752 2025] [:error] [pid 49643:tid 49943] [client 74.176.58.69:24459] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCi6ZwUojIRHhF_fj-RrwAAANc"]
[Sat Nov 22 01:35:40.537199 2025] [:error] [pid 49641:tid 49846] [client 74.176.58.69:24519] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/frenchwomen.php"] [unique_id "aSCi7FnhuiDak938N_a7_wAAABc"]
[Sat Nov 22 01:35:41.724924 2025] [:error] [pid 9180:tid 9198] [client 74.176.58.69:24397] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/glucosidase.php"] [unique_id "aSCi7brk9msixUFV2i-aXQAAAFA"]
[Sat Nov 22 01:35:42.831263 2025] [:error] [pid 49643:tid 49919] [client 74.176.58.69:24408] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/glucosidase.php"] [unique_id "aSCi7pwUojIRHhF_fj-RwAAAAMA"]
[Sat Nov 22 01:35:44.343236 2025] [:error] [pid 9180:tid 9186] [client 74.176.58.69:24404] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/glucosidase.php"] [unique_id "aSCi8Lrk9msixUFV2i-aYQAAAEQ"]
[Sat Nov 22 01:35:45.226256 2025] [:error] [pid 9180:tid 9202] [client 74.176.58.69:24385] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/glucosidase.php"] [unique_id "aSCi8brk9msixUFV2i-aZAAAAFQ"]
[Sat Nov 22 01:35:47.195596 2025] [:error] [pid 9180:tid 9205] [client 74.176.58.69:24425] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modernize.php"] [unique_id "aSCi87rk9msixUFV2i-aawAAAFc"]
[Sat Nov 22 01:35:48.156518 2025] [:error] [pid 50057:tid 50072] [client 74.176.58.69:24506] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modernize.php"] [unique_id "aSCi9Fb9j9fTBoI0sRVN-QAAAQ0"]
[Sat Nov 22 01:35:51.188311 2025] [:error] [pid 9180:tid 9204] [client 74.176.58.69:24502] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modernize.php"] [unique_id "aSCi97rk9msixUFV2i-acwAAAFY"]
[Sat Nov 22 01:35:51.855905 2025] [:error] [pid 49642:tid 49908] [client 74.176.58.69:24480] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modernize.php"] [unique_id "aSCi94OXTPSuQfgUUtWUNAAAAJE"]
[Sat Nov 22 01:35:52.401823 2025] [:error] [pid 50057:tid 50062] [client 74.176.58.69:24453] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/twohandedness.php"] [unique_id "aSCi-Fb9j9fTBoI0sRVODwAAAQM"]
[Sat Nov 22 01:35:53.256402 2025] [:error] [pid 49641:tid 49840] [client 74.176.58.69:24406] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/twohandedness.php"] [unique_id "aSCi-VnhuiDak938N_a8EgAAABE"]
[Sat Nov 22 01:35:54.394081 2025] [:error] [pid 9180:tid 9199] [client 74.176.58.69:24542] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/twohandedness.php"] [unique_id "aSCi-rrk9msixUFV2i-aegAAAFE"]
[Sat Nov 22 01:35:55.552880 2025] [:error] [pid 49642:tid 49910] [client 74.176.58.69:24489] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/twohandedness.php"] [unique_id "aSCi-4OXTPSuQfgUUtWUOQAAAJM"]
[Sat Nov 22 01:35:57.008496 2025] [:error] [pid 49641:tid 49838] [client 74.176.58.69:24399] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/undigitated.php"] [unique_id "aSCi_VnhuiDak938N_a8GAAAAA8"]
[Sat Nov 22 01:35:57.563450 2025] [:error] [pid 49643:tid 49944] [client 74.176.58.69:24566] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/undigitated.php"] [unique_id "aSCi_ZwUojIRHhF_fj-R2QAAANg"]
[Sat Nov 22 01:35:58.459059 2025] [:error] [pid 49643:tid 49939] [client 74.176.58.69:24478] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/undigitated.php"] [unique_id "aSCi_pwUojIRHhF_fj-R2wAAANM"]
[Sat Nov 22 01:35:58.853574 2025] [:error] [pid 49643:tid 49922] [client 74.176.58.69:24427] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/undigitated.php"] [unique_id "aSCi_pwUojIRHhF_fj-R3QAAAMM"]
[Sat Nov 22 01:36:00.202914 2025] [:error] [pid 9180:tid 9194] [client 74.176.58.69:24431] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unsafer.php"] [unique_id "aSCjALrk9msixUFV2i-agAAAAEw"]
[Sat Nov 22 01:36:02.385122 2025] [:error] [pid 49642:tid 49911] [client 74.176.58.69:24387] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unsafer.php"] [unique_id "aSCjAoOXTPSuQfgUUtWUPQAAAJQ"]
[Sat Nov 22 01:36:03.326357 2025] [:error] [pid 49642:tid 49915] [client 74.176.58.69:24458] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unsafer.php"] [unique_id "aSCjA4OXTPSuQfgUUtWUPwAAAJg"]
[Sat Nov 22 01:36:04.603881 2025] [:error] [pid 9180:tid 9198] [client 74.176.58.69:24432] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unsafer.php"] [unique_id "aSCjBLrk9msixUFV2i-ahQAAAFA"]
[Sat Nov 22 01:36:05.648032 2025] [:error] [pid 9180:tid 9186] [client 74.176.58.69:24574] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aSCjBbrk9msixUFV2i-ahgAAAEQ"]
[Sat Nov 22 01:36:06.287379 2025] [:error] [pid 49641:tid 49840] [client 74.176.58.69:24524] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aSCjBlnhuiDak938N_a8IQAAABE"]
[Sat Nov 22 01:36:11.046216 2025] [:error] [pid 9180:tid 9191] [client 74.176.58.69:24530] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aSCjC7rk9msixUFV2i-akwAAAEk"]
[Sat Nov 22 01:36:14.548094 2025] [:error] [pid 49642:tid 49893] [client 74.176.58.69:24341] [client 74.176.58.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aSCjDoOXTPSuQfgUUtWUUgAAAII"]
[Sat Nov 22 11:59:08.040378 2025] [:error] [pid 9547:tid 9567] [client 213.21.239.4:44388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSE1DNClOR5qk7DoMeEyugAAAU4"]
[Sat Nov 22 12:09:50.160863 2025] [:error] [pid 53478:tid 53510] [client 213.21.239.4:49330] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSE3jghUYdXBbQswAdSYeAAAAEE"]
[Sat Nov 22 12:25:28.317280 2025] [:error] [pid 53477:tid 53501] [client 213.21.239.4:44174] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.svn/wc.db"] [unique_id "aSE7OH7Lu30Ku9O40aJfqAAAABQ"]
[Sat Nov 22 12:36:29.957839 2025] [:error] [pid 53566:tid 53578] [client 213.21.239.4:57934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.svn/wc.db"] [unique_id "aSE9zcbSHDBkRbwMbd7RywAAAMo"]
[Sun Nov 23 05:33:20.958980 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:21.323887 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:21.681849 2025] [proxy_fcgi:error] [pid 38824:tid 38851] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:22.104271 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:22.472042 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:22.900260 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:23.257876 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:23.624197 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:24.353470 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:25.073692 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:25.489833 2025] [proxy_fcgi:error] [pid 38824:tid 38827] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:25.868503 2025] [proxy_fcgi:error] [pid 38824:tid 38829] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:26.245955 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:26.674462 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:27.059312 2025] [proxy_fcgi:error] [pid 38824:tid 38839] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:27.503783 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:27.872917 2025] [proxy_fcgi:error] [pid 38824:tid 38840] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:28.240912 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 45.146.54.5:28175] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:33.661693 2025] [:error] [pid 38824:tid 38835] [client 45.146.54.5:28175] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSIsLU8WZjXLvbHTHPfHbQAAAMg"]
[Sun Nov 23 05:33:35.473000 2025] [:error] [pid 38739:tid 38772] [client 45.146.54.30:38845] [client 45.146.54.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSIsLwdvEgJm2n2cDmoA7wAAAEM"]
[Sun Nov 23 05:33:37.354063 2025] [proxy_fcgi:error] [pid 38824:tid 38839] [client 45.146.54.35:63593] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:38.425126 2025] [:error] [pid 38824:tid 38832] [client 45.146.54.35:63593] [client 45.146.54.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSIsMk8WZjXLvbHTHPfHfAAAAMU"]
[Sun Nov 23 05:33:41.046938 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 45.146.54.1:47321] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:41.408886 2025] [:error] [pid 38739:tid 38790] [client 45.146.54.1:47321] [client 45.146.54.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSIsNQdvEgJm2n2cDmoA-AAAAFU"]
[Sun Nov 23 05:33:43.544434 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 45.146.54.27:26347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:46.527047 2025] [:error] [pid 38739:tid 38782] [client 45.146.54.27:26347] [client 45.146.54.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSIsOgdvEgJm2n2cDmoBBAAAAE0"]
[Sun Nov 23 05:33:47.677544 2025] [:error] [pid 38738:tid 38751] [client 45.131.194.245:52777] [client 45.131.194.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSIsOwytc6TL9XavPmPLfQAAAAk"]
[Sun Nov 23 05:33:48.415656 2025] [:error] [pid 38740:tid 38805] [client 45.131.194.246:27311] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSIsPA13QPZSi6O8umWZhwAAAIk"]
[Sun Nov 23 05:33:49.186505 2025] [:error] [pid 44652:tid 44720] [client 45.146.54.16:31701] [client 45.146.54.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSIsPdiQFwsyXQDhwyDIyQAAAQ4"]
[Sun Nov 23 05:33:49.900369 2025] [:error] [pid 38739:tid 38774] [client 45.131.194.248:52455] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSIsPQdvEgJm2n2cDmoBBwAAAEU"]
[Sun Nov 23 05:33:50.729252 2025] [:error] [pid 38740:tid 38818] [client 45.146.54.22:47733] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSIsPg13QPZSi6O8umWZiwAAAJY"]
[Sun Nov 23 05:33:52.075770 2025] [:error] [pid 38740:tid 38815] [client 45.146.54.13:33347] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSIsQA13QPZSi6O8umWZjQAAAJM"]
[Sun Nov 23 05:33:52.830529 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 45.131.194.244:59729] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:53.547052 2025] [:error] [pid 38824:tid 38837] [client 45.131.194.244:59729] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/filemanager.php"] [unique_id "aSIsQU8WZjXLvbHTHPfHkwAAAMo"]
[Sun Nov 23 05:33:55.040606 2025] [:error] [pid 38824:tid 38849] [client 45.131.194.241:52711] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSIsQ08WZjXLvbHTHPfHmAAAANY"]
[Sun Nov 23 05:33:56.149255 2025] [:error] [pid 38738:tid 38746] [client 45.146.54.25:24255] [client 45.146.54.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSIsRAytc6TL9XavPmPLhQAAAAQ"]
[Sun Nov 23 05:33:57.109127 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 45.131.194.247:51319] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:57.525229 2025] [:error] [pid 38739:tid 38792] [client 45.131.194.247:51319] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSIsRQdvEgJm2n2cDmoBCwAAAFc"]
[Sun Nov 23 05:33:58.260466 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 45.146.54.18:39347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:33:59.419722 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 45.146.54.18:39347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:00.528899 2025] [:error] [pid 38824:tid 38849] [client 45.146.54.18:39347] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSIsSE8WZjXLvbHTHPfHpgAAANY"]
[Sun Nov 23 05:34:01.265777 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 45.131.194.243:22805] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:01.670326 2025] [:error] [pid 38739:tid 38776] [client 45.131.194.243:22805] [client 45.131.194.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSIsSQdvEgJm2n2cDmoBFAAAAEc"]
[Sun Nov 23 05:34:02.565403 2025] [proxy_fcgi:error] [pid 44652:tid 44706] [client 45.146.54.13:49059] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:03.382892 2025] [:error] [pid 44652:tid 44716] [client 45.146.54.13:49059] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSIsS9iQFwsyXQDhwyDI2wAAAQo"]
[Sun Nov 23 05:34:04.577390 2025] [:error] [pid 44652:tid 44707] [client 45.146.54.29:24147] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSIsTNiQFwsyXQDhwyDI4AAAAQE"]
[Sun Nov 23 05:34:05.709036 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 45.131.194.250:50937] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:06.097171 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 45.131.194.250:50937] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:06.811652 2025] [:error] [pid 38740:tid 38820] [client 45.131.194.250:50937] [client 45.131.194.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSIsTg13QPZSi6O8umWZoQAAAJg"]
[Sun Nov 23 05:34:07.900160 2025] [:error] [pid 38739:tid 38769] [client 45.146.54.6:37963] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSIsTwdvEgJm2n2cDmoBGAAAAEA"]
[Sun Nov 23 05:34:08.996706 2025] [:error] [pid 38739:tid 38775] [client 45.146.54.19:27343] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSIsUAdvEgJm2n2cDmoBGwAAAEY"]
[Sun Nov 23 05:34:09.729441 2025] [:error] [pid 44652:tid 44706] [client 45.146.54.19:25519] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSIsUdiQFwsyXQDhwyDI5QAAAQA"]
[Sun Nov 23 05:34:10.447396 2025] [:error] [pid 44652:tid 44710] [client 45.131.194.243:43199] [client 45.131.194.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSIsUtiQFwsyXQDhwyDI5gAAAQQ"]
[Sun Nov 23 05:34:12.086654 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 45.131.194.243:51403] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:12.455908 2025] [:error] [pid 38739:tid 38787] [client 45.131.194.243:51403] [client 45.131.194.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSIsVAdvEgJm2n2cDmoBIgAAAFI"]
[Sun Nov 23 05:34:13.196370 2025] [:error] [pid 38824:tid 38847] [client 45.131.194.245:47137] [client 45.131.194.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSIsVU8WZjXLvbHTHPfHvQAAANQ"]
[Sun Nov 23 05:34:13.940494 2025] [:error] [pid 38824:tid 38829] [client 45.131.194.244:64231] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSIsVU8WZjXLvbHTHPfHwAAAAMI"]
[Sun Nov 23 05:34:15.507216 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 45.131.194.242:63999] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:16.244862 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 45.131.194.242:63999] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:17.762539 2025] [:error] [pid 38740:tid 38801] [client 45.131.194.242:63999] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSIsWQ13QPZSi6O8umWZwQAAAIU"]
[Sun Nov 23 05:34:19.694066 2025] [:error] [pid 38740:tid 38804] [client 45.146.54.2:34329] [client 45.146.54.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.2, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSIsWw13QPZSi6O8umWZ8wAAAIg"]
[Sun Nov 23 05:34:20.071773 2025] [proxy_fcgi:error] [pid 38740:tid 38796] [client 45.146.54.2:34329] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:21.933132 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 45.146.54.2:34329] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:22.298681 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 45.146.54.2:34329] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:24.121398 2025] [:error] [pid 38740:tid 38819] [client 45.146.54.2:34329] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSIsYA13QPZSi6O8umWaVQAAAJc"]
[Sun Nov 23 05:34:25.262886 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.15:62367] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:25.629512 2025] [:error] [pid 38824:tid 38849] [client 45.146.54.15:62367] [client 45.146.54.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.15, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSIsYU8WZjXLvbHTHPfIMwAAANY"]
[Sun Nov 23 05:34:26.367542 2025] [:error] [pid 38824:tid 38851] [client 45.146.54.15:62367] [client 45.146.54.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSIsYk8WZjXLvbHTHPfINQAAANg"]
[Sun Nov 23 05:34:28.522502 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 45.146.54.30:28759] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:29.253459 2025] [proxy_fcgi:error] [pid 38739:tid 38790] [client 45.146.54.30:28759] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:29.966613 2025] [:error] [pid 38739:tid 38787] [client 45.146.54.30:28759] [client 45.146.54.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSIsZQdvEgJm2n2cDmoBmAAAAFI"]
[Sun Nov 23 05:34:30.707460 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 45.146.54.4:60869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:31.817314 2025] [proxy_fcgi:error] [pid 38739:tid 38785] [client 45.146.54.4:60869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:32.564883 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 45.146.54.4:60869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:33.336584 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 45.146.54.4:60869] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:33.744759 2025] [:error] [pid 38739:tid 38777] [client 45.146.54.4:60869] [client 45.146.54.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSIsaQdvEgJm2n2cDmoBoQAAAEg"]
[Sun Nov 23 05:34:34.457398 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.9:61233] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:34.858377 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 45.146.54.9:61233] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:35.225508 2025] [:error] [pid 38824:tid 38829] [client 45.146.54.9:61233] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSIsa08WZjXLvbHTHPfIPwAAAMI"]
[Sun Nov 23 05:34:36.353787 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 45.146.54.32:34147] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:37.125467 2025] [:error] [pid 38739:tid 38782] [client 45.146.54.32:34147] [client 45.146.54.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.32, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSIsbQdvEgJm2n2cDmoBqAAAAE0"]
[Sun Nov 23 05:34:37.504659 2025] [:error] [pid 38739:tid 38790] [client 45.146.54.32:34147] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSIsbQdvEgJm2n2cDmoBqQAAAFU"]
[Sun Nov 23 05:34:41.963354 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 45.146.54.16:50609] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:44.194332 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 45.146.54.16:50609] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:44.638165 2025] [:error] [pid 44652:tid 44721] [client 45.146.54.16:50609] [client 45.146.54.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSIsdNiQFwsyXQDhwyDJlAAAAQ8"]
[Sun Nov 23 05:34:45.376786 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 45.131.194.250:52161] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:46.598829 2025] [:error] [pid 38739:tid 38772] [client 45.131.194.250:52161] [client 45.131.194.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.250, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSIsdgdvEgJm2n2cDmoBsAAAAEM"]
[Sun Nov 23 05:34:46.992772 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 45.131.194.250:52161] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:47.376737 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 45.131.194.250:52161] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:47.736694 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 45.131.194.250:52161] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:48.115037 2025] [:error] [pid 38739:tid 38780] [client 45.131.194.250:52161] [client 45.131.194.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSIseAdvEgJm2n2cDmoBtQAAAEs"]
[Sun Nov 23 05:34:48.874658 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 45.146.54.29:56083] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:49.226047 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.29:56083] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSIsediQFwsyXQDhwyDJnwAAAQI"]
[Sun Nov 23 05:34:50.389612 2025] [proxy_fcgi:error] [pid 44652:tid 44721] [client 45.146.54.8:35547] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:50.779598 2025] [:error] [pid 44652:tid 44727] [client 45.146.54.8:35547] [client 45.146.54.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSIsetiQFwsyXQDhwyDJogAAARU"]
[Sun Nov 23 05:34:52.339456 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 45.131.194.246:44457] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:52.689014 2025] [:error] [pid 38739:tid 38790] [client 45.131.194.246:44457] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSIsfAdvEgJm2n2cDmoBuwAAAFU"]
[Sun Nov 23 05:34:53.418459 2025] [:error] [pid 38740:tid 38796] [client 45.131.194.249:25845] [client 45.131.194.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSIsfQ13QPZSi6O8umWahgAAAIA"]
[Sun Nov 23 05:34:54.182066 2025] [proxy_fcgi:error] [pid 38740:tid 38818] [client 45.146.54.9:45621] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:54.605739 2025] [proxy_fcgi:error] [pid 38740:tid 38815] [client 45.146.54.9:45621] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:34:56.084257 2025] [:error] [pid 38740:tid 38797] [client 45.146.54.9:45621] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSIsgA13QPZSi6O8umWakAAAAIE"]
[Sun Nov 23 05:34:57.182272 2025] [:error] [pid 44652:tid 44706] [client 45.146.54.19:21703] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSIsgdiQFwsyXQDhwyDJqwAAAQA"]
[Sun Nov 23 05:34:58.998667 2025] [:error] [pid 38739:tid 38788] [client 45.146.54.34:27431] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSIsggdvEgJm2n2cDmoBxAAAAFM"]
[Sun Nov 23 05:34:59.727947 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 45.146.54.26:32075] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:00.436144 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 45.146.54.26:32075] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:00.785332 2025] [:error] [pid 44652:tid 44729] [client 45.146.54.26:32075] [client 45.146.54.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSIshNiQFwsyXQDhwyDJswAAARc"]
[Sun Nov 23 05:35:01.511083 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 45.146.54.2:48049] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:02.687180 2025] [:error] [pid 38740:tid 38802] [client 45.146.54.2:48049] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSIshg13QPZSi6O8umWamwAAAIY"]
[Sun Nov 23 05:35:04.651450 2025] [:error] [pid 44652:tid 44728] [client 45.146.54.17:36657] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSIsiNiQFwsyXQDhwyDJugAAARY"]
[Sun Nov 23 05:35:05.807349 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 45.146.54.27:58973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:06.951449 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 45.146.54.27:58973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:07.673516 2025] [proxy_fcgi:error] [pid 38738:tid 38751] [client 45.146.54.27:58973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:08.036987 2025] [:error] [pid 38738:tid 38755] [client 45.146.54.27:58973] [client 45.146.54.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSIsjAytc6TL9XavPmPMFQAAAA0"]
[Sun Nov 23 05:35:08.811928 2025] [:error] [pid 44652:tid 44707] [client 45.131.194.247:61191] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSIsjNiQFwsyXQDhwyDJwAAAAQE"]
[Sun Nov 23 05:35:09.524289 2025] [:error] [pid 38824:tid 38839] [client 45.146.54.8:20391] [client 45.146.54.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSIsjU8WZjXLvbHTHPfIcQAAAMw"]
[Sun Nov 23 05:35:10.293218 2025] [:error] [pid 44652:tid 44722] [client 45.146.54.38:59123] [client 45.146.54.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSIsjtiQFwsyXQDhwyDJxwAAARA"]
[Sun Nov 23 05:35:11.143835 2025] [proxy_fcgi:error] [pid 38824:tid 38844] [client 45.146.54.37:42977] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:11.509898 2025] [:error] [pid 38824:tid 38847] [client 45.146.54.37:42977] [client 45.146.54.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSIsj08WZjXLvbHTHPfIdQAAANQ"]
[Sun Nov 23 05:35:12.226424 2025] [:error] [pid 38824:tid 38827] [client 45.131.194.248:49373] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSIskE8WZjXLvbHTHPfIdwAAAMA"]
[Sun Nov 23 05:35:13.022166 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 45.146.54.30:44347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:13.772105 2025] [:error] [pid 38740:tid 38809] [client 45.146.54.30:44347] [client 45.146.54.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSIskQ13QPZSi6O8umWaswAAAI0"]
[Sun Nov 23 05:35:14.593352 2025] [:error] [pid 38740:tid 38813] [client 45.146.54.1:35799] [client 45.146.54.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSIskg13QPZSi6O8umWatQAAAJE"]
[Sun Nov 23 05:35:16.386207 2025] [:error] [pid 38738:tid 38743] [client 45.131.194.247:56119] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSIslAytc6TL9XavPmPMHgAAAAE"]
[Sun Nov 23 05:35:17.106302 2025] [:error] [pid 38738:tid 38751] [client 45.131.194.246:32411] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSIslQytc6TL9XavPmPMHwAAAAk"]
[Sun Nov 23 05:35:18.456097 2025] [:error] [pid 38824:tid 38850] [client 45.146.54.34:29731] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSIslk8WZjXLvbHTHPfIggAAANc"]
[Sun Nov 23 05:35:19.972504 2025] [:error] [pid 38824:tid 38827] [client 45.146.54.9:44517] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSIsl08WZjXLvbHTHPfIhwAAAMA"]
[Sun Nov 23 05:35:20.686371 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 45.131.194.243:44309] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:21.856853 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 45.131.194.243:44309] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:22.230511 2025] [:error] [pid 38824:tid 38829] [client 45.131.194.243:44309] [client 45.131.194.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSIsmk8WZjXLvbHTHPfIjwAAAMI"]
[Sun Nov 23 05:35:23.432517 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 45.146.54.15:53347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:23.836106 2025] [proxy_fcgi:error] [pid 44652:tid 44730] [client 45.146.54.15:53347] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:25.826343 2025] [:error] [pid 44652:tid 44710] [client 45.146.54.15:53347] [client 45.146.54.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSIsndiQFwsyXQDhwyDJ1wAAAQQ"]
[Sun Nov 23 05:35:27.708444 2025] [:error] [pid 44652:tid 44719] [client 45.146.54.10:43197] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSIsn9iQFwsyXQDhwyDJ3AAAAQ0"]
[Sun Nov 23 05:35:28.447311 2025] [:error] [pid 38824:tid 38836] [client 45.146.54.33:35815] [client 45.146.54.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSIsoE8WZjXLvbHTHPfImAAAAMk"]
[Sun Nov 23 05:35:31.419602 2025] [:error] [pid 38824:tid 38846] [client 45.146.54.11:24243] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSIso08WZjXLvbHTHPfInwAAANM"]
[Sun Nov 23 05:35:32.871792 2025] [proxy_fcgi:error] [pid 38738:tid 38755] [client 45.146.54.31:57393] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:33.237386 2025] [proxy_fcgi:error] [pid 38738:tid 38744] [client 45.146.54.31:57393] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:33.633480 2025] [proxy_fcgi:error] [pid 38738:tid 38753] [client 45.146.54.31:57393] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:34.008919 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 45.146.54.31:57393] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:35.842774 2025] [:error] [pid 38738:tid 38760] [client 45.146.54.31:57393] [client 45.146.54.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSIspwytc6TL9XavPmPMPAAAABI"]
[Sun Nov 23 05:35:36.572999 2025] [:error] [pid 38740:tid 38808] [client 45.146.54.2:50771] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSIsqA13QPZSi6O8umWayAAAAIw"]
[Sun Nov 23 05:35:37.381302 2025] [:error] [pid 38824:tid 38831] [client 45.146.54.22:37727] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSIsqU8WZjXLvbHTHPfIpgAAAMQ"]
[Sun Nov 23 05:35:38.152982 2025] [:error] [pid 44652:tid 44729] [client 45.146.54.19:54793] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSIsqtiQFwsyXQDhwyDJ5QAAARc"]
[Sun Nov 23 05:35:38.972747 2025] [:error] [pid 38740:tid 38798] [client 45.146.54.7:27535] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSIsqg13QPZSi6O8umWazAAAAII"]
[Sun Nov 23 05:35:39.701126 2025] [:error] [pid 38739:tid 38770] [client 45.146.54.22:30587] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSIsqwdvEgJm2n2cDmoB-AAAAEE"]
[Sun Nov 23 05:35:40.767646 2025] [:error] [pid 38740:tid 38804] [client 45.131.194.247:51659] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSIsrA13QPZSi6O8umWazgAAAIg"]
[Sun Nov 23 05:35:41.509828 2025] [:error] [pid 38740:tid 38816] [client 45.146.54.22:53097] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSIsrQ13QPZSi6O8umWa0AAAAJQ"]
[Sun Nov 23 05:35:42.233118 2025] [:error] [pid 38738:tid 38757] [client 45.146.54.3:30441] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSIsrgytc6TL9XavPmPMSQAAAA8"]
[Sun Nov 23 05:35:43.034972 2025] [:error] [pid 44652:tid 44722] [client 45.131.194.113:65421] [client 45.131.194.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSIsr9iQFwsyXQDhwyDJ6QAAARA"]
[Sun Nov 23 05:35:44.778393 2025] [:error] [pid 44652:tid 44720] [client 45.131.194.251:60261] [client 45.131.194.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSIssNiQFwsyXQDhwyDJ7wAAAQ4"]
[Sun Nov 23 05:35:45.895453 2025] [:error] [pid 38738:tid 38764] [client 45.131.194.248:46127] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSIssQytc6TL9XavPmPMVgAAABY"]
[Sun Nov 23 05:35:46.629129 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 45.146.54.3:27663] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:47.407790 2025] [:error] [pid 44652:tid 44709] [client 45.146.54.3:27663] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSIss9iQFwsyXQDhwyDJ-QAAAQM"]
[Sun Nov 23 05:35:50.265705 2025] [:error] [pid 38740:tid 38800] [client 45.146.54.9:65215] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSIstg13QPZSi6O8umWa3wAAAIQ"]
[Sun Nov 23 05:35:52.052055 2025] [proxy_fcgi:error] [pid 38740:tid 38803] [client 45.146.54.22:31699] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:52.427650 2025] [:error] [pid 38740:tid 38802] [client 45.146.54.22:31699] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSIsuA13QPZSi6O8umWa5gAAAIY"]
[Sun Nov 23 05:35:53.908989 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 45.146.54.2:41609] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:54.270064 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 45.146.54.2:41609] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:54.637383 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 45.146.54.2:41609] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:55.091114 2025] [:error] [pid 38739:tid 38772] [client 45.146.54.2:41609] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSIsuwdvEgJm2n2cDmoCDgAAAEM"]
[Sun Nov 23 05:35:55.816811 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.27:64493] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:56.799685 2025] [:error] [pid 38824:tid 38833] [client 45.146.54.27:64493] [client 45.146.54.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSIsvE8WZjXLvbHTHPfI3QAAAMY"]
[Sun Nov 23 05:35:58.282901 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:58.748774 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:35:59.312717 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:01.283142 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:01.649784 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:02.359173 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:03.660451 2025] [proxy_fcgi:error] [pid 38824:tid 38829] [client 45.146.54.3:48851] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:04.032433 2025] [:error] [pid 38824:tid 38845] [client 45.146.54.3:48851] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSIsxE8WZjXLvbHTHPfI8QAAANI"]
[Sun Nov 23 05:36:04.904378 2025] [:error] [pid 44652:tid 44722] [client 45.146.54.32:49243] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSIsxNiQFwsyXQDhwyDKDQAAARA"]
[Sun Nov 23 05:36:05.664809 2025] [:error] [pid 38739:tid 38787] [client 45.146.54.27:22155] [client 45.146.54.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.27, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aSIsxQdvEgJm2n2cDmoCFQAAAFI"]
[Sun Nov 23 05:36:05.670594 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 45.146.54.27:22155] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:06.709404 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 45.146.54.27:22155] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:07.115074 2025] [:error] [pid 38739:tid 38792] [client 45.146.54.27:22155] [client 45.146.54.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSIsxwdvEgJm2n2cDmoCGAAAAFc"]
[Sun Nov 23 05:36:11.496777 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 45.146.54.36:21641] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:11.910974 2025] [:error] [pid 38740:tid 38803] [client 45.146.54.36:21641] [client 45.146.54.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSIsyw13QPZSi6O8umWa8wAAAIc"]
[Sun Nov 23 05:36:12.701343 2025] [:error] [pid 38740:tid 38799] [client 45.146.54.18:49081] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSIszA13QPZSi6O8umWa9QAAAIM"]
[Sun Nov 23 05:36:15.071934 2025] [:error] [pid 38739:tid 38784] [client 45.146.54.18:48029] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSIszwdvEgJm2n2cDmoCJgAAAE8"]
[Sun Nov 23 05:36:15.855913 2025] [:error] [pid 38739:tid 38787] [client 45.146.54.20:65283] [client 45.146.54.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "aSIszwdvEgJm2n2cDmoCKAAAAFI"]
[Sun Nov 23 05:36:18.943464 2025] [proxy_fcgi:error] [pid 38739:tid 38774] [client 45.131.194.244:54257] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:19.703023 2025] [:error] [pid 38739:tid 38790] [client 45.131.194.244:54257] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSIs0wdvEgJm2n2cDmoCNAAAAFU"]
[Sun Nov 23 05:36:21.147135 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 45.131.194.241:37767] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:21.842731 2025] [:error] [pid 38824:tid 38847] [client 45.131.194.241:37767] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSIs1U8WZjXLvbHTHPfJAgAAANQ"]
[Sun Nov 23 05:36:22.566784 2025] [:error] [pid 38824:tid 38838] [client 45.146.54.2:33195] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSIs1k8WZjXLvbHTHPfJBAAAAMs"]
[Sun Nov 23 05:36:23.738464 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 45.146.54.4:62455] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:24.124353 2025] [:error] [pid 38738:tid 38761] [client 45.146.54.4:62455] [client 45.146.54.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSIs2Aytc6TL9XavPmPMZwAAABM"]
[Sun Nov 23 05:36:24.843284 2025] [:error] [pid 38739:tid 38771] [client 45.146.54.3:23177] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSIs2AdvEgJm2n2cDmoCPQAAAEI"]
[Sun Nov 23 05:36:26.301976 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 45.131.194.112:29007] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:26.681972 2025] [proxy_fcgi:error] [pid 44652:tid 44728] [client 45.131.194.112:29007] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:27.472267 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 45.131.194.112:29007] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:28.267348 2025] [:error] [pid 44652:tid 44712] [client 45.131.194.112:29007] [client 45.131.194.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSIs3NiQFwsyXQDhwyDKMAAAAQY"]
[Sun Nov 23 05:36:29.078096 2025] [:error] [pid 38824:tid 38833] [client 45.131.194.246:55667] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSIs3U8WZjXLvbHTHPfJCAAAAMY"]
[Sun Nov 23 05:36:31.208966 2025] [proxy_fcgi:error] [pid 38824:tid 38841] [client 45.146.54.17:57971] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:31.592527 2025] [:error] [pid 38824:tid 38843] [client 45.146.54.17:57971] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSIs308WZjXLvbHTHPfJEQAAANA"]
[Sun Nov 23 05:36:32.299071 2025] [:error] [pid 38740:tid 38799] [client 45.146.54.13:21385] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSIs4A13QPZSi6O8umWbCAAAAIM"]
[Sun Nov 23 05:36:33.059650 2025] [:error] [pid 38740:tid 38815] [client 45.146.54.33:54477] [client 45.146.54.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSIs4Q13QPZSi6O8umWbCQAAAJM"]
[Sun Nov 23 05:36:35.324210 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 45.131.194.248:60969] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:35.701817 2025] [:error] [pid 38739:tid 38790] [client 45.131.194.248:60969] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSIs4wdvEgJm2n2cDmoCTAAAAFU"]
[Sun Nov 23 05:36:36.807835 2025] [:error] [pid 38824:tid 38827] [client 45.146.54.11:35689] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSIs5E8WZjXLvbHTHPfJGwAAAMA"]
[Sun Nov 23 05:36:37.512493 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 45.146.54.20:52057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:37.894300 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 45.146.54.20:52057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:38.662086 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 45.146.54.20:52057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:40.176170 2025] [:error] [pid 38824:tid 38840] [client 45.146.54.20:52057] [client 45.146.54.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.20, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/js/wp-login.php"] [unique_id "aSIs6E8WZjXLvbHTHPfJKQAAAM0"]
[Sun Nov 23 05:36:41.383327 2025] [:error] [pid 38824:tid 38839] [client 45.146.54.20:52057] File does not exist: /home/quarryspec/quarryspec.com.au/worm.PhP
[Sun Nov 23 05:36:41.755576 2025] [proxy_fcgi:error] [pid 38824:tid 38833] [client 45.146.54.20:52057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:42.111918 2025] [proxy_fcgi:error] [pid 38824:tid 38850] [client 45.146.54.20:52057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:42.926486 2025] [:error] [pid 38824:tid 38828] [client 45.146.54.20:52057] [client 45.146.54.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSIs6k8WZjXLvbHTHPfJNgAAAME"]
[Sun Nov 23 05:36:43.658373 2025] [:error] [pid 44652:tid 44722] [client 45.146.54.5:58575] [client 45.146.54.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.5, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSIs69iQFwsyXQDhwyDKPgAAARA"]
[Sun Nov 23 05:36:45.916342 2025] [proxy_fcgi:error] [pid 44652:tid 44713] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:46.317716 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:47.086507 2025] [proxy_fcgi:error] [pid 44652:tid 44708] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:47.802586 2025] [proxy_fcgi:error] [pid 44652:tid 44729] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:48.898394 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:51.527752 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:51.907111 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:53.807335 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 45.146.54.5:58575] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:54.558906 2025] [:error] [pid 44652:tid 44727] [client 45.146.54.5:58575] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSIs9tiQFwsyXQDhwyDKZwAAARU"]
[Sun Nov 23 05:36:56.001271 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 45.146.54.38:48601] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:56.422735 2025] [:error] [pid 38738:tid 38752] [client 45.146.54.38:48601] [client 45.146.54.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSIs-Aytc6TL9XavPmPMggAAAAo"]
[Sun Nov 23 05:36:57.512473 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 45.146.54.37:35297] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:36:57.928949 2025] [:error] [pid 38739:tid 38779] [client 45.146.54.37:35297] [client 45.146.54.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSIs-QdvEgJm2n2cDmoCZgAAAEo"]
[Sun Nov 23 05:36:59.400277 2025] [proxy_fcgi:error] [pid 38739:tid 38778] [client 45.131.194.247:41551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:00.157044 2025] [proxy_fcgi:error] [pid 38739:tid 38770] [client 45.131.194.247:41551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:00.919425 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 45.131.194.247:41551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:01.293135 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 45.131.194.247:41551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:02.064219 2025] [:error] [pid 38739:tid 38775] [client 45.131.194.247:41551] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSIs_gdvEgJm2n2cDmoCcgAAAEY"]
[Sun Nov 23 05:37:02.823301 2025] [proxy_fcgi:error] [pid 38740:tid 38801] [client 45.146.54.24:60325] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:03.651833 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 45.146.54.24:60325] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:04.064162 2025] [:error] [pid 38740:tid 38811] [client 45.146.54.24:60325] [client 45.146.54.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSItAA13QPZSi6O8umWbKgAAAI8"]
[Sun Nov 23 05:37:05.227339 2025] [:error] [pid 38739:tid 38790] [client 45.146.54.29:22523] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSItAQdvEgJm2n2cDmoCdwAAAFU"]
[Sun Nov 23 05:37:06.418954 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 45.146.54.9:41607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:08.105195 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 45.146.54.9:41607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:08.470403 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.9:41607] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:08.820660 2025] [:error] [pid 38824:tid 38850] [client 45.146.54.9:41607] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSItBE8WZjXLvbHTHPfJTAAAANc"]
[Sun Nov 23 05:37:09.627730 2025] [:error] [pid 44652:tid 44721] [client 45.146.54.35:54833] [client 45.146.54.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSItBdiQFwsyXQDhwyDKeAAAAQ8"]
[Sun Nov 23 05:37:12.294333 2025] [proxy_fcgi:error] [pid 38740:tid 38814] [client 45.131.194.242:27799] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:13.018058 2025] [:error] [pid 38740:tid 38809] [client 45.131.194.242:27799] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSItCQ13QPZSi6O8umWbOgAAAI0"]
[Sun Nov 23 05:37:14.161425 2025] [:error] [pid 38824:tid 38843] [client 45.131.194.249:63015] [client 45.131.194.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aSItCk8WZjXLvbHTHPfJUgAAANA"]
[Sun Nov 23 05:37:15.353746 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 45.146.54.31:60989] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:15.760111 2025] [proxy_fcgi:error] [pid 38740:tid 38807] [client 45.146.54.31:60989] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:16.107354 2025] [:error] [pid 38740:tid 38806] [client 45.146.54.31:60989] [client 45.146.54.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSItDA13QPZSi6O8umWbQQAAAIo"]
[Sun Nov 23 05:37:17.252702 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 45.146.54.13:37983] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:17.608593 2025] [proxy_fcgi:error] [pid 44652:tid 44721] [client 45.146.54.13:37983] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:18.363765 2025] [proxy_fcgi:error] [pid 44652:tid 44710] [client 45.146.54.13:37983] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:19.476261 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.13:37983] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSItD9iQFwsyXQDhwyDKiwAAAQc"]
[Sun Nov 23 05:37:20.264700 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 45.146.54.11:26269] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:21.366218 2025] [:error] [pid 44652:tid 44709] [client 45.146.54.11:26269] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSItEdiQFwsyXQDhwyDKkAAAAQM"]
[Sun Nov 23 05:37:22.477151 2025] [proxy_fcgi:error] [pid 44652:tid 44707] [client 45.146.54.13:55145] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:23.563192 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 45.146.54.13:55145] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:23.927620 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 45.146.54.13:55145] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:24.631774 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.13:55145] [client 45.146.54.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.13, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSItFNiQFwsyXQDhwyDKmwAAAQI"]
[Sun Nov 23 05:37:27.020116 2025] [:error] [pid 44652:tid 44710] [client 45.146.54.13:55145] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSItF9iQFwsyXQDhwyDKpQAAAQQ"]
[Sun Nov 23 05:37:27.762013 2025] [proxy_fcgi:error] [pid 38824:tid 38828] [client 45.131.194.113:27009] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:28.176285 2025] [:error] [pid 38824:tid 38840] [client 45.131.194.113:27009] [client 45.131.194.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSItGE8WZjXLvbHTHPfJWgAAAM0"]
[Sun Nov 23 05:37:28.923877 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 45.131.194.247:25487] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:29.758499 2025] [proxy_fcgi:error] [pid 44652:tid 44716] [client 45.131.194.247:25487] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:30.510706 2025] [:error] [pid 44652:tid 44720] [client 45.131.194.247:25487] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSItGtiQFwsyXQDhwyDKrgAAAQ4"]
[Sun Nov 23 05:37:31.616985 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 45.146.54.20:22317] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:31.975250 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 45.146.54.20:22317] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:32.703152 2025] [:error] [pid 38739:tid 38776] [client 45.146.54.20:22317] [client 45.146.54.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSItHAdvEgJm2n2cDmoClwAAAEc"]
[Sun Nov 23 05:37:33.818223 2025] [:error] [pid 38738:tid 38762] [client 45.146.54.9:49713] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSItHQytc6TL9XavPmPMmQAAABQ"]
[Sun Nov 23 05:37:34.656333 2025] [proxy_fcgi:error] [pid 38740:tid 38820] [client 45.146.54.17:59911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:35.042324 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 45.146.54.17:59911] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:35.786771 2025] [:error] [pid 38740:tid 38800] [client 45.146.54.17:59911] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSItHw13QPZSi6O8umWbWgAAAIQ"]
[Sun Nov 23 05:37:36.506147 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 45.146.54.17:28545] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:37.251409 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 45.146.54.17:28545] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:37.604445 2025] [:error] [pid 38739:tid 38777] [client 45.146.54.17:28545] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSItIQdvEgJm2n2cDmoCnQAAAEg"]
[Sun Nov 23 05:37:38.738784 2025] [:error] [pid 44652:tid 44709] [client 45.146.54.4:30085] [client 45.146.54.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSItItiQFwsyXQDhwyDKvgAAAQM"]
[Sun Nov 23 05:37:39.585462 2025] [:error] [pid 44652:tid 44707] [client 45.131.194.242:31859] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSItI9iQFwsyXQDhwyDKwAAAAQE"]
[Sun Nov 23 05:37:40.349893 2025] [:error] [pid 38738:tid 38746] [client 45.146.54.19:42879] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSItJAytc6TL9XavPmPMoAAAAAQ"]
[Sun Nov 23 05:37:41.083371 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.2:43315] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSItJdiQFwsyXQDhwyDKwgAAAQI"]
[Sun Nov 23 05:37:41.821778 2025] [:error] [pid 38739:tid 38769] [client 45.146.54.9:55823] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSItJQdvEgJm2n2cDmoCoQAAAEA"]
[Sun Nov 23 05:37:42.568898 2025] [:error] [pid 44652:tid 44720] [client 45.146.54.2:52595] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSItJtiQFwsyXQDhwyDKxgAAAQ4"]
[Sun Nov 23 05:37:45.060694 2025] [:error] [pid 38740:tid 38806] [client 45.146.54.18:33041] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSItKQ13QPZSi6O8umWbYwAAAIo"]
[Sun Nov 23 05:37:45.825924 2025] [:error] [pid 38738:tid 38750] [client 45.146.54.35:23527] [client 45.146.54.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSItKQytc6TL9XavPmPMpAAAAAg"]
[Sun Nov 23 05:37:46.547851 2025] [:error] [pid 38824:tid 38828] [client 45.146.54.8:52149] [client 45.146.54.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSItKk8WZjXLvbHTHPfJZQAAAME"]
[Sun Nov 23 05:37:47.606093 2025] [:error] [pid 38824:tid 38830] [client 45.146.54.7:42645] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSItK08WZjXLvbHTHPfJaQAAAMM"]
[Sun Nov 23 05:37:49.762604 2025] [:error] [pid 38738:tid 38746] [client 45.131.194.249:54211] [client 45.131.194.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSItLQytc6TL9XavPmPMqgAAAAQ"]
[Sun Nov 23 05:37:50.483070 2025] [proxy_fcgi:error] [pid 38740:tid 38817] [client 45.146.54.6:52635] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:51.931796 2025] [:error] [pid 38740:tid 38801] [client 45.146.54.6:52635] [client 45.146.54.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.6, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSItLw13QPZSi6O8umWbbwAAAIU"]
[Sun Nov 23 05:37:54.216050 2025] [:error] [pid 38740:tid 38799] [client 45.146.54.6:52635] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSItMg13QPZSi6O8umWbeAAAAIM"]
[Sun Nov 23 05:37:54.928363 2025] [:error] [pid 38824:tid 38831] [client 45.146.54.7:36257] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSItMk8WZjXLvbHTHPfJdAAAAMQ"]
[Sun Nov 23 05:37:56.917230 2025] [proxy_fcgi:error] [pid 38739:tid 38773] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:57.288408 2025] [proxy_fcgi:error] [pid 38739:tid 38782] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:58.763500 2025] [proxy_fcgi:error] [pid 38739:tid 38781] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:37:59.122902 2025] [proxy_fcgi:error] [pid 38739:tid 38790] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:00.616305 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:01.040279 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:01.468194 2025] [proxy_fcgi:error] [pid 38739:tid 38787] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:02.138538 2025] [proxy_fcgi:error] [pid 38739:tid 38775] [client 45.146.54.32:47613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:02.525642 2025] [:error] [pid 38739:tid 38772] [client 45.146.54.32:47613] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSItOgdvEgJm2n2cDmoCxAAAAEM"]
[Sun Nov 23 05:38:03.240697 2025] [:error] [pid 38740:tid 38818] [client 45.146.54.10:58067] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSItOw13QPZSi6O8umWbgwAAAJY"]
[Sun Nov 23 05:38:04.011505 2025] [:error] [pid 38824:tid 38835] [client 45.131.194.248:22021] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSItPE8WZjXLvbHTHPfJfgAAAMg"]
[Sun Nov 23 05:38:05.176779 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 45.146.54.25:21491] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:05.631932 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.25:21491] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:06.364180 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 45.146.54.25:21491] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:07.124291 2025] [:error] [pid 38824:tid 38827] [client 45.146.54.25:21491] [client 45.146.54.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSItP08WZjXLvbHTHPfJiAAAAMA"]
[Sun Nov 23 05:38:07.854557 2025] [:error] [pid 44652:tid 44730] [client 45.146.54.23:48921] [client 45.146.54.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSItP9iQFwsyXQDhwyDK2wAAARg"]
[Sun Nov 23 05:38:08.678290 2025] [:error] [pid 38740:tid 38808] [client 45.146.54.23:56709] [client 45.146.54.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSItQA13QPZSi6O8umWbhwAAAIw"]
[Sun Nov 23 05:38:10.963048 2025] [:error] [pid 44652:tid 44717] [client 45.146.54.33:37207] [client 45.146.54.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSItQtiQFwsyXQDhwyDK5AAAAQs"]
[Sun Nov 23 05:38:12.068114 2025] [:error] [pid 44652:tid 44721] [client 45.146.54.23:44679] [client 45.146.54.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSItRNiQFwsyXQDhwyDK5wAAAQ8"]
[Sun Nov 23 05:38:13.593220 2025] [:error] [pid 44652:tid 44708] [client 45.131.194.242:23649] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSItRdiQFwsyXQDhwyDK7gAAAQI"]
[Sun Nov 23 05:38:18.660020 2025] [:error] [pid 44652:tid 44714] [client 45.131.194.246:28535] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSItStiQFwsyXQDhwyDLBAAAAQg"]
[Sun Nov 23 05:38:19.445890 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 45.146.54.2:31309] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:20.310649 2025] [:error] [pid 38739:tid 38776] [client 45.146.54.2:31309] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSItTAdvEgJm2n2cDmoCywAAAEc"]
[Sun Nov 23 05:38:21.743612 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 45.146.54.1:53563] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:22.944083 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.146.54.1:53563] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:23.305231 2025] [:error] [pid 38824:tid 38832] [client 45.146.54.1:53563] [client 45.146.54.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSItT08WZjXLvbHTHPfJlAAAAMU"]
[Sun Nov 23 05:38:24.846952 2025] [:error] [pid 38740:tid 38799] [client 45.131.194.246:46647] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSItUA13QPZSi6O8umWblAAAAIM"]
[Sun Nov 23 05:38:27.099653 2025] [:error] [pid 38824:tid 38828] [client 45.146.54.13:23825] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSItU08WZjXLvbHTHPfJmgAAAME"]
[Sun Nov 23 05:38:29.718732 2025] [:error] [pid 38739:tid 38781] [client 45.146.54.5:60107] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSItVQdvEgJm2n2cDmoC2QAAAEw"]
[Sun Nov 23 05:38:30.784491 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 45.131.194.247:29037] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:31.178716 2025] [:error] [pid 44652:tid 44721] [client 45.131.194.247:29037] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSItV9iQFwsyXQDhwyDLFgAAAQ8"]
[Sun Nov 23 05:38:31.910264 2025] [:error] [pid 38738:tid 38765] [client 45.146.54.34:53797] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSItVwytc6TL9XavPmPMxAAAABc"]
[Sun Nov 23 05:38:34.445477 2025] [:error] [pid 38738:tid 38761] [client 45.146.54.19:57389] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSItWgytc6TL9XavPmPMzQAAABM"]
[Sun Nov 23 05:38:35.171665 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 45.146.54.22:53761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:36.684585 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 45.146.54.22:53761] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:37.041759 2025] [:error] [pid 38738:tid 38765] [client 45.146.54.22:53761] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSItXQytc6TL9XavPmPM1QAAABc"]
[Sun Nov 23 05:38:38.565493 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 45.146.54.12:64909] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:39.310622 2025] [:error] [pid 38824:tid 38845] [client 45.146.54.12:64909] [client 45.146.54.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSItX08WZjXLvbHTHPfJoAAAANI"]
[Sun Nov 23 05:38:40.029774 2025] [:error] [pid 44652:tid 44714] [client 45.131.194.246:28439] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSItYNiQFwsyXQDhwyDLHQAAAQg"]
[Sun Nov 23 05:38:41.472346 2025] [:error] [pid 38739:tid 38769] [client 45.131.194.250:64669] [client 45.131.194.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSItYQdvEgJm2n2cDmoC6AAAAEA"]
[Sun Nov 23 05:38:43.317649 2025] [:error] [pid 44652:tid 44713] [client 45.131.194.248:31577] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSItY9iQFwsyXQDhwyDLIwAAAQc"]
[Sun Nov 23 05:38:44.042210 2025] [:error] [pid 44652:tid 44707] [client 45.146.54.14:35459] [client 45.146.54.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSItZNiQFwsyXQDhwyDLJAAAAQE"]
[Sun Nov 23 05:38:45.237222 2025] [proxy_fcgi:error] [pid 38739:tid 38790] [client 45.146.54.13:25873] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:47.045526 2025] [:error] [pid 38739:tid 38788] [client 45.146.54.13:25873] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSItZwdvEgJm2n2cDmoC9AAAAFM"]
[Sun Nov 23 05:38:48.493806 2025] [:error] [pid 44652:tid 44724] [client 45.146.54.19:45431] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSItaNiQFwsyXQDhwyDLLgAAARI"]
[Sun Nov 23 05:38:49.218410 2025] [:error] [pid 38824:tid 38833] [client 45.146.54.10:59573] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSItaU8WZjXLvbHTHPfJpwAAAMY"]
[Sun Nov 23 05:38:50.316176 2025] [proxy_fcgi:error] [pid 44652:tid 44706] [client 45.146.54.37:21551] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:50.699711 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.37:21551] [client 45.146.54.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSItatiQFwsyXQDhwyDLMgAAAQI"]
[Sun Nov 23 05:38:51.765302 2025] [:error] [pid 38738:tid 38765] [client 45.146.54.6:27287] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSItawytc6TL9XavPmPM3wAAABc"]
[Sun Nov 23 05:38:54.331332 2025] [:error] [pid 38740:tid 38802] [client 45.146.54.29:53649] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSItbg13QPZSi6O8umWbtQAAAIY"]
[Sun Nov 23 05:38:55.445651 2025] [proxy_fcgi:error] [pid 44652:tid 44723] [client 45.146.54.14:25445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:38:55.806760 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.14:25445] [client 45.146.54.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSItb9iQFwsyXQDhwyDLPAAAAQc"]
[Sun Nov 23 05:38:58.663296 2025] [:error] [pid 44652:tid 44719] [client 45.131.194.112:23273] [client 45.131.194.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSItctiQFwsyXQDhwyDLQQAAAQ0"]
[Sun Nov 23 05:38:59.776687 2025] [:error] [pid 44652:tid 44730] [client 45.146.54.6:30197] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSItc9iQFwsyXQDhwyDLQwAAARg"]
[Sun Nov 23 05:39:00.863729 2025] [:error] [pid 44652:tid 44712] [client 45.146.54.3:57307] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSItdNiQFwsyXQDhwyDLRwAAAQY"]
[Sun Nov 23 05:39:01.607525 2025] [:error] [pid 38738:tid 38751] [client 45.146.54.20:45221] [client 45.146.54.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSItdQytc6TL9XavPmPM5QAAAAk"]
[Sun Nov 23 05:39:02.374352 2025] [:error] [pid 44652:tid 44718] [client 45.146.54.32:34741] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSItdtiQFwsyXQDhwyDLSAAAAQw"]
[Sun Nov 23 05:39:05.445886 2025] [:error] [pid 38738:tid 38744] [client 45.146.54.10:38287] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSIteQytc6TL9XavPmPM7AAAAAI"]
[Sun Nov 23 05:39:07.362222 2025] [:error] [pid 44652:tid 44709] [client 45.131.194.251:40665] [client 45.131.194.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSIte9iQFwsyXQDhwyDLTwAAAQM"]
[Sun Nov 23 05:39:08.828014 2025] [proxy_fcgi:error] [pid 38740:tid 38819] [client 45.146.54.13:62325] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:09.182596 2025] [:error] [pid 38740:tid 38805] [client 45.146.54.13:62325] [client 45.146.54.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSItfQ13QPZSi6O8umWbxAAAAIk"]
[Sun Nov 23 05:39:11.291163 2025] [:error] [pid 38739:tid 38772] [client 45.131.194.241:36683] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSItfwdvEgJm2n2cDmoDBAAAAEM"]
[Sun Nov 23 05:39:12.080374 2025] [proxy_fcgi:error] [pid 38739:tid 38780] [client 45.131.194.241:47337] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:14.291527 2025] [:error] [pid 38739:tid 38775] [client 45.131.194.241:47337] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSItggdvEgJm2n2cDmoDCwAAAEY"]
[Sun Nov 23 05:39:15.391047 2025] [:error] [pid 38824:tid 38844] [client 45.131.194.241:21793] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSItg08WZjXLvbHTHPfJswAAANE"]
[Sun Nov 23 05:39:16.484976 2025] [:error] [pid 44652:tid 44717] [client 45.146.54.22:61897] [client 45.146.54.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSIthNiQFwsyXQDhwyDLWwAAAQs"]
[Sun Nov 23 05:39:18.006799 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.36:39205] [client 45.146.54.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSIthtiQFwsyXQDhwyDLXgAAAQI"]
[Sun Nov 23 05:39:21.795004 2025] [:error] [pid 38738:tid 38752] [client 45.146.54.29:61907] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSItiQytc6TL9XavPmPM9wAAAAo"]
[Sun Nov 23 05:39:22.503309 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.7:64293] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSItitiQFwsyXQDhwyDLZAAAAQc"]
[Sun Nov 23 05:39:24.366261 2025] [:error] [pid 44652:tid 44706] [client 45.131.194.249:49087] [client 45.131.194.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSItjNiQFwsyXQDhwyDLagAAAQA"]
[Sun Nov 23 05:39:25.629814 2025] [:error] [pid 44652:tid 44726] [client 45.146.54.3:54319] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSItjdiQFwsyXQDhwyDLbgAAARQ"]
[Sun Nov 23 05:39:27.063544 2025] [:error] [pid 38738:tid 38759] [client 45.146.54.11:52499] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSItjwytc6TL9XavPmPM_QAAABE"]
[Sun Nov 23 05:39:27.832383 2025] [:error] [pid 38824:tid 38846] [client 45.146.54.36:26875] [client 45.146.54.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSItj08WZjXLvbHTHPfJuAAAANM"]
[Sun Nov 23 05:39:28.533082 2025] [:error] [pid 38739:tid 38771] [client 45.131.194.251:43031] [client 45.131.194.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.251, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSItkAdvEgJm2n2cDmoDEgAAAEI"]
[Sun Nov 23 05:39:28.538012 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 45.131.194.251:43031] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:28.888034 2025] [:error] [pid 38739:tid 38774] [client 45.131.194.251:43031] [client 45.131.194.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSItkAdvEgJm2n2cDmoDEwAAAEU"]
[Sun Nov 23 05:39:31.819541 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 45.131.194.248:41275] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:32.167379 2025] [:error] [pid 44652:tid 44716] [client 45.131.194.248:41275] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSItlNiQFwsyXQDhwyDLeQAAAQo"]
[Sun Nov 23 05:39:32.924515 2025] [:error] [pid 44652:tid 44714] [client 45.146.54.39:59807] [client 45.146.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSItlNiQFwsyXQDhwyDLfAAAAQg"]
[Sun Nov 23 05:39:33.668724 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 45.146.54.7:24803] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:36.355495 2025] [:error] [pid 38824:tid 38828] [client 45.146.54.7:24803] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSItmE8WZjXLvbHTHPfJxQAAAME"]
[Sun Nov 23 05:39:37.057360 2025] [:error] [pid 38824:tid 38836] [client 45.146.54.26:28829] [client 45.146.54.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSItmU8WZjXLvbHTHPfJyAAAAMk"]
[Sun Nov 23 05:39:38.504803 2025] [:error] [pid 38739:tid 38789] [client 45.131.194.241:37533] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSItmgdvEgJm2n2cDmoDGgAAAFQ"]
[Sun Nov 23 05:39:39.321808 2025] [:error] [pid 38739:tid 38776] [client 45.146.54.10:25333] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSItmwdvEgJm2n2cDmoDHAAAAEc"]
[Sun Nov 23 05:39:40.066184 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 45.146.54.34:26073] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:40.428172 2025] [:error] [pid 38738:tid 38752] [client 45.146.54.34:26073] [client 45.146.54.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.34, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSItnAytc6TL9XavPmPNBQAAAAo"]
[Sun Nov 23 05:39:41.198375 2025] [:error] [pid 38738:tid 38762] [client 45.146.54.34:26073] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSItnQytc6TL9XavPmPNBwAAABQ"]
[Sun Nov 23 05:39:43.441525 2025] [:error] [pid 38739:tid 38780] [client 45.131.194.249:60565] [client 45.131.194.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSItnwdvEgJm2n2cDmoDJQAAAEs"]
[Sun Nov 23 05:39:44.174860 2025] [proxy_fcgi:error] [pid 38738:tid 38743] [client 45.146.54.7:52989] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:44.536302 2025] [:error] [pid 38738:tid 38746] [client 45.146.54.7:52989] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSItoAytc6TL9XavPmPNDQAAAAQ"]
[Sun Nov 23 05:39:45.314744 2025] [:error] [pid 38738:tid 38758] [client 45.146.54.6:45391] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSItoQytc6TL9XavPmPNDwAAABA"]
[Sun Nov 23 05:39:46.036156 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 45.131.194.241:55157] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:47.092192 2025] [:error] [pid 38824:tid 38837] [client 45.131.194.241:55157] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSIto08WZjXLvbHTHPfJzwAAAMo"]
[Sun Nov 23 05:39:48.490686 2025] [:error] [pid 38740:tid 38804] [client 45.146.54.21:25395] [client 45.146.54.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSItpA13QPZSi6O8umWb1AAAAIg"]
[Sun Nov 23 05:39:49.245859 2025] [proxy_fcgi:error] [pid 38739:tid 38779] [client 45.146.54.19:58299] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:50.025372 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 45.146.54.19:58299] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:50.729201 2025] [:error] [pid 38739:tid 38774] [client 45.146.54.19:58299] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSItpgdvEgJm2n2cDmoDLwAAAEU"]
[Sun Nov 23 05:39:51.484661 2025] [:error] [pid 44652:tid 44707] [client 45.131.194.241:23677] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSItp9iQFwsyXQDhwyDLiQAAAQE"]
[Sun Nov 23 05:39:52.501948 2025] [:error] [pid 44652:tid 44711] [client 216.126.225.91:50630] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSItqNiQFwsyXQDhwyDLkQAAAQU"]
[Sun Nov 23 05:39:52.612016 2025] [:error] [pid 38824:tid 38834] [client 45.146.54.31:21383] [client 45.146.54.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSItqE8WZjXLvbHTHPfJ1gAAAMc"]
[Sun Nov 23 05:39:53.314249 2025] [proxy_fcgi:error] [pid 44652:tid 44721] [client 45.146.54.2:56797] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:39:55.529026 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.2:56797] [client 45.146.54.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSItq9iQFwsyXQDhwyDLpQAAAQc"]
[Sun Nov 23 05:39:56.969444 2025] [:error] [pid 44652:tid 44730] [client 45.146.54.18:23461] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||quarryspec.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "quarryspec.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSItrNiQFwsyXQDhwyDLrgAAARg"]
[Sun Nov 23 05:39:57.319798 2025] [:error] [pid 44652:tid 44708] [client 45.146.54.18:23461] [client 45.146.54.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSItrdiQFwsyXQDhwyDLrwAAAQI"]
[Sun Nov 23 05:39:58.773897 2025] [:error] [pid 38740:tid 38810] [client 45.146.54.35:38489] [client 45.146.54.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSItrg13QPZSi6O8umWb2gAAAI4"]
[Sun Nov 23 05:39:59.495743 2025] [:error] [pid 38824:tid 38837] [client 45.146.54.5:46371] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSItr08WZjXLvbHTHPfJ3QAAAMo"]
[Sun Nov 23 05:40:01.034858 2025] [proxy_fcgi:error] [pid 38740:tid 38802] [client 45.146.54.9:30285] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:02.807705 2025] [:error] [pid 38740:tid 38800] [client 45.146.54.9:30285] [client 45.146.54.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSItsg13QPZSi6O8umWb5QAAAIQ"]
[Sun Nov 23 05:40:04.466194 2025] [:error] [pid 44652:tid 44726] [client 45.146.54.36:24307] [client 45.146.54.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSIttNiQFwsyXQDhwyDLxgAAARQ"]
[Sun Nov 23 05:40:05.592920 2025] [:error] [pid 44652:tid 44716] [client 45.146.54.8:29463] [client 45.146.54.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSIttdiQFwsyXQDhwyDLygAAAQo"]
[Sun Nov 23 05:40:06.412070 2025] [proxy_fcgi:error] [pid 44652:tid 44727] [client 45.146.54.29:28233] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:08.212587 2025] [:error] [pid 44652:tid 44724] [client 45.146.54.29:28233] [client 45.146.54.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSItuNiQFwsyXQDhwyDL1QAAARI"]
[Sun Nov 23 05:40:09.297401 2025] [:error] [pid 38824:tid 38849] [client 45.131.194.247:29999] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSItuU8WZjXLvbHTHPfJ8QAAANY"]
[Sun Nov 23 05:40:10.054122 2025] [proxy_fcgi:error] [pid 38824:tid 38848] [client 45.146.54.17:40091] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:10.469389 2025] [:error] [pid 38824:tid 38836] [client 45.146.54.17:40091] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSItuk8WZjXLvbHTHPfJ9AAAAMk"]
[Sun Nov 23 05:40:11.270833 2025] [:error] [pid 38824:tid 38842] [client 45.131.194.243:55875] [client 45.131.194.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSItu08WZjXLvbHTHPfJ9wAAAM8"]
[Sun Nov 23 05:40:12.748768 2025] [:error] [pid 38739:tid 38783] [client 45.131.194.113:52191] [client 45.131.194.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSItvAdvEgJm2n2cDmoDPgAAAE4"]
[Sun Nov 23 05:40:14.683675 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 45.146.54.30:60057] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:15.037286 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.30:60057] [client 45.146.54.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSItv9iQFwsyXQDhwyDL3wAAAQc"]
[Sun Nov 23 05:40:15.843983 2025] [:error] [pid 38824:tid 38849] [client 45.146.54.11:57877] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSItv08WZjXLvbHTHPfJ-QAAANY"]
[Sun Nov 23 05:40:18.570228 2025] [:error] [pid 38824:tid 38845] [client 45.146.54.19:56367] [client 45.146.54.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSItwk8WZjXLvbHTHPfKAQAAANI"]
[Sun Nov 23 05:40:20.246508 2025] [:error] [pid 38740:tid 38796] [client 45.146.54.33:61959] [client 45.146.54.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSItxA13QPZSi6O8umWb8QAAAIA"]
[Sun Nov 23 05:40:21.020722 2025] [proxy_fcgi:error] [pid 38738:tid 38748] [client 45.131.194.245:42613] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:22.116104 2025] [:error] [pid 38738:tid 38749] [client 45.131.194.245:42613] [client 45.131.194.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSItxgytc6TL9XavPmPNUwAAAAc"]
[Sun Nov 23 05:40:22.874041 2025] [:error] [pid 38824:tid 38851] [client 45.146.54.5:61765] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSItxk8WZjXLvbHTHPfKBAAAANg"]
[Sun Nov 23 05:40:23.982602 2025] [:error] [pid 38740:tid 38814] [client 45.146.54.39:62855] [client 45.146.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSItxw13QPZSi6O8umWb9AAAAJI"]
[Sun Nov 23 05:40:24.725224 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 45.131.194.246:57409] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:26.463691 2025] [:error] [pid 38824:tid 38835] [client 45.131.194.246:57409] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSItyk8WZjXLvbHTHPfKDwAAAMg"]
[Sun Nov 23 05:40:27.174649 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 45.146.54.20:37925] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:27.957717 2025] [:error] [pid 44652:tid 44723] [client 45.146.54.20:37925] [client 45.146.54.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSIty9iQFwsyXQDhwyDL8gAAARE"]
[Sun Nov 23 05:40:28.672436 2025] [:error] [pid 44652:tid 44730] [client 45.146.54.21:44191] [client 45.146.54.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSItzNiQFwsyXQDhwyDL9QAAARg"]
[Sun Nov 23 05:40:29.831628 2025] [:error] [pid 38739:tid 38781] [client 45.146.54.34:37453] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSItzQdvEgJm2n2cDmoDSAAAAEw"]
[Sun Nov 23 05:40:30.568288 2025] [:error] [pid 38739:tid 38778] [client 45.146.54.38:41835] [client 45.146.54.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSItzgdvEgJm2n2cDmoDSQAAAEk"]
[Sun Nov 23 05:40:32.028803 2025] [:error] [pid 44652:tid 44716] [client 45.146.54.37:20437] [client 45.146.54.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSIt0NiQFwsyXQDhwyDMAAAAAQo"]
[Sun Nov 23 05:40:33.887611 2025] [:error] [pid 44652:tid 44714] [client 45.146.54.1:26929] [client 45.146.54.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSIt0diQFwsyXQDhwyDMAgAAAQg"]
[Sun Nov 23 05:40:34.704318 2025] [:error] [pid 38740:tid 38811] [client 45.146.54.24:64763] [client 45.146.54.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSIt0g13QPZSi6O8umWcAgAAAI8"]
[Sun Nov 23 05:40:35.451758 2025] [:error] [pid 38740:tid 38799] [client 45.146.54.10:44861] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSIt0w13QPZSi6O8umWcAwAAAIM"]
[Sun Nov 23 05:40:37.277358 2025] [:error] [pid 44652:tid 44708] [client 45.131.194.244:45839] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSIt1diQFwsyXQDhwyDMEwAAAQI"]
[Sun Nov 23 05:40:38.915051 2025] [:error] [pid 38824:tid 38829] [client 45.146.54.3:55419] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSIt1k8WZjXLvbHTHPfKFQAAAMI"]
[Sun Nov 23 05:40:40.030741 2025] [:error] [pid 44652:tid 44713] [client 45.146.54.11:57211] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSIt2NiQFwsyXQDhwyDMHAAAAQc"]
[Sun Nov 23 05:40:41.454659 2025] [:error] [pid 38738:tid 38765] [client 45.131.194.244:33927] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSIt2Qytc6TL9XavPmPNYQAAABc"]
[Sun Nov 23 05:40:42.936298 2025] [proxy_fcgi:error] [pid 38740:tid 38798] [client 45.131.194.246:57771] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:44.450968 2025] [:error] [pid 38740:tid 38816] [client 45.131.194.246:57771] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSIt3A13QPZSi6O8umWcDAAAAJQ"]
[Sun Nov 23 05:40:45.162695 2025] [:error] [pid 38738:tid 38755] [client 45.131.194.242:44847] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSIt3Qytc6TL9XavPmPNZwAAAA0"]
[Sun Nov 23 05:40:46.224280 2025] [proxy_fcgi:error] [pid 38738:tid 38763] [client 45.146.54.1:24931] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:46.597064 2025] [:error] [pid 38738:tid 38758] [client 45.146.54.1:24931] [client 45.146.54.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSIt3gytc6TL9XavPmPNbAAAABA"]
[Sun Nov 23 05:40:48.924983 2025] [:error] [pid 38824:tid 38829] [client 45.131.194.244:48497] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSIt4E8WZjXLvbHTHPfKJAAAAMI"]
[Sun Nov 23 05:40:50.008155 2025] [proxy_fcgi:error] [pid 44652:tid 44711] [client 45.131.194.241:50919] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:50.370725 2025] [:error] [pid 44652:tid 44724] [client 45.131.194.241:50919] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSIt4tiQFwsyXQDhwyDMMAAAARI"]
[Sun Nov 23 05:40:51.842790 2025] [:error] [pid 38740:tid 38819] [client 45.146.54.26:47051] [client 45.146.54.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSIt4w13QPZSi6O8umWcFQAAAJc"]
[Sun Nov 23 05:40:52.575007 2025] [proxy_fcgi:error] [pid 38740:tid 38808] [client 45.146.54.5:61117] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:52.937740 2025] [:error] [pid 38740:tid 38813] [client 45.146.54.5:61117] [client 45.146.54.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSIt5A13QPZSi6O8umWcGAAAAJE"]
[Sun Nov 23 05:40:54.092709 2025] [:error] [pid 38824:tid 38841] [client 45.146.54.11:22981] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSIt5k8WZjXLvbHTHPfKKQAAAM4"]
[Sun Nov 23 05:40:55.970994 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 45.131.194.247:52973] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:56.313916 2025] [:error] [pid 38824:tid 38850] [client 45.131.194.247:52973] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSIt6E8WZjXLvbHTHPfKNAAAANc"]
[Sun Nov 23 05:40:58.092233 2025] [:error] [pid 38740:tid 38811] [client 45.131.194.241:52095] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSIt6g13QPZSi6O8umWcHwAAAI8"]
[Sun Nov 23 05:40:58.868521 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 45.131.194.241:48601] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:40:59.246761 2025] [:error] [pid 38738:tid 38743] [client 45.131.194.241:48601] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSIt6wytc6TL9XavPmPNdAAAAAE"]
[Sun Nov 23 05:40:59.967089 2025] [:error] [pid 38824:tid 38847] [client 45.146.54.10:38169] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSIt608WZjXLvbHTHPfKNgAAANQ"]
[Sun Nov 23 05:41:00.685768 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 45.146.54.6:29241] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:41:01.396601 2025] [:error] [pid 44652:tid 44718] [client 45.146.54.6:29241] [client 45.146.54.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSIt7diQFwsyXQDhwyDMQgAAAQw"]
[Sun Nov 23 05:41:02.286299 2025] [:error] [pid 38824:tid 38836] [client 45.146.54.23:64235] [client 45.146.54.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSIt7k8WZjXLvbHTHPfKOgAAAMk"]
[Sun Nov 23 05:41:05.326784 2025] [:error] [pid 38739:tid 38790] [client 45.131.194.113:33703] [client 45.131.194.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSIt8QdvEgJm2n2cDmoDZQAAAFU"]
[Sun Nov 23 05:41:06.032981 2025] [:error] [pid 38740:tid 38804] [client 45.131.194.242:31675] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSIt8g13QPZSi6O8umWcIgAAAIg"]
[Sun Nov 23 05:41:07.086596 2025] [:error] [pid 38824:tid 38827] [client 45.146.54.10:25551] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSIt808WZjXLvbHTHPfKPQAAAMA"]
[Sun Nov 23 05:41:07.870122 2025] [:error] [pid 38824:tid 38840] [client 45.146.54.34:39837] [client 45.146.54.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSIt808WZjXLvbHTHPfKQAAAAM0"]
[Sun Nov 23 05:41:08.613624 2025] [:error] [pid 44652:tid 44706] [client 45.146.54.3:21637] [client 45.146.54.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSIt9NiQFwsyXQDhwyDMTAAAAQA"]
[Sun Nov 23 05:41:09.340792 2025] [:error] [pid 44652:tid 44721] [client 45.146.54.17:46355] [client 45.146.54.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSIt9diQFwsyXQDhwyDMTgAAAQ8"]
[Sun Nov 23 05:41:11.573179 2025] [:error] [pid 38824:tid 38836] [client 45.131.194.244:29877] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSIt908WZjXLvbHTHPfKSAAAAMk"]
[Sun Nov 23 05:41:12.353295 2025] [:error] [pid 38738:tid 38750] [client 45.131.194.246:51129] [client 45.131.194.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSIt-Aytc6TL9XavPmPNgQAAAAg"]
[Sun Nov 23 05:41:13.560733 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 45.146.54.32:52035] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:41:13.958693 2025] [:error] [pid 38739:tid 38787] [client 45.146.54.32:52035] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSIt-QdvEgJm2n2cDmoDagAAAFI"]
[Sun Nov 23 05:41:14.686834 2025] [:error] [pid 44652:tid 44720] [client 45.146.54.37:37073] [client 45.146.54.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSIt-tiQFwsyXQDhwyDMUQAAAQ4"]
[Sun Nov 23 05:41:16.192282 2025] [:error] [pid 38824:tid 38851] [client 45.146.54.12:30301] [client 45.146.54.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSIt_E8WZjXLvbHTHPfKUQAAANg"]
[Sun Nov 23 05:41:16.912103 2025] [:error] [pid 38739:tid 38793] [client 45.146.54.38:24557] [client 45.146.54.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSIt_AdvEgJm2n2cDmoDawAAAFg"]
[Sun Nov 23 05:41:20.329056 2025] [:error] [pid 38739:tid 38792] [client 45.131.194.242:37023] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSIuAAdvEgJm2n2cDmoDeQAAAFc"]
[Sun Nov 23 05:41:21.050276 2025] [:error] [pid 44652:tid 44710] [client 45.146.54.30:41093] [client 45.146.54.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSIuAdiQFwsyXQDhwyDMVQAAAQQ"]
[Sun Nov 23 05:41:22.523345 2025] [:error] [pid 38740:tid 38818] [client 45.146.54.7:46621] [client 45.146.54.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSIuAg13QPZSi6O8umWcMAAAAJY"]
[Sun Nov 23 05:41:23.586990 2025] [:error] [pid 44652:tid 44716] [client 45.131.194.247:40061] [client 45.131.194.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSIuA9iQFwsyXQDhwyDMWAAAAQo"]
[Sun Nov 23 05:41:24.764081 2025] [:error] [pid 38739:tid 38790] [client 45.131.194.113:54543] [client 45.131.194.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSIuBAdvEgJm2n2cDmoDgQAAAFU"]
[Sun Nov 23 05:41:25.519044 2025] [:error] [pid 38739:tid 38774] [client 45.131.194.242:34705] [client 45.131.194.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSIuBQdvEgJm2n2cDmoDggAAAEU"]
[Sun Nov 23 05:41:26.246693 2025] [:error] [pid 38738:tid 38756] [client 45.146.54.14:22537] [client 45.146.54.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSIuBgytc6TL9XavPmPNhwAAAA4"]
[Sun Nov 23 05:41:28.083850 2025] [:error] [pid 38739:tid 38786] [client 45.131.194.241:53715] [client 45.131.194.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSIuCAdvEgJm2n2cDmoDhwAAAFE"]
[Sun Nov 23 05:41:28.813964 2025] [proxy_fcgi:error] [pid 44652:tid 44717] [client 45.146.54.10:34289] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:41:29.164872 2025] [:error] [pid 44652:tid 44716] [client 45.146.54.10:34289] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSIuCdiQFwsyXQDhwyDMZAAAAQo"]
[Sun Nov 23 05:41:30.631828 2025] [proxy_fcgi:error] [pid 38824:tid 38838] [client 45.146.54.16:45333] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:41:31.009815 2025] [:error] [pid 38824:tid 38847] [client 45.146.54.16:45333] [client 45.146.54.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSIuC08WZjXLvbHTHPfKWgAAANQ"]
[Sun Nov 23 05:41:31.746109 2025] [:error] [pid 44652:tid 44711] [client 45.146.54.11:31615] [client 45.146.54.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSIuC9iQFwsyXQDhwyDMaAAAAQU"]
[Sun Nov 23 05:41:32.835316 2025] [:error] [pid 44652:tid 44720] [client 45.146.54.32:53529] [client 45.146.54.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSIuDNiQFwsyXQDhwyDMawAAAQ4"]
[Sun Nov 23 05:41:35.500397 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 45.146.54.14:46745] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 05:41:36.970942 2025] [:error] [pid 44652:tid 44723] [client 45.146.54.14:46745] [client 45.146.54.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSIuENiQFwsyXQDhwyDMfgAAARE"]
[Sun Nov 23 05:41:38.055144 2025] [:error] [pid 38739:tid 38781] [client 45.146.54.8:44315] [client 45.146.54.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSIuEgdvEgJm2n2cDmoDlgAAAEw"]
[Sun Nov 23 05:41:39.493951 2025] [:error] [pid 38739:tid 38792] [client 45.131.194.244:34753] [client 45.131.194.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSIuEwdvEgJm2n2cDmoDmwAAAFc"]
[Sun Nov 23 05:41:40.223520 2025] [:error] [pid 38740:tid 38806] [client 45.131.194.248:29631] [client 45.131.194.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSIuFA13QPZSi6O8umWcQgAAAIo"]
[Sun Nov 23 05:41:40.926470 2025] [:error] [pid 38738:tid 38757] [client 45.146.54.10:35837] [client 45.146.54.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSIuFAytc6TL9XavPmPNlAAAAA8"]
[Sun Nov 23 08:07:12.131568 2025] [:error] [pid 38738:tid 38747] [client 54.254.210.246:48650] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aSJQMAytc6TL9XavPmMH0wAAAAU"]
[Sun Nov 23 08:07:12.778387 2025] [:error] [pid 38739:tid 38792] [client 54.254.210.246:48990] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aSJQMAdvEgJm2n2cDmpMDwAAAFc"]
[Sun Nov 23 08:07:13.748229 2025] [:error] [pid 38739:tid 38769] [client 54.254.210.246:49500] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "aSJQMQdvEgJm2n2cDmpMFQAAAEA"]
[Sun Nov 23 08:07:27.112293 2025] [:error] [pid 38740:tid 38818] [client 54.254.210.246:54476] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "aSJQPw13QPZSi6O8umXNLQAAAJY"]
[Sun Nov 23 08:07:30.319894 2025] [:error] [pid 38740:tid 38807] [client 54.254.210.246:54920] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "aSJQQg13QPZSi6O8umXNNwAAAIs"]
[Sun Nov 23 08:07:31.337745 2025] [:error] [pid 38740:tid 38806] [client 54.254.210.246:55580] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "aSJQQw13QPZSi6O8umXNOQAAAIo"]
[Sun Nov 23 08:07:32.186044 2025] [:error] [pid 38739:tid 38789] [client 54.254.210.246:56296] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aSJQRAdvEgJm2n2cDmpMLAAAAFQ"]
[Sun Nov 23 08:07:44.182728 2025] [:error] [pid 38739:tid 38780] [client 54.254.210.246:60298] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "aSJQUAdvEgJm2n2cDmpMRQAAAEs"]
[Sun Nov 23 08:07:44.203650 2025] [:error] [pid 38739:tid 38788] [client 54.254.210.246:60316] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "aSJQUAdvEgJm2n2cDmpMRgAAAFM"]
[Sun Nov 23 08:07:44.204413 2025] [:error] [pid 38739:tid 38786] [client 54.254.210.246:60294] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "aSJQUAdvEgJm2n2cDmpMRwAAAFE"]
[Sun Nov 23 08:07:44.892321 2025] [:error] [pid 38740:tid 38798] [client 54.254.210.246:60632] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "aSJQUA13QPZSi6O8umXNSQAAAII"]
[Sun Nov 23 08:07:44.924383 2025] [:error] [pid 38739:tid 38772] [client 54.254.210.246:60552] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.sample"] [unique_id "aSJQUAdvEgJm2n2cDmpMSwAAAEM"]
[Sun Nov 23 08:08:00.901468 2025] [:error] [pid 38738:tid 38761] [client 54.254.210.246:37814] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "aSJQYAytc6TL9XavPmMIUwAAABM"]
[Sun Nov 23 08:08:01.204775 2025] [:error] [pid 38824:tid 38848] [client 54.254.210.246:37810] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "aSJQYU8WZjXLvbHTHPf80QAAANU"]
[Sun Nov 23 08:08:01.308040 2025] [:error] [pid 38738:tid 38758] [client 54.254.210.246:37948] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.orig"] [unique_id "aSJQYQytc6TL9XavPmMIVgAAABA"]
[Sun Nov 23 08:08:01.423645 2025] [:error] [pid 38824:tid 38843] [client 54.254.210.246:38004] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.swp"] [unique_id "aSJQYU8WZjXLvbHTHPf80gAAANA"]
[Sun Nov 23 08:08:01.576471 2025] [:error] [pid 38740:tid 38809] [client 54.254.210.246:38048] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.tmp"] [unique_id "aSJQYQ13QPZSi6O8umXNXwAAAI0"]
[Sun Nov 23 08:08:19.142339 2025] [:error] [pid 38739:tid 38777] [client 54.254.210.246:43760] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dist"] [unique_id "aSJQcwdvEgJm2n2cDmpMuwAAAEg"]
[Sun Nov 23 08:08:19.340224 2025] [:error] [pid 38738:tid 38758] [client 54.254.210.246:43920] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env"] [unique_id "aSJQcwytc6TL9XavPmMIdQAAABA"]
[Sun Nov 23 08:08:19.407601 2025] [:error] [pid 38738:tid 38748] [client 54.254.210.246:43756] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.old"] [unique_id "aSJQcwytc6TL9XavPmMIdgAAAAY"]
[Sun Nov 23 08:08:19.504619 2025] [:error] [pid 38824:tid 38827] [client 54.254.210.246:43878] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.save"] [unique_id "aSJQc08WZjXLvbHTHPf9AwAAAMA"]
[Sun Nov 23 08:08:21.845722 2025] [:error] [pid 38738:tid 38747] [client 54.254.210.246:43844] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.bak"] [unique_id "aSJQdQytc6TL9XavPmMIeQAAAAU"]
[Sun Nov 23 08:08:21.908843 2025] [:error] [pid 38738:tid 38765] [client 54.254.210.246:44140] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "aSJQdQytc6TL9XavPmMIegAAABc"]
[Sun Nov 23 08:08:22.171314 2025] [:error] [pid 38739:tid 38776] [client 54.254.210.246:44160] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.save"] [unique_id "aSJQdgdvEgJm2n2cDmpMxgAAAEc"]
[Sun Nov 23 08:08:37.249442 2025] [:error] [pid 44652:tid 44710] [client 54.254.210.246:50298] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.old"] [unique_id "aSJQhdiQFwsyXQDhwyD-yQAAAQQ"]
[Sun Nov 23 08:08:37.259748 2025] [:error] [pid 38739:tid 38789] [client 54.254.210.246:50294] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.old"] [unique_id "aSJQhQdvEgJm2n2cDmpM4AAAAFQ"]
[Sun Nov 23 08:08:37.342609 2025] [:error] [pid 38739:tid 38790] [client 54.254.210.246:50404] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.bak"] [unique_id "aSJQhQdvEgJm2n2cDmpM4QAAAFU"]
[Sun Nov 23 08:08:37.369174 2025] [:error] [pid 38739:tid 38775] [client 54.254.210.246:50342] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.save"] [unique_id "aSJQhQdvEgJm2n2cDmpM4gAAAEY"]
[Sun Nov 23 08:08:37.391067 2025] [:error] [pid 44652:tid 44713] [client 54.254.210.246:50284] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.bak"] [unique_id "aSJQhdiQFwsyXQDhwyD-ygAAAQc"]
[Sun Nov 23 08:08:39.284840 2025] [:error] [pid 44652:tid 44709] [client 54.254.210.246:50474] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "aSJQh9iQFwsyXQDhwyD-zgAAAQM"]
[Sun Nov 23 08:08:40.134587 2025] [:error] [pid 38740:tid 38817] [client 54.254.210.246:50652] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env"] [unique_id "aSJQiA13QPZSi6O8umXNxAAAAJU"]
[Sun Nov 23 08:08:40.636423 2025] [:error] [pid 38740:tid 38802] [client 54.254.210.246:50880] [client 54.254.210.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env.save"] [unique_id "aSJQiA13QPZSi6O8umXNxgAAAIY"]
[Sun Nov 23 19:11:05.410119 2025] [:error] [pid 16066:tid 16074] [client 176.65.132.18:41690] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSLryfq-c47Q5mW5E9GzXgAAAYU"]
[Mon Nov 24 03:36:08.996774 2025] [:error] [pid 1452:tid 1475] [client 176.65.132.18:50628] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSNiKBKZkEEyVNVXr_nl1wAAAFI"]
[Mon Nov 24 07:41:35.785875 2025] [:error] [pid 12912:tid 12992] [client 172.70.240.105:10201] [client 172.70.240.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSObr5Mj_Lgt36UonYLrXgAAAJc"]
[Mon Nov 24 08:21:23.325561 2025] [:error] [pid 49900:tid 49914] [client 103.65.237.124:56411] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "aSOlAzCyPLrvg06aorlmPAAAAAw"]
[Mon Nov 24 08:21:23.632281 2025] [:error] [pid 48601:tid 48676] [client 103.65.237.124:63712] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOlA4MM4MaVTk74-AYpAgAAAhM"]
[Mon Nov 24 19:41:46.966791 2025] [:error] [pid 9630:tid 9632] [client 24.199.115.153:63595] [client 24.199.115.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.115.153, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aSREeirSgUgPGkizt2oY6gAAAEA"]
[Mon Nov 24 19:41:46.976599 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 24.199.115.153:63595] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 21:34:10.668301 2025] [:error] [pid 16441:tid 16451] [client 3.86.203.189:55410] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aSRe0oq_bc5MOa9HflmPIwAAAIc"]
[Mon Nov 24 21:34:11.479712 2025] [:error] [pid 48688:tid 48704] [client 3.86.203.189:55416] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aSRe0xm2q1FkzLam7A3NaAAAAkw"]
[Mon Nov 24 21:34:12.289658 2025] [:error] [pid 49900:tid 49905] [client 3.86.203.189:55420] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "aSRe1DCyPLrvg06aorlGxwAAAAM"]
[Mon Nov 24 21:34:13.101759 2025] [:error] [pid 49900:tid 49922] [client 3.86.203.189:55426] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "aSRe1TCyPLrvg06aorlGygAAABQ"]
[Mon Nov 24 21:34:13.913157 2025] [:error] [pid 16441:tid 16459] [client 3.86.203.189:44882] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "aSRe1Yq_bc5MOa9HflmPQAAAAI8"]
[Mon Nov 24 21:34:14.723527 2025] [:error] [pid 16593:tid 16603] [client 3.86.203.189:44886] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "aSRe1hVGznHBJI2LKpRqTQAAAog"]
[Mon Nov 24 21:34:15.535820 2025] [:error] [pid 49900:tid 49926] [client 3.86.203.189:44888] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aSRe1zCyPLrvg06aorlGzQAAABg"]
[Mon Nov 24 21:34:16.346192 2025] [:error] [pid 9630:tid 9645] [client 3.86.203.189:44896] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "aSRe2CrSgUgPGkizt2o0uwAAAE0"]
[Mon Nov 24 21:34:17.158882 2025] [:error] [pid 16441:tid 16460] [client 3.86.203.189:44908] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "aSRe2Yq_bc5MOa9HflmPTwAAAJA"]
[Mon Nov 24 21:34:17.980360 2025] [:error] [pid 48599:tid 48608] [client 3.86.203.189:44916] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "aSRe2Zzvu6PDJiRKE3JNnQAAAYU"]
[Mon Nov 24 21:34:18.791482 2025] [:error] [pid 48600:tid 48646] [client 3.86.203.189:44928] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.sample"] [unique_id "aSRe2vtOzSUAQvWVjBegHwAAAdA"]
[Mon Nov 24 21:34:19.602098 2025] [:error] [pid 48600:tid 48635] [client 3.86.203.189:44940] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "aSRe2_tOzSUAQvWVjBegIgAAAcU"]
[Mon Nov 24 21:34:20.419642 2025] [:error] [pid 16441:tid 16450] [client 3.86.203.189:44954] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "aSRe3Iq_bc5MOa9HflmPUgAAAIY"]
[Mon Nov 24 21:34:21.231228 2025] [:error] [pid 16549:tid 16553] [client 3.86.203.189:44958] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "aSRe3aeWW19A99PUw_dmAwAAAUE"]
[Mon Nov 24 21:34:22.042225 2025] [:error] [pid 48688:tid 48711] [client 3.86.203.189:44960] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.orig"] [unique_id "aSRe3hm2q1FkzLam7A3NbQAAAlM"]
[Mon Nov 24 21:34:22.858451 2025] [:error] [pid 48600:tid 48637] [client 3.86.203.189:44974] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.swp"] [unique_id "aSRe3vtOzSUAQvWVjBegIwAAAcc"]
[Mon Nov 24 21:34:23.667879 2025] [:error] [pid 48600:tid 48648] [client 3.86.203.189:59018] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.tmp"] [unique_id "aSRe3_tOzSUAQvWVjBegJAAAAdI"]
[Mon Nov 24 21:34:24.482461 2025] [:error] [pid 16441:tid 16449] [client 3.86.203.189:59034] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dist"] [unique_id "aSRe4Iq_bc5MOa9HflmPVAAAAIU"]
[Mon Nov 24 21:34:25.296166 2025] [:error] [pid 48688:tid 48707] [client 3.86.203.189:59040] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env"] [unique_id "aSRe4Rm2q1FkzLam7A3NcQAAAk8"]
[Mon Nov 24 21:34:26.107537 2025] [:error] [pid 48599:tid 48606] [client 3.86.203.189:59054] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.save"] [unique_id "aSRe4pzvu6PDJiRKE3JNnwAAAYM"]
[Mon Nov 24 21:34:26.916883 2025] [:error] [pid 48688:tid 48701] [client 3.86.203.189:59058] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.bak"] [unique_id "aSRe4hm2q1FkzLam7A3NcwAAAkk"]
[Mon Nov 24 21:34:27.725426 2025] [:error] [pid 48599:tid 48611] [client 3.86.203.189:59070] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env.old"] [unique_id "aSRe45zvu6PDJiRKE3JNogAAAYg"]
[Mon Nov 24 21:34:28.535881 2025] [:error] [pid 9630:tid 9645] [client 3.86.203.189:59080] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "aSRe5CrSgUgPGkizt2o00wAAAE0"]
[Mon Nov 24 21:34:29.347525 2025] [:error] [pid 48688:tid 48700] [client 3.86.203.189:59092] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.save"] [unique_id "aSRe5Rm2q1FkzLam7A3NdAAAAkg"]
[Mon Nov 24 21:34:30.161780 2025] [:error] [pid 16516:tid 16530] [client 3.86.203.189:59106] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.bak"] [unique_id "aSRe5vqZbniwaNwL8XkKrAAAAQs"]
[Mon Nov 24 21:34:30.974661 2025] [:error] [pid 9630:tid 9651] [client 3.86.203.189:59118] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env.old"] [unique_id "aSRe5irSgUgPGkizt2o05wAAAFM"]
[Mon Nov 24 21:34:31.786120 2025] [:error] [pid 9630:tid 9639] [client 3.86.203.189:59124] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "aSRe5yrSgUgPGkizt2o07AAAAEc"]
[Mon Nov 24 21:34:32.595445 2025] [:error] [pid 16593:tid 16605] [client 3.86.203.189:59132] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.save"] [unique_id "aSRe6BVGznHBJI2LKpRqUQAAAoo"]
[Mon Nov 24 21:34:33.406428 2025] [:error] [pid 9630:tid 9637] [client 3.86.203.189:59136] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.bak"] [unique_id "aSRe6SrSgUgPGkizt2o07wAAAEU"]
[Mon Nov 24 21:34:34.216882 2025] [:error] [pid 16549:tid 16558] [client 3.86.203.189:42170] [client 3.86.203.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env.old"] [unique_id "aSRe6qeWW19A99PUw_dmBgAAAUY"]
[Mon Nov 24 21:45:36.637926 2025] [:error] [pid 48599:tid 48625] [client 193.32.126.212:51495] [client 193.32.126.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.32.126.212, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aSRhgJzvu6PDJiRKE3JQKQAAAZY"]
[Mon Nov 24 21:45:36.651668 2025] [proxy_fcgi:error] [pid 48599:tid 48625] [client 193.32.126.212:51495] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 21:45:37.153894 2025] [:error] [pid 48599:tid 48613] [client 193.32.126.212:51495] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgZzvu6PDJiRKE3JQLgAAAYo"]
[Mon Nov 24 21:45:37.646768 2025] [:error] [pid 16516:tid 16536] [client 193.32.126.212:53516] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgfqZbniwaNwL8XkMZQAAARE"]
[Mon Nov 24 21:45:38.140309 2025] [:error] [pid 16593:tid 16599] [client 193.32.126.212:54263] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSRhghVGznHBJI2LKpRr6gAAAoQ"]
[Mon Nov 24 21:45:38.635642 2025] [:error] [pid 16441:tid 16453] [client 193.32.126.212:54778] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgoq_bc5MOa9HflmTQgAAAIk"]
[Mon Nov 24 21:45:39.129804 2025] [:error] [pid 16516:tid 16525] [client 193.32.126.212:55436] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg_qZbniwaNwL8XkMgAAAAQY"]
[Mon Nov 24 21:45:39.623360 2025] [:error] [pid 16441:tid 16454] [client 193.32.126.212:55854] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg4q_bc5MOa9HflmTXgAAAIo"]
[Mon Nov 24 21:45:40.118091 2025] [:error] [pid 48599:tid 48614] [client 193.32.126.212:56361] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhJzvu6PDJiRKE3JQSwAAAYs"]
[Mon Nov 24 21:45:40.611829 2025] [:error] [pid 16441:tid 16460] [client 193.32.126.212:56785] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhIq_bc5MOa9HflmTaQAAAJA"]
[Mon Nov 24 21:45:41.104779 2025] [:error] [pid 16549:tid 16575] [client 193.32.126.212:57209] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhaeWW19A99PUw_doFwAAAVY"]
[Mon Nov 24 21:45:41.599692 2025] [:error] [pid 16516:tid 16534] [client 193.32.126.212:57420] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhfqZbniwaNwL8XkMhAAAAQ8"]
[Mon Nov 24 21:45:42.092195 2025] [:error] [pid 48601:tid 48666] [client 193.32.126.212:57739] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhoMM4MaVTk74-AbnKQAAAgk"]
[Mon Nov 24 21:45:42.584525 2025] [:error] [pid 9630:tid 9645] [client 193.32.126.212:57954] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhirSgUgPGkizt2o4VQAAAE0"]
[Mon Nov 24 21:45:43.078314 2025] [:error] [pid 48600:tid 48652] [client 193.32.126.212:58261] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSRhh_tOzSUAQvWVjBeiKwAAAdY"]
[Mon Nov 24 21:45:43.572866 2025] [:error] [pid 49900:tid 49915] [client 193.32.126.212:58518] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhzCyPLrvg06aorlJsAAAAA0"]
[Mon Nov 24 21:45:44.066639 2025] [:error] [pid 16516:tid 16542] [client 193.32.126.212:58758] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSRhiPqZbniwaNwL8XkMkgAAARc"]
[Mon Nov 24 21:45:44.561387 2025] [:error] [pid 48600:tid 48637] [client 193.32.126.212:59022] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSRhiPtOzSUAQvWVjBeiOQAAAcc"]
[Tue Nov 25 03:57:04.998126 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:05.236204 2025] [proxy_fcgi:error] [pid 14688:tid 14706] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:05.467791 2025] [proxy_fcgi:error] [pid 14688:tid 14710] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:05.684035 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:05.896361 2025] [proxy_fcgi:error] [pid 14688:tid 14696] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:06.350040 2025] [proxy_fcgi:error] [pid 14688:tid 14698] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:06.565270 2025] [proxy_fcgi:error] [pid 14688:tid 14704] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:06.800483 2025] [proxy_fcgi:error] [pid 14688:tid 14712] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:07.020935 2025] [proxy_fcgi:error] [pid 14688:tid 14701] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:07.237703 2025] [proxy_fcgi:error] [pid 14688:tid 14705] [client 172.177.203.12:6683] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:57:07.472921 2025] [:error] [pid 14688:tid 14700] [client 172.177.203.12:6683] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "aSS4k29vYrBoEsiDnizGYQAAAQo"]
[Tue Nov 25 03:57:13.741154 2025] [:error] [pid 14076:tid 14083] [client 172.177.203.12:5727] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "aSS4mXsB4Gz6Qw-pvBv2XwAAAAI"]
[Tue Nov 25 03:57:20.801855 2025] [:error] [pid 14688:tid 14711] [client 172.177.203.12:5871] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "aSS4oG9vYrBoEsiDnizGeAAAARU"]
[Tue Nov 25 03:57:22.436871 2025] [:error] [pid 14688:tid 14691] [client 172.177.203.12:6657] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "aSS4om9vYrBoEsiDnizGfQAAAQE"]
[Tue Nov 25 03:57:25.476727 2025] [:error] [pid 14077:tid 14134] [client 172.177.203.12:5745] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file1.php"] [unique_id "aSS4pRG9n7UHEkwDTyg4tAAAAFg"]
[Tue Nov 25 03:57:27.128542 2025] [:error] [pid 14078:tid 14148] [client 172.177.203.12:5006] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file1.php"] [unique_id "aSS4p9VXYbb0ii_rVoIyGQAAAIs"]
[Tue Nov 25 03:57:28.914146 2025] [:error] [pid 14688:tid 14710] [client 172.177.203.12:4968] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file1.php"] [unique_id "aSS4qG9vYrBoEsiDnizGjAAAARQ"]
[Tue Nov 25 03:57:31.207944 2025] [:error] [pid 14076:tid 14090] [client 172.177.203.12:4929] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file1.php"] [unique_id "aSS4q3sB4Gz6Qw-pvBv2cAAAAAk"]
[Tue Nov 25 03:57:32.789927 2025] [:error] [pid 14078:tid 14152] [client 172.177.203.12:4454] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file2.php"] [unique_id "aSS4rNVXYbb0ii_rVoIyHAAAAI8"]
[Tue Nov 25 03:57:33.572001 2025] [:error] [pid 14168:tid 14174] [client 172.177.203.12:2734] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file2.php"] [unique_id "aSS4rfR-ZDU0QEgAIItNTgAAAMM"]
[Tue Nov 25 03:57:38.158736 2025] [:error] [pid 14076:tid 14086] [client 172.177.203.12:4438] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file2.php"] [unique_id "aSS4snsB4Gz6Qw-pvBv2eQAAAAU"]
[Tue Nov 25 03:57:41.234810 2025] [:error] [pid 14078:tid 14151] [client 172.177.203.12:3087] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file2.php"] [unique_id "aSS4tdVXYbb0ii_rVoIyJgAAAI4"]
[Tue Nov 25 03:57:43.717174 2025] [:error] [pid 14168:tid 14190] [client 172.177.203.12:4470] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file5.php"] [unique_id "aSS4t_R-ZDU0QEgAIItNXAAAANM"]
[Tue Nov 25 03:57:49.112188 2025] [:error] [pid 14688:tid 14702] [client 172.177.203.12:1295] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file5.php"] [unique_id "aSS4vW9vYrBoEsiDnizGvAAAAQw"]
[Tue Nov 25 03:57:52.820743 2025] [:error] [pid 14688:tid 14707] [client 172.177.203.12:3845] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file5.php"] [unique_id "aSS4wG9vYrBoEsiDnizGywAAARE"]
[Tue Nov 25 03:58:02.507201 2025] [:error] [pid 14078:tid 14151] [client 172.177.203.12:1412] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file17.php"] [unique_id "aSS4ytVXYbb0ii_rVoIyMwAAAI4"]
[Tue Nov 25 03:58:04.642222 2025] [:error] [pid 14076:tid 14099] [client 172.177.203.12:3856] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file17.php"] [unique_id "aSS4zHsB4Gz6Qw-pvBv2mAAAABI"]
[Tue Nov 25 03:58:06.183215 2025] [:error] [pid 14688:tid 14703] [client 172.177.203.12:1445] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file17.php"] [unique_id "aSS4zm9vYrBoEsiDnizG7wAAAQ0"]
[Tue Nov 25 03:58:10.675545 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:11.101851 2025] [proxy_fcgi:error] [pid 14078:tid 14161] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:11.314962 2025] [proxy_fcgi:error] [pid 14078:tid 14145] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:11.526161 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:11.736716 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:11.947263 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:12.156262 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:12.386402 2025] [proxy_fcgi:error] [pid 14078:tid 14150] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:13.019224 2025] [proxy_fcgi:error] [pid 14078:tid 14154] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:13.240847 2025] [proxy_fcgi:error] [pid 14078:tid 14151] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:13.890050 2025] [proxy_fcgi:error] [pid 14078:tid 14158] [client 172.177.203.12:5811] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:58:14.110067 2025] [:error] [pid 14078:tid 14148] [client 172.177.203.12:5811] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/520.php"] [unique_id "aSS41tVXYbb0ii_rVoIyRgAAAIs"]
[Tue Nov 25 03:58:18.196791 2025] [:error] [pid 14168:tid 14184] [client 172.177.203.12:3637] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/520.php"] [unique_id "aSS42vR-ZDU0QEgAIItNnAAAAM0"]
[Tue Nov 25 03:58:20.785622 2025] [:error] [pid 14688:tid 14705] [client 172.177.203.12:6049] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/520.php"] [unique_id "aSS43G9vYrBoEsiDnizHHAAAAQ8"]
[Tue Nov 25 03:58:21.638834 2025] [:error] [pid 14077:tid 14120] [client 172.177.203.12:2537] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/520.php"] [unique_id "aSS43RG9n7UHEkwDTyg4-AAAAEo"]
[Tue Nov 25 03:58:23.566984 2025] [:error] [pid 14688:tid 14690] [client 172.177.203.12:5727] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/031.php"] [unique_id "aSS4329vYrBoEsiDnizHKwAAAQA"]
[Tue Nov 25 03:58:24.943282 2025] [:error] [pid 14076:tid 14102] [client 172.177.203.12:3611] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/031.php"] [unique_id "aSS44HsB4Gz6Qw-pvBv2vQAAABU"]
[Tue Nov 25 03:58:26.128827 2025] [:error] [pid 14076:tid 14082] [client 172.177.203.12:3653] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/031.php"] [unique_id "aSS44nsB4Gz6Qw-pvBv2zwAAAAE"]
[Tue Nov 25 03:58:28.633077 2025] [:error] [pid 14076:tid 14087] [client 172.177.203.12:2544] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/031.php"] [unique_id "aSS45HsB4Gz6Qw-pvBv21AAAAAY"]
[Tue Nov 25 03:58:32.349921 2025] [:error] [pid 14078:tid 14153] [client 172.177.203.12:6058] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file7.php"] [unique_id "aSS46NVXYbb0ii_rVoIyfgAAAJA"]
[Tue Nov 25 03:58:35.883227 2025] [:error] [pid 14688:tid 14693] [client 172.177.203.12:6029] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file7.php"] [unique_id "aSS4629vYrBoEsiDnizHUQAAAQM"]
[Tue Nov 25 03:58:40.189381 2025] [:error] [pid 14077:tid 14131] [client 172.177.203.12:6776] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file7.php"] [unique_id "aSS48BG9n7UHEkwDTyg5EAAAAFU"]
[Tue Nov 25 03:58:42.911617 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:2570] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file7.php"] [unique_id "aSS48vR-ZDU0QEgAIItOFgAAAMc"]
[Tue Nov 25 03:58:45.885342 2025] [:error] [pid 14688:tid 14699] [client 172.177.203.12:2928] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file4.php"] [unique_id "aSS49W9vYrBoEsiDnizHiAAAAQk"]
[Tue Nov 25 03:58:51.581862 2025] [:error] [pid 14078:tid 14159] [client 172.177.203.12:2595] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file4.php"] [unique_id "aSS4-9VXYbb0ii_rVoIyjwAAAJY"]
[Tue Nov 25 03:58:54.840052 2025] [:error] [pid 14168:tid 14186] [client 172.177.203.12:2915] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file4.php"] [unique_id "aSS4_vR-ZDU0QEgAIItOIwAAAM8"]
[Tue Nov 25 03:58:55.907659 2025] [:error] [pid 14688:tid 14695] [client 172.177.203.12:6014] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file4.php"] [unique_id "aSS4_29vYrBoEsiDnizHoQAAAQU"]
[Tue Nov 25 03:58:57.020715 2025] [:error] [pid 14076:tid 14105] [client 172.177.203.12:3249] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2%25.php"] [unique_id "aSS5AXsB4Gz6Qw-pvBv29gAAABg"]
[Tue Nov 25 03:58:59.630856 2025] [:error] [pid 14076:tid 14095] [client 172.177.203.12:2588] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2%25.php"] [unique_id "aSS5A3sB4Gz6Qw-pvBv2-AAAAA4"]
[Tue Nov 25 03:59:02.023218 2025] [:error] [pid 14077:tid 14124] [client 172.177.203.12:2899] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2%25.php"] [unique_id "aSS5BhG9n7UHEkwDTyg5LAAAAE4"]
[Tue Nov 25 03:59:05.328296 2025] [:error] [pid 14076:tid 14104] [client 172.177.203.12:6148] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2%25.php"] [unique_id "aSS5CXsB4Gz6Qw-pvBv3DAAAABc"]
[Tue Nov 25 03:59:06.180772 2025] [:error] [pid 14168:tid 14171] [client 172.177.203.12:2659] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1%25.php"] [unique_id "aSS5CvR-ZDU0QEgAIItOSwAAAMA"]
[Tue Nov 25 03:59:08.833008 2025] [:error] [pid 14688:tid 14700] [client 172.177.203.12:2680] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1%25.php"] [unique_id "aSS5DG9vYrBoEsiDnizHpQAAAQo"]
[Tue Nov 25 03:59:10.935960 2025] [:error] [pid 14688:tid 14705] [client 172.177.203.12:5156] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1%25.php"] [unique_id "aSS5Dm9vYrBoEsiDnizHqQAAAQ8"]
[Tue Nov 25 03:59:14.558454 2025] [proxy_fcgi:error] [pid 14077:tid 14125] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:14.866393 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:15.096018 2025] [proxy_fcgi:error] [pid 14077:tid 14119] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:15.310340 2025] [proxy_fcgi:error] [pid 14077:tid 14122] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:16.829642 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:17.280127 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:17.712307 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:17.927630 2025] [proxy_fcgi:error] [pid 14077:tid 14110] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:18.142908 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:18.388008 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:19.861336 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 172.177.203.12:4016] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:59:20.076656 2025] [:error] [pid 14077:tid 14129] [client 172.177.203.12:4016] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aSS5GBG9n7UHEkwDTyg5QQAAAFM"]
[Tue Nov 25 03:59:26.213653 2025] [:error] [pid 14077:tid 14119] [client 172.177.203.12:6447] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aSS5HhG9n7UHEkwDTyg5SQAAAEk"]
[Tue Nov 25 03:59:27.709361 2025] [:error] [pid 14168:tid 14177] [client 172.177.203.12:6626] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aSS5H_R-ZDU0QEgAIItOXwAAAMY"]
[Tue Nov 25 03:59:30.122204 2025] [:error] [pid 14078:tid 14152] [client 172.177.203.12:6595] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfile.php"] [unique_id "aSS5ItVXYbb0ii_rVoIyvwAAAI8"]
[Tue Nov 25 03:59:38.924681 2025] [:error] [pid 14076:tid 14082] [client 172.177.203.12:5215] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file6.php"] [unique_id "aSS5KnsB4Gz6Qw-pvBv3GwAAAAE"]
[Tue Nov 25 03:59:41.042849 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:5220] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file6.php"] [unique_id "aSS5LfR-ZDU0QEgAIItOegAAAMc"]
[Tue Nov 25 03:59:46.324443 2025] [:error] [pid 14688:tid 14698] [client 172.177.203.12:4666] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/eauu.php"] [unique_id "aSS5Mm9vYrBoEsiDnizHuwAAAQg"]
[Tue Nov 25 03:59:49.375986 2025] [:error] [pid 14688:tid 14695] [client 172.177.203.12:5615] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/eauu.php"] [unique_id "aSS5NW9vYrBoEsiDnizHvwAAAQU"]
[Tue Nov 25 03:59:50.769937 2025] [:error] [pid 14076:tid 14084] [client 172.177.203.12:4645] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/eauu.php"] [unique_id "aSS5NnsB4Gz6Qw-pvBv3IQAAAAM"]
[Tue Nov 25 03:59:51.541214 2025] [:error] [pid 14077:tid 14132] [client 172.177.203.12:4726] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/eauu.php"] [unique_id "aSS5NxG9n7UHEkwDTyg5ZAAAAFY"]
[Tue Nov 25 03:59:52.848290 2025] [:error] [pid 14076:tid 14093] [client 172.177.203.12:3522] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aSS5OHsB4Gz6Qw-pvBv3IgAAAAw"]
[Tue Nov 25 03:59:56.629124 2025] [:error] [pid 14078:tid 14141] [client 172.177.203.12:5236] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aSS5PNVXYbb0ii_rVoIy2QAAAIQ"]
[Tue Nov 25 03:59:58.360528 2025] [:error] [pid 14168:tid 14191] [client 172.177.203.12:5684] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aSS5PvR-ZDU0QEgAIItOggAAANQ"]
[Tue Nov 25 04:00:00.988464 2025] [:error] [pid 14076:tid 14091] [client 172.177.203.12:4697] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aSS5QHsB4Gz6Qw-pvBv3JgAAAAo"]
[Tue Nov 25 04:00:03.432681 2025] [:error] [pid 14168:tid 14174] [client 172.177.203.12:6334] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aSS5Q_R-ZDU0QEgAIItOiQAAAMM"]
[Tue Nov 25 04:00:04.490060 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:6330] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aSS5RPR-ZDU0QEgAIItOiwAAANc"]
[Tue Nov 25 04:00:09.426631 2025] [:error] [pid 14168:tid 14179] [client 172.177.203.12:2878] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aSS5SfR-ZDU0QEgAIItOlAAAAMg"]
[Tue Nov 25 04:00:11.085457 2025] [:error] [pid 14688:tid 14713] [client 172.177.203.12:4721] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aSS5S29vYrBoEsiDnizHxQAAARc"]
[Tue Nov 25 04:00:12.443290 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:5675] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cccc.php"] [unique_id "aSS5TPR-ZDU0QEgAIItOlwAAANc"]
[Tue Nov 25 04:00:13.610745 2025] [:error] [pid 14077:tid 14111] [client 172.177.203.12:1630] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cccc.php"] [unique_id "aSS5TRG9n7UHEkwDTyg5ggAAAEE"]
[Tue Nov 25 04:00:14.670030 2025] [:error] [pid 14688:tid 14697] [client 172.177.203.12:3560] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cccc.php"] [unique_id "aSS5Tm9vYrBoEsiDnizHyAAAAQc"]
[Tue Nov 25 04:00:17.241997 2025] [:error] [pid 14076:tid 14096] [client 172.177.203.12:3566] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cccc.php"] [unique_id "aSS5UXsB4Gz6Qw-pvBv3LgAAAA8"]
[Tue Nov 25 04:00:20.992813 2025] [proxy_fcgi:error] [pid 14076:tid 14095] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:21.219266 2025] [proxy_fcgi:error] [pid 14076:tid 14089] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:21.433695 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:21.973612 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:22.188320 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:22.402599 2025] [proxy_fcgi:error] [pid 14076:tid 14099] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:23.113995 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:23.689272 2025] [proxy_fcgi:error] [pid 14076:tid 14098] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:23.902347 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:24.139012 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:24.361525 2025] [proxy_fcgi:error] [pid 14076:tid 14094] [client 172.177.203.12:1475] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:00:24.593892 2025] [:error] [pid 14076:tid 14096] [client 172.177.203.12:1475] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aSS5WHsB4Gz6Qw-pvBv3PwAAAA8"]
[Tue Nov 25 04:00:26.306280 2025] [:error] [pid 14688:tid 14713] [client 172.177.203.12:4321] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aSS5Wm9vYrBoEsiDnizH0gAAARc"]
[Tue Nov 25 04:00:28.874789 2025] [:error] [pid 14076:tid 14082] [client 172.177.203.12:4295] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aSS5XHsB4Gz6Qw-pvBv3SQAAAAE"]
[Tue Nov 25 04:00:30.179864 2025] [:error] [pid 14168:tid 14180] [client 172.177.203.12:2851] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aSS5XvR-ZDU0QEgAIItOqQAAAMk"]
[Tue Nov 25 04:00:32.525384 2025] [:error] [pid 14168:tid 14182] [client 172.177.203.12:4306] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vast.php"] [unique_id "aSS5YPR-ZDU0QEgAIItOqwAAAMs"]
[Tue Nov 25 04:00:33.830209 2025] [:error] [pid 14077:tid 14112] [client 172.177.203.12:1521] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vast.php"] [unique_id "aSS5YRG9n7UHEkwDTyg5igAAAEI"]
[Tue Nov 25 04:00:38.480727 2025] [:error] [pid 14168:tid 14177] [client 172.177.203.12:1675] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vast.php"] [unique_id "aSS5ZvR-ZDU0QEgAIItOrwAAAMY"]
[Tue Nov 25 04:00:39.791686 2025] [:error] [pid 14168:tid 14185] [client 172.177.203.12:1672] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vast.php"] [unique_id "aSS5Z_R-ZDU0QEgAIItOswAAAM4"]
[Tue Nov 25 04:00:43.951294 2025] [:error] [pid 14078:tid 14158] [client 172.177.203.12:3363] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cool.php"] [unique_id "aSS5a9VXYbb0ii_rVoIy9wAAAJU"]
[Tue Nov 25 04:00:45.356085 2025] [:error] [pid 14077:tid 14118] [client 172.177.203.12:1626] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cool.php"] [unique_id "aSS5bRG9n7UHEkwDTyg5jwAAAEg"]
[Tue Nov 25 04:00:47.231077 2025] [:error] [pid 14076:tid 14105] [client 172.177.203.12:6280] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cool.php"] [unique_id "aSS5b3sB4Gz6Qw-pvBv3WwAAABg"]
[Tue Nov 25 04:00:48.016483 2025] [:error] [pid 14168:tid 14172] [client 172.177.203.12:2006] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cool.php"] [unique_id "aSS5cPR-ZDU0QEgAIItOwAAAAME"]
[Tue Nov 25 04:00:49.106374 2025] [:error] [pid 14168:tid 14192] [client 172.177.203.12:2009] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aSS5cfR-ZDU0QEgAIItOwgAAANU"]
[Tue Nov 25 04:00:50.338402 2025] [:error] [pid 14688:tid 14699] [client 172.177.203.12:2974] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aSS5cm9vYrBoEsiDnizH5AAAAQk"]
[Tue Nov 25 04:00:51.066319 2025] [:error] [pid 14077:tid 14124] [client 172.177.203.12:5281] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aSS5cxG9n7UHEkwDTyg5lQAAAE4"]
[Tue Nov 25 04:00:53.808464 2025] [:error] [pid 14168:tid 14191] [client 172.177.203.12:1209] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yanki.php"] [unique_id "aSS5dfR-ZDU0QEgAIItOxwAAANQ"]
[Tue Nov 25 04:00:54.628184 2025] [:error] [pid 14076:tid 14088] [client 172.177.203.12:1971] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aSS5dnsB4Gz6Qw-pvBv3XwAAAAc"]
[Tue Nov 25 04:00:55.811350 2025] [:error] [pid 14168:tid 14190] [client 172.177.203.12:3353] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aSS5d_R-ZDU0QEgAIItOygAAANM"]
[Tue Nov 25 04:00:58.586877 2025] [:error] [pid 14168:tid 14184] [client 172.177.203.12:3374] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aSS5evR-ZDU0QEgAIItOzQAAAM0"]
[Tue Nov 25 04:00:59.552032 2025] [:error] [pid 14078:tid 14154] [client 172.177.203.12:4172] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aSS5e9VXYbb0ii_rVoIzBQAAAJE"]
[Tue Nov 25 04:01:02.776981 2025] [:error] [pid 14076:tid 14105] [client 172.177.203.12:3912] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nfile.php"] [unique_id "aSS5fnsB4Gz6Qw-pvBv3agAAABg"]
[Tue Nov 25 04:01:07.893207 2025] [:error] [pid 14076:tid 14087] [client 172.177.203.12:2995] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nfile.php"] [unique_id "aSS5g3sB4Gz6Qw-pvBv3dwAAAAY"]
[Tue Nov 25 04:01:11.015944 2025] [:error] [pid 14168:tid 14185] [client 172.177.203.12:3370] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nfile.php"] [unique_id "aSS5h_R-ZDU0QEgAIItO7QAAAM4"]
[Tue Nov 25 04:01:12.363260 2025] [:error] [pid 14168:tid 14192] [client 172.177.203.12:2042] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nfile.php"] [unique_id "aSS5iPR-ZDU0QEgAIItO8AAAANU"]
[Tue Nov 25 04:01:13.545834 2025] [:error] [pid 14688:tid 14696] [client 172.177.203.12:3904] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ilex.php"] [unique_id "aSS5iW9vYrBoEsiDnizH_AAAAQY"]
[Tue Nov 25 04:01:15.902170 2025] [:error] [pid 14688:tid 14704] [client 172.177.203.12:6284] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ilex.php"] [unique_id "aSS5i29vYrBoEsiDnizH_QAAAQ4"]
[Tue Nov 25 04:01:19.327818 2025] [:error] [pid 14077:tid 14120] [client 172.177.203.12:3911] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ilex.php"] [unique_id "aSS5jxG9n7UHEkwDTyg5tQAAAEo"]
[Tue Nov 25 04:01:21.690378 2025] [:error] [pid 14076:tid 14100] [client 172.177.203.12:3336] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ilex.php"] [unique_id "aSS5kXsB4Gz6Qw-pvBv3gQAAABM"]
[Tue Nov 25 04:01:23.453943 2025] [:error] [pid 14076:tid 14089] [client 172.177.203.12:5272] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/des.php"] [unique_id "aSS5k3sB4Gz6Qw-pvBv3gwAAAAg"]
[Tue Nov 25 04:01:25.425625 2025] [proxy_fcgi:error] [pid 14077:tid 14127] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:25.994635 2025] [proxy_fcgi:error] [pid 14077:tid 14129] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:26.225946 2025] [proxy_fcgi:error] [pid 14077:tid 14125] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:26.453768 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:26.663485 2025] [proxy_fcgi:error] [pid 14077:tid 14121] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:26.898618 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:27.109711 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:27.364358 2025] [proxy_fcgi:error] [pid 14077:tid 14126] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:27.575081 2025] [proxy_fcgi:error] [pid 14077:tid 14125] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:27.787431 2025] [proxy_fcgi:error] [pid 14077:tid 14122] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:27.999132 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 172.177.203.12:5307] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:01:28.386877 2025] [:error] [pid 14077:tid 14134] [client 172.177.203.12:5307] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSS5mBG9n7UHEkwDTyg53wAAAFg"]
[Tue Nov 25 04:01:32.775912 2025] [:error] [pid 14688:tid 14709] [client 172.177.203.12:5284] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSS5nG9vYrBoEsiDnizIBQAAARM"]
[Tue Nov 25 04:01:33.940955 2025] [:error] [pid 14078:tid 14154] [client 172.177.203.12:3945] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSS5ndVXYbb0ii_rVoIzPwAAAJE"]
[Tue Nov 25 04:01:35.136464 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:2020] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSS5n_R-ZDU0QEgAIItPDgAAAMc"]
[Tue Nov 25 04:01:36.345721 2025] [:error] [pid 14168:tid 14181] [client 172.177.203.12:1951] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "aSS5oPR-ZDU0QEgAIItPDwAAAMo"]
[Tue Nov 25 04:01:37.614564 2025] [:error] [pid 14168:tid 14179] [client 172.177.203.12:3348] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "aSS5ofR-ZDU0QEgAIItPEAAAAMg"]
[Tue Nov 25 04:01:39.431343 2025] [:error] [pid 14078:tid 14151] [client 172.177.203.12:3341] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "aSS5o9VXYbb0ii_rVoIzSQAAAI4"]
[Tue Nov 25 04:01:41.435111 2025] [:error] [pid 14077:tid 14110] [client 172.177.203.12:1206] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "aSS5pRG9n7UHEkwDTyg6EwAAAEA"]
[Tue Nov 25 04:01:43.041488 2025] [:error] [pid 14078:tid 14156] [client 172.177.203.12:1994] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dfre.php"] [unique_id "aSS5p9VXYbb0ii_rVoIzTwAAAJM"]
[Tue Nov 25 04:01:48.054428 2025] [:error] [pid 14076:tid 14081] [client 172.177.203.12:3936] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dfre.php"] [unique_id "aSS5rHsB4Gz6Qw-pvBv3jAAAAAA"]
[Tue Nov 25 04:01:54.013670 2025] [:error] [pid 14076:tid 14088] [client 172.177.203.12:5298] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dfre.php"] [unique_id "aSS5snsB4Gz6Qw-pvBv3jwAAAAc"]
[Tue Nov 25 04:01:59.087670 2025] [:error] [pid 14688:tid 14696] [client 172.177.203.12:2026] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aSS5t29vYrBoEsiDnizIFAAAAQY"]
[Tue Nov 25 04:02:00.858247 2025] [:error] [pid 14168:tid 14176] [client 172.177.203.12:3387] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aSS5uPR-ZDU0QEgAIItPIAAAAMU"]
[Tue Nov 25 04:02:01.857870 2025] [:error] [pid 14168:tid 14181] [client 172.177.203.12:1988] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aSS5ufR-ZDU0QEgAIItPJgAAAMo"]
[Tue Nov 25 04:02:02.870359 2025] [:error] [pid 14168:tid 14193] [client 172.177.203.12:1928] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aSS5uvR-ZDU0QEgAIItPLAAAANY"]
[Tue Nov 25 04:02:04.938868 2025] [:error] [pid 14076:tid 14086] [client 172.177.203.12:4173] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "aSS5vHsB4Gz6Qw-pvBv3lAAAAAU"]
[Tue Nov 25 04:02:05.726371 2025] [:error] [pid 14077:tid 14127] [client 172.177.203.12:4176] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "aSS5vRG9n7UHEkwDTyg6SgAAAFE"]
[Tue Nov 25 04:02:07.271840 2025] [:error] [pid 14078:tid 14137] [client 172.177.203.12:1958] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "aSS5v9VXYbb0ii_rVoIzXwAAAIA"]
[Tue Nov 25 04:02:08.181270 2025] [:error] [pid 14688:tid 14712] [client 172.177.203.12:2010] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "aSS5wG9vYrBoEsiDnizIGAAAARY"]
[Tue Nov 25 04:02:13.808849 2025] [:error] [pid 14168:tid 14180] [client 172.177.203.12:1992] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/usep.php"] [unique_id "aSS5xfR-ZDU0QEgAIItPSwAAAMk"]
[Tue Nov 25 04:02:14.958699 2025] [:error] [pid 14077:tid 14125] [client 172.177.203.12:6479] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/usep.php"] [unique_id "aSS5xhG9n7UHEkwDTyg6mwAAAE8"]
[Tue Nov 25 04:02:19.435428 2025] [:error] [pid 14078:tid 14151] [client 172.177.203.12:1491] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/usep.php"] [unique_id "aSS5y9VXYbb0ii_rVoIzZgAAAI4"]
[Tue Nov 25 04:02:22.060067 2025] [:error] [pid 14077:tid 14117] [client 172.177.203.12:1665] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/usep.php"] [unique_id "aSS5zhG9n7UHEkwDTyg6pAAAAEc"]
[Tue Nov 25 04:02:28.966518 2025] [proxy_fcgi:error] [pid 14078:tid 14152] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:29.222008 2025] [proxy_fcgi:error] [pid 14078:tid 14143] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:29.554272 2025] [proxy_fcgi:error] [pid 14078:tid 14146] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:29.772726 2025] [proxy_fcgi:error] [pid 14078:tid 14161] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:29.986322 2025] [proxy_fcgi:error] [pid 14078:tid 14155] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:30.200342 2025] [proxy_fcgi:error] [pid 14078:tid 14156] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:30.439098 2025] [proxy_fcgi:error] [pid 14078:tid 14144] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:30.662149 2025] [proxy_fcgi:error] [pid 14078:tid 14142] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:30.930188 2025] [proxy_fcgi:error] [pid 14078:tid 14141] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:31.144207 2025] [proxy_fcgi:error] [pid 14078:tid 14159] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:31.372074 2025] [proxy_fcgi:error] [pid 14078:tid 14149] [client 172.177.203.12:3348] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:02:31.581802 2025] [:error] [pid 14078:tid 14158] [client 172.177.203.12:3348] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "aSS519VXYbb0ii_rVoIzewAAAJU"]
[Tue Nov 25 04:02:32.604486 2025] [:error] [pid 14168:tid 14180] [client 172.177.203.12:2129] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "aSS52PR-ZDU0QEgAIItPXAAAAMk"]
[Tue Nov 25 04:02:35.737778 2025] [:error] [pid 14077:tid 14130] [client 172.177.203.12:2860] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "aSS52xG9n7UHEkwDTyg6sQAAAFQ"]
[Tue Nov 25 04:02:40.848878 2025] [:error] [pid 14078:tid 14147] [client 172.177.203.12:3551] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "aSS54NVXYbb0ii_rVoIzfwAAAIo"]
[Tue Nov 25 04:02:45.496353 2025] [:error] [pid 14688:tid 14711] [client 172.177.203.12:2871] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aSS55W9vYrBoEsiDnizIOAAAARU"]
[Tue Nov 25 04:02:46.516827 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:4610] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aSS55vR-ZDU0QEgAIItPdQAAAMc"]
[Tue Nov 25 04:02:48.663293 2025] [:error] [pid 14168:tid 14182] [client 172.177.203.12:4242] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aSS56PR-ZDU0QEgAIItPewAAAMs"]
[Tue Nov 25 04:02:51.589958 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:2125] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aSS56_R-ZDU0QEgAIItPfwAAANc"]
[Tue Nov 25 04:02:54.811950 2025] [:error] [pid 14078:tid 14144] [client 172.177.203.12:2124] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bak.php"] [unique_id "aSS57tVXYbb0ii_rVoIzkwAAAIc"]
[Tue Nov 25 04:02:56.358684 2025] [:error] [pid 14078:tid 14141] [client 172.177.203.12:2848] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bak.php"] [unique_id "aSS58NVXYbb0ii_rVoIzlQAAAIQ"]
[Tue Nov 25 04:02:57.228766 2025] [:error] [pid 14077:tid 14110] [client 172.177.203.12:3555] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bak.php"] [unique_id "aSS58RG9n7UHEkwDTyg6zwAAAEA"]
[Tue Nov 25 04:02:58.918056 2025] [:error] [pid 14688:tid 14708] [client 172.177.203.12:5659] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bak.php"] [unique_id "aSS58m9vYrBoEsiDnizITgAAARI"]
[Tue Nov 25 04:03:02.609074 2025] [:error] [pid 14078:tid 14139] [client 172.177.203.12:2868] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "aSS59tVXYbb0ii_rVoIznQAAAII"]
[Tue Nov 25 04:03:04.508990 2025] [:error] [pid 14076:tid 14097] [client 172.177.203.12:5637] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "aSS5-HsB4Gz6Qw-pvBv3swAAABA"]
[Tue Nov 25 04:03:06.071701 2025] [:error] [pid 14168:tid 14182] [client 172.177.203.12:5191] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "aSS5-vR-ZDU0QEgAIItPhQAAAMs"]
[Tue Nov 25 04:03:09.078244 2025] [:error] [pid 14077:tid 14132] [client 172.177.203.12:4622] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "aSS5_RG9n7UHEkwDTyg62gAAAFY"]
[Tue Nov 25 04:03:10.804177 2025] [:error] [pid 14078:tid 14158] [client 172.177.203.12:3554] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mail.php"] [unique_id "aSS5_tVXYbb0ii_rVoIzpQAAAJU"]
[Tue Nov 25 04:03:12.850793 2025] [:error] [pid 14688:tid 14713] [client 172.177.203.12:2845] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mail.php"] [unique_id "aSS6AG9vYrBoEsiDnizIVAAAARc"]
[Tue Nov 25 04:03:14.140249 2025] [:error] [pid 14688:tid 14700] [client 172.177.203.12:2174] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mail.php"] [unique_id "aSS6Am9vYrBoEsiDnizIVwAAAQo"]
[Tue Nov 25 04:03:14.843149 2025] [:error] [pid 14688:tid 14707] [client 172.177.203.12:2828] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mail.php"] [unique_id "aSS6Am9vYrBoEsiDnizIWgAAARE"]
[Tue Nov 25 04:03:16.133586 2025] [:error] [pid 14168:tid 14176] [client 172.177.203.12:4716] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dlu.php"] [unique_id "aSS6BPR-ZDU0QEgAIItPjAAAAMU"]
[Tue Nov 25 04:03:17.523840 2025] [:error] [pid 14077:tid 14132] [client 172.177.203.12:4687] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dlu.php"] [unique_id "aSS6BRG9n7UHEkwDTyg64QAAAFY"]
[Tue Nov 25 04:03:33.513783 2025] [proxy_fcgi:error] [pid 14076:tid 14092] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:33.904304 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:34.115414 2025] [proxy_fcgi:error] [pid 14076:tid 14087] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:34.532608 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:34.766903 2025] [proxy_fcgi:error] [pid 14076:tid 14093] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:35.109318 2025] [proxy_fcgi:error] [pid 14076:tid 14098] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:35.336943 2025] [proxy_fcgi:error] [pid 14076:tid 14097] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:35.728153 2025] [proxy_fcgi:error] [pid 14076:tid 14091] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:36.082481 2025] [proxy_fcgi:error] [pid 14076:tid 14085] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:36.291950 2025] [proxy_fcgi:error] [pid 14076:tid 14088] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:36.497155 2025] [proxy_fcgi:error] [pid 14076:tid 14103] [client 172.177.203.12:2148] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:03:36.710732 2025] [:error] [pid 14076:tid 14102] [client 172.177.203.12:2148] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ouh.php"] [unique_id "aSS6GHsB4Gz6Qw-pvBv35AAAABU"]
[Tue Nov 25 04:03:38.592081 2025] [:error] [pid 14077:tid 14123] [client 172.177.203.12:2833] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ouh.php"] [unique_id "aSS6GhG9n7UHEkwDTyg69gAAAE0"]
[Tue Nov 25 04:03:43.114076 2025] [:error] [pid 14076:tid 14096] [client 172.177.203.12:2165] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ouh.php"] [unique_id "aSS6H3sB4Gz6Qw-pvBv36wAAAA8"]
[Tue Nov 25 04:03:46.662734 2025] [:error] [pid 14688:tid 14693] [client 172.177.203.12:4681] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ouh.php"] [unique_id "aSS6Im9vYrBoEsiDnizIrgAAAQM"]
[Tue Nov 25 04:03:49.386883 2025] [:error] [pid 14688:tid 14697] [client 172.177.203.12:3569] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asgtt.php"] [unique_id "aSS6JW9vYrBoEsiDnizItQAAAQc"]
[Tue Nov 25 04:03:52.826990 2025] [:error] [pid 14077:tid 14124] [client 172.177.203.12:2152] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asgtt.php"] [unique_id "aSS6KBG9n7UHEkwDTyg7gAAAAE4"]
[Tue Nov 25 04:03:54.804912 2025] [:error] [pid 14077:tid 14116] [client 172.177.203.12:3577] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asgtt.php"] [unique_id "aSS6KhG9n7UHEkwDTyg7igAAAEY"]
[Tue Nov 25 04:03:56.996200 2025] [:error] [pid 14077:tid 14123] [client 172.177.203.12:4624] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asgtt.php"] [unique_id "aSS6LBG9n7UHEkwDTyg7jQAAAE0"]
[Tue Nov 25 04:04:09.300133 2025] [:error] [pid 14077:tid 14118] [client 172.177.203.12:2863] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/image.php"] [unique_id "aSS6ORG9n7UHEkwDTyg7lwAAAEg"]
[Tue Nov 25 04:04:11.629448 2025] [:error] [pid 14168:tid 14195] [client 172.177.203.12:4632] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/image.php"] [unique_id "aSS6O_R-ZDU0QEgAIItP9QAAANg"]
[Tue Nov 25 04:04:15.140374 2025] [:error] [pid 14077:tid 14116] [client 172.177.203.12:2838] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wok.php"] [unique_id "aSS6PxG9n7UHEkwDTyg7mgAAAEY"]
[Tue Nov 25 04:04:18.904913 2025] [:error] [pid 14077:tid 14130] [client 172.177.203.12:2861] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wok.php"] [unique_id "aSS6QhG9n7UHEkwDTyg7oQAAAFQ"]
[Tue Nov 25 04:04:19.695865 2025] [:error] [pid 14076:tid 14088] [client 172.177.203.12:5639] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wok.php"] [unique_id "aSS6Q3sB4Gz6Qw-pvBv4IAAAAAc"]
[Tue Nov 25 04:04:23.059626 2025] [:error] [pid 14077:tid 14112] [client 172.177.203.12:5577] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wok.php"] [unique_id "aSS6RxG9n7UHEkwDTyg7pwAAAEI"]
[Tue Nov 25 04:04:23.673219 2025] [:error] [pid 14076:tid 14088] [client 172.177.203.12:2146] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alexus.php"] [unique_id "aSS6R3sB4Gz6Qw-pvBv4JAAAAAc"]
[Tue Nov 25 04:04:25.169113 2025] [:error] [pid 14076:tid 14102] [client 172.177.203.12:4274] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alexus.php"] [unique_id "aSS6SXsB4Gz6Qw-pvBv4JgAAABU"]
[Tue Nov 25 04:04:26.609872 2025] [:error] [pid 14078:tid 14147] [client 172.177.203.12:3535] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alexus.php"] [unique_id "aSS6StVXYbb0ii_rVoI0AAAAAIo"]
[Tue Nov 25 04:04:27.807758 2025] [:error] [pid 14077:tid 14111] [client 172.177.203.12:4682] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alexus.php"] [unique_id "aSS6SxG9n7UHEkwDTyg7rgAAAEE"]
[Tue Nov 25 04:04:29.503824 2025] [:error] [pid 14078:tid 14145] [client 172.177.203.12:5648] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadis.php"] [unique_id "aSS6TdVXYbb0ii_rVoI0AwAAAIg"]
[Tue Nov 25 04:04:30.881440 2025] [:error] [pid 14077:tid 14115] [client 172.177.203.12:3549] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadis.php"] [unique_id "aSS6ThG9n7UHEkwDTyg7swAAAEU"]
[Tue Nov 25 04:04:36.113324 2025] [proxy_fcgi:error] [pid 14688:tid 14702] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:36.398625 2025] [proxy_fcgi:error] [pid 14688:tid 14703] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:36.632456 2025] [proxy_fcgi:error] [pid 14688:tid 14693] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:36.858032 2025] [proxy_fcgi:error] [pid 14688:tid 14714] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:37.394326 2025] [proxy_fcgi:error] [pid 14688:tid 14712] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:38.025392 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:38.448484 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:38.656845 2025] [proxy_fcgi:error] [pid 14688:tid 14706] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:38.869176 2025] [proxy_fcgi:error] [pid 14688:tid 14711] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:39.519635 2025] [proxy_fcgi:error] [pid 14688:tid 14709] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:39.755173 2025] [proxy_fcgi:error] [pid 14688:tid 14691] [client 172.177.203.12:5680] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:04:40.075239 2025] [:error] [pid 14688:tid 14707] [client 172.177.203.12:5680] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ula.php"] [unique_id "aSS6WG9vYrBoEsiDnizI3QAAARE"]
[Tue Nov 25 04:04:41.698721 2025] [:error] [pid 14078:tid 14143] [client 172.177.203.12:4618] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ula.php"] [unique_id "aSS6WdVXYbb0ii_rVoI0DQAAAIY"]
[Tue Nov 25 04:04:44.621921 2025] [:error] [pid 14688:tid 14710] [client 172.177.203.12:4641] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ula.php"] [unique_id "aSS6XG9vYrBoEsiDnizI5wAAARQ"]
[Tue Nov 25 04:04:45.670413 2025] [:error] [pid 14078:tid 14153] [client 172.177.203.12:4674] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ula.php"] [unique_id "aSS6XdVXYbb0ii_rVoI0FQAAAJA"]
[Tue Nov 25 04:04:47.226089 2025] [:error] [pid 14688:tid 14692] [client 172.177.203.12:4635] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wrt.php"] [unique_id "aSS6X29vYrBoEsiDnizI7wAAAQI"]
[Tue Nov 25 04:04:50.479408 2025] [:error] [pid 14078:tid 14153] [client 172.177.203.12:3524] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wrt.php"] [unique_id "aSS6YtVXYbb0ii_rVoI0JgAAAJA"]
[Tue Nov 25 04:04:52.630892 2025] [:error] [pid 14168:tid 14184] [client 172.177.203.12:2169] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wrt.php"] [unique_id "aSS6ZPR-ZDU0QEgAIItQKwAAAM0"]
[Tue Nov 25 04:04:55.773211 2025] [:error] [pid 14078:tid 14149] [client 172.177.203.12:3578] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wrt.php"] [unique_id "aSS6Z9VXYbb0ii_rVoI0OQAAAIw"]
[Tue Nov 25 04:04:58.971642 2025] [:error] [pid 14168:tid 14191] [client 172.177.203.12:5695] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/c451f.php"] [unique_id "aSS6avR-ZDU0QEgAIItQOgAAANQ"]
[Tue Nov 25 04:05:01.288107 2025] [:error] [pid 14078:tid 14152] [client 172.177.203.12:2851] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/c451f.php"] [unique_id "aSS6bdVXYbb0ii_rVoI0TQAAAI8"]
[Tue Nov 25 04:05:03.273104 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:4691] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/c451f.php"] [unique_id "aSS6b_R-ZDU0QEgAIItQRAAAAMc"]
[Tue Nov 25 04:05:07.095798 2025] [:error] [pid 14688:tid 14713] [client 172.177.203.12:2143] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/c451f.php"] [unique_id "aSS6c29vYrBoEsiDnizJBwAAARc"]
[Tue Nov 25 04:05:08.619060 2025] [:error] [pid 14077:tid 14126] [client 172.177.203.12:3536] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/efa4f.php"] [unique_id "aSS6dBG9n7UHEkwDTyg77wAAAFA"]
[Tue Nov 25 04:05:12.304729 2025] [:error] [pid 14078:tid 14160] [client 172.177.203.12:5641] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/efa4f.php"] [unique_id "aSS6eNVXYbb0ii_rVoI0XQAAAJc"]
[Tue Nov 25 04:05:14.754081 2025] [:error] [pid 14078:tid 14137] [client 172.177.203.12:3533] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/efa4f.php"] [unique_id "aSS6etVXYbb0ii_rVoI0YgAAAIA"]
[Tue Nov 25 04:05:17.479113 2025] [:error] [pid 14168:tid 14181] [client 172.177.203.12:4688] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/efa4f.php"] [unique_id "aSS6ffR-ZDU0QEgAIItQUQAAAMo"]
[Tue Nov 25 04:05:18.822508 2025] [:error] [pid 14077:tid 14120] [client 172.177.203.12:4636] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/suy.php"] [unique_id "aSS6fhG9n7UHEkwDTyg8BQAAAEo"]
[Tue Nov 25 04:05:19.849433 2025] [:error] [pid 14076:tid 14103] [client 172.177.203.12:2842] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/suy.php"] [unique_id "aSS6f3sB4Gz6Qw-pvBv4OgAAABY"]
[Tue Nov 25 04:05:20.679202 2025] [:error] [pid 14077:tid 14128] [client 172.177.203.12:2133] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/suy.php"] [unique_id "aSS6gBG9n7UHEkwDTyg8BwAAAFI"]
[Tue Nov 25 04:05:22.412692 2025] [:error] [pid 14076:tid 14093] [client 172.177.203.12:2821] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/suy.php"] [unique_id "aSS6gnsB4Gz6Qw-pvBv4PwAAAAw"]
[Tue Nov 25 04:05:25.017741 2025] [:error] [pid 14078:tid 14151] [client 172.177.203.12:5686] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nbr.php"] [unique_id "aSS6hdVXYbb0ii_rVoI0fAAAAI4"]
[Tue Nov 25 04:05:25.949078 2025] [:error] [pid 14078:tid 14143] [client 172.177.203.12:5650] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nbr.php"] [unique_id "aSS6hdVXYbb0ii_rVoI0fgAAAIY"]
[Tue Nov 25 04:05:27.739763 2025] [:error] [pid 14168:tid 14185] [client 172.177.203.12:4634] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nbr.php"] [unique_id "aSS6h_R-ZDU0QEgAIItQagAAAM4"]
[Tue Nov 25 04:05:31.861383 2025] [:error] [pid 14076:tid 14093] [client 172.177.203.12:2136] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nbr.php"] [unique_id "aSS6i3sB4Gz6Qw-pvBv4TAAAAAw"]
[Tue Nov 25 04:05:33.669200 2025] [:error] [pid 14077:tid 14112] [client 172.177.203.12:5687] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gul.php"] [unique_id "aSS6jRG9n7UHEkwDTyg8EwAAAEI"]
[Tue Nov 25 04:05:41.275717 2025] [proxy_fcgi:error] [pid 14688:tid 14708] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:41.500138 2025] [proxy_fcgi:error] [pid 14688:tid 14690] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:41.735502 2025] [proxy_fcgi:error] [pid 14688:tid 14707] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:41.957694 2025] [proxy_fcgi:error] [pid 14688:tid 14713] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:42.408565 2025] [proxy_fcgi:error] [pid 14688:tid 14700] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:42.647478 2025] [proxy_fcgi:error] [pid 14688:tid 14711] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:42.857305 2025] [proxy_fcgi:error] [pid 14688:tid 14709] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:43.067116 2025] [proxy_fcgi:error] [pid 14688:tid 14698] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:43.284129 2025] [proxy_fcgi:error] [pid 14688:tid 14712] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:43.492954 2025] [proxy_fcgi:error] [pid 14688:tid 14691] [client 172.177.203.12:2161] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:05:43.698302 2025] [:error] [pid 14688:tid 14697] [client 172.177.203.12:2161] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/haf.php"] [unique_id "aSS6l29vYrBoEsiDnizJOgAAAQc"]
[Tue Nov 25 04:05:45.394266 2025] [:error] [pid 14168:tid 14188] [client 172.177.203.12:5658] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/haf.php"] [unique_id "aSS6mfR-ZDU0QEgAIItQgQAAANE"]
[Tue Nov 25 04:05:46.411578 2025] [:error] [pid 14078:tid 14138] [client 172.177.203.12:3521] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/haf.php"] [unique_id "aSS6mtVXYbb0ii_rVoI0kwAAAIE"]
[Tue Nov 25 04:05:51.797449 2025] [:error] [pid 14688:tid 14713] [client 172.177.203.12:6555] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/haf.php"] [unique_id "aSS6n29vYrBoEsiDnizJQgAAARc"]
[Tue Nov 25 04:05:53.556328 2025] [:error] [pid 14688:tid 14712] [client 172.177.203.12:6572] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sow.php"] [unique_id "aSS6oW9vYrBoEsiDnizJRQAAARY"]
[Tue Nov 25 04:05:55.052948 2025] [:error] [pid 14168:tid 14183] [client 172.177.203.12:2156] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sow.php"] [unique_id "aSS6o_R-ZDU0QEgAIItQowAAAMw"]
[Tue Nov 25 04:05:57.077859 2025] [:error] [pid 14168:tid 14191] [client 172.177.203.12:5677] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sow.php"] [unique_id "aSS6pfR-ZDU0QEgAIItQqQAAANQ"]
[Tue Nov 25 04:06:09.836173 2025] [:error] [pid 14076:tid 14103] [client 172.177.203.12:4718] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tro.php"] [unique_id "aSS6sXsB4Gz6Qw-pvBv4bwAAABY"]
[Tue Nov 25 04:06:17.756457 2025] [:error] [pid 14168:tid 14176] [client 172.177.203.12:1190] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tro.php"] [unique_id "aSS6ufR-ZDU0QEgAIItQuAAAAMU"]
[Tue Nov 25 04:06:19.896626 2025] [:error] [pid 14688:tid 14714] [client 172.177.203.12:2663] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tro.php"] [unique_id "aSS6u29vYrBoEsiDnizJdwAAARg"]
[Tue Nov 25 04:06:22.771961 2025] [:error] [pid 14078:tid 14160] [client 172.177.203.12:3632] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tro.php"] [unique_id "aSS6vtVXYbb0ii_rVoI0sAAAAJc"]
[Tue Nov 25 04:06:24.303997 2025] [:error] [pid 14168:tid 14192] [client 172.177.203.12:3683] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ave.php"] [unique_id "aSS6wPR-ZDU0QEgAIItQxwAAANU"]
[Tue Nov 25 04:06:26.380666 2025] [:error] [pid 14688:tid 14706] [client 172.177.203.12:2100] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ave.php"] [unique_id "aSS6wm9vYrBoEsiDnizJgQAAARA"]
[Tue Nov 25 04:06:28.488181 2025] [:error] [pid 14168:tid 14195] [client 172.177.203.12:3483] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ave.php"] [unique_id "aSS6xPR-ZDU0QEgAIItQ0QAAANg"]
[Tue Nov 25 04:06:30.339798 2025] [:error] [pid 14168:tid 14176] [client 172.177.203.12:4867] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ave.php"] [unique_id "aSS6xvR-ZDU0QEgAIItQ1gAAAMU"]
[Tue Nov 25 04:06:34.396770 2025] [:error] [pid 14168:tid 14172] [client 172.177.203.12:3895] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sty.php"] [unique_id "aSS6yvR-ZDU0QEgAIItQ3AAAAME"]
[Tue Nov 25 04:06:35.771164 2025] [:error] [pid 14168:tid 14185] [client 172.177.203.12:3882] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sty.php"] [unique_id "aSS6y_R-ZDU0QEgAIItQ4AAAAM4"]
[Tue Nov 25 04:06:40.146637 2025] [:error] [pid 14688:tid 14694] [client 172.177.203.12:1320] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sty.php"] [unique_id "aSS60G9vYrBoEsiDnizJsQAAAQQ"]
[Tue Nov 25 04:06:41.924217 2025] [:error] [pid 14076:tid 14097] [client 172.177.203.12:3104] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sty.php"] [unique_id "aSS60XsB4Gz6Qw-pvBv4jgAAABA"]
[Tue Nov 25 04:06:45.547538 2025] [proxy_fcgi:error] [pid 14168:tid 14187] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:45.779517 2025] [proxy_fcgi:error] [pid 14168:tid 14176] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:46.111861 2025] [proxy_fcgi:error] [pid 14168:tid 14179] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:46.325532 2025] [proxy_fcgi:error] [pid 14168:tid 14180] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:46.537170 2025] [proxy_fcgi:error] [pid 14168:tid 14172] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:46.746063 2025] [proxy_fcgi:error] [pid 14168:tid 14194] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:46.954721 2025] [proxy_fcgi:error] [pid 14168:tid 14184] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:47.163140 2025] [proxy_fcgi:error] [pid 14168:tid 14190] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:47.584128 2025] [proxy_fcgi:error] [pid 14168:tid 14192] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:47.815864 2025] [proxy_fcgi:error] [pid 14168:tid 14191] [client 172.177.203.12:3798] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:06:48.022295 2025] [:error] [pid 14168:tid 14177] [client 172.177.203.12:3798] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dom.php"] [unique_id "aSS62PR-ZDU0QEgAIItRBwAAAMY"]
[Tue Nov 25 04:06:49.231566 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:1736] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dom.php"] [unique_id "aSS62fR-ZDU0QEgAIItREAAAANc"]
[Tue Nov 25 04:06:54.542684 2025] [:error] [pid 14688:tid 14704] [client 172.177.203.12:6354] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dom.php"] [unique_id "aSS63m9vYrBoEsiDnizJxQAAAQ4"]
[Tue Nov 25 04:06:55.573981 2025] [:error] [pid 14168:tid 14175] [client 172.177.203.12:5028] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dom.php"] [unique_id "aSS63_R-ZDU0QEgAIItRGwAAAMQ"]
[Tue Nov 25 04:06:56.577660 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:2473] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wle.php"] [unique_id "aSS64PR-ZDU0QEgAIItRHwAAANc"]
[Tue Nov 25 04:06:57.989728 2025] [:error] [pid 14077:tid 14114] [client 172.177.203.12:4962] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wle.php"] [unique_id "aSS64RG9n7UHEkwDTyg8kwAAAEQ"]
[Tue Nov 25 04:07:06.645308 2025] [:error] [pid 14076:tid 14099] [client 172.177.203.12:1772] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wle.php"] [unique_id "aSS66nsB4Gz6Qw-pvBv4pAAAABI"]
[Tue Nov 25 04:07:10.771543 2025] [:error] [pid 14168:tid 14171] [client 172.177.203.12:4364] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wle.php"] [unique_id "aSS67vR-ZDU0QEgAIItRKwAAAMA"]
[Tue Nov 25 04:07:17.197777 2025] [:error] [pid 14168:tid 14183] [client 172.177.203.12:4932] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lok.php"] [unique_id "aSS69fR-ZDU0QEgAIItRLwAAAMw"]
[Tue Nov 25 04:07:18.993826 2025] [:error] [pid 14688:tid 14697] [client 172.177.203.12:2798] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lok.php"] [unique_id "aSS69m9vYrBoEsiDnizJ8wAAAQc"]
[Tue Nov 25 04:07:20.916682 2025] [:error] [pid 14076:tid 14090] [client 172.177.203.12:4440] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lok.php"] [unique_id "aSS6-HsB4Gz6Qw-pvBv4rgAAAAk"]
[Tue Nov 25 04:07:23.093418 2025] [:error] [pid 14078:tid 14144] [client 172.177.203.12:3162] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lok.php"] [unique_id "aSS6-9VXYbb0ii_rVoI07AAAAIc"]
[Tue Nov 25 04:07:24.091963 2025] [:error] [pid 14168:tid 14186] [client 172.177.203.12:2692] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kla.php"] [unique_id "aSS6_PR-ZDU0QEgAIItRMwAAAM8"]
[Tue Nov 25 04:07:25.384503 2025] [:error] [pid 14168:tid 14187] [client 172.177.203.12:4408] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kla.php"] [unique_id "aSS6_fR-ZDU0QEgAIItRNgAAANA"]
[Tue Nov 25 04:07:30.809680 2025] [:error] [pid 14168:tid 14178] [client 172.177.203.12:2757] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kla.php"] [unique_id "aSS7AvR-ZDU0QEgAIItRQAAAAMc"]
[Tue Nov 25 04:07:32.020831 2025] [:error] [pid 14076:tid 14097] [client 172.177.203.12:6439] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kla.php"] [unique_id "aSS7BHsB4Gz6Qw-pvBv4sgAAABA"]
[Tue Nov 25 04:07:34.328224 2025] [:error] [pid 14168:tid 14184] [client 172.177.203.12:4357] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/thoms.php"] [unique_id "aSS7BvR-ZDU0QEgAIItRTAAAAM0"]
[Tue Nov 25 04:07:38.100895 2025] [:error] [pid 14168:tid 14195] [client 172.177.203.12:6480] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/thoms.php"] [unique_id "aSS7CvR-ZDU0QEgAIItRVAAAANg"]
[Tue Nov 25 04:07:40.625286 2025] [:error] [pid 14077:tid 14119] [client 172.177.203.12:6489] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/thoms.php"] [unique_id "aSS7DBG9n7UHEkwDTyg8uwAAAEk"]
[Tue Nov 25 04:07:42.138533 2025] [:error] [pid 14688:tid 14697] [client 172.177.203.12:4830] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/thoms.php"] [unique_id "aSS7Dm9vYrBoEsiDnizKLwAAAQc"]
[Tue Nov 25 04:07:47.365646 2025] [proxy_fcgi:error] [pid 14077:tid 14120] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:47.802496 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:48.014709 2025] [proxy_fcgi:error] [pid 14077:tid 14130] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:48.269399 2025] [proxy_fcgi:error] [pid 14077:tid 14134] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:48.502960 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:48.712010 2025] [proxy_fcgi:error] [pid 14077:tid 14123] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:49.071854 2025] [proxy_fcgi:error] [pid 14077:tid 14128] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:49.281532 2025] [proxy_fcgi:error] [pid 14077:tid 14112] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:49.496667 2025] [proxy_fcgi:error] [pid 14077:tid 14115] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:49.722204 2025] [proxy_fcgi:error] [pid 14077:tid 14121] [client 172.177.203.12:6476] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:07:49.927506 2025] [:error] [pid 14077:tid 14119] [client 172.177.203.12:6476] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ooj.php"] [unique_id "aSS7FRG9n7UHEkwDTyg8zwAAAEk"]
[Tue Nov 25 04:07:52.271195 2025] [:error] [pid 14688:tid 14708] [client 172.177.203.12:3207] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ooj.php"] [unique_id "aSS7GG9vYrBoEsiDnizKOAAAARI"]
[Tue Nov 25 04:07:56.950933 2025] [:error] [pid 14076:tid 14083] [client 172.177.203.12:3203] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ooj.php"] [unique_id "aSS7HHsB4Gz6Qw-pvBv4zgAAAAI"]
[Tue Nov 25 04:07:58.437627 2025] [:error] [pid 14688:tid 14701] [client 172.177.203.12:2901] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ooj.php"] [unique_id "aSS7Hm9vYrBoEsiDnizKRgAAAQs"]
[Tue Nov 25 04:08:03.523246 2025] [:error] [pid 14688:tid 14692] [client 172.177.203.12:3938] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/09fa6.php"] [unique_id "aSS7I29vYrBoEsiDnizKVQAAAQI"]
[Tue Nov 25 04:08:06.270406 2025] [:error] [pid 14078:tid 14140] [client 172.177.203.12:2588] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/09fa6.php"] [unique_id "aSS7JtVXYbb0ii_rVoI1FAAAAIM"]
[Tue Nov 25 04:08:10.386416 2025] [:error] [pid 14688:tid 14706] [client 172.177.203.12:3614] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/09fa6.php"] [unique_id "aSS7Km9vYrBoEsiDnizKYAAAARA"]
[Tue Nov 25 04:08:11.487389 2025] [:error] [pid 14077:tid 14116] [client 172.177.203.12:3957] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/09fa6.php"] [unique_id "aSS7KxG9n7UHEkwDTyg84wAAAEY"]
[Tue Nov 25 04:08:13.129168 2025] [:error] [pid 14688:tid 14709] [client 172.177.203.12:3916] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hob.php"] [unique_id "aSS7LW9vYrBoEsiDnizKZQAAARM"]
[Tue Nov 25 04:08:14.805896 2025] [:error] [pid 14078:tid 14140] [client 172.177.203.12:2905] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hob.php"] [unique_id "aSS7LtVXYbb0ii_rVoI1IwAAAIM"]
[Tue Nov 25 04:08:16.437385 2025] [:error] [pid 14168:tid 14192] [client 172.177.203.12:3675] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hob.php"] [unique_id "aSS7MPR-ZDU0QEgAIItRfQAAANU"]
[Tue Nov 25 04:08:21.232591 2025] [:error] [pid 14078:tid 14157] [client 172.177.203.12:2904] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hob.php"] [unique_id "aSS7NdVXYbb0ii_rVoI1LwAAAJQ"]
[Tue Nov 25 04:08:23.554966 2025] [:error] [pid 14078:tid 14138] [client 172.177.203.12:2680] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zuk.php"] [unique_id "aSS7N9VXYbb0ii_rVoI1NQAAAIE"]
[Tue Nov 25 04:08:26.694803 2025] [:error] [pid 14168:tid 14186] [client 172.177.203.12:1959] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zuk.php"] [unique_id "aSS7OvR-ZDU0QEgAIItRiQAAAM8"]
[Tue Nov 25 04:08:28.978909 2025] [:error] [pid 14168:tid 14194] [client 172.177.203.12:2598] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zuk.php"] [unique_id "aSS7PPR-ZDU0QEgAIItRjgAAANc"]
[Tue Nov 25 04:08:30.959830 2025] [:error] [pid 14077:tid 14130] [client 172.177.203.12:2594] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zuk.php"] [unique_id "aSS7PhG9n7UHEkwDTyg8-AAAAFQ"]
[Tue Nov 25 04:08:33.227265 2025] [:error] [pid 14077:tid 14134] [client 172.177.203.12:3950] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ink.php"] [unique_id "aSS7QRG9n7UHEkwDTyg8-QAAAFg"]
[Tue Nov 25 04:08:38.020064 2025] [:error] [pid 14168:tid 14172] [client 172.177.203.12:1117] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ink.php"] [unique_id "aSS7RvR-ZDU0QEgAIItRngAAAME"]
[Tue Nov 25 04:08:39.062547 2025] [:error] [pid 14076:tid 14082] [client 172.177.203.12:3590] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ink.php"] [unique_id "aSS7R3sB4Gz6Qw-pvBv5JwAAAAE"]
[Tue Nov 25 04:08:41.720923 2025] [:error] [pid 14077:tid 14116] [client 172.177.203.12:2610] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ink.php"] [unique_id "aSS7SRG9n7UHEkwDTyg9CAAAAEY"]
[Tue Nov 25 04:08:42.776858 2025] [:error] [pid 14168:tid 14185] [client 172.177.203.12:3919] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jju.php"] [unique_id "aSS7SvR-ZDU0QEgAIItRpgAAAM4"]
[Tue Nov 25 04:08:46.852632 2025] [:error] [pid 14078:tid 14147] [client 172.177.203.12:5766] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jju.php"] [unique_id "aSS7TtVXYbb0ii_rVoI1UgAAAIo"]
[Tue Nov 25 04:08:48.099334 2025] [:error] [pid 14077:tid 14119] [client 172.177.203.12:6173] [client 172.177.203.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jju.php"] [unique_id "aSS7UBG9n7UHEkwDTyg9EAAAAEk"]
[Tue Nov 25 04:08:49.827102 2025] [proxy_fcgi:error] [pid 14076:tid 14081] [client 172.177.203.12:5774] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:08:50.360402 2025] [proxy_fcgi:error] [pid 14076:tid 14089] [client 172.177.203.12:5774] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 04:08:50.752696 2025] [proxy_fcgi:error] [pid 14076:tid 14096] [client 172.177.203.12:5774] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 17:09:03.997431 2025] [:error] [pid 14077:tid 14132] [client 152.42.211.192:61843] [client 152.42.211.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.211.192, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aSVyLxG9n7UHEkwDTyhP9gAAAFY"]
[Tue Nov 25 17:09:04.005500 2025] [proxy_fcgi:error] [pid 14077:tid 14132] [client 152.42.211.192:61843] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 18:28:58.337924 2025] [:error] [pid 28842:tid 28997] [client 54.173.250.15:46080] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSWE6tNmoaPf6T4-6C18YwAAA0c"]
[Wed Nov 26 00:49:19.859176 2025] [:error] [pid 28739:tid 28770] [client 13.54.133.31:42286] [client 13.54.133.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSXeDxxGpKmlkG4FexTy1gAAAgg"]
[Wed Nov 26 03:22:22.599666 2025] [:error] [pid 19664:tid 19736] [client 54.173.250.15:37074] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSYB7oHU6yUQwaQ4jb1kagAAAJA"]
[Wed Nov 26 10:51:31.101309 2025] [:error] [pid 34742:tid 34749] [client 213.21.239.4:38718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/backup/.git/config"] [unique_id "aSZrM5SuLNwpQF_jzAcfkwAAAEE"]
[Wed Nov 26 10:51:31.102138 2025] [:error] [pid 34743:tid 34789] [client 213.21.239.4:38644] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/.git/%0Aconfig"] [unique_id "aSZrMwvyX7Q5oU7_mBx57AAAAU0"]
[Wed Nov 26 10:51:31.103703 2025] [:error] [pid 34830:tid 34839] [client 213.21.239.4:38616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/.git/config"] [unique_id "aSZrM0ukvkWgWN6jCR2FrAAAAAc"]
[Wed Nov 26 10:51:31.104092 2025] [:error] [pid 34743:tid 34778] [client 213.21.239.4:38618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.git/config"] [unique_id "aSZrMwvyX7Q5oU7_mBx57QAAAUI"]
[Wed Nov 26 10:51:31.109572 2025] [:error] [pid 34830:tid 34856] [client 213.21.239.4:38736] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/common/.git/config"] [unique_id "aSZrM0ukvkWgWN6jCR2FrQAAABg"]
[Wed Nov 26 10:51:31.113473 2025] [:error] [pid 34742:tid 34769] [client 213.21.239.4:38706] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.git/config"] [unique_id "aSZrM5SuLNwpQF_jzAcflAAAAFU"]
[Wed Nov 26 10:51:31.113888 2025] [:error] [pid 34742:tid 34766] [client 213.21.239.4:38792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/;/.git/config"] [unique_id "aSZrM5SuLNwpQF_jzAcflQAAAFI"]
[Wed Nov 26 10:51:31.114085 2025] [:error] [pid 34743:tid 34785] [client 213.21.239.4:38584] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/css../.git/config"] [unique_id "aSZrMwvyX7Q5oU7_mBx57wAAAUk"]
[Wed Nov 26 10:51:31.114698 2025] [:error] [pid 34742:tid 34761] [client 213.21.239.4:38776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/assets../.git/config"] [unique_id "aSZrM5SuLNwpQF_jzAcflgAAAE0"]
[Wed Nov 26 10:51:31.115485 2025] [:error] [pid 34744:tid 34827] [client 213.21.239.4:38716] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/developer/.git/config"] [unique_id "aSZrM0tgOvVbhyALkTTVRwAAAZg"]
[Wed Nov 26 10:51:31.116312 2025] [:error] [pid 45836:tid 45870] [client 213.21.239.4:38752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.git/config"] [unique_id "aSZrM5frnOGqL-seZAwWeAAAANg"]
[Wed Nov 26 10:51:31.116980 2025] [:error] [pid 45836:tid 45850] [client 213.21.239.4:38668] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/database/.git/config"] [unique_id "aSZrM5frnOGqL-seZAwWeQAAAMQ"]
[Wed Nov 26 10:51:31.118113 2025] [:error] [pid 45836:tid 45854] [client 213.21.239.4:38608] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/content../.git/config"] [unique_id "aSZrM5frnOGqL-seZAwWegAAAMg"]
[Wed Nov 26 10:51:31.118144 2025] [:error] [pid 34744:tid 34821] [client 213.21.239.4:38728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/.git/config;.."] [unique_id "aSZrM0tgOvVbhyALkTTVSAAAAZI"]
[Wed Nov 26 10:51:31.119024 2025] [:error] [pid 45836:tid 45868] [client 213.21.239.4:38646] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/dev/.git/config"] [unique_id "aSZrM5frnOGqL-seZAwWewAAANY"]
[Wed Nov 26 10:51:31.123278 2025] [:error] [pid 45836:tid 45851] [client 213.21.239.4:38660] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/.git/config;"] [unique_id "aSZrM5frnOGqL-seZAwWfAAAAMU"]
[Wed Nov 26 10:51:31.123359 2025] [:error] [pid 34742:tid 34753] [client 213.21.239.4:38720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/..;/.git/config"] [unique_id "aSZrM5SuLNwpQF_jzAcflwAAAEU"]
[Wed Nov 26 10:51:31.124370 2025] [:error] [pid 45901:tid 45926] [client 213.21.239.4:38700] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/application/.git/config"] [unique_id "aSZrMyunQ1SpfPRNrtx-3gAAARc"]
[Wed Nov 26 10:51:31.126090 2025] [:error] [pid 34744:tid 34820] [client 213.21.239.4:38760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec/static../.git/config"] [unique_id "aSZrM0tgOvVbhyALkTTVSQAAAZE"]
[Wed Nov 26 10:51:31.127217 2025] [:error] [pid 34830:tid 34836] [client 213.21.239.4:38762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec../.git/config"] [unique_id "aSZrM0ukvkWgWN6jCR2FrgAAAAQ"]
[Wed Nov 26 10:51:33.376524 2025] [:error] [pid 35540:tid 35563] [client 213.21.239.4:45972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/..;/.git/config"] [unique_id "aSZrNcGrIq2A6SZSnkJFcgAAAJE"]
[Wed Nov 26 10:51:33.383490 2025] [:error] [pid 35540:tid 35549] [client 213.21.239.4:46038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/;/.git/config"] [unique_id "aSZrNcGrIq2A6SZSnkJFcwAAAIM"]
[Wed Nov 26 10:51:33.384365 2025] [:error] [pid 34830:tid 34846] [client 213.21.239.4:45946] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/;/.git/config"] [unique_id "aSZrNUukvkWgWN6jCR2FsAAAAA4"]
[Wed Nov 26 10:51:33.387308 2025] [:error] [pid 35540:tid 35569] [client 213.21.239.4:45960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSZrNcGrIq2A6SZSnkJFdAAAAJc"]
[Wed Nov 26 10:51:33.388495 2025] [:error] [pid 34830:tid 34854] [client 213.21.239.4:45978] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSZrNUukvkWgWN6jCR2FsQAAABY"]
[Wed Nov 26 10:51:33.391890 2025] [:error] [pid 34830:tid 34838] [client 213.21.239.4:46006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config;.."] [unique_id "aSZrNUukvkWgWN6jCR2FsgAAAAY"]
[Wed Nov 26 10:51:33.394667 2025] [:error] [pid 35540:tid 35546] [client 213.21.239.4:46042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/git/.git/config"] [unique_id "aSZrNcGrIq2A6SZSnkJFdQAAAIA"]
[Wed Nov 26 10:51:33.395157 2025] [:error] [pid 10383:tid 10403] [client 213.21.239.4:45990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config;"] [unique_id "aSZrNa0RJ-zjhOVjD8-UWAAAAdE"]
[Wed Nov 26 10:51:33.396466 2025] [:error] [pid 35540:tid 35564] [client 213.21.239.4:46098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/message-api/.git/config"] [unique_id "aSZrNcGrIq2A6SZSnkJFdgAAAJI"]
[Wed Nov 26 10:51:33.397472 2025] [:error] [pid 10383:tid 10400] [client 213.21.239.4:46048] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/images../.git/config"] [unique_id "aSZrNa0RJ-zjhOVjD8-UWgAAAc4"]
[Wed Nov 26 10:51:33.397486 2025] [:error] [pid 35540:tid 35550] [client 213.21.239.4:45954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/static../.git/config"] [unique_id "aSZrNcGrIq2A6SZSnkJFdwAAAIQ"]
[Wed Nov 26 10:51:33.397985 2025] [:error] [pid 34830:tid 34851] [client 213.21.239.4:46066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/live/.git/config"] [unique_id "aSZrNUukvkWgWN6jCR2FswAAABM"]
[Wed Nov 26 10:51:33.403959 2025] [:error] [pid 10383:tid 10410] [client 213.21.239.4:46092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/js../.git/config"] [unique_id "aSZrNa0RJ-zjhOVjD8-UWwAAAdg"]
[Wed Nov 26 10:51:33.404155 2025] [:error] [pid 10383:tid 10401] [client 213.21.239.4:46060] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/lib../.git/config"] [unique_id "aSZrNa0RJ-zjhOVjD8-UXAAAAc8"]
[Wed Nov 26 10:51:33.405194 2025] [:error] [pid 10383:tid 10394] [client 213.21.239.4:46162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/..;/.git/config"] [unique_id "aSZrNa0RJ-zjhOVjD8-UXQAAAcg"]
[Wed Nov 26 10:51:33.406168 2025] [:error] [pid 34830:tid 34842] [client 213.21.239.4:46166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config;"] [unique_id "aSZrNUukvkWgWN6jCR2FtAAAAAo"]
[Wed Nov 26 10:51:33.406861 2025] [:error] [pid 45901:tid 45912] [client 213.21.239.4:46080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/m/.git/config"] [unique_id "aSZrNSunQ1SpfPRNrtx-4gAAAQk"]
[Wed Nov 26 10:51:33.408611 2025] [:error] [pid 34742:tid 34767] [client 213.21.239.4:46086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/img../.git/config"] [unique_id "aSZrNZSuLNwpQF_jzAcfmwAAAFM"]
[Wed Nov 26 10:51:33.411457 2025] [:error] [pid 10383:tid 10406] [client 213.21.239.4:46168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config;.."] [unique_id "aSZrNa0RJ-zjhOVjD8-UXgAAAdQ"]
[Wed Nov 26 10:51:33.412659 2025] [:error] [pid 10383:tid 10402] [client 213.21.239.4:46114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/%0Aconfig"] [unique_id "aSZrNa0RJ-zjhOVjD8-UXwAAAdA"]
[Wed Nov 26 10:51:33.413094 2025] [:error] [pid 34830:tid 34845] [client 213.21.239.4:46130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config"] [unique_id "aSZrNUukvkWgWN6jCR2FtQAAAA0"]
[Wed Nov 26 10:51:33.419417 2025] [:error] [pid 10383:tid 10408] [client 213.21.239.4:46146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au../.git/config"] [unique_id "aSZrNa0RJ-zjhOVjD8-UYAAAAdY"]
[Wed Nov 26 10:51:36.380856 2025] [:error] [pid 34743:tid 34792] [client 213.21.239.4:46216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/..;/.git/config"] [unique_id "aSZrOAvyX7Q5oU7_mBx59QAAAVA"]
[Wed Nov 26 10:51:36.382897 2025] [:error] [pid 34742:tid 34756] [client 213.21.239.4:46208] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/new/.git/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfnwAAAEg"]
[Wed Nov 26 10:51:36.383432 2025] [:error] [pid 34830:tid 34832] [client 213.21.239.4:46286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/;/.git/config"] [unique_id "aSZrOEukvkWgWN6jCR2FuAAAAAA"]
[Wed Nov 26 10:51:36.385141 2025] [core:error] [pid 34830:tid 34840] [client 213.21.239.4:46306] AH10244: invalid URI path (/../config)
[Wed Nov 26 10:51:36.385751 2025] [:error] [pid 34743:tid 34788] [client 213.21.239.4:46194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/%0Aconfig"] [unique_id "aSZrOAvyX7Q5oU7_mBx59gAAAUw"]
[Wed Nov 26 10:51:36.389448 2025] [:error] [pid 34742:tid 34771] [client 213.21.239.4:46212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/prod/.git/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfoAAAAFc"]
[Wed Nov 26 10:51:36.390427 2025] [:error] [pid 34830:tid 34855] [client 213.21.239.4:46276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config;.."] [unique_id "aSZrOEukvkWgWN6jCR2FuwAAABc"]
[Wed Nov 26 10:51:36.391540 2025] [:error] [pid 34830:tid 34847] [client 213.21.239.4:46248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/public/.git/config"] [unique_id "aSZrOEukvkWgWN6jCR2FvAAAAA8"]
[Wed Nov 26 10:51:36.392401 2025] [:error] [pid 34742:tid 34754] [client 213.21.239.4:46340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/..;/.git/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfoQAAAEY"]
[Wed Nov 26 10:51:36.392777 2025] [:error] [pid 34742:tid 34759] [client 213.21.239.4:46278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config;.."] [unique_id "aSZrOJSuLNwpQF_jzAcfogAAAEs"]
[Wed Nov 26 10:51:36.392954 2025] [:error] [pid 34742:tid 34751] [client 213.21.239.4:46336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSZrOJSuLNwpQF_jzAcfowAAAEM"]
[Wed Nov 26 10:51:36.396567 2025] [:error] [pid 34742:tid 34755] [client 213.21.239.4:46224] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfpAAAAEc"]
[Wed Nov 26 10:51:36.397021 2025] [:error] [pid 45901:tid 45907] [client 213.21.239.4:46294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/static../.git/config"] [unique_id "aSZrOCunQ1SpfPRNrtx-5wAAAQQ"]
[Wed Nov 26 10:51:36.398923 2025] [:error] [pid 45901:tid 45926] [client 213.21.239.4:46368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/;/.git/config"] [unique_id "aSZrOCunQ1SpfPRNrtx-6AAAARc"]
[Wed Nov 26 10:51:36.400936 2025] [:error] [pid 45901:tid 45919] [client 213.21.239.4:46364] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au/.git/config;"] [unique_id "aSZrOCunQ1SpfPRNrtx-6QAAARA"]
[Wed Nov 26 10:51:36.405224 2025] [:error] [pid 45901:tid 45917] [client 213.21.239.4:46350] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/../.git/config"] [unique_id "aSZrOCunQ1SpfPRNrtx-6gAAAQ4"]
[Wed Nov 26 10:51:36.405508 2025] [:error] [pid 45901:tid 45915] [client 213.21.239.4:46260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/qa/.git/config"] [unique_id "aSZrOCunQ1SpfPRNrtx-6wAAAQw"]
[Wed Nov 26 10:51:36.409969 2025] [:error] [pid 34742:tid 34748] [client 213.21.239.4:46326] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfpgAAAEA"]
[Wed Nov 26 10:51:36.410900 2025] [:error] [pid 45901:tid 45916] [client 213.21.239.4:46352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSZrOCunQ1SpfPRNrtx-7AAAAQ0"]
[Wed Nov 26 10:51:36.411487 2025] [:error] [pid 34742:tid 34763] [client 213.21.239.4:46234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config;"] [unique_id "aSZrOJSuLNwpQF_jzAcfpwAAAE8"]
[Wed Nov 26 10:51:36.412080 2025] [:error] [pid 34742:tid 34764] [client 213.21.239.4:46190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/quarryspec.com.au../.git/config"] [unique_id "aSZrOJSuLNwpQF_jzAcfqAAAAFA"]
[Wed Nov 26 10:51:38.434900 2025] [:error] [pid 35540:tid 35554] [client 213.21.239.4:46370] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config"] [unique_id "aSZrOsGrIq2A6SZSnkJFfAAAAIg"]
[Wed Nov 26 10:51:39.377825 2025] [:error] [pid 34744:tid 34813] [client 213.21.239.4:46400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/uat/.git/config"] [unique_id "aSZrO0tgOvVbhyALkTTVVgAAAYo"]
[Wed Nov 26 10:51:39.382456 2025] [:error] [pid 34742:tid 34768] [client 213.21.239.4:46412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/web/.git/config"] [unique_id "aSZrO5SuLNwpQF_jzAcfrQAAAFQ"]
[Wed Nov 26 10:51:39.386535 2025] [:error] [pid 10383:tid 10388] [client 213.21.239.4:46384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/static../.git/config"] [unique_id "aSZrO60RJ-zjhOVjD8-UZAAAAcI"]
[Wed Nov 26 10:51:39.390498 2025] [:error] [pid 34742:tid 34752] [client 213.21.239.4:46424] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSZrO5SuLNwpQF_jzAcfrgAAAEQ"]
[Wed Nov 26 10:51:39.390948 2025] [:error] [pid 10383:tid 10396] [client 213.21.239.4:46432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSZrO60RJ-zjhOVjD8-UZQAAAco"]
[Wed Nov 26 10:51:39.391245 2025] [:error] [pid 10383:tid 10398] [client 213.21.239.4:46374] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/staging/.git/config"] [unique_id "aSZrO60RJ-zjhOVjD8-UZgAAAcw"]
[Wed Nov 26 10:51:39.392162 2025] [:error] [pid 34743:tid 34781] [client 213.21.239.4:46426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/static../.git/config"] [unique_id "aSZrOwvyX7Q5oU7_mBx5-gAAAUU"]
[Wed Nov 26 10:51:39.395261 2025] [:error] [pid 34743:tid 34796] [client 213.21.239.4:46418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSZrOwvyX7Q5oU7_mBx5-wAAAVQ"]
[Wed Nov 26 19:33:19.780478 2025] [proxy_fcgi:error] [pid 46443:tid 46467] [client 4.233.91.203:55850] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Nov 26 19:33:22.177779 2025] [proxy_fcgi:error] [pid 20733:tid 20744] [client 4.233.91.203:64336] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Nov 26 19:33:34.866350 2025] [proxy_fcgi:error] [pid 45684:tid 45728] [client 4.233.91.203:50574] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Nov 26 19:34:01.685447 2025] [proxy_fcgi:error] [pid 46443:tid 46459] [client 4.233.91.203:52556] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Nov 26 23:48:07.888340 2025] [:error] [pid 6471:tid 6489] [client 216.126.239.203:44102] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aSchN-h3Z9TZLlRuTiPQlAAAAI8"]
[Thu Nov 27 00:55:38.274979 2025] [:error] [pid 24826:tid 25124] [client 103.77.107.57:60728] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "aScxClEvPXLVl-nh-yLdQgAAAQk"]
[Wed Mar 11 07:48:36.123223 2026] [:error] [pid 11796:tid 11819] [client 209.87.169.100:40380] [client 209.87.169.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abCt1AEDXoQrlStpO9AhVwAAAZU"]
[Wed Mar 11 07:48:36.144883 2026] [proxy_fcgi:error] [pid 11796:tid 11819] [client 209.87.169.100:40380] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 22:10:26.693919 2026] [:error] [pid 45143:tid 45156] [client 34.169.141.254:34994] [client 34.169.141.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "abF30iEXSpYdWImkpzYESAAAAYs"]
[Wed Mar 11 22:10:26.705152 2026] [proxy_fcgi:error] [pid 45143:tid 45156] [client 34.169.141.254:34994] AH01071: Got error 'Primary script unknown'
2026/03/11 22:10:28 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/wp1/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Wed Mar 11 22:10:28.554837 2026] [:error] [pid 44995:tid 45008] [client 34.169.141.254:35062] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abF31DoOSr9ks_axo6P3LgAAAks"]
[Wed Mar 11 22:10:28.718995 2026] [:error] [pid 44995:tid 45011] [client 34.169.141.254:35068] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abF31DoOSr9ks_axo6P3MAAAAk4"]
2026/03/11 22:10:28 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/test/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Wed Mar 11 22:10:28.884013 2026] [:error] [pid 44995:tid 45020] [client 34.169.141.254:35074] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abF31DoOSr9ks_axo6P3MwAAAlc"]
2026/03/11 22:10:28 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/media/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
2026/03/11 22:10:29 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/wp2/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Wed Mar 11 22:10:29.048803 2026] [:error] [pid 44995:tid 45006] [client 34.169.141.254:35080] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abF31ToOSr9ks_axo6P3NQAAAkk"]
[Wed Mar 11 22:10:29.212766 2026] [:error] [pid 44995:tid 45002] [client 34.169.141.254:35088] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abF31ToOSr9ks_axo6P3NwAAAkU"]
2026/03/11 22:10:29 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/site/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Wed Mar 11 22:10:29.379272 2026] [:error] [pid 44995:tid 45010] [client 34.169.141.254:35096] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abF31ToOSr9ks_axo6P3OgAAAk0"]
2026/03/11 22:10:29 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/cms/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Wed Mar 11 22:10:29.565832 2026] [:error] [pid 45143:tid 45162] [client 34.169.141.254:35106] [client 34.169.141.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abF31SEXSpYdWImkpzYEUQAAAZE"]
2026/03/11 22:10:29 [error] 53942#53942: *1148781 upstream prematurely closed connection while reading response header from upstream, client: 34.169.141.254, server: quarryspec.com.au, request: "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1", upstream: "http://103.4.122.14:8181/sito/wp-includes/wlwmanifest.xml", host: "quarryspec.com.au"
[Thu Mar 12 15:32:38.771135 2026] [proxy_fcgi:error] [pid 51455:tid 51473] [client 20.119.217.110:34382] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:32:39.286550 2026] [:error] [pid 51455:tid 51480] [client 20.119.217.110:34382] [client 20.119.217.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.217.110, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abJsF5E0YyNxdg6PL_DsYwAAABQ"]
[Thu Mar 12 15:32:39.550941 2026] [proxy_fcgi:error] [pid 51455:tid 51460] [client 20.119.217.110:34382] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:32:40.588149 2026] [proxy_fcgi:error] [pid 51455:tid 51461] [client 20.119.217.110:34382] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:32:41.376535 2026] [:error] [pid 51455:tid 51464] [client 20.119.217.110:34382] [client 20.119.217.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "abJsGZE0YyNxdg6PL_DsbwAAAAQ"]
[Thu Mar 12 15:32:42.235798 2026] [:error] [pid 22063:tid 22066] [client 20.119.217.110:41299] [client 20.119.217.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "abJsGq0RUhS-MJyHWLTtSAAAAgE"]
[Thu Mar 12 15:32:43.084256 2026] [:error] [pid 51455:tid 51478] [client 20.119.217.110:41335] [client 20.119.217.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "abJsG5E0YyNxdg6PL_DscwAAABI"]
[Thu Mar 12 15:32:43.907060 2026] [:error] [pid 51540:tid 51555] [client 20.119.217.110:41340] [client 20.119.217.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "abJsG2OFFjotMIN2UD3EzAAAAM0"]
[Thu Mar 12 18:25:31.624945 2026] [:error] [pid 8249:tid 8258] [client 103.65.236.149:53499] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "abKUmyK5dL3-8Jdf0M0KHwAAAQc"]
[Thu Mar 12 18:25:31.843368 2026] [:error] [pid 8249:tid 8251] [client 103.65.236.149:53515] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUmyK5dL3-8Jdf0M0KIAAAAQA"]
[Fri Mar 13 09:50:27.780850 2026] [:error] [pid 61928:tid 61994] [client 209.87.169.148:54649] [client 209.87.169.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.148, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abNtYwod66AHekJJZipPrQAAAFE"]
[Fri Mar 13 09:50:27.800636 2026] [proxy_fcgi:error] [pid 61928:tid 61994] [client 209.87.169.148:54649] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:50.462874 2026] [proxy_fcgi:error] [pid 47891:tid 47985] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:52.000523 2026] [proxy_fcgi:error] [pid 47891:tid 47985] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:52.238532 2026] [proxy_fcgi:error] [pid 47891:tid 47984] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:52.477389 2026] [proxy_fcgi:error] [pid 47891:tid 47971] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:52.726090 2026] [proxy_fcgi:error] [pid 47891:tid 47977] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:52.962800 2026] [proxy_fcgi:error] [pid 47891:tid 47976] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:53.208182 2026] [proxy_fcgi:error] [pid 47891:tid 47978] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:53.454009 2026] [proxy_fcgi:error] [pid 47891:tid 47975] [client 4.232.83.34:15051] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:09:54.171155 2026] [:error] [pid 47891:tid 47990] [client 4.232.83.34:15051] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/js.php"] [unique_id "abRhAvchNnuMqi7I_WEuXwAAAJg"]
[Sat Mar 14 03:09:58.887620 2026] [:error] [pid 48070:tid 48085] [client 4.232.83.34:29833] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/js.php"] [unique_id "abRhBkIvrhMS5BVHxNlBFQAAAA0"]
[Sat Mar 14 03:10:08.066162 2026] [:error] [pid 48070:tid 48085] [client 4.232.83.34:12834] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/js.php"] [unique_id "abRhEEIvrhMS5BVHxNlBIwAAAA0"]
[Sat Mar 14 03:10:15.241878 2026] [:error] [pid 47878:tid 47947] [client 4.232.83.34:1543] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/34.php"] [unique_id "abRhF38jymmmpr1jcBfGnQAAAEg"]
[Sat Mar 14 03:10:16.585279 2026] [:error] [pid 47905:tid 48005] [client 4.232.83.34:15074] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/34.php"] [unique_id "abRhGBaYZayP4o4wpJdKuQAAAUw"]
[Sat Mar 14 03:10:22.906498 2026] [:error] [pid 47878:tid 47962] [client 4.232.83.34:12827] [client 4.232.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/pridmag/34.php"] [unique_id "abRhHn8jymmmpr1jcBfGoAAAAFc"]
[Sat Mar 14 03:38:39.766720 2026] [proxy_fcgi:error] [pid 47891:tid 47984] [client 20.104.119.247:14675] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:38:40.181664 2026] [:error] [pid 47891:tid 47988] [client 20.104.119.247:14675] [client 20.104.119.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.119.247, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abRnwPchNnuMqi7I_WE-WwAAAJY"]
[Sat Mar 14 03:38:40.396731 2026] [proxy_fcgi:error] [pid 47891:tid 47987] [client 20.104.119.247:14675] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:38:41.278458 2026] [proxy_fcgi:error] [pid 47891:tid 47989] [client 20.104.119.247:14675] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:38:41.917158 2026] [proxy_fcgi:error] [pid 47891:tid 47972] [client 20.104.119.247:14675] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 03:38:42.122903 2026] [:error] [pid 47891:tid 47978] [client 20.104.119.247:14675] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRnwvchNnuMqi7I_WE-aQAAAIw"]
[Sat Mar 14 03:38:43.173422 2026] [:error] [pid 47891:tid 47985] [client 20.104.119.247:14673] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRnw_chNnuMqi7I_WE-bQAAAJM"]
[Sat Mar 14 03:38:44.393464 2026] [:error] [pid 48070:tid 48078] [client 20.104.119.247:15153] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRnxEIvrhMS5BVHxNlJIwAAAAY"]
[Sat Mar 14 03:38:45.490833 2026] [:error] [pid 47891:tid 47983] [client 20.104.119.247:15145] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRnxfchNnuMqi7I_WE-cAAAAJE"]
[Sat Mar 14 07:34:38.328873 2026] [:error] [pid 3913:tid 3978] [client 185.137.164.16:32621] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "abSfDh9qvQd4GQHUp68ibgAAAFU"]
[Sat Mar 14 07:34:39.115416 2026] [:error] [pid 35801:tid 35810] [client 185.137.164.19:25109] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "abSfD28tVFelXGsqbU_GlgAAAQY"]
[Sun Mar 15 01:21:30.098699 2026] [proxy_fcgi:error] [pid 19680:tid 20004] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:30.467794 2026] [proxy_fcgi:error] [pid 19680:tid 20002] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:30.717276 2026] [proxy_fcgi:error] [pid 19680:tid 19996] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:30.956424 2026] [proxy_fcgi:error] [pid 19680:tid 20009] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:31.195914 2026] [proxy_fcgi:error] [pid 19680:tid 20006] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:31.435229 2026] [proxy_fcgi:error] [pid 19680:tid 19999] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:31.674773 2026] [proxy_fcgi:error] [pid 19680:tid 19993] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:31.923647 2026] [proxy_fcgi:error] [pid 19680:tid 20015] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:32.163805 2026] [proxy_fcgi:error] [pid 19680:tid 19998] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:32.402779 2026] [proxy_fcgi:error] [pid 19680:tid 20003] [client 20.43.39.183:20864] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:21:32.638455 2026] [:error] [pid 19680:tid 20013] [client 20.43.39.183:20864] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "abWZHEnhGahR8LEhCX-hdgAAAdU"]
[Sun Mar 15 01:21:33.286985 2026] [:error] [pid 19658:tid 19958] [client 20.43.39.183:25880] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "abWZHVIS7ZSIcsV9BQqHqgAAABU"]
[Sun Mar 15 01:21:35.313506 2026] [:error] [pid 59255:tid 59271] [client 20.43.39.183:14084] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "abWZH63w_Oi6c1avgTvkaAAAAIo"]
[Sun Mar 15 01:21:37.497564 2026] [:error] [pid 19680:tid 19992] [client 20.43.39.183:20880] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "abWZIUnhGahR8LEhCX-heQAAAcA"]
[Sun Mar 15 01:21:39.130559 2026] [:error] [pid 19658:tid 19940] [client 20.43.39.183:25908] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abWZI1IS7ZSIcsV9BQqHtAAAAAM"]
[Sun Mar 15 01:21:39.860953 2026] [:error] [pid 20020:tid 20037] [client 20.43.39.183:20404] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abWZI0PjaRwagw2fU7gItQAAAE8"]
[Sun Mar 15 01:21:40.633027 2026] [:error] [pid 20020:tid 20025] [client 20.43.39.183:36054] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abWZJEPjaRwagw2fU7gIvwAAAEM"]
[Sun Mar 15 01:21:45.168900 2026] [:error] [pid 20020:tid 20035] [client 20.43.39.183:35582] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abWZKUPjaRwagw2fU7gIygAAAE0"]
[Sun Mar 15 01:21:46.305894 2026] [:error] [pid 59255:tid 59272] [client 20.43.39.183:44125] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "abWZKq3w_Oi6c1avgTvkiAAAAIs"]
[Sun Mar 15 01:21:47.062447 2026] [:error] [pid 19658:tid 19960] [client 20.43.39.183:20897] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "abWZK1IS7ZSIcsV9BQqHuwAAABc"]
[Sun Mar 15 01:21:48.073929 2026] [:error] [pid 20020:tid 20041] [client 20.43.39.183:35590] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "abWZLEPjaRwagw2fU7gIzwAAAFM"]
[Sun Mar 15 01:21:49.547617 2026] [:error] [pid 19671:tid 19973] [client 20.43.39.183:44114] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "abWZLVu8gYYbnWVq3mUZSwAAAQg"]
[Sun Mar 15 01:21:51.024935 2026] [:error] [pid 19658:tid 19957] [client 20.43.39.183:12201] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "abWZL1IS7ZSIcsV9BQqHwAAAABQ"]
[Sun Mar 15 01:21:53.142315 2026] [:error] [pid 20020:tid 20022] [client 20.43.39.183:16675] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "abWZMUPjaRwagw2fU7gI4AAAAEA"]
[Sun Mar 15 01:21:54.337838 2026] [:error] [pid 19680:tid 20007] [client 20.43.39.183:4927] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "abWZMknhGahR8LEhCX-hkAAAAc8"]
[Sun Mar 15 01:21:55.828726 2026] [:error] [pid 59255:tid 59263] [client 20.43.39.183:35568] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "abWZM63w_Oi6c1avgTvklwAAAII"]
[Sun Mar 15 01:21:59.258117 2026] [:error] [pid 20020:tid 20045] [client 20.43.39.183:12982] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "abWZN0PjaRwagw2fU7gI8QAAAFc"]
[Sun Mar 15 01:22:06.814782 2026] [:error] [pid 19671:tid 19981] [client 20.43.39.183:20916] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "abWZPlu8gYYbnWVq3mUZZAAAARA"]
[Sun Mar 15 01:22:08.197681 2026] [:error] [pid 19658:tid 19939] [client 20.43.39.183:20447] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "abWZQFIS7ZSIcsV9BQqH2wAAAAI"]
[Sun Mar 15 01:22:15.330164 2026] [:error] [pid 59255:tid 59264] [client 20.43.39.183:17363] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "abWZR63w_Oi6c1avgTvkrQAAAIM"]
[Sun Mar 15 01:22:21.302945 2026] [:error] [pid 59255:tid 59261] [client 20.43.39.183:14192] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "abWZTa3w_Oi6c1avgTvkvgAAAIA"]
[Sun Mar 15 01:22:22.551377 2026] [:error] [pid 20020:tid 20043] [client 20.43.39.183:11811] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "abWZTkPjaRwagw2fU7gJTQAAAFU"]
[Sun Mar 15 01:22:25.497104 2026] [:error] [pid 19680:tid 20003] [client 20.43.39.183:17318] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "abWZUUnhGahR8LEhCX-huQAAAcs"]
[Sun Mar 15 01:22:26.727280 2026] [:error] [pid 20020:tid 20042] [client 20.43.39.183:14161] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "abWZUkPjaRwagw2fU7gJYQAAAFQ"]
[Sun Mar 15 01:22:27.421072 2026] [:error] [pid 20020:tid 20046] [client 20.43.39.183:21254] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "abWZU0PjaRwagw2fU7gJZAAAAFg"]
[Sun Mar 15 01:22:29.193906 2026] [:error] [pid 20020:tid 20025] [client 20.43.39.183:19655] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "abWZVUPjaRwagw2fU7gJbQAAAEM"]
[Sun Mar 15 01:22:32.523420 2026] [proxy_fcgi:error] [pid 19680:tid 20010] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:32.767400 2026] [proxy_fcgi:error] [pid 19680:tid 20011] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:33.343035 2026] [proxy_fcgi:error] [pid 19680:tid 19992] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:33.822116 2026] [proxy_fcgi:error] [pid 19680:tid 19998] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:34.067337 2026] [proxy_fcgi:error] [pid 19680:tid 20005] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:34.315821 2026] [proxy_fcgi:error] [pid 19680:tid 20010] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:34.564929 2026] [proxy_fcgi:error] [pid 19680:tid 19996] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:34.814448 2026] [proxy_fcgi:error] [pid 19680:tid 19999] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:35.070508 2026] [proxy_fcgi:error] [pid 19680:tid 20008] [client 20.43.39.183:19688] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:22:35.306860 2026] [:error] [pid 19680:tid 20003] [client 20.43.39.183:19688] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "abWZW0nhGahR8LEhCX-h2wAAAcs"]
[Sun Mar 15 01:22:36.792319 2026] [:error] [pid 19671:tid 19981] [client 20.43.39.183:45902] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "abWZXFu8gYYbnWVq3mUZhQAAARA"]
[Sun Mar 15 01:22:37.455183 2026] [:error] [pid 19680:tid 20005] [client 20.43.39.183:9373] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "abWZXUnhGahR8LEhCX-h4AAAAc0"]
[Sun Mar 15 01:22:38.859335 2026] [:error] [pid 59255:tid 59270] [client 20.43.39.183:14154] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "abWZXq3w_Oi6c1avgTvk5AAAAIk"]
[Sun Mar 15 01:22:40.206386 2026] [:error] [pid 19671:tid 19976] [client 20.43.39.183:41244] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "abWZYFu8gYYbnWVq3mUZigAAAQs"]
[Sun Mar 15 01:22:41.775463 2026] [:error] [pid 19671:tid 19978] [client 20.43.39.183:9356] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "abWZYVu8gYYbnWVq3mUZkgAAAQ0"]
[Sun Mar 15 01:22:43.233184 2026] [:error] [pid 19680:tid 20014] [client 20.43.39.183:45958] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "abWZY0nhGahR8LEhCX-h7wAAAdY"]
[Sun Mar 15 01:22:48.512091 2026] [:error] [pid 19680:tid 19998] [client 20.43.39.183:20955] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "abWZaEnhGahR8LEhCX-h-wAAAcY"]
[Sun Mar 15 01:22:51.181298 2026] [:error] [pid 20020:tid 20032] [client 20.43.39.183:18128] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "abWZa0PjaRwagw2fU7gJqgAAAEo"]
[Sun Mar 15 01:22:53.575000 2026] [:error] [pid 19671:tid 19966] [client 20.43.39.183:20979] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "abWZbVu8gYYbnWVq3mUZqgAAAQE"]
[Sun Mar 15 01:23:00.545406 2026] [:error] [pid 19671:tid 19970] [client 20.43.39.183:20954] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "abWZdFu8gYYbnWVq3mUZwQAAAQU"]
[Sun Mar 15 01:23:16.992477 2026] [:error] [pid 20020:tid 20027] [client 20.43.39.183:16159] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "abWZhEPjaRwagw2fU7gJ6AAAAEU"]
[Sun Mar 15 01:23:18.628135 2026] [:error] [pid 20020:tid 20025] [client 20.43.39.183:45373] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "abWZhkPjaRwagw2fU7gJ8QAAAEM"]
[Sun Mar 15 01:23:19.563514 2026] [:error] [pid 19658:tid 19951] [client 20.43.39.183:11861] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "abWZh1IS7ZSIcsV9BQqIHgAAAA4"]
[Sun Mar 15 01:23:20.695050 2026] [:error] [pid 59255:tid 59280] [client 20.43.39.183:45922] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "abWZiK3w_Oi6c1avgTvlOwAAAJM"]
[Sun Mar 15 01:23:23.339317 2026] [:error] [pid 20020:tid 20028] [client 20.43.39.183:40591] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "abWZi0PjaRwagw2fU7gJ_wAAAEY"]
[Sun Mar 15 01:23:27.072362 2026] [:error] [pid 59255:tid 59266] [client 20.43.39.183:10166] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "abWZj63w_Oi6c1avgTvlTQAAAIU"]
[Sun Mar 15 01:23:28.100541 2026] [:error] [pid 20020:tid 20037] [client 20.43.39.183:10158] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "abWZkEPjaRwagw2fU7gKAwAAAE8"]
[Sun Mar 15 01:23:29.241011 2026] [:error] [pid 19658:tid 19955] [client 20.43.39.183:45912] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "abWZkVIS7ZSIcsV9BQqIKQAAABI"]
[Sun Mar 15 01:23:30.674426 2026] [:error] [pid 59255:tid 59268] [client 20.43.39.183:40060] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "abWZkq3w_Oi6c1avgTvlWQAAAIc"]
[Sun Mar 15 01:23:32.624779 2026] [:error] [pid 59255:tid 59267] [client 20.43.39.183:45901] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "abWZlK3w_Oi6c1avgTvlWwAAAIY"]
[Sun Mar 15 01:23:33.561355 2026] [:error] [pid 20020:tid 20026] [client 20.43.39.183:42274] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "abWZlUPjaRwagw2fU7gKCwAAAEQ"]
[Sun Mar 15 01:23:39.826550 2026] [proxy_fcgi:error] [pid 19671:tid 19975] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:40.079042 2026] [proxy_fcgi:error] [pid 19671:tid 19986] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:40.581861 2026] [proxy_fcgi:error] [pid 19671:tid 19968] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:42.021824 2026] [proxy_fcgi:error] [pid 19671:tid 19979] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:42.280777 2026] [proxy_fcgi:error] [pid 19671:tid 19974] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:42.639842 2026] [proxy_fcgi:error] [pid 19671:tid 19973] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:42.896092 2026] [proxy_fcgi:error] [pid 19671:tid 19985] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:43.558496 2026] [proxy_fcgi:error] [pid 19671:tid 19976] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:43.799269 2026] [proxy_fcgi:error] [pid 19671:tid 19989] [client 20.43.39.183:40635] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:23:44.035396 2026] [:error] [pid 19671:tid 19984] [client 20.43.39.183:40635] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "abWZoFu8gYYbnWVq3mUaCQAAARM"]
[Sun Mar 15 01:23:53.837025 2026] [:error] [pid 20020:tid 20027] [client 20.43.39.183:5106] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "abWZqUPjaRwagw2fU7gKRgAAAEU"]
[Sun Mar 15 01:23:57.000443 2026] [:error] [pid 59255:tid 59281] [client 20.43.39.183:23473] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "abWZrK3w_Oi6c1avgTvlfQAAAJQ"]
[Sun Mar 15 01:24:00.841620 2026] [:error] [pid 19680:tid 20002] [client 20.43.39.183:36850] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "abWZsEnhGahR8LEhCX-iSAAAAco"]
[Sun Mar 15 01:24:02.973716 2026] [:error] [pid 19671:tid 19978] [client 20.43.39.183:40049] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "abWZslu8gYYbnWVq3mUaFwAAAQ0"]
[Sun Mar 15 01:24:04.866259 2026] [:error] [pid 19671:tid 19969] [client 20.43.39.183:14576] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "abWZtFu8gYYbnWVq3mUaGQAAAQQ"]
[Sun Mar 15 01:24:06.438585 2026] [:error] [pid 59255:tid 59261] [client 20.43.39.183:40592] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "abWZtq3w_Oi6c1avgTvliAAAAIA"]
[Sun Mar 15 01:24:07.264467 2026] [:error] [pid 19658:tid 19943] [client 20.43.39.183:42242] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "abWZt1IS7ZSIcsV9BQqIXgAAAAY"]
[Sun Mar 15 01:24:07.939080 2026] [:error] [pid 20020:tid 20045] [client 20.43.39.183:16991] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "abWZt0PjaRwagw2fU7gKXQAAAFc"]
[Sun Mar 15 01:24:08.910512 2026] [:error] [pid 19671:tid 19966] [client 20.43.39.183:40011] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "abWZuFu8gYYbnWVq3mUaIgAAAQE"]
[Sun Mar 15 01:24:10.695831 2026] [:error] [pid 59255:tid 59267] [client 20.43.39.183:14559] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "abWZuq3w_Oi6c1avgTvllwAAAIY"]
[Sun Mar 15 01:24:13.220315 2026] [:error] [pid 59255:tid 59273] [client 20.43.39.183:40599] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "abWZva3w_Oi6c1avgTvlnwAAAIw"]
[Sun Mar 15 01:24:14.014781 2026] [:error] [pid 20020:tid 20033] [client 20.43.39.183:4638] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "abWZvkPjaRwagw2fU7gKYwAAAEs"]
[Sun Mar 15 01:24:15.670798 2026] [:error] [pid 19658:tid 19939] [client 20.43.39.183:41727] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "abWZv1IS7ZSIcsV9BQqIZAAAAAI"]
[Sun Mar 15 01:24:18.121646 2026] [:error] [pid 19658:tid 19943] [client 20.43.39.183:4620] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "abWZwlIS7ZSIcsV9BQqIaQAAAAY"]
[Sun Mar 15 01:24:21.217714 2026] [:error] [pid 19671:tid 19975] [client 20.43.39.183:23474] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "abWZxVu8gYYbnWVq3mUaKwAAAQo"]
[Sun Mar 15 01:24:22.911948 2026] [:error] [pid 19680:tid 19994] [client 20.43.39.183:40036] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "abWZxknhGahR8LEhCX-iYQAAAcI"]
[Sun Mar 15 01:24:25.985275 2026] [:error] [pid 19658:tid 19947] [client 20.43.39.183:40585] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "abWZyVIS7ZSIcsV9BQqIdAAAAAo"]
[Sun Mar 15 01:24:29.871607 2026] [:error] [pid 19680:tid 20015] [client 20.43.39.183:42258] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "abWZzUnhGahR8LEhCX-icgAAAdc"]
[Sun Mar 15 01:24:43.734526 2026] [proxy_fcgi:error] [pid 19680:tid 20002] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:43.974270 2026] [proxy_fcgi:error] [pid 19680:tid 19993] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:44.214459 2026] [proxy_fcgi:error] [pid 19680:tid 20004] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:44.453810 2026] [proxy_fcgi:error] [pid 19680:tid 20016] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:44.782788 2026] [proxy_fcgi:error] [pid 19680:tid 20015] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:45.035085 2026] [proxy_fcgi:error] [pid 19680:tid 20010] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:45.648348 2026] [proxy_fcgi:error] [pid 19680:tid 20001] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:45.909021 2026] [proxy_fcgi:error] [pid 19680:tid 20005] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:46.156592 2026] [proxy_fcgi:error] [pid 19680:tid 20011] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:46.395101 2026] [proxy_fcgi:error] [pid 19680:tid 19992] [client 20.43.39.183:40028] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:24:46.641210 2026] [:error] [pid 19680:tid 20012] [client 20.43.39.183:40028] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "abWZ3knhGahR8LEhCX-iiwAAAdQ"]
[Sun Mar 15 01:24:49.055171 2026] [:error] [pid 19658:tid 19950] [client 20.43.39.183:36849] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "abWZ4VIS7ZSIcsV9BQqIjQAAAA0"]
[Sun Mar 15 01:24:51.714170 2026] [:error] [pid 19658:tid 19943] [client 20.43.39.183:40581] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "abWZ41IS7ZSIcsV9BQqIkgAAAAY"]
[Sun Mar 15 01:24:54.315010 2026] [:error] [pid 19658:tid 19953] [client 20.43.39.183:40004] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "abWZ5lIS7ZSIcsV9BQqImQAAABA"]
[Sun Mar 15 01:24:56.217343 2026] [:error] [pid 19671:tid 19979] [client 20.43.39.183:40639] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "abWZ6Fu8gYYbnWVq3mUaVAAAAQ4"]
[Sun Mar 15 01:24:57.196899 2026] [:error] [pid 59255:tid 59268] [client 20.43.39.183:4664] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "abWZ6a3w_Oi6c1avgTvmJAAAAIc"]
[Sun Mar 15 01:24:59.374557 2026] [:error] [pid 20020:tid 20041] [client 20.43.39.183:4649] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "abWZ60PjaRwagw2fU7gKlwAAAFM"]
[Sun Mar 15 01:25:01.775805 2026] [:error] [pid 59255:tid 59285] [client 20.43.39.183:42201] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "abWZ7a3w_Oi6c1avgTvmMQAAAJg"]
[Sun Mar 15 01:25:02.819040 2026] [:error] [pid 59255:tid 59276] [client 20.43.39.183:36829] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "abWZ7q3w_Oi6c1avgTvmNAAAAI8"]
[Sun Mar 15 01:25:04.799650 2026] [:error] [pid 59255:tid 59273] [client 20.43.39.183:5081] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "abWZ8K3w_Oi6c1avgTvmOAAAAIw"]
[Sun Mar 15 01:25:06.745781 2026] [:error] [pid 20020:tid 20045] [client 20.43.39.183:4646] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "abWZ8kPjaRwagw2fU7gKpwAAAFc"]
[Sun Mar 15 01:25:07.607333 2026] [:error] [pid 19671:tid 19976] [client 20.43.39.183:23481] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "abWZ81u8gYYbnWVq3mUaXQAAAQs"]
[Sun Mar 15 01:25:09.062509 2026] [:error] [pid 19671:tid 19968] [client 20.43.39.183:36816] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "abWZ9Vu8gYYbnWVq3mUaXwAAAQM"]
[Sun Mar 15 01:25:09.786049 2026] [:error] [pid 59255:tid 59277] [client 20.43.39.183:36832] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "abWZ9a3w_Oi6c1avgTvmSQAAAJA"]
[Sun Mar 15 01:25:13.334944 2026] [:error] [pid 19658:tid 19937] [client 20.43.39.183:23432] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "abWZ-VIS7ZSIcsV9BQqIqQAAAAA"]
[Sun Mar 15 01:25:15.869402 2026] [:error] [pid 20020:tid 20031] [client 20.43.39.183:4621] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "abWZ-0PjaRwagw2fU7gKygAAAEk"]
[Sun Mar 15 01:25:22.225183 2026] [:error] [pid 19671:tid 19971] [client 20.43.39.183:36800] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "abWaAlu8gYYbnWVq3mUabgAAAQY"]
[Sun Mar 15 01:25:23.718661 2026] [:error] [pid 19671:tid 19975] [client 20.43.39.183:28498] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "abWaA1u8gYYbnWVq3mUacAAAAQo"]
[Sun Mar 15 01:25:27.371892 2026] [:error] [pid 19671:tid 19983] [client 20.43.39.183:12567] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "abWaB1u8gYYbnWVq3mUadAAAARI"]
[Sun Mar 15 01:25:28.690218 2026] [:error] [pid 19658:tid 19940] [client 20.43.39.183:16403] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "abWaCFIS7ZSIcsV9BQqIugAAAAM"]
[Sun Mar 15 01:25:30.932520 2026] [:error] [pid 59255:tid 59279] [client 20.43.39.183:40610] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "abWaCq3w_Oi6c1avgTvmfAAAAJI"]
[Sun Mar 15 01:25:32.635834 2026] [:error] [pid 59255:tid 59273] [client 20.43.39.183:12568] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "abWaDK3w_Oi6c1avgTvmgAAAAIw"]
[Sun Mar 15 01:25:35.009429 2026] [:error] [pid 19658:tid 19943] [client 20.43.39.183:42279] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "abWaD1IS7ZSIcsV9BQqIwQAAAAY"]
[Sun Mar 15 01:25:36.433880 2026] [:error] [pid 20020:tid 20041] [client 20.43.39.183:23433] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "abWaEEPjaRwagw2fU7gK7AAAAFM"]
[Sun Mar 15 01:25:39.763284 2026] [:error] [pid 19680:tid 19994] [client 20.43.39.183:5089] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "abWaE0nhGahR8LEhCX-i0QAAAcI"]
[Sun Mar 15 01:25:41.210302 2026] [:error] [pid 20020:tid 20022] [client 20.43.39.183:40625] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "abWaFUPjaRwagw2fU7gK9wAAAEA"]
[Sun Mar 15 01:25:42.343282 2026] [:error] [pid 19671:tid 19976] [client 20.43.39.183:42287] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "abWaFlu8gYYbnWVq3mUafgAAAQs"]
[Sun Mar 15 01:25:43.145493 2026] [:error] [pid 19658:tid 19937] [client 20.43.39.183:16978] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "abWaF1IS7ZSIcsV9BQqIzgAAAAA"]
[Sun Mar 15 01:25:46.964136 2026] [proxy_fcgi:error] [pid 19680:tid 19993] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:48.420082 2026] [proxy_fcgi:error] [pid 19680:tid 20009] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:48.706883 2026] [proxy_fcgi:error] [pid 19680:tid 19995] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:49.068394 2026] [proxy_fcgi:error] [pid 19680:tid 19996] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:49.319666 2026] [proxy_fcgi:error] [pid 19680:tid 20014] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:49.750556 2026] [proxy_fcgi:error] [pid 19680:tid 20005] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:49.989999 2026] [proxy_fcgi:error] [pid 19680:tid 20010] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:50.229974 2026] [proxy_fcgi:error] [pid 19680:tid 20006] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:50.468921 2026] [proxy_fcgi:error] [pid 19680:tid 20004] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:50.707849 2026] [proxy_fcgi:error] [pid 19680:tid 20002] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:50.946232 2026] [proxy_fcgi:error] [pid 19680:tid 19992] [client 20.43.39.183:4669] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:25:51.181650 2026] [:error] [pid 19680:tid 20011] [client 20.43.39.183:4669] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "abWaH0nhGahR8LEhCX-i6QAAAdM"]
[Sun Mar 15 01:25:52.199927 2026] [:error] [pid 19671:tid 19970] [client 20.43.39.183:12573] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "abWaIFu8gYYbnWVq3mUaiQAAAQU"]
[Sun Mar 15 01:25:54.077907 2026] [:error] [pid 20020:tid 20046] [client 20.43.39.183:16743] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "abWaIkPjaRwagw2fU7gLCwAAAFg"]
[Sun Mar 15 01:25:55.906494 2026] [:error] [pid 19658:tid 19940] [client 20.43.39.183:12561] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "abWaI1IS7ZSIcsV9BQqI3AAAAAM"]
[Sun Mar 15 01:25:59.548143 2026] [:error] [pid 20020:tid 20041] [client 20.43.39.183:16764] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "abWaJ0PjaRwagw2fU7gLIAAAAFM"]
[Sun Mar 15 01:26:01.356916 2026] [:error] [pid 19658:tid 19943] [client 20.43.39.183:44134] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "abWaKVIS7ZSIcsV9BQqI4QAAAAY"]
[Sun Mar 15 01:26:02.804518 2026] [:error] [pid 19658:tid 19952] [client 20.43.39.183:23444] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "abWaKlIS7ZSIcsV9BQqI5QAAAA8"]
[Sun Mar 15 01:26:20.707087 2026] [:error] [pid 19680:tid 20002] [client 20.43.39.183:25866] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "abWaPEnhGahR8LEhCX-jBgAAAco"]
[Sun Mar 15 01:26:22.595031 2026] [:error] [pid 19671:tid 19974] [client 20.43.39.183:14093] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "abWaPlu8gYYbnWVq3mUarwAAAQk"]
[Sun Mar 15 01:26:23.391831 2026] [:error] [pid 19658:tid 19960] [client 20.43.39.183:9893] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "abWaP1IS7ZSIcsV9BQqJAgAAABc"]
[Sun Mar 15 01:26:24.552484 2026] [:error] [pid 59255:tid 59264] [client 20.43.39.183:20399] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "abWaQK3w_Oi6c1avgTvm_wAAAIM"]
[Sun Mar 15 01:26:26.395541 2026] [:error] [pid 19658:tid 19952] [client 20.43.39.183:25917] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "abWaQlIS7ZSIcsV9BQqJCgAAAA8"]
[Sun Mar 15 01:26:30.993370 2026] [:error] [pid 59255:tid 59281] [client 20.43.39.183:12952] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "abWaRq3w_Oi6c1avgTvnGAAAAJQ"]
[Sun Mar 15 01:26:32.475409 2026] [:error] [pid 19680:tid 20004] [client 20.43.39.183:10986] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "abWaSEnhGahR8LEhCX-jEgAAAcw"]
[Sun Mar 15 01:26:34.005079 2026] [:error] [pid 19671:tid 19974] [client 20.43.39.183:35609] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "abWaSlu8gYYbnWVq3mUaxgAAAQk"]
[Sun Mar 15 01:26:36.550382 2026] [:error] [pid 19671:tid 19971] [client 20.43.39.183:42183] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "abWaTFu8gYYbnWVq3mUaywAAAQY"]
[Sun Mar 15 01:26:37.323130 2026] [:error] [pid 20020:tid 20033] [client 20.43.39.183:10135] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "abWaTUPjaRwagw2fU7gLaAAAAEs"]
[Sun Mar 15 01:26:38.608934 2026] [:error] [pid 59255:tid 59279] [client 20.43.39.183:4609] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "abWaTq3w_Oi6c1avgTvnMAAAAJI"]
[Sun Mar 15 01:26:39.960659 2026] [:error] [pid 19671:tid 19986] [client 20.43.39.183:40014] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "abWaT1u8gYYbnWVq3mUa0gAAARU"]
[Sun Mar 15 01:26:40.847407 2026] [:error] [pid 20020:tid 20039] [client 20.43.39.183:45319] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "abWaUEPjaRwagw2fU7gLegAAAFE"]
[Sun Mar 15 01:26:41.596850 2026] [:error] [pid 20020:tid 20045] [client 20.43.39.183:45934] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "abWaUUPjaRwagw2fU7gLfQAAAFc"]
[Sun Mar 15 01:26:42.577305 2026] [:error] [pid 20020:tid 20044] [client 20.43.39.183:45369] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "abWaUkPjaRwagw2fU7gLgQAAAFY"]
[Sun Mar 15 01:26:44.929895 2026] [:error] [pid 20020:tid 20035] [client 20.43.39.183:43389] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "abWaVEPjaRwagw2fU7gLjgAAAE0"]
[Sun Mar 15 01:26:47.036574 2026] [:error] [pid 19671:tid 19978] [client 20.43.39.183:17314] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "abWaV1u8gYYbnWVq3mUa2wAAAQ0"]
[Sun Mar 15 01:26:47.862358 2026] [:error] [pid 59255:tid 59281] [client 20.43.39.183:28437] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "abWaV63w_Oi6c1avgTvnPAAAAJQ"]
[Sun Mar 15 01:26:49.454878 2026] [:error] [pid 59255:tid 59282] [client 20.43.39.183:29952] [client 20.43.39.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "abWaWa3w_Oi6c1avgTvnQwAAAJU"]
[Sun Mar 15 01:26:50.841924 2026] [proxy_fcgi:error] [pid 19658:tid 19947] [client 20.43.39.183:29990] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:26:51.081720 2026] [proxy_fcgi:error] [pid 19658:tid 19941] [client 20.43.39.183:29990] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:26:51.323206 2026] [proxy_fcgi:error] [pid 19658:tid 19951] [client 20.43.39.183:29990] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 01:26:51.562036 2026] [proxy_fcgi:error] [pid 19658:tid 19950] [client 20.43.39.183:29990] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 16:13:20.248863 2026] [:error] [pid 50986:tid 51004] [client 104.234.53.91:30837] [client 104.234.53.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.91, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abZqICknK4c779bcQqF2lAAAAU8"]
[Sun Mar 15 16:13:20.258308 2026] [proxy_fcgi:error] [pid 50986:tid 51004] [client 104.234.53.91:30837] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 07:02:26.004580 2026] [:error] [pid 52152:tid 52163] [client 203.188.168.25:22951] [client 203.188.168.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.25, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abc6gsA6rS_GLRd0NKWH6AAAAQg"]
[Mon Mar 16 07:02:26.014354 2026] [proxy_fcgi:error] [pid 52152:tid 52163] [client 203.188.168.25:22951] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 08:25:59.396778 2026] [:error] [pid 62429:tid 62514] [client 103.65.237.124:53033] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "abdOF1ewIPukhLCowEH6YwAAAJI"]
[Mon Mar 16 08:26:00.353164 2026] [:error] [pid 62429:tid 62506] [client 103.65.237.124:53079] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdOGFewIPukhLCowEH6ZwAAAIo"]
[Mon Mar 16 11:05:11.462021 2026] [:error] [pid 62026:tid 62096] [client 173.239.236.130:49181] [client 173.239.236.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feed/"] [unique_id "abdzZ-8oW52PUIYI2O4LLQAAAIo"]
[Mon Mar 16 11:06:49.486654 2026] [:error] [pid 9305:tid 9317] [client 34.42.100.231:36815] [client 34.42.100.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abdzyfRqyKiwGvzyRKyahwAAAYc"]
[Mon Mar 16 19:54:33.220459 2026] [:error] [pid 35838:tid 35846] [client 64.89.163.113:64148] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abfveRroTe-x3JLtmo6WBwAAAAQ"]
[Mon Mar 16 19:54:33.732936 2026] [:error] [pid 35838:tid 35842] [client 64.89.163.113:65513] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abfveRroTe-x3JLtmo6WFgAAAAA"]
[Mon Mar 16 19:54:34.263802 2026] [:error] [pid 39154:tid 39167] [client 64.89.163.113:64038] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abfvehgq1_qjm7J1LqsiWgAAAUo"]
[Mon Mar 16 19:54:34.788536 2026] [:error] [pid 35838:tid 35846] [client 64.89.163.113:64690] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abfvehroTe-x3JLtmo6WOQAAAAQ"]
[Mon Mar 16 19:54:35.457481 2026] [:error] [pid 36198:tid 36205] [client 64.89.163.113:65493] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abfve-lL1GNckmsdWlMz8AAAAQQ"]
[Tue Mar 17 07:20:12.289219 2026] [:error] [pid 22541:tid 22567] [client 149.40.53.3:54502] [client 149.40.53.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.40.53.3, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "abiQLKS6JNY1-CTsTA8MEQAAARU"]
[Tue Mar 17 07:20:12.301084 2026] [proxy_fcgi:error] [pid 22541:tid 22567] [client 149.40.53.3:54502] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 07:20:14.649733 2026] [:error] [pid 22541:tid 22570] [client 149.40.53.3:54502] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abiQLqS6JNY1-CTsTA8MIgAAARg"]
[Tue Mar 17 07:20:14.994169 2026] [:error] [pid 45917:tid 45995] [client 149.40.53.3:54504] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abiQLhMMhmeqL5fT_heh_gAAAIY"]
[Tue Mar 17 07:20:15.346490 2026] [:error] [pid 46020:tid 46043] [client 149.40.53.3:37959] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abiQL3-nCcd9BdzGdLcitwAAANU"]
[Tue Mar 17 07:20:15.687572 2026] [:error] [pid 45916:tid 45981] [client 149.40.53.3:27192] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abiQL7iS53PnClk_C9AG3gAAAFM"]
[Tue Mar 17 07:20:16.031273 2026] [:error] [pid 46020:tid 46039] [client 149.40.53.3:28304] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abiQMH-nCcd9BdzGdLcivQAAANE"]
[Tue Mar 17 07:20:16.366701 2026] [:error] [pid 46020:tid 46041] [client 149.40.53.3:56386] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abiQMH-nCcd9BdzGdLciwAAAANM"]
[Tue Mar 17 07:20:16.700864 2026] [:error] [pid 46020:tid 46043] [client 149.40.53.3:56400] [client 149.40.53.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abiQMH-nCcd9BdzGdLciwwAAANU"]
[Tue Mar 17 07:56:13.064731 2026] [:error] [pid 22541:tid 22555] [client 185.223.152.134:57017] [client 185.223.152.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.134, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abiYnaS6JNY1-CTsTA8ftQAAAQk"]
[Tue Mar 17 07:56:13.095149 2026] [proxy_fcgi:error] [pid 22541:tid 22555] [client 185.223.152.134:57017] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 18:10:54.072300 2026] [:error] [pid 45915:tid 45929] [client 34.24.141.36:56146] [client 34.24.141.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.141.36, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "abkorph7U84ydzcrcndMDAAAAAA"]
[Tue Mar 17 18:10:54.084758 2026] [proxy_fcgi:error] [pid 45915:tid 45929] [client 34.24.141.36:56146] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 18:10:56.818390 2026] [:error] [pid 45915:tid 45935] [client 34.24.141.36:56146] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abkosJh7U84ydzcrcndMGgAAAAY"]
[Tue Mar 17 18:10:57.524907 2026] [:error] [pid 22541:tid 22566] [client 34.24.141.36:51169] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abkosaS6JNY1-CTsTA_1LAAAARQ"]
[Tue Mar 17 18:10:58.016432 2026] [:error] [pid 15013:tid 15078] [client 34.24.141.36:63424] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abkoslZc-p7DonmJmm0qywAAAgE"]
[Tue Mar 17 18:10:58.534112 2026] [:error] [pid 45917:tid 46004] [client 34.24.141.36:59763] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abkoshMMhmeqL5fT_hfVXgAAAI8"]
[Tue Mar 17 18:10:59.044410 2026] [:error] [pid 14929:tid 14952] [client 34.24.141.36:55634] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abkos_TUDuLSLjNnyavVmAAAAZA"]
[Tue Mar 17 18:10:59.537075 2026] [:error] [pid 14817:tid 14835] [client 34.24.141.36:49786] [client 34.24.141.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abkos-BWVgTpR3dKOgYdRAAAAUk"]
[Wed Mar 18 02:02:25.509844 2026] [:error] [pid 63412:tid 63435] [client 216.24.210.118:20109] [client 216.24.210.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.118, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abmXMTKUzzFOGoXRLQ_DCgAAANM"]
[Wed Mar 18 02:02:25.519074 2026] [proxy_fcgi:error] [pid 63412:tid 63435] [client 216.24.210.118:20109] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 08:13:18.435529 2026] [:error] [pid 13716:tid 13738] [client 20.2.90.103:39224] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRT9gAAAVQ"]
[Wed Mar 18 20:15:23.648350 2026] [:error] [pid 43009:tid 43018] [client 20.220.57.95:57325] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abqXW38aUp4Sm6m3nmMzQwAAAQc"]
[Wed Mar 18 20:15:25.870955 2026] [:error] [pid 53755:tid 53777] [client 20.220.57.95:57312] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abqXXaqw5ZSRshmIhWktFQAAAVQ"]
[Wed Mar 18 20:15:28.813681 2026] [:error] [pid 42871:tid 42926] [client 20.220.57.95:56478] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abqXYGPUS0lM1M9nUaJgEAAAAIw"]
[Wed Mar 18 20:15:33.706364 2026] [:error] [pid 31232:tid 31243] [client 20.220.57.95:5628] [client 20.220.57.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "abqXZWX6HV7dqh3BQD3r2wAAAEg"]
[Thu Mar 19 05:32:24.494479 2026] [:error] [pid 3278:tid 3285] [client 34.125.236.7:35352] [client 34.125.236.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "absZ6AC2T_lM6ZgvfcQJQwAAAQQ"]
[Thu Mar 19 06:31:04.410031 2026] [:error] [pid 23884:tid 23967] [client 31.171.130.2:62931] [client 31.171.130.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.2, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "absnqF6St-VCdOYnZMrxYwAAAIs"]
[Thu Mar 19 06:31:04.421158 2026] [proxy_fcgi:error] [pid 23884:tid 23967] [client 31.171.130.2:62931] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 08:40:26.045595 2026] [:error] [pid 23882:tid 23916] [client 91.99.185.80:35288] [client 91.99.185.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abtF-rWnClbtbN12M78QMgAAAA4"]
[Thu Mar 19 09:12:59.068905 2026] [:error] [pid 23884:tid 23979] [client 91.99.188.169:41652] [client 91.99.188.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abtNm16St-VCdOYnZMoTQQAAAJc"]
[Thu Mar 19 12:54:13.356725 2026] [:error] [pid 23884:tid 23965] [client 154.16.49.101:6577] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "abuBdV6St-VCdOYnZMo0IQAAAIk"]
[Thu Mar 19 12:54:13.850118 2026] [:error] [pid 31735:tid 31756] [client 154.16.49.101:6729] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdX-gyQbRQWJYccxXSAAAApE"]
[Thu Mar 19 12:54:14.345402 2026] [:error] [pid 25269:tid 25291] [client 154.16.49.101:6916] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feed/"] [unique_id "abuBdsU9ntriqNcU-b7DfgAAA9M"]
[Thu Mar 19 19:42:49.639967 2026] [:error] [pid 11015:tid 11059] [client 136.144.35.64:63413] [client 136.144.35.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.64, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abvhOfPcMwFQZAVfzLRkqgAAAI0"]
[Thu Mar 19 19:42:49.649886 2026] [proxy_fcgi:error] [pid 11015:tid 11059] [client 136.144.35.64:63413] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:49.677357 2026] [proxy_fcgi:error] [pid 1247:tid 1261] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:49.887176 2026] [proxy_fcgi:error] [pid 1247:tid 1252] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:50.505404 2026] [proxy_fcgi:error] [pid 1247:tid 1273] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:50.717642 2026] [proxy_fcgi:error] [pid 1247:tid 1268] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:51.196063 2026] [proxy_fcgi:error] [pid 1247:tid 1256] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:52.662862 2026] [proxy_fcgi:error] [pid 1247:tid 1264] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:52.875452 2026] [proxy_fcgi:error] [pid 1247:tid 1259] [client 20.151.141.24:15069] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:38:53.300811 2026] [:error] [pid 1247:tid 1251] [client 20.151.141.24:15069] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwKfQ5tmeOr-yI4XNESZwAAAcI"]
[Thu Mar 19 22:39:05.037775 2026] [:error] [pid 11015:tid 11057] [client 20.151.141.24:14980] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwKifPcMwFQZAVfzLSYWAAAAIs"]
[Thu Mar 19 23:58:54.512487 2026] [:error] [pid 11016:tid 11092] [client 20.151.141.24:14688] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "abwdPhPK94J9G19C6uViMwAAARM"]
[Thu Mar 19 23:58:55.823104 2026] [:error] [pid 1285:tid 1298] [client 20.151.141.24:14712] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "abwdP1E95r3zR75X1Hp4zAAAAgs"]
[Thu Mar 19 23:58:57.151472 2026] [:error] [pid 48106:tid 48127] [client 20.151.141.24:14680] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "abwdQcVZaUGvkz29lZEohwAAAM0"]
[Thu Mar 19 23:58:58.776347 2026] [:error] [pid 11015:tid 11068] [client 20.151.141.24:14749] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "abwdQvPcMwFQZAVfzLSoEgAAAJY"]
[Fri Mar 20 01:22:07.225331 2026] [proxy_fcgi:error] [pid 11258:tid 11268] [client 4.205.31.173:20136] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:22:07.774048 2026] [:error] [pid 11258:tid 11269] [client 4.205.31.173:20136] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abwwv5PHb95f6xzHJOcVEwAAAMk"]
[Fri Mar 20 01:22:07.989419 2026] [proxy_fcgi:error] [pid 11258:tid 11274] [client 4.205.31.173:20136] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:22:08.977383 2026] [proxy_fcgi:error] [pid 11258:tid 11265] [client 4.205.31.173:20136] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:22:09.748420 2026] [proxy_fcgi:error] [pid 11258:tid 11277] [client 4.205.31.173:20136] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:22:10.097992 2026] [:error] [pid 11258:tid 11274] [client 4.205.31.173:20136] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwwwpPHb95f6xzHJOcVHwAAAM4"]
[Fri Mar 20 01:22:13.648071 2026] [:error] [pid 46124:tid 46191] [client 4.205.31.173:20151] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwwxUzMrlLOY6zyCjJ5QAAAAEs"]
[Fri Mar 20 01:22:19.181348 2026] [:error] [pid 11258:tid 11268] [client 4.205.31.173:20135] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwwy5PHb95f6xzHJOcVRAAAAMg"]
[Fri Mar 20 01:22:20.847131 2026] [:error] [pid 46126:tid 46246] [client 4.205.31.173:20100] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abwwzKQ44YePbsZz3j7OaQAAARI"]
[Fri Mar 20 01:25:45.602936 2026] [proxy_fcgi:error] [pid 46126:tid 46232] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:46.023131 2026] [proxy_fcgi:error] [pid 46126:tid 46227] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:46.235634 2026] [proxy_fcgi:error] [pid 46126:tid 46256] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:46.444703 2026] [proxy_fcgi:error] [pid 46126:tid 46216] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:46.711462 2026] [proxy_fcgi:error] [pid 46126:tid 46246] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:46.960896 2026] [proxy_fcgi:error] [pid 46126:tid 46250] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:47.170037 2026] [proxy_fcgi:error] [pid 46126:tid 46220] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:47.382080 2026] [proxy_fcgi:error] [pid 46126:tid 46238] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:47.693091 2026] [proxy_fcgi:error] [pid 46126:tid 46248] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:47.902488 2026] [proxy_fcgi:error] [pid 46126:tid 46244] [client 20.151.141.24:15127] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:25:48.108492 2026] [:error] [pid 46126:tid 46235] [client 20.151.141.24:15127] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/function.php"] [unique_id "abwxnKQ44YePbsZz3j7PkwAAAQw"]
[Fri Mar 20 01:25:49.216097 2026] [:error] [pid 46264:tid 46302] [client 20.151.141.24:14960] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/function.php"] [unique_id "abwxnYp3TruHFmWOt5HdJgAAABM"]
[Fri Mar 20 01:25:54.971033 2026] [:error] [pid 46126:tid 46254] [client 20.151.141.24:14934] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/function.php"] [unique_id "abwxoqQ44YePbsZz3j7PlwAAARY"]
[Fri Mar 20 01:25:56.829739 2026] [:error] [pid 11258:tid 11260] [client 20.151.141.24:14928] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/function.php"] [unique_id "abwxpJPHb95f6xzHJOcYfQAAAMA"]
[Fri Mar 20 02:05:08.803927 2026] [:error] [pid 46124:tid 46186] [client 91.230.225.87:30479] [client 91.230.225.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.87, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "abw61EzMrlLOY6zyCjKJvAAAAEY"]
[Fri Mar 20 02:05:08.812982 2026] [proxy_fcgi:error] [pid 46124:tid 46186] [client 91.230.225.87:30479] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:05:22.116852 2026] [:error] [pid 46125:tid 46210] [client 4.205.31.173:34803] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "abw64mgN4lI6NHeckY5nWgAAAIE"]
[Fri Mar 20 02:05:29.096704 2026] [:error] [pid 46264:tid 46304] [client 4.205.31.173:34124] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "abw66Yp3TruHFmWOt5H2ZAAAABU"]
[Fri Mar 20 02:05:31.058010 2026] [:error] [pid 46126:tid 46256] [client 4.205.31.173:34132] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "abw666Q44YePbsZz3j7atAAAARc"]
[Fri Mar 20 02:05:32.694773 2026] [:error] [pid 46124:tid 46184] [client 4.205.31.173:34790] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "abw67EzMrlLOY6zyCjKJ-QAAAEQ"]
[Fri Mar 20 02:54:55.303144 2026] [proxy_fcgi:error] [pid 46264:tid 46302] [client 20.151.141.24:14399] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:54:55.621269 2026] [proxy_fcgi:error] [pid 46264:tid 46298] [client 20.151.141.24:14399] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:54:55.831839 2026] [proxy_fcgi:error] [pid 46264:tid 46307] [client 20.151.141.24:14399] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:54:56.043023 2026] [proxy_fcgi:error] [pid 46264:tid 46299] [client 20.151.141.24:14399] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:54:56.248578 2026] [:error] [pid 46264:tid 46288] [client 20.151.141.24:14399] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/wp-config.php"] [unique_id "abxGgIp3TruHFmWOt5EaygAAAAU"]
[Fri Mar 20 02:55:03.068128 2026] [proxy_fcgi:error] [pid 46124:tid 46197] [client 20.151.141.24:14358] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 02:55:03.274484 2026] [:error] [pid 46124:tid 46192] [client 20.151.141.24:14358] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abxGh0zMrlLOY6zyCjKddQAAAEw"]
[Fri Mar 20 02:55:06.975621 2026] [:error] [pid 46126:tid 46224] [client 20.151.141.24:14391] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abxGiqQ44YePbsZz3j7oAwAAAQc"]
[Fri Mar 20 02:55:08.536893 2026] [:error] [pid 46124:tid 46203] [client 20.151.141.24:15107] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "abxGjEzMrlLOY6zyCjKdhgAAAFc"]
[Fri Mar 20 02:55:13.590988 2026] [:error] [pid 46264:tid 46290] [client 20.151.141.24:14345] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "abxGkYp3TruHFmWOt5EbAwAAAAc"]
[Fri Mar 20 02:55:17.762313 2026] [:error] [pid 11258:tid 11262] [client 20.151.141.24:14340] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "abxGlZPHb95f6xzHJOdFdAAAAMI"]
[Fri Mar 20 02:55:20.293801 2026] [:error] [pid 46124:tid 46197] [client 20.151.141.24:15135] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "abxGmEzMrlLOY6zyCjKdmAAAAFE"]
[Fri Mar 20 02:55:22.642147 2026] [:error] [pid 11258:tid 11279] [client 20.151.141.24:14359] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "abxGmpPHb95f6xzHJOdFhQAAANM"]
[Fri Mar 20 04:20:17.876904 2026] [proxy_fcgi:error] [pid 58230:tid 58236] [client 20.151.141.24:15269] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 04:20:18.088315 2026] [proxy_fcgi:error] [pid 58230:tid 58249] [client 20.151.141.24:15269] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 04:20:18.299732 2026] [proxy_fcgi:error] [pid 58230:tid 58253] [client 20.151.141.24:15269] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 04:20:19.037043 2026] [proxy_fcgi:error] [pid 58230:tid 58255] [client 20.151.141.24:15269] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 04:20:20.256883 2026] [proxy_fcgi:error] [pid 58230:tid 58250] [client 20.151.141.24:15269] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 04:20:21.319512 2026] [:error] [pid 58230:tid 58256] [client 20.151.141.24:15269] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "abxahfeBObYxbmHTzfqWdgAAANc"]
[Fri Mar 20 04:20:22.422015 2026] [:error] [pid 58230:tid 58249] [client 20.151.141.24:15255] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "abxahveBObYxbmHTzfqWeQAAANA"]
[Fri Mar 20 04:20:25.815591 2026] [:error] [pid 58230:tid 58242] [client 20.151.141.24:15178] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "abxaifeBObYxbmHTzfqWiAAAAMk"]
[Fri Mar 20 04:20:28.155618 2026] [:error] [pid 58230:tid 58240] [client 20.151.141.24:15170] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/wp-login.php"] [unique_id "abxajPeBObYxbmHTzfqWlQAAAMc"]
[Fri Mar 20 05:42:04.592001 2026] [proxy_fcgi:error] [pid 58126:tid 58181] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:04.902121 2026] [proxy_fcgi:error] [pid 58126:tid 58190] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:05.114861 2026] [proxy_fcgi:error] [pid 58126:tid 58189] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:05.331245 2026] [proxy_fcgi:error] [pid 58126:tid 58177] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:05.547884 2026] [proxy_fcgi:error] [pid 58126:tid 58187] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:06.340436 2026] [proxy_fcgi:error] [pid 58126:tid 58188] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:06.590739 2026] [proxy_fcgi:error] [pid 58126:tid 58194] [client 20.151.141.24:14857] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 05:42:06.798412 2026] [:error] [pid 58126:tid 58174] [client 20.151.141.24:14857] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cd.php"] [unique_id "abxtrqKAmdXQSS0Y5KBcKgAAAEI"]
[Fri Mar 20 05:42:08.418534 2026] [:error] [pid 43163:tid 43178] [client 20.151.141.24:14970] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cd.php"] [unique_id "abxtsJ_n4JP_ko9XUsz_uwAAAQs"]
[Fri Mar 20 05:42:09.689294 2026] [:error] [pid 58126:tid 58172] [client 20.151.141.24:14948] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cd.php"] [unique_id "abxtsaKAmdXQSS0Y5KBcLQAAAEA"]
[Fri Mar 20 05:42:10.907211 2026] [:error] [pid 58127:tid 58211] [client 20.151.141.24:14972] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cd.php"] [unique_id "abxtsrQ_HbYy8C6I_EH3rgAAAIw"]
[Fri Mar 20 07:03:44.147678 2026] [proxy_fcgi:error] [pid 43163:tid 43180] [client 20.151.141.24:14864] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 07:03:44.657592 2026] [proxy_fcgi:error] [pid 43163:tid 43185] [client 20.151.141.24:14864] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 07:03:45.980683 2026] [proxy_fcgi:error] [pid 43163:tid 43171] [client 20.151.141.24:14864] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 07:03:46.250636 2026] [proxy_fcgi:error] [pid 43163:tid 43167] [client 20.151.141.24:14864] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 07:03:46.785729 2026] [:error] [pid 43163:tid 43174] [client 20.151.141.24:14864] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "abyA0p_n4JP_ko9XUswVcgAAAQc"]
[Fri Mar 20 07:03:48.442914 2026] [:error] [pid 55239:tid 55277] [client 20.151.141.24:15180] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abyA1KycM6mGWSmcyoLx7gAAAcQ"]
[Fri Mar 20 07:03:50.855837 2026] [:error] [pid 55452:tid 55493] [client 20.151.141.24:15182] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "abyA1olFvOIliSP0R2BMIwAAA4o"]
[Fri Mar 20 07:03:52.412909 2026] [:error] [pid 55451:tid 55469] [client 20.151.141.24:15215] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "abyA2E0xWQZtU7cXlgTjbAAAA04"]
[Fri Mar 20 07:03:54.000947 2026] [:error] [pid 55239:tid 55281] [client 20.151.141.24:15218] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "abyA2aycM6mGWSmcyoLx9QAAAcg"]
[Fri Mar 20 07:03:55.687446 2026] [:error] [pid 55299:tid 55327] [client 20.151.141.24:15181] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "abyA2_oGhbNgkNIkZwl9XQAAAhY"]
[Fri Mar 20 20:13:30.143109 2026] [:error] [pid 49082:tid 49165] [client 216.24.212.27:51451] [client 216.24.212.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.27, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ab056qpllYJI1LUIdL-4RQAAAVc"]
[Fri Mar 20 20:13:30.170071 2026] [proxy_fcgi:error] [pid 49082:tid 49165] [client 216.24.212.27:51451] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:51:44.122980 2026] [:error] [pid 49170:tid 49174] [client 35.230.34.156:53950] [client 35.230.34.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.34.156, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "ab1C4M-c8ctLVDCqUJWJ2wAAAAA"]
[Fri Mar 20 20:51:44.133816 2026] [proxy_fcgi:error] [pid 49170:tid 49174] [client 35.230.34.156:53950] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:51:46.815647 2026] [:error] [pid 49170:tid 49192] [client 35.230.34.156:53950] [client 35.230.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ab1C4s-c8ctLVDCqUJWJ8QAAABI"]
[Fri Mar 20 20:51:47.969951 2026] [:error] [pid 49082:tid 49155] [client 35.230.34.156:57628] [client 35.230.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ab1C46pllYJI1LUIdL_GKQAAAU0"]
[Fri Mar 20 20:51:48.766708 2026] [:error] [pid 49082:tid 49163] [client 35.230.34.156:62985] [client 35.230.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ab1C5KpllYJI1LUIdL_GLQAAAVU"]
[Fri Mar 20 20:51:49.352579 2026] [:error] [pid 49170:tid 49191] [client 35.230.34.156:53534] [client 35.230.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ab1C5c-c8ctLVDCqUJWJ8wAAABE"]
[Fri Mar 20 20:51:50.438185 2026] [:error] [pid 38378:tid 38402] [client 35.230.34.156:58198] [client 35.230.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ab1C5lKb3npPsu9Iib13KgAAAhQ"]
[Sat Mar 21 08:25:03.476587 2026] [:error] [pid 33795:tid 33799] [client 104.28.246.112:64667] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ab3lX4C7ga_7KOYAaSjFKQAAAkE"]
[Sun Mar 22 06:42:44.741256 2026] [:error] [pid 51468:tid 51481] [client 178.128.102.180:59636] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "ab8e5E2TppSvA8W5CBSqYAAAAMU"]
[Sun Mar 22 06:42:45.063585 2026] [:error] [pid 51363:tid 51437] [client 178.128.102.180:64061] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ab8e5Vwa9x6OCTRkhl1gZQAAAIg"]
[Sun Mar 22 06:42:45.968383 2026] [:error] [pid 51363:tid 51432] [client 178.128.102.180:59636] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "ab8e5Vwa9x6OCTRkhl1gagAAAIQ"]
[Sun Mar 22 06:42:46.437838 2026] [:error] [pid 51363:tid 51442] [client 178.128.102.180:49231] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ab8e5lwa9x6OCTRkhl1gbAAAAI0"]
[Sun Mar 22 20:44:48.181073 2026] [proxy_fcgi:error] [pid 30166:tid 30174] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:48.457514 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:48.748884 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:48.989443 2026] [proxy_fcgi:error] [pid 30166:tid 30190] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:49.295524 2026] [proxy_fcgi:error] [pid 30166:tid 30189] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:49.598596 2026] [proxy_fcgi:error] [pid 30166:tid 30187] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:49.838333 2026] [proxy_fcgi:error] [pid 30166:tid 30188] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:50.153228 2026] [proxy_fcgi:error] [pid 30166:tid 30182] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:50.540100 2026] [proxy_fcgi:error] [pid 30166:tid 30192] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:50.781138 2026] [proxy_fcgi:error] [pid 30166:tid 30199] [client 40.89.156.15:17618] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:44:51.020854 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:17618] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ab_kQ7m4_26jKMD0zy36PgAAAVU"]
[Sun Mar 22 20:44:51.803347 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:2530] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ab_kQ1wa9x6OCTRkhl29lQAAAIw"]
[Sun Mar 22 20:44:52.625368 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:30985] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ab_kRLm4_26jKMD0zy36RwAAAU8"]
[Sun Mar 22 20:44:53.383332 2026] [:error] [pid 40039:tid 40052] [client 40.89.156.15:35051] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ab_kRR3aDgUJfBYishm6rAAAAQs"]
[Sun Mar 22 20:44:54.269917 2026] [:error] [pid 30166:tid 30173] [client 40.89.156.15:35016] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ab_kRrm4_26jKMD0zy36VQAAAUI"]
[Sun Mar 22 20:44:55.341821 2026] [:error] [pid 30166:tid 30187] [client 40.89.156.15:17903] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ab_kR7m4_26jKMD0zy36XAAAAUw"]
[Sun Mar 22 20:44:56.544354 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:35067] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ab_kSLm4_26jKMD0zy36ZAAAAUQ"]
[Sun Mar 22 20:44:57.662560 2026] [:error] [pid 51362:tid 51423] [client 40.89.156.15:51904] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ab_kScOwPm3DXzTDjUfIvAAAAFY"]
[Sun Mar 22 20:44:58.244479 2026] [:error] [pid 51362:tid 51425] [client 40.89.156.15:39809] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ab_kSsOwPm3DXzTDjUfIwAAAAFg"]
[Sun Mar 22 20:44:58.931182 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:25443] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ab_kSsOwPm3DXzTDjUfIwgAAAFE"]
[Sun Mar 22 20:45:01.201619 2026] [:error] [pid 30166:tid 30176] [client 40.89.156.15:15938] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ab_kTbm4_26jKMD0zy36cQAAAUU"]
[Sun Mar 22 20:45:04.104491 2026] [:error] [pid 30166:tid 30200] [client 40.89.156.15:15438] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ab_kULm4_26jKMD0zy36ewAAAVc"]
[Sun Mar 22 20:45:06.286058 2026] [:error] [pid 51362:tid 51400] [client 40.89.156.15:21690] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_kUsOwPm3DXzTDjUfJLgAAAEA"]
[Sun Mar 22 20:45:08.149571 2026] [:error] [pid 40039:tid 40059] [client 40.89.156.15:51504] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_kVB3aDgUJfBYishm6tQAAARI"]
[Sun Mar 22 20:45:09.987156 2026] [:error] [pid 51362:tid 51412] [client 40.89.156.15:58369] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_kVcOwPm3DXzTDjUfJQwAAAEs"]
[Sun Mar 22 20:45:10.987642 2026] [:error] [pid 51361:tid 51397] [client 40.89.156.15:29105] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_kVhXYUsdvKC9YWpXq6QAAABg"]
[Sun Mar 22 20:45:12.807984 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:2554] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ab_kWE2TppSvA8W5CBRbBwAAAMY"]
[Sun Mar 22 20:45:13.460214 2026] [:error] [pid 51361:tid 51392] [client 40.89.156.15:51474] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ab_kWRXYUsdvKC9YWpXq8AAAABQ"]
[Sun Mar 22 20:45:14.276826 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:56562] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ab_kWhXYUsdvKC9YWpXq9AAAAAQ"]
[Sun Mar 22 20:45:15.375293 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:18843] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ab_kWxXYUsdvKC9YWpXq9wAAAAc"]
[Sun Mar 22 20:45:16.181736 2026] [:error] [pid 40039:tid 40065] [client 40.89.156.15:27551] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ab_kXB3aDgUJfBYishm6wQAAARg"]
[Sun Mar 22 20:45:17.432868 2026] [:error] [pid 30166:tid 30171] [client 40.89.156.15:59098] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ab_kXbm4_26jKMD0zy36oQAAAUE"]
[Sun Mar 22 20:45:18.273604 2026] [:error] [pid 51363:tid 51428] [client 40.89.156.15:21667] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ab_kXlwa9x6OCTRkhl29uQAAAIA"]
[Sun Mar 22 20:45:18.960054 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:2800] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ab_kXk2TppSvA8W5CBRbDgAAAMc"]
[Sun Mar 22 20:45:19.538561 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:20926] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ab_kX7m4_26jKMD0zy36pgAAAVQ"]
[Sun Mar 22 20:45:20.207211 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:52404] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ab_kYLm4_26jKMD0zy36qgAAAUQ"]
[Sun Mar 22 20:45:21.026888 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:52437] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ab_kYbm4_26jKMD0zy36rgAAAUg"]
[Sun Mar 22 20:45:21.664267 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:24509] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ab_kYcOwPm3DXzTDjUfJVQAAAEI"]
[Sun Mar 22 20:45:22.376029 2026] [:error] [pid 51361:tid 51388] [client 40.89.156.15:29148] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ab_kYhXYUsdvKC9YWpXrBwAAABA"]
[Sun Mar 22 20:45:23.039355 2026] [:error] [pid 40039:tid 40056] [client 40.89.156.15:26141] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ab_kYx3aDgUJfBYishm6zAAAAQ8"]
[Sun Mar 22 20:45:23.747931 2026] [:error] [pid 40039:tid 40049] [client 40.89.156.15:46563] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ab_kYx3aDgUJfBYishm60QAAAQg"]
[Sun Mar 22 20:45:25.414476 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:36880] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ab_kZcOwPm3DXzTDjUfJWgAAAE0"]
[Sun Mar 22 20:45:26.519013 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:24570] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ab_kZrm4_26jKMD0zy36zgAAAVA"]
[Sun Mar 22 20:45:27.257689 2026] [:error] [pid 40039:tid 40042] [client 40.89.156.15:36870] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ab_kZx3aDgUJfBYishm62AAAAQE"]
[Sun Mar 22 20:45:28.256538 2026] [:error] [pid 51361:tid 51393] [client 40.89.156.15:23536] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ab_kaBXYUsdvKC9YWpXrEQAAABU"]
[Sun Mar 22 20:45:29.129954 2026] [:error] [pid 40039:tid 40043] [client 40.89.156.15:12167] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ab_kaR3aDgUJfBYishm62wAAAQI"]
[Sun Mar 22 20:45:30.140839 2026] [:error] [pid 51363:tid 51452] [client 40.89.156.15:40374] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ab_kalwa9x6OCTRkhl29xwAAAJY"]
[Sun Mar 22 20:45:30.867813 2026] [:error] [pid 51363:tid 51451] [client 40.89.156.15:12169] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ab_kalwa9x6OCTRkhl29zAAAAJU"]
[Sun Mar 22 20:45:31.524978 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:33438] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ab_ka1wa9x6OCTRkhl29zwAAAIw"]
[Sun Mar 22 20:45:33.691871 2026] [:error] [pid 51468:tid 51498] [client 40.89.156.15:14300] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ab_kbU2TppSvA8W5CBRbIwAAANY"]
[Sun Mar 22 20:45:34.596541 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:11956] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "ab_kbhXYUsdvKC9YWpXrIwAAAAQ"]
[Sun Mar 22 20:45:35.486720 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:14301] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "ab_kbxXYUsdvKC9YWpXrJAAAAAk"]
[Sun Mar 22 20:45:36.395815 2026] [:error] [pid 40039:tid 40064] [client 40.89.156.15:40833] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "ab_kcB3aDgUJfBYishm63wAAARc"]
[Sun Mar 22 20:45:37.506470 2026] [:error] [pid 51363:tid 51440] [client 40.89.156.15:55815] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "ab_kcVwa9x6OCTRkhl292QAAAIs"]
[Sun Mar 22 20:45:38.725178 2026] [:error] [pid 51361:tid 51382] [client 40.89.156.15:30178] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "ab_kchXYUsdvKC9YWpXrKwAAAAs"]
[Sun Mar 22 20:45:40.166858 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:2650] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "ab_kdLm4_26jKMD0zy367gAAAVU"]
[Sun Mar 22 20:45:41.131993 2026] [:error] [pid 30166:tid 30187] [client 40.89.156.15:3045] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "ab_kdbm4_26jKMD0zy369QAAAUw"]
[Sun Mar 22 20:45:42.342992 2026] [:error] [pid 51362:tid 51412] [client 40.89.156.15:14283] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "ab_kdsOwPm3DXzTDjUfJggAAAEs"]
[Sun Mar 22 20:45:43.417057 2026] [:error] [pid 51361:tid 51372] [client 40.89.156.15:48534] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "ab_kdxXYUsdvKC9YWpXrOAAAAAE"]
[Sun Mar 22 20:45:44.222000 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:15048] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "ab_keLm4_26jKMD0zy37AgAAAVM"]
[Sun Mar 22 20:45:44.844092 2026] [:error] [pid 30166:tid 30173] [client 40.89.156.15:31657] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "ab_keLm4_26jKMD0zy37BAAAAUI"]
[Sun Mar 22 20:45:45.707907 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:15089] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "ab_keRXYUsdvKC9YWpXrOgAAAAk"]
[Sun Mar 22 20:45:48.884056 2026] [:error] [pid 30166:tid 30192] [client 40.89.156.15:18127] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "ab_kfLm4_26jKMD0zy37DQAAAVE"]
[Sun Mar 22 20:45:49.752945 2026] [:error] [pid 40039:tid 40060] [client 40.89.156.15:12783] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "ab_kfR3aDgUJfBYishm66wAAARM"]
[Sun Mar 22 20:45:50.947089 2026] [proxy_fcgi:error] [pid 40039:tid 40065] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:51.186067 2026] [proxy_fcgi:error] [pid 40039:tid 40064] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:51.521728 2026] [proxy_fcgi:error] [pid 40039:tid 40061] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:51.819454 2026] [proxy_fcgi:error] [pid 40039:tid 40041] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:52.063446 2026] [proxy_fcgi:error] [pid 40039:tid 40045] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:52.304206 2026] [proxy_fcgi:error] [pid 40039:tid 40044] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:52.663003 2026] [proxy_fcgi:error] [pid 40039:tid 40047] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:53.030141 2026] [proxy_fcgi:error] [pid 40039:tid 40053] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:53.269269 2026] [proxy_fcgi:error] [pid 40039:tid 40055] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:53.605865 2026] [proxy_fcgi:error] [pid 40039:tid 40063] [client 40.89.156.15:12786] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:45:54.111704 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:12786] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ab_kgh3aDgUJfBYishm7AgAAARU"]
[Sun Mar 22 20:45:55.277586 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:22730] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ab_kgxXYUsdvKC9YWpXrTgAAABE"]
[Sun Mar 22 20:45:56.765003 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:29668] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ab_khLm4_26jKMD0zy37JwAAAVA"]
[Sun Mar 22 20:45:57.642970 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:41370] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ab_khRXYUsdvKC9YWpXrUQAAAAw"]
[Sun Mar 22 20:45:59.416773 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:55909] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ab_khxXYUsdvKC9YWpXrUgAAAAk"]
[Sun Mar 22 20:46:00.112139 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:12485] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ab_kiE2TppSvA8W5CBRbQAAAAMs"]
[Sun Mar 22 20:46:01.190573 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:32058] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ab_kiU2TppSvA8W5CBRbQQAAANc"]
[Sun Mar 22 20:46:02.845124 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:41365] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ab_kirm4_26jKMD0zy37OAAAAVM"]
[Sun Mar 22 20:46:03.963839 2026] [:error] [pid 40039:tid 40059] [client 40.89.156.15:54853] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ab_kix3aDgUJfBYishm7GwAAARI"]
[Sun Mar 22 20:46:05.240763 2026] [:error] [pid 51361:tid 51397] [client 40.89.156.15:54892] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ab_kjRXYUsdvKC9YWpXrWQAAABg"]
[Sun Mar 22 20:46:06.572074 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:29686] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ab_kjrm4_26jKMD0zy37QQAAAVA"]
[Sun Mar 22 20:46:07.852854 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:18379] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ab_kj7m4_26jKMD0zy37TQAAAUs"]
[Sun Mar 22 20:46:09.268597 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:21269] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ab_kkbm4_26jKMD0zy37WAAAAVQ"]
[Sun Mar 22 20:46:10.667706 2026] [:error] [pid 51361:tid 51382] [client 40.89.156.15:47809] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ab_kkhXYUsdvKC9YWpXrXQAAAAs"]
[Sun Mar 22 20:46:11.552700 2026] [:error] [pid 40039:tid 40048] [client 40.89.156.15:17186] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ab_kkx3aDgUJfBYishm7HwAAAQc"]
[Sun Mar 22 20:46:12.568568 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:23426] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ab_klLm4_26jKMD0zy37dAAAAUs"]
[Sun Mar 22 20:46:13.623304 2026] [:error] [pid 40039:tid 40056] [client 40.89.156.15:20409] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "ab_klR3aDgUJfBYishm7IgAAAQ8"]
[Sun Mar 22 20:46:14.511744 2026] [:error] [pid 51362:tid 51404] [client 40.89.156.15:15414] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "ab_klsOwPm3DXzTDjUfJjgAAAEM"]
[Sun Mar 22 20:46:16.185901 2026] [:error] [pid 40039:tid 40064] [client 40.89.156.15:15268] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "ab_kmB3aDgUJfBYishm7JQAAARc"]
[Sun Mar 22 20:46:16.882453 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:17199] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "ab_kmBXYUsdvKC9YWpXrYwAAAAc"]
[Sun Mar 22 20:46:17.926616 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:19670] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ab_kmU2TppSvA8W5CBRbcgAAANI"]
[Sun Mar 22 20:46:18.675175 2026] [:error] [pid 30166:tid 30188] [client 40.89.156.15:17588] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ab_kmrm4_26jKMD0zy37oAAAAU0"]
[Sun Mar 22 20:46:20.012760 2026] [:error] [pid 30166:tid 30174] [client 40.89.156.15:32421] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ab_knLm4_26jKMD0zy37pQAAAUM"]
[Sun Mar 22 20:46:20.952311 2026] [:error] [pid 51468:tid 51493] [client 40.89.156.15:15248] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ab_knE2TppSvA8W5CBRbeQAAANE"]
[Sun Mar 22 20:46:22.747306 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:15233] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_knrm4_26jKMD0zy37uAAAAUo"]
[Sun Mar 22 20:46:23.831226 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:14750] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_kn02TppSvA8W5CBRbgQAAAMs"]
[Sun Mar 22 20:46:24.584687 2026] [:error] [pid 30166:tid 30177] [client 40.89.156.15:15875] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_koLm4_26jKMD0zy37wQAAAUY"]
[Sun Mar 22 20:46:25.245178 2026] [:error] [pid 30166:tid 30200] [client 40.89.156.15:19667] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_kobm4_26jKMD0zy37ygAAAVc"]
[Sun Mar 22 20:46:26.630424 2026] [:error] [pid 30166:tid 30176] [client 40.89.156.15:32386] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ab_korm4_26jKMD0zy37zQAAAUU"]
[Sun Mar 22 20:46:28.017039 2026] [:error] [pid 40039:tid 40056] [client 40.89.156.15:15691] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ab_kpB3aDgUJfBYishm7MAAAAQ8"]
[Sun Mar 22 20:46:29.529252 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:15014] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ab_kpVwa9x6OCTRkhl298wAAAIY"]
[Sun Mar 22 20:46:30.383542 2026] [:error] [pid 30166:tid 30176] [client 40.89.156.15:20699] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ab_kprm4_26jKMD0zy38AwAAAUU"]
[Sun Mar 22 20:46:31.103639 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:53752] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ab_kp1wa9x6OCTRkhl299QAAAI0"]
[Sun Mar 22 20:46:32.295427 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:48487] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ab_kqMOwPm3DXzTDjUfJwgAAAFE"]
[Sun Mar 22 20:46:33.459731 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:20972] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ab_kqbm4_26jKMD0zy38EwAAAVI"]
[Sun Mar 22 20:46:36.201151 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:42559] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ab_krLm4_26jKMD0zy38GwAAAVQ"]
[Sun Mar 22 20:46:37.338869 2026] [:error] [pid 51361:tid 51381] [client 40.89.156.15:18627] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ab_krRXYUsdvKC9YWpXrowAAAAo"]
[Sun Mar 22 20:46:39.846474 2026] [:error] [pid 40039:tid 40063] [client 40.89.156.15:19887] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ab_krx3aDgUJfBYishm7ZAAAARY"]
[Sun Mar 22 20:46:41.552380 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:19156] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ab_ksRXYUsdvKC9YWpXrtgAAABE"]
[Sun Mar 22 20:46:42.430891 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:42553] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ab_ksk2TppSvA8W5CBRbrgAAANI"]
[Sun Mar 22 20:46:43.823132 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:58476] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ab_ksx3aDgUJfBYishm7egAAARA"]
[Sun Mar 22 20:46:45.115163 2026] [:error] [pid 51362:tid 51401] [client 40.89.156.15:2363] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ab_ktcOwPm3DXzTDjUfJ0wAAAEE"]
[Sun Mar 22 20:46:46.789819 2026] [:error] [pid 40039:tid 40042] [client 40.89.156.15:24867] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ab_kth3aDgUJfBYishm7fAAAAQE"]
[Sun Mar 22 20:46:47.777345 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:14847] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ab_ktxXYUsdvKC9YWpXrxAAAABE"]
[Sun Mar 22 20:46:50.169898 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:17486] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ab_kusOwPm3DXzTDjUfJ3wAAAEg"]
[Sun Mar 22 20:46:51.240723 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:53066] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ab_ku8OwPm3DXzTDjUfJ4gAAAFQ"]
[Sun Mar 22 20:46:51.926832 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:16244] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ab_kuxXYUsdvKC9YWpXr0gAAAAQ"]
[Sun Mar 22 20:46:52.971494 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:12031] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ab_kvFwa9x6OCTRkhl2-EgAAAIY"]
[Sun Mar 22 20:46:54.376258 2026] [proxy_fcgi:error] [pid 51363:tid 51429] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:54.766281 2026] [proxy_fcgi:error] [pid 51363:tid 51447] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:55.006222 2026] [proxy_fcgi:error] [pid 51363:tid 51449] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:55.365874 2026] [proxy_fcgi:error] [pid 51363:tid 51446] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:55.712381 2026] [proxy_fcgi:error] [pid 51363:tid 51448] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:56.074957 2026] [proxy_fcgi:error] [pid 51363:tid 51452] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:56.801725 2026] [proxy_fcgi:error] [pid 51363:tid 51438] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:57.040740 2026] [proxy_fcgi:error] [pid 51363:tid 51433] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:57.310447 2026] [proxy_fcgi:error] [pid 51363:tid 51432] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:57.549106 2026] [proxy_fcgi:error] [pid 51363:tid 51439] [client 40.89.156.15:2246] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:46:57.881566 2026] [:error] [pid 51363:tid 51437] [client 40.89.156.15:2246] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "ab_kwVwa9x6OCTRkhl2-IgAAAIg"]
[Sun Mar 22 20:46:58.622302 2026] [:error] [pid 51468:tid 51498] [client 40.89.156.15:59063] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "ab_kwk2TppSvA8W5CBRbuAAAANY"]
[Sun Mar 22 20:46:59.395024 2026] [:error] [pid 40039:tid 40052] [client 40.89.156.15:17529] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "ab_kwx3aDgUJfBYishm7jQAAAQs"]
[Sun Mar 22 20:47:00.141671 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:22506] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "ab_kxBXYUsdvKC9YWpXr6gAAAAQ"]
[Sun Mar 22 20:47:00.888633 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:2241] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "ab_kxB3aDgUJfBYishm7kAAAARA"]
[Sun Mar 22 20:47:01.572583 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:59067] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "ab_kxU2TppSvA8W5CBRbvAAAAMw"]
[Sun Mar 22 20:47:02.305216 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:16465] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "ab_kxk2TppSvA8W5CBRbvwAAANU"]
[Sun Mar 22 20:47:02.994029 2026] [:error] [pid 51362:tid 51424] [client 40.89.156.15:22502] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "ab_kxsOwPm3DXzTDjUfKBgAAAFc"]
[Sun Mar 22 20:47:03.647457 2026] [:error] [pid 51362:tid 51411] [client 40.89.156.15:40306] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_kx8OwPm3DXzTDjUfKCQAAAEo"]
[Sun Mar 22 20:47:04.360941 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:59047] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_kyBXYUsdvKC9YWpXr_gAAAAk"]
[Sun Mar 22 20:47:04.986727 2026] [:error] [pid 30166:tid 30189] [client 40.89.156.15:32915] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_kyLm4_26jKMD0zy38PgAAAU4"]
[Sun Mar 22 20:47:05.577567 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:19081] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ab_kyRXYUsdvKC9YWpXsAgAAAAQ"]
[Sun Mar 22 20:47:06.247122 2026] [:error] [pid 51361:tid 51391] [client 40.89.156.15:24013] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "ab_kyhXYUsdvKC9YWpXsBgAAABM"]
[Sun Mar 22 20:47:06.951810 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:33474] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "ab_kyrm4_26jKMD0zy38RQAAAUs"]
[Sun Mar 22 20:47:07.625578 2026] [:error] [pid 51362:tid 51417] [client 40.89.156.15:17484] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "ab_ky8OwPm3DXzTDjUfKDwAAAFA"]
[Sun Mar 22 20:47:08.286589 2026] [:error] [pid 30166:tid 30189] [client 40.89.156.15:2270] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "ab_kzLm4_26jKMD0zy38SwAAAU4"]
[Sun Mar 22 20:47:09.081674 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:11986] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ab_kzU2TppSvA8W5CBRbyQAAANI"]
[Sun Mar 22 20:47:09.759921 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:16215] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ab_kzRXYUsdvKC9YWpXsDAAAAAk"]
[Sun Mar 22 20:47:10.646736 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:33517] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ab_kzrm4_26jKMD0zy38UAAAAU8"]
[Sun Mar 22 20:47:11.350274 2026] [:error] [pid 51361:tid 51387] [client 40.89.156.15:18318] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ab_kzxXYUsdvKC9YWpXsEgAAAA8"]
[Sun Mar 22 20:47:12.078917 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:12014] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "ab_k0E2TppSvA8W5CBRb0gAAAMs"]
[Sun Mar 22 20:47:13.159610 2026] [:error] [pid 51362:tid 51415] [client 40.89.156.15:16202] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "ab_k0cOwPm3DXzTDjUfKGAAAAE4"]
[Sun Mar 22 20:47:14.590138 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:59687] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "ab_k0rm4_26jKMD0zy38YgAAAVM"]
[Sun Mar 22 20:47:15.478611 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:2267] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "ab_k002TppSvA8W5CBRb1QAAAMM"]
[Sun Mar 22 20:47:16.268548 2026] [:error] [pid 51468:tid 51498] [client 40.89.156.15:37544] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ab_k1E2TppSvA8W5CBRb2AAAANY"]
[Sun Mar 22 20:47:17.094206 2026] [:error] [pid 40039:tid 40049] [client 40.89.156.15:16459] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ab_k1R3aDgUJfBYishm7oAAAAQg"]
[Sun Mar 22 20:47:17.954559 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:17482] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ab_k1U2TppSvA8W5CBRb2wAAAMU"]
[Sun Mar 22 20:47:18.744227 2026] [:error] [pid 40039:tid 40043] [client 40.89.156.15:36034] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ab_k1h3aDgUJfBYishm7qAAAAQI"]
[Sun Mar 22 20:47:19.506092 2026] [:error] [pid 30166:tid 30176] [client 40.89.156.15:25727] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ab_k17m4_26jKMD0zy38bgAAAUU"]
[Sun Mar 22 20:47:20.142673 2026] [:error] [pid 51361:tid 51374] [client 40.89.156.15:11686] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ab_k2BXYUsdvKC9YWpXsNgAAAAM"]
[Sun Mar 22 20:47:20.841312 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:18322] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ab_k2MOwPm3DXzTDjUfKGgAAAE0"]
[Sun Mar 22 20:47:21.497272 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:37526] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ab_k2U2TppSvA8W5CBRb4AAAAMs"]
[Sun Mar 22 20:47:22.261700 2026] [:error] [pid 30166:tid 30189] [client 40.89.156.15:32923] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "ab_k2rm4_26jKMD0zy38dwAAAU4"]
[Sun Mar 22 20:47:23.124807 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:16477] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "ab_k2xXYUsdvKC9YWpXsPAAAAAA"]
[Sun Mar 22 20:47:23.855667 2026] [:error] [pid 30166:tid 30188] [client 40.89.156.15:18307] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "ab_k27m4_26jKMD0zy38gQAAAU0"]
[Sun Mar 22 20:47:24.747214 2026] [:error] [pid 40039:tid 40054] [client 40.89.156.15:32079] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "ab_k3B3aDgUJfBYishm7tQAAAQ0"]
[Sun Mar 22 20:47:25.845670 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:59051] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ab_k3U2TppSvA8W5CBRb5wAAAME"]
[Sun Mar 22 20:47:26.450838 2026] [:error] [pid 51361:tid 51391] [client 40.89.156.15:32089] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ab_k3hXYUsdvKC9YWpXsRQAAABM"]
[Sun Mar 22 20:47:27.151410 2026] [:error] [pid 40039:tid 40063] [client 40.89.156.15:36090] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ab_k3x3aDgUJfBYishm7uAAAARY"]
[Sun Mar 22 20:47:27.720973 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:59058] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ab_k37m4_26jKMD0zy38iwAAAVU"]
[Sun Mar 22 20:47:28.633769 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:37561] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ab_k4Lm4_26jKMD0zy38jwAAAUg"]
[Sun Mar 22 20:47:29.202754 2026] [:error] [pid 51362:tid 51417] [client 40.89.156.15:33988] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ab_k4cOwPm3DXzTDjUfKHwAAAFA"]
[Sun Mar 22 20:47:29.849466 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:59674] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ab_k4bm4_26jKMD0zy38lwAAAVg"]
[Sun Mar 22 20:47:30.585221 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:37542] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ab_k4hXYUsdvKC9YWpXsTwAAAAw"]
[Sun Mar 22 20:47:31.210034 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:55423] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ab_k47m4_26jKMD0zy38mQAAAUs"]
[Sun Mar 22 20:47:32.090563 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:32115] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ab_k5B3aDgUJfBYishm7vQAAARA"]
[Sun Mar 22 20:47:32.804129 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:32947] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ab_k5BXYUsdvKC9YWpXsUwAAAAQ"]
[Sun Mar 22 20:47:33.667271 2026] [:error] [pid 51468:tid 51478] [client 40.89.156.15:32916] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ab_k5U2TppSvA8W5CBRb8AAAAMI"]
[Sun Mar 22 20:47:35.154879 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:49134] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "ab_k5xXYUsdvKC9YWpXsWwAAAAA"]
[Sun Mar 22 20:47:35.926580 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:18346] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "ab_k51wa9x6OCTRkhl2-MQAAAIw"]
[Sun Mar 22 20:47:36.541114 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:25665] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "ab_k6Lm4_26jKMD0zy38pQAAAVM"]
[Sun Mar 22 20:47:37.229687 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:20186] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "ab_k6bm4_26jKMD0zy38qQAAAVA"]
[Sun Mar 22 20:47:38.700809 2026] [:error] [pid 30166:tid 30192] [client 40.89.156.15:11691] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "ab_k6rm4_26jKMD0zy38sgAAAVE"]
[Sun Mar 22 20:47:39.896997 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:37520] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "ab_k602TppSvA8W5CBRb9QAAAMY"]
[Sun Mar 22 20:47:40.608942 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:27144] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "ab_k7Lm4_26jKMD0zy38uQAAAU8"]
[Sun Mar 22 20:47:41.350337 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:22984] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "ab_k7cOwPm3DXzTDjUfKKwAAAEg"]
[Sun Mar 22 20:47:42.495431 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:32943] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "ab_k7rm4_26jKMD0zy38wgAAAVQ"]
[Sun Mar 22 20:47:43.598244 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:27164] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "ab_k71wa9x6OCTRkhl2-NgAAAJI"]
[Sun Mar 22 20:47:44.995566 2026] [:error] [pid 51362:tid 51400] [client 40.89.156.15:32097] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "ab_k8MOwPm3DXzTDjUfKMAAAAEA"]
[Sun Mar 22 20:47:46.110873 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:11711] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "ab_k8h3aDgUJfBYishm7xgAAARU"]
[Sun Mar 22 20:47:47.305013 2026] [:error] [pid 51362:tid 51416] [client 40.89.156.15:2842] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "ab_k88OwPm3DXzTDjUfKNAAAAE8"]
[Sun Mar 22 20:47:48.543651 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:38109] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "ab_k9Lm4_26jKMD0zy38zgAAAUo"]
[Sun Mar 22 20:47:49.415754 2026] [:error] [pid 51361:tid 51388] [client 40.89.156.15:54355] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "ab_k9RXYUsdvKC9YWpXsegAAABA"]
[Sun Mar 22 20:47:51.197313 2026] [:error] [pid 51361:tid 51377] [client 40.89.156.15:11649] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "ab_k9xXYUsdvKC9YWpXsfQAAAAY"]
[Sun Mar 22 20:47:53.014446 2026] [:error] [pid 51362:tid 51417] [client 40.89.156.15:54346] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "ab_k-cOwPm3DXzTDjUfKOwAAAFA"]
[Sun Mar 22 20:47:54.793768 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:27198] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "ab_k-rm4_26jKMD0zy385AAAAUg"]
[Sun Mar 22 20:47:55.518000 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:55371] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "ab_k-xXYUsdvKC9YWpXsgQAAAAk"]
[Sun Mar 22 20:47:56.767140 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:34040] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "ab_k_E2TppSvA8W5CBRcCAAAAMg"]
[Sun Mar 22 20:47:59.897648 2026] [proxy_fcgi:error] [pid 30166:tid 30177] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:00.141600 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:00.384288 2026] [proxy_fcgi:error] [pid 30166:tid 30193] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:00.623816 2026] [proxy_fcgi:error] [pid 30166:tid 30170] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:00.869192 2026] [proxy_fcgi:error] [pid 30166:tid 30183] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:01.241682 2026] [proxy_fcgi:error] [pid 30166:tid 30171] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:01.607314 2026] [proxy_fcgi:error] [pid 30166:tid 30182] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:01.943825 2026] [proxy_fcgi:error] [pid 30166:tid 30200] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:02.229792 2026] [proxy_fcgi:error] [pid 30166:tid 30189] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:02.468571 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:02.710880 2026] [proxy_fcgi:error] [pid 30166:tid 30176] [client 40.89.156.15:11709] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:48:03.232814 2026] [:error] [pid 30166:tid 30192] [client 40.89.156.15:11709] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ab_lA7m4_26jKMD0zy38-AAAAVE"]
[Sun Mar 22 20:48:04.898512 2026] [:error] [pid 51362:tid 51419] [client 40.89.156.15:54299] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ab_lBMOwPm3DXzTDjUfKSQAAAFI"]
[Sun Mar 22 20:48:06.539788 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:20113] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ab_lBk2TppSvA8W5CBRcIgAAAMc"]
[Sun Mar 22 20:48:07.689555 2026] [:error] [pid 51361:tid 51390] [client 40.89.156.15:36040] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ab_lBxXYUsdvKC9YWpXspAAAABI"]
[Sun Mar 22 20:48:08.601558 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:32073] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "ab_lCFwa9x6OCTRkhl2-SgAAAI4"]
[Sun Mar 22 20:48:09.932257 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:20117] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "ab_lCU2TppSvA8W5CBRcJgAAANU"]
[Sun Mar 22 20:48:11.247218 2026] [:error] [pid 30166:tid 30200] [client 40.89.156.15:23995] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "ab_lC7m4_26jKMD0zy39EAAAAVc"]
[Sun Mar 22 20:48:11.875157 2026] [:error] [pid 51468:tid 51493] [client 40.89.156.15:20132] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "ab_lC02TppSvA8W5CBRcLAAAANE"]
[Sun Mar 22 20:48:12.588488 2026] [:error] [pid 51362:tid 51424] [client 40.89.156.15:27183] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ab_lDMOwPm3DXzTDjUfKUQAAAFc"]
[Sun Mar 22 20:48:13.336146 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:28647] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ab_lDbm4_26jKMD0zy39VwAAAUQ"]
[Sun Mar 22 20:48:14.865855 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:27159] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ab_lDrm4_26jKMD0zy39bgAAAVg"]
[Sun Mar 22 20:48:17.398055 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:2862] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ab_lERXYUsdvKC9YWpXsuAAAAAw"]
[Sun Mar 22 20:48:18.069909 2026] [:error] [pid 51361:tid 51374] [client 40.89.156.15:27196] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ab_lEhXYUsdvKC9YWpXsugAAAAM"]
[Sun Mar 22 20:48:19.202741 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:2869] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ab_lE1wa9x6OCTRkhl2-WQAAAI4"]
[Sun Mar 22 20:48:21.513578 2026] [:error] [pid 40039:tid 40045] [client 40.89.156.15:37556] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ab_lFR3aDgUJfBYishm8KQAAAQQ"]
[Sun Mar 22 20:48:24.303736 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:54386] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ab_lGBXYUsdvKC9YWpXsvwAAAAk"]
[Sun Mar 22 20:48:26.826829 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:32119] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ab_lGrm4_26jKMD0zy39nwAAAU8"]
[Sun Mar 22 20:48:29.247683 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:34003] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ab_lHU2TppSvA8W5CBRcPAAAAMY"]
[Sun Mar 22 20:48:30.012740 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:41885] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ab_lHrm4_26jKMD0zy39vgAAAVI"]
[Sun Mar 22 20:48:31.764132 2026] [:error] [pid 51361:tid 51392] [client 40.89.156.15:36054] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ab_lHxXYUsdvKC9YWpXs2QAAABQ"]
[Sun Mar 22 20:48:33.025861 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:20096] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_lIU2TppSvA8W5CBRcRgAAAMU"]
[Sun Mar 22 20:48:34.005877 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:11698] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_lIk2TppSvA8W5CBRcSQAAAMg"]
[Sun Mar 22 20:48:35.308864 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:41910] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_lI7m4_26jKMD0zy394QAAAUQ"]
[Sun Mar 22 20:48:37.161986 2026] [:error] [pid 51361:tid 51390] [client 40.89.156.15:16165] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab_lJRXYUsdvKC9YWpXs7gAAABI"]
[Sun Mar 22 20:48:39.881763 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:2854] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ab_lJ7m4_26jKMD0zy395wAAAUo"]
[Sun Mar 22 20:48:41.506640 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:38095] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ab_lKU2TppSvA8W5CBRcTgAAAMU"]
[Sun Mar 22 20:48:42.541321 2026] [:error] [pid 30166:tid 30171] [client 40.89.156.15:28648] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ab_lKrm4_26jKMD0zy398gAAAUE"]
[Sun Mar 22 20:48:43.551912 2026] [:error] [pid 30166:tid 30188] [client 40.89.156.15:18312] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ab_lK7m4_26jKMD0zy39-QAAAU0"]
[Sun Mar 22 20:48:45.072212 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:2583] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ab_lLbm4_26jKMD0zy3-DQAAAUQ"]
[Sun Mar 22 20:48:46.016912 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:55361] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ab_lLhXYUsdvKC9YWpXtCAAAAAA"]
[Sun Mar 22 20:48:47.335683 2026] [:error] [pid 51468:tid 51490] [client 40.89.156.15:27136] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ab_lL02TppSvA8W5CBRcUgAAAM4"]
[Sun Mar 22 20:48:48.693004 2026] [:error] [pid 51361:tid 51373] [client 40.89.156.15:2831] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ab_lMBXYUsdvKC9YWpXtEQAAAAI"]
[Sun Mar 22 20:48:49.812428 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:36063] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ab_lMbm4_26jKMD0zy3-KgAAAVI"]
[Sun Mar 22 20:48:50.524864 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:11662] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ab_lMk2TppSvA8W5CBRcVQAAAMM"]
[Sun Mar 22 20:48:51.739749 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:2573] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ab_lM02TppSvA8W5CBRcWQAAAMw"]
[Sun Mar 22 20:48:53.341672 2026] [:error] [pid 51363:tid 51447] [client 40.89.156.15:11648] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ab_lNVwa9x6OCTRkhl2-agAAAJE"]
[Sun Mar 22 20:48:54.504179 2026] [:error] [pid 30166:tid 30177] [client 40.89.156.15:34023] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ab_lNrm4_26jKMD0zy3-TQAAAUY"]
[Sun Mar 22 20:48:55.297472 2026] [:error] [pid 51361:tid 51381] [client 40.89.156.15:16130] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ab_lNxXYUsdvKC9YWpXtGAAAAAo"]
[Sun Mar 22 20:48:56.566630 2026] [:error] [pid 51361:tid 51396] [client 40.89.156.15:11699] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ab_lOBXYUsdvKC9YWpXtGgAAABc"]
[Sun Mar 22 20:48:57.767920 2026] [:error] [pid 51468:tid 51480] [client 40.89.156.15:35981] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ab_lOU2TppSvA8W5CBRcXgAAAMQ"]
[Sun Mar 22 20:48:58.682412 2026] [:error] [pid 51362:tid 51401] [client 40.89.156.15:54298] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ab_lOsOwPm3DXzTDjUfK4QAAAEE"]
[Sun Mar 22 20:48:59.710579 2026] [:error] [pid 40039:tid 40044] [client 40.89.156.15:26814] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ab_lOx3aDgUJfBYishm8UgAAAQM"]
[Sun Mar 22 20:49:00.782217 2026] [:error] [pid 51468:tid 51496] [client 40.89.156.15:16475] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ab_lPE2TppSvA8W5CBRcYQAAANQ"]
[Sun Mar 22 20:49:01.870798 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:23938] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ab_lPcOwPm3DXzTDjUfK6AAAAFQ"]
[Sun Mar 22 20:49:03.059948 2026] [proxy_fcgi:error] [pid 51361:tid 51382] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:03.298912 2026] [proxy_fcgi:error] [pid 51361:tid 51377] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:03.709283 2026] [proxy_fcgi:error] [pid 51361:tid 51380] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:04.075872 2026] [proxy_fcgi:error] [pid 51361:tid 51395] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:04.320292 2026] [proxy_fcgi:error] [pid 51361:tid 51381] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:04.559308 2026] [proxy_fcgi:error] [pid 51361:tid 51396] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:04.803059 2026] [proxy_fcgi:error] [pid 51361:tid 51375] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:05.106680 2026] [proxy_fcgi:error] [pid 51361:tid 51393] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:05.380798 2026] [proxy_fcgi:error] [pid 51361:tid 51373] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:05.646466 2026] [proxy_fcgi:error] [pid 51361:tid 51387] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:05.942384 2026] [proxy_fcgi:error] [pid 51361:tid 51390] [client 40.89.156.15:2817] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:49:06.273978 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:2817] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "ab_lQhXYUsdvKC9YWpXtMQAAAAw"]
[Sun Mar 22 20:49:07.027185 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:55406] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "ab_lQ02TppSvA8W5CBRcZgAAAMU"]
[Sun Mar 22 20:49:07.796766 2026] [:error] [pid 40039:tid 40061] [client 40.89.156.15:39815] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "ab_lQx3aDgUJfBYishm8VwAAARQ"]
[Sun Mar 22 20:49:08.670456 2026] [:error] [pid 51363:tid 51440] [client 40.89.156.15:26794] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "ab_lRFwa9x6OCTRkhl2-dgAAAIs"]
[Sun Mar 22 20:49:09.603610 2026] [:error] [pid 51468:tid 51480] [client 40.89.156.15:20127] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ab_lRU2TppSvA8W5CBRcagAAAMQ"]
[Sun Mar 22 20:49:10.731418 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:53032] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ab_lRsOwPm3DXzTDjUfK8wAAAFQ"]
[Sun Mar 22 20:49:11.652993 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:23010] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ab_lR7m4_26jKMD0zy3-ewAAAVI"]
[Sun Mar 22 20:49:12.245570 2026] [:error] [pid 51361:tid 51395] [client 40.89.156.15:17486] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ab_lSBXYUsdvKC9YWpXtOgAAABY"]
[Sun Mar 22 20:49:12.949163 2026] [:error] [pid 51468:tid 51498] [client 40.89.156.15:55363] [client 40.89.156.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/app.php"] [unique_id "ab_lSE2TppSvA8W5CBRcbwAAANY"]
[Sun Mar 22 20:49:13.925489 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:18346] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_lSRXYUsdvKC9YWpXtQQAAAAw"]
[Sun Mar 22 20:49:16.562764 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:17864] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_lTB3aDgUJfBYishm8XwAAARA"]
[Sun Mar 22 20:49:17.292147 2026] [:error] [pid 40039:tid 40055] [client 40.89.156.15:39856] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_lTR3aDgUJfBYishm8YAAAAQ4"]
[Sun Mar 22 21:18:32.127527 2026] [:error] [pid 30166:tid 30198] [client 52.139.34.203:14483] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 11"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ab_sKLm4_26jKMD0zy0WVQAAAVU"]
[Sun Mar 22 21:18:33.541301 2026] [:error] [pid 30166:tid 30182] [client 52.139.34.203:14502] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 11"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "ab_sKbm4_26jKMD0zy0WWwAAAUc"]
[Sun Mar 22 21:18:36.513774 2026] [:error] [pid 30166:tid 30170] [client 52.139.34.203:14493] [client 52.139.34.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.139.34.203, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_sLLm4_26jKMD0zy0WYwAAAUA"]
[Sun Mar 22 21:18:36.513861 2026] [:error] [pid 30166:tid 30170] [client 52.139.34.203:14493] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_sLLm4_26jKMD0zy0WYwAAAUA"]
[Sun Mar 22 21:18:38.724505 2026] [:error] [pid 51362:tid 51414] [client 52.139.34.203:14488] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-corn-sample.php"] [unique_id "ab_sLsOwPm3DXzTDjUfZaAAAAE0"]
[Sun Mar 22 21:18:41.890281 2026] [:error] [pid 40039:tid 40044] [client 52.139.34.203:15019] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ab_sMR3aDgUJfBYishnG9AAAAQM"]
[Sun Mar 22 21:18:46.773070 2026] [:error] [pid 40039:tid 40062] [client 52.139.34.203:15034] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ab_sNh3aDgUJfBYishnG-gAAARU"]
[Sun Mar 22 21:18:51.795659 2026] [:error] [pid 30166:tid 30173] [client 52.139.34.203:14489] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "ab_sO7m4_26jKMD0zy0WhQAAAUI"]
[Sun Mar 22 21:18:54.725063 2026] [:error] [pid 40039:tid 40043] [client 52.139.34.203:14497] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/server.php"] [unique_id "ab_sPh3aDgUJfBYishnHAwAAAQI"]
[Sun Mar 22 21:18:56.595805 2026] [:error] [pid 51361:tid 51385] [client 52.139.34.203:14478] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "ab_sQBXYUsdvKC9YWpUHEwAAAA4"]
[Sun Mar 22 21:18:58.619161 2026] [:error] [pid 51361:tid 51395] [client 52.139.34.203:14997] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "ab_sQhXYUsdvKC9YWpUHGQAAABY"]
[Sun Mar 22 21:19:02.049211 2026] [:error] [pid 30166:tid 30201] [client 52.139.34.203:14980] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wso.php"] [unique_id "ab_sRrm4_26jKMD0zy0WmgAAAVg"]
[Sun Mar 22 21:19:05.370445 2026] [:error] [pid 51361:tid 51383] [client 52.139.34.203:14978] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_sSRXYUsdvKC9YWpUHJgAAAAw"]
[Sun Mar 22 21:19:06.781055 2026] [:error] [pid 51361:tid 51374] [client 52.139.34.203:14500] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/wp-file.php"] [unique_id "ab_sShXYUsdvKC9YWpUHKwAAAAM"]
[Sun Mar 22 21:19:09.122473 2026] [:error] [pid 51468:tid 51486] [client 52.139.34.203:15020] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 12"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ab_sTU2TppSvA8W5CBRoZgAAAMo"]
[Sun Mar 22 21:19:11.571506 2026] [:error] [pid 51468:tid 51492] [client 52.139.34.203:15011] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wk/index.php"] [unique_id "ab_sT02TppSvA8W5CBRocAAAANA"]
[Sun Mar 22 21:19:14.106895 2026] [:error] [pid 51361:tid 51380] [client 52.139.34.203:14474] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-admin.php"] [unique_id "ab_sUhXYUsdvKC9YWpUHNAAAAAk"]
[Sun Mar 22 21:19:15.333656 2026] [:error] [pid 30166:tid 30198] [client 52.139.34.203:15024] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ab_sU7m4_26jKMD0zy0WrwAAAVU"]
[Sun Mar 22 21:19:20.062009 2026] [:error] [pid 40039:tid 40062] [client 52.139.34.203:14994] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ab_sWB3aDgUJfBYishnHEAAAARU"]
[Sun Mar 22 21:19:24.974325 2026] [:error] [pid 51468:tid 51477] [client 52.139.34.203:14476] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/xmrlpc.php"] [unique_id "ab_sXE2TppSvA8W5CBRopgAAAME"]
[Sun Mar 22 21:19:26.826645 2026] [:error] [pid 51468:tid 51483] [client 52.139.34.203:14466] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ab_sXk2TppSvA8W5CBRosAAAAMc"]
[Sun Mar 22 21:19:31.936364 2026] [:error] [pid 51362:tid 51420] [client 52.139.34.203:14979] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-admin/file.php"] [unique_id "ab_sY8OwPm3DXzTDjUfZmQAAAFM"]
[Sun Mar 22 21:19:40.103309 2026] [:error] [pid 51362:tid 51425] [client 52.139.34.203:15013] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ab_sbMOwPm3DXzTDjUfZowAAAFg"]
[Sun Mar 22 21:19:42.567087 2026] [:error] [pid 51361:tid 51376] [client 52.139.34.203:14484] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "ab_sbhXYUsdvKC9YWpUHZAAAAAU"]
[Sun Mar 22 21:19:44.184706 2026] [:error] [pid 51363:tid 51438] [client 52.139.34.203:14508] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/css/index.php"] [unique_id "ab_scFwa9x6OCTRkhl3FqwAAAIk"]
[Sun Mar 22 21:19:51.135609 2026] [:error] [pid 51362:tid 51402] [client 52.139.34.203:15037] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/et-cache/"] [unique_id "ab_sd8OwPm3DXzTDjUfZsgAAAEI"]
[Sun Mar 22 21:19:53.592331 2026] [:error] [pid 51468:tid 51498] [client 52.139.34.203:14486] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ab_seU2TppSvA8W5CBRpAgAAANY"]
[Sun Mar 22 21:19:59.314010 2026] [:error] [pid 51468:tid 51492] [client 52.139.34.203:14514] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ab_sf02TppSvA8W5CBRpHwAAANA"]
[Sun Mar 22 21:20:04.983526 2026] [:error] [pid 51362:tid 51400] [client 52.139.34.203:14986] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/index.php"] [unique_id "ab_shMOwPm3DXzTDjUfZugAAAEA"]
[Sun Mar 22 21:20:06.401717 2026] [:error] [pid 51362:tid 51405] [client 52.139.34.203:14337] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ab_shsOwPm3DXzTDjUfZvAAAAEQ"]
[Sun Mar 22 21:20:08.348881 2026] [:error] [pid 40039:tid 40050] [client 52.139.34.203:15026] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "ab_siB3aDgUJfBYishnHNAAAAQk"]
[Sun Mar 22 21:20:12.983403 2026] [:error] [pid 30166:tid 30171] [client 52.139.34.203:14501] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ab_sjLm4_26jKMD0zy0W_QAAAUE"]
[Sun Mar 22 21:20:14.325557 2026] [:error] [pid 51468:tid 51493] [client 52.139.34.203:14351] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "ab_sjk2TppSvA8W5CBRplwAAANE"]
[Sun Mar 22 21:20:15.658776 2026] [:error] [pid 51363:tid 51432] [client 52.139.34.203:14495] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ab_sj1wa9x6OCTRkhl3FtgAAAIQ"]
[Sun Mar 22 21:20:17.452500 2026] [:error] [pid 30166:tid 30177] [client 52.139.34.203:15014] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ab_skbm4_26jKMD0zy0XBAAAAUY"]
[Sun Mar 22 21:20:18.634662 2026] [:error] [pid 51468:tid 51477] [client 52.139.34.203:14991] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/buy.php"] [unique_id "ab_skk2TppSvA8W5CBRp1gAAAME"]
[Sun Mar 22 21:20:20.094479 2026] [:error] [pid 51362:tid 51401] [client 52.139.34.203:14485] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ab_slMOwPm3DXzTDjUfZwwAAAEE"]
[Sun Mar 22 21:20:23.024727 2026] [:error] [pid 51361:tid 51376] [client 52.139.34.203:14527] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ab_slxXYUsdvKC9YWpUHpwAAAAU"]
[Sun Mar 22 21:20:24.950551 2026] [:error] [pid 51468:tid 51486] [client 52.139.34.203:14999] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/about.PHP"] [unique_id "ab_smE2TppSvA8W5CBRqFwAAAMo"]
[Sun Mar 22 21:20:26.798199 2026] [:error] [pid 51363:tid 51430] [client 52.139.34.203:14360] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ab_smlwa9x6OCTRkhl3FtwAAAII"]
[Sun Mar 22 21:20:28.939729 2026] [:error] [pid 51361:tid 51387] [client 52.139.34.203:14350] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ab_snBXYUsdvKC9YWpUHsgAAAA8"]
[Sun Mar 22 21:20:30.565691 2026] [:error] [pid 51361:tid 51375] [client 52.139.34.203:14984] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/edit.php"] [unique_id "ab_snhXYUsdvKC9YWpUHvwAAAAQ"]
[Sun Mar 22 21:20:34.324931 2026] [:error] [pid 51468:tid 51497] [client 52.139.34.203:14467] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ab_sok2TppSvA8W5CBRqTQAAANU"]
[Sun Mar 22 21:20:39.422571 2026] [:error] [pid 40039:tid 40044] [client 52.139.34.203:14464] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/index.php"] [unique_id "ab_spx3aDgUJfBYishnHSAAAAQM"]
[Sun Mar 22 21:20:40.637456 2026] [:error] [pid 51468:tid 51480] [client 52.139.34.203:15022] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "ab_sqE2TppSvA8W5CBRqVwAAAMQ"]
[Sun Mar 22 21:20:42.472474 2026] [:error] [pid 30166:tid 30198] [client 52.139.34.203:15005] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ab_sqrm4_26jKMD0zy0XMQAAAVU"]
[Sun Mar 22 21:20:47.902954 2026] [:error] [pid 40039:tid 40043] [client 52.139.34.203:14472] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/"] [unique_id "ab_srx3aDgUJfBYishnHTgAAAQI"]
[Sun Mar 22 21:20:51.759917 2026] [:error] [pid 30166:tid 30173] [client 52.139.34.203:15002] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "ab_ss7m4_26jKMD0zy0XQQAAAUI"]
[Sun Mar 22 21:20:54.361200 2026] [:error] [pid 51361:tid 51372] [client 52.139.34.203:15127] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-cron.php"] [unique_id "ab_sthXYUsdvKC9YWpUH8QAAAAE"]
[Sun Mar 22 21:20:59.688460 2026] [:error] [pid 40039:tid 40041] [client 52.139.34.203:15027] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "ab_sux3aDgUJfBYishnHUgAAAQA"]
[Sun Mar 22 21:21:02.543534 2026] [:error] [pid 51361:tid 51390] [client 52.139.34.203:14469] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "ab_svhXYUsdvKC9YWpUIAQAAABI"]
[Sun Mar 22 21:21:08.389921 2026] [:error] [pid 30166:tid 30174] [client 52.139.34.203:14477] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/wp-content/1.php"] [unique_id "ab_sxLm4_26jKMD0zy0XWgAAAUM"]
[Sun Mar 22 21:21:18.722647 2026] [:error] [pid 40039:tid 40050] [client 52.139.34.203:15025] [client 52.139.34.203] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 52.139.34.203 on wp-login.php, counter = 13"] [hostname "quarryspec.com.au"] [uri "/images/index.php"] [unique_id "ab_szh3aDgUJfBYishnHXQAAAQk"]
[Mon Mar 23 19:05:20.153309 2026] [proxy_fcgi:error] [pid 23539:tid 23550] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:20.465995 2026] [proxy_fcgi:error] [pid 23539:tid 23566] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:21.084301 2026] [proxy_fcgi:error] [pid 23539:tid 23570] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:21.362127 2026] [proxy_fcgi:error] [pid 23539:tid 23565] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:21.628208 2026] [proxy_fcgi:error] [pid 23539:tid 23563] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:21.921015 2026] [proxy_fcgi:error] [pid 23539:tid 23568] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:22.189461 2026] [proxy_fcgi:error] [pid 23539:tid 23553] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:22.457052 2026] [proxy_fcgi:error] [pid 23539:tid 23559] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:22.761558 2026] [proxy_fcgi:error] [pid 23539:tid 23572] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:23.036573 2026] [proxy_fcgi:error] [pid 23539:tid 23564] [client 20.240.250.153:65171] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:05:23.299419 2026] [:error] [pid 23539:tid 23558] [client 20.240.250.153:65171] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acEec37Dh3qWGSpIAZUpgwAAAMo"]
[Mon Mar 23 19:05:23.852852 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:64583] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acEec2NLjPJJkhuqCshVxwAAAQE"]
[Mon Mar 23 19:05:24.389100 2026] [:error] [pid 57265:tid 57272] [client 20.240.250.153:64669] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acEedGNLjPJJkhuqCshVyQAAAQU"]
[Mon Mar 23 19:05:24.931173 2026] [:error] [pid 57265:tid 57283] [client 20.240.250.153:65187] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acEedGNLjPJJkhuqCshVzAAAARA"]
[Mon Mar 23 19:05:25.477832 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:65129] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/19.php"] [unique_id "acEede-oSmHn3q4_J1HYZwAAAUA"]
[Mon Mar 23 19:05:26.087777 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:65156] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/19.php"] [unique_id "acEedmNLjPJJkhuqCshV0QAAARU"]
[Mon Mar 23 19:05:26.656728 2026] [:error] [pid 35165:tid 35176] [client 20.240.250.153:65141] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/19.php"] [unique_id "acEeds6udpN6Esk7JKvFjAAAAYg"]
[Mon Mar 23 19:05:27.491041 2026] [:error] [pid 14573:tid 14589] [client 20.240.250.153:64698] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/19.php"] [unique_id "acEed--oSmHn3q4_J1HYbQAAAU4"]
[Mon Mar 23 19:05:28.149257 2026] [:error] [pid 23439:tid 23451] [client 20.240.250.153:65104] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "acEeeKZv8XIzUKdgaMeVrwAAAAI"]
[Mon Mar 23 19:05:28.742123 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:65208] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "acEeeGNLjPJJkhuqCshV2wAAAQE"]
[Mon Mar 23 19:05:29.297908 2026] [:error] [pid 23441:tid 23504] [client 20.240.250.153:65516] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "acEeeRq7S-oOqSXZEr7j3AAAAIE"]
[Mon Mar 23 19:05:29.838902 2026] [:error] [pid 35165:tid 35186] [client 20.240.250.153:65119] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "acEeec6udpN6Esk7JKvFkAAAAZI"]
[Mon Mar 23 19:05:30.485333 2026] [:error] [pid 23441:tid 23523] [client 20.240.250.153:65478] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "acEeehq7S-oOqSXZEr7j3gAAAJQ"]
[Mon Mar 23 19:05:31.050026 2026] [:error] [pid 57265:tid 57285] [client 20.240.250.153:65173] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "acEee2NLjPJJkhuqCshV4wAAARI"]
[Mon Mar 23 19:05:31.591202 2026] [:error] [pid 14573:tid 14582] [client 20.240.250.153:64656] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "acEee--oSmHn3q4_J1HYdAAAAUc"]
[Mon Mar 23 19:05:32.215158 2026] [:error] [pid 57265:tid 57284] [client 20.240.250.153:64576] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "acEefGNLjPJJkhuqCshV5QAAARE"]
[Mon Mar 23 19:05:32.870683 2026] [:error] [pid 23539:tid 23548] [client 20.240.250.153:64697] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acEefH7Dh3qWGSpIAZUphwAAAMA"]
[Mon Mar 23 19:05:33.416879 2026] [:error] [pid 23539:tid 23569] [client 20.240.250.153:64682] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acEefX7Dh3qWGSpIAZUpigAAANU"]
[Mon Mar 23 19:05:34.007058 2026] [:error] [pid 23539:tid 23566] [client 20.240.250.153:64596] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acEefn7Dh3qWGSpIAZUpjwAAANI"]
[Mon Mar 23 19:05:34.540791 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65180] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acEefmNLjPJJkhuqCshV6AAAAQ0"]
[Mon Mar 23 19:05:35.124634 2026] [:error] [pid 23441:tid 23506] [client 20.240.250.153:64584] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/settings.php"] [unique_id "acEefxq7S-oOqSXZEr7j3wAAAIM"]
[Mon Mar 23 19:05:35.719816 2026] [:error] [pid 57265:tid 57267] [client 20.240.250.153:65176] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/settings.php"] [unique_id "acEef2NLjPJJkhuqCshV7AAAAQA"]
[Mon Mar 23 19:05:36.275096 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:65150] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/settings.php"] [unique_id "acEegGNLjPJJkhuqCshV8AAAARU"]
[Mon Mar 23 19:05:36.810235 2026] [:error] [pid 23439:tid 23450] [client 20.240.250.153:64270] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/settings.php"] [unique_id "acEegKZv8XIzUKdgaMeVtQAAAAE"]
[Mon Mar 23 19:05:37.351878 2026] [:error] [pid 23539:tid 23560] [client 20.240.250.153:64703] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "acEegX7Dh3qWGSpIAZUplAAAAMw"]
[Mon Mar 23 19:05:37.992242 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65163] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "acEegWNLjPJJkhuqCshV-AAAAQ0"]
[Mon Mar 23 19:05:38.576705 2026] [:error] [pid 35165:tid 35170] [client 20.240.250.153:64592] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "acEegs6udpN6Esk7JKvFlQAAAYI"]
[Mon Mar 23 19:05:39.146392 2026] [:error] [pid 23440:tid 23494] [client 20.240.250.153:64591] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "acEegz49_8n8h_ttcUo55AAAAFI"]
[Mon Mar 23 19:05:39.701464 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:65201] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acEeg2NLjPJJkhuqCshV_AAAAQw"]
[Mon Mar 23 19:05:40.252332 2026] [:error] [pid 23439:tid 23468] [client 20.240.250.153:64658] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acEehKZv8XIzUKdgaMeVuQAAABM"]
[Mon Mar 23 19:05:40.868678 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:65489] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acEehGNLjPJJkhuqCshV_QAAAQY"]
[Mon Mar 23 19:05:41.600011 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:65155] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acEehWNLjPJJkhuqCshWAAAAARg"]
[Mon Mar 23 19:05:42.259030 2026] [:error] [pid 23439:tid 23469] [client 20.240.250.153:65511] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "acEehqZv8XIzUKdgaMeVvQAAABQ"]
[Mon Mar 23 19:05:42.796967 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65193] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "acEehmNLjPJJkhuqCshWBQAAAQI"]
[Mon Mar 23 19:05:43.423613 2026] [:error] [pid 57265:tid 57283] [client 20.240.250.153:65199] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "acEeh2NLjPJJkhuqCshWCAAAARA"]
[Mon Mar 23 19:05:44.005447 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:65094] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "acEeiO-oSmHn3q4_J1HYgQAAAVA"]
[Mon Mar 23 19:05:44.587898 2026] [:error] [pid 35165:tid 35173] [client 20.240.250.153:65125] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "acEeiM6udpN6Esk7JKvFqQAAAYU"]
[Mon Mar 23 19:05:45.344336 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:65510] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "acEeiWNLjPJJkhuqCshWGQAAAQw"]
[Mon Mar 23 19:05:45.882788 2026] [:error] [pid 23539:tid 23556] [client 20.240.250.153:64683] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "acEeiX7Dh3qWGSpIAZUplwAAAMg"]
[Mon Mar 23 19:05:46.421998 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:64588] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "acEeimNLjPJJkhuqCshWIgAAARU"]
[Mon Mar 23 19:05:46.965416 2026] [:error] [pid 23440:tid 23482] [client 20.240.250.153:65189] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swallowable.php"] [unique_id "acEeij49_8n8h_ttcUo57QAAAEY"]
[Mon Mar 23 19:05:47.557207 2026] [:error] [pid 23539:tid 23552] [client 20.240.250.153:65159] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swallowable.php"] [unique_id "acEei37Dh3qWGSpIAZUpmQAAAMQ"]
[Mon Mar 23 19:05:48.126687 2026] [:error] [pid 14573:tid 14585] [client 20.240.250.153:64651] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swallowable.php"] [unique_id "acEejO-oSmHn3q4_J1HYvgAAAUo"]
[Mon Mar 23 19:05:48.669694 2026] [:error] [pid 14573:tid 14580] [client 20.240.250.153:65117] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swallowable.php"] [unique_id "acEejO-oSmHn3q4_J1HYwAAAAUU"]
[Mon Mar 23 19:05:49.269243 2026] [:error] [pid 23439:tid 23450] [client 20.240.250.153:65203] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "acEejaZv8XIzUKdgaMeVxAAAAAE"]
[Mon Mar 23 19:05:49.806538 2026] [:error] [pid 57265:tid 57278] [client 20.240.250.153:65520] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "acEejWNLjPJJkhuqCshWPgAAAQs"]
[Mon Mar 23 19:05:50.378050 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:64665] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "acEeju-oSmHn3q4_J1HYwwAAAVc"]
[Mon Mar 23 19:05:50.979287 2026] [:error] [pid 23440:tid 23495] [client 20.240.250.153:65205] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "acEejj49_8n8h_ttcUo58AAAAFM"]
[Mon Mar 23 19:05:51.537789 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:64650] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "acEej2NLjPJJkhuqCshWSQAAARc"]
[Mon Mar 23 19:05:52.138171 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:64678] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "acEekGNLjPJJkhuqCshWSwAAAQY"]
[Mon Mar 23 19:05:52.714359 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:65146] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "acEekGNLjPJJkhuqCshWTQAAAQo"]
[Mon Mar 23 19:05:53.310493 2026] [:error] [pid 57265:tid 57289] [client 20.240.250.153:64242] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "acEekWNLjPJJkhuqCshWUgAAARY"]
[Mon Mar 23 19:05:53.915077 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:64663] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sty.php"] [unique_id "acEekWNLjPJJkhuqCshWVwAAARc"]
[Mon Mar 23 19:05:54.471877 2026] [:error] [pid 35165:tid 35176] [client 20.240.250.153:64649] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sty.php"] [unique_id "acEeks6udpN6Esk7JKvF6QAAAYg"]
[Mon Mar 23 19:05:54.997060 2026] [:error] [pid 35165:tid 35169] [client 20.240.250.153:65481] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sty.php"] [unique_id "acEeks6udpN6Esk7JKvF7AAAAYE"]
[Mon Mar 23 19:05:55.564997 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:65197] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sty.php"] [unique_id "acEek2NLjPJJkhuqCshWWwAAARU"]
[Mon Mar 23 19:05:56.106947 2026] [:error] [pid 57265:tid 57287] [client 20.240.250.153:65133] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "acEelGNLjPJJkhuqCshWXQAAARQ"]
[Mon Mar 23 19:05:56.753502 2026] [:error] [pid 57265:tid 57281] [client 20.240.250.153:63662] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "acEelGNLjPJJkhuqCshWYgAAAQ4"]
[Mon Mar 23 19:05:57.379291 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:65525] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "acEele-oSmHn3q4_J1HY1AAAAUA"]
[Mon Mar 23 19:05:58.096858 2026] [:error] [pid 23539:tid 23558] [client 20.240.250.153:65124] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "acEeln7Dh3qWGSpIAZUpowAAAMo"]
[Mon Mar 23 19:05:58.701563 2026] [:error] [pid 23539:tid 23557] [client 20.240.250.153:65186] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acEeln7Dh3qWGSpIAZUppAAAAMk"]
[Mon Mar 23 19:05:59.300747 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:65145] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acEel2NLjPJJkhuqCshWdwAAARc"]
[Mon Mar 23 19:05:59.838613 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:65112] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acEel2NLjPJJkhuqCshWfQAAARM"]
[Mon Mar 23 19:06:00.442084 2026] [:error] [pid 57265:tid 57270] [client 20.240.250.153:65172] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acEemGNLjPJJkhuqCshWhAAAAQM"]
[Mon Mar 23 19:06:01.034434 2026] [:error] [pid 14573:tid 14582] [client 20.240.250.153:65162] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acEeme-oSmHn3q4_J1HY2AAAAUc"]
[Mon Mar 23 19:06:01.583867 2026] [:error] [pid 35165:tid 35179] [client 20.240.250.153:65215] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acEemc6udpN6Esk7JKvF9AAAAYs"]
[Mon Mar 23 19:06:02.241974 2026] [:error] [pid 14573:tid 14581] [client 20.240.250.153:65183] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acEemu-oSmHn3q4_J1HY2wAAAUY"]
[Mon Mar 23 19:06:02.785387 2026] [:error] [pid 57265:tid 57274] [client 20.240.250.153:65178] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acEemmNLjPJJkhuqCshWlQAAAQc"]
[Mon Mar 23 19:06:03.331671 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:65513] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEem2NLjPJJkhuqCshWmwAAAQo"]
[Mon Mar 23 19:06:03.911392 2026] [:error] [pid 57265:tid 57272] [client 20.240.250.153:64310] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEem2NLjPJJkhuqCshWoQAAAQU"]
[Mon Mar 23 19:06:04.495119 2026] [:error] [pid 23439:tid 23449] [client 20.240.250.153:65498] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEenKZv8XIzUKdgaMeVxgAAAAA"]
[Mon Mar 23 19:06:05.076030 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:65088] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEene-oSmHn3q4_J1HY3wAAAVc"]
[Mon Mar 23 19:06:05.657867 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:64597] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acEene-oSmHn3q4_J1HY4wAAAUA"]
[Mon Mar 23 19:06:06.253689 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:64313] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acEenmNLjPJJkhuqCshWsAAAARM"]
[Mon Mar 23 19:06:06.811038 2026] [:error] [pid 14573:tid 14579] [client 20.240.250.153:64603] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acEenu-oSmHn3q4_J1HY5wAAAUQ"]
[Mon Mar 23 19:06:07.392518 2026] [:error] [pid 23441:tid 23514] [client 20.240.250.153:64294] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acEenxq7S-oOqSXZEr7j8QAAAIs"]
[Mon Mar 23 19:06:07.960923 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:65122] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acEen--oSmHn3q4_J1HY6wAAAVA"]
[Mon Mar 23 19:06:08.618361 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:64677] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acEeoO-oSmHn3q4_J1HY8AAAAUI"]
[Mon Mar 23 19:06:09.251701 2026] [:error] [pid 14573:tid 14590] [client 20.240.250.153:64578] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acEeoe-oSmHn3q4_J1HY9QAAAU8"]
[Mon Mar 23 19:06:09.819603 2026] [:error] [pid 57265:tid 57287] [client 20.240.250.153:64685] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acEeoWNLjPJJkhuqCshWtAAAARQ"]
[Mon Mar 23 19:06:10.400954 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:65108] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "acEeou-oSmHn3q4_J1HY-wAAAVA"]
[Mon Mar 23 19:06:10.936998 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:64690] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "acEeou-oSmHn3q4_J1HY_AAAAVg"]
[Mon Mar 23 19:06:11.519899 2026] [:error] [pid 57265:tid 57276] [client 20.240.250.153:65204] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "acEeo2NLjPJJkhuqCshWuwAAAQk"]
[Mon Mar 23 19:06:12.059534 2026] [:error] [pid 23539:tid 23562] [client 20.240.250.153:65485] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "acEepH7Dh3qWGSpIAZUpqwAAAM4"]
[Mon Mar 23 19:06:12.614069 2026] [:error] [pid 23441:tid 23517] [client 20.240.250.153:64629] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "acEepBq7S-oOqSXZEr7j9gAAAI4"]
[Mon Mar 23 19:06:13.374836 2026] [:error] [pid 14573:tid 14589] [client 20.240.250.153:64640] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "acEepe-oSmHn3q4_J1HZBwAAAU4"]
[Mon Mar 23 19:06:13.961286 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:64700] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "acEepWNLjPJJkhuqCshWwAAAAQo"]
[Mon Mar 23 19:06:14.593991 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:65507] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "acEepu-oSmHn3q4_J1HZCQAAAVc"]
[Mon Mar 23 19:06:15.210217 2026] [:error] [pid 14573:tid 14587] [client 20.240.250.153:64648] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acEep--oSmHn3q4_J1HZCgAAAUw"]
[Mon Mar 23 19:06:15.910743 2026] [:error] [pid 23441:tid 23509] [client 20.240.250.153:65114] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acEepxq7S-oOqSXZEr7j-QAAAIY"]
[Mon Mar 23 19:06:16.481048 2026] [:error] [pid 35165:tid 35187] [client 20.240.250.153:65118] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acEeqM6udpN6Esk7JKvF_wAAAZM"]
[Mon Mar 23 19:06:17.022949 2026] [:error] [pid 23539:tid 23561] [client 20.240.250.153:64691] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acEeqX7Dh3qWGSpIAZUprQAAAM0"]
[Mon Mar 23 19:06:17.908970 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:64240] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acEeqe-oSmHn3q4_J1HZCwAAAUI"]
[Mon Mar 23 19:06:18.527825 2026] [:error] [pid 23441:tid 23527] [client 20.240.250.153:65111] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acEeqhq7S-oOqSXZEr7j_gAAAJg"]
[Mon Mar 23 19:06:19.116987 2026] [:error] [pid 23539:tid 23563] [client 20.240.250.153:65161] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acEeq37Dh3qWGSpIAZUpsAAAAM8"]
[Mon Mar 23 19:06:19.664328 2026] [:error] [pid 14573:tid 14592] [client 20.240.250.153:65160] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acEeq--oSmHn3q4_J1HZDgAAAVE"]
[Mon Mar 23 19:06:20.207480 2026] [:error] [pid 35165:tid 35184] [client 20.240.250.153:64301] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "acEerM6udpN6Esk7JKvGCQAAAZA"]
[Mon Mar 23 19:06:20.736548 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:65479] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "acEerM6udpN6Esk7JKvGDAAAAYo"]
[Mon Mar 23 19:06:21.325495 2026] [:error] [pid 14573:tid 14593] [client 20.240.250.153:65521] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "acEere-oSmHn3q4_J1HZEwAAAVI"]
[Mon Mar 23 19:06:21.908594 2026] [:error] [pid 23440:tid 23493] [client 20.240.250.153:65480] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "acEerT49_8n8h_ttcUo5-gAAAFE"]
[Mon Mar 23 19:06:22.561579 2026] [:error] [pid 23539:tid 23564] [client 20.240.250.153:64286] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acEern7Dh3qWGSpIAZUpswAAANA"]
[Mon Mar 23 19:06:23.098387 2026] [proxy_fcgi:error] [pid 57265:tid 57278] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:23.365154 2026] [proxy_fcgi:error] [pid 57265:tid 57287] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:23.683774 2026] [proxy_fcgi:error] [pid 57265:tid 57280] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:23.954547 2026] [proxy_fcgi:error] [pid 57265:tid 57286] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:24.489761 2026] [proxy_fcgi:error] [pid 57265:tid 57289] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:24.797099 2026] [proxy_fcgi:error] [pid 57265:tid 57275] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:25.063650 2026] [proxy_fcgi:error] [pid 57265:tid 57288] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:25.382191 2026] [proxy_fcgi:error] [pid 57265:tid 57276] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:25.648556 2026] [proxy_fcgi:error] [pid 57265:tid 57268] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:25.923794 2026] [proxy_fcgi:error] [pid 57265:tid 57267] [client 20.240.250.153:65179] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:06:26.197016 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65179] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acEesmNLjPJJkhuqCshW2QAAAQI"]
[Mon Mar 23 19:06:26.813055 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:64642] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acEesmNLjPJJkhuqCshW2gAAAQw"]
[Mon Mar 23 19:06:27.344678 2026] [:error] [pid 57265:tid 57285] [client 20.240.250.153:65484] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acEes2NLjPJJkhuqCshW3AAAARI"]
[Mon Mar 23 19:06:27.945702 2026] [:error] [pid 23440:tid 23478] [client 20.240.250.153:65207] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acEesz49_8n8h_ttcUo6AgAAAEI"]
[Mon Mar 23 19:06:28.535109 2026] [:error] [pid 57265:tid 57278] [client 20.240.250.153:64659] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEetGNLjPJJkhuqCshW4AAAAQs"]
[Mon Mar 23 19:06:29.095735 2026] [:error] [pid 23539:tid 23548] [client 20.240.250.153:65188] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEetX7Dh3qWGSpIAZUptwAAAMA"]
[Mon Mar 23 19:06:29.837251 2026] [:error] [pid 23539:tid 23552] [client 20.240.250.153:64587] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEetX7Dh3qWGSpIAZUpuQAAAMQ"]
[Mon Mar 23 19:06:30.382202 2026] [:error] [pid 23539:tid 23561] [client 20.240.250.153:65136] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEetn7Dh3qWGSpIAZUpvAAAAM0"]
[Mon Mar 23 19:06:30.974754 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:63668] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEetmNLjPJJkhuqCshW5wAAAQE"]
[Mon Mar 23 19:06:31.614757 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:65100] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEet2NLjPJJkhuqCshW6AAAAQw"]
[Mon Mar 23 19:06:32.193580 2026] [:error] [pid 23439:tid 23467] [client 20.240.250.153:64258] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEeuKZv8XIzUKdgaMeV2QAAABI"]
[Mon Mar 23 19:06:32.735492 2026] [:error] [pid 57265:tid 57283] [client 20.240.250.153:64601] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEeuGNLjPJJkhuqCshW7QAAARA"]
[Mon Mar 23 19:06:33.285043 2026] [:error] [pid 23440:tid 23499] [client 20.240.250.153:65202] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acEeuT49_8n8h_ttcUo6BQAAAFc"]
[Mon Mar 23 19:06:33.923555 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65089] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acEeuWNLjPJJkhuqCshW8wAAAQ0"]
[Mon Mar 23 19:06:34.461852 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:64607] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acEeuu-oSmHn3q4_J1HZIQAAAUA"]
[Mon Mar 23 19:06:35.045119 2026] [:error] [pid 23539:tid 23568] [client 20.240.250.153:65523] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acEeu37Dh3qWGSpIAZUpwgAAANQ"]
[Mon Mar 23 19:06:35.582632 2026] [:error] [pid 23539:tid 23558] [client 20.240.250.153:65127] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "acEeu37Dh3qWGSpIAZUpxAAAAMo"]
[Mon Mar 23 19:06:36.220173 2026] [:error] [pid 23539:tid 23567] [client 20.240.250.153:65192] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "acEevH7Dh3qWGSpIAZUpxgAAANM"]
[Mon Mar 23 19:06:36.779490 2026] [:error] [pid 35165:tid 35182] [client 20.240.250.153:63664] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "acEevM6udpN6Esk7JKvGGQAAAY4"]
[Mon Mar 23 19:06:37.485667 2026] [:error] [pid 35165:tid 35179] [client 20.240.250.153:64590] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "acEevc6udpN6Esk7JKvGGwAAAYs"]
[Mon Mar 23 19:06:38.069187 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:64207] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "acEevmNLjPJJkhuqCshW-AAAARc"]
[Mon Mar 23 19:06:38.742248 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:64676] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "acEevmNLjPJJkhuqCshW-gAAAQY"]
[Mon Mar 23 19:06:39.291946 2026] [:error] [pid 35165:tid 35187] [client 20.240.250.153:65182] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "acEev86udpN6Esk7JKvGIgAAAZM"]
[Mon Mar 23 19:06:39.930451 2026] [:error] [pid 35165:tid 35181] [client 20.240.250.153:65190] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "acEev86udpN6Esk7JKvGJAAAAY0"]
[Mon Mar 23 19:06:40.561146 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:65177] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acEewGNLjPJJkhuqCshXAAAAAQw"]
[Mon Mar 23 19:06:41.110114 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65106] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acEewWNLjPJJkhuqCshXAgAAAQI"]
[Mon Mar 23 19:06:41.639495 2026] [:error] [pid 57265:tid 57270] [client 20.240.250.153:65128] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acEewWNLjPJJkhuqCshXBQAAAQM"]
[Mon Mar 23 19:06:42.246932 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65184] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acEewmNLjPJJkhuqCshXCAAAAQ0"]
[Mon Mar 23 19:06:42.774590 2026] [:error] [pid 35165:tid 35169] [client 20.240.250.153:64306] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "acEews6udpN6Esk7JKvGKQAAAYE"]
[Mon Mar 23 19:06:43.318583 2026] [:error] [pid 14573:tid 14579] [client 20.240.250.153:64579] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "acEew--oSmHn3q4_J1HZJwAAAUQ"]
[Mon Mar 23 19:06:43.939739 2026] [:error] [pid 57265:tid 57289] [client 20.240.250.153:64628] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "acEew2NLjPJJkhuqCshXDgAAARY"]
[Mon Mar 23 19:06:44.720013 2026] [:error] [pid 23440:tid 23476] [client 20.240.250.153:65113] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "acEexD49_8n8h_ttcUo6BgAAAEA"]
[Mon Mar 23 19:06:45.427531 2026] [:error] [pid 57265:tid 57278] [client 20.240.250.153:64641] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEexWNLjPJJkhuqCshXFQAAAQs"]
[Mon Mar 23 19:06:46.228884 2026] [:error] [pid 14573:tid 14588] [client 20.240.250.153:63640] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEexu-oSmHn3q4_J1HZMgAAAU0"]
[Mon Mar 23 19:06:47.034463 2026] [:error] [pid 23441:tid 23511] [client 20.240.250.153:65105] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEexxq7S-oOqSXZEr7kCwAAAIg"]
[Mon Mar 23 19:06:47.766809 2026] [:error] [pid 57265:tid 57276] [client 20.240.250.153:65123] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEex2NLjPJJkhuqCshXFgAAAQk"]
[Mon Mar 23 19:06:48.412271 2026] [:error] [pid 57265:tid 57287] [client 20.240.250.153:64586] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acEeyGNLjPJJkhuqCshXGAAAARQ"]
[Mon Mar 23 19:06:49.046850 2026] [:error] [pid 35165:tid 35188] [client 20.240.250.153:64264] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acEeyc6udpN6Esk7JKvGLAAAAZQ"]
[Mon Mar 23 19:06:49.750611 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:65127] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acEeye-oSmHn3q4_J1HZQwAAAVg"]
[Mon Mar 23 19:06:50.490674 2026] [:error] [pid 14573:tid 14592] [client 20.240.250.153:65206] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acEeyu-oSmHn3q4_J1HZRwAAAVE"]
[Mon Mar 23 19:06:51.093940 2026] [:error] [pid 14573:tid 14596] [client 20.240.250.153:65168] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEey--oSmHn3q4_J1HZSgAAAVU"]
[Mon Mar 23 19:06:51.661156 2026] [:error] [pid 14573:tid 14578] [client 20.240.250.153:65213] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEey--oSmHn3q4_J1HZTQAAAUM"]
[Mon Mar 23 19:06:52.190201 2026] [:error] [pid 23441:tid 23510] [client 20.240.250.153:64278] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEezBq7S-oOqSXZEr7kDgAAAIc"]
[Mon Mar 23 19:06:52.844052 2026] [:error] [pid 23539:tid 23571] [client 20.240.250.153:65154] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEezH7Dh3qWGSpIAZUp2AAAANc"]
[Mon Mar 23 19:06:53.453308 2026] [:error] [pid 57265:tid 57283] [client 20.240.250.153:65098] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEezWNLjPJJkhuqCshXHQAAARA"]
[Mon Mar 23 19:06:54.269698 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:63665] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEezu-oSmHn3q4_J1HZUQAAAUk"]
[Mon Mar 23 19:06:54.904813 2026] [:error] [pid 23539:tid 23557] [client 20.240.250.153:64265] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEezn7Dh3qWGSpIAZUp4AAAAMk"]
[Mon Mar 23 19:06:55.471047 2026] [:error] [pid 23439:tid 23466] [client 20.240.250.153:65495] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEez6Zv8XIzUKdgaMeV3QAAABE"]
[Mon Mar 23 19:06:56.003643 2026] [:error] [pid 35165:tid 35176] [client 20.240.250.153:65505] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "acEe0M6udpN6Esk7JKvGNAAAAYg"]
[Mon Mar 23 19:06:56.572718 2026] [:error] [pid 23440:tid 23492] [client 20.240.250.153:64664] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "acEe0D49_8n8h_ttcUo6DwAAAFA"]
[Mon Mar 23 19:06:57.710800 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:65142] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "acEe0c6udpN6Esk7JKvGNgAAAYo"]
[Mon Mar 23 19:06:58.267363 2026] [:error] [pid 23440:tid 23476] [client 20.240.250.153:65503] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "acEe0j49_8n8h_ttcUo6EgAAAEA"]
[Mon Mar 23 19:06:58.837376 2026] [:error] [pid 23440:tid 23483] [client 20.240.250.153:64589] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "acEe0j49_8n8h_ttcUo6EwAAAEc"]
[Mon Mar 23 19:06:59.408421 2026] [:error] [pid 35165:tid 35172] [client 20.240.250.153:63616] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "acEe086udpN6Esk7JKvGOwAAAYQ"]
[Mon Mar 23 19:07:00.003141 2026] [:error] [pid 35165:tid 35183] [client 20.240.250.153:65151] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "acEe1M6udpN6Esk7JKvGQAAAAY8"]
[Mon Mar 23 19:07:00.653106 2026] [:error] [pid 23439:tid 23456] [client 20.240.250.153:63621] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "acEe1KZv8XIzUKdgaMeV5QAAAAc"]
[Mon Mar 23 19:07:01.320988 2026] [:error] [pid 35165:tid 35185] [client 20.240.250.153:64661] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEe1c6udpN6Esk7JKvGRgAAAZE"]
[Mon Mar 23 19:07:01.872297 2026] [:error] [pid 23539:tid 23564] [client 20.240.250.153:64657] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEe1X7Dh3qWGSpIAZUp7QAAANA"]
[Mon Mar 23 19:07:02.518621 2026] [:error] [pid 35165:tid 35181] [client 20.240.250.153:65149] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEe1s6udpN6Esk7JKvGSgAAAY0"]
[Mon Mar 23 19:07:03.057150 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:64273] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acEe12NLjPJJkhuqCshXHwAAAQY"]
[Mon Mar 23 19:07:03.743852 2026] [:error] [pid 57265:tid 57275] [client 20.240.250.153:65095] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acEe12NLjPJJkhuqCshXIgAAAQg"]
[Mon Mar 23 19:07:04.298114 2026] [:error] [pid 23539:tid 23558] [client 20.240.250.153:64230] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acEe2H7Dh3qWGSpIAZUp8AAAAMo"]
[Mon Mar 23 19:07:05.008846 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:64307] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acEe2WNLjPJJkhuqCshXIwAAAQo"]
[Mon Mar 23 19:07:05.793700 2026] [:error] [pid 23439:tid 23461] [client 20.240.250.153:64696] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acEe2aZv8XIzUKdgaMeV6AAAAAw"]
[Mon Mar 23 19:07:06.441642 2026] [:error] [pid 23440:tid 23492] [client 20.240.250.153:64302] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acEe2j49_8n8h_ttcUo6HgAAAFA"]
[Mon Mar 23 19:07:06.985400 2026] [:error] [pid 23539:tid 23552] [client 20.240.250.153:64219] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acEe2n7Dh3qWGSpIAZUp9gAAAMQ"]
[Mon Mar 23 19:07:07.679161 2026] [:error] [pid 35165:tid 35171] [client 20.240.250.153:64688] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acEe286udpN6Esk7JKvGUQAAAYM"]
[Mon Mar 23 19:07:08.305587 2026] [:error] [pid 57265:tid 57289] [client 20.240.250.153:64228] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "acEe3GNLjPJJkhuqCshXJQAAARY"]
[Mon Mar 23 19:07:08.844907 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:64679] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "acEe3GNLjPJJkhuqCshXJwAAARg"]
[Mon Mar 23 19:07:09.587687 2026] [:error] [pid 57265:tid 57274] [client 20.240.250.153:64234] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "acEe3WNLjPJJkhuqCshXKQAAAQc"]
[Mon Mar 23 19:07:10.127273 2026] [:error] [pid 23539:tid 23572] [client 20.240.250.153:62497] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "acEe3n7Dh3qWGSpIAZUp-wAAANg"]
[Mon Mar 23 19:07:10.808215 2026] [:error] [pid 35165:tid 35180] [client 20.240.250.153:64660] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "acEe3s6udpN6Esk7JKvGVAAAAYw"]
[Mon Mar 23 19:07:11.434249 2026] [:error] [pid 23539:tid 23563] [client 20.240.250.153:64662] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "acEe337Dh3qWGSpIAZUqBAAAAM8"]
[Mon Mar 23 19:07:12.098084 2026] [:error] [pid 23539:tid 23557] [client 20.240.250.153:64244] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "acEe4H7Dh3qWGSpIAZUqBwAAAMk"]
[Mon Mar 23 19:07:12.650188 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:65185] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "acEe4GNLjPJJkhuqCshXLwAAARM"]
[Mon Mar 23 19:07:13.285469 2026] [:error] [pid 23439:tid 23452] [client 20.240.250.153:64580] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "acEe4aZv8XIzUKdgaMeV7QAAAAM"]
[Mon Mar 23 19:07:13.823836 2026] [:error] [pid 35165:tid 35181] [client 20.240.250.153:63628] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "acEe4c6udpN6Esk7JKvGWAAAAY0"]
[Mon Mar 23 19:07:14.411782 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:64235] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "acEe4mNLjPJJkhuqCshXOwAAAQE"]
[Mon Mar 23 19:07:15.015725 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:64203] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "acEe42NLjPJJkhuqCshXPwAAAQI"]
[Mon Mar 23 19:07:15.640867 2026] [:error] [pid 23441:tid 23504] [client 20.240.250.153:65091] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "acEe4xq7S-oOqSXZEr7kGgAAAIE"]
[Mon Mar 23 19:07:16.271878 2026] [:error] [pid 23440:tid 23482] [client 20.240.250.153:64680] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acEe5D49_8n8h_ttcUo6KAAAAEY"]
[Mon Mar 23 19:07:16.934376 2026] [:error] [pid 23539:tid 23549] [client 20.240.250.153:63572] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acEe5H7Dh3qWGSpIAZUqCwAAAME"]
[Mon Mar 23 19:07:17.538422 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:65132] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acEe5WNLjPJJkhuqCshXQgAAARc"]
[Mon Mar 23 19:07:18.090973 2026] [:error] [pid 57265:tid 57274] [client 20.240.250.153:65139] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acEe5mNLjPJJkhuqCshXRgAAAQc"]
[Mon Mar 23 19:07:18.712722 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:65514] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "acEe5mNLjPJJkhuqCshXSQAAARg"]
[Mon Mar 23 19:07:19.356558 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:64614] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "acEe52NLjPJJkhuqCshXTQAAARU"]
[Mon Mar 23 19:07:20.012065 2026] [:error] [pid 23441:tid 23526] [client 20.240.250.153:64215] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "acEe6Bq7S-oOqSXZEr7kHQAAAJc"]
[Mon Mar 23 19:07:20.589586 2026] [:error] [pid 35165:tid 35177] [client 20.240.250.153:63666] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "acEe6M6udpN6Esk7JKvGXAAAAYk"]
[Mon Mar 23 19:07:21.254845 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:63554] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "acEe6e-oSmHn3q4_J1HZYgAAAUg"]
[Mon Mar 23 19:07:21.786022 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:64652] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "acEe6e-oSmHn3q4_J1HZZQAAAVA"]
[Mon Mar 23 19:07:22.379381 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:63590] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "acEe6u-oSmHn3q4_J1HZZwAAAUA"]
[Mon Mar 23 19:07:23.093709 2026] [:error] [pid 23440:tid 23477] [client 20.240.250.153:64684] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "acEe6z49_8n8h_ttcUo6LgAAAEE"]
[Mon Mar 23 19:07:23.622400 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:64582] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "acEe686udpN6Esk7JKvGXwAAAYo"]
[Mon Mar 23 19:07:24.169707 2026] [:error] [pid 23441:tid 23508] [client 20.240.250.153:64666] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "acEe7Bq7S-oOqSXZEr7kIQAAAIU"]
[Mon Mar 23 19:07:24.724352 2026] [:error] [pid 23441:tid 23512] [client 20.240.250.153:63582] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "acEe7Bq7S-oOqSXZEr7kIgAAAIk"]
[Mon Mar 23 19:07:25.275317 2026] [proxy_fcgi:error] [pid 57265:tid 57284] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:25.545519 2026] [proxy_fcgi:error] [pid 57265:tid 57275] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:25.814249 2026] [proxy_fcgi:error] [pid 57265:tid 57277] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:26.406114 2026] [proxy_fcgi:error] [pid 57265:tid 57268] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:27.035954 2026] [proxy_fcgi:error] [pid 57265:tid 57287] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:27.320556 2026] [proxy_fcgi:error] [pid 57265:tid 57281] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:27.905128 2026] [proxy_fcgi:error] [pid 57265:tid 57286] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:28.172205 2026] [proxy_fcgi:error] [pid 57265:tid 57278] [client 20.240.250.153:64222] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:07:28.436337 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:64222] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEe8GNLjPJJkhuqCshXawAAAQI"]
[Mon Mar 23 19:07:29.105170 2026] [:error] [pid 14573:tid 14578] [client 20.240.250.153:64283] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEe8e-oSmHn3q4_J1HZfgAAAUM"]
[Mon Mar 23 19:07:29.635684 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65099] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEe8WNLjPJJkhuqCshXbwAAAQ0"]
[Mon Mar 23 19:07:30.273006 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:64633] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEe8u-oSmHn3q4_J1HZgQAAAVg"]
[Mon Mar 23 19:07:30.801283 2026] [:error] [pid 14573:tid 14576] [client 20.240.250.153:62986] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "acEe8u-oSmHn3q4_J1HZhAAAAUE"]
[Mon Mar 23 19:07:31.456609 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:65144] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "acEe82NLjPJJkhuqCshXcwAAAQE"]
[Mon Mar 23 19:07:32.043074 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:65492] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "acEe9O-oSmHn3q4_J1HZiAAAAUg"]
[Mon Mar 23 19:07:32.696457 2026] [:error] [pid 23440:tid 23492] [client 20.240.250.153:65135] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "acEe9D49_8n8h_ttcUo6NwAAAFA"]
[Mon Mar 23 19:07:33.244130 2026] [:error] [pid 35165:tid 35173] [client 20.240.250.153:65473] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "acEe9c6udpN6Esk7JKvGZQAAAYU"]
[Mon Mar 23 19:07:33.877634 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:64213] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "acEe9e-oSmHn3q4_J1HZigAAAUA"]
[Mon Mar 23 19:07:34.504008 2026] [:error] [pid 23440:tid 23483] [client 20.240.250.153:64671] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "acEe9j49_8n8h_ttcUo6PgAAAEc"]
[Mon Mar 23 19:07:35.086814 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:65483] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "acEe9--oSmHn3q4_J1HZjQAAAUI"]
[Mon Mar 23 19:07:35.675404 2026] [:error] [pid 23440:tid 23489] [client 20.240.250.153:64284] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acEe9z49_8n8h_ttcUo6QAAAAE0"]
[Mon Mar 23 19:07:36.217539 2026] [:error] [pid 23539:tid 23566] [client 20.240.250.153:65491] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acEe-H7Dh3qWGSpIAZUqEwAAANI"]
[Mon Mar 23 19:07:36.770539 2026] [:error] [pid 35165:tid 35171] [client 20.240.250.153:63574] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acEe-M6udpN6Esk7JKvGawAAAYM"]
[Mon Mar 23 19:07:37.332466 2026] [:error] [pid 23539:tid 23568] [client 20.240.250.153:65502] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acEe-X7Dh3qWGSpIAZUqFQAAANQ"]
[Mon Mar 23 19:07:37.895605 2026] [:error] [pid 14573:tid 14579] [client 20.240.250.153:64672] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "acEe-e-oSmHn3q4_J1HZkQAAAUQ"]
[Mon Mar 23 19:07:38.435978 2026] [:error] [pid 23441:tid 23520] [client 20.240.250.153:64223] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "acEe-hq7S-oOqSXZEr7kJwAAAJE"]
[Mon Mar 23 19:07:38.983302 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:64318] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "acEe-u-oSmHn3q4_J1HZlgAAAUk"]
[Mon Mar 23 19:07:39.507877 2026] [:error] [pid 14573:tid 14595] [client 20.240.250.153:64686] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "acEe---oSmHn3q4_J1HZmQAAAVQ"]
[Mon Mar 23 19:07:40.128561 2026] [:error] [pid 23539:tid 23550] [client 20.240.250.153:63670] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "acEe_H7Dh3qWGSpIAZUqFwAAAMI"]
[Mon Mar 23 19:07:40.709998 2026] [:error] [pid 23539:tid 23567] [client 20.240.250.153:65116] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "acEe_H7Dh3qWGSpIAZUqGAAAANM"]
[Mon Mar 23 19:07:41.329419 2026] [:error] [pid 23440:tid 23487] [client 20.240.250.153:64613] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "acEe_T49_8n8h_ttcUo6RQAAAEs"]
[Mon Mar 23 19:07:42.013601 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:64638] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "acEe_u-oSmHn3q4_J1HZogAAAUk"]
[Mon Mar 23 19:07:42.618089 2026] [:error] [pid 35165:tid 35190] [client 20.240.250.153:64309] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "acEe_s6udpN6Esk7JKvGbgAAAZY"]
[Mon Mar 23 19:07:43.148003 2026] [:error] [pid 35165:tid 35185] [client 20.240.250.153:64293] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "acEe_86udpN6Esk7JKvGcAAAAZE"]
[Mon Mar 23 19:07:43.683907 2026] [:error] [pid 35165:tid 35172] [client 20.240.250.153:64274] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "acEe_86udpN6Esk7JKvGcgAAAYQ"]
[Mon Mar 23 19:07:44.250746 2026] [:error] [pid 23539:tid 23572] [client 20.240.250.153:64594] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "acEfAH7Dh3qWGSpIAZUqGQAAANg"]
[Mon Mar 23 19:07:44.838108 2026] [:error] [pid 23439:tid 23455] [client 20.240.250.153:62982] [client 20.240.250.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acEfAKZv8XIzUKdgaMeV_AAAAAY"]
[Mon Mar 23 19:07:45.383470 2026] [:error] [pid 23440:tid 23476] [client 20.240.250.153:64250] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acEfAT49_8n8h_ttcUo6SQAAAEA"]
[Mon Mar 23 19:07:46.161558 2026] [:error] [pid 23441:tid 23518] [client 20.240.250.153:64211] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acEfAhq7S-oOqSXZEr7kLAAAAI8"]
[Mon Mar 23 19:07:46.730614 2026] [:error] [pid 23440:tid 23498] [client 20.240.250.153:64653] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acEfAj49_8n8h_ttcUo6SwAAAFY"]
[Mon Mar 23 19:07:47.263728 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:64314] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acEfA86udpN6Esk7JKvGfQAAAYo"]
[Mon Mar 23 19:07:47.960822 2026] [:error] [pid 23539:tid 23571] [client 20.240.250.153:64667] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acEfA37Dh3qWGSpIAZUqHgAAANc"]
[Mon Mar 23 19:07:48.512613 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:63619] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acEfBO-oSmHn3q4_J1HZqgAAAVc"]
[Mon Mar 23 19:07:49.069887 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:64600] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acEfBe-oSmHn3q4_J1HZrgAAAUk"]
[Mon Mar 23 19:07:49.677898 2026] [:error] [pid 14573:tid 14595] [client 20.240.250.153:65191] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acEfBe-oSmHn3q4_J1HZtAAAAVQ"]
[Mon Mar 23 19:07:50.291535 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:65494] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acEfBu-oSmHn3q4_J1HZtwAAAVc"]
[Mon Mar 23 19:07:50.884679 2026] [:error] [pid 23539:tid 23572] [client 20.240.250.153:64280] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acEfBn7Dh3qWGSpIAZUqJgAAANg"]
[Mon Mar 23 19:07:51.431652 2026] [:error] [pid 23539:tid 23561] [client 20.240.250.153:65526] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acEfB37Dh3qWGSpIAZUqKgAAAM0"]
[Mon Mar 23 19:07:52.023138 2026] [:error] [pid 35165:tid 35169] [client 20.240.250.153:64643] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "acEfCM6udpN6Esk7JKvGiAAAAYE"]
[Mon Mar 23 19:07:52.565110 2026] [:error] [pid 57265:tid 57276] [client 20.240.250.153:65153] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "acEfCGNLjPJJkhuqCshXgQAAAQk"]
[Mon Mar 23 19:07:53.098065 2026] [:error] [pid 35165:tid 35190] [client 20.240.250.153:63586] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "acEfCc6udpN6Esk7JKvGjAAAAZY"]
[Mon Mar 23 19:07:53.772190 2026] [:error] [pid 23441:tid 23511] [client 20.240.250.153:64632] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "acEfCRq7S-oOqSXZEr7kNAAAAIg"]
[Mon Mar 23 19:07:54.351008 2026] [:error] [pid 14573:tid 14582] [client 20.240.250.153:64673] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "acEfCu-oSmHn3q4_J1HZugAAAUc"]
[Mon Mar 23 19:07:54.931400 2026] [:error] [pid 35165:tid 35183] [client 20.240.250.153:64269] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "acEfCs6udpN6Esk7JKvGkgAAAY8"]
[Mon Mar 23 19:07:55.469489 2026] [:error] [pid 23441:tid 23514] [client 20.240.250.153:65148] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "acEfCxq7S-oOqSXZEr7kNgAAAIs"]
[Mon Mar 23 19:07:56.086355 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:65166] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "acEfDGNLjPJJkhuqCshXiwAAARg"]
[Mon Mar 23 19:07:56.675224 2026] [:error] [pid 35165:tid 35191] [client 20.240.250.153:64599] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "acEfDM6udpN6Esk7JKvGlAAAAZc"]
[Mon Mar 23 19:07:57.249390 2026] [:error] [pid 23539:tid 23567] [client 20.240.250.153:63651] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "acEfDX7Dh3qWGSpIAZUqOAAAANM"]
[Mon Mar 23 19:07:57.875748 2026] [:error] [pid 23441:tid 23510] [client 20.240.250.153:65167] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "acEfDRq7S-oOqSXZEr7kOAAAAIc"]
[Mon Mar 23 19:07:58.405735 2026] [:error] [pid 23441:tid 23524] [client 20.240.250.153:63610] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "acEfDhq7S-oOqSXZEr7kOgAAAJU"]
[Mon Mar 23 19:07:59.009437 2026] [:error] [pid 14573:tid 14588] [client 20.240.250.153:63577] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "acEfD--oSmHn3q4_J1HZvAAAAU0"]
[Mon Mar 23 19:07:59.621660 2026] [:error] [pid 23439:tid 23457] [client 20.240.250.153:65107] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "acEfD6Zv8XIzUKdgaMeWBQAAAAg"]
[Mon Mar 23 19:08:00.213163 2026] [:error] [pid 35165:tid 35172] [client 20.240.250.153:64206] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "acEfEM6udpN6Esk7JKvGnQAAAYQ"]
[Mon Mar 23 19:08:00.801739 2026] [:error] [pid 23539:tid 23562] [client 20.240.250.153:65130] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "acEfEH7Dh3qWGSpIAZUqPwAAAM4"]
[Mon Mar 23 19:08:01.454003 2026] [:error] [pid 35165:tid 35177] [client 20.240.250.153:64702] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "acEfEc6udpN6Esk7JKvGoAAAAYk"]
[Mon Mar 23 19:08:02.062968 2026] [:error] [pid 23440:tid 23476] [client 20.240.250.153:65138] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "acEfEj49_8n8h_ttcUo6WAAAAEA"]
[Mon Mar 23 19:08:02.636923 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:64581] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "acEfEs6udpN6Esk7JKvGpQAAAYo"]
[Mon Mar 23 19:08:03.270432 2026] [:error] [pid 23439:tid 23473] [client 20.240.250.153:65200] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "acEfE6Zv8XIzUKdgaMeWCgAAABg"]
[Mon Mar 23 19:08:03.919348 2026] [:error] [pid 23439:tid 23456] [client 20.240.250.153:63679] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "acEfE6Zv8XIzUKdgaMeWCwAAAAc"]
[Mon Mar 23 19:08:04.456886 2026] [:error] [pid 23440:tid 23496] [client 20.240.250.153:65102] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "acEfFD49_8n8h_ttcUo6WgAAAFQ"]
[Mon Mar 23 19:08:05.058260 2026] [:error] [pid 23439:tid 23463] [client 20.240.250.153:63559] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "acEfFaZv8XIzUKdgaMeWEAAAAA4"]
[Mon Mar 23 19:08:05.615424 2026] [:error] [pid 23439:tid 23451] [client 20.240.250.153:65198] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "acEfFaZv8XIzUKdgaMeWEgAAAAI"]
[Mon Mar 23 19:08:06.143708 2026] [:error] [pid 23439:tid 23471] [client 20.240.250.153:64275] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "acEfFqZv8XIzUKdgaMeWEwAAABY"]
[Mon Mar 23 19:08:06.676477 2026] [:error] [pid 23539:tid 23567] [client 20.240.250.153:62405] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acEfFn7Dh3qWGSpIAZUqRQAAANM"]
[Mon Mar 23 19:08:07.268533 2026] [:error] [pid 23539:tid 23561] [client 20.240.250.153:64296] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acEfF37Dh3qWGSpIAZUqSAAAAM0"]
[Mon Mar 23 19:08:07.850434 2026] [:error] [pid 23441:tid 23527] [client 20.240.250.153:64248] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acEfFxq7S-oOqSXZEr7kQAAAAJg"]
[Mon Mar 23 19:08:08.455870 2026] [:error] [pid 14573:tid 14579] [client 20.240.250.153:64687] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acEfGO-oSmHn3q4_J1HZvwAAAUQ"]
[Mon Mar 23 19:08:08.993052 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:64675] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "acEfGO-oSmHn3q4_J1HZwgAAAVA"]
[Mon Mar 23 19:08:09.615180 2026] [:error] [pid 14573:tid 14593] [client 20.240.250.153:64611] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "acEfGe-oSmHn3q4_J1HZwwAAAVI"]
[Mon Mar 23 19:08:10.144281 2026] [:error] [pid 23539:tid 23562] [client 20.240.250.153:64237] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "acEfGn7Dh3qWGSpIAZUqSwAAAM4"]
[Mon Mar 23 19:08:10.797288 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:65488] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "acEfGmNLjPJJkhuqCshXkwAAAQY"]
[Mon Mar 23 19:08:11.505424 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:65151] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "acEfG--oSmHn3q4_J1HZyQAAAUA"]
[Mon Mar 23 19:08:12.068107 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:64692] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "acEfHO-oSmHn3q4_J1HZzQAAAUg"]
[Mon Mar 23 19:08:12.710192 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65506] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "acEfHGNLjPJJkhuqCshXlwAAAQI"]
[Mon Mar 23 19:08:13.291007 2026] [:error] [pid 35165:tid 35179] [client 20.240.250.153:64236] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "acEfHc6udpN6Esk7JKvGrQAAAYs"]
[Mon Mar 23 19:08:13.831739 2026] [:error] [pid 14573:tid 14593] [client 20.240.250.153:63570] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEfHe-oSmHn3q4_J1HZ1AAAAVI"]
[Mon Mar 23 19:08:14.456145 2026] [:error] [pid 14573:tid 14586] [client 20.240.250.153:65194] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEfHu-oSmHn3q4_J1HZ1QAAAUs"]
[Mon Mar 23 19:08:15.012227 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:65092] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEfH--oSmHn3q4_J1HZ1wAAAUA"]
[Mon Mar 23 19:08:15.623469 2026] [:error] [pid 57265:tid 57271] [client 20.240.250.153:64233] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEfH2NLjPJJkhuqCshXnwAAAQQ"]
[Mon Mar 23 19:08:16.255080 2026] [:error] [pid 57265:tid 57281] [client 20.240.250.153:64245] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "acEfIGNLjPJJkhuqCshXogAAAQ4"]
[Mon Mar 23 19:08:16.853396 2026] [:error] [pid 23539:tid 23560] [client 20.240.250.153:65211] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "acEfIH7Dh3qWGSpIAZUqUwAAAMw"]
[Mon Mar 23 19:08:17.437694 2026] [:error] [pid 23539:tid 23563] [client 20.240.250.153:64621] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "acEfIX7Dh3qWGSpIAZUqVgAAAM8"]
[Mon Mar 23 19:08:18.029722 2026] [:error] [pid 23440:tid 23484] [client 20.240.250.153:64635] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "acEfIj49_8n8h_ttcUo6XQAAAEg"]
[Mon Mar 23 19:08:18.566706 2026] [:error] [pid 23441:tid 23526] [client 20.240.250.153:64634] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "acEfIhq7S-oOqSXZEr7kSAAAAJc"]
[Mon Mar 23 19:08:19.153110 2026] [:error] [pid 14573:tid 14575] [client 20.240.250.153:63632] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "acEfI--oSmHn3q4_J1HZ5QAAAUA"]
[Mon Mar 23 19:08:19.694970 2026] [:error] [pid 57265:tid 57276] [client 20.240.250.153:62970] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "acEfI2NLjPJJkhuqCshXuwAAAQk"]
[Mon Mar 23 19:08:20.273045 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:65137] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "acEfJM6udpN6Esk7JKvGrwAAAYo"]
[Mon Mar 23 19:08:20.847361 2026] [:error] [pid 14573:tid 14587] [client 20.240.250.153:64305] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "acEfJO-oSmHn3q4_J1HZ6AAAAUw"]
[Mon Mar 23 19:08:21.396849 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:64644] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "acEfJWNLjPJJkhuqCshXvwAAARU"]
[Mon Mar 23 19:08:22.066873 2026] [:error] [pid 23441:tid 23507] [client 20.240.250.153:65509] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "acEfJhq7S-oOqSXZEr7kSQAAAIQ"]
[Mon Mar 23 19:08:22.592532 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:63555] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "acEfJu-oSmHn3q4_J1HZ6QAAAUg"]
[Mon Mar 23 19:08:23.169220 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:64668] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "acEfJ2NLjPJJkhuqCshXxQAAAQE"]
[Mon Mar 23 19:08:23.766504 2026] [:error] [pid 57265:tid 57278] [client 20.240.250.153:64619] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "acEfJ2NLjPJJkhuqCshXyQAAAQs"]
[Mon Mar 23 19:08:24.363670 2026] [:error] [pid 14573:tid 14578] [client 20.240.250.153:65493] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "acEfKO-oSmHn3q4_J1HZ7gAAAUM"]
[Mon Mar 23 19:08:24.979376 2026] [:error] [pid 14573:tid 14597] [client 20.240.250.153:62958] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "acEfKO-oSmHn3q4_J1HZ8QAAAVY"]
[Mon Mar 23 19:08:25.512331 2026] [:error] [pid 14573:tid 14588] [client 20.240.250.153:65103] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acEfKe-oSmHn3q4_J1HZ8wAAAU0"]
[Mon Mar 23 19:08:26.072562 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:63654] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acEfKmNLjPJJkhuqCshX0AAAAQY"]
[Mon Mar 23 19:08:26.632950 2026] [:error] [pid 35165:tid 35174] [client 20.240.250.153:64315] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acEfKs6udpN6Esk7JKvGtAAAAYY"]
[Mon Mar 23 19:08:27.232339 2026] [:error] [pid 14573:tid 14581] [client 20.240.250.153:63633] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acEfK--oSmHn3q4_J1HZ-QAAAUY"]
[Mon Mar 23 19:08:27.836612 2026] [:error] [pid 14573:tid 14586] [client 20.240.250.153:64217] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "acEfK--oSmHn3q4_J1HZ_gAAAUs"]
[Mon Mar 23 19:08:28.471399 2026] [proxy_fcgi:error] [pid 23539:tid 23548] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:28.759610 2026] [proxy_fcgi:error] [pid 23539:tid 23552] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:29.029394 2026] [proxy_fcgi:error] [pid 23539:tid 23560] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:29.343007 2026] [proxy_fcgi:error] [pid 23539:tid 23561] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:29.890641 2026] [proxy_fcgi:error] [pid 23539:tid 23555] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:30.184473 2026] [proxy_fcgi:error] [pid 23539:tid 23567] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:30.779575 2026] [proxy_fcgi:error] [pid 23539:tid 23571] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:31.062068 2026] [proxy_fcgi:error] [pid 23539:tid 23562] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:31.372380 2026] [proxy_fcgi:error] [pid 23539:tid 23565] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:31.662612 2026] [proxy_fcgi:error] [pid 23539:tid 23553] [client 20.240.250.153:64639] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:08:31.925512 2026] [:error] [pid 23539:tid 23570] [client 20.240.250.153:64639] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "acEfL37Dh3qWGSpIAZUqgwAAANY"]
[Mon Mar 23 19:08:32.472497 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:64701] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "acEfMGNLjPJJkhuqCshX4wAAAQo"]
[Mon Mar 23 19:08:33.161704 2026] [:error] [pid 14573:tid 14597] [client 20.240.250.153:63611] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "acEfMe-oSmHn3q4_J1HaCAAAAVY"]
[Mon Mar 23 19:08:33.700677 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:62517] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "acEfMWNLjPJJkhuqCshX6AAAAQE"]
[Mon Mar 23 19:08:34.233867 2026] [:error] [pid 14573:tid 14594] [client 20.240.250.153:64209] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acEfMu-oSmHn3q4_J1HaDgAAAVM"]
[Mon Mar 23 19:08:34.775106 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:64612] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acEfMmNLjPJJkhuqCshX6wAAARU"]
[Mon Mar 23 19:08:35.532067 2026] [:error] [pid 23539:tid 23558] [client 20.240.250.153:65109] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acEfM37Dh3qWGSpIAZUqhQAAAMo"]
[Mon Mar 23 19:08:36.237608 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:63652] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acEfNO-oSmHn3q4_J1HaEQAAAVg"]
[Mon Mar 23 19:08:36.766347 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:62947] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat1.php"] [unique_id "acEfNGNLjPJJkhuqCshX8AAAAQY"]
[Mon Mar 23 19:08:37.378290 2026] [:error] [pid 57265:tid 57284] [client 20.240.250.153:63617] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat1.php"] [unique_id "acEfNWNLjPJJkhuqCshX9QAAARE"]
[Mon Mar 23 19:08:38.018579 2026] [:error] [pid 57265:tid 57282] [client 20.240.250.153:64210] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat1.php"] [unique_id "acEfNmNLjPJJkhuqCshX-wAAAQ8"]
[Mon Mar 23 19:08:38.597704 2026] [:error] [pid 23440:tid 23482] [client 20.240.250.153:65158] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat1.php"] [unique_id "acEfNj49_8n8h_ttcUo6YAAAAEY"]
[Mon Mar 23 19:08:39.128732 2026] [:error] [pid 57265:tid 57267] [client 20.240.250.153:64285] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "acEfN2NLjPJJkhuqCshX_wAAAQA"]
[Mon Mar 23 19:08:39.767973 2026] [:error] [pid 14573:tid 14576] [client 20.240.250.153:65214] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "acEfN--oSmHn3q4_J1HaEwAAAUE"]
[Mon Mar 23 19:08:40.352885 2026] [:error] [pid 14573:tid 14587] [client 20.240.250.153:64699] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "acEfOO-oSmHn3q4_J1HaFAAAAUw"]
[Mon Mar 23 19:08:41.074041 2026] [:error] [pid 35165:tid 35187] [client 20.240.250.153:64298] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "acEfOc6udpN6Esk7JKvGxQAAAZM"]
[Mon Mar 23 19:08:41.624448 2026] [:error] [pid 14573:tid 14597] [client 20.240.250.153:62922] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "acEfOe-oSmHn3q4_J1HaGgAAAVY"]
[Mon Mar 23 19:08:42.171116 2026] [:error] [pid 23441:tid 23527] [client 20.240.250.153:65096] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "acEfOhq7S-oOqSXZEr7kTAAAAJg"]
[Mon Mar 23 19:08:42.814651 2026] [:error] [pid 35165:tid 35183] [client 20.240.250.153:65486] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "acEfOs6udpN6Esk7JKvGzAAAAY8"]
[Mon Mar 23 19:08:43.435473 2026] [:error] [pid 23440:tid 23498] [client 20.240.250.153:63578] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "acEfOz49_8n8h_ttcUo6ZwAAAFY"]
[Mon Mar 23 19:08:43.962115 2026] [:error] [pid 57265:tid 57284] [client 20.240.250.153:64240] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acEfO2NLjPJJkhuqCshYDwAAARE"]
[Mon Mar 23 19:08:44.492597 2026] [:error] [pid 23441:tid 23515] [client 20.240.250.153:64287] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acEfPBq7S-oOqSXZEr7kTgAAAIw"]
[Mon Mar 23 19:08:45.133188 2026] [:error] [pid 57265:tid 57290] [client 20.240.250.153:64295] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acEfPWNLjPJJkhuqCshYEgAAARc"]
[Mon Mar 23 19:08:45.748568 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65210] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acEfPWNLjPJJkhuqCshYFQAAAQI"]
[Mon Mar 23 19:08:46.336339 2026] [:error] [pid 35165:tid 35173] [client 20.240.250.153:62951] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "acEfPs6udpN6Esk7JKvGzgAAAYU"]
[Mon Mar 23 19:08:46.864384 2026] [:error] [pid 14573:tid 14595] [client 20.240.250.153:63659] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "acEfPu-oSmHn3q4_J1HaHwAAAVQ"]
[Mon Mar 23 19:08:47.395406 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:64279] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "acEfP2NLjPJJkhuqCshYHwAAAQY"]
[Mon Mar 23 19:08:47.971696 2026] [:error] [pid 57265:tid 57289] [client 20.240.250.153:65477] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "acEfP2NLjPJJkhuqCshYIgAAARY"]
[Mon Mar 23 19:08:48.566750 2026] [:error] [pid 23440:tid 23493] [client 20.240.250.153:65512] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acEfQD49_8n8h_ttcUo6awAAAFE"]
[Mon Mar 23 19:08:49.154219 2026] [:error] [pid 23439:tid 23472] [client 20.240.250.153:65134] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acEfQaZv8XIzUKdgaMeWGwAAABc"]
[Mon Mar 23 19:08:49.734259 2026] [:error] [pid 14573:tid 14581] [client 20.240.250.153:64693] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acEfQe-oSmHn3q4_J1HaIwAAAUY"]
[Mon Mar 23 19:08:50.273984 2026] [:error] [pid 57265:tid 57271] [client 20.240.250.153:63608] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acEfQmNLjPJJkhuqCshYKQAAAQQ"]
[Mon Mar 23 19:08:50.809450 2026] [:error] [pid 23539:tid 23564] [client 20.240.250.153:65097] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fffff.php"] [unique_id "acEfQn7Dh3qWGSpIAZUqkwAAANA"]
[Mon Mar 23 19:08:51.372296 2026] [:error] [pid 35165:tid 35185] [client 20.240.250.153:65472] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fffff.php"] [unique_id "acEfQ86udpN6Esk7JKvG0gAAAZE"]
[Mon Mar 23 19:08:52.004803 2026] [:error] [pid 14573:tid 14586] [client 20.240.250.153:65195] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fffff.php"] [unique_id "acEfRO-oSmHn3q4_J1HaJgAAAUs"]
[Mon Mar 23 19:08:52.642259 2026] [:error] [pid 23539:tid 23567] [client 20.240.250.153:63642] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fffff.php"] [unique_id "acEfRH7Dh3qWGSpIAZUqnAAAANM"]
[Mon Mar 23 19:08:53.251160 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:65090] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/thh.php"] [unique_id "acEfRWNLjPJJkhuqCshYLAAAARg"]
[Mon Mar 23 19:08:53.797799 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:65141] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/thh.php"] [unique_id "acEfRWNLjPJJkhuqCshYLgAAARM"]
[Mon Mar 23 19:08:54.331338 2026] [:error] [pid 35165:tid 35183] [client 20.240.250.153:63030] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/thh.php"] [unique_id "acEfRs6udpN6Esk7JKvG1wAAAY8"]
[Mon Mar 23 19:08:54.859374 2026] [:error] [pid 23440:tid 23482] [client 20.240.250.153:65174] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/thh.php"] [unique_id "acEfRj49_8n8h_ttcUo6dgAAAEY"]
[Mon Mar 23 19:08:55.420882 2026] [:error] [pid 35165:tid 35169] [client 20.240.250.153:64694] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "acEfR86udpN6Esk7JKvG2AAAAYE"]
[Mon Mar 23 19:08:56.057680 2026] [:error] [pid 23539:tid 23548] [client 20.240.250.153:64610] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "acEfSH7Dh3qWGSpIAZUqogAAAMA"]
[Mon Mar 23 19:08:56.607979 2026] [:error] [pid 23539:tid 23568] [client 20.240.250.153:64595] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "acEfSH7Dh3qWGSpIAZUqpgAAANQ"]
[Mon Mar 23 19:08:57.177584 2026] [:error] [pid 35165:tid 35191] [client 20.240.250.153:64689] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "acEfSc6udpN6Esk7JKvG2gAAAZc"]
[Mon Mar 23 19:08:57.819877 2026] [:error] [pid 57265:tid 57288] [client 20.240.250.153:63646] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wfile.php"] [unique_id "acEfSWNLjPJJkhuqCshYMwAAARU"]
[Mon Mar 23 19:08:58.378761 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:62997] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wfile.php"] [unique_id "acEfSu-oSmHn3q4_J1HaNQAAAUI"]
[Mon Mar 23 19:08:58.943928 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:63562] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wfile.php"] [unique_id "acEfSmNLjPJJkhuqCshYNAAAAQ0"]
[Mon Mar 23 19:08:59.476190 2026] [:error] [pid 57265:tid 57289] [client 20.240.250.153:64225] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wfile.php"] [unique_id "acEfS2NLjPJJkhuqCshYOAAAARY"]
[Mon Mar 23 19:09:00.168187 2026] [:error] [pid 57265:tid 57272] [client 20.240.250.153:63604] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "acEfTGNLjPJJkhuqCshYPwAAAQU"]
[Mon Mar 23 19:09:00.753373 2026] [:error] [pid 57265:tid 57273] [client 20.240.250.153:64257] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "acEfTGNLjPJJkhuqCshYRgAAAQY"]
[Mon Mar 23 19:09:01.302244 2026] [:error] [pid 57265:tid 57282] [client 20.240.250.153:64654] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "acEfTWNLjPJJkhuqCshYSwAAAQ8"]
[Mon Mar 23 19:09:01.932353 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:64655] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "acEfTWNLjPJJkhuqCshYTwAAAQo"]
[Mon Mar 23 19:09:02.601061 2026] [:error] [pid 57265:tid 57268] [client 20.240.250.153:63591] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "acEfTmNLjPJJkhuqCshYUgAAAQE"]
[Mon Mar 23 19:09:03.169936 2026] [:error] [pid 57265:tid 57281] [client 20.240.250.153:63032] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "acEfT2NLjPJJkhuqCshYVQAAAQ4"]
[Mon Mar 23 19:09:03.746485 2026] [:error] [pid 23441:tid 23517] [client 20.240.250.153:62941] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "acEfTxq7S-oOqSXZEr7kcwAAAI4"]
[Mon Mar 23 19:09:04.338740 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:63581] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "acEfUO-oSmHn3q4_J1HaOwAAAUg"]
[Mon Mar 23 19:09:04.865967 2026] [:error] [pid 57265:tid 57275] [client 20.240.250.153:63667] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "acEfUGNLjPJJkhuqCshYYgAAAQg"]
[Mon Mar 23 19:09:05.715899 2026] [:error] [pid 14573:tid 14595] [client 20.240.250.153:63614] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "acEfUe-oSmHn3q4_J1HaPQAAAVQ"]
[Mon Mar 23 19:09:06.321548 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:64272] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "acEfUu-oSmHn3q4_J1HaPwAAAUk"]
[Mon Mar 23 19:09:06.876954 2026] [:error] [pid 57265:tid 57287] [client 20.240.250.153:64205] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "acEfUmNLjPJJkhuqCshYdAAAARQ"]
[Mon Mar 23 19:09:07.406866 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:65500] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acEfU2NLjPJJkhuqCshYfgAAAQ0"]
[Mon Mar 23 19:09:07.992171 2026] [:error] [pid 23439:tid 23455] [client 20.240.250.153:65504] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acEfU6Zv8XIzUKdgaMeWJAAAAAY"]
[Mon Mar 23 19:09:08.566083 2026] [:error] [pid 57265:tid 57278] [client 20.240.250.153:64297] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acEfVGNLjPJJkhuqCshYhgAAAQs"]
[Mon Mar 23 19:09:09.304993 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:64319] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acEfVWNLjPJJkhuqCshYiQAAARM"]
[Mon Mar 23 19:09:09.921456 2026] [:error] [pid 35165:tid 35188] [client 20.240.250.153:62984] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "acEfVc6udpN6Esk7JKvG5gAAAZQ"]
[Mon Mar 23 19:09:10.458081 2026] [:error] [pid 23441:tid 23511] [client 20.240.250.153:64577] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "acEfVhq7S-oOqSXZEr7kewAAAIg"]
[Mon Mar 23 19:09:11.059126 2026] [:error] [pid 23441:tid 23504] [client 20.240.250.153:62973] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "acEfVxq7S-oOqSXZEr7kfgAAAIE"]
[Mon Mar 23 19:09:11.607752 2026] [:error] [pid 57265:tid 57275] [client 20.240.250.153:62957] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "acEfV2NLjPJJkhuqCshYkAAAAQg"]
[Mon Mar 23 19:09:12.152161 2026] [:error] [pid 23539:tid 23552] [client 20.240.250.153:64201] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "acEfWH7Dh3qWGSpIAZUqwgAAAMQ"]
[Mon Mar 23 19:09:12.743299 2026] [:error] [pid 57265:tid 57269] [client 20.240.250.153:65490] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "acEfWGNLjPJJkhuqCshYlAAAAQI"]
[Mon Mar 23 19:09:13.273410 2026] [:error] [pid 57265:tid 57284] [client 20.240.250.153:62994] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "acEfWWNLjPJJkhuqCshYlwAAARE"]
[Mon Mar 23 19:09:13.807069 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:65140] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "acEfWe-oSmHn3q4_J1HaSwAAAUk"]
[Mon Mar 23 19:09:14.513206 2026] [:error] [pid 23539:tid 23570] [client 20.240.250.153:62942] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "acEfWn7Dh3qWGSpIAZUqyAAAANY"]
[Mon Mar 23 19:09:15.100811 2026] [:error] [pid 57265:tid 57283] [client 20.240.250.153:64276] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "acEfW2NLjPJJkhuqCshYnAAAARA"]
[Mon Mar 23 19:09:16.100935 2026] [:error] [pid 14573:tid 14578] [client 20.240.250.153:64299] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "acEfXO-oSmHn3q4_J1HaVAAAAUM"]
[Mon Mar 23 19:09:16.825278 2026] [:error] [pid 14573:tid 14583] [client 20.240.250.153:64606] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "acEfXO-oSmHn3q4_J1HaWQAAAUg"]
[Mon Mar 23 19:09:17.361546 2026] [:error] [pid 23439:tid 23470] [client 20.240.250.153:63620] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/efile.php"] [unique_id "acEfXaZv8XIzUKdgaMeWKwAAABU"]
[Mon Mar 23 19:09:18.058656 2026] [:error] [pid 35165:tid 35168] [client 20.240.250.153:65121] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/efile.php"] [unique_id "acEfXs6udpN6Esk7JKvG6QAAAYA"]
[Mon Mar 23 19:09:18.604902 2026] [:error] [pid 14573:tid 14589] [client 20.240.250.153:64227] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/efile.php"] [unique_id "acEfXu-oSmHn3q4_J1HaYQAAAU4"]
[Mon Mar 23 19:09:19.182149 2026] [:error] [pid 14573:tid 14588] [client 20.240.250.153:64602] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/efile.php"] [unique_id "acEfX--oSmHn3q4_J1HaZQAAAU0"]
[Mon Mar 23 19:09:19.742294 2026] [:error] [pid 14573:tid 14584] [client 20.240.250.153:63575] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/afile.php"] [unique_id "acEfX--oSmHn3q4_J1HaagAAAUk"]
[Mon Mar 23 19:09:20.391458 2026] [:error] [pid 57265:tid 57272] [client 20.240.250.153:64623] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/afile.php"] [unique_id "acEfYGNLjPJJkhuqCshYngAAAQU"]
[Mon Mar 23 19:09:21.055818 2026] [:error] [pid 14573:tid 14596] [client 20.240.250.153:64681] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/afile.php"] [unique_id "acEfYe-oSmHn3q4_J1HacgAAAVU"]
[Mon Mar 23 19:09:21.624738 2026] [:error] [pid 23440:tid 23477] [client 20.240.250.153:62932] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/afile.php"] [unique_id "acEfYT49_8n8h_ttcUo6ggAAAEE"]
[Mon Mar 23 19:09:22.223103 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:64232] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "acEfYu-oSmHn3q4_J1HaeAAAAUI"]
[Mon Mar 23 19:09:22.782675 2026] [:error] [pid 14573:tid 14578] [client 20.240.250.153:65196] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "acEfYu-oSmHn3q4_J1HaegAAAUM"]
[Mon Mar 23 19:09:23.481458 2026] [:error] [pid 23539:tid 23568] [client 20.240.250.153:64277] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "acEfY37Dh3qWGSpIAZUq1AAAANQ"]
[Mon Mar 23 19:09:24.052197 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:62976] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "acEfZO-oSmHn3q4_J1HafAAAAVg"]
[Mon Mar 23 19:09:24.709496 2026] [:error] [pid 23440:tid 23500] [client 20.240.250.153:62978] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acEfZD49_8n8h_ttcUo6hQAAAFg"]
[Mon Mar 23 19:09:25.252333 2026] [:error] [pid 35165:tid 35168] [client 20.240.250.153:63556] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acEfZc6udpN6Esk7JKvG9AAAAYA"]
[Mon Mar 23 19:09:25.849738 2026] [:error] [pid 35165:tid 35174] [client 20.240.250.153:63592] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acEfZc6udpN6Esk7JKvG-AAAAYY"]
[Mon Mar 23 19:09:26.390075 2026] [:error] [pid 35165:tid 35169] [client 20.240.250.153:62991] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acEfZs6udpN6Esk7JKvG-wAAAYE"]
[Mon Mar 23 19:09:26.925740 2026] [:error] [pid 35165:tid 35176] [client 20.240.250.153:63564] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless3.php"] [unique_id "acEfZs6udpN6Esk7JKvG_QAAAYg"]
[Mon Mar 23 19:09:27.876764 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:62469] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless3.php"] [unique_id "acEfZ2NLjPJJkhuqCshYowAAAQ0"]
[Mon Mar 23 19:09:28.487529 2026] [:error] [pid 35165:tid 35179] [client 20.240.250.153:65482] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless3.php"] [unique_id "acEfaM6udpN6Esk7JKvG_wAAAYs"]
[Mon Mar 23 19:09:29.121716 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:64653] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless3.php"] [unique_id "acEfae-oSmHn3q4_J1HahQAAAVc"]
[Mon Mar 23 19:09:29.728149 2026] [:error] [pid 57265:tid 57275] [client 20.240.250.153:64622] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/enclas.php"] [unique_id "acEfaWNLjPJJkhuqCshYpAAAAQg"]
[Mon Mar 23 19:09:30.270232 2026] [:error] [pid 14573:tid 14589] [client 20.240.250.153:64636] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/enclas.php"] [unique_id "acEfau-oSmHn3q4_J1HaiQAAAU4"]
[Mon Mar 23 19:09:30.817570 2026] [:error] [pid 57265:tid 57286] [client 20.240.250.153:63001] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/enclas.php"] [unique_id "acEfamNLjPJJkhuqCshYpwAAARM"]
[Mon Mar 23 19:09:31.457942 2026] [proxy_fcgi:error] [pid 14573:tid 14592] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:31.771596 2026] [proxy_fcgi:error] [pid 14573:tid 14582] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:32.085346 2026] [proxy_fcgi:error] [pid 14573:tid 14577] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:32.366431 2026] [proxy_fcgi:error] [pid 14573:tid 14598] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:32.652085 2026] [proxy_fcgi:error] [pid 14573:tid 14578] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:32.952177 2026] [proxy_fcgi:error] [pid 14573:tid 14589] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:33.224420 2026] [proxy_fcgi:error] [pid 14573:tid 14596] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:33.493050 2026] [proxy_fcgi:error] [pid 14573:tid 14587] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:33.759670 2026] [proxy_fcgi:error] [pid 14573:tid 14592] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:34.026509 2026] [proxy_fcgi:error] [pid 14573:tid 14579] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:34.307929 2026] [proxy_fcgi:error] [pid 14573:tid 14584] [client 20.240.250.153:63034] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 19:09:34.571154 2026] [:error] [pid 14573:tid 14582] [client 20.240.250.153:63034] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "acEfbu-oSmHn3q4_J1HanQAAAUc"]
[Mon Mar 23 19:09:35.368811 2026] [:error] [pid 23539:tid 23559] [client 20.240.250.153:64204] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "acEfb37Dh3qWGSpIAZUq3wAAAMs"]
[Mon Mar 23 19:09:35.902581 2026] [:error] [pid 57265:tid 57279] [client 20.240.250.153:64202] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "acEfb2NLjPJJkhuqCshYrwAAAQw"]
[Mon Mar 23 19:09:36.572457 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:64199] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "acEfcGNLjPJJkhuqCshYtAAAAQ0"]
[Mon Mar 23 19:09:37.168144 2026] [:error] [pid 23441:tid 23523] [client 20.240.250.153:63019] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/des.php"] [unique_id "acEfcRq7S-oOqSXZEr7kkwAAAJQ"]
[Mon Mar 23 19:09:37.718452 2026] [:error] [pid 23539:tid 23561] [client 20.240.250.153:64624] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/des.php"] [unique_id "acEfcX7Dh3qWGSpIAZUq4QAAAM0"]
[Mon Mar 23 19:09:38.281905 2026] [:error] [pid 14573:tid 14585] [client 20.240.250.153:64583] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/des.php"] [unique_id "acEfcu-oSmHn3q4_J1HanwAAAUo"]
[Mon Mar 23 19:09:38.932326 2026] [:error] [pid 23539:tid 23560] [client 20.240.250.153:64224] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/des.php"] [unique_id "acEfcn7Dh3qWGSpIAZUq4gAAAMw"]
[Mon Mar 23 19:09:39.637147 2026] [:error] [pid 14573:tid 14595] [client 20.240.250.153:63673] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaza.php"] [unique_id "acEfc--oSmHn3q4_J1HaoAAAAVQ"]
[Mon Mar 23 19:09:40.173377 2026] [:error] [pid 14573:tid 14591] [client 20.240.250.153:62928] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaza.php"] [unique_id "acEfdO-oSmHn3q4_J1HaoQAAAVA"]
[Mon Mar 23 19:09:40.827381 2026] [:error] [pid 14573:tid 14598] [client 20.240.250.153:64266] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaza.php"] [unique_id "acEfdO-oSmHn3q4_J1HapQAAAVc"]
[Mon Mar 23 19:09:41.417128 2026] [:error] [pid 23440:tid 23488] [client 20.240.250.153:62927] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaza.php"] [unique_id "acEfdT49_8n8h_ttcUo6kQAAAEw"]
[Mon Mar 23 19:09:42.338096 2026] [:error] [pid 23539:tid 23554] [client 20.240.250.153:64292] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file51.php"] [unique_id "acEfdn7Dh3qWGSpIAZUq5wAAAMY"]
[Mon Mar 23 19:09:42.871338 2026] [:error] [pid 23539:tid 23557] [client 20.240.250.153:62940] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file51.php"] [unique_id "acEfdn7Dh3qWGSpIAZUq7AAAAMk"]
[Mon Mar 23 19:09:43.582490 2026] [:error] [pid 14573:tid 14593] [client 20.240.250.153:64243] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file51.php"] [unique_id "acEfd--oSmHn3q4_J1HarQAAAVI"]
[Mon Mar 23 19:09:44.471919 2026] [:error] [pid 57265:tid 57280] [client 20.240.250.153:64193] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file51.php"] [unique_id "acEfeGNLjPJJkhuqCshYwQAAAQ0"]
[Mon Mar 23 19:09:45.022313 2026] [:error] [pid 57265:tid 57275] [client 20.240.250.153:64618] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blurbs15.php"] [unique_id "acEfeWNLjPJJkhuqCshYxAAAAQg"]
[Mon Mar 23 19:09:45.981129 2026] [:error] [pid 23539:tid 23565] [client 20.240.250.153:62964] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blurbs15.php"] [unique_id "acEfeX7Dh3qWGSpIAZUq8wAAANE"]
[Mon Mar 23 19:09:46.650986 2026] [:error] [pid 14573:tid 14577] [client 20.240.250.153:65487] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blurbs15.php"] [unique_id "acEfeu-oSmHn3q4_J1HasgAAAUI"]
[Mon Mar 23 19:09:47.217792 2026] [:error] [pid 14573:tid 14597] [client 20.240.250.153:63587] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blurbs15.php"] [unique_id "acEfe--oSmHn3q4_J1HatwAAAVY"]
[Mon Mar 23 19:09:47.846477 2026] [:error] [pid 14573:tid 14596] [client 20.240.250.153:64656] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acEfe--oSmHn3q4_J1HauAAAAVU"]
[Mon Mar 23 19:09:48.404611 2026] [:error] [pid 57265:tid 57285] [client 20.240.250.153:65147] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acEffGNLjPJJkhuqCshY0QAAARI"]
[Mon Mar 23 19:09:48.997365 2026] [:error] [pid 57265:tid 57291] [client 20.240.250.153:63626] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acEffGNLjPJJkhuqCshY0wAAARg"]
[Mon Mar 23 19:09:49.650097 2026] [:error] [pid 57265:tid 57276] [client 20.240.250.153:64317] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acEffWNLjPJJkhuqCshY2wAAAQk"]
[Mon Mar 23 19:09:50.199577 2026] [:error] [pid 57265:tid 57274] [client 20.240.250.153:64259] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "acEffmNLjPJJkhuqCshY3gAAAQc"]
[Mon Mar 23 19:09:51.415897 2026] [:error] [pid 35165:tid 35176] [client 20.240.250.153:65176] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "acEff86udpN6Esk7JKvHCwAAAYg"]
[Mon Mar 23 19:09:52.127668 2026] [:error] [pid 35165:tid 35186] [client 20.240.250.153:65159] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "acEfgM6udpN6Esk7JKvHEAAAAZI"]
[Mon Mar 23 19:09:52.755938 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:65164] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "acEfgGNLjPJJkhuqCshY5wAAAQo"]
[Mon Mar 23 19:09:53.385231 2026] [:error] [pid 57265:tid 57281] [client 20.240.250.153:64212] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acEfgWNLjPJJkhuqCshY6gAAAQ4"]
[Mon Mar 23 19:09:53.917780 2026] [:error] [pid 57265:tid 57287] [client 20.240.250.153:64226] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acEfgWNLjPJJkhuqCshY7QAAARQ"]
[Mon Mar 23 19:09:54.599958 2026] [:error] [pid 57265:tid 57284] [client 20.240.250.153:65199] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acEfgmNLjPJJkhuqCshY9AAAARE"]
[Mon Mar 23 19:09:55.240004 2026] [:error] [pid 35165:tid 35171] [client 20.240.250.153:64631] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acEfg86udpN6Esk7JKvHFwAAAYM"]
[Mon Mar 23 19:09:55.801407 2026] [:error] [pid 14573:tid 14599] [client 20.240.250.153:64282] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "acEfg--oSmHn3q4_J1HaxQAAAVg"]
[Mon Mar 23 19:09:56.503639 2026] [:error] [pid 14573:tid 14585] [client 20.240.250.153:65125] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "acEfhO-oSmHn3q4_J1HayQAAAUo"]
[Mon Mar 23 19:09:57.105433 2026] [:error] [pid 14573:tid 14594] [client 20.240.250.153:65520] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "acEfhe-oSmHn3q4_J1HazgAAAVM"]
[Mon Mar 23 19:09:57.659121 2026] [:error] [pid 14573:tid 14576] [client 20.240.250.153:62518] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "acEfhe-oSmHn3q4_J1Ha0QAAAUE"]
[Mon Mar 23 19:09:58.210636 2026] [:error] [pid 23441:tid 23510] [client 20.240.250.153:64196] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xoot.php"] [unique_id "acEfhhq7S-oOqSXZEr7kmgAAAIc"]
[Mon Mar 23 19:09:59.049196 2026] [:error] [pid 23441:tid 23518] [client 20.240.250.153:64218] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xoot.php"] [unique_id "acEfhxq7S-oOqSXZEr7knAAAAI8"]
[Mon Mar 23 19:09:59.611567 2026] [:error] [pid 35165:tid 35178] [client 20.240.250.153:62987] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xoot.php"] [unique_id "acEfh86udpN6Esk7JKvHGgAAAYo"]
[Mon Mar 23 19:10:00.210619 2026] [:error] [pid 23439:tid 23452] [client 20.240.250.153:62493] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xoot.php"] [unique_id "acEfiKZv8XIzUKdgaMeWPAAAAAM"]
[Mon Mar 23 19:10:00.763692 2026] [:error] [pid 23539:tid 23548] [client 20.240.250.153:63629] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acEfiH7Dh3qWGSpIAZUq-QAAAMA"]
[Mon Mar 23 19:10:01.445940 2026] [:error] [pid 35165:tid 35181] [client 20.240.250.153:64288] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acEfic6udpN6Esk7JKvHHAAAAY0"]
[Mon Mar 23 19:10:02.034447 2026] [:error] [pid 23539:tid 23550] [client 20.240.250.153:65115] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acEfin7Dh3qWGSpIAZUq_AAAAMI"]
[Mon Mar 23 19:10:02.563342 2026] [:error] [pid 57265:tid 57277] [client 20.240.250.153:62416] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acEfimNLjPJJkhuqCshY_gAAAQo"]
[Mon Mar 23 19:10:03.158610 2026] [:error] [pid 57265:tid 57274] [client 20.240.250.153:63663] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acEfi2NLjPJJkhuqCshZAgAAAQc"]
[Mon Mar 23 19:10:03.797512 2026] [:error] [pid 23539:tid 23565] [client 20.240.250.153:62950] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acEfi37Dh3qWGSpIAZUq_QAAANE"]
[Mon Mar 23 19:10:04.328884 2026] [:error] [pid 35165:tid 35173] [client 20.240.250.153:64658] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acEfjM6udpN6Esk7JKvHJQAAAYU"]
[Mon Mar 23 19:10:04.932856 2026] [:error] [pid 23539:tid 23551] [client 20.240.250.153:63623] [client 20.240.250.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acEfjH7Dh3qWGSpIAZUq_wAAAMM"]
[Mon Mar 23 21:48:30.261186 2026] [proxy_fcgi:error] [pid 52341:tid 52358] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:30.516637 2026] [proxy_fcgi:error] [pid 52341:tid 52352] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:30.772613 2026] [proxy_fcgi:error] [pid 52341:tid 52366] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:31.031858 2026] [proxy_fcgi:error] [pid 52341:tid 52351] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:31.287010 2026] [proxy_fcgi:error] [pid 52341:tid 52344] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:31.548939 2026] [proxy_fcgi:error] [pid 52341:tid 52353] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:31.804042 2026] [proxy_fcgi:error] [pid 52341:tid 52361] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:32.059510 2026] [proxy_fcgi:error] [pid 52341:tid 52358] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:32.313634 2026] [proxy_fcgi:error] [pid 52341:tid 52346] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:32.578168 2026] [proxy_fcgi:error] [pid 52341:tid 52356] [client 20.123.7.214:12879] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:48:32.829653 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:12879] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "acFEsKPKTBDR2u47Gb3j2AAAAUA"]
[Mon Mar 23 21:48:33.352142 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:12817] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "acFEsaPKTBDR2u47Gb3j2gAAAUo"]
[Mon Mar 23 21:48:33.860084 2026] [:error] [pid 38306:tid 38320] [client 20.123.7.214:12922] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "acFEsTkL8qwu-hHc6BipnQAAAQw"]
[Mon Mar 23 21:48:34.362786 2026] [:error] [pid 38177:tid 38223] [client 20.123.7.214:12924] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "acFEsnsYW-_HCI66Mun3NQAAAEg"]
[Mon Mar 23 21:48:34.865279 2026] [:error] [pid 38177:tid 38238] [client 20.123.7.214:12918] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "acFEsnsYW-_HCI66Mun3NwAAAFc"]
[Mon Mar 23 21:48:35.378395 2026] [:error] [pid 38276:tid 38291] [client 20.123.7.214:12865] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "acFEs5oKGiI-a7oME3L9xwAAAMw"]
[Mon Mar 23 21:48:35.879631 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:12880] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "acFEs6PKTBDR2u47Gb3j4QAAAVc"]
[Mon Mar 23 21:48:36.411411 2026] [:error] [pid 38306:tid 38328] [client 20.123.7.214:12813] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "acFEtDkL8qwu-hHc6BipnwAAARQ"]
[Mon Mar 23 21:48:36.914801 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:12807] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acFEtKPKTBDR2u47Gb3j5AAAAUQ"]
[Mon Mar 23 21:48:37.418841 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:12872] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acFEtTkL8qwu-hHc6BipowAAAQ8"]
[Mon Mar 23 21:48:37.955032 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:12888] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acFEtUtG4qlh1gvNjuJD2QAAAA8"]
[Mon Mar 23 21:48:38.460314 2026] [:error] [pid 38306:tid 38316] [client 20.123.7.214:12905] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acFEtjkL8qwu-hHc6BippAAAAQg"]
[Mon Mar 23 21:48:39.000807 2026] [:error] [pid 38276:tid 38293] [client 20.123.7.214:12891] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFEtpoKGiI-a7oME3L9ygAAAM4"]
[Mon Mar 23 21:48:39.557921 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:12898] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFEt6PKTBDR2u47Gb3j6wAAAVY"]
[Mon Mar 23 21:48:40.062732 2026] [:error] [pid 38306:tid 38325] [client 20.123.7.214:12810] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFEuDkL8qwu-hHc6BippwAAARE"]
[Mon Mar 23 21:48:41.351089 2026] [:error] [pid 38306:tid 38331] [client 20.123.7.214:12909] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFEuTkL8qwu-hHc6BipqgAAARc"]
[Mon Mar 23 21:48:44.069354 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:12902] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "acFEvKPKTBDR2u47Gb3j8QAAAUA"]
[Mon Mar 23 21:48:44.610026 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:12855] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "acFEvDkL8qwu-hHc6BiprwAAAQc"]
[Mon Mar 23 21:48:45.717247 2026] [:error] [pid 38306:tid 38310] [client 20.123.7.214:12911] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "acFEvTkL8qwu-hHc6BipsgAAAQI"]
[Mon Mar 23 21:48:46.221601 2026] [:error] [pid 38306:tid 38312] [client 20.123.7.214:12824] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "acFEvjkL8qwu-hHc6BiptAAAAQQ"]
[Mon Mar 23 21:48:46.768910 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:12869] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "acFEvktG4qlh1gvNjuJD5wAAAAE"]
[Mon Mar 23 21:48:47.276391 2026] [:error] [pid 38306:tid 38322] [client 20.123.7.214:12832] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "acFEvzkL8qwu-hHc6BipxAAAAQ4"]
[Mon Mar 23 21:48:47.917466 2026] [:error] [pid 38176:tid 38191] [client 20.123.7.214:12916] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "acFEv0tG4qlh1gvNjuJD9AAAAAQ"]
[Mon Mar 23 21:48:48.478656 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:12821] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "acFEwEtG4qlh1gvNjuJD9gAAABg"]
[Mon Mar 23 21:48:49.647157 2026] [:error] [pid 38276:tid 38300] [client 20.123.7.214:12815] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "acFEwZoKGiI-a7oME3L9zwAAANU"]
[Mon Mar 23 21:48:51.559689 2026] [:error] [pid 38176:tid 38190] [client 20.123.7.214:12906] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "acFEw0tG4qlh1gvNjuJD_AAAAAM"]
[Mon Mar 23 21:48:53.074421 2026] [:error] [pid 38178:tid 38258] [client 20.123.7.214:12910] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "acFExQ0axWfXsVvR9udGpAAAAJA"]
[Mon Mar 23 21:48:53.576202 2026] [:error] [pid 38178:tid 38249] [client 20.123.7.214:12831] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "acFExQ0axWfXsVvR9udGpQAAAIc"]
[Mon Mar 23 21:48:54.113781 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:12851] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acFExktG4qlh1gvNjuJD_wAAABY"]
[Mon Mar 23 21:48:54.621944 2026] [:error] [pid 38178:tid 38245] [client 20.123.7.214:12806] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acFExg0axWfXsVvR9udGqgAAAIM"]
[Mon Mar 23 21:48:55.135896 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:12890] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acFEx6PKTBDR2u47Gb3j-QAAAU4"]
[Mon Mar 23 21:48:55.642075 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:12889] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acFEx6PKTBDR2u47Gb3j-wAAAVU"]
[Mon Mar 23 21:48:56.285799 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:12836] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acFEyKPKTBDR2u47Gb3j_gAAAVY"]
[Mon Mar 23 21:48:56.797889 2026] [:error] [pid 38306:tid 38320] [client 20.123.7.214:1985] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acFEyDkL8qwu-hHc6BipzwAAAQw"]
[Mon Mar 23 21:48:57.326994 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:12874] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acFEyaPKTBDR2u47Gb3kBAAAAUE"]
[Mon Mar 23 21:48:57.854213 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:12921] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acFEyaPKTBDR2u47Gb3kBgAAAUc"]
[Mon Mar 23 21:48:58.367470 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:12814] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acFEyqPKTBDR2u47Gb3kBwAAAU4"]
[Mon Mar 23 21:48:58.886360 2026] [:error] [pid 38276:tid 38284] [client 20.123.7.214:12894] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acFEypoKGiI-a7oME3L91QAAAMU"]
[Mon Mar 23 21:48:59.413252 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:12826] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acFEy0tG4qlh1gvNjuJECAAAAA4"]
[Mon Mar 23 21:48:59.920712 2026] [:error] [pid 38178:tid 38255] [client 20.123.7.214:12919] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acFEyw0axWfXsVvR9udGrwAAAI0"]
[Mon Mar 23 21:49:00.425590 2026] [:error] [pid 38276:tid 38298] [client 20.123.7.214:12809] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acFEzJoKGiI-a7oME3L92AAAANM"]
[Mon Mar 23 21:49:00.952793 2026] [:error] [pid 38176:tid 38204] [client 20.123.7.214:12926] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acFEzEtG4qlh1gvNjuJEDQAAABE"]
[Mon Mar 23 21:49:01.459195 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:2017] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acFEzaPKTBDR2u47Gb3kDwAAAVI"]
[Mon Mar 23 21:49:02.011981 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:12867] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acFEzqPKTBDR2u47Gb3kEgAAAUc"]
[Mon Mar 23 21:49:04.725678 2026] [:error] [pid 38276:tid 38294] [client 20.123.7.214:12856] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "acFE0JoKGiI-a7oME3L93AAAAM8"]
[Mon Mar 23 21:49:07.974441 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:12908] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "acFE0zkL8qwu-hHc6Bip1gAAARA"]
[Mon Mar 23 21:49:08.494234 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:12811] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "acFE1DkL8qwu-hHc6Bip2AAAAQc"]
[Mon Mar 23 21:49:09.045518 2026] [:error] [pid 38306:tid 38309] [client 20.123.7.214:12897] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq13.php"] [unique_id "acFE1TkL8qwu-hHc6Bip2gAAAQE"]
[Mon Mar 23 21:49:09.551248 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:1986] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "acFE1ZoKGiI-a7oME3L95AAAAMI"]
[Mon Mar 23 21:49:10.154400 2026] [:error] [pid 38178:tid 38248] [client 20.123.7.214:12800] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "acFE1g0axWfXsVvR9udGtQAAAIY"]
[Mon Mar 23 21:49:10.659104 2026] [:error] [pid 38176:tid 38208] [client 20.123.7.214:12864] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "acFE1ktG4qlh1gvNjuJEEgAAABU"]
[Mon Mar 23 21:49:11.982124 2026] [:error] [pid 38176:tid 38192] [client 20.123.7.214:12920] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aapig.php"] [unique_id "acFE10tG4qlh1gvNjuJEFQAAAAU"]
[Mon Mar 23 21:49:12.492568 2026] [:error] [pid 38176:tid 38191] [client 20.123.7.214:12833] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "acFE2EtG4qlh1gvNjuJEFwAAAAQ"]
[Mon Mar 23 21:49:14.118847 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:1995] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "acFE2qPKTBDR2u47Gb3kJwAAAUw"]
[Mon Mar 23 21:49:14.632934 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:12873] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "acFE2qPKTBDR2u47Gb3kKgAAAVM"]
[Mon Mar 23 21:49:18.189760 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:12862] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webadmin.php"] [unique_id "acFE3jkL8qwu-hHc6Bip4gAAARg"]
[Mon Mar 23 21:49:18.788158 2026] [:error] [pid 38178:tid 38261] [client 20.123.7.214:12883] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acFE3g0axWfXsVvR9udGuAAAAJM"]
[Mon Mar 23 21:49:19.311429 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:12913] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acFE3w0axWfXsVvR9udGuQAAAIo"]
[Mon Mar 23 21:49:19.830474 2026] [:error] [pid 38306:tid 38308] [client 20.123.7.214:1988] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acFE3zkL8qwu-hHc6Bip5gAAAQA"]
[Mon Mar 23 21:49:20.347933 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:12884] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acFE4EtG4qlh1gvNjuJEHgAAAA4"]
[Mon Mar 23 21:49:20.921964 2026] [:error] [pid 38178:tid 38266] [client 20.123.7.214:1997] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acFE4A0axWfXsVvR9udGvwAAAJg"]
[Mon Mar 23 21:49:21.444534 2026] [:error] [pid 38176:tid 38205] [client 20.123.7.214:2010] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acFE4UtG4qlh1gvNjuJEIgAAABI"]
[Mon Mar 23 21:49:21.959788 2026] [:error] [pid 38177:tid 38216] [client 20.123.7.214:12825] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acFE4XsYW-_HCI66Mun3RQAAAEE"]
[Mon Mar 23 21:49:22.470660 2026] [:error] [pid 38178:tid 38242] [client 20.123.7.214:12875] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acFE4g0axWfXsVvR9udGwQAAAIA"]
[Mon Mar 23 21:49:22.990523 2026] [:error] [pid 38276:tid 38295] [client 20.123.7.214:12847] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acFE4poKGiI-a7oME3L97QAAANA"]
[Mon Mar 23 21:49:23.532283 2026] [:error] [pid 38178:tid 38265] [client 20.123.7.214:12893] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acFE4w0axWfXsVvR9udGwgAAAJc"]
[Mon Mar 23 21:49:24.060613 2026] [:error] [pid 38276:tid 38303] [client 20.123.7.214:12812] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acFE5JoKGiI-a7oME3L97wAAANg"]
[Mon Mar 23 21:49:24.602779 2026] [:error] [pid 38176:tid 38200] [client 20.123.7.214:12819] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acFE5EtG4qlh1gvNjuJEJgAAAA0"]
[Mon Mar 23 21:49:25.118970 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:12920] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mis.php"] [unique_id "acFE5UtG4qlh1gvNjuJEJwAAAA8"]
[Mon Mar 23 21:49:25.786618 2026] [:error] [pid 38177:tid 38232] [client 20.123.7.214:12904] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mis.php"] [unique_id "acFE5XsYW-_HCI66Mun3SwAAAFE"]
[Mon Mar 23 21:49:26.372947 2026] [:error] [pid 38178:tid 38256] [client 20.123.7.214:1958] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mis.php"] [unique_id "acFE5g0axWfXsVvR9udGxAAAAI4"]
[Mon Mar 23 21:49:26.925380 2026] [:error] [pid 38178:tid 38261] [client 20.123.7.214:12870] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mis.php"] [unique_id "acFE5g0axWfXsVvR9udGxgAAAJM"]
[Mon Mar 23 21:49:27.433359 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:12827] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "acFE5zkL8qwu-hHc6Bip6gAAARY"]
[Mon Mar 23 21:49:30.242665 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:1991] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "acFE6qPKTBDR2u47Gb3kOgAAAVQ"]
[Mon Mar 23 21:49:30.753055 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:12886] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "acFE6qPKTBDR2u47Gb3kOwAAAVY"]
[Mon Mar 23 21:49:31.272819 2026] [:error] [pid 38178:tid 38262] [client 20.123.7.214:2033] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "acFE6w0axWfXsVvR9udGywAAAJQ"]
[Mon Mar 23 21:49:31.885343 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:2001] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xvs.php"] [unique_id "acFE60tG4qlh1gvNjuJEKwAAAAk"]
[Mon Mar 23 21:49:32.428282 2026] [proxy_fcgi:error] [pid 38178:tid 38249] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:32.682577 2026] [proxy_fcgi:error] [pid 38178:tid 38257] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:34.226186 2026] [proxy_fcgi:error] [pid 38178:tid 38251] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:34.480592 2026] [proxy_fcgi:error] [pid 38178:tid 38246] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:34.994445 2026] [proxy_fcgi:error] [pid 38178:tid 38265] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:35.249865 2026] [proxy_fcgi:error] [pid 38178:tid 38245] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:35.513490 2026] [proxy_fcgi:error] [pid 38178:tid 38248] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:35.771011 2026] [proxy_fcgi:error] [pid 38178:tid 38256] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:36.025333 2026] [proxy_fcgi:error] [pid 38178:tid 38247] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:36.279604 2026] [proxy_fcgi:error] [pid 38178:tid 38261] [client 20.123.7.214:12853] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:49:36.529461 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:12853] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFE8A0axWfXsVvR9udG2AAAAIo"]
[Mon Mar 23 21:49:37.106813 2026] [:error] [pid 52341:tid 52358] [client 20.123.7.214:12900] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFE8aPKTBDR2u47Gb3kQAAAAU8"]
[Mon Mar 23 21:49:37.664656 2026] [:error] [pid 38276:tid 38284] [client 20.123.7.214:12877] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFE8ZoKGiI-a7oME3L9-AAAAMU"]
[Mon Mar 23 21:49:45.229686 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:12818] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFE-aPKTBDR2u47Gb3kSQAAAUA"]
[Mon Mar 23 21:49:45.752710 2026] [:error] [pid 38276:tid 38292] [client 20.123.7.214:2016] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acFE-ZoKGiI-a7oME3L-BAAAAM0"]
[Mon Mar 23 21:49:46.302923 2026] [:error] [pid 38276:tid 38293] [client 20.123.7.214:12842] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acFE-poKGiI-a7oME3L-BQAAAM4"]
[Mon Mar 23 21:49:46.865915 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:12829] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acFE-poKGiI-a7oME3L-CAAAAMA"]
[Mon Mar 23 21:49:50.401060 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:1954] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acFE_qPKTBDR2u47Gb3kVAAAAVY"]
[Mon Mar 23 21:49:50.909560 2026] [:error] [pid 38176:tid 38187] [client 20.123.7.214:12895] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acFE_ktG4qlh1gvNjuJENgAAAAA"]
[Mon Mar 23 21:49:51.417197 2026] [:error] [pid 38176:tid 38208] [client 20.123.7.214:1990] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acFE_0tG4qlh1gvNjuJEOAAAABU"]
[Mon Mar 23 21:49:51.927351 2026] [:error] [pid 38306:tid 38313] [client 20.123.7.214:1944] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acFE_zkL8qwu-hHc6Bip_wAAAQU"]
[Mon Mar 23 21:49:52.429090 2026] [:error] [pid 38276:tid 38297] [client 20.123.7.214:12868] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acFFAJoKGiI-a7oME3L-EAAAANI"]
[Mon Mar 23 21:49:53.556733 2026] [:error] [pid 38306:tid 38312] [client 20.123.7.214:12917] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acFFATkL8qwu-hHc6BiqBAAAAQQ"]
[Mon Mar 23 21:49:55.808402 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:2036] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acFFAw0axWfXsVvR9udG2QAAAIE"]
[Mon Mar 23 21:49:56.346340 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:12823] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acFFBKPKTBDR2u47Gb3kWwAAAUc"]
[Mon Mar 23 21:49:56.882036 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:1994] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acFFBKPKTBDR2u47Gb3kXAAAAUY"]
[Mon Mar 23 21:49:57.397563 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:2028] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "acFFBaPKTBDR2u47Gb3kXgAAAUg"]
[Mon Mar 23 21:49:58.942206 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:12805] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "acFFBktG4qlh1gvNjuJESQAAAAk"]
[Mon Mar 23 21:49:59.495383 2026] [:error] [pid 38176:tid 38187] [client 20.123.7.214:12887] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "acFFB0tG4qlh1gvNjuJETAAAAAA"]
[Mon Mar 23 21:50:00.113487 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:12925] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "acFFCKPKTBDR2u47Gb3kYQAAAUA"]
[Mon Mar 23 21:50:00.668377 2026] [:error] [pid 38306:tid 38309] [client 20.123.7.214:2002] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "acFFCDkL8qwu-hHc6BiqCAAAAQE"]
[Mon Mar 23 21:50:02.362067 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:12834] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "acFFCqPKTBDR2u47Gb3kaAAAAUY"]
[Mon Mar 23 21:50:02.866693 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:2005] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "acFFCqPKTBDR2u47Gb3kaQAAAVU"]
[Mon Mar 23 21:50:03.532819 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:2041] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "acFFC6PKTBDR2u47Gb3kawAAAVY"]
[Mon Mar 23 21:50:04.257446 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:12804] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acFFDKPKTBDR2u47Gb3kbgAAAVQ"]
[Mon Mar 23 21:50:04.768419 2026] [:error] [pid 38176:tid 38200] [client 20.123.7.214:2006] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acFFDEtG4qlh1gvNjuJEUAAAAA0"]
[Mon Mar 23 21:50:05.273067 2026] [:error] [pid 38276:tid 38282] [client 20.123.7.214:12820] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acFFDZoKGiI-a7oME3L-FgAAAMM"]
[Mon Mar 23 21:50:05.783273 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:12803] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acFFDaPKTBDR2u47Gb3kdAAAAVU"]
[Mon Mar 23 21:50:06.319521 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:1973] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "acFFDktG4qlh1gvNjuJEUQAAABM"]
[Mon Mar 23 21:50:06.853195 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:12841] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "acFFDktG4qlh1gvNjuJEUwAAAAc"]
[Mon Mar 23 21:50:07.359560 2026] [:error] [pid 38176:tid 38207] [client 20.123.7.214:12838] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "acFFD0tG4qlh1gvNjuJEVAAAABQ"]
[Mon Mar 23 21:50:07.863912 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:12837] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "acFFD0tG4qlh1gvNjuJEVQAAAAk"]
[Mon Mar 23 21:50:08.396064 2026] [:error] [pid 38276:tid 38287] [client 20.123.7.214:2025] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acFFEJoKGiI-a7oME3L-GQAAAMg"]
[Mon Mar 23 21:50:08.924067 2026] [:error] [pid 38276:tid 38286] [client 20.123.7.214:2021] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acFFEJoKGiI-a7oME3L-GgAAAMc"]
[Mon Mar 23 21:50:09.469668 2026] [:error] [pid 38176:tid 38187] [client 20.123.7.214:1989] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acFFEUtG4qlh1gvNjuJEVwAAAAA"]
[Mon Mar 23 21:50:10.005128 2026] [:error] [pid 38276:tid 38280] [client 20.123.7.214:2009] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acFFEpoKGiI-a7oME3L-IAAAAME"]
[Mon Mar 23 21:50:10.507729 2026] [:error] [pid 38306:tid 38312] [client 20.123.7.214:12907] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acFFEjkL8qwu-hHc6BiqDwAAAQQ"]
[Mon Mar 23 21:50:11.018246 2026] [:error] [pid 38176:tid 38203] [client 20.123.7.214:2020] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acFFE0tG4qlh1gvNjuJEWgAAABA"]
[Mon Mar 23 21:50:11.532413 2026] [:error] [pid 38306:tid 38316] [client 20.123.7.214:12843] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acFFEzkL8qwu-hHc6BiqGwAAAQg"]
[Mon Mar 23 21:50:12.051375 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:1928] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acFFFKPKTBDR2u47Gb3kfwAAAVE"]
[Mon Mar 23 21:50:13.618326 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:2007] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nc4.php"] [unique_id "acFFFTkL8qwu-hHc6BiqRQAAARY"]
[Mon Mar 23 21:50:14.134500 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:12915] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nc4.php"] [unique_id "acFFFqPKTBDR2u47Gb3khAAAAVM"]
[Mon Mar 23 21:50:14.703396 2026] [:error] [pid 38306:tid 38322] [client 20.123.7.214:12899] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nc4.php"] [unique_id "acFFFjkL8qwu-hHc6BiqWwAAAQ4"]
[Mon Mar 23 21:50:15.206803 2026] [:error] [pid 38306:tid 38321] [client 20.123.7.214:12912] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nc4.php"] [unique_id "acFFFzkL8qwu-hHc6BiqaAAAAQ0"]
[Mon Mar 23 21:50:15.717806 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:12845] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFFF6PKTBDR2u47Gb3khwAAAU4"]
[Mon Mar 23 21:50:16.242144 2026] [:error] [pid 38306:tid 38318] [client 20.123.7.214:12801] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFFGDkL8qwu-hHc6BiqcwAAAQo"]
[Mon Mar 23 21:50:16.775162 2026] [:error] [pid 38276:tid 38291] [client 20.123.7.214:12828] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFFGJoKGiI-a7oME3L-IwAAAMw"]
[Mon Mar 23 21:50:20.334348 2026] [:error] [pid 52341:tid 52359] [client 20.123.7.214:1987] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFFHKPKTBDR2u47Gb3klAAAAVA"]
[Mon Mar 23 21:50:20.848437 2026] [:error] [pid 38177:tid 38222] [client 20.123.7.214:1992] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFFHHsYW-_HCI66Mun3WgAAAEc"]
[Mon Mar 23 21:50:21.348882 2026] [:error] [pid 38276:tid 38293] [client 20.123.7.214:12848] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFFHZoKGiI-a7oME3L-KQAAAM4"]
[Mon Mar 23 21:50:21.855314 2026] [:error] [pid 38306:tid 38325] [client 20.123.7.214:12876] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFFHTkL8qwu-hHc6BiqewAAARE"]
[Mon Mar 23 21:50:22.369555 2026] [:error] [pid 38306:tid 38308] [client 20.123.7.214:12844] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFFHjkL8qwu-hHc6BiqfAAAAQA"]
[Mon Mar 23 21:50:22.882350 2026] [:error] [pid 38178:tid 38244] [client 20.123.7.214:1927] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acFFHg0axWfXsVvR9udG3wAAAII"]
[Mon Mar 23 21:50:23.400621 2026] [:error] [pid 52341:tid 52358] [client 20.123.7.214:2039] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acFFH6PKTBDR2u47Gb3kmwAAAU8"]
[Mon Mar 23 21:50:23.963085 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:2019] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acFFH5oKGiI-a7oME3L-KwAAAMA"]
[Mon Mar 23 21:50:24.493942 2026] [:error] [pid 38276:tid 38283] [client 20.123.7.214:1950] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acFFIJoKGiI-a7oME3L-LwAAAMQ"]
[Mon Mar 23 21:50:25.040122 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:12896] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acFFIaPKTBDR2u47Gb3knwAAAUg"]
[Mon Mar 23 21:50:25.562022 2026] [:error] [pid 38276:tid 38289] [client 20.123.7.214:12840] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acFFIZoKGiI-a7oME3L-MQAAAMo"]
[Mon Mar 23 21:50:26.079934 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:2034] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acFFIqPKTBDR2u47Gb3koAAAAVY"]
[Mon Mar 23 21:50:26.589733 2026] [:error] [pid 38177:tid 38227] [client 20.123.7.214:12903] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acFFInsYW-_HCI66Mun3XAAAAEw"]
[Mon Mar 23 21:50:27.091815 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:12850] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acFFI6PKTBDR2u47Gb3kogAAAVQ"]
[Mon Mar 23 21:50:28.633524 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:12835] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acFFJKPKTBDR2u47Gb3kpQAAAUc"]
[Mon Mar 23 21:50:29.777045 2026] [:error] [pid 38176:tid 38191] [client 20.123.7.214:2003] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acFFJUtG4qlh1gvNjuJEZAAAAAQ"]
[Mon Mar 23 21:50:30.387653 2026] [:error] [pid 38176:tid 38199] [client 20.123.7.214:12849] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acFFJktG4qlh1gvNjuJEZwAAAAw"]
[Mon Mar 23 21:50:30.973315 2026] [:error] [pid 38177:tid 38216] [client 20.123.7.214:12802] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acFFJnsYW-_HCI66Mun3XwAAAEE"]
[Mon Mar 23 21:50:32.117585 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:12852] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acFFKEtG4qlh1gvNjuJEawAAABY"]
[Mon Mar 23 21:50:32.622844 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:2011] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acFFKA0axWfXsVvR9udG5QAAAIE"]
[Mon Mar 23 21:50:33.135245 2026] [:error] [pid 38177:tid 38220] [client 20.123.7.214:1942] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acFFKXsYW-_HCI66Mun3YAAAAEU"]
[Mon Mar 23 21:50:33.680061 2026] [:error] [pid 38177:tid 38229] [client 20.123.7.214:12858] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acFFKXsYW-_HCI66Mun3YQAAAE4"]
[Mon Mar 23 21:50:34.199035 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:12914] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acFFKg0axWfXsVvR9udG6AAAAIs"]
[Mon Mar 23 21:50:34.705375 2026] [:error] [pid 38178:tid 38254] [client 20.123.7.214:12808] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acFFKg0axWfXsVvR9udG6QAAAIw"]
[Mon Mar 23 21:50:35.209165 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:1946] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acFFK6PKTBDR2u47Gb3krQAAAVQ"]
[Mon Mar 23 21:50:36.311843 2026] [proxy_fcgi:error] [pid 52341:tid 52344] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:36.566536 2026] [proxy_fcgi:error] [pid 52341:tid 52346] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:36.826462 2026] [proxy_fcgi:error] [pid 52341:tid 52366] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:37.087154 2026] [proxy_fcgi:error] [pid 52341:tid 52355] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:37.351918 2026] [proxy_fcgi:error] [pid 52341:tid 52345] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:37.608301 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:39.269170 2026] [proxy_fcgi:error] [pid 52341:tid 52360] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:39.524204 2026] [proxy_fcgi:error] [pid 52341:tid 52365] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:39.781558 2026] [proxy_fcgi:error] [pid 52341:tid 52348] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:40.038892 2026] [proxy_fcgi:error] [pid 52341:tid 52367] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:40.295149 2026] [proxy_fcgi:error] [pid 52341:tid 52349] [client 20.123.7.214:2027] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:50:40.558604 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:2027] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acFFMKPKTBDR2u47Gb3kwAAAAUE"]
[Mon Mar 23 21:50:41.067387 2026] [:error] [pid 38306:tid 38322] [client 20.123.7.214:1935] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acFFMTkL8qwu-hHc6BiqiQAAAQ4"]
[Mon Mar 23 21:50:41.706589 2026] [:error] [pid 38306:tid 38314] [client 20.123.7.214:2035] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acFFMTkL8qwu-hHc6BiqjAAAAQY"]
[Mon Mar 23 21:50:42.218198 2026] [:error] [pid 52341:tid 52358] [client 20.123.7.214:1932] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acFFMqPKTBDR2u47Gb3kwgAAAU8"]
[Mon Mar 23 21:50:42.754328 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:12830] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acFFMqPKTBDR2u47Gb3kxgAAAU4"]
[Mon Mar 23 21:50:43.260883 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:1860] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acFFM6PKTBDR2u47Gb3kxwAAAUg"]
[Mon Mar 23 21:50:43.802846 2026] [:error] [pid 38176:tid 38195] [client 20.123.7.214:2038] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acFFM0tG4qlh1gvNjuJEdQAAAAg"]
[Mon Mar 23 21:50:44.306692 2026] [:error] [pid 38178:tid 38251] [client 20.123.7.214:2000] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acFFNA0axWfXsVvR9udG7gAAAIk"]
[Mon Mar 23 21:50:44.813089 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:1941] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acFFNEtG4qlh1gvNjuJEeQAAABY"]
[Mon Mar 23 21:50:45.317382 2026] [:error] [pid 38276:tid 38288] [client 20.123.7.214:2018] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acFFNZoKGiI-a7oME3L-TgAAAMk"]
[Mon Mar 23 21:50:45.830505 2026] [:error] [pid 38306:tid 38329] [client 20.123.7.214:12857] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acFFNTkL8qwu-hHc6BiqkwAAARU"]
[Mon Mar 23 21:50:46.346670 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:1976] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acFFNktG4qlh1gvNjuJEfwAAAA4"]
[Mon Mar 23 21:50:46.854901 2026] [:error] [pid 38276:tid 38301] [client 20.123.7.214:2026] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acFFNpoKGiI-a7oME3L-UAAAANY"]
[Mon Mar 23 21:50:47.403542 2026] [:error] [pid 38306:tid 38318] [client 20.123.7.214:12866] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acFFNzkL8qwu-hHc6BiqlwAAAQo"]
[Mon Mar 23 21:50:47.910659 2026] [:error] [pid 38276:tid 38290] [client 20.123.7.214:2024] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acFFN5oKGiI-a7oME3L-UgAAAMs"]
[Mon Mar 23 21:50:48.416101 2026] [:error] [pid 38306:tid 38314] [client 20.123.7.214:1996] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acFFODkL8qwu-hHc6BiqmAAAAQY"]
[Mon Mar 23 21:50:48.925706 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:1931] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acFFOKPKTBDR2u47Gb3kzAAAAUM"]
[Mon Mar 23 21:50:49.457201 2026] [:error] [pid 38276:tid 38282] [client 20.123.7.214:1862] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acFFOZoKGiI-a7oME3L-VAAAAMM"]
[Mon Mar 23 21:50:49.987726 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:12871] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acFFOUtG4qlh1gvNjuJEhwAAAAo"]
[Mon Mar 23 21:50:50.677163 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:1953] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acFFOjkL8qwu-hHc6BiqmwAAARg"]
[Mon Mar 23 21:50:51.202066 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:2030] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acFFO6PKTBDR2u47Gb3k0QAAAU4"]
[Mon Mar 23 21:50:51.741039 2026] [:error] [pid 38306:tid 38321] [client 20.123.7.214:12901] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acFFOzkL8qwu-hHc6BiqnQAAAQ0"]
[Mon Mar 23 21:50:52.242102 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:1929] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acFFPKPKTBDR2u47Gb3k1wAAAVg"]
[Mon Mar 23 21:50:52.746363 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:1938] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acFFPKPKTBDR2u47Gb3k2gAAAUc"]
[Mon Mar 23 21:50:53.288975 2026] [:error] [pid 38306:tid 38329] [client 20.123.7.214:1930] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acFFPTkL8qwu-hHc6BiqoAAAARU"]
[Mon Mar 23 21:50:53.805708 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:2043] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acFFPTkL8qwu-hHc6BiqoQAAARY"]
[Mon Mar 23 21:50:54.316175 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:1961] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acFFPjkL8qwu-hHc6BiqpAAAAQ8"]
[Mon Mar 23 21:50:54.854068 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:12854] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acFFPqPKTBDR2u47Gb3k4AAAAUg"]
[Mon Mar 23 21:50:55.403511 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:1984] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acFFP0tG4qlh1gvNjuJEiwAAAAE"]
[Mon Mar 23 21:50:55.906023 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:12863] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acFFP6PKTBDR2u47Gb3k4wAAAVE"]
[Mon Mar 23 21:51:02.603825 2026] [:error] [pid 38177:tid 38237] [client 20.123.7.214:1974] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acFFRnsYW-_HCI66Mun3bgAAAFY"]
[Mon Mar 23 21:51:03.123306 2026] [:error] [pid 38177:tid 38239] [client 20.123.7.214:1896] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acFFR3sYW-_HCI66Mun3bwAAAFg"]
[Mon Mar 23 21:51:04.255377 2026] [:error] [pid 52341:tid 52358] [client 20.123.7.214:1965] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acFFSKPKTBDR2u47Gb3k5QAAAU8"]
[Mon Mar 23 21:51:04.756952 2026] [:error] [pid 38177:tid 38228] [client 20.123.7.214:12927] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acFFSHsYW-_HCI66Mun3cwAAAE0"]
[Mon Mar 23 21:51:05.261138 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:1967] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acFFSaPKTBDR2u47Gb3k6QAAAUI"]
[Mon Mar 23 21:51:06.363833 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:12859] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acFFSktG4qlh1gvNjuJEmAAAAAk"]
[Mon Mar 23 21:51:06.869964 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:12923] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acFFSktG4qlh1gvNjuJEmgAAAA4"]
[Mon Mar 23 21:51:07.400241 2026] [:error] [pid 38276:tid 38292] [client 20.123.7.214:2008] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acFFS5oKGiI-a7oME3L-YwAAAM0"]
[Mon Mar 23 21:51:07.935352 2026] [:error] [pid 38177:tid 38233] [client 20.123.7.214:12892] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acFFS3sYW-_HCI66Mun3dgAAAFI"]
[Mon Mar 23 21:51:08.448214 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:1948] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acFFTKPKTBDR2u47Gb3k7gAAAVQ"]
[Mon Mar 23 21:51:08.957945 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:2004] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acFFTDkL8qwu-hHc6BiqwwAAAQ8"]
[Mon Mar 23 21:51:09.467905 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:1975] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acFFTaPKTBDR2u47Gb3k8QAAAUY"]
[Mon Mar 23 21:51:10.006062 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:2044] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acFFTqPKTBDR2u47Gb3k8wAAAUE"]
[Mon Mar 23 21:51:11.525813 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:1959] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acFFT6PKTBDR2u47Gb3k9gAAAVc"]
[Mon Mar 23 21:51:12.027687 2026] [:error] [pid 38176:tid 38200] [client 20.123.7.214:1926] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acFFUEtG4qlh1gvNjuJEpgAAAA0"]
[Mon Mar 23 21:51:12.560312 2026] [:error] [pid 52341:tid 52356] [client 20.123.7.214:1876] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acFFUKPKTBDR2u47Gb3k-QAAAU0"]
[Mon Mar 23 21:51:13.073318 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:1947] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acFFUaPKTBDR2u47Gb3k-gAAAUI"]
[Mon Mar 23 21:51:13.651393 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:1936] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acFFUaPKTBDR2u47Gb3k_QAAAUs"]
[Mon Mar 23 21:51:14.177160 2026] [:error] [pid 38176:tid 38189] [client 20.123.7.214:1899] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acFFUktG4qlh1gvNjuJErQAAAAI"]
[Mon Mar 23 21:51:14.710317 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:12885] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acFFUqPKTBDR2u47Gb3lAAAAAUQ"]
[Mon Mar 23 21:51:15.222611 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:1925] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acFFU6PKTBDR2u47Gb3lBgAAAVg"]
[Mon Mar 23 21:51:15.769298 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:1858] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acFFU6PKTBDR2u47Gb3lCgAAAUI"]
[Mon Mar 23 21:51:16.280053 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:1977] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acFFVKPKTBDR2u47Gb3lDgAAAVM"]
[Mon Mar 23 21:51:16.783141 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:12882] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acFFVKPKTBDR2u47Gb3lEgAAAVE"]
[Mon Mar 23 21:51:17.318574 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:2040] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acFFVUtG4qlh1gvNjuJEswAAABg"]
[Mon Mar 23 21:51:17.840766 2026] [:error] [pid 38177:tid 38228] [client 20.123.7.214:1970] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acFFVXsYW-_HCI66Mun3gQAAAE0"]
[Mon Mar 23 21:51:18.348429 2026] [:error] [pid 38306:tid 38328] [client 20.123.7.214:1956] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acFFVjkL8qwu-hHc6Biq0wAAARQ"]
[Mon Mar 23 21:51:18.884700 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:1924] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acFFVjkL8qwu-hHc6Biq1wAAARg"]
[Mon Mar 23 21:51:20.526347 2026] [:error] [pid 38177:tid 38223] [client 20.123.7.214:12801] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acFFWHsYW-_HCI66Mun3ggAAAEg"]
[Mon Mar 23 21:51:21.032989 2026] [:error] [pid 38306:tid 38319] [client 20.123.7.214:12839] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acFFWTkL8qwu-hHc6Biq4wAAAQs"]
[Mon Mar 23 21:51:22.113473 2026] [:error] [pid 52341:tid 52358] [client 20.123.7.214:1952] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acFFWqPKTBDR2u47Gb3lHgAAAU8"]
[Mon Mar 23 21:51:22.614982 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:2042] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acFFWqPKTBDR2u47Gb3lIAAAAUo"]
[Mon Mar 23 21:51:24.175874 2026] [:error] [pid 38306:tid 38329] [client 20.123.7.214:1957] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acFFXDkL8qwu-hHc6Biq9QAAARU"]
[Mon Mar 23 21:51:24.747425 2026] [:error] [pid 38178:tid 38263] [client 20.123.7.214:1937] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acFFXA0axWfXsVvR9udG_wAAAJU"]
[Mon Mar 23 21:51:30.922734 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:1915] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acFFYqPKTBDR2u47Gb3lNAAAAUw"]
[Mon Mar 23 21:51:33.674326 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:1951] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acFFZaPKTBDR2u47Gb3lOQAAAVQ"]
[Mon Mar 23 21:51:34.184193 2026] [:error] [pid 38177:tid 38229] [client 20.123.7.214:1901] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acFFZnsYW-_HCI66Mun3iAAAAE4"]
[Mon Mar 23 21:51:34.701396 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:1898] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acFFZktG4qlh1gvNjuJEzAAAAAo"]
[Mon Mar 23 21:51:35.210322 2026] [:error] [pid 38276:tid 38294] [client 20.123.7.214:1999] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acFFZ5oKGiI-a7oME3L-gQAAAM8"]
[Mon Mar 23 21:51:36.309287 2026] [:error] [pid 38276:tid 38293] [client 20.123.7.214:2032] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acFFaJoKGiI-a7oME3L-gwAAAM4"]
[Mon Mar 23 21:51:36.832476 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:12860] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acFFaKPKTBDR2u47Gb3lQAAAAUM"]
[Mon Mar 23 21:51:37.363344 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:1960] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acFFaaPKTBDR2u47Gb3lRAAAAVU"]
[Mon Mar 23 21:51:37.896361 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:1962] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acFFaaPKTBDR2u47Gb3lSgAAAVQ"]
[Mon Mar 23 21:51:38.403437 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:1889] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acFFaqPKTBDR2u47Gb3lTAAAAUA"]
[Mon Mar 23 21:51:38.922161 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:1998] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acFFaqPKTBDR2u47Gb3lUAAAAVU"]
[Mon Mar 23 21:51:39.431634 2026] [:error] [pid 38178:tid 38264] [client 20.123.7.214:2014] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acFFaw0axWfXsVvR9udHGwAAAJY"]
[Mon Mar 23 21:51:39.964648 2026] [:error] [pid 38178:tid 38258] [client 20.123.7.214:1800] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acFFaw0axWfXsVvR9udHHAAAAJA"]
[Mon Mar 23 21:51:40.511340 2026] [proxy_fcgi:error] [pid 38176:tid 38204] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:40.784110 2026] [proxy_fcgi:error] [pid 38176:tid 38209] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:41.322812 2026] [proxy_fcgi:error] [pid 38176:tid 38196] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:41.607348 2026] [proxy_fcgi:error] [pid 38176:tid 38195] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:42.512459 2026] [proxy_fcgi:error] [pid 38176:tid 38203] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:42.780788 2026] [proxy_fcgi:error] [pid 38176:tid 38200] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:43.050674 2026] [proxy_fcgi:error] [pid 38176:tid 38187] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:43.322319 2026] [proxy_fcgi:error] [pid 38176:tid 38199] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:43.610761 2026] [proxy_fcgi:error] [pid 38176:tid 38192] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:43.893984 2026] [proxy_fcgi:error] [pid 38176:tid 38198] [client 20.123.7.214:2022] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:51:44.162057 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:2022] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acFFcEtG4qlh1gvNjuJE4QAAAAc"]
[Mon Mar 23 21:51:44.667949 2026] [:error] [pid 38276:tid 38291] [client 20.123.7.214:1861] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acFFcJoKGiI-a7oME3L-iAAAAMw"]
[Mon Mar 23 21:51:45.271039 2026] [:error] [pid 52341:tid 52352] [client 20.123.7.214:12816] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acFFcaPKTBDR2u47Gb3lVwAAAUk"]
[Mon Mar 23 21:51:45.774592 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:12822] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acFFcaPKTBDR2u47Gb3lWQAAAUw"]
[Mon Mar 23 21:51:46.276616 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:2046] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acFFcqPKTBDR2u47Gb3lWgAAAVg"]
[Mon Mar 23 21:51:46.778640 2026] [:error] [pid 38177:tid 38234] [client 20.123.7.214:1880] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acFFcnsYW-_HCI66Mun3kgAAAFM"]
[Mon Mar 23 21:51:47.287432 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:1904] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acFFc6PKTBDR2u47Gb3lXAAAAUQ"]
[Mon Mar 23 21:51:47.796568 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:2045] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acFFc6PKTBDR2u47Gb3lXwAAAVY"]
[Mon Mar 23 21:51:48.309942 2026] [:error] [pid 52341:tid 52359] [client 20.123.7.214:12846] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acFFdKPKTBDR2u47Gb3lYgAAAVA"]
[Mon Mar 23 21:51:48.814040 2026] [:error] [pid 38177:tid 38224] [client 20.123.7.214:2031] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acFFdHsYW-_HCI66Mun3lQAAAEk"]
[Mon Mar 23 21:51:50.384653 2026] [:error] [pid 38177:tid 38236] [client 20.123.7.214:1870] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acFFdnsYW-_HCI66Mun3lwAAAFU"]
[Mon Mar 23 21:51:50.892666 2026] [:error] [pid 38306:tid 38320] [client 20.123.7.214:12861] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acFFdjkL8qwu-hHc6BirBAAAAQw"]
[Mon Mar 23 21:51:51.421372 2026] [:error] [pid 38177:tid 38215] [client 20.123.7.214:1922] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acFFd3sYW-_HCI66Mun3mQAAAEA"]
[Mon Mar 23 21:51:51.939543 2026] [:error] [pid 38178:tid 38261] [client 20.123.7.214:1920] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acFFdw0axWfXsVvR9udHKwAAAJM"]
[Mon Mar 23 21:51:52.442027 2026] [:error] [pid 38178:tid 38255] [client 20.123.7.214:1939] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acFFeA0axWfXsVvR9udHLQAAAI0"]
[Mon Mar 23 21:51:52.983108 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:1873] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acFFeKPKTBDR2u47Gb3lZwAAAVI"]
[Mon Mar 23 21:51:53.487121 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:2037] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acFFeaPKTBDR2u47Gb3laQAAAUE"]
[Mon Mar 23 21:51:53.991366 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:1923] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acFFeUtG4qlh1gvNjuJE6QAAABg"]
[Mon Mar 23 21:51:55.997451 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:1910] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acFFe6PKTBDR2u47Gb3lcAAAAUI"]
[Mon Mar 23 21:51:56.517332 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:1891] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acFFfKPKTBDR2u47Gb3lcgAAAU4"]
[Mon Mar 23 21:51:57.019360 2026] [:error] [pid 38178:tid 38254] [client 20.123.7.214:1881] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acFFfQ0axWfXsVvR9udHMwAAAIw"]
[Mon Mar 23 21:51:57.522311 2026] [:error] [pid 38176:tid 38207] [client 20.123.7.214:1811] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acFFfUtG4qlh1gvNjuJE8AAAABQ"]
[Mon Mar 23 21:51:58.033218 2026] [:error] [pid 52341:tid 52356] [client 20.123.7.214:1980] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acFFfqPKTBDR2u47Gb3ldgAAAU0"]
[Mon Mar 23 21:51:58.544405 2026] [:error] [pid 38178:tid 38249] [client 20.123.7.214:1872] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acFFfg0axWfXsVvR9udHNgAAAIc"]
[Mon Mar 23 21:51:59.049302 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:1913] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acFFf6PKTBDR2u47Gb3legAAAUc"]
[Mon Mar 23 21:51:59.557004 2026] [:error] [pid 38177:tid 38234] [client 20.123.7.214:2015] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acFFf3sYW-_HCI66Mun3nQAAAFM"]
[Mon Mar 23 21:52:00.070875 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:2012] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acFFgKPKTBDR2u47Gb3lfwAAAUM"]
[Mon Mar 23 21:52:00.616942 2026] [:error] [pid 38178:tid 38265] [client 20.123.7.214:1867] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acFFgA0axWfXsVvR9udHOAAAAJc"]
[Mon Mar 23 21:52:01.130587 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:1818] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acFFgaPKTBDR2u47Gb3lgQAAAVg"]
[Mon Mar 23 21:52:02.654007 2026] [:error] [pid 38178:tid 38250] [client 20.123.7.214:1970] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acFFgg0axWfXsVvR9udHPAAAAIg"]
[Mon Mar 23 21:52:03.181919 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:1969] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acFFgw0axWfXsVvR9udHPgAAAIo"]
[Mon Mar 23 21:52:03.691929 2026] [:error] [pid 38177:tid 38216] [client 20.123.7.214:1879] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acFFg3sYW-_HCI66Mun3oQAAAEE"]
[Mon Mar 23 21:52:04.213184 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:1911] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acFFhKPKTBDR2u47Gb3lhQAAAUI"]
[Mon Mar 23 21:52:04.775421 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:1885] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acFFhA0axWfXsVvR9udHPwAAAIE"]
[Mon Mar 23 21:52:05.361687 2026] [:error] [pid 38177:tid 38237] [client 20.123.7.214:1966] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acFFhXsYW-_HCI66Mun3pQAAAFY"]
[Mon Mar 23 21:52:05.864699 2026] [:error] [pid 38178:tid 38254] [client 20.123.7.214:1883] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acFFhQ0axWfXsVvR9udHQgAAAIw"]
[Mon Mar 23 21:52:06.380589 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:1868] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acFFhqPKTBDR2u47Gb3ligAAAVM"]
[Mon Mar 23 21:52:06.895882 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:1833] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acFFhqPKTBDR2u47Gb3ljQAAAVI"]
[Mon Mar 23 21:52:07.418140 2026] [:error] [pid 38276:tid 38296] [client 20.123.7.214:1866] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acFFh5oKGiI-a7oME3L-kwAAANE"]
[Mon Mar 23 21:52:07.919467 2026] [:error] [pid 38276:tid 38288] [client 20.123.7.214:2029] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acFFh5oKGiI-a7oME3L-lAAAAMk"]
[Mon Mar 23 21:52:08.467142 2026] [:error] [pid 52341:tid 52356] [client 20.123.7.214:1797] [client 20.123.7.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/app.php"] [unique_id "acFFiKPKTBDR2u47Gb3lkQAAAU0"]
[Mon Mar 23 21:52:09.002431 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:1851] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFFiaPKTBDR2u47Gb3lkgAAAUc"]
[Mon Mar 23 21:52:09.508011 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:1917] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFFiaPKTBDR2u47Gb3lkwAAAUs"]
[Mon Mar 23 21:52:10.013374 2026] [:error] [pid 38178:tid 38246] [client 20.123.7.214:1864] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acFFig0axWfXsVvR9udHRAAAAIQ"]
[Mon Mar 23 22:45:44.115141 2026] [proxy_fcgi:error] [pid 38176:tid 38187] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:44.330921 2026] [proxy_fcgi:error] [pid 38176:tid 38209] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:44.545578 2026] [proxy_fcgi:error] [pid 38176:tid 38195] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:44.761598 2026] [proxy_fcgi:error] [pid 38176:tid 38199] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:44.978498 2026] [proxy_fcgi:error] [pid 38176:tid 38192] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:45.199828 2026] [proxy_fcgi:error] [pid 38176:tid 38208] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:45.415516 2026] [proxy_fcgi:error] [pid 38176:tid 38198] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:45.634351 2026] [proxy_fcgi:error] [pid 38176:tid 38196] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:45.857012 2026] [proxy_fcgi:error] [pid 38176:tid 38205] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:46.074295 2026] [proxy_fcgi:error] [pid 38176:tid 38206] [client 40.85.222.197:21478] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 22:45:46.286199 2026] [:error] [pid 38176:tid 38189] [client 40.85.222.197:21478] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFSGktG4qlh1gvNjuJV0wAAAAI"]
[Mon Mar 23 22:45:46.710358 2026] [:error] [pid 52341:tid 52345] [client 40.85.222.197:21376] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFSGqPKTBDR2u47Gb0FXgAAAUI"]
[Mon Mar 23 22:45:47.134351 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:21442] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFSG6PKTBDR2u47Gb0FYgAAAUM"]
[Mon Mar 23 22:45:47.633030 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:21483] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFSG6PKTBDR2u47Gb0FZQAAAUw"]
[Mon Mar 23 22:45:48.121911 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:21378] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acFSHKPKTBDR2u47Gb0FaAAAAUU"]
[Mon Mar 23 22:45:48.630017 2026] [:error] [pid 52341:tid 52349] [client 40.85.222.197:21385] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acFSHKPKTBDR2u47Gb0FawAAAUY"]
[Mon Mar 23 22:45:49.066290 2026] [:error] [pid 52341:tid 52345] [client 40.85.222.197:21389] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acFSHaPKTBDR2u47Gb0FbgAAAUI"]
[Mon Mar 23 22:45:49.491642 2026] [:error] [pid 52341:tid 52352] [client 40.85.222.197:21503] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acFSHaPKTBDR2u47Gb0FcQAAAUk"]
[Mon Mar 23 22:45:49.909343 2026] [:error] [pid 38306:tid 38322] [client 40.85.222.197:21460] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFSHTkL8qwu-hHc6Bi_-AAAAQ4"]
[Mon Mar 23 22:45:50.330577 2026] [:error] [pid 38306:tid 38324] [client 40.85.222.197:21453] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFSHjkL8qwu-hHc6Bi_-gAAARA"]
[Mon Mar 23 22:45:50.741162 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:21458] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFSHqPKTBDR2u47Gb0FdgAAAUw"]
[Mon Mar 23 22:45:51.153938 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:21484] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFSH6PKTBDR2u47Gb0FdwAAAUU"]
[Mon Mar 23 22:45:51.571481 2026] [:error] [pid 38178:tid 38247] [client 40.85.222.197:21432] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFSHw0axWfXsVvR9udRVAAAAIU"]
[Mon Mar 23 22:45:51.989000 2026] [:error] [pid 38177:tid 38234] [client 40.85.222.197:21419] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFSH3sYW-_HCI66MukAugAAAFM"]
[Mon Mar 23 22:45:52.404199 2026] [:error] [pid 38276:tid 38289] [client 40.85.222.197:21335] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFSIJoKGiI-a7oME3IMjwAAAMo"]
[Mon Mar 23 22:45:52.828982 2026] [:error] [pid 38177:tid 38227] [client 40.85.222.197:21499] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFSIHsYW-_HCI66MukAvAAAAEw"]
[Mon Mar 23 22:45:53.263927 2026] [:error] [pid 52341:tid 52354] [client 40.85.222.197:21388] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFSIaPKTBDR2u47Gb0FfAAAAUs"]
[Mon Mar 23 22:45:53.673944 2026] [:error] [pid 38276:tid 38298] [client 40.85.222.197:21481] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFSIZoKGiI-a7oME3IMkgAAANM"]
[Mon Mar 23 22:45:54.091368 2026] [:error] [pid 52341:tid 52343] [client 40.85.222.197:21496] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFSIqPKTBDR2u47Gb0FfwAAAUA"]
[Mon Mar 23 22:45:54.526292 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:21486] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFSIqPKTBDR2u47Gb0FgAAAAU0"]
[Mon Mar 23 22:45:54.950455 2026] [:error] [pid 38176:tid 38206] [client 40.85.222.197:21466] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFSIktG4qlh1gvNjuJV3QAAABM"]
[Mon Mar 23 22:45:55.374628 2026] [:error] [pid 38306:tid 38329] [client 40.85.222.197:21394] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFSIzkL8qwu-hHc6Bi__wAAARU"]
[Mon Mar 23 22:45:55.792831 2026] [:error] [pid 52341:tid 52347] [client 40.85.222.197:21487] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFSI6PKTBDR2u47Gb0FgwAAAUQ"]
[Mon Mar 23 22:45:56.204959 2026] [:error] [pid 52341:tid 52364] [client 40.85.222.197:21490] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFSJKPKTBDR2u47Gb0FhgAAAVU"]
[Mon Mar 23 22:45:56.614764 2026] [:error] [pid 52341:tid 52353] [client 40.85.222.197:21391] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFSJKPKTBDR2u47Gb0FigAAAUo"]
[Mon Mar 23 22:45:57.031585 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:21383] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFSJaPKTBDR2u47Gb0FjgAAAU0"]
[Mon Mar 23 22:45:57.450587 2026] [:error] [pid 38176:tid 38194] [client 40.85.222.197:21502] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFSJUtG4qlh1gvNjuJV4QAAAAc"]
[Mon Mar 23 22:45:57.872860 2026] [:error] [pid 52341:tid 52363] [client 40.85.222.197:21472] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFSJaPKTBDR2u47Gb0FkgAAAVQ"]
[Mon Mar 23 22:45:58.291828 2026] [:error] [pid 38177:tid 38231] [client 40.85.222.197:21407] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFSJnsYW-_HCI66MukAwgAAAFA"]
[Mon Mar 23 22:45:58.710776 2026] [:error] [pid 52341:tid 52350] [client 40.85.222.197:21500] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFSJqPKTBDR2u47Gb0FlQAAAUc"]
[Mon Mar 23 22:45:59.136539 2026] [:error] [pid 38306:tid 38322] [client 40.85.222.197:21441] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFSJzkL8qwu-hHc6BjAAgAAAQ4"]
[Mon Mar 23 22:45:59.552867 2026] [:error] [pid 38306:tid 38309] [client 40.85.222.197:21412] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFSJzkL8qwu-hHc6BjAAwAAAQE"]
[Mon Mar 23 22:45:59.962957 2026] [:error] [pid 38178:tid 38242] [client 40.85.222.197:21455] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFSJw0axWfXsVvR9udRWQAAAIA"]
[Mon Mar 23 22:46:00.380374 2026] [:error] [pid 38178:tid 38254] [client 40.85.222.197:21491] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFSKA0axWfXsVvR9udRWwAAAIw"]
[Mon Mar 23 22:46:00.803980 2026] [:error] [pid 38276:tid 38288] [client 40.85.222.197:21494] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFSKJoKGiI-a7oME3IMlAAAAMk"]
[Mon Mar 23 22:46:01.217581 2026] [:error] [pid 38306:tid 38321] [client 40.85.222.197:21443] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFSKTkL8qwu-hHc6BjABQAAAQ0"]
[Mon Mar 23 22:46:01.628687 2026] [:error] [pid 38177:tid 38217] [client 40.85.222.197:21469] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFSKXsYW-_HCI66MukAyAAAAEI"]
[Mon Mar 23 22:46:02.044531 2026] [:error] [pid 38177:tid 38237] [client 40.85.222.197:21390] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFSKnsYW-_HCI66MukAyQAAAFY"]
[Mon Mar 23 22:46:02.491147 2026] [:error] [pid 52341:tid 52354] [client 40.85.222.197:21450] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFSKqPKTBDR2u47Gb0FoAAAAUs"]
[Mon Mar 23 22:46:02.917890 2026] [:error] [pid 52341:tid 52351] [client 40.85.222.197:21489] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFSKqPKTBDR2u47Gb0FogAAAUg"]
[Mon Mar 23 22:46:03.344378 2026] [:error] [pid 52341:tid 52359] [client 40.85.222.197:21497] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFSK6PKTBDR2u47Gb0FpAAAAVA"]
[Mon Mar 23 22:46:03.753973 2026] [:error] [pid 38178:tid 38262] [client 40.85.222.197:21402] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFSKw0axWfXsVvR9udRYgAAAJQ"]
[Mon Mar 23 22:46:04.167183 2026] [:error] [pid 38276:tid 38279] [client 40.85.222.197:21485] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFSLJoKGiI-a7oME3IMmQAAAMA"]
[Mon Mar 23 22:46:04.583970 2026] [:error] [pid 38178:tid 38247] [client 40.85.222.197:21387] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFSLA0axWfXsVvR9udRYwAAAIU"]
[Mon Mar 23 22:46:05.009292 2026] [:error] [pid 38306:tid 38308] [client 40.85.222.197:21319] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFSLTkL8qwu-hHc6BjACAAAAQA"]
[Mon Mar 23 22:46:05.424868 2026] [:error] [pid 38178:tid 38260] [client 40.85.222.197:21396] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFSLQ0axWfXsVvR9udRaAAAAJI"]
[Mon Mar 23 22:46:05.845450 2026] [:error] [pid 38306:tid 38317] [client 40.85.222.197:21493] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFSLTkL8qwu-hHc6BjACwAAAQk"]
[Mon Mar 23 22:46:06.265140 2026] [:error] [pid 38306:tid 38311] [client 40.85.222.197:21464] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFSLjkL8qwu-hHc6BjADwAAAQM"]
[Mon Mar 23 22:46:06.680670 2026] [:error] [pid 38306:tid 38318] [client 40.85.222.197:21386] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFSLjkL8qwu-hHc6BjAEgAAAQo"]
[Mon Mar 23 22:46:07.099112 2026] [:error] [pid 52341:tid 52351] [client 40.85.222.197:21377] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFSL6PKTBDR2u47Gb0FqwAAAUg"]
[Mon Mar 23 22:46:07.515016 2026] [:error] [pid 38306:tid 38314] [client 40.85.222.197:21331] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFSLzkL8qwu-hHc6BjAFgAAAQY"]
[Mon Mar 23 22:46:07.925143 2026] [:error] [pid 38306:tid 38313] [client 40.85.222.197:21392] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFSLzkL8qwu-hHc6BjAGgAAAQU"]
[Mon Mar 23 22:46:08.337706 2026] [:error] [pid 38176:tid 38204] [client 40.85.222.197:21395] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFSMEtG4qlh1gvNjuJV6QAAABE"]
[Mon Mar 23 22:46:08.748961 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:21401] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFSMEtG4qlh1gvNjuJV6wAAABg"]
[Mon Mar 23 22:46:09.159882 2026] [:error] [pid 38176:tid 38189] [client 40.85.222.197:21343] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFSMUtG4qlh1gvNjuJV7QAAAAI"]
[Mon Mar 23 22:46:09.572302 2026] [:error] [pid 52341:tid 52358] [client 40.85.222.197:21411] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFSMaPKTBDR2u47Gb0FtgAAAU8"]
[Mon Mar 23 22:46:09.989182 2026] [:error] [pid 38306:tid 38316] [client 40.85.222.197:21495] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFSMTkL8qwu-hHc6BjAHAAAAQg"]
[Mon Mar 23 22:46:10.407080 2026] [:error] [pid 38276:tid 38298] [client 40.85.222.197:21334] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFSMpoKGiI-a7oME3IMnQAAANM"]
[Mon Mar 23 22:46:10.817328 2026] [:error] [pid 38276:tid 38303] [client 40.85.222.197:21380] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFSMpoKGiI-a7oME3IMnwAAANg"]
[Mon Mar 23 22:46:11.231817 2026] [:error] [pid 38177:tid 38236] [client 40.85.222.197:21414] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFSM3sYW-_HCI66MukAzwAAAFU"]
[Mon Mar 23 22:46:11.644775 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:21473] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFSM6PKTBDR2u47Gb0FvgAAAU4"]
[Mon Mar 23 22:46:12.054769 2026] [:error] [pid 52341:tid 52350] [client 40.85.222.197:21492] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFSNKPKTBDR2u47Gb0FwgAAAUc"]
[Mon Mar 23 22:46:12.465327 2026] [:error] [pid 38306:tid 38310] [client 40.85.222.197:21471] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFSNDkL8qwu-hHc6BjAIAAAAQI"]
[Mon Mar 23 22:46:12.879649 2026] [:error] [pid 38178:tid 38258] [client 40.85.222.197:21457] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFSNA0axWfXsVvR9udRbwAAAJA"]
[Mon Mar 23 22:46:13.290176 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:21444] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFSNTkL8qwu-hHc6BjAIwAAAQQ"]
[Mon Mar 23 22:46:13.740489 2026] [:error] [pid 38177:tid 38239] [client 40.85.222.197:21323] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFSNXsYW-_HCI66MukA0QAAAFg"]
[Mon Mar 23 22:46:14.153665 2026] [:error] [pid 38176:tid 38188] [client 40.85.222.197:21456] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acFSNktG4qlh1gvNjuJV9wAAAAE"]
[Mon Mar 23 22:46:14.566395 2026] [:error] [pid 38177:tid 38224] [client 40.85.222.197:21479] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acFSNnsYW-_HCI66MukA0gAAAEk"]
[Mon Mar 23 22:46:15.004709 2026] [:error] [pid 38306:tid 38326] [client 40.85.222.197:21445] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acFSNzkL8qwu-hHc6BjAKgAAARI"]
[Mon Mar 23 22:46:15.422414 2026] [:error] [pid 38276:tid 38301] [client 40.85.222.197:21474] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acFSN5oKGiI-a7oME3IMqQAAANY"]
[Mon Mar 23 22:46:15.840281 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:21408] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFSN6PKTBDR2u47Gb0FywAAAU0"]
[Mon Mar 23 22:46:16.262646 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:21437] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFSODkL8qwu-hHc6BjAMgAAAQQ"]
[Mon Mar 23 22:46:16.682986 2026] [:error] [pid 52341:tid 52363] [client 40.85.222.197:21422] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFSOKPKTBDR2u47Gb0FzgAAAVQ"]
[Mon Mar 23 22:46:17.096615 2026] [:error] [pid 38276:tid 38289] [client 40.85.222.197:21339] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFSOZoKGiI-a7oME3IMrQAAAMo"]
[Mon Mar 23 22:46:17.517258 2026] [:error] [pid 38176:tid 38205] [client 40.85.222.197:21420] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFSOUtG4qlh1gvNjuJV_gAAABI"]
[Mon Mar 23 22:46:17.937445 2026] [:error] [pid 38276:tid 38290] [client 40.85.222.197:21381] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFSOZoKGiI-a7oME3IMrwAAAMs"]
[Mon Mar 23 22:46:18.360887 2026] [:error] [pid 38306:tid 38315] [client 40.85.222.197:21451] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFSOjkL8qwu-hHc6BjAOQAAAQc"]
[Mon Mar 23 22:46:18.771314 2026] [:error] [pid 38306:tid 38323] [client 40.85.222.197:21501] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFSOjkL8qwu-hHc6BjAPAAAAQ8"]
[Mon Mar 23 22:46:19.184355 2026] [:error] [pid 52341:tid 52352] [client 40.85.222.197:21470] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFSO6PKTBDR2u47Gb0F0wAAAUk"]
[Mon Mar 23 22:46:19.595843 2026] [:error] [pid 38306:tid 38331] [client 40.85.222.197:21426] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFSOzkL8qwu-hHc6BjAPgAAARc"]
[Mon Mar 23 22:46:20.006774 2026] [:error] [pid 38306:tid 38313] [client 40.85.222.197:21393] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFSPDkL8qwu-hHc6BjAQAAAAQU"]
[Mon Mar 23 22:46:20.419826 2026] [:error] [pid 38306:tid 38308] [client 40.85.222.197:21423] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFSPDkL8qwu-hHc6BjAQwAAAQA"]
[Mon Mar 23 22:46:20.834115 2026] [:error] [pid 38306:tid 38316] [client 40.85.222.197:21415] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFSPDkL8qwu-hHc6BjARAAAAQg"]
[Mon Mar 23 22:46:21.246156 2026] [:error] [pid 38177:tid 38216] [client 40.85.222.197:21434] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFSPXsYW-_HCI66MukA2QAAAEE"]
[Mon Mar 23 22:46:21.659071 2026] [:error] [pid 38306:tid 38310] [client 40.85.222.197:21438] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFSPTkL8qwu-hHc6BjASgAAAQI"]
[Mon Mar 23 22:46:22.071900 2026] [:error] [pid 38306:tid 38330] [client 40.85.222.197:21431] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFSPjkL8qwu-hHc6BjATAAAARY"]
[Mon Mar 23 22:46:22.483860 2026] [:error] [pid 38176:tid 38196] [client 40.85.222.197:21316] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFSPktG4qlh1gvNjuJWBQAAAAk"]
[Mon Mar 23 22:46:22.896011 2026] [:error] [pid 38306:tid 38319] [client 40.85.222.197:21333] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFSPjkL8qwu-hHc6BjATwAAAQs"]
[Mon Mar 23 22:46:23.311154 2026] [:error] [pid 38306:tid 38314] [client 40.85.222.197:21332] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFSPzkL8qwu-hHc6BjAUgAAAQY"]
[Mon Mar 23 22:46:23.729441 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:21358] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFSP6PKTBDR2u47Gb0F3AAAAUU"]
[Tue Mar 24 01:00:23.102981 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:23.312914 2026] [proxy_fcgi:error] [pid 56238:tid 56364] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:23.524097 2026] [proxy_fcgi:error] [pid 56238:tid 56353] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:23.734498 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:23.944175 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:24.154338 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:24.365424 2026] [proxy_fcgi:error] [pid 56238:tid 56367] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:24.575433 2026] [proxy_fcgi:error] [pid 56238:tid 56356] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:24.785038 2026] [proxy_fcgi:error] [pid 56238:tid 56349] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:24.995623 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 40.85.222.197:38789] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 01:00:25.201624 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:38789] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFxqVSqceFAZRgPDq6R3AAAAMY"]
[Tue Mar 24 01:00:25.614099 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:38897] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFxqcrwr-l5A-s9ryBprAAAAQw"]
[Tue Mar 24 01:00:26.026189 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:38861] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFxqsrwr-l5A-s9ryBprgAAAQc"]
[Tue Mar 24 01:00:26.440364 2026] [:error] [pid 56238:tid 56371] [client 40.85.222.197:38909] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acFxqlSqceFAZRgPDq6R3gAAANc"]
[Tue Mar 24 01:00:26.850786 2026] [:error] [pid 56238:tid 56348] [client 40.85.222.197:38859] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/path.php"] [unique_id "acFxqlSqceFAZRgPDq6R3wAAAMA"]
[Tue Mar 24 01:00:27.262767 2026] [:error] [pid 56237:tid 56338] [client 40.85.222.197:38891] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/path.php"] [unique_id "acFxqwymO0MnzQb90MMeCAAAAJE"]
[Tue Mar 24 01:00:27.674412 2026] [:error] [pid 56238:tid 56358] [client 40.85.222.197:38880] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/path.php"] [unique_id "acFxq1SqceFAZRgPDq6R5AAAAMo"]
[Tue Mar 24 01:00:28.627007 2026] [:error] [pid 56238:tid 56367] [client 40.85.222.197:38797] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/path.php"] [unique_id "acFxrFSqceFAZRgPDq6R5wAAANM"]
[Tue Mar 24 01:00:29.040787 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:38784] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFxrcrwr-l5A-s9ryBprwAAAQ8"]
[Tue Mar 24 01:00:29.452495 2026] [:error] [pid 56237:tid 56339] [client 40.85.222.197:38885] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFxrQymO0MnzQb90MMeFAAAAJI"]
[Tue Mar 24 01:00:29.863355 2026] [:error] [pid 56237:tid 56340] [client 40.85.222.197:38836] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFxrQymO0MnzQb90MMeGQAAAJM"]
[Tue Mar 24 01:00:30.273729 2026] [:error] [pid 56237:tid 56333] [client 40.85.222.197:38826] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wdf.php"] [unique_id "acFxrgymO0MnzQb90MMeHgAAAIw"]
[Tue Mar 24 01:00:30.683974 2026] [:error] [pid 56238:tid 56351] [client 40.85.222.197:38852] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFxrlSqceFAZRgPDq6R6QAAAMM"]
[Tue Mar 24 01:00:31.097471 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:38871] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFxr8rwr-l5A-s9ryBpswAAAQs"]
[Tue Mar 24 01:00:31.509913 2026] [:error] [pid 56236:tid 56296] [client 40.85.222.197:38853] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFxr3apFgYp0uZ8twAb1QAAAEM"]
[Tue Mar 24 01:00:31.920135 2026] [:error] [pid 56237:tid 56339] [client 40.85.222.197:38799] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fleen.php"] [unique_id "acFxrwymO0MnzQb90MMeKgAAAJI"]
[Tue Mar 24 01:00:32.347334 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:38809] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFxsHapFgYp0uZ8twAb2QAAAEA"]
[Tue Mar 24 01:00:32.761409 2026] [:error] [pid 56236:tid 56299] [client 40.85.222.197:38889] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFxsHapFgYp0uZ8twAb2gAAAEY"]
[Tue Mar 24 01:00:33.174652 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:38904] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFxscrwr-l5A-s9ryBpuAAAARY"]
[Tue Mar 24 01:00:33.587839 2026] [:error] [pid 56236:tid 56312] [client 40.85.222.197:38881] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-tem.php"] [unique_id "acFxsXapFgYp0uZ8twAb2wAAAFM"]
[Tue Mar 24 01:00:34.009202 2026] [:error] [pid 56237:tid 56329] [client 40.85.222.197:38791] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFxsgymO0MnzQb90MMeOwAAAIg"]
[Tue Mar 24 01:00:34.421920 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:38856] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFxslSqceFAZRgPDq6R7QAAANg"]
[Tue Mar 24 01:00:34.847063 2026] [:error] [pid 56435:tid 56500] [client 40.85.222.197:38796] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFxssrwr-l5A-s9ryBpuwAAAQE"]
[Tue Mar 24 01:00:35.258119 2026] [:error] [pid 56238:tid 56363] [client 40.85.222.197:38829] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av6m.php"] [unique_id "acFxs1SqceFAZRgPDq6R8QAAAM8"]
[Tue Mar 24 01:00:35.706431 2026] [:error] [pid 56238:tid 56358] [client 40.85.222.197:38907] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFxs1SqceFAZRgPDq6R8wAAAMo"]
[Tue Mar 24 01:00:36.125999 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:38855] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFxtMrwr-l5A-s9ryBpvgAAAQw"]
[Tue Mar 24 01:00:36.537582 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:38848] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFxtMrwr-l5A-s9ryBpwgAAAQQ"]
[Tue Mar 24 01:00:36.947649 2026] [:error] [pid 56435:tid 56524] [client 40.85.222.197:38878] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/autogooey.php"] [unique_id "acFxtMrwr-l5A-s9ryBpyAAAARc"]
[Tue Mar 24 01:00:37.358996 2026] [:error] [pid 56236:tid 56315] [client 40.85.222.197:38851] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFxtXapFgYp0uZ8twAb3gAAAFY"]
[Tue Mar 24 01:00:37.769000 2026] [:error] [pid 56238:tid 56355] [client 40.85.222.197:38892] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFxtVSqceFAZRgPDq6R-AAAAMc"]
[Tue Mar 24 01:00:38.184576 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:38801] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFxtsrwr-l5A-s9ryBp2wAAAQ8"]
[Tue Mar 24 01:00:38.595685 2026] [:error] [pid 56238:tid 56352] [client 40.85.222.197:38863] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/btx25.php"] [unique_id "acFxtlSqceFAZRgPDq6R-wAAAMQ"]
[Tue Mar 24 01:00:39.006459 2026] [:error] [pid 56435:tid 56520] [client 40.85.222.197:38736] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFxt8rwr-l5A-s9ryBp5gAAARM"]
[Tue Mar 24 01:00:39.420903 2026] [:error] [pid 56435:tid 56502] [client 40.85.222.197:38807] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFxt8rwr-l5A-s9ryBp6gAAAQM"]
[Tue Mar 24 01:00:39.832185 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:38792] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFxt8rwr-l5A-s9ryBp8QAAAQU"]
[Tue Mar 24 01:00:40.245516 2026] [:error] [pid 56237:tid 56343] [client 40.85.222.197:38804] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mga.php"] [unique_id "acFxuAymO0MnzQb90MMeUwAAAJY"]
[Tue Mar 24 01:00:40.657814 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:38798] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFxuFSqceFAZRgPDq6R_wAAANg"]
[Tue Mar 24 01:00:41.073667 2026] [:error] [pid 56237:tid 56328] [client 40.85.222.197:38862] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFxuQymO0MnzQb90MMeVgAAAIc"]
[Tue Mar 24 01:00:41.493625 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:38808] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFxuVSqceFAZRgPDq6SAgAAANQ"]
[Tue Mar 24 01:00:41.904742 2026] [:error] [pid 56236:tid 56311] [client 40.85.222.197:38872] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "acFxuXapFgYp0uZ8twAb5gAAAFI"]
[Tue Mar 24 01:00:42.335624 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:38905] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFxusrwr-l5A-s9ryBqBgAAARA"]
[Tue Mar 24 01:00:42.751080 2026] [:error] [pid 56435:tid 56520] [client 40.85.222.197:38906] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFxusrwr-l5A-s9ryBqDQAAARM"]
[Tue Mar 24 01:00:43.160582 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:38822] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFxu8rwr-l5A-s9ryBqEQAAAQc"]
[Tue Mar 24 01:00:43.571720 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:38813] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/agg.php"] [unique_id "acFxu3apFgYp0uZ8twAb6AAAAEA"]
[Tue Mar 24 01:00:43.981616 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:38868] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFxu8rwr-l5A-s9ryBqHQAAAQs"]
[Tue Mar 24 01:00:44.392185 2026] [:error] [pid 56237:tid 56335] [client 40.85.222.197:38876] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFxvAymO0MnzQb90MMeXQAAAI4"]
[Tue Mar 24 01:00:44.802497 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:38858] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFxvFSqceFAZRgPDq6SCgAAAMY"]
[Tue Mar 24 01:00:45.213635 2026] [:error] [pid 56236:tid 56312] [client 40.85.222.197:38724] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acFxvXapFgYp0uZ8twAb7AAAAFM"]
[Tue Mar 24 01:00:45.634070 2026] [:error] [pid 56236:tid 56313] [client 40.85.222.197:38879] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFxvXapFgYp0uZ8twAb7gAAAFQ"]
[Tue Mar 24 01:00:46.054078 2026] [:error] [pid 56236:tid 56297] [client 40.85.222.197:38867] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFxvnapFgYp0uZ8twAb8AAAAEQ"]
[Tue Mar 24 01:00:46.466272 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:38666] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFxvsrwr-l5A-s9ryBqLQAAARA"]
[Tue Mar 24 01:00:46.877687 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:38759] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acFxvgymO0MnzQb90MMeYQAAAIE"]
[Tue Mar 24 01:00:47.287846 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:38854] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFxv8rwr-l5A-s9ryBqNAAAAQw"]
[Tue Mar 24 01:00:47.696978 2026] [:error] [pid 56435:tid 56519] [client 40.85.222.197:38794] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFxv8rwr-l5A-s9ryBqNQAAARI"]
[Tue Mar 24 01:00:48.119455 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:38898] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFxwMrwr-l5A-s9ryBqNwAAAQQ"]
[Tue Mar 24 01:00:48.533752 2026] [:error] [pid 56237:tid 56329] [client 40.85.222.197:38762] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acFxwAymO0MnzQb90MMeYwAAAIg"]
[Tue Mar 24 01:00:48.945586 2026] [:error] [pid 56237:tid 56321] [client 40.85.222.197:38812] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFxwAymO0MnzQb90MMeZAAAAIA"]
[Tue Mar 24 01:00:49.356602 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:38790] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFxwVSqceFAZRgPDq6SEwAAANQ"]
[Tue Mar 24 01:00:49.766401 2026] [:error] [pid 56435:tid 56524] [client 40.85.222.197:38788] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFxwcrwr-l5A-s9ryBqPQAAARc"]
[Tue Mar 24 01:00:50.182081 2026] [:error] [pid 56238:tid 56353] [client 40.85.222.197:38728] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acFxwlSqceFAZRgPDq6SFQAAAMU"]
[Tue Mar 24 01:00:50.603392 2026] [:error] [pid 56238:tid 56367] [client 40.85.222.197:38911] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFxwlSqceFAZRgPDq6SFgAAANM"]
[Tue Mar 24 01:00:51.015181 2026] [:error] [pid 56238:tid 56360] [client 40.85.222.197:38817] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFxw1SqceFAZRgPDq6SGgAAAMw"]
[Tue Mar 24 01:00:51.429064 2026] [:error] [pid 56435:tid 56520] [client 40.85.222.197:38899] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFxw8rwr-l5A-s9ryBqQAAAARM"]
[Tue Mar 24 01:00:51.841298 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:38874] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acFxw8rwr-l5A-s9ryBqRAAAAQc"]
[Tue Mar 24 01:00:52.256619 2026] [:error] [pid 56435:tid 56514] [client 40.85.222.197:38886] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFxxMrwr-l5A-s9ryBqSAAAAQ0"]
[Tue Mar 24 01:00:52.667876 2026] [:error] [pid 56237:tid 56338] [client 40.85.222.197:38814] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFxxAymO0MnzQb90MMebAAAAJE"]
[Tue Mar 24 01:00:53.078904 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:38896] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFxxVSqceFAZRgPDq6SHQAAAMY"]
[Tue Mar 24 01:00:53.489543 2026] [:error] [pid 56238:tid 56352] [client 40.85.222.197:38839] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFxxVSqceFAZRgPDq6SHgAAAMQ"]
[Tue Mar 24 01:00:53.913770 2026] [:error] [pid 56238:tid 56361] [client 40.85.222.197:38877] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acFxxVSqceFAZRgPDq6SIAAAAM0"]
[Tue Mar 24 01:00:54.328020 2026] [:error] [pid 56238:tid 56348] [client 40.85.222.197:38895] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acFxxlSqceFAZRgPDq6SIwAAAMA"]
[Tue Mar 24 01:00:54.742508 2026] [:error] [pid 56237:tid 56345] [client 40.85.222.197:38806] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acFxxgymO0MnzQb90MMecAAAAJg"]
[Tue Mar 24 01:00:55.154505 2026] [:error] [pid 56238:tid 56366] [client 40.85.222.197:38846] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acFxx1SqceFAZRgPDq6SJwAAANI"]
[Tue Mar 24 01:00:55.571147 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:38754] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFxx1SqceFAZRgPDq6SKQAAANQ"]
[Tue Mar 24 01:00:55.983150 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:38883] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFxx8rwr-l5A-s9ryBqTwAAAQA"]
[Tue Mar 24 01:00:56.401263 2026] [:error] [pid 56435:tid 56525] [client 40.85.222.197:38828] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFxyMrwr-l5A-s9ryBqUAAAARg"]
[Tue Mar 24 01:00:56.838597 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:38818] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFxyMrwr-l5A-s9ryBqUQAAAQU"]
[Tue Mar 24 01:00:57.250602 2026] [:error] [pid 56238:tid 56365] [client 40.85.222.197:38808] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFxyVSqceFAZRgPDq6SLAAAANE"]
[Tue Mar 24 01:00:57.666834 2026] [:error] [pid 56435:tid 56515] [client 40.85.222.197:38884] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFxycrwr-l5A-s9ryBqUgAAAQ4"]
[Tue Mar 24 01:00:58.076378 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:38902] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFxysrwr-l5A-s9ryBqUwAAAQc"]
[Tue Mar 24 01:00:58.488145 2026] [:error] [pid 56237:tid 56330] [client 40.85.222.197:38894] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acFxygymO0MnzQb90MMeeAAAAIk"]
[Tue Mar 24 01:00:58.899348 2026] [:error] [pid 56236:tid 56315] [client 40.85.222.197:38745] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFxynapFgYp0uZ8twAb_gAAAFY"]
[Tue Mar 24 01:00:59.310858 2026] [:error] [pid 56237:tid 56327] [client 40.85.222.197:38744] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFxywymO0MnzQb90MMeewAAAIY"]
[Tue Mar 24 01:00:59.722496 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:38786] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFxy8rwr-l5A-s9ryBqWQAAAQs"]
[Tue Mar 24 01:01:00.133587 2026] [:error] [pid 56435:tid 56522] [client 40.85.222.197:38821] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFxzMrwr-l5A-s9ryBqWwAAARU"]
[Tue Mar 24 01:01:00.548358 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:38785] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFxzHapFgYp0uZ8twAcAAAAAFE"]
[Tue Mar 24 01:01:00.962056 2026] [:error] [pid 56237:tid 56333] [client 40.85.222.197:38663] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFxzAymO0MnzQb90MMefgAAAIw"]
[Tue Mar 24 01:01:01.373903 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:38730] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFxzVSqceFAZRgPDq6SMwAAANg"]
[Tue Mar 24 01:01:01.791137 2026] [:error] [pid 56236:tid 56300] [client 40.85.222.197:38870] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFxzXapFgYp0uZ8twAcAQAAAEc"]
[Tue Mar 24 01:01:02.208066 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:38721] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFxzsrwr-l5A-s9ryBqYgAAAQc"]
[Tue Mar 24 01:01:02.617800 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:38751] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFxzsrwr-l5A-s9ryBqYwAAAQo"]
[Tue Mar 24 01:01:03.027414 2026] [:error] [pid 56238:tid 56369] [client 40.85.222.197:38787] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFxz1SqceFAZRgPDq6SNgAAANU"]
[Tue Mar 24 01:01:03.438025 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:38860] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/assets/css/index.php"] [unique_id "acFxz1SqceFAZRgPDq6SOQAAANQ"]
[Tue Mar 24 02:18:22.763964 2026] [proxy_fcgi:error] [pid 56238:tid 56368] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:22.977508 2026] [proxy_fcgi:error] [pid 56238:tid 56361] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:23.186004 2026] [proxy_fcgi:error] [pid 56238:tid 56357] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:23.395213 2026] [proxy_fcgi:error] [pid 56238:tid 56370] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:23.604208 2026] [proxy_fcgi:error] [pid 56238:tid 56362] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:23.815388 2026] [proxy_fcgi:error] [pid 56238:tid 56369] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:24.025377 2026] [proxy_fcgi:error] [pid 56238:tid 56350] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:24.235561 2026] [proxy_fcgi:error] [pid 56238:tid 56358] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:24.444110 2026] [proxy_fcgi:error] [pid 56238:tid 56351] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:24.656148 2026] [proxy_fcgi:error] [pid 56238:tid 56365] [client 40.85.222.197:5357] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 02:18:24.875958 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:5357] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acGD8FSqceFAZRgPDq66uQAAAMY"]
[Tue Mar 24 02:18:25.288151 2026] [:error] [pid 56238:tid 56353] [client 40.85.222.197:5578] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acGD8VSqceFAZRgPDq66ugAAAMU"]
[Tue Mar 24 02:18:25.699294 2026] [:error] [pid 56435:tid 56508] [client 40.85.222.197:5477] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acGD8crwr-l5A-s9ryCgswAAAQg"]
[Tue Mar 24 02:18:26.118217 2026] [:error] [pid 56237:tid 56330] [client 40.85.222.197:5294] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acGD8gymO0MnzQb90MM8bQAAAIk"]
[Tue Mar 24 02:18:26.530107 2026] [:error] [pid 31798:tid 31819] [client 40.85.222.197:5595] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acGD8ndtW_1bksndFbZPxQAAABM"]
[Tue Mar 24 02:18:26.943291 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:5480] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acGD8srwr-l5A-s9ryCguQAAAQ8"]
[Tue Mar 24 02:18:27.370777 2026] [:error] [pid 56435:tid 56515] [client 40.85.222.197:5299] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "acGD88rwr-l5A-s9ryCgugAAAQ4"]
[Tue Mar 24 02:18:27.787386 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:5457] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acGD88rwr-l5A-s9ryCguwAAAQo"]
[Tue Mar 24 02:18:28.208991 2026] [:error] [pid 31798:tid 31812] [client 40.85.222.197:5190] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "acGD9HdtW_1bksndFbZPxwAAAAw"]
[Tue Mar 24 02:18:28.625291 2026] [:error] [pid 31798:tid 31802] [client 40.85.222.197:5442] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acGD9HdtW_1bksndFbZPyQAAAAI"]
[Tue Mar 24 02:18:29.039808 2026] [:error] [pid 56435:tid 56508] [client 40.85.222.197:5288] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acGD9crwr-l5A-s9ryCgwQAAAQg"]
[Tue Mar 24 02:18:29.451667 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:5260] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acGD9VSqceFAZRgPDq66wAAAANg"]
[Tue Mar 24 02:18:29.862106 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:52706] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "acGD9crwr-l5A-s9ryCgwwAAAQA"]
[Tue Mar 24 02:18:30.272510 2026] [:error] [pid 56435:tid 56515] [client 40.85.222.197:5587] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acGD9srwr-l5A-s9ryCgxgAAAQ4"]
[Tue Mar 24 02:18:30.682453 2026] [:error] [pid 31798:tid 31807] [client 40.85.222.197:5287] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acGD9ndtW_1bksndFbZP0QAAAAc"]
[Tue Mar 24 02:18:31.097052 2026] [:error] [pid 56237:tid 56343] [client 40.85.222.197:5617] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acGD9wymO0MnzQb90MM8cgAAAJY"]
[Tue Mar 24 02:18:31.509739 2026] [:error] [pid 56237:tid 56324] [client 40.85.222.197:5252] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsvvs.php"] [unique_id "acGD9wymO0MnzQb90MM8dAAAAIM"]
[Tue Mar 24 02:18:31.920946 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:5481] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "acGD98rwr-l5A-s9ryCgyAAAARE"]
[Tue Mar 24 02:18:32.330990 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:5324] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acGD-Mrwr-l5A-s9ryCgyQAAAQQ"]
[Tue Mar 24 02:18:32.740823 2026] [:error] [pid 56238:tid 56356] [client 40.85.222.197:5368] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acGD-FSqceFAZRgPDq66xQAAAMg"]
[Tue Mar 24 02:18:33.153003 2026] [:error] [pid 56238:tid 56357] [client 40.85.222.197:5317] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acGD-VSqceFAZRgPDq66xwAAAMk"]
[Tue Mar 24 02:18:33.564017 2026] [:error] [pid 56238:tid 56361] [client 40.85.222.197:5270] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acGD-VSqceFAZRgPDq66yAAAAM0"]
[Tue Mar 24 02:18:33.976986 2026] [:error] [pid 31798:tid 31810] [client 40.85.222.197:5452] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acGD-XdtW_1bksndFbZP1wAAAAo"]
[Tue Mar 24 02:18:34.392971 2026] [:error] [pid 31798:tid 31800] [client 40.85.222.197:5333] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acGD-ndtW_1bksndFbZP2gAAAAA"]
[Tue Mar 24 02:18:34.803994 2026] [:error] [pid 31798:tid 31811] [client 40.85.222.197:5239] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acGD-ndtW_1bksndFbZP3gAAAAs"]
[Tue Mar 24 02:18:35.216299 2026] [:error] [pid 56236:tid 56303] [client 40.85.222.197:5267] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acGD-3apFgYp0uZ8twAzeAAAAEo"]
[Tue Mar 24 02:18:35.629723 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:5343] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGD-8rwr-l5A-s9ryCg0gAAAQo"]
[Tue Mar 24 02:18:36.040201 2026] [:error] [pid 56238:tid 56352] [client 40.85.222.197:5633] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGD_FSqceFAZRgPDq66zQAAAMQ"]
[Tue Mar 24 02:18:36.453210 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:5591] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGD_FSqceFAZRgPDq66zwAAANg"]
[Tue Mar 24 02:18:36.864954 2026] [:error] [pid 56238:tid 56367] [client 40.85.222.197:5584] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGD_FSqceFAZRgPDq660QAAANM"]
[Tue Mar 24 02:18:37.279087 2026] [:error] [pid 56435:tid 56509] [client 40.85.222.197:5332] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acGD_crwr-l5A-s9ryCg1gAAAQk"]
[Tue Mar 24 02:18:37.690445 2026] [:error] [pid 56238:tid 56357] [client 40.85.222.197:5216] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acGD_VSqceFAZRgPDq661QAAAMk"]
[Tue Mar 24 02:18:38.101016 2026] [:error] [pid 31798:tid 31810] [client 40.85.222.197:5222] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acGD_ndtW_1bksndFbZP4gAAAAo"]
[Tue Mar 24 02:18:38.517836 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:5250] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acGD_srwr-l5A-s9ryCg2AAAAQc"]
[Tue Mar 24 02:18:38.927523 2026] [:error] [pid 56237:tid 56342] [client 40.85.222.197:5590] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGD_gymO0MnzQb90MM8eQAAAJU"]
[Tue Mar 24 02:18:39.361651 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:5608] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGD_8rwr-l5A-s9ryCg3QAAARY"]
[Tue Mar 24 02:18:39.774725 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:5337] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGD_3apFgYp0uZ8twAzewAAAEA"]
[Tue Mar 24 02:18:40.185684 2026] [:error] [pid 56238:tid 56360] [client 40.85.222.197:5369] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGEAFSqceFAZRgPDq661wAAAMw"]
[Tue Mar 24 02:18:40.643207 2026] [:error] [pid 56236:tid 56297] [client 40.85.222.197:5606] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acGEAHapFgYp0uZ8twAzfgAAAEQ"]
[Tue Mar 24 02:18:41.055292 2026] [:error] [pid 31798:tid 31822] [client 40.85.222.197:5212] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acGEAXdtW_1bksndFbZP6AAAABY"]
[Tue Mar 24 02:18:41.467787 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:5596] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acGEAVSqceFAZRgPDq663QAAANg"]
[Tue Mar 24 02:18:41.876898 2026] [:error] [pid 31798:tid 31808] [client 40.85.222.197:5683] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acGEAXdtW_1bksndFbZP7AAAAAg"]
[Tue Mar 24 02:18:42.287374 2026] [:error] [pid 56237:tid 56335] [client 40.85.222.197:5255] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acGEAgymO0MnzQb90MM8fQAAAI4"]
[Tue Mar 24 02:18:42.723734 2026] [:error] [pid 56238:tid 56366] [client 40.85.222.197:5297] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGEAlSqceFAZRgPDq664QAAANI"]
[Tue Mar 24 02:18:43.135228 2026] [:error] [pid 31798:tid 31806] [client 40.85.222.197:5464] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGEA3dtW_1bksndFbZP7gAAAAY"]
[Tue Mar 24 02:20:09.505662 2026] [:error] [pid 56435:tid 56501] [client 40.85.222.197:35804] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acGEWcrwr-l5A-s9ryChtAAAAQI"]
[Tue Mar 24 02:20:09.917483 2026] [:error] [pid 31798:tid 31820] [client 40.85.222.197:35714] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acGEWXdtW_1bksndFbZRbAAAABQ"]
[Tue Mar 24 02:20:10.343845 2026] [:error] [pid 56237:tid 56330] [client 40.85.222.197:35652] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acGEWgymO0MnzQb90MM9CAAAAIk"]
[Tue Mar 24 02:20:10.768354 2026] [:error] [pid 56435:tid 56515] [client 40.85.222.197:35834] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acGEWsrwr-l5A-s9ryChugAAAQ4"]
[Tue Mar 24 09:02:44.927818 2026] [:error] [pid 3137:tid 3161] [client 185.223.152.137:45261] [client 185.223.152.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.137, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acHitJdZesutm6dfYM9XhAAAANY"]
[Tue Mar 24 09:02:44.960483 2026] [proxy_fcgi:error] [pid 3137:tid 3161] [client 185.223.152.137:45261] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 11:26:17.975660 2026] [:error] [pid 48214:tid 48275] [client 91.230.225.222:32727] [client 91.230.225.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.222, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acIEWbeshLWZ3uUDHKkWGAAAAdc"]
[Tue Mar 24 11:26:17.985976 2026] [proxy_fcgi:error] [pid 48214:tid 48275] [client 91.230.225.222:32727] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:14.143530 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:14.387797 2026] [proxy_fcgi:error] [pid 3137:tid 3154] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:14.661992 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:14.932054 2026] [proxy_fcgi:error] [pid 3137:tid 3142] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:15.252381 2026] [proxy_fcgi:error] [pid 3137:tid 3152] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:15.609602 2026] [proxy_fcgi:error] [pid 3137:tid 3145] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:15.862356 2026] [proxy_fcgi:error] [pid 3137:tid 3158] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:16.099053 2026] [proxy_fcgi:error] [pid 3137:tid 3154] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:16.338315 2026] [proxy_fcgi:error] [pid 3137:tid 3144] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:16.653712 2026] [proxy_fcgi:error] [pid 3137:tid 3160] [client 51.103.44.83:21246] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 13:56:16.888539 2026] [:error] [pid 3137:tid 3151] [client 51.103.44.83:21246] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acIngJdZesutm6dfYM-8jgAAAMw"]
[Tue Mar 24 13:56:17.736974 2026] [:error] [pid 64198:tid 64207] [client 51.103.44.83:16399] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acIngXVzJqf6OS_oSZ0GagAAAUc"]
[Tue Mar 24 13:56:18.387585 2026] [:error] [pid 38767:tid 38780] [client 51.103.44.83:29803] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acIngvwkUqN4GJAI5oVfPgAAAQo"]
[Tue Mar 24 13:56:19.200412 2026] [:error] [pid 38767:tid 38789] [client 51.103.44.83:4401] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acIng_wkUqN4GJAI5oVfQAAAARM"]
[Tue Mar 24 13:56:20.233332 2026] [:error] [pid 48219:tid 48290] [client 51.103.44.83:22893] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acInhChf3b4R_lAIyv8mfwAAAgk"]
[Tue Mar 24 13:56:21.288736 2026] [:error] [pid 38767:tid 38770] [client 51.103.44.83:24754] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acInhfwkUqN4GJAI5oVfRgAAAQA"]
[Tue Mar 24 13:56:22.111014 2026] [:error] [pid 38767:tid 38775] [client 51.103.44.83:54987] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acInhvwkUqN4GJAI5oVfSgAAAQU"]
[Tue Mar 24 13:56:23.033880 2026] [:error] [pid 38767:tid 38777] [client 51.103.44.83:50156] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acInh_wkUqN4GJAI5oVfTgAAAQc"]
[Tue Mar 24 13:56:23.886729 2026] [:error] [pid 3030:tid 3061] [client 51.103.44.83:50163] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acInhwyOuILyynfcqfk00gAAAAw"]
[Tue Mar 24 13:56:24.559889 2026] [:error] [pid 3030:tid 3070] [client 51.103.44.83:24717] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acIniAyOuILyynfcqfk00wAAABU"]
[Tue Mar 24 13:56:25.430538 2026] [:error] [pid 64198:tid 64221] [client 51.103.44.83:34139] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acIniXVzJqf6OS_oSZ0GdAAAAVU"]
[Tue Mar 24 13:56:26.495031 2026] [:error] [pid 3032:tid 3124] [client 51.103.44.83:32206] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acIniia_-JXXD03-JNwgjwAAAJU"]
[Tue Mar 24 13:56:27.250902 2026] [:error] [pid 48214:tid 48268] [client 51.103.44.83:30986] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acIni7eshLWZ3uUDHKkuJgAAAdA"]
[Tue Mar 24 13:56:27.949812 2026] [:error] [pid 3032:tid 3107] [client 51.103.44.83:55610] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acIniya_-JXXD03-JNwgkwAAAIQ"]
[Tue Mar 24 13:56:29.295501 2026] [:error] [pid 48128:tid 48171] [client 51.103.44.83:22009] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acInjcvR4LIMFLbM5VkV1gAAAZI"]
[Tue Mar 24 13:56:30.562478 2026] [:error] [pid 48128:tid 48166] [client 51.103.44.83:24361] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acInjsvR4LIMFLbM5VkV1wAAAY4"]
[Tue Mar 24 13:56:31.557944 2026] [:error] [pid 64198:tid 64215] [client 51.103.44.83:16447] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acInj3VzJqf6OS_oSZ0GhQAAAU8"]
[Tue Mar 24 13:56:32.295295 2026] [:error] [pid 64198:tid 64206] [client 51.103.44.83:24373] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acInkHVzJqf6OS_oSZ0GlQAAAUY"]
[Tue Mar 24 13:56:33.184947 2026] [:error] [pid 48219:tid 48292] [client 51.103.44.83:24332] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acInkShf3b4R_lAIyv8mhwAAAgs"]
[Tue Mar 24 13:56:34.065252 2026] [:error] [pid 38767:tid 38776] [client 51.103.44.83:54985] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acInkvwkUqN4GJAI5oVfYAAAAQY"]
[Tue Mar 24 13:56:34.757413 2026] [:error] [pid 38767:tid 38788] [client 51.103.44.83:41473] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acInkvwkUqN4GJAI5oVfZgAAARI"]
[Tue Mar 24 13:56:35.424878 2026] [:error] [pid 38767:tid 38779] [client 51.103.44.83:26000] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acInk_wkUqN4GJAI5oVfagAAAQk"]
[Tue Mar 24 13:56:36.225788 2026] [:error] [pid 48128:tid 48162] [client 51.103.44.83:50065] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acInlMvR4LIMFLbM5VkV6AAAAYo"]
[Tue Mar 24 13:56:37.245991 2026] [:error] [pid 3032:tid 3115] [client 51.103.44.83:29737] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acInlSa_-JXXD03-JNwglwAAAIw"]
[Tue Mar 24 13:56:37.835160 2026] [:error] [pid 3032:tid 3116] [client 51.103.44.83:36185] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acInlSa_-JXXD03-JNwgmgAAAI0"]
[Tue Mar 24 13:56:38.636813 2026] [:error] [pid 48219:tid 48304] [client 51.103.44.83:36180] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acInlihf3b4R_lAIyv8mjgAAAhc"]
[Tue Mar 24 13:56:39.447555 2026] [:error] [pid 48128:tid 48175] [client 51.103.44.83:5063] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acInl8vR4LIMFLbM5VkV8wAAAZY"]
[Tue Mar 24 13:56:40.535434 2026] [:error] [pid 64198:tid 64218] [client 51.103.44.83:33789] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acInmHVzJqf6OS_oSZ0GvgAAAVI"]
[Tue Mar 24 13:56:41.247341 2026] [:error] [pid 64198:tid 64215] [client 51.103.44.83:30496] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acInmXVzJqf6OS_oSZ0GwwAAAU8"]
[Tue Mar 24 13:56:42.036546 2026] [:error] [pid 48219:tid 48297] [client 51.103.44.83:26104] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acInmihf3b4R_lAIyv8mjwAAAhA"]
[Tue Mar 24 13:56:42.899725 2026] [:error] [pid 64198:tid 64221] [client 51.103.44.83:28236] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acInmnVzJqf6OS_oSZ0GyQAAAVU"]
[Tue Mar 24 13:56:43.752589 2026] [:error] [pid 64198:tid 64218] [client 51.103.44.83:29411] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acInm3VzJqf6OS_oSZ0GzAAAAVI"]
[Tue Mar 24 13:56:45.216350 2026] [:error] [pid 38767:tid 38775] [client 51.103.44.83:38304] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acInnfwkUqN4GJAI5oVfcwAAAQU"]
[Tue Mar 24 13:56:46.102352 2026] [:error] [pid 48214:tid 48263] [client 51.103.44.83:12714] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acInnreshLWZ3uUDHKkuMwAAAcs"]
[Tue Mar 24 13:56:46.750828 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:4446] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acInnnVzJqf6OS_oSZ0G0wAAAVc"]
[Tue Mar 24 13:56:48.043819 2026] [:error] [pid 48214:tid 48273] [client 51.103.44.83:58076] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acInoLeshLWZ3uUDHKkuNgAAAdU"]
[Tue Mar 24 21:47:40.459373 2026] [:error] [pid 38767:tid 38777] [client 136.109.197.157:63675] [client 136.109.197.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.197.157, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "acKV_PwkUqN4GJAI5oVeLwAAAQc"]
[Tue Mar 24 21:47:40.470070 2026] [proxy_fcgi:error] [pid 38767:tid 38777] [client 136.109.197.157:63675] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 21:47:43.597030 2026] [:error] [pid 38767:tid 38793] [client 136.109.197.157:63675] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acKV__wkUqN4GJAI5oVeOgAAARc"]
[Tue Mar 24 21:47:43.951352 2026] [:error] [pid 48219:tid 48300] [client 136.109.197.157:65429] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acKV_yhf3b4R_lAIyv-RAQAAAhM"]
[Tue Mar 24 21:47:44.340581 2026] [:error] [pid 3030:tid 3071] [client 136.109.197.157:57558] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acKWAAyOuILyynfcqflofQAAABY"]
[Tue Mar 24 21:47:44.690009 2026] [:error] [pid 38767:tid 38792] [client 136.109.197.157:52699] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acKWAPwkUqN4GJAI5oVeOwAAARY"]
[Tue Mar 24 21:47:45.042726 2026] [:error] [pid 48219:tid 48301] [client 136.109.197.157:51894] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acKWAShf3b4R_lAIyv-RAgAAAhQ"]
[Tue Mar 24 21:47:45.415797 2026] [:error] [pid 3031:tid 3096] [client 136.109.197.157:65148] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acKWAaJBKytnG47nuiY-gQAAAFQ"]
[Tue Mar 24 21:47:45.801986 2026] [:error] [pid 64198:tid 64220] [client 136.109.197.157:64726] [client 136.109.197.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acKWAXVzJqf6OS_oSZ3ToQAAAVQ"]
[Tue Mar 24 23:28:20.779466 2026] [proxy_fcgi:error] [pid 48128:tid 48172] [client 20.151.251.35:56373] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:28:21.198245 2026] [:error] [pid 48128:tid 48174] [client 20.151.251.35:56373] [client 20.151.251.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.251.35, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acKtlcvR4LIMFLbM5VlI5QAAAZU"]
[Tue Mar 24 23:28:21.420951 2026] [proxy_fcgi:error] [pid 48128:tid 48177] [client 20.151.251.35:56373] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:28:22.259079 2026] [proxy_fcgi:error] [pid 48128:tid 48149] [client 20.151.251.35:56373] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:28:22.888719 2026] [proxy_fcgi:error] [pid 48128:tid 48169] [client 20.151.251.35:56373] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:28:23.098971 2026] [:error] [pid 48128:tid 48156] [client 20.151.251.35:56373] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acKtl8vR4LIMFLbM5VlI8gAAAYY"]
[Tue Mar 24 23:28:23.930268 2026] [:error] [pid 64198:tid 64201] [client 20.151.251.35:56154] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acKtl3VzJqf6OS_oSZ3v_wAAAUE"]
[Tue Mar 24 23:28:24.761464 2026] [:error] [pid 48219:tid 48282] [client 20.151.251.35:57158] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acKtmChf3b4R_lAIyv-lrAAAAgE"]
[Tue Mar 24 23:28:25.603348 2026] [:error] [pid 48219:tid 48286] [client 20.151.251.35:60359] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acKtmShf3b4R_lAIyv-lsAAAAgU"]
[Wed Mar 25 00:07:12.921919 2026] [proxy_fcgi:error] [pid 48214:tid 48257] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:13.131552 2026] [proxy_fcgi:error] [pid 48214:tid 48273] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:13.567494 2026] [proxy_fcgi:error] [pid 48214:tid 48274] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:13.776204 2026] [proxy_fcgi:error] [pid 48214:tid 48254] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:13.986583 2026] [proxy_fcgi:error] [pid 48214:tid 48252] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:14.195456 2026] [proxy_fcgi:error] [pid 48214:tid 48256] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:14.404480 2026] [proxy_fcgi:error] [pid 48214:tid 48270] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:14.824874 2026] [proxy_fcgi:error] [pid 48214:tid 48260] [client 20.63.96.180:43917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:07:15.030109 2026] [:error] [pid 48214:tid 48267] [client 20.63.96.180:43917] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx1.php"] [unique_id "acK2s7eshLWZ3uUDHKmQ9wAAAc8"]
[Wed Mar 25 00:07:15.453634 2026] [:error] [pid 3137:tid 3146] [client 20.63.96.180:43927] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx1.php"] [unique_id "acK2s5dZesutm6dfYM-BWQAAAMc"]
[Wed Mar 25 00:07:15.951828 2026] [:error] [pid 48219:tid 48295] [client 20.63.96.180:43993] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx1.php"] [unique_id "acK2syhf3b4R_lAIyv-u5gAAAg4"]
[Wed Mar 25 00:07:16.364755 2026] [:error] [pid 38767:tid 38780] [client 20.63.96.180:44025] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx1.php"] [unique_id "acK2tPwkUqN4GJAI5oWPAwAAAQo"]
[Wed Mar 25 00:07:16.852852 2026] [:error] [pid 48219:tid 48281] [client 20.63.96.180:43924] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xv.php"] [unique_id "acK2tChf3b4R_lAIyv-u7AAAAgA"]
[Wed Mar 25 00:07:17.534354 2026] [:error] [pid 3030:tid 3052] [client 20.63.96.180:43991] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xv.php"] [unique_id "acK2tQyOuILyynfcqfl2GQAAAAM"]
[Wed Mar 25 00:07:17.961561 2026] [:error] [pid 48128:tid 48172] [client 20.63.96.180:43980] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xv.php"] [unique_id "acK2tcvR4LIMFLbM5VlNCwAAAZM"]
[Wed Mar 25 00:07:18.447231 2026] [:error] [pid 3137:tid 3163] [client 20.63.96.180:44019] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xv.php"] [unique_id "acK2tpdZesutm6dfYM-BXQAAANg"]
[Wed Mar 25 00:07:18.865335 2026] [:error] [pid 64198:tid 64217] [client 20.63.96.180:43985] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x56.php"] [unique_id "acK2tnVzJqf6OS_oSZ383gAAAVE"]
[Wed Mar 25 00:07:19.290330 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43907] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x56.php"] [unique_id "acK2t_wkUqN4GJAI5oWPBwAAAQY"]
[Wed Mar 25 00:07:19.827016 2026] [:error] [pid 38767:tid 38771] [client 20.63.96.180:43977] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x56.php"] [unique_id "acK2t_wkUqN4GJAI5oWPCQAAAQE"]
[Wed Mar 25 00:07:20.249162 2026] [:error] [pid 3137:tid 3144] [client 20.63.96.180:43965] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x56.php"] [unique_id "acK2uJdZesutm6dfYM-BYAAAAMU"]
[Wed Mar 25 00:07:20.674869 2026] [:error] [pid 48219:tid 48298] [client 20.63.96.180:43922] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htaccess.php"] [unique_id "acK2uChf3b4R_lAIyv-u-AAAAhE"]
[Wed Mar 25 00:07:21.091785 2026] [:error] [pid 3030:tid 3069] [client 20.63.96.180:43920] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htaccess.php"] [unique_id "acK2uQyOuILyynfcqfl2HQAAABQ"]
[Wed Mar 25 00:07:21.509393 2026] [:error] [pid 3137:tid 3139] [client 20.63.96.180:43941] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htaccess.php"] [unique_id "acK2uZdZesutm6dfYM-BZwAAAMA"]
[Wed Mar 25 00:07:21.970410 2026] [:error] [pid 3137:tid 3161] [client 20.63.96.180:43969] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htaccess.php"] [unique_id "acK2uZdZesutm6dfYM-BagAAANY"]
[Wed Mar 25 00:07:22.490060 2026] [:error] [pid 3137:tid 3163] [client 20.63.96.180:43916] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/readme.php"] [unique_id "acK2updZesutm6dfYM-BcAAAANg"]
[Wed Mar 25 00:07:22.910346 2026] [:error] [pid 48214:tid 48264] [client 20.63.96.180:44009] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/readme.php"] [unique_id "acK2ureshLWZ3uUDHKmQ-QAAAcw"]
[Wed Mar 25 00:07:23.326602 2026] [:error] [pid 64198:tid 64220] [client 20.63.96.180:44018] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/readme.php"] [unique_id "acK2u3VzJqf6OS_oSZ385gAAAVQ"]
[Wed Mar 25 00:07:23.743179 2026] [:error] [pid 64198:tid 64210] [client 20.63.96.180:43910] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/readme.php"] [unique_id "acK2u3VzJqf6OS_oSZ386AAAAUo"]
[Wed Mar 25 00:07:24.160200 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43909] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x50.php"] [unique_id "acK2vPwkUqN4GJAI5oWPFgAAAQY"]
[Wed Mar 25 00:07:24.651672 2026] [:error] [pid 3137:tid 3151] [client 20.63.96.180:44008] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x50.php"] [unique_id "acK2vJdZesutm6dfYM-BdgAAAMw"]
[Wed Mar 25 00:07:25.067139 2026] [:error] [pid 48214:tid 48259] [client 20.63.96.180:43905] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x50.php"] [unique_id "acK2vbeshLWZ3uUDHKmQ-gAAAcc"]
[Wed Mar 25 00:07:25.496503 2026] [:error] [pid 3137:tid 3153] [client 20.63.96.180:43983] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x50.php"] [unique_id "acK2vZdZesutm6dfYM-BewAAAM4"]
[Wed Mar 25 00:07:25.921645 2026] [:error] [pid 48219:tid 48284] [client 20.63.96.180:44012] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fv.php"] [unique_id "acK2vShf3b4R_lAIyv-u_QAAAgM"]
[Wed Mar 25 00:07:26.343755 2026] [:error] [pid 48128:tid 48149] [client 20.63.96.180:43978] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fv.php"] [unique_id "acK2vsvR4LIMFLbM5VlNEQAAAYA"]
[Wed Mar 25 00:07:26.793188 2026] [:error] [pid 3030:tid 3057] [client 20.63.96.180:44021] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fv.php"] [unique_id "acK2vgyOuILyynfcqfl2JAAAAAg"]
[Wed Mar 25 00:07:27.400929 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43944] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fv.php"] [unique_id "acK2v5dZesutm6dfYM-BgAAAANE"]
[Wed Mar 25 00:07:27.973619 2026] [:error] [pid 48219:tid 48301] [client 20.63.96.180:44015] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acK2vyhf3b4R_lAIyv-vBQAAAhQ"]
[Wed Mar 25 00:07:28.470570 2026] [:error] [pid 48219:tid 48287] [client 20.63.96.180:44028] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acK2wChf3b4R_lAIyv-vCAAAAgY"]
[Wed Mar 25 00:07:28.887245 2026] [:error] [pid 48219:tid 48284] [client 20.63.96.180:43992] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acK2wChf3b4R_lAIyv-vCgAAAgM"]
[Wed Mar 25 00:07:29.314815 2026] [:error] [pid 3137:tid 3162] [client 20.63.96.180:43908] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acK2wZdZesutm6dfYM-BhAAAANc"]
[Wed Mar 25 00:07:29.730039 2026] [:error] [pid 48219:tid 48294] [client 20.63.96.180:43947] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lsd.php"] [unique_id "acK2wShf3b4R_lAIyv-vDQAAAg0"]
[Wed Mar 25 00:07:30.234941 2026] [:error] [pid 3137:tid 3161] [client 20.63.96.180:43840] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lsd.php"] [unique_id "acK2wpdZesutm6dfYM-BhgAAANY"]
[Wed Mar 25 00:07:30.658793 2026] [:error] [pid 3137:tid 3149] [client 20.63.96.180:43866] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lsd.php"] [unique_id "acK2wpdZesutm6dfYM-BiwAAAMo"]
[Wed Mar 25 00:07:31.078400 2026] [:error] [pid 3137:tid 3159] [client 20.63.96.180:43982] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lsd.php"] [unique_id "acK2w5dZesutm6dfYM-BjAAAANQ"]
[Wed Mar 25 00:07:31.570879 2026] [:error] [pid 38767:tid 38779] [client 20.63.96.180:43872] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acK2w_wkUqN4GJAI5oWPHQAAAQk"]
[Wed Mar 25 00:07:32.073590 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43966] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acK2xPwkUqN4GJAI5oWPHwAAARA"]
[Wed Mar 25 00:07:32.497379 2026] [:error] [pid 38767:tid 38793] [client 20.63.96.180:44004] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acK2xPwkUqN4GJAI5oWPIwAAARc"]
[Wed Mar 25 00:07:32.915030 2026] [:error] [pid 64198:tid 64211] [client 20.63.96.180:43938] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acK2xHVzJqf6OS_oSZ387QAAAUs"]
[Wed Mar 25 00:07:33.355068 2026] [:error] [pid 3137:tid 3158] [client 20.63.96.180:43918] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsd.php"] [unique_id "acK2xZdZesutm6dfYM-BlQAAANM"]
[Wed Mar 25 00:07:33.771705 2026] [:error] [pid 3032:tid 3107] [client 20.63.96.180:44027] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsd.php"] [unique_id "acK2xSa_-JXXD03-JNxyowAAAIQ"]
[Wed Mar 25 00:07:34.185564 2026] [:error] [pid 3030:tid 3070] [client 20.63.96.180:44031] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsd.php"] [unique_id "acK2xgyOuILyynfcqfl2KAAAABU"]
[Wed Mar 25 00:07:34.631147 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43994] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsd.php"] [unique_id "acK2xpdZesutm6dfYM-BngAAAM8"]
[Wed Mar 25 00:07:35.069626 2026] [:error] [pid 3137:tid 3160] [client 20.63.96.180:43864] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gtc.php"] [unique_id "acK2x5dZesutm6dfYM-BoAAAANU"]
[Wed Mar 25 00:07:35.678622 2026] [:error] [pid 48219:tid 48301] [client 20.63.96.180:43882] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gtc.php"] [unique_id "acK2xyhf3b4R_lAIyv-vFAAAAhQ"]
[Wed Mar 25 00:07:36.204158 2026] [:error] [pid 64198:tid 64222] [client 20.63.96.180:43915] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gtc.php"] [unique_id "acK2yHVzJqf6OS_oSZ388AAAAVY"]
[Wed Mar 25 00:07:36.708684 2026] [:error] [pid 38767:tid 38790] [client 20.63.96.180:44007] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gtc.php"] [unique_id "acK2yPwkUqN4GJAI5oWPKwAAARQ"]
[Wed Mar 25 00:07:37.124497 2026] [:error] [pid 64198:tid 64210] [client 20.63.96.180:43937] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atx.php"] [unique_id "acK2yXVzJqf6OS_oSZ388gAAAUo"]
[Wed Mar 25 00:07:37.541030 2026] [:error] [pid 38767:tid 38787] [client 20.63.96.180:43921] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atx.php"] [unique_id "acK2yfwkUqN4GJAI5oWPLwAAARE"]
[Wed Mar 25 00:07:37.975445 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43984] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atx.php"] [unique_id "acK2yfwkUqN4GJAI5oWPMQAAAQw"]
[Wed Mar 25 00:07:38.392696 2026] [:error] [pid 3032:tid 3105] [client 20.63.96.180:44000] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atx.php"] [unique_id "acK2yia_-JXXD03-JNxypAAAAII"]
[Wed Mar 25 00:07:38.898131 2026] [:error] [pid 48219:tid 48284] [client 20.63.96.180:43989] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acK2yihf3b4R_lAIyv-vGQAAAgM"]
[Wed Mar 25 00:07:39.312334 2026] [:error] [pid 64198:tid 64204] [client 20.63.96.180:43904] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acK2y3VzJqf6OS_oSZ389gAAAUQ"]
[Wed Mar 25 00:07:39.745887 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:44016] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acK2y_wkUqN4GJAI5oWPNQAAAQU"]
[Wed Mar 25 00:07:40.167613 2026] [:error] [pid 3031:tid 3086] [client 20.63.96.180:43926] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acK2zKJBKytnG47nuiZJigAAAEo"]
[Wed Mar 25 00:07:40.581000 2026] [:error] [pid 3137:tid 3153] [client 20.63.96.180:44026] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "acK2zJdZesutm6dfYM-BpQAAAM4"]
[Wed Mar 25 00:07:41.015548 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:44024] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "acK2zZdZesutm6dfYM-BpgAAANE"]
[Wed Mar 25 00:07:41.437222 2026] [:error] [pid 3137:tid 3140] [client 20.63.96.180:44023] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "acK2zZdZesutm6dfYM-BqgAAAME"]
[Wed Mar 25 00:07:41.861693 2026] [:error] [pid 3137:tid 3149] [client 20.63.96.180:44017] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/403.php"] [unique_id "acK2zZdZesutm6dfYM-BrQAAAMo"]
[Wed Mar 25 00:07:42.390775 2026] [:error] [pid 3137:tid 3159] [client 20.63.96.180:44014] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/m.php"] [unique_id "acK2zpdZesutm6dfYM-BsQAAANQ"]
[Wed Mar 25 00:07:42.816455 2026] [:error] [pid 3137:tid 3153] [client 20.63.96.180:43976] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/m.php"] [unique_id "acK2zpdZesutm6dfYM-BtgAAAM4"]
[Wed Mar 25 00:07:43.260819 2026] [:error] [pid 3030:tid 3072] [client 20.63.96.180:43949] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/m.php"] [unique_id "acK2zwyOuILyynfcqfl2KwAAABc"]
[Wed Mar 25 00:07:43.877135 2026] [:error] [pid 3030:tid 3061] [client 20.63.96.180:43911] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/m.php"] [unique_id "acK2zwyOuILyynfcqfl2LQAAAAw"]
[Wed Mar 25 00:07:44.318360 2026] [:error] [pid 64198:tid 64224] [client 20.63.96.180:44001] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "acK20HVzJqf6OS_oSZ38-QAAAVg"]
[Wed Mar 25 00:07:44.733986 2026] [:error] [pid 48214:tid 48276] [client 20.63.96.180:43970] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "acK20LeshLWZ3uUDHKmRAAAAAdg"]
[Wed Mar 25 00:07:45.172367 2026] [:error] [pid 38767:tid 38787] [client 20.63.96.180:43925] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "acK20fwkUqN4GJAI5oWPOQAAARE"]
[Wed Mar 25 00:07:45.613203 2026] [:error] [pid 3030:tid 3056] [client 20.63.96.180:44002] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "acK20QyOuILyynfcqfl2NAAAAAc"]
[Wed Mar 25 00:07:46.188676 2026] [:error] [pid 3031:tid 3077] [client 20.63.96.180:43850] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acK20qJBKytnG47nuiZJjQAAAEE"]
[Wed Mar 25 00:07:46.740491 2026] [:error] [pid 3031:tid 3087] [client 20.63.96.180:43951] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acK20qJBKytnG47nuiZJjgAAAEs"]
[Wed Mar 25 00:07:47.156958 2026] [:error] [pid 48219:tid 48302] [client 20.63.96.180:44020] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acK20yhf3b4R_lAIyv-vHQAAAhU"]
[Wed Mar 25 00:07:47.679268 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:44011] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acK20_wkUqN4GJAI5oWPOwAAAQY"]
[Wed Mar 25 00:07:48.109709 2026] [:error] [pid 38767:tid 38784] [client 20.63.96.180:43968] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acK21PwkUqN4GJAI5oWPPgAAAQ4"]
[Wed Mar 25 00:07:48.533069 2026] [:error] [pid 64198:tid 64206] [client 20.63.96.180:43928] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acK21HVzJqf6OS_oSZ39BAAAAUY"]
[Wed Mar 25 00:07:49.062052 2026] [:error] [pid 64198:tid 64213] [client 20.63.96.180:43863] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acK21XVzJqf6OS_oSZ39CgAAAU0"]
[Wed Mar 25 00:07:49.624658 2026] [:error] [pid 64198:tid 64215] [client 20.63.96.180:43913] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acK21XVzJqf6OS_oSZ39DQAAAU8"]
[Wed Mar 25 00:07:50.047960 2026] [:error] [pid 48219:tid 48286] [client 20.63.96.180:43862] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "acK21ihf3b4R_lAIyv-vJAAAAgU"]
[Wed Mar 25 00:07:50.481325 2026] [:error] [pid 64198:tid 64206] [client 20.63.96.180:44013] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "acK21nVzJqf6OS_oSZ39EwAAAUY"]
[Wed Mar 25 00:07:50.911111 2026] [:error] [pid 38767:tid 38781] [client 20.63.96.180:43843] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "acK21vwkUqN4GJAI5oWPQgAAAQs"]
[Wed Mar 25 00:07:51.356116 2026] [:error] [pid 3137:tid 3158] [client 20.63.96.180:43859] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "acK215dZesutm6dfYM-BywAAANM"]
[Wed Mar 25 00:07:51.773628 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43998] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acK215dZesutm6dfYM-BzgAAANE"]
[Wed Mar 25 00:07:52.191430 2026] [:error] [pid 3137:tid 3149] [client 20.63.96.180:43932] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acK22JdZesutm6dfYM-B0gAAAMo"]
[Wed Mar 25 00:07:52.718527 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43940] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acK22PwkUqN4GJAI5oWPRAAAARA"]
[Wed Mar 25 00:07:53.221543 2026] [:error] [pid 3137:tid 3149] [client 20.63.96.180:43988] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acK22ZdZesutm6dfYM-B3gAAAMo"]
[Wed Mar 25 00:07:53.669291 2026] [:error] [pid 3137:tid 3144] [client 20.63.96.180:43939] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "acK22ZdZesutm6dfYM-B4QAAAMU"]
[Wed Mar 25 00:07:54.085698 2026] [:error] [pid 3137:tid 3145] [client 20.63.96.180:43890] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "acK22pdZesutm6dfYM-B5AAAAMY"]
[Wed Mar 25 00:07:54.503015 2026] [:error] [pid 64198:tid 64217] [client 20.63.96.180:44010] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "acK22nVzJqf6OS_oSZ39HAAAAVE"]
[Wed Mar 25 00:07:54.934847 2026] [:error] [pid 3137:tid 3155] [client 20.63.96.180:43798] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "acK22pdZesutm6dfYM-B5wAAANA"]
[Wed Mar 25 00:07:55.351772 2026] [:error] [pid 64198:tid 64210] [client 20.63.96.180:43841] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "acK223VzJqf6OS_oSZ39IAAAAUo"]
[Wed Mar 25 00:07:55.888141 2026] [:error] [pid 64198:tid 64213] [client 20.63.96.180:43876] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "acK223VzJqf6OS_oSZ39JgAAAU0"]
[Wed Mar 25 00:07:56.347829 2026] [:error] [pid 3031:tid 3098] [client 20.63.96.180:43935] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "acK23KJBKytnG47nuiZJkQAAAFY"]
[Wed Mar 25 00:07:56.849617 2026] [:error] [pid 3031:tid 3100] [client 20.63.96.180:44029] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "acK23KJBKytnG47nuiZJkgAAAFg"]
[Wed Mar 25 00:07:57.279248 2026] [:error] [pid 48219:tid 48294] [client 20.63.96.180:43848] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK23Shf3b4R_lAIyv-vSwAAAg0"]
[Wed Mar 25 00:07:57.696309 2026] [:error] [pid 3031:tid 3083] [client 20.63.96.180:43900] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK23aJBKytnG47nuiZJkwAAAEc"]
[Wed Mar 25 00:07:58.317026 2026] [:error] [pid 48214:tid 48263] [client 20.63.96.180:43867] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK23reshLWZ3uUDHKmRBQAAAcs"]
[Wed Mar 25 00:07:58.750915 2026] [:error] [pid 3032:tid 3116] [client 20.63.96.180:43957] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK23ia_-JXXD03-JNxyswAAAI0"]
[Wed Mar 25 00:07:59.192827 2026] [:error] [pid 48214:tid 48266] [client 20.63.96.180:43919] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK237eshLWZ3uUDHKmRBwAAAc4"]
[Wed Mar 25 00:07:59.622385 2026] [:error] [pid 38767:tid 38780] [client 20.63.96.180:43990] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK23_wkUqN4GJAI5oWPRgAAAQo"]
[Wed Mar 25 00:08:00.037736 2026] [:error] [pid 38767:tid 38793] [client 20.63.96.180:43986] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK24PwkUqN4GJAI5oWPSQAAARc"]
[Wed Mar 25 00:08:00.911795 2026] [:error] [pid 48219:tid 48299] [client 20.63.96.180:44030] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK24Chf3b4R_lAIyv-vYAAAAhI"]
[Wed Mar 25 00:08:01.334045 2026] [:error] [pid 38767:tid 38783] [client 20.63.96.180:43880] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acK24fwkUqN4GJAI5oWPTAAAAQ0"]
[Wed Mar 25 00:08:01.751057 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43849] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK24fwkUqN4GJAI5oWPTQAAARY"]
[Wed Mar 25 00:08:02.196406 2026] [:error] [pid 38767:tid 38794] [client 20.63.96.180:43930] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK24vwkUqN4GJAI5oWPUQAAARg"]
[Wed Mar 25 00:08:02.616225 2026] [:error] [pid 48128:tid 48176] [client 20.63.96.180:43865] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cong.php"] [unique_id "acK24svR4LIMFLbM5VlNHgAAAZc"]
[Wed Mar 25 00:08:03.082874 2026] [:error] [pid 3032:tid 3118] [client 20.63.96.180:43971] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "acK24ya_-JXXD03-JNxytwAAAI8"]
[Wed Mar 25 00:08:03.518203 2026] [:error] [pid 38767:tid 38790] [client 20.63.96.180:43858] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "acK24_wkUqN4GJAI5oWPVgAAARQ"]
[Wed Mar 25 00:08:03.944384 2026] [:error] [pid 38767:tid 38772] [client 20.63.96.180:43999] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "acK24_wkUqN4GJAI5oWPWgAAAQI"]
[Wed Mar 25 00:08:04.370467 2026] [:error] [pid 38767:tid 38771] [client 20.63.96.180:43948] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "acK25PwkUqN4GJAI5oWPWwAAAQE"]
[Wed Mar 25 00:08:04.789064 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43952] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK25PwkUqN4GJAI5oWPXwAAARY"]
[Wed Mar 25 00:08:05.242153 2026] [:error] [pid 38767:tid 38794] [client 20.63.96.180:43959] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK25fwkUqN4GJAI5oWPYQAAARg"]
[Wed Mar 25 00:08:05.703972 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43962] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK25fwkUqN4GJAI5oWPYwAAARA"]
[Wed Mar 25 00:08:06.123762 2026] [:error] [pid 48128:tid 48160] [client 20.63.96.180:44005] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK25svR4LIMFLbM5VlNHwAAAYg"]
[Wed Mar 25 00:08:06.539814 2026] [:error] [pid 38767:tid 38777] [client 20.63.96.180:43934] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acK25vwkUqN4GJAI5oWPaAAAAQc"]
[Wed Mar 25 00:08:07.065269 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43972] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acK25_wkUqN4GJAI5oWPbQAAARA"]
[Wed Mar 25 00:08:07.483832 2026] [:error] [pid 38767:tid 38773] [client 20.63.96.180:43855] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acK25_wkUqN4GJAI5oWPcAAAAQM"]
[Wed Mar 25 00:08:07.900245 2026] [:error] [pid 38767:tid 38771] [client 20.63.96.180:43956] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acK25_wkUqN4GJAI5oWPcgAAAQE"]
[Wed Mar 25 00:08:08.328729 2026] [:error] [pid 38767:tid 38794] [client 20.63.96.180:43906] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acK26PwkUqN4GJAI5oWPdQAAARg"]
[Wed Mar 25 00:08:08.747308 2026] [:error] [pid 38767:tid 38770] [client 20.63.96.180:43787] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acK26PwkUqN4GJAI5oWPegAAAQA"]
[Wed Mar 25 00:08:09.402973 2026] [:error] [pid 64198:tid 64211] [client 20.63.96.180:43781] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acK26XVzJqf6OS_oSZ39QQAAAUs"]
[Wed Mar 25 00:08:09.890696 2026] [:error] [pid 64198:tid 64214] [client 20.63.96.180:43868] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "acK26XVzJqf6OS_oSZ39QgAAAU4"]
[Wed Mar 25 00:08:10.320895 2026] [:error] [pid 3031:tid 3092] [client 20.63.96.180:43776] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK26qJBKytnG47nuiZJlgAAAFA"]
[Wed Mar 25 00:08:10.737144 2026] [:error] [pid 64198:tid 64224] [client 20.63.96.180:43987] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK26nVzJqf6OS_oSZ39QwAAAVg"]
[Wed Mar 25 00:08:11.389122 2026] [:error] [pid 48214:tid 48255] [client 20.63.96.180:43974] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK267eshLWZ3uUDHKmRCgAAAcM"]
[Wed Mar 25 00:08:11.927868 2026] [:error] [pid 48214:tid 48261] [client 20.63.96.180:43894] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "acK267eshLWZ3uUDHKmRCwAAAck"]
[Wed Mar 25 00:08:12.388314 2026] [:error] [pid 48214:tid 48265] [client 20.63.96.180:43808] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acK27LeshLWZ3uUDHKmRDAAAAc0"]
[Wed Mar 25 00:08:12.816597 2026] [:error] [pid 48128:tid 48154] [client 20.63.96.180:43805] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acK27MvR4LIMFLbM5VlNIgAAAYU"]
[Wed Mar 25 00:08:13.277339 2026] [:error] [pid 48214:tid 48272] [client 20.63.96.180:43801] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acK27beshLWZ3uUDHKmREgAAAdQ"]
[Wed Mar 25 00:08:13.922178 2026] [:error] [pid 3032:tid 3113] [client 20.63.96.180:43973] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "acK27Sa_-JXXD03-JNxyuwAAAIo"]
[Wed Mar 25 00:08:14.573361 2026] [proxy_fcgi:error] [pid 48128:tid 48166] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:14.994408 2026] [proxy_fcgi:error] [pid 48128:tid 48151] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:15.207420 2026] [proxy_fcgi:error] [pid 48128:tid 48170] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:15.417787 2026] [proxy_fcgi:error] [pid 48128:tid 48158] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:15.628864 2026] [proxy_fcgi:error] [pid 48128:tid 48156] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:15.840092 2026] [proxy_fcgi:error] [pid 48128:tid 48172] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:16.050039 2026] [proxy_fcgi:error] [pid 48128:tid 48165] [client 20.63.96.180:43945] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:08:17.951083 2026] [:error] [pid 48128:tid 48149] [client 20.63.96.180:43945] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acK28cvR4LIMFLbM5VlNMwAAAYA"]
[Wed Mar 25 00:08:18.398894 2026] [:error] [pid 3137:tid 3143] [client 20.63.96.180:43857] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acK28pdZesutm6dfYM-B9wAAAMQ"]
[Wed Mar 25 00:08:19.267275 2026] [:error] [pid 3030:tid 3055] [client 20.63.96.180:43961] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acK28wyOuILyynfcqfl2RwAAAAY"]
[Wed Mar 25 00:08:19.689036 2026] [:error] [pid 3137:tid 3149] [client 20.63.96.180:43929] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acK285dZesutm6dfYM-B-wAAAMo"]
[Wed Mar 25 00:08:20.105124 2026] [:error] [pid 3030:tid 3050] [client 20.63.96.180:43981] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acK29AyOuILyynfcqfl2SAAAAAE"]
[Wed Mar 25 00:08:20.517145 2026] [:error] [pid 3030:tid 3067] [client 20.63.96.180:43931] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acK29AyOuILyynfcqfl2SQAAABI"]
[Wed Mar 25 00:08:21.074660 2026] [:error] [pid 48219:tid 48285] [client 20.63.96.180:43884] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acK29Shf3b4R_lAIyv-vmAAAAgQ"]
[Wed Mar 25 00:08:21.525882 2026] [:error] [pid 64198:tid 64221] [client 20.63.96.180:43870] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acK29XVzJqf6OS_oSZ39VgAAAVU"]
[Wed Mar 25 00:08:22.001848 2026] [:error] [pid 64198:tid 64215] [client 20.63.96.180:43950] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "acK29nVzJqf6OS_oSZ39VwAAAU8"]
[Wed Mar 25 00:08:22.429528 2026] [:error] [pid 3137:tid 3150] [client 20.63.96.180:43878] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "acK29pdZesutm6dfYM-CAQAAAMs"]
[Wed Mar 25 00:08:22.900206 2026] [:error] [pid 38767:tid 38778] [client 20.63.96.180:43893] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "acK29vwkUqN4GJAI5oWPiAAAAQg"]
[Wed Mar 25 00:08:23.321868 2026] [:error] [pid 3137:tid 3151] [client 20.63.96.180:43851] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/manager.php"] [unique_id "acK295dZesutm6dfYM-CAwAAAMw"]
[Wed Mar 25 00:08:24.024565 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43844] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/item.php"] [unique_id "acK2-PwkUqN4GJAI5oWPiQAAARA"]
[Wed Mar 25 00:08:24.437611 2026] [:error] [pid 3137:tid 3141] [client 20.63.96.180:43820] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/item.php"] [unique_id "acK2-JdZesutm6dfYM-CBwAAAMI"]
[Wed Mar 25 00:08:24.888300 2026] [:error] [pid 48214:tid 48252] [client 20.63.96.180:44022] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/item.php"] [unique_id "acK2-LeshLWZ3uUDHKmRRAAAAcA"]
[Wed Mar 25 00:08:25.369600 2026] [:error] [pid 3032:tid 3123] [client 20.63.96.180:43912] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/item.php"] [unique_id "acK2-Sa_-JXXD03-JNxyvgAAAJQ"]
[Wed Mar 25 00:08:25.785889 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43943] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acK2-fwkUqN4GJAI5oWPjgAAAQY"]
[Wed Mar 25 00:08:26.213926 2026] [:error] [pid 38767:tid 38781] [client 20.63.96.180:43881] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acK2-vwkUqN4GJAI5oWPkAAAAQs"]
[Wed Mar 25 00:08:26.629401 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:43877] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acK2-vwkUqN4GJAI5oWPlQAAAQU"]
[Wed Mar 25 00:08:27.217117 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43895] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acK2-_wkUqN4GJAI5oWPmAAAARY"]
[Wed Mar 25 00:08:27.700352 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43902] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK2-_wkUqN4GJAI5oWPmwAAARA"]
[Wed Mar 25 00:08:28.127593 2026] [:error] [pid 3137:tid 3163] [client 20.63.96.180:43896] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK2_JdZesutm6dfYM-CEQAAANg"]
[Wed Mar 25 00:08:28.549887 2026] [:error] [pid 3137:tid 3162] [client 20.63.96.180:43996] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK2_JdZesutm6dfYM-CEwAAANc"]
[Wed Mar 25 00:08:29.010973 2026] [:error] [pid 48219:tid 48303] [client 20.63.96.180:43846] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "acK2_Shf3b4R_lAIyv-vnwAAAhY"]
[Wed Mar 25 00:08:29.566215 2026] [:error] [pid 48219:tid 48301] [client 20.63.96.180:43979] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "acK2_Shf3b4R_lAIyv-vogAAAhQ"]
[Wed Mar 25 00:08:29.984314 2026] [:error] [pid 64198:tid 64223] [client 20.63.96.180:43898] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "acK2_XVzJqf6OS_oSZ39XgAAAVc"]
[Wed Mar 25 00:08:30.399294 2026] [:error] [pid 48214:tid 48263] [client 20.63.96.180:43885] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "acK2_reshLWZ3uUDHKmRRwAAAcs"]
[Wed Mar 25 00:08:30.825462 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:44006] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "acK2_vwkUqN4GJAI5oWPnwAAAQw"]
[Wed Mar 25 00:08:31.430578 2026] [:error] [pid 38767:tid 38780] [client 20.63.96.180:43975] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acK2__wkUqN4GJAI5oWPogAAAQo"]
[Wed Mar 25 00:08:31.873462 2026] [:error] [pid 3031:tid 3081] [client 20.63.96.180:43806] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acK2_6JBKytnG47nuiZJnwAAAEU"]
[Wed Mar 25 00:08:32.308520 2026] [:error] [pid 48128:tid 48162] [client 20.63.96.180:43942] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acK3AMvR4LIMFLbM5VlNNAAAAYo"]
[Wed Mar 25 00:08:32.744311 2026] [:error] [pid 3031:tid 3079] [client 20.63.96.180:43967] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acK3AKJBKytnG47nuiZJoAAAAEM"]
[Wed Mar 25 00:08:33.302515 2026] [:error] [pid 38767:tid 38779] [client 20.63.96.180:43960] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sx.php"] [unique_id "acK3AfwkUqN4GJAI5oWPqQAAAQk"]
[Wed Mar 25 00:08:33.732034 2026] [:error] [pid 3137:tid 3155] [client 20.63.96.180:44003] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sx.php"] [unique_id "acK3AZdZesutm6dfYM-CGgAAANA"]
[Wed Mar 25 00:08:34.145243 2026] [:error] [pid 64198:tid 64216] [client 20.63.96.180:43856] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sx.php"] [unique_id "acK3AnVzJqf6OS_oSZ39YwAAAVA"]
[Wed Mar 25 00:08:34.595860 2026] [:error] [pid 48219:tid 48305] [client 20.63.96.180:43854] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sx.php"] [unique_id "acK3Aihf3b4R_lAIyv-vpQAAAhg"]
[Wed Mar 25 00:08:35.018589 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:43955] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acK3A_wkUqN4GJAI5oWPrgAAAQU"]
[Wed Mar 25 00:08:35.431399 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43817] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acK3A_wkUqN4GJAI5oWPsAAAAQw"]
[Wed Mar 25 00:08:35.910269 2026] [:error] [pid 48214:tid 48265] [client 20.63.96.180:43871] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acK3A7eshLWZ3uUDHKmRTwAAAc0"]
[Wed Mar 25 00:08:36.344604 2026] [:error] [pid 38767:tid 38780] [client 20.63.96.180:43777] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acK3BPwkUqN4GJAI5oWPsQAAAQo"]
[Wed Mar 25 00:08:36.771341 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43795] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "acK3BPwkUqN4GJAI5oWPsgAAARY"]
[Wed Mar 25 00:08:37.316950 2026] [:error] [pid 64198:tid 64219] [client 20.63.96.180:43879] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "acK3BXVzJqf6OS_oSZ39aQAAAVM"]
[Wed Mar 25 00:08:37.730100 2026] [:error] [pid 64198:tid 64213] [client 20.63.96.180:43964] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "acK3BXVzJqf6OS_oSZ39awAAAU0"]
[Wed Mar 25 00:08:38.153944 2026] [:error] [pid 3137:tid 3162] [client 20.63.96.180:43786] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "acK3BpdZesutm6dfYM-CHAAAANc"]
[Wed Mar 25 00:08:38.579153 2026] [:error] [pid 64198:tid 64224] [client 20.63.96.180:43958] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acK3BnVzJqf6OS_oSZ39bgAAAVg"]
[Wed Mar 25 00:08:39.003190 2026] [:error] [pid 3137:tid 3161] [client 20.63.96.180:43899] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acK3B5dZesutm6dfYM-CHwAAANY"]
[Wed Mar 25 00:08:39.417070 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43861] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acK3B5dZesutm6dfYM-CIQAAAM0"]
[Wed Mar 25 00:08:39.838870 2026] [:error] [pid 3137:tid 3141] [client 20.63.96.180:43923] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acK3B5dZesutm6dfYM-CIwAAAMI"]
[Wed Mar 25 00:08:40.253103 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43883] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "acK3CJdZesutm6dfYM-CJAAAAM8"]
[Wed Mar 25 00:08:45.235622 2026] [:error] [pid 64198:tid 64215] [client 20.63.96.180:43892] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "acK3DXVzJqf6OS_oSZ39dQAAAU8"]
[Wed Mar 25 00:08:46.090819 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43807] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "acK3DvwkUqN4GJAI5oWPvQAAAQw"]
[Wed Mar 25 00:08:46.514246 2026] [:error] [pid 38767:tid 38794] [client 20.63.96.180:43853] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp.php"] [unique_id "acK3DvwkUqN4GJAI5oWPwwAAARg"]
[Wed Mar 25 00:08:46.933951 2026] [:error] [pid 38767:tid 38785] [client 20.63.96.180:43823] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "acK3DvwkUqN4GJAI5oWPxQAAAQ8"]
[Wed Mar 25 00:08:47.603722 2026] [:error] [pid 3137:tid 3142] [client 20.63.96.180:43720] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "acK3D5dZesutm6dfYM-CPwAAAMM"]
[Wed Mar 25 00:08:48.019373 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43804] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "acK3EPwkUqN4GJAI5oWPyQAAAQw"]
[Wed Mar 25 00:08:48.448866 2026] [:error] [pid 38767:tid 38783] [client 20.63.96.180:43794] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "acK3EPwkUqN4GJAI5oWPzAAAAQ0"]
[Wed Mar 25 00:08:48.887207 2026] [:error] [pid 64198:tid 64204] [client 20.63.96.180:43816] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "acK3EHVzJqf6OS_oSZ39dwAAAUQ"]
[Wed Mar 25 00:08:49.310005 2026] [:error] [pid 3137:tid 3153] [client 20.63.96.180:43953] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "acK3EZdZesutm6dfYM-CQQAAAM4"]
[Wed Mar 25 00:08:49.792435 2026] [:error] [pid 64198:tid 64223] [client 20.63.96.180:43789] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "acK3EXVzJqf6OS_oSZ39ewAAAVc"]
[Wed Mar 25 00:08:50.222501 2026] [:error] [pid 3137:tid 3146] [client 20.63.96.180:43903] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "acK3EpdZesutm6dfYM-CRAAAAMc"]
[Wed Mar 25 00:08:50.636773 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43792] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acK3EpdZesutm6dfYM-CRwAAANE"]
[Wed Mar 25 00:08:51.051859 2026] [:error] [pid 3137:tid 3159] [client 20.63.96.180:43997] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acK3E5dZesutm6dfYM-CSgAAANQ"]
[Wed Mar 25 00:08:51.473626 2026] [:error] [pid 64198:tid 64205] [client 20.63.96.180:43758] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acK3E3VzJqf6OS_oSZ39fwAAAUU"]
[Wed Mar 25 00:08:51.897811 2026] [:error] [pid 3137:tid 3158] [client 20.63.96.180:43809] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acK3E5dZesutm6dfYM-CTQAAANM"]
[Wed Mar 25 00:08:52.314483 2026] [:error] [pid 3137:tid 3150] [client 20.63.96.180:43901] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/about.php"] [unique_id "acK3FJdZesutm6dfYM-CUAAAAMs"]
[Wed Mar 25 00:08:52.796155 2026] [:error] [pid 3137:tid 3153] [client 20.63.96.180:43897] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/about.php"] [unique_id "acK3FJdZesutm6dfYM-CUwAAAM4"]
[Wed Mar 25 00:08:53.210985 2026] [:error] [pid 48219:tid 48292] [client 20.63.96.180:43790] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/about.php"] [unique_id "acK3FShf3b4R_lAIyv-vsAAAAgs"]
[Wed Mar 25 00:08:53.638107 2026] [:error] [pid 48214:tid 48271] [client 20.63.96.180:43793] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/about.php"] [unique_id "acK3FbeshLWZ3uUDHKmRVQAAAdM"]
[Wed Mar 25 00:08:54.101104 2026] [:error] [pid 48219:tid 48285] [client 20.63.96.180:43946] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acK3Fihf3b4R_lAIyv-vtQAAAgQ"]
[Wed Mar 25 00:08:54.543399 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43751] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acK3FpdZesutm6dfYM-CWwAAAM0"]
[Wed Mar 25 00:08:54.981051 2026] [:error] [pid 3137:tid 3145] [client 20.63.96.180:43802] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acK3FpdZesutm6dfYM-CYAAAAMY"]
[Wed Mar 25 00:08:55.420358 2026] [:error] [pid 3137:tid 3161] [client 20.63.96.180:43799] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acK3F5dZesutm6dfYM-CYgAAANY"]
[Wed Mar 25 00:08:55.850352 2026] [:error] [pid 48219:tid 48294] [client 20.63.96.180:43737] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acK3Fyhf3b4R_lAIyv-vtwAAAg0"]
[Wed Mar 25 00:08:56.268823 2026] [:error] [pid 3137:tid 3144] [client 20.63.96.180:43740] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/index.php"] [unique_id "acK3GJdZesutm6dfYM-CZQAAAMU"]
[Wed Mar 25 00:08:56.690631 2026] [:error] [pid 48214:tid 48270] [client 20.63.96.180:43963] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/index.php"] [unique_id "acK3GLeshLWZ3uUDHKmRVgAAAdI"]
[Wed Mar 25 00:08:57.137751 2026] [:error] [pid 3137:tid 3148] [client 20.63.96.180:43888] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/index.php"] [unique_id "acK3GZdZesutm6dfYM-CawAAAMk"]
[Wed Mar 25 00:08:57.573365 2026] [:error] [pid 48214:tid 48260] [client 20.63.96.180:43873] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/index.php"] [unique_id "acK3GbeshLWZ3uUDHKmRVwAAAcg"]
[Wed Mar 25 00:08:58.016762 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43780] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acK3GvwkUqN4GJAI5oWP2gAAAQY"]
[Wed Mar 25 00:08:58.469567 2026] [:error] [pid 64198:tid 64221] [client 20.63.96.180:43812] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acK3GnVzJqf6OS_oSZ39hAAAAVU"]
[Wed Mar 25 00:08:58.883751 2026] [:error] [pid 64198:tid 64207] [client 20.63.96.180:43725] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acK3GnVzJqf6OS_oSZ39hQAAAUc"]
[Wed Mar 25 00:08:59.313866 2026] [:error] [pid 38767:tid 38789] [client 20.63.96.180:43811] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acK3G_wkUqN4GJAI5oWP3AAAARM"]
[Wed Mar 25 00:08:59.865157 2026] [:error] [pid 3137:tid 3140] [client 20.63.96.180:43936] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acK3G5dZesutm6dfYM-CcQAAAME"]
[Wed Mar 25 00:09:00.489130 2026] [:error] [pid 3137:tid 3155] [client 20.63.96.180:43875] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acK3HJdZesutm6dfYM-CdAAAANA"]
[Wed Mar 25 00:09:00.993158 2026] [:error] [pid 3137:tid 3146] [client 20.63.96.180:43722] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acK3HJdZesutm6dfYM-CdgAAAMc"]
[Wed Mar 25 00:09:01.513460 2026] [:error] [pid 3137:tid 3150] [client 20.63.96.180:43715] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acK3HZdZesutm6dfYM-CeQAAAMs"]
[Wed Mar 25 00:09:02.253866 2026] [:error] [pid 64198:tid 64212] [client 20.63.96.180:43914] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acK3HnVzJqf6OS_oSZ39iwAAAUw"]
[Wed Mar 25 00:09:02.673379 2026] [:error] [pid 38767:tid 38783] [client 20.63.96.180:43732] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acK3HvwkUqN4GJAI5oWP3QAAAQ0"]
[Wed Mar 25 00:09:03.087783 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43747] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acK3H5dZesutm6dfYM-CgAAAAM8"]
[Wed Mar 25 00:09:03.557926 2026] [:error] [pid 3137:tid 3140] [client 20.63.96.180:43810] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acK3H5dZesutm6dfYM-CgwAAAME"]
[Wed Mar 25 00:09:03.973024 2026] [:error] [pid 64198:tid 64219] [client 20.63.96.180:43838] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acK3H3VzJqf6OS_oSZ39jQAAAVM"]
[Wed Mar 25 00:09:04.446971 2026] [:error] [pid 64198:tid 64215] [client 20.63.96.180:43778] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acK3IHVzJqf6OS_oSZ39kQAAAU8"]
[Wed Mar 25 00:09:04.865140 2026] [:error] [pid 3137:tid 3142] [client 20.63.96.180:43784] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "acK3IJdZesutm6dfYM-CiAAAAMM"]
[Wed Mar 25 00:09:05.425409 2026] [:error] [pid 38767:tid 38787] [client 20.63.96.180:43933] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "acK3IfwkUqN4GJAI5oWP3wAAARE"]
[Wed Mar 25 00:09:05.843867 2026] [:error] [pid 48219:tid 48289] [client 20.63.96.180:43750] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "acK3IShf3b4R_lAIyv-vwAAAAgg"]
[Wed Mar 25 00:09:06.326497 2026] [:error] [pid 38767:tid 38774] [client 20.63.96.180:43779] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acK3IvwkUqN4GJAI5oWP4gAAAQQ"]
[Wed Mar 25 00:09:06.762597 2026] [:error] [pid 3137:tid 3146] [client 20.63.96.180:43713] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acK3IpdZesutm6dfYM-CjAAAAMc"]
[Wed Mar 25 00:09:07.224166 2026] [:error] [pid 48214:tid 48258] [client 20.63.96.180:43826] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acK3I7eshLWZ3uUDHKmRWgAAAcY"]
[Wed Mar 25 00:09:07.653444 2026] [:error] [pid 48214:tid 48261] [client 20.63.96.180:43664] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acK3I7eshLWZ3uUDHKmRWwAAAck"]
[Wed Mar 25 00:09:08.114115 2026] [:error] [pid 48128:tid 48169] [client 20.63.96.180:43839] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acK3JMvR4LIMFLbM5VlNNwAAAZA"]
[Wed Mar 25 00:09:08.574946 2026] [:error] [pid 3137:tid 3139] [client 20.63.96.180:43874] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "acK3JJdZesutm6dfYM-CjQAAAMA"]
[Wed Mar 25 00:09:09.001088 2026] [:error] [pid 3137:tid 3144] [client 20.63.96.180:43831] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "acK3JJdZesutm6dfYM-CjgAAAMU"]
[Wed Mar 25 00:09:09.425912 2026] [:error] [pid 64198:tid 64218] [client 20.63.96.180:43717] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "acK3JXVzJqf6OS_oSZ39lwAAAVI"]
[Wed Mar 25 00:09:09.840685 2026] [:error] [pid 3031:tid 3084] [client 20.63.96.180:43797] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww1.php"] [unique_id "acK3JaJBKytnG47nuiZJogAAAEg"]
[Wed Mar 25 00:09:10.280827 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43736] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/function.php"] [unique_id "acK3JpdZesutm6dfYM-ClAAAANE"]
[Wed Mar 25 00:09:10.700185 2026] [:error] [pid 3137:tid 3160] [client 20.63.96.180:43847] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/function.php"] [unique_id "acK3JpdZesutm6dfYM-CmAAAANU"]
[Wed Mar 25 00:09:11.157319 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43832] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/function.php"] [unique_id "acK3J5dZesutm6dfYM-CnQAAAM0"]
[Wed Mar 25 00:09:11.676888 2026] [:error] [pid 3137:tid 3160] [client 20.63.96.180:43726] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/function.php"] [unique_id "acK3J5dZesutm6dfYM-CnwAAANU"]
[Wed Mar 25 00:09:12.105164 2026] [:error] [pid 38767:tid 38791] [client 20.63.96.180:43719] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/function.php"] [unique_id "acK3KPwkUqN4GJAI5oWP5gAAARU"]
[Wed Mar 25 00:09:12.530026 2026] [:error] [pid 38767:tid 38778] [client 20.63.96.180:43995] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/function.php"] [unique_id "acK3KPwkUqN4GJAI5oWP6AAAAQg"]
[Wed Mar 25 00:09:12.973298 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43785] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/function.php"] [unique_id "acK3KJdZesutm6dfYM-CpAAAAM0"]
[Wed Mar 25 00:09:13.468950 2026] [:error] [pid 64198:tid 64200] [client 20.63.96.180:43835] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/function.php"] [unique_id "acK3KXVzJqf6OS_oSZ39mQAAAUA"]
[Wed Mar 25 00:09:13.908441 2026] [:error] [pid 64198:tid 64215] [client 20.63.96.180:43822] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acK3KXVzJqf6OS_oSZ39mwAAAU8"]
[Wed Mar 25 00:09:14.335089 2026] [:error] [pid 3137:tid 3158] [client 20.63.96.180:43845] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acK3KpdZesutm6dfYM-CqQAAANM"]
[Wed Mar 25 00:09:14.814947 2026] [:error] [pid 3032:tid 3108] [client 20.63.96.180:43824] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acK3Kia_-JXXD03-JNxyzAAAAIU"]
[Wed Mar 25 00:09:15.227345 2026] [:error] [pid 3137:tid 3140] [client 20.63.96.180:43733] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acK3K5dZesutm6dfYM-CrQAAAME"]
[Wed Mar 25 00:09:15.654130 2026] [:error] [pid 48128:tid 48150] [client 20.63.96.180:43739] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acK3K8vR4LIMFLbM5VlNOAAAAYE"]
[Wed Mar 25 00:09:16.146501 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43733] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acK3LPwkUqN4GJAI5oWP7AAAARA"]
[Wed Mar 25 00:09:16.568647 2026] [:error] [pid 3137:tid 3163] [client 20.63.96.180:43954] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acK3LJdZesutm6dfYM-CsgAAANg"]
[Wed Mar 25 00:09:16.994917 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43653] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acK3LJdZesutm6dfYM-CswAAAM0"]
[Wed Mar 25 00:09:17.465079 2026] [proxy_fcgi:error] [pid 38767:tid 38779] [client 20.63.96.180:43665] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:09:18.303632 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43665] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acK3LvwkUqN4GJAI5oWP8gAAAQY"]
[Wed Mar 25 00:09:20.283883 2026] [:error] [pid 38767:tid 38790] [client 20.63.96.180:43834] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acK3MPwkUqN4GJAI5oWP_QAAARQ"]
[Wed Mar 25 00:09:20.790355 2026] [:error] [pid 3032:tid 3119] [client 20.63.96.180:43765] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acK3MCa_-JXXD03-JNxyzgAAAJA"]
[Wed Mar 25 00:09:21.209128 2026] [:error] [pid 48128:tid 48177] [client 20.63.96.180:43788] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acK3McvR4LIMFLbM5VlNOwAAAZg"]
[Wed Mar 25 00:09:21.641108 2026] [:error] [pid 3031:tid 3095] [client 20.63.96.180:43836] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "acK3MaJBKytnG47nuiZJowAAAFM"]
[Wed Mar 25 00:09:22.315558 2026] [:error] [pid 64198:tid 64216] [client 20.63.96.180:43886] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "acK3MnVzJqf6OS_oSZ39pwAAAVA"]
[Wed Mar 25 00:09:22.755953 2026] [:error] [pid 3137:tid 3142] [client 20.63.96.180:43829] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "acK3MpdZesutm6dfYM-CvQAAAMM"]
[Wed Mar 25 00:09:23.177711 2026] [:error] [pid 3137:tid 3143] [client 20.63.96.180:43727] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "acK3M5dZesutm6dfYM-CvgAAAMQ"]
[Wed Mar 25 00:09:23.600490 2026] [:error] [pid 38767:tid 38771] [client 20.63.96.180:43753] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "acK3M_wkUqN4GJAI5oWQAAAAAQE"]
[Wed Mar 25 00:09:24.042012 2026] [:error] [pid 48219:tid 48288] [client 20.63.96.180:43666] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acK3NChf3b4R_lAIyv-vxAAAAgc"]
[Wed Mar 25 00:09:24.479135 2026] [:error] [pid 38767:tid 38785] [client 20.63.96.180:43891] [client 20.63.96.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acK3NPwkUqN4GJAI5oWQBAAAAQ8"]
[Wed Mar 25 00:09:24.935914 2026] [:error] [pid 48219:tid 48301] [client 20.63.96.180:43729] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "acK3NChf3b4R_lAIyv-vxQAAAhQ"]
[Wed Mar 25 00:09:25.520035 2026] [:error] [pid 48219:tid 48292] [client 20.63.96.180:43693] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "acK3NShf3b4R_lAIyv-vxwAAAgs"]
[Wed Mar 25 00:09:25.940480 2026] [:error] [pid 3137:tid 3139] [client 20.63.96.180:43803] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "acK3NZdZesutm6dfYM-CwwAAAMA"]
[Wed Mar 25 00:09:26.360718 2026] [:error] [pid 48219:tid 48293] [client 20.63.96.180:43772] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acK3Nihf3b4R_lAIyv-vyAAAAgw"]
[Wed Mar 25 00:09:26.775691 2026] [:error] [pid 3137:tid 3160] [client 20.63.96.180:43734] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acK3NpdZesutm6dfYM-CxwAAANU"]
[Wed Mar 25 00:09:27.242005 2026] [:error] [pid 3137:tid 3155] [client 20.63.96.180:43819] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acK3N5dZesutm6dfYM-CywAAANA"]
[Wed Mar 25 00:09:27.670826 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43658] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acK3N5dZesutm6dfYM-CzQAAAM8"]
[Wed Mar 25 00:09:28.085411 2026] [:error] [pid 48219:tid 48284] [client 20.63.96.180:43754] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o1.php"] [unique_id "acK3OChf3b4R_lAIyv-vyQAAAgM"]
[Wed Mar 25 00:09:28.535047 2026] [:error] [pid 38767:tid 38787] [client 20.63.96.180:43783] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o1.php"] [unique_id "acK3OPwkUqN4GJAI5oWQCgAAARE"]
[Wed Mar 25 00:09:28.982907 2026] [:error] [pid 48219:tid 48281] [client 20.63.96.180:43837] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o1.php"] [unique_id "acK3OChf3b4R_lAIyv-vzQAAAgA"]
[Wed Mar 25 00:09:29.457289 2026] [:error] [pid 3030:tid 3062] [client 20.63.96.180:43889] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o1.php"] [unique_id "acK3OQyOuILyynfcqfl2WgAAAA0"]
[Wed Mar 25 00:09:29.906845 2026] [:error] [pid 3030:tid 3064] [client 20.63.96.180:43830] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/juuuu.php"] [unique_id "acK3OQyOuILyynfcqfl2WwAAAA8"]
[Wed Mar 25 00:09:30.350723 2026] [:error] [pid 38767:tid 38784] [client 20.63.96.180:43813] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/juuuu.php"] [unique_id "acK3OvwkUqN4GJAI5oWQDAAAAQ4"]
[Wed Mar 25 00:09:30.884964 2026] [:error] [pid 48128:tid 48176] [client 20.63.96.180:43869] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/juuuu.php"] [unique_id "acK3OsvR4LIMFLbM5VlNPgAAAZc"]
[Wed Mar 25 00:09:31.507690 2026] [:error] [pid 3137:tid 3141] [client 20.63.96.180:43827] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/juuuu.php"] [unique_id "acK3O5dZesutm6dfYM-C1AAAAMI"]
[Wed Mar 25 00:09:31.931035 2026] [:error] [pid 64198:tid 64205] [client 20.63.96.180:43660] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ha.php"] [unique_id "acK3O3VzJqf6OS_oSZ39rQAAAUU"]
[Wed Mar 25 00:09:32.384723 2026] [:error] [pid 64198:tid 64218] [client 20.63.96.180:43712] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ha.php"] [unique_id "acK3PHVzJqf6OS_oSZ39sAAAAVI"]
[Wed Mar 25 00:09:32.807982 2026] [:error] [pid 48219:tid 48291] [client 20.63.96.180:43671] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ha.php"] [unique_id "acK3PChf3b4R_lAIyv-vzwAAAgo"]
[Wed Mar 25 00:09:33.248283 2026] [:error] [pid 38767:tid 38791] [client 20.63.96.180:43697] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ha.php"] [unique_id "acK3PfwkUqN4GJAI5oWQEAAAARU"]
[Wed Mar 25 00:09:33.793107 2026] [:error] [pid 3032:tid 3124] [client 20.63.96.180:43782] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gg.php"] [unique_id "acK3PSa_-JXXD03-JNxy0QAAAJU"]
[Wed Mar 25 00:09:34.223440 2026] [:error] [pid 3030:tid 3068] [client 20.63.96.180:43814] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gg.php"] [unique_id "acK3PgyOuILyynfcqfl2XgAAABM"]
[Wed Mar 25 00:09:34.670689 2026] [:error] [pid 3032:tid 3114] [client 20.63.96.180:43703] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gg.php"] [unique_id "acK3Pia_-JXXD03-JNxy0gAAAIs"]
[Wed Mar 25 00:09:35.107846 2026] [:error] [pid 3030:tid 3063] [client 20.63.96.180:43757] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gg.php"] [unique_id "acK3PwyOuILyynfcqfl2YAAAAA4"]
[Wed Mar 25 00:09:35.533315 2026] [:error] [pid 48214:tid 48275] [client 20.63.96.180:43656] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acK3P7eshLWZ3uUDHKmRZgAAAdc"]
[Wed Mar 25 00:09:35.954232 2026] [:error] [pid 64198:tid 64214] [client 20.63.96.180:43800] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acK3P3VzJqf6OS_oSZ39sQAAAU4"]
[Wed Mar 25 00:09:36.370455 2026] [:error] [pid 64198:tid 64212] [client 20.63.96.180:43675] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acK3QHVzJqf6OS_oSZ39tAAAAUw"]
[Wed Mar 25 00:09:36.971390 2026] [:error] [pid 48219:tid 48297] [client 20.63.96.180:43730] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acK3QChf3b4R_lAIyv-v0wAAAhA"]
[Wed Mar 25 00:09:37.394180 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:43721] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acK3QfwkUqN4GJAI5oWQFgAAAQU"]
[Wed Mar 25 00:09:37.974572 2026] [:error] [pid 38767:tid 38771] [client 20.63.96.180:43659] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acK3QfwkUqN4GJAI5oWQGAAAAQE"]
[Wed Mar 25 00:09:38.566336 2026] [:error] [pid 48219:tid 48305] [client 20.63.96.180:43762] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acK3Qihf3b4R_lAIyv-v1gAAAhg"]
[Wed Mar 25 00:09:38.982480 2026] [:error] [pid 3032:tid 3112] [client 20.63.96.180:43769] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acK3Qia_-JXXD03-JNxy2QAAAIk"]
[Wed Mar 25 00:09:39.403363 2026] [:error] [pid 3032:tid 3110] [client 20.63.96.180:43756] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acK3Qya_-JXXD03-JNxy2gAAAIc"]
[Wed Mar 25 00:09:39.831311 2026] [:error] [pid 48219:tid 48298] [client 20.63.96.180:43723] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acK3Qyhf3b4R_lAIyv-v2wAAAhE"]
[Wed Mar 25 00:09:40.261055 2026] [:error] [pid 48219:tid 48290] [client 20.63.96.180:43815] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acK3RChf3b4R_lAIyv-v3AAAAgk"]
[Wed Mar 25 00:09:40.687997 2026] [:error] [pid 48219:tid 48289] [client 20.63.96.180:43695] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acK3RChf3b4R_lAIyv-v3QAAAgg"]
[Wed Mar 25 00:09:41.307106 2026] [:error] [pid 3137:tid 3163] [client 20.63.96.180:43767] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acK3RZdZesutm6dfYM-DBQAAANg"]
[Wed Mar 25 00:09:41.729349 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43741] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acK3RfwkUqN4GJAI5oWQHAAAARY"]
[Wed Mar 25 00:09:42.154254 2026] [:error] [pid 3137:tid 3141] [client 20.63.96.180:43770] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acK3RpdZesutm6dfYM-DDQAAAMI"]
[Wed Mar 25 00:09:42.576706 2026] [:error] [pid 3137:tid 3157] [client 20.63.96.180:43825] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/520.php"] [unique_id "acK3RpdZesutm6dfYM-DEQAAANI"]
[Wed Mar 25 00:09:43.001781 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:43744] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acK3R_wkUqN4GJAI5oWQHwAAAQU"]
[Wed Mar 25 00:09:43.482301 2026] [:error] [pid 38767:tid 38773] [client 20.63.96.180:43731] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acK3R_wkUqN4GJAI5oWQIQAAAQM"]
[Wed Mar 25 00:09:43.903875 2026] [:error] [pid 38767:tid 38786] [client 20.63.96.180:43701] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acK3R_wkUqN4GJAI5oWQJQAAARA"]
[Wed Mar 25 00:09:44.320166 2026] [:error] [pid 38767:tid 38794] [client 20.63.96.180:43828] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ar.php"] [unique_id "acK3SPwkUqN4GJAI5oWQKQAAARg"]
[Wed Mar 25 00:09:44.762400 2026] [:error] [pid 48214:tid 48265] [client 20.63.96.180:43728] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "acK3SLeshLWZ3uUDHKmRaQAAAc0"]
[Wed Mar 25 00:09:45.196813 2026] [:error] [pid 64198:tid 64214] [client 20.63.96.180:43746] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "acK3SXVzJqf6OS_oSZ39uwAAAU4"]
[Wed Mar 25 00:09:45.704879 2026] [:error] [pid 48128:tid 48149] [client 20.63.96.180:43763] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "acK3ScvR4LIMFLbM5VlNQAAAAYA"]
[Wed Mar 25 00:09:46.249795 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43761] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "acK3SvwkUqN4GJAI5oWQKwAAAQw"]
[Wed Mar 25 00:09:46.792896 2026] [:error] [pid 64198:tid 64212] [client 20.63.96.180:43842] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "acK3SnVzJqf6OS_oSZ39vQAAAUw"]
[Wed Mar 25 00:09:47.328775 2026] [:error] [pid 38767:tid 38790] [client 20.63.96.180:43650] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "acK3S_wkUqN4GJAI5oWQLwAAARQ"]
[Wed Mar 25 00:09:47.887402 2026] [:error] [pid 38767:tid 38774] [client 20.63.96.180:43718] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "acK3S_wkUqN4GJAI5oWQMgAAAQQ"]
[Wed Mar 25 00:09:48.484828 2026] [:error] [pid 64198:tid 64211] [client 20.63.96.180:43774] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "acK3THVzJqf6OS_oSZ39wAAAAUs"]
[Wed Mar 25 00:09:48.913361 2026] [:error] [pid 38767:tid 38787] [client 20.63.96.180:43614] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass4.php"] [unique_id "acK3TPwkUqN4GJAI5oWQNAAAARE"]
[Wed Mar 25 00:09:49.338938 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43670] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass4.php"] [unique_id "acK3TZdZesutm6dfYM-DIwAAAM8"]
[Wed Mar 25 00:09:49.761732 2026] [:error] [pid 3137:tid 3159] [client 20.63.96.180:43603] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass4.php"] [unique_id "acK3TZdZesutm6dfYM-DJAAAANQ"]
[Wed Mar 25 00:09:50.250377 2026] [:error] [pid 3137:tid 3142] [client 20.63.96.180:43791] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass4.php"] [unique_id "acK3TpdZesutm6dfYM-DJwAAAMM"]
[Wed Mar 25 00:09:50.696093 2026] [:error] [pid 3137:tid 3143] [client 20.63.96.180:43716] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acK3TpdZesutm6dfYM-DKQAAAMQ"]
[Wed Mar 25 00:09:51.164795 2026] [:error] [pid 3137:tid 3139] [client 20.63.96.180:43759] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acK3T5dZesutm6dfYM-DLAAAAMA"]
[Wed Mar 25 00:09:51.590570 2026] [:error] [pid 3137:tid 3151] [client 20.63.96.180:43652] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acK3T5dZesutm6dfYM-DMAAAAMw"]
[Wed Mar 25 00:09:52.033472 2026] [:error] [pid 3137:tid 3155] [client 20.63.96.180:43648] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2clas.php"] [unique_id "acK3UJdZesutm6dfYM-DMgAAANA"]
[Wed Mar 25 00:09:52.454035 2026] [:error] [pid 64198:tid 64205] [client 20.63.96.180:43735] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ave.php"] [unique_id "acK3UHVzJqf6OS_oSZ39xQAAAUU"]
[Wed Mar 25 00:09:52.874184 2026] [:error] [pid 64198:tid 64206] [client 20.63.96.180:43982] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ave.php"] [unique_id "acK3UHVzJqf6OS_oSZ39xwAAAUY"]
[Wed Mar 25 00:09:53.302336 2026] [:error] [pid 48214:tid 48261] [client 20.63.96.180:43775] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ave.php"] [unique_id "acK3UbeshLWZ3uUDHKmRcQAAAck"]
[Wed Mar 25 00:09:53.790761 2026] [:error] [pid 48214:tid 48259] [client 20.63.96.180:43634] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ave.php"] [unique_id "acK3UbeshLWZ3uUDHKmRcgAAAcc"]
[Wed Mar 25 00:09:54.225756 2026] [:error] [pid 3032:tid 3118] [client 20.63.96.180:43678] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wrt.php"] [unique_id "acK3Uia_-JXXD03-JNxy3gAAAI8"]
[Wed Mar 25 00:09:54.677511 2026] [:error] [pid 48219:tid 48287] [client 20.63.96.180:43668] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wrt.php"] [unique_id "acK3Uihf3b4R_lAIyv-v6QAAAgY"]
[Wed Mar 25 00:09:55.104929 2026] [:error] [pid 38767:tid 38785] [client 20.63.96.180:43743] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wrt.php"] [unique_id "acK3U_wkUqN4GJAI5oWQQwAAAQ8"]
[Wed Mar 25 00:09:55.528824 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43706] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wrt.php"] [unique_id "acK3U5dZesutm6dfYM-DNQAAAM0"]
[Wed Mar 25 00:09:55.967666 2026] [:error] [pid 3137:tid 3141] [client 20.63.96.180:43669] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bibil.php"] [unique_id "acK3U5dZesutm6dfYM-DNwAAAMI"]
[Wed Mar 25 00:09:56.380920 2026] [:error] [pid 3032:tid 3111] [client 20.63.96.180:43742] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bibil.php"] [unique_id "acK3VCa_-JXXD03-JNxy3wAAAIg"]
[Wed Mar 25 00:09:57.017741 2026] [:error] [pid 3137:tid 3154] [client 20.63.96.180:43661] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bibil.php"] [unique_id "acK3VZdZesutm6dfYM-DPQAAAM8"]
[Wed Mar 25 00:09:57.432998 2026] [:error] [pid 38767:tid 38776] [client 20.63.96.180:43586] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bibil.php"] [unique_id "acK3VfwkUqN4GJAI5oWQRAAAAQY"]
[Wed Mar 25 00:09:57.865047 2026] [:error] [pid 38767:tid 38782] [client 20.63.96.180:43649] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/radio.php"] [unique_id "acK3VfwkUqN4GJAI5oWQRwAAAQw"]
[Wed Mar 25 00:09:58.408351 2026] [:error] [pid 38767:tid 38773] [client 20.63.96.180:43618] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/radio.php"] [unique_id "acK3VvwkUqN4GJAI5oWQSwAAAQM"]
[Wed Mar 25 00:09:59.262588 2026] [:error] [pid 48128:tid 48154] [client 20.63.96.180:43655] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/radio.php"] [unique_id "acK3V8vR4LIMFLbM5VlNQwAAAYU"]
[Wed Mar 25 00:09:59.687519 2026] [:error] [pid 38767:tid 38775] [client 20.63.96.180:43764] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/radio.php"] [unique_id "acK3V_wkUqN4GJAI5oWQUwAAAQU"]
[Wed Mar 25 00:10:00.134799 2026] [:error] [pid 64198:tid 64209] [client 20.63.96.180:43860] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files.php"] [unique_id "acK3WHVzJqf6OS_oSZ39zQAAAUk"]
[Wed Mar 25 00:10:00.584662 2026] [:error] [pid 48128:tid 48167] [client 20.63.96.180:43662] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files.php"] [unique_id "acK3WMvR4LIMFLbM5VlNRgAAAY8"]
[Wed Mar 25 00:10:01.038306 2026] [:error] [pid 38767:tid 38774] [client 20.63.96.180:43692] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files.php"] [unique_id "acK3WfwkUqN4GJAI5oWQWAAAAQQ"]
[Wed Mar 25 00:10:01.571757 2026] [:error] [pid 38767:tid 38783] [client 20.63.96.180:43688] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files.php"] [unique_id "acK3WfwkUqN4GJAI5oWQWgAAAQ0"]
[Wed Mar 25 00:10:02.130967 2026] [:error] [pid 3032:tid 3113] [client 20.63.96.180:43672] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file7.php"] [unique_id "acK3Wia_-JXXD03-JNxy5AAAAIo"]
[Wed Mar 25 00:10:02.561843 2026] [:error] [pid 64198:tid 64206] [client 20.63.96.180:43591] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file7.php"] [unique_id "acK3WnVzJqf6OS_oSZ390wAAAUY"]
[Wed Mar 25 00:10:02.982837 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43677] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file7.php"] [unique_id "acK3WpdZesutm6dfYM-DQgAAANE"]
[Wed Mar 25 00:10:03.395742 2026] [:error] [pid 3030:tid 3052] [client 20.63.96.180:43705] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file7.php"] [unique_id "acK3WwyOuILyynfcqfl2ZwAAAAM"]
[Wed Mar 25 00:10:03.816984 2026] [:error] [pid 48128:tid 48152] [client 20.63.96.180:43686] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acK3W8vR4LIMFLbM5VlNRwAAAYM"]
[Wed Mar 25 00:10:04.271010 2026] [:error] [pid 3137:tid 3158] [client 20.63.96.180:43685] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acK3XJdZesutm6dfYM-DRgAAANM"]
[Wed Mar 25 00:10:04.694076 2026] [:error] [pid 3137:tid 3147] [client 20.63.96.180:43724] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acK3XJdZesutm6dfYM-DSQAAAMg"]
[Wed Mar 25 00:10:05.108212 2026] [:error] [pid 64198:tid 64201] [client 20.63.96.180:43796] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acK3XXVzJqf6OS_oSZ391AAAAUE"]
[Wed Mar 25 00:10:05.668333 2026] [:error] [pid 64198:tid 64218] [client 20.63.96.180:43750] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acK3XXVzJqf6OS_oSZ391gAAAVI"]
[Wed Mar 25 00:10:06.175203 2026] [:error] [pid 48219:tid 48283] [client 20.63.96.180:43624] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acK3Xihf3b4R_lAIyv-v6wAAAgI"]
[Wed Mar 25 00:10:06.591014 2026] [:error] [pid 48219:tid 48281] [client 20.63.96.180:43773] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acK3Xihf3b4R_lAIyv-v7QAAAgA"]
[Wed Mar 25 00:10:07.144379 2026] [:error] [pid 64198:tid 64222] [client 20.63.96.180:43657] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acK3X3VzJqf6OS_oSZ392gAAAVY"]
[Wed Mar 25 00:10:07.678432 2026] [:error] [pid 64198:tid 64203] [client 20.63.96.180:43602] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nox.php"] [unique_id "acK3X3VzJqf6OS_oSZ393AAAAUM"]
[Wed Mar 25 00:10:08.162734 2026] [:error] [pid 48219:tid 48304] [client 20.63.96.180:43679] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nox.php"] [unique_id "acK3YChf3b4R_lAIyv-v9QAAAhc"]
[Wed Mar 25 00:10:08.594627 2026] [:error] [pid 38767:tid 38778] [client 20.63.96.180:43654] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nox.php"] [unique_id "acK3YPwkUqN4GJAI5oWQYAAAAQg"]
[Wed Mar 25 00:10:09.039882 2026] [:error] [pid 3032:tid 3107] [client 20.63.96.180:43667] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nox.php"] [unique_id "acK3YSa_-JXXD03-JNxy6AAAAIQ"]
[Wed Mar 25 00:10:09.650400 2026] [:error] [pid 3030:tid 3054] [client 20.63.96.180:43755] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "acK3YQyOuILyynfcqfl2bAAAAAU"]
[Wed Mar 25 00:10:10.077844 2026] [:error] [pid 48219:tid 48294] [client 20.63.96.180:43687] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "acK3Yihf3b4R_lAIyv-v9wAAAg0"]
[Wed Mar 25 00:10:10.494442 2026] [:error] [pid 48214:tid 48254] [client 20.63.96.180:43680] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "acK3YreshLWZ3uUDHKmReQAAAcI"]
[Wed Mar 25 00:10:10.949527 2026] [:error] [pid 48214:tid 48264] [client 20.63.96.180:43707] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "acK3YreshLWZ3uUDHKmRegAAAcw"]
[Wed Mar 25 00:10:11.362148 2026] [:error] [pid 64198:tid 64213] [client 20.63.96.180:43595] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "acK3Y3VzJqf6OS_oSZ393gAAAU0"]
[Wed Mar 25 00:10:11.781121 2026] [:error] [pid 48219:tid 48282] [client 20.63.96.180:43766] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "acK3Yyhf3b4R_lAIyv-v_AAAAgE"]
[Wed Mar 25 00:10:12.200455 2026] [:error] [pid 48219:tid 48281] [client 20.63.96.180:43626] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "acK3ZChf3b4R_lAIyv-v_QAAAgA"]
[Wed Mar 25 00:10:12.639709 2026] [:error] [pid 64198:tid 64208] [client 20.63.96.180:43745] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "acK3ZHVzJqf6OS_oSZ394gAAAUg"]
[Wed Mar 25 00:10:13.060113 2026] [:error] [pid 64198:tid 64201] [client 20.63.96.180:43605] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class9.php"] [unique_id "acK3ZXVzJqf6OS_oSZ395AAAAUE"]
[Wed Mar 25 00:10:13.476761 2026] [:error] [pid 48219:tid 48286] [client 20.63.96.180:43598] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class9.php"] [unique_id "acK3ZShf3b4R_lAIyv-wAAAAAgU"]
[Wed Mar 25 00:10:13.900359 2026] [:error] [pid 48219:tid 48295] [client 20.63.96.180:43752] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class9.php"] [unique_id "acK3ZShf3b4R_lAIyv-wAwAAAg4"]
[Wed Mar 25 00:10:14.516282 2026] [:error] [pid 48214:tid 48258] [client 20.63.96.180:43625] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class9.php"] [unique_id "acK3ZreshLWZ3uUDHKmRfAAAAcY"]
[Wed Mar 25 00:10:14.995296 2026] [:error] [pid 48214:tid 48259] [client 20.63.96.180:43714] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/la.php"] [unique_id "acK3ZreshLWZ3uUDHKmRfQAAAcc"]
[Wed Mar 25 00:10:15.423201 2026] [:error] [pid 38767:tid 38792] [client 20.63.96.180:43590] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/la.php"] [unique_id "acK3Z_wkUqN4GJAI5oWQZwAAARY"]
[Wed Mar 25 00:10:15.884620 2026] [:error] [pid 38767:tid 38791] [client 20.63.96.180:43684] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/la.php"] [unique_id "acK3Z_wkUqN4GJAI5oWQaAAAARU"]
[Wed Mar 25 00:10:16.702982 2026] [:error] [pid 3031:tid 3098] [client 20.63.96.180:43584] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/la.php"] [unique_id "acK3aKJBKytnG47nuiZJqwAAAFY"]
[Wed Mar 25 00:10:17.295926 2026] [:error] [pid 3030:tid 3049] [client 20.63.96.180:43699] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acK3aQyOuILyynfcqfl2bgAAAAA"]
[Wed Mar 25 00:10:17.756181 2026] [:error] [pid 3031:tid 3084] [client 20.63.96.180:43709] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acK3aaJBKytnG47nuiZJrQAAAEg"]
[Wed Mar 25 00:10:18.185975 2026] [:error] [pid 3030:tid 3050] [client 20.63.96.180:43540] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acK3agyOuILyynfcqfl2cAAAAAE"]
[Wed Mar 25 00:10:18.855309 2026] [:error] [pid 64198:tid 64222] [client 20.63.96.180:43604] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless11.php"] [unique_id "acK3anVzJqf6OS_oSZ395gAAAVY"]
[Wed Mar 25 00:10:19.288581 2026] [:error] [pid 3030:tid 3073] [client 20.63.96.180:43676] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "acK3awyOuILyynfcqfl2cgAAABg"]
[Wed Mar 25 00:10:20.162417 2026] [proxy_fcgi:error] [pid 3031:tid 3086] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:20.374059 2026] [proxy_fcgi:error] [pid 3031:tid 3091] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:20.584229 2026] [proxy_fcgi:error] [pid 3031:tid 3085] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:20.793901 2026] [proxy_fcgi:error] [pid 3031:tid 3077] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:21.003730 2026] [proxy_fcgi:error] [pid 3031:tid 3082] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:21.216965 2026] [proxy_fcgi:error] [pid 3031:tid 3096] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:21.466911 2026] [proxy_fcgi:error] [pid 3031:tid 3090] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:21.721728 2026] [proxy_fcgi:error] [pid 3031:tid 3087] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:21.942722 2026] [proxy_fcgi:error] [pid 3031:tid 3094] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:22.265249 2026] [proxy_fcgi:error] [pid 3031:tid 3081] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:22.474754 2026] [proxy_fcgi:error] [pid 3031:tid 3097] [client 20.63.96.180:43760] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 00:10:22.702122 2026] [:error] [pid 3031:tid 3079] [client 20.63.96.180:43760] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "acK3bqJBKytnG47nuiZJvAAAAEM"]
[Wed Mar 25 00:10:23.119967 2026] [:error] [pid 48214:tid 48270] [client 20.63.96.180:43748] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "acK3b7eshLWZ3uUDHKmRgwAAAdI"]
[Wed Mar 25 00:10:23.559656 2026] [:error] [pid 3137:tid 3156] [client 20.63.96.180:43608] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "acK3b5dZesutm6dfYM-DUAAAANE"]
[Wed Mar 25 00:10:23.997543 2026] [:error] [pid 3137:tid 3144] [client 20.63.96.180:43616] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "acK3b5dZesutm6dfYM-DUgAAAMU"]
[Wed Mar 25 00:10:24.441069 2026] [:error] [pid 48219:tid 48301] [client 20.63.96.180:43589] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtz.php"] [unique_id "acK3cChf3b4R_lAIyv-wDgAAAhQ"]
[Wed Mar 25 00:10:24.875016 2026] [:error] [pid 48219:tid 48297] [client 20.63.96.180:43461] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtz.php"] [unique_id "acK3cChf3b4R_lAIyv-wEAAAAhA"]
[Wed Mar 25 00:10:25.300939 2026] [:error] [pid 38767:tid 38772] [client 20.63.96.180:43833] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtz.php"] [unique_id "acK3cfwkUqN4GJAI5oWQewAAAQI"]
[Wed Mar 25 00:10:25.733297 2026] [:error] [pid 64198:tid 64221] [client 20.63.96.180:43643] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtz.php"] [unique_id "acK3cXVzJqf6OS_oSZ397AAAAVU"]
[Wed Mar 25 00:10:26.176869 2026] [:error] [pid 64198:tid 64206] [client 20.63.96.180:43615] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/galex.php"] [unique_id "acK3cnVzJqf6OS_oSZ397QAAAUY"]
[Wed Mar 25 00:10:26.614140 2026] [:error] [pid 64198:tid 64217] [client 20.63.96.180:43749] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/galex.php"] [unique_id "acK3cnVzJqf6OS_oSZ398AAAAVE"]
[Wed Mar 25 00:10:27.059408 2026] [:error] [pid 64198:tid 64219] [client 20.63.96.180:43768] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/galex.php"] [unique_id "acK3c3VzJqf6OS_oSZ398gAAAVM"]
[Wed Mar 25 00:10:27.481510 2026] [:error] [pid 3032:tid 3115] [client 20.63.96.180:43599] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/galex.php"] [unique_id "acK3cya_-JXXD03-JNxy8AAAAIw"]
[Wed Mar 25 00:10:27.913975 2026] [:error] [pid 48219:tid 48296] [client 20.63.96.180:43887] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xb.php"] [unique_id "acK3cyhf3b4R_lAIyv-wEgAAAg8"]
[Wed Mar 25 00:10:28.357916 2026] [:error] [pid 64198:tid 64213] [client 20.63.96.180:43691] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xb.php"] [unique_id "acK3dHVzJqf6OS_oSZ39-AAAAU0"]
[Wed Mar 25 00:10:28.791853 2026] [:error] [pid 3032:tid 3103] [client 20.63.96.180:43587] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xb.php"] [unique_id "acK3dCa_-JXXD03-JNxy8QAAAIA"]
[Wed Mar 25 00:10:29.229992 2026] [:error] [pid 64198:tid 64208] [client 20.63.96.180:43681] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xb.php"] [unique_id "acK3dXVzJqf6OS_oSZ39-gAAAUg"]
[Wed Mar 25 00:10:29.659107 2026] [:error] [pid 64198:tid 64201] [client 20.63.96.180:43594] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova.php"] [unique_id "acK3dXVzJqf6OS_oSZ39_AAAAUE"]
[Wed Mar 25 00:10:30.083058 2026] [:error] [pid 48214:tid 48260] [client 20.63.96.180:43530] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova.php"] [unique_id "acK3dreshLWZ3uUDHKmRiAAAAcg"]
[Wed Mar 25 00:10:30.684756 2026] [:error] [pid 64198:tid 64212] [client 20.63.96.180:43771] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova.php"] [unique_id "acK3dnVzJqf6OS_oSZ3-AAAAAUw"]
[Wed Mar 25 00:10:31.127557 2026] [:error] [pid 64198:tid 64223] [client 20.63.96.180:43689] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova.php"] [unique_id "acK3d3VzJqf6OS_oSZ3-AgAAAVc"]
[Wed Mar 25 00:10:31.546763 2026] [:error] [pid 64198:tid 64208] [client 20.63.96.180:43607] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acK3d3VzJqf6OS_oSZ3-BwAAAUg"]
[Wed Mar 25 00:10:31.968988 2026] [:error] [pid 48214:tid 48261] [client 20.63.96.180:43640] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acK3d7eshLWZ3uUDHKmRjAAAAck"]
[Wed Mar 25 00:10:32.401777 2026] [:error] [pid 64198:tid 64203] [client 20.63.96.180:43623] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acK3eHVzJqf6OS_oSZ3-DQAAAUM"]
[Wed Mar 25 00:10:32.825929 2026] [:error] [pid 64198:tid 64200] [client 20.63.96.180:43696] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acK3eHVzJqf6OS_oSZ3-EQAAAUA"]
[Wed Mar 25 00:10:33.259836 2026] [:error] [pid 48219:tid 48291] [client 20.63.96.180:43601] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "acK3eShf3b4R_lAIyv-wEwAAAgo"]
[Wed Mar 25 00:10:33.678330 2026] [:error] [pid 48219:tid 48305] [client 20.63.96.180:43526] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "acK3eShf3b4R_lAIyv-wGAAAAhg"]
[Wed Mar 25 00:10:34.115810 2026] [:error] [pid 3137:tid 3159] [client 20.63.96.180:43690] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "acK3epdZesutm6dfYM-DXgAAANQ"]
[Wed Mar 25 00:10:34.542457 2026] [:error] [pid 3137:tid 3152] [client 20.63.96.180:43818] [client 20.63.96.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "acK3epdZesutm6dfYM-DYAAAAM0"]
[Wed Mar 25 01:53:13.317414 2026] [:error] [pid 57702:tid 57918] [client 20.151.251.35:60361] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acLPiaS8TU_xcQFvlnYQZwAAAA8"]
[Wed Mar 25 01:53:14.161407 2026] [:error] [pid 20371:tid 20384] [client 20.151.251.35:57633] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acLPiub25OL4yTv2fF-X8QAAAQs"]
[Wed Mar 25 01:53:14.990306 2026] [:error] [pid 57702:tid 57914] [client 20.151.251.35:60298] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acLPiqS8TU_xcQFvlnYQaQAAAAs"]
[Wed Mar 25 01:53:15.814869 2026] [:error] [pid 58154:tid 58181] [client 20.151.251.35:60413] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acLPiw0pGUh6bwD3ouKiPQAAANg"]
[Wed Mar 25 05:34:32.797147 2026] [:error] [pid 47946:tid 47955] [client 148.72.173.218:52701] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acMDaDipQTqBMSeKYhfptgAAAQc"]
[Wed Mar 25 05:34:32.797198 2026] [:error] [pid 47946:tid 47955] [client 148.72.173.218:52701] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 61"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acMDaDipQTqBMSeKYhfptgAAAQc"]
[Wed Mar 25 05:57:24.944280 2026] [proxy_fcgi:error] [pid 755:tid 847] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:25.241072 2026] [proxy_fcgi:error] [pid 755:tid 821] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:25.575729 2026] [proxy_fcgi:error] [pid 755:tid 822] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:25.931060 2026] [proxy_fcgi:error] [pid 755:tid 840] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:26.416983 2026] [proxy_fcgi:error] [pid 755:tid 824] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:26.676432 2026] [proxy_fcgi:error] [pid 755:tid 805] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:26.935734 2026] [proxy_fcgi:error] [pid 755:tid 806] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:27.194931 2026] [proxy_fcgi:error] [pid 755:tid 838] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:27.505310 2026] [proxy_fcgi:error] [pid 755:tid 826] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:27.882044 2026] [proxy_fcgi:error] [pid 755:tid 846] [client 20.215.242.226:1853] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:57:28.146780 2026] [:error] [pid 755:tid 844] [client 20.215.242.226:1853] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acMIyKS6bdaeEwgCGwo4bgAAAFU"]
[Wed Mar 25 05:57:29.455284 2026] [:error] [pid 47989:tid 47998] [client 20.215.242.226:43186] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acMIySWKdJMhIccROjlukAAAAUc"]
[Wed Mar 25 05:57:30.710685 2026] [:error] [pid 47989:tid 47995] [client 20.215.242.226:12438] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acMIyiWKdJMhIccROjlulgAAAUQ"]
[Wed Mar 25 05:57:39.604386 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:57891] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acMI0yWKdJMhIccROjluugAAAVA"]
[Wed Mar 25 05:57:59.930207 2026] [:error] [pid 47989:tid 48005] [client 20.215.242.226:22102] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acMI5yWKdJMhIccROjlu-wAAAU4"]
[Wed Mar 25 05:58:02.660972 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:23482] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acMI6iWKdJMhIccROjlvEgAAAUE"]
[Wed Mar 25 05:58:03.739229 2026] [:error] [pid 47989:tid 48003] [client 20.215.242.226:23436] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acMI6yWKdJMhIccROjlvFwAAAUw"]
[Wed Mar 25 05:58:05.981817 2026] [:error] [pid 47989:tid 47998] [client 20.215.242.226:45000] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acMI7SWKdJMhIccROjlvIwAAAUc"]
[Wed Mar 25 05:58:06.786530 2026] [:error] [pid 47946:tid 47961] [client 20.215.242.226:17197] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/as.php"] [unique_id "acMI7jipQTqBMSeKYhf1UwAAAQ0"]
[Wed Mar 25 05:58:07.733804 2026] [:error] [pid 47989:tid 48009] [client 20.215.242.226:17191] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/as.php"] [unique_id "acMI7yWKdJMhIccROjlvJQAAAVI"]
[Wed Mar 25 05:58:09.014733 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:21667] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/as.php"] [unique_id "acMI8SWKdJMhIccROjlvJwAAAUI"]
[Wed Mar 25 05:58:09.726800 2026] [:error] [pid 47946:tid 47969] [client 20.215.242.226:28999] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/as.php"] [unique_id "acMI8TipQTqBMSeKYhf1ZgAAARU"]
[Wed Mar 25 05:58:11.480928 2026] [:error] [pid 892:tid 912] [client 20.215.242.226:39173] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acMI8yT_G8WMU3T3yxo2NwAAAM4"]
[Wed Mar 25 05:58:12.663998 2026] [:error] [pid 892:tid 909] [client 20.215.242.226:36059] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acMI9CT_G8WMU3T3yxo2PwAAAMs"]
[Wed Mar 25 05:58:13.398972 2026] [:error] [pid 892:tid 904] [client 20.215.242.226:35991] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acMI9ST_G8WMU3T3yxo2QgAAAMY"]
[Wed Mar 25 05:58:14.874279 2026] [:error] [pid 892:tid 906] [client 20.215.242.226:55215] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acMI9iT_G8WMU3T3yxo2RQAAAMg"]
[Wed Mar 25 05:58:16.078819 2026] [:error] [pid 47989:tid 48004] [client 20.215.242.226:24754] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acMI-CWKdJMhIccROjlvPgAAAU0"]
[Wed Mar 25 05:58:17.020195 2026] [:error] [pid 47989:tid 48000] [client 20.215.242.226:35175] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acMI-SWKdJMhIccROjlvQwAAAUk"]
[Wed Mar 25 05:58:18.492401 2026] [:error] [pid 47946:tid 47948] [client 20.215.242.226:28124] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acMI-jipQTqBMSeKYhf1fgAAAQA"]
[Wed Mar 25 05:58:19.403722 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:55214] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acMI-yWKdJMhIccROjlvSwAAAU8"]
[Wed Mar 25 05:58:20.059455 2026] [:error] [pid 47946:tid 47972] [client 20.215.242.226:10446] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acMI_DipQTqBMSeKYhf1ggAAARg"]
[Wed Mar 25 05:58:21.156574 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:1291] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acMI_SWKdJMhIccROjlvUQAAAVA"]
[Wed Mar 25 05:58:22.210149 2026] [:error] [pid 47989:tid 48013] [client 20.215.242.226:43667] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acMI_iWKdJMhIccROjlvVQAAAVY"]
[Wed Mar 25 05:58:23.201299 2026] [:error] [pid 47946:tid 47955] [client 20.215.242.226:16416] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acMI_zipQTqBMSeKYhf1hgAAAQc"]
[Wed Mar 25 05:58:23.952149 2026] [:error] [pid 47989:tid 48001] [client 20.215.242.226:1551] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acMI_yWKdJMhIccROjlvZwAAAUo"]
[Wed Mar 25 05:58:24.956576 2026] [:error] [pid 47989:tid 47997] [client 20.215.242.226:24824] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acMJACWKdJMhIccROjlvagAAAUY"]
[Wed Mar 25 05:58:26.330011 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:55208] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acMJAiWKdJMhIccROjlvdAAAAU8"]
[Wed Mar 25 05:58:29.098386 2026] [proxy_fcgi:error] [pid 47946:tid 47965] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:29.362997 2026] [proxy_fcgi:error] [pid 47946:tid 47959] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:29.660725 2026] [proxy_fcgi:error] [pid 47946:tid 47960] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:29.929626 2026] [proxy_fcgi:error] [pid 47946:tid 47956] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:30.219482 2026] [proxy_fcgi:error] [pid 47946:tid 47955] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:30.599820 2026] [proxy_fcgi:error] [pid 47946:tid 47953] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:31.151026 2026] [proxy_fcgi:error] [pid 47946:tid 47949] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:31.442046 2026] [proxy_fcgi:error] [pid 47946:tid 47961] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:31.704817 2026] [proxy_fcgi:error] [pid 47946:tid 47957] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:32.052273 2026] [proxy_fcgi:error] [pid 47946:tid 47968] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:32.325690 2026] [proxy_fcgi:error] [pid 47946:tid 47948] [client 20.215.242.226:1118] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:58:33.862419 2026] [:error] [pid 47946:tid 47966] [client 20.215.242.226:1118] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acMJCTipQTqBMSeKYhf1nQAAARI"]
[Wed Mar 25 05:58:37.570868 2026] [:error] [pid 47946:tid 47950] [client 20.215.242.226:9098] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acMJDTipQTqBMSeKYhf1ogAAAQI"]
[Wed Mar 25 05:58:39.243267 2026] [:error] [pid 756:tid 853] [client 20.215.242.226:30359] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acMJDzOaW6oylMIDBCSA3gAAAIM"]
[Wed Mar 25 05:58:40.256572 2026] [:error] [pid 47946:tid 47950] [client 20.215.242.226:35674] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acMJEDipQTqBMSeKYhf1sgAAAQI"]
[Wed Mar 25 05:58:41.411092 2026] [:error] [pid 47989:tid 48013] [client 20.215.242.226:1144] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acMJESWKdJMhIccROjlvnAAAAVY"]
[Wed Mar 25 05:58:42.138171 2026] [:error] [pid 892:tid 904] [client 20.215.242.226:46263] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acMJEiT_G8WMU3T3yxo2agAAAMY"]
[Wed Mar 25 05:58:42.849156 2026] [:error] [pid 47989:tid 48012] [client 20.215.242.226:55260] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acMJEiWKdJMhIccROjlvoQAAAVU"]
[Wed Mar 25 05:58:44.342728 2026] [:error] [pid 892:tid 911] [client 20.215.242.226:55268] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acMJFCT_G8WMU3T3yxo2dwAAAM0"]
[Wed Mar 25 05:58:45.393309 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:46282] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acMJFSWKdJMhIccROjlvqQAAAUE"]
[Wed Mar 25 05:58:46.185658 2026] [:error] [pid 755:tid 836] [client 20.215.242.226:55292] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acMJFqS6bdaeEwgCGwo4ngAAAE0"]
[Wed Mar 25 05:58:46.920023 2026] [:error] [pid 756:tid 868] [client 20.215.242.226:55248] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acMJFjOaW6oylMIDBCSA4gAAAJA"]
[Wed Mar 25 05:58:48.099693 2026] [:error] [pid 47989:tid 48009] [client 20.215.242.226:1124] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acMJGCWKdJMhIccROjlvswAAAVI"]
[Wed Mar 25 05:58:49.345809 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:16432] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acMJGSWKdJMhIccROjlvuAAAAVA"]
[Wed Mar 25 05:58:50.811293 2026] [:error] [pid 754:tid 788] [client 20.215.242.226:55259] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acMJGjisL3asPbA3Cti76gAAABc"]
[Wed Mar 25 05:58:51.884776 2026] [:error] [pid 756:tid 856] [client 20.215.242.226:28060] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acMJGzOaW6oylMIDBCSA6QAAAIQ"]
[Wed Mar 25 05:58:54.790962 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:35700] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acMJHiWKdJMhIccROjlvzQAAAUI"]
[Wed Mar 25 05:58:56.026984 2026] [:error] [pid 754:tid 784] [client 20.215.242.226:46305] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJIDisL3asPbA3Cti77wAAABM"]
[Wed Mar 25 05:58:56.972032 2026] [:error] [pid 892:tid 919] [client 20.215.242.226:22797] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJICT_G8WMU3T3yxo2lQAAANQ"]
[Wed Mar 25 05:58:58.385743 2026] [:error] [pid 754:tid 775] [client 20.215.242.226:8947] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJIjisL3asPbA3Cti79gAAAAo"]
[Wed Mar 25 05:59:01.181675 2026] [:error] [pid 47989:tid 48012] [client 20.215.242.226:42343] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJJSWKdJMhIccROjlv1wAAAVU"]
[Wed Mar 25 05:59:03.247166 2026] [:error] [pid 892:tid 923] [client 20.215.242.226:8905] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acMJJyT_G8WMU3T3yxo2tgAAANg"]
[Wed Mar 25 05:59:04.184168 2026] [:error] [pid 755:tid 805] [client 20.215.242.226:46288] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acMJKKS6bdaeEwgCGwo4pQAAAEA"]
[Wed Mar 25 05:59:05.321593 2026] [:error] [pid 755:tid 808] [client 20.215.242.226:41822] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acMJKaS6bdaeEwgCGwo4qgAAAEM"]
[Wed Mar 25 05:59:06.781117 2026] [:error] [pid 892:tid 906] [client 20.215.242.226:27742] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acMJKiT_G8WMU3T3yxo2vwAAAMg"]
[Wed Mar 25 05:59:07.601988 2026] [:error] [pid 892:tid 905] [client 20.215.242.226:41820] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acMJKyT_G8WMU3T3yxo2wQAAAMc"]
[Wed Mar 25 05:59:09.668573 2026] [:error] [pid 47946:tid 47966] [client 20.215.242.226:49059] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acMJLTipQTqBMSeKYhf1ywAAARI"]
[Wed Mar 25 05:59:10.537697 2026] [:error] [pid 47946:tid 47959] [client 20.215.242.226:22506] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acMJLjipQTqBMSeKYhf10QAAAQs"]
[Wed Mar 25 05:59:11.812888 2026] [:error] [pid 47989:tid 48008] [client 20.215.242.226:27739] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acMJLyWKdJMhIccROjlv8gAAAVE"]
[Wed Mar 25 05:59:15.007821 2026] [:error] [pid 755:tid 805] [client 20.215.242.226:49059] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acMJM6S6bdaeEwgCGwo4sgAAAEA"]
[Wed Mar 25 05:59:16.253679 2026] [:error] [pid 754:tid 789] [client 20.215.242.226:46273] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acMJNDisL3asPbA3Cti8CQAAABg"]
[Wed Mar 25 05:59:17.753499 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:22791] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acMJNSWKdJMhIccROjlwCwAAAUI"]
[Wed Mar 25 05:59:18.898707 2026] [:error] [pid 47989:tid 48004] [client 20.215.242.226:41802] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acMJNiWKdJMhIccROjlwDQAAAU0"]
[Wed Mar 25 05:59:19.807576 2026] [:error] [pid 47946:tid 47970] [client 20.215.242.226:29556] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acMJNzipQTqBMSeKYhf11wAAARY"]
[Wed Mar 25 05:59:20.681307 2026] [:error] [pid 47989:tid 47991] [client 20.215.242.226:27724] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acMJOCWKdJMhIccROjlwFAAAAUA"]
[Wed Mar 25 05:59:22.099351 2026] [:error] [pid 47946:tid 47960] [client 20.215.242.226:22516] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acMJOjipQTqBMSeKYhf13wAAAQw"]
[Wed Mar 25 05:59:22.933055 2026] [:error] [pid 47946:tid 47955] [client 20.215.242.226:41813] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acMJOjipQTqBMSeKYhf14AAAAQc"]
[Wed Mar 25 05:59:24.351190 2026] [:error] [pid 47946:tid 47953] [client 20.215.242.226:26727] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acMJPDipQTqBMSeKYhf14wAAAQU"]
[Wed Mar 25 05:59:25.676494 2026] [:error] [pid 47946:tid 47967] [client 20.215.242.226:24299] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acMJPTipQTqBMSeKYhf15gAAARM"]
[Wed Mar 25 05:59:26.658473 2026] [:error] [pid 47989:tid 48009] [client 20.215.242.226:8943] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acMJPiWKdJMhIccROjlwJAAAAVI"]
[Wed Mar 25 05:59:29.058801 2026] [:error] [pid 892:tid 918] [client 20.215.242.226:12823] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acMJQST_G8WMU3T3yxo24AAAANM"]
[Wed Mar 25 05:59:30.196691 2026] [:error] [pid 47989:tid 48013] [client 20.215.242.226:26736] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "acMJQiWKdJMhIccROjlwMwAAAVY"]
[Wed Mar 25 05:59:31.219266 2026] [:error] [pid 756:tid 863] [client 20.215.242.226:1866] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "acMJQzOaW6oylMIDBCSBGgAAAIs"]
[Wed Mar 25 05:59:32.066449 2026] [proxy_fcgi:error] [pid 47946:tid 47964] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:32.325498 2026] [proxy_fcgi:error] [pid 47946:tid 47955] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:32.584748 2026] [proxy_fcgi:error] [pid 47946:tid 47948] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:32.843034 2026] [proxy_fcgi:error] [pid 47946:tid 47967] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:33.425785 2026] [proxy_fcgi:error] [pid 47946:tid 47952] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:33.728098 2026] [proxy_fcgi:error] [pid 47946:tid 47957] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:33.988089 2026] [proxy_fcgi:error] [pid 47946:tid 47958] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:34.268401 2026] [proxy_fcgi:error] [pid 47946:tid 47955] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:34.550783 2026] [proxy_fcgi:error] [pid 47946:tid 47966] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:35.217192 2026] [proxy_fcgi:error] [pid 47946:tid 47965] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:35.478683 2026] [proxy_fcgi:error] [pid 47946:tid 47959] [client 20.215.242.226:46278] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:59:35.742641 2026] [:error] [pid 47946:tid 47948] [client 20.215.242.226:46278] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acMJRzipQTqBMSeKYhf2AgAAAQA"]
[Wed Mar 25 05:59:36.734311 2026] [:error] [pid 754:tid 773] [client 20.215.242.226:26881] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acMJSDisL3asPbA3Cti8IQAAAAg"]
[Wed Mar 25 05:59:38.679951 2026] [:error] [pid 47946:tid 47949] [client 20.215.242.226:9942] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acMJSjipQTqBMSeKYhf2BAAAAQE"]
[Wed Mar 25 05:59:39.919584 2026] [:error] [pid 755:tid 823] [client 20.215.242.226:11793] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acMJS6S6bdaeEwgCGwo4vwAAAEg"]
[Wed Mar 25 05:59:40.852716 2026] [:error] [pid 755:tid 808] [client 20.215.242.226:9953] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acMJTKS6bdaeEwgCGwo4wQAAAEM"]
[Wed Mar 25 05:59:41.963883 2026] [:error] [pid 756:tid 857] [client 20.215.242.226:8923] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acMJTTOaW6oylMIDBCSBJQAAAIU"]
[Wed Mar 25 05:59:43.354620 2026] [:error] [pid 47989:tid 47991] [client 20.215.242.226:1244] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acMJTyWKdJMhIccROjlwSQAAAUA"]
[Wed Mar 25 05:59:44.572205 2026] [:error] [pid 892:tid 899] [client 20.215.242.226:20200] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acMJUCT_G8WMU3T3yxo29gAAAMM"]
[Wed Mar 25 05:59:45.415060 2026] [:error] [pid 754:tid 770] [client 20.215.242.226:1883] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acMJUTisL3asPbA3Cti8LQAAAAU"]
[Wed Mar 25 05:59:46.735345 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:27753] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acMJUiWKdJMhIccROjlwTwAAAUE"]
[Wed Mar 25 05:59:47.716319 2026] [:error] [pid 47989:tid 48000] [client 20.215.242.226:31875] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acMJUyWKdJMhIccROjlwUwAAAUk"]
[Wed Mar 25 05:59:48.649899 2026] [:error] [pid 47946:tid 47972] [client 20.215.242.226:41850] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acMJVDipQTqBMSeKYhf2CwAAARg"]
[Wed Mar 25 05:59:50.034111 2026] [:error] [pid 47946:tid 47955] [client 20.215.242.226:20215] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acMJVjipQTqBMSeKYhf2EAAAAQc"]
[Wed Mar 25 05:59:51.107862 2026] [:error] [pid 47946:tid 47965] [client 20.215.242.226:9952] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acMJVzipQTqBMSeKYhf2EgAAARE"]
[Wed Mar 25 05:59:52.288003 2026] [:error] [pid 47946:tid 47967] [client 20.215.242.226:9958] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acMJWDipQTqBMSeKYhf2FgAAARM"]
[Wed Mar 25 05:59:53.217675 2026] [:error] [pid 47946:tid 47963] [client 20.215.242.226:49024] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acMJWTipQTqBMSeKYhf2GgAAAQ8"]
[Wed Mar 25 05:59:54.024495 2026] [:error] [pid 47946:tid 47959] [client 20.215.242.226:49038] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acMJWjipQTqBMSeKYhf2HwAAAQs"]
[Wed Mar 25 05:59:54.692854 2026] [:error] [pid 756:tid 862] [client 20.215.242.226:25525] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acMJWjOaW6oylMIDBCSBPQAAAIo"]
[Wed Mar 25 05:59:57.737025 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:21321] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acMJXSWKdJMhIccROjlwaQAAAUE"]
[Wed Mar 25 05:59:58.591065 2026] [:error] [pid 47989:tid 48003] [client 20.215.242.226:24282] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acMJXiWKdJMhIccROjlwbQAAAUw"]
[Wed Mar 25 06:00:00.204330 2026] [:error] [pid 755:tid 805] [client 20.215.242.226:38325] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acMJYKS6bdaeEwgCGwo4zwAAAEA"]
[Wed Mar 25 06:00:01.559027 2026] [:error] [pid 755:tid 826] [client 20.215.242.226:21345] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acMJYaS6bdaeEwgCGwo40wAAAEs"]
[Wed Mar 25 06:00:05.928356 2026] [:error] [pid 756:tid 874] [client 20.215.242.226:22465] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acMJZTOaW6oylMIDBCSBTQAAAJY"]
[Wed Mar 25 06:00:07.822918 2026] [:error] [pid 754:tid 771] [client 20.215.242.226:8608] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acMJZzisL3asPbA3Cti8OgAAAAY"]
[Wed Mar 25 06:00:08.892289 2026] [:error] [pid 47989:tid 48014] [client 20.215.242.226:13247] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acMJaCWKdJMhIccROjlweQAAAVc"]
[Wed Mar 25 06:00:11.126386 2026] [:error] [pid 756:tid 856] [client 20.215.242.226:11806] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acMJazOaW6oylMIDBCSBUQAAAIQ"]
[Wed Mar 25 06:00:12.530010 2026] [:error] [pid 892:tid 904] [client 20.215.242.226:42037] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acMJbCT_G8WMU3T3yxo3HAAAAMY"]
[Wed Mar 25 06:00:13.778724 2026] [:error] [pid 892:tid 911] [client 20.215.242.226:24264] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acMJbST_G8WMU3T3yxo3IgAAAM0"]
[Wed Mar 25 06:00:15.129136 2026] [:error] [pid 756:tid 852] [client 20.215.242.226:31930] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "acMJbzOaW6oylMIDBCSBVgAAAII"]
[Wed Mar 25 06:00:16.860628 2026] [:error] [pid 47989:tid 48002] [client 20.215.242.226:9667] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "acMJcCWKdJMhIccROjlwiAAAAUs"]
[Wed Mar 25 06:00:17.921037 2026] [:error] [pid 47989:tid 48013] [client 20.215.242.226:13207] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "acMJcSWKdJMhIccROjlwjAAAAVY"]
[Wed Mar 25 06:00:20.299216 2026] [:error] [pid 755:tid 843] [client 20.215.242.226:9713] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/install.php"] [unique_id "acMJdKS6bdaeEwgCGwo41wAAAFQ"]
[Wed Mar 25 06:00:23.005062 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:8695] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/wp-blog.php"] [unique_id "acMJdyWKdJMhIccROjlwoAAAAUI"]
[Wed Mar 25 06:00:24.590918 2026] [:error] [pid 892:tid 908] [client 20.215.242.226:41993] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/wp-blog.php"] [unique_id "acMJeCT_G8WMU3T3yxo3MwAAAMo"]
[Wed Mar 25 06:00:27.300749 2026] [:error] [pid 755:tid 822] [client 20.215.242.226:33862] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/wp-blog.php"] [unique_id "acMJe6S6bdaeEwgCGwo42QAAAEc"]
[Wed Mar 25 06:00:28.890398 2026] [:error] [pid 754:tid 775] [client 20.215.242.226:20983] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/wp-blog.php"] [unique_id "acMJfDisL3asPbA3Cti8QAAAAAo"]
[Wed Mar 25 06:00:30.176381 2026] [:error] [pid 756:tid 852] [client 20.215.242.226:49082] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJfjOaW6oylMIDBCSBhwAAAII"]
[Wed Mar 25 06:00:31.028617 2026] [:error] [pid 754:tid 786] [client 20.215.242.226:22839] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJfzisL3asPbA3Cti8QQAAABU"]
[Wed Mar 25 06:00:31.839873 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:8658] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJfyWKdJMhIccROjlwtwAAAU8"]
[Wed Mar 25 06:00:32.654737 2026] [:error] [pid 47989:tid 48010] [client 20.215.242.226:24288] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acMJgCWKdJMhIccROjlwugAAAVM"]
[Wed Mar 25 06:00:33.826177 2026] [:error] [pid 892:tid 917] [client 20.215.242.226:8654] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "acMJgST_G8WMU3T3yxo3QQAAANI"]
[Wed Mar 25 06:00:35.380319 2026] [proxy_fcgi:error] [pid 756:tid 865] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:35.639683 2026] [proxy_fcgi:error] [pid 756:tid 859] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:35.899681 2026] [proxy_fcgi:error] [pid 756:tid 857] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:36.172777 2026] [proxy_fcgi:error] [pid 756:tid 861] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:36.432971 2026] [proxy_fcgi:error] [pid 756:tid 874] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:36.727638 2026] [proxy_fcgi:error] [pid 756:tid 868] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:37.023322 2026] [proxy_fcgi:error] [pid 756:tid 872] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:37.286746 2026] [proxy_fcgi:error] [pid 756:tid 864] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:37.547277 2026] [proxy_fcgi:error] [pid 756:tid 863] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:37.886809 2026] [proxy_fcgi:error] [pid 756:tid 853] [client 20.215.242.226:20198] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:00:38.570680 2026] [:error] [pid 756:tid 858] [client 20.215.242.226:20198] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/155.php"] [unique_id "acMJhjOaW6oylMIDBCSBnAAAAIY"]
[Wed Mar 25 06:00:39.288779 2026] [:error] [pid 47946:tid 47967] [client 20.215.242.226:9691] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/155.php"] [unique_id "acMJhzipQTqBMSeKYhf2QgAAARM"]
[Wed Mar 25 06:00:40.274979 2026] [:error] [pid 755:tid 845] [client 20.215.242.226:42027] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/155.php"] [unique_id "acMJiKS6bdaeEwgCGwo43gAAAFY"]
[Wed Mar 25 06:00:41.628796 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:8679] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/155.php"] [unique_id "acMJiSWKdJMhIccROjlw0gAAAUE"]
[Wed Mar 25 06:00:42.697406 2026] [:error] [pid 892:tid 915] [client 20.215.242.226:24268] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acMJiiT_G8WMU3T3yxo3TAAAANE"]
[Wed Mar 25 06:00:44.021203 2026] [:error] [pid 47989:tid 48011] [client 20.215.242.226:29844] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acMJjCWKdJMhIccROjlw2gAAAVQ"]
[Wed Mar 25 06:00:45.017621 2026] [:error] [pid 47989:tid 47991] [client 20.215.242.226:26685] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acMJjSWKdJMhIccROjlw3AAAAUA"]
[Wed Mar 25 06:00:45.915493 2026] [:error] [pid 756:tid 871] [client 20.215.242.226:27753] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acMJjTOaW6oylMIDBCSBoQAAAJM"]
[Wed Mar 25 06:00:47.030047 2026] [:error] [pid 47946:tid 47966] [client 20.215.242.226:24305] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acMJjzipQTqBMSeKYhf2SQAAARI"]
[Wed Mar 25 06:00:47.895187 2026] [:error] [pid 892:tid 899] [client 20.215.242.226:8455] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acMJjyT_G8WMU3T3yxo3TwAAAMM"]
[Wed Mar 25 06:00:48.750167 2026] [:error] [pid 47989:tid 47997] [client 20.215.242.226:8684] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acMJkCWKdJMhIccROjlw4QAAAUY"]
[Wed Mar 25 06:00:50.435046 2026] [:error] [pid 892:tid 921] [client 20.215.242.226:9689] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acMJkiT_G8WMU3T3yxo3UwAAANY"]
[Wed Mar 25 06:00:51.704868 2026] [:error] [pid 755:tid 835] [client 20.215.242.226:26634] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acMJk6S6bdaeEwgCGwo44QAAAEw"]
[Wed Mar 25 06:00:53.364890 2026] [:error] [pid 755:tid 806] [client 20.215.242.226:9716] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acMJlaS6bdaeEwgCGwo44wAAAEE"]
[Wed Mar 25 06:00:54.409309 2026] [:error] [pid 47946:tid 47960] [client 20.215.242.226:30886] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acMJljipQTqBMSeKYhf2VQAAAQw"]
[Wed Mar 25 06:00:55.702512 2026] [:error] [pid 47946:tid 47954] [client 20.215.242.226:8681] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acMJlzipQTqBMSeKYhf2VgAAAQY"]
[Wed Mar 25 06:00:56.758251 2026] [:error] [pid 47946:tid 47963] [client 20.215.242.226:9686] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acMJmDipQTqBMSeKYhf2XAAAAQ8"]
[Wed Mar 25 06:00:57.758686 2026] [:error] [pid 47946:tid 47964] [client 20.215.242.226:18624] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acMJmTipQTqBMSeKYhf2YQAAARA"]
[Wed Mar 25 06:00:58.755071 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:9419] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acMJmiWKdJMhIccROjlw6AAAAU8"]
[Wed Mar 25 06:00:59.920954 2026] [:error] [pid 47989:tid 48002] [client 20.215.242.226:9701] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acMJmyWKdJMhIccROjlw8AAAAUs"]
[Wed Mar 25 06:01:01.423187 2026] [:error] [pid 892:tid 912] [client 20.215.242.226:20934] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acMJnST_G8WMU3T3yxo3XQAAAM4"]
[Wed Mar 25 06:01:03.231459 2026] [:error] [pid 754:tid 773] [client 20.215.242.226:13203] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acMJnzisL3asPbA3Cti8TAAAAAg"]
[Wed Mar 25 06:01:04.404288 2026] [:error] [pid 756:tid 876] [client 20.215.242.226:44226] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acMJoDOaW6oylMIDBCSBrAAAAJg"]
[Wed Mar 25 06:01:05.898333 2026] [:error] [pid 892:tid 920] [client 20.215.242.226:20878] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acMJoST_G8WMU3T3yxo3YgAAANU"]
[Wed Mar 25 06:01:06.879994 2026] [:error] [pid 47989:tid 48001] [client 20.215.242.226:29861] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acMJoiWKdJMhIccROjlw_AAAAUo"]
[Wed Mar 25 06:01:07.652084 2026] [:error] [pid 755:tid 805] [client 20.215.242.226:22437] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acMJo6S6bdaeEwgCGwo46QAAAEA"]
[Wed Mar 25 06:01:09.513953 2026] [:error] [pid 892:tid 909] [client 20.215.242.226:8587] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acMJpST_G8WMU3T3yxo3ZQAAAMs"]
[Wed Mar 25 06:01:10.770695 2026] [:error] [pid 756:tid 852] [client 20.215.242.226:8623] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acMJpjOaW6oylMIDBCSBsgAAAII"]
[Wed Mar 25 06:01:11.657807 2026] [:error] [pid 47989:tid 47995] [client 20.215.242.226:9423] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acMJpyWKdJMhIccROjlxAwAAAUQ"]
[Wed Mar 25 06:01:12.444094 2026] [:error] [pid 755:tid 806] [client 20.215.242.226:22438] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acMJqKS6bdaeEwgCGwo47gAAAEE"]
[Wed Mar 25 06:01:13.428743 2026] [:error] [pid 754:tid 766] [client 20.215.242.226:31933] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acMJqTisL3asPbA3Cti8VAAAAAE"]
[Wed Mar 25 06:01:14.569086 2026] [:error] [pid 47989:tid 47996] [client 20.215.242.226:25883] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acMJqiWKdJMhIccROjlxBQAAAUU"]
[Wed Mar 25 06:01:15.780437 2026] [:error] [pid 47946:tid 47961] [client 20.215.242.226:49253] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "acMJqzipQTqBMSeKYhf2awAAAQ0"]
[Wed Mar 25 06:01:17.410043 2026] [:error] [pid 892:tid 896] [client 20.215.242.226:20918] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "acMJrST_G8WMU3T3yxo3agAAAMI"]
[Wed Mar 25 06:01:19.130600 2026] [:error] [pid 47989:tid 48011] [client 20.215.242.226:8477] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "acMJryWKdJMhIccROjlxDQAAAVQ"]
[Wed Mar 25 06:01:19.794812 2026] [:error] [pid 756:tid 866] [client 20.215.242.226:18665] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "acMJrzOaW6oylMIDBCSBuQAAAI4"]
[Wed Mar 25 06:01:20.665725 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:34289] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acMJsCWKdJMhIccROjlxEgAAAU8"]
[Wed Mar 25 06:01:21.680211 2026] [:error] [pid 47989:tid 48009] [client 20.215.242.226:49241] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acMJsSWKdJMhIccROjlxFQAAAVI"]
[Wed Mar 25 06:01:22.550260 2026] [:error] [pid 47989:tid 47995] [client 20.215.242.226:42040] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acMJsiWKdJMhIccROjlxGgAAAUQ"]
[Wed Mar 25 06:01:23.805701 2026] [:error] [pid 47989:tid 48006] [client 20.215.242.226:13215] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "acMJsyWKdJMhIccROjlxHQAAAU8"]
[Wed Mar 25 06:01:24.760020 2026] [:error] [pid 755:tid 808] [client 20.215.242.226:40293] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acMJtKS6bdaeEwgCGwo4-QAAAEM"]
[Wed Mar 25 06:01:25.961572 2026] [:error] [pid 755:tid 836] [client 20.215.242.226:8456] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acMJtaS6bdaeEwgCGwo4-wAAAE0"]
[Wed Mar 25 06:01:28.927482 2026] [:error] [pid 892:tid 907] [client 20.215.242.226:31369] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acMJuCT_G8WMU3T3yxo3dAAAAMk"]
[Wed Mar 25 06:01:30.309273 2026] [:error] [pid 754:tid 780] [client 20.215.242.226:30879] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acMJujisL3asPbA3Cti8XAAAAA8"]
[Wed Mar 25 06:01:31.248454 2026] [:error] [pid 892:tid 902] [client 20.215.242.226:8503] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acMJuyT_G8WMU3T3yxo3dgAAAMU"]
[Wed Mar 25 06:01:33.864220 2026] [:error] [pid 755:tid 821] [client 20.215.242.226:49228] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acMJvaS6bdaeEwgCGwo4_QAAAEY"]
[Wed Mar 25 06:01:38.053628 2026] [proxy_fcgi:error] [pid 755:tid 809] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:38.395633 2026] [proxy_fcgi:error] [pid 755:tid 842] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:38.654923 2026] [proxy_fcgi:error] [pid 755:tid 806] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:38.949048 2026] [proxy_fcgi:error] [pid 755:tid 818] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:39.312575 2026] [proxy_fcgi:error] [pid 755:tid 846] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:40.869294 2026] [proxy_fcgi:error] [pid 755:tid 847] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:41.129494 2026] [proxy_fcgi:error] [pid 755:tid 825] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:41.483636 2026] [proxy_fcgi:error] [pid 755:tid 843] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:41.762684 2026] [proxy_fcgi:error] [pid 755:tid 822] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:42.060682 2026] [proxy_fcgi:error] [pid 755:tid 840] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:42.401333 2026] [proxy_fcgi:error] [pid 755:tid 824] [client 20.215.242.226:29457] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:01:42.657014 2026] [:error] [pid 755:tid 839] [client 20.215.242.226:29457] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acMJxqS6bdaeEwgCGwo5EQAAAFA"]
[Wed Mar 25 06:01:45.076612 2026] [:error] [pid 755:tid 838] [client 20.215.242.226:22462] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acMJyaS6bdaeEwgCGwo5EgAAAE8"]
[Wed Mar 25 06:01:45.890455 2026] [:error] [pid 755:tid 845] [client 20.215.242.226:30863] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acMJyaS6bdaeEwgCGwo5EwAAAFY"]
[Wed Mar 25 06:01:47.034898 2026] [:error] [pid 47946:tid 47971] [client 20.215.242.226:16805] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acMJyzipQTqBMSeKYhf2hgAAARc"]
[Wed Mar 25 06:01:48.473660 2026] [:error] [pid 756:tid 874] [client 20.215.242.226:9689] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acMJzDOaW6oylMIDBCSB3QAAAJY"]
[Wed Mar 25 06:01:49.240820 2026] [:error] [pid 47946:tid 47963] [client 20.215.242.226:49272] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acMJzTipQTqBMSeKYhf2igAAAQ8"]
[Wed Mar 25 06:01:50.120709 2026] [:error] [pid 47946:tid 47949] [client 20.215.242.226:40290] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acMJzjipQTqBMSeKYhf2jAAAAQE"]
[Wed Mar 25 06:01:51.161552 2026] [:error] [pid 47946:tid 47965] [client 20.215.242.226:38709] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acMJzzipQTqBMSeKYhf2jgAAARE"]
[Wed Mar 25 06:01:51.927898 2026] [:error] [pid 892:tid 899] [client 20.215.242.226:8699] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acMJzyT_G8WMU3T3yxo3hgAAAMM"]
[Wed Mar 25 06:01:53.245329 2026] [:error] [pid 47946:tid 47956] [client 20.215.242.226:43137] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acMJ0TipQTqBMSeKYhf2kwAAAQg"]
[Wed Mar 25 06:01:54.447196 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:40265] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acMJ0iWKdJMhIccROjlxLAAAAUE"]
[Wed Mar 25 06:01:55.839813 2026] [:error] [pid 47989:tid 48005] [client 20.215.242.226:1519] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acMJ0yWKdJMhIccROjlxMQAAAU4"]
[Wed Mar 25 06:01:56.928667 2026] [:error] [pid 755:tid 845] [client 20.215.242.226:30855] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/d12.php"] [unique_id "acMJ1KS6bdaeEwgCGwo5HgAAAFY"]
[Wed Mar 25 06:01:58.824823 2026] [:error] [pid 47989:tid 48004] [client 20.215.242.226:49278] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/d12.php"] [unique_id "acMJ1iWKdJMhIccROjlxMwAAAU0"]
[Wed Mar 25 06:02:20.867510 2026] [:error] [pid 756:tid 872] [client 20.215.242.226:23485] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acMJ7DOaW6oylMIDBCSB_gAAAJQ"]
[Wed Mar 25 06:02:22.654924 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:29897] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acMJ7iWKdJMhIccROjlxUAAAAVA"]
[Wed Mar 25 06:02:25.267809 2026] [:error] [pid 47946:tid 47961] [client 20.215.242.226:31392] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acMJ8TipQTqBMSeKYhf2rwAAAQ0"]
[Wed Mar 25 06:02:27.821435 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:40296] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acMJ8yWKdJMhIccROjlxWwAAAVA"]
[Wed Mar 25 06:02:28.774812 2026] [:error] [pid 47989:tid 48008] [client 20.215.242.226:49015] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acMJ9CWKdJMhIccROjlxXQAAAVE"]
[Wed Mar 25 06:02:29.909696 2026] [:error] [pid 47989:tid 47994] [client 20.215.242.226:36010] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acMJ9SWKdJMhIccROjlxYgAAAUM"]
[Wed Mar 25 06:02:31.160130 2026] [:error] [pid 47946:tid 47972] [client 20.215.242.226:43700] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acMJ9zipQTqBMSeKYhf2sQAAARg"]
[Wed Mar 25 06:02:33.140821 2026] [:error] [pid 755:tid 839] [client 20.215.242.226:1423] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acMJ-aS6bdaeEwgCGwo5MQAAAFA"]
[Wed Mar 25 06:02:34.041889 2026] [:error] [pid 756:tid 860] [client 20.215.242.226:43703] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "acMJ-jOaW6oylMIDBCSCBwAAAIg"]
[Wed Mar 25 06:02:34.818404 2026] [:error] [pid 47946:tid 47967] [client 20.215.242.226:25952] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "acMJ-jipQTqBMSeKYhf2sgAAARM"]
[Wed Mar 25 06:02:35.604029 2026] [:error] [pid 47989:tid 48015] [client 20.215.242.226:31406] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "acMJ-yWKdJMhIccROjlxcgAAAVg"]
[Wed Mar 25 06:02:36.427032 2026] [:error] [pid 47946:tid 47968] [client 20.215.242.226:18229] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "acMJ_DipQTqBMSeKYhf2twAAARQ"]
[Wed Mar 25 06:02:37.536881 2026] [:error] [pid 756:tid 850] [client 20.215.242.226:11436] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maul.php"] [unique_id "acMJ_TOaW6oylMIDBCSCCgAAAIA"]
[Wed Mar 25 06:02:38.255078 2026] [:error] [pid 892:tid 905] [client 20.215.242.226:20902] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maul.php"] [unique_id "acMJ_iT_G8WMU3T3yxo3tgAAAMc"]
[Wed Mar 25 06:02:40.395600 2026] [:error] [pid 754:tid 770] [client 20.215.242.226:55227] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maul.php"] [unique_id "acMKADisL3asPbA3Cti8ngAAAAU"]
[Wed Mar 25 06:02:41.973397 2026] [:error] [pid 754:tid 784] [client 20.215.242.226:44265] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maul.php"] [unique_id "acMKATisL3asPbA3Cti8oAAAABM"]
[Wed Mar 25 06:02:43.178016 2026] [proxy_fcgi:error] [pid 47946:tid 47965] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:43.474644 2026] [proxy_fcgi:error] [pid 47946:tid 47972] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:43.778045 2026] [proxy_fcgi:error] [pid 47946:tid 47962] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:44.053472 2026] [proxy_fcgi:error] [pid 47946:tid 47951] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:44.469815 2026] [proxy_fcgi:error] [pid 47946:tid 47964] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:44.731813 2026] [proxy_fcgi:error] [pid 47946:tid 47950] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:44.991828 2026] [proxy_fcgi:error] [pid 47946:tid 47970] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:45.251139 2026] [proxy_fcgi:error] [pid 47946:tid 47954] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:45.568041 2026] [proxy_fcgi:error] [pid 47946:tid 47956] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:46.077805 2026] [proxy_fcgi:error] [pid 47946:tid 47958] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:46.337157 2026] [proxy_fcgi:error] [pid 47946:tid 47971] [client 20.215.242.226:12180] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:02:46.703212 2026] [:error] [pid 47946:tid 47969] [client 20.215.242.226:12180] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acMKBjipQTqBMSeKYhf2ygAAARU"]
[Wed Mar 25 06:02:47.937632 2026] [:error] [pid 754:tid 778] [client 20.215.242.226:24252] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acMKBzisL3asPbA3Cti8pQAAAA0"]
[Wed Mar 25 06:02:49.502867 2026] [:error] [pid 754:tid 770] [client 20.215.242.226:55194] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acMKCTisL3asPbA3Cti8qAAAAAU"]
[Wed Mar 25 06:02:50.604602 2026] [:error] [pid 756:tid 853] [client 20.215.242.226:40266] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acMKCjOaW6oylMIDBCSCFwAAAIM"]
[Wed Mar 25 06:02:53.970158 2026] [:error] [pid 47989:tid 47992] [client 20.215.242.226:12188] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acMKDSWKdJMhIccROjlxhgAAAUE"]
[Wed Mar 25 06:02:55.688017 2026] [:error] [pid 47989:tid 48012] [client 20.215.242.226:11869] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acMKDyWKdJMhIccROjlxjQAAAVU"]
[Wed Mar 25 06:02:57.609657 2026] [:error] [pid 47946:tid 47957] [client 20.215.242.226:20890] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acMKETipQTqBMSeKYhf23AAAAQk"]
[Wed Mar 25 06:02:58.560693 2026] [:error] [pid 47989:tid 48003] [client 20.215.242.226:30449] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acMKEiWKdJMhIccROjlxkgAAAUw"]
[Wed Mar 25 06:02:59.467512 2026] [:error] [pid 47946:tid 47958] [client 20.215.242.226:11901] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "acMKEzipQTqBMSeKYhf24QAAAQo"]
[Wed Mar 25 06:03:00.449922 2026] [:error] [pid 47989:tid 47991] [client 20.215.242.226:20922] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "acMKFCWKdJMhIccROjlxlwAAAUA"]
[Wed Mar 25 06:03:02.067739 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:42288] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "acMKFiWKdJMhIccROjlxnwAAAUI"]
[Wed Mar 25 06:03:03.263330 2026] [:error] [pid 47946:tid 47962] [client 20.215.242.226:29522] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "acMKFzipQTqBMSeKYhf26AAAAQ4"]
[Wed Mar 25 06:03:04.094084 2026] [:error] [pid 47989:tid 48003] [client 20.215.242.226:9374] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acMKGCWKdJMhIccROjlxogAAAUw"]
[Wed Mar 25 06:03:05.166966 2026] [:error] [pid 47989:tid 48007] [client 20.215.242.226:12193] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acMKGSWKdJMhIccROjlxpgAAAVA"]
[Wed Mar 25 06:03:07.097669 2026] [:error] [pid 892:tid 899] [client 20.215.242.226:23085] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acMKGyT_G8WMU3T3yxo30gAAAMM"]
[Wed Mar 25 06:03:08.328605 2026] [:error] [pid 47989:tid 47993] [client 20.215.242.226:20873] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acMKHCWKdJMhIccROjlxrQAAAUI"]
[Wed Mar 25 06:03:09.696558 2026] [:error] [pid 892:tid 909] [client 20.215.242.226:1286] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acMKHST_G8WMU3T3yxo30wAAAMs"]
[Wed Mar 25 06:03:10.548689 2026] [:error] [pid 47989:tid 47999] [client 20.215.242.226:42273] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acMKHiWKdJMhIccROjlxswAAAUg"]
[Wed Mar 25 06:03:11.923135 2026] [:error] [pid 755:tid 824] [client 20.215.242.226:1574] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acMKH6S6bdaeEwgCGwo5TwAAAEk"]
[Wed Mar 25 06:03:13.400596 2026] [:error] [pid 755:tid 808] [client 20.215.242.226:10232] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acMKIaS6bdaeEwgCGwo5VAAAAEM"]
[Wed Mar 25 06:03:14.751550 2026] [:error] [pid 47989:tid 48000] [client 20.215.242.226:44276] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acMKIiWKdJMhIccROjlxugAAAUk"]
[Wed Mar 25 06:03:15.817742 2026] [:error] [pid 47989:tid 47995] [client 20.215.242.226:1291] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acMKIyWKdJMhIccROjlxvQAAAUQ"]
[Wed Mar 25 06:03:17.939279 2026] [:error] [pid 47989:tid 48000] [client 20.215.242.226:55266] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acMKJSWKdJMhIccROjlxxwAAAUk"]
[Wed Mar 25 06:03:19.721509 2026] [:error] [pid 755:tid 843] [client 20.215.242.226:28043] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acMKJ6S6bdaeEwgCGwo5WAAAAFQ"]
[Wed Mar 25 06:03:21.413249 2026] [:error] [pid 47989:tid 48002] [client 20.215.242.226:46244] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMKKSWKdJMhIccROjlx0wAAAUs"]
[Wed Mar 25 06:03:24.987955 2026] [:error] [pid 892:tid 912] [client 20.215.242.226:34208] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMKLCT_G8WMU3T3yxo34gAAAM4"]
[Wed Mar 25 06:03:28.044038 2026] [:error] [pid 892:tid 922] [client 20.215.242.226:12223] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMKMCT_G8WMU3T3yxo35gAAANc"]
[Wed Mar 25 06:03:30.844732 2026] [:error] [pid 47946:tid 47968] [client 20.215.242.226:17207] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acMKMjipQTqBMSeKYhf3EwAAARQ"]
[Wed Mar 25 06:03:32.810854 2026] [:error] [pid 47946:tid 47971] [client 20.215.242.226:31417] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acMKNDipQTqBMSeKYhf3IQAAARc"]
[Wed Mar 25 06:03:34.003733 2026] [:error] [pid 47989:tid 47997] [client 20.215.242.226:44275] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acMKNiWKdJMhIccROjlx9wAAAUY"]
[Wed Mar 25 06:03:35.208725 2026] [:error] [pid 47989:tid 48014] [client 20.215.242.226:20584] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acMKNyWKdJMhIccROjlyDgAAAVc"]
[Wed Mar 25 06:03:36.562125 2026] [:error] [pid 47989:tid 48014] [client 20.215.242.226:1213] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acMKOCWKdJMhIccROjlyEAAAAVc"]
[Wed Mar 25 06:03:39.563094 2026] [:error] [pid 892:tid 910] [client 20.215.242.226:12203] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acMKOyT_G8WMU3T3yxo39AAAAMw"]
[Wed Mar 25 06:03:43.102385 2026] [:error] [pid 755:tid 846] [client 20.215.242.226:11506] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acMKP6S6bdaeEwgCGwo5bgAAAFc"]
[Wed Mar 25 06:03:43.884429 2026] [:error] [pid 47989:tid 48005] [client 20.215.242.226:44267] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acMKPyWKdJMhIccROjlyLgAAAU4"]
[Wed Mar 25 06:03:45.605762 2026] [:error] [pid 756:tid 870] [client 20.215.242.226:28156] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gfd.php"] [unique_id "acMKQTOaW6oylMIDBCSCrQAAAJI"]
[Wed Mar 25 06:03:46.380715 2026] [proxy_fcgi:error] [pid 47946:tid 47949] [client 20.215.242.226:12175] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:03:46.639866 2026] [proxy_fcgi:error] [pid 47946:tid 47958] [client 20.215.242.226:12175] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:03:46.899408 2026] [proxy_fcgi:error] [pid 47946:tid 47962] [client 20.215.242.226:12175] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 06:03:47.268465 2026] [proxy_fcgi:error] [pid 47946:tid 47964] [client 20.215.242.226:12175] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:57:59.471441 2026] [proxy_fcgi:error] [pid 756:tid 864] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:57:59.743918 2026] [proxy_fcgi:error] [pid 756:tid 872] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:00.016887 2026] [proxy_fcgi:error] [pid 756:tid 866] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:00.289731 2026] [proxy_fcgi:error] [pid 756:tid 856] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:00.617165 2026] [proxy_fcgi:error] [pid 756:tid 863] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:00.887530 2026] [proxy_fcgi:error] [pid 756:tid 869] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:01.157797 2026] [proxy_fcgi:error] [pid 756:tid 851] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:01.430045 2026] [proxy_fcgi:error] [pid 756:tid 865] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:03.129459 2026] [proxy_fcgi:error] [pid 756:tid 859] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:03.416270 2026] [proxy_fcgi:error] [pid 756:tid 875] [client 52.236.56.26:36376] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:58:03.683622 2026] [:error] [pid 756:tid 876] [client 52.236.56.26:36376] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acNBKzOaW6oylMIDBCTn3QAAAJg"]
[Wed Mar 25 09:58:04.260368 2026] [:error] [pid 756:tid 873] [client 52.236.56.26:18550] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acNBLDOaW6oylMIDBCTn4AAAAJU"]
[Wed Mar 25 09:58:04.772731 2026] [:error] [pid 47989:tid 48000] [client 52.236.56.26:18534] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acNBLCWKdJMhIccROjnYTQAAAUk"]
[Wed Mar 25 09:58:05.352121 2026] [:error] [pid 47989:tid 47996] [client 52.236.56.26:28915] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acNBLSWKdJMhIccROjnYUwAAAUU"]
[Wed Mar 25 09:58:06.086211 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:28911] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acNBLiWKdJMhIccROjnYggAAAUw"]
[Wed Mar 25 09:58:06.646081 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:19560] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acNBLiWKdJMhIccROjnYjwAAAVE"]
[Wed Mar 25 09:58:07.452232 2026] [:error] [pid 47989:tid 47994] [client 52.236.56.26:5661] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acNBLyWKdJMhIccROjnYpgAAAUM"]
[Wed Mar 25 09:58:08.135829 2026] [:error] [pid 756:tid 856] [client 52.236.56.26:13648] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acNBMDOaW6oylMIDBCTn5gAAAIQ"]
[Wed Mar 25 09:58:08.696340 2026] [:error] [pid 26320:tid 26375] [client 52.236.56.26:18545] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acNBMDkUgS2mHAojGnmF8gAAAdM"]
[Wed Mar 25 09:58:09.452375 2026] [:error] [pid 26320:tid 26331] [client 52.236.56.26:44452] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acNBMTkUgS2mHAojGnmF9AAAAcI"]
[Wed Mar 25 09:58:10.105630 2026] [:error] [pid 26321:tid 26361] [client 52.236.56.26:59042] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acNBMvKO65qqGZCSPZrH2gAAAhQ"]
[Wed Mar 25 09:58:10.881985 2026] [:error] [pid 47989:tid 48004] [client 52.236.56.26:44477] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acNBMiWKdJMhIccROjnY4AAAAU0"]
[Wed Mar 25 09:58:11.872809 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:18548] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acNBMyWKdJMhIccROjnY6QAAAUw"]
[Wed Mar 25 09:58:12.553830 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:44425] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acNBNCWKdJMhIccROjnY8AAAAVM"]
[Wed Mar 25 09:58:13.420553 2026] [:error] [pid 26449:tid 26457] [client 52.236.56.26:44434] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acNBNdpZ2T15NDqzAjHrKQAAAkQ"]
[Wed Mar 25 09:58:14.656728 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:18526] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acNBNtpZ2T15NDqzAjHrQAAAAlg"]
[Wed Mar 25 09:58:18.019022 2026] [:error] [pid 47989:tid 47998] [client 52.236.56.26:59036] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acNBOiWKdJMhIccROjnY_wAAAUc"]
[Wed Mar 25 09:58:18.953403 2026] [:error] [pid 756:tid 858] [client 52.236.56.26:23668] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acNBOjOaW6oylMIDBCTn7gAAAIY"]
[Wed Mar 25 09:58:19.725212 2026] [:error] [pid 26449:tid 26467] [client 52.236.56.26:64607] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acNBO9pZ2T15NDqzAjHrcgAAAk4"]
[Wed Mar 25 09:58:20.580512 2026] [:error] [pid 756:tid 870] [client 52.236.56.26:37790] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acNBPDOaW6oylMIDBCTn8gAAAJI"]
[Wed Mar 25 09:58:21.835523 2026] [:error] [pid 26321:tid 26341] [client 52.236.56.26:29322] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acNBPfKO65qqGZCSPZrH5QAAAgI"]
[Wed Mar 25 09:58:22.891642 2026] [:error] [pid 755:tid 809] [client 52.236.56.26:43691] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acNBPqS6bdaeEwgCGwpezgAAAEQ"]
[Wed Mar 25 09:58:23.619642 2026] [:error] [pid 755:tid 846] [client 52.236.56.26:18511] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acNBP6S6bdaeEwgCGwpezwAAAFc"]
[Wed Mar 25 09:58:24.330198 2026] [:error] [pid 26449:tid 26456] [client 52.236.56.26:36352] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acNBQNpZ2T15NDqzAjHriAAAAkM"]
[Wed Mar 25 09:58:24.975896 2026] [:error] [pid 26321:tid 26359] [client 52.236.56.26:30521] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acNBQPKO65qqGZCSPZrH6AAAAhI"]
[Wed Mar 25 09:58:25.691409 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:23670] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acNBQfKO65qqGZCSPZrH6QAAAhA"]
[Wed Mar 25 09:58:26.415123 2026] [:error] [pid 26321:tid 26355] [client 52.236.56.26:12804] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acNBQvKO65qqGZCSPZrH7gAAAg4"]
[Wed Mar 25 09:58:26.988073 2026] [:error] [pid 26321:tid 26362] [client 52.236.56.26:12805] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acNBQvKO65qqGZCSPZrH8AAAAhU"]
[Wed Mar 25 09:58:27.668273 2026] [:error] [pid 26449:tid 26464] [client 52.236.56.26:64586] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acNBQ9pZ2T15NDqzAjHrjwAAAks"]
[Wed Mar 25 09:58:28.512865 2026] [:error] [pid 26449:tid 26462] [client 52.236.56.26:37096] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acNBRNpZ2T15NDqzAjHrkgAAAkk"]
[Wed Mar 25 09:58:29.349758 2026] [:error] [pid 892:tid 918] [client 52.236.56.26:47398] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acNBRST_G8WMU3T3yxpqCQAAANM"]
[Wed Mar 25 09:58:29.960014 2026] [:error] [pid 26449:tid 26470] [client 52.236.56.26:54276] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acNBRdpZ2T15NDqzAjHrlQAAAlE"]
[Wed Mar 25 09:58:30.669305 2026] [:error] [pid 26449:tid 26454] [client 52.236.56.26:17520] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acNBRtpZ2T15NDqzAjHrmAAAAkE"]
[Wed Mar 25 09:58:31.451950 2026] [:error] [pid 26449:tid 26471] [client 52.236.56.26:43709] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acNBR9pZ2T15NDqzAjHrsQAAAlI"]
[Wed Mar 25 09:58:32.057681 2026] [:error] [pid 47946:tid 47971] [client 52.236.56.26:30484] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acNBSDipQTqBMSeKYhdCfgAAARc"]
[Wed Mar 25 09:58:33.261941 2026] [:error] [pid 26449:tid 26469] [client 52.236.56.26:38509] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acNBSdpZ2T15NDqzAjHrswAAAlA"]
[Wed Mar 25 09:58:33.869573 2026] [:error] [pid 26449:tid 26474] [client 52.236.56.26:32457] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acNBSdpZ2T15NDqzAjHrtQAAAlU"]
[Wed Mar 25 09:58:34.459878 2026] [:error] [pid 47989:tid 48006] [client 52.236.56.26:6135] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acNBSiWKdJMhIccROjnZEwAAAU8"]
[Wed Mar 25 09:58:35.098573 2026] [:error] [pid 26449:tid 26458] [client 52.236.56.26:37103] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acNBS9pZ2T15NDqzAjHruQAAAkU"]
[Wed Mar 25 09:58:35.689151 2026] [:error] [pid 26269:tid 26296] [client 52.236.56.26:51800] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acNBS0n7e-ZQbaIs7qyKWQAAAZQ"]
[Wed Mar 25 09:58:36.398984 2026] [:error] [pid 756:tid 876] [client 52.236.56.26:64114] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNBTDOaW6oylMIDBCToAQAAAJg"]
[Wed Mar 25 09:58:37.123395 2026] [:error] [pid 892:tid 902] [client 52.236.56.26:47375] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNBTST_G8WMU3T3yxpqDwAAAMU"]
[Wed Mar 25 09:58:37.755772 2026] [:error] [pid 26449:tid 26458] [client 52.236.56.26:48833] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNBTdpZ2T15NDqzAjHrwAAAAkU"]
[Wed Mar 25 09:58:38.406979 2026] [:error] [pid 26320:tid 26367] [client 52.236.56.26:54330] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNBTjkUgS2mHAojGnmF_QAAAcs"]
[Wed Mar 25 09:58:39.041115 2026] [:error] [pid 26321:tid 26346] [client 52.236.56.26:30507] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acNBT_KO65qqGZCSPZrH9gAAAgY"]
[Wed Mar 25 09:58:39.606796 2026] [:error] [pid 47989:tid 48004] [client 52.236.56.26:20222] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acNBTyWKdJMhIccROjnZGQAAAU0"]
[Wed Mar 25 09:58:40.228686 2026] [:error] [pid 47989:tid 48011] [client 52.236.56.26:17474] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acNBUCWKdJMhIccROjnZGwAAAVQ"]
[Wed Mar 25 09:58:40.817024 2026] [:error] [pid 26449:tid 26466] [client 52.236.56.26:17495] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acNBUNpZ2T15NDqzAjHrxAAAAk0"]
[Wed Mar 25 09:58:41.453520 2026] [:error] [pid 26449:tid 26453] [client 52.236.56.26:6097] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acNBUdpZ2T15NDqzAjHryQAAAkA"]
[Wed Mar 25 09:58:42.059135 2026] [:error] [pid 26449:tid 26468] [client 52.236.56.26:24563] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acNBUtpZ2T15NDqzAjHrzQAAAk8"]
[Wed Mar 25 09:58:42.707348 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:51793] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acNBUtpZ2T15NDqzAjHr0QAAAlg"]
[Wed Mar 25 09:58:43.301330 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:21723] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acNBU9pZ2T15NDqzAjHr1gAAAlQ"]
[Wed Mar 25 09:58:43.843041 2026] [:error] [pid 26449:tid 26471] [client 52.236.56.26:10981] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acNBU9pZ2T15NDqzAjHr2QAAAlI"]
[Wed Mar 25 09:58:44.373426 2026] [:error] [pid 26449:tid 26460] [client 52.236.56.26:20169] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acNBVNpZ2T15NDqzAjHr3AAAAkc"]
[Wed Mar 25 09:58:44.925291 2026] [:error] [pid 47989:tid 48009] [client 52.236.56.26:21717] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acNBVCWKdJMhIccROjnZHwAAAVI"]
[Wed Mar 25 09:58:45.437841 2026] [:error] [pid 26449:tid 26462] [client 52.236.56.26:48863] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acNBVdpZ2T15NDqzAjHr3wAAAkk"]
[Wed Mar 25 09:58:46.011073 2026] [:error] [pid 755:tid 808] [client 52.236.56.26:14785] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acNBVqS6bdaeEwgCGwpe3AAAAEM"]
[Wed Mar 25 09:58:46.663247 2026] [:error] [pid 26449:tid 26453] [client 52.236.56.26:21696] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acNBVtpZ2T15NDqzAjHr5QAAAkA"]
[Wed Mar 25 09:58:47.258711 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:10986] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acNBV9pZ2T15NDqzAjHr6QAAAlQ"]
[Wed Mar 25 09:58:47.854874 2026] [:error] [pid 26449:tid 26476] [client 52.236.56.26:21712] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acNBV9pZ2T15NDqzAjHr7AAAAlc"]
[Wed Mar 25 09:58:48.402621 2026] [:error] [pid 26449:tid 26472] [client 52.236.56.26:36439] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acNBWNpZ2T15NDqzAjHr7wAAAlM"]
[Wed Mar 25 09:58:49.353340 2026] [:error] [pid 26449:tid 26475] [client 52.236.56.26:10948] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acNBWdpZ2T15NDqzAjHr9QAAAlY"]
[Wed Mar 25 09:58:50.061957 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:54923] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acNBWtpZ2T15NDqzAjHr-AAAAlg"]
[Wed Mar 25 09:58:50.618853 2026] [:error] [pid 26449:tid 26462] [client 52.236.56.26:48837] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acNBWtpZ2T15NDqzAjHr_QAAAkk"]
[Wed Mar 25 09:58:51.207818 2026] [:error] [pid 26449:tid 26454] [client 52.236.56.26:11270] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acNBW9pZ2T15NDqzAjHsAQAAAkE"]
[Wed Mar 25 09:58:52.017507 2026] [:error] [pid 26449:tid 26474] [client 52.236.56.26:16997] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acNBXNpZ2T15NDqzAjHsBwAAAlU"]
[Wed Mar 25 09:58:52.699731 2026] [:error] [pid 26449:tid 26475] [client 52.236.56.26:27622] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acNBXNpZ2T15NDqzAjHsCgAAAlY"]
[Wed Mar 25 09:58:53.283315 2026] [:error] [pid 26449:tid 26470] [client 52.236.56.26:44986] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acNBXdpZ2T15NDqzAjHsDAAAAlE"]
[Wed Mar 25 09:58:53.909894 2026] [:error] [pid 756:tid 859] [client 52.236.56.26:27644] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acNBXTOaW6oylMIDBCToBwAAAIc"]
[Wed Mar 25 09:58:54.887862 2026] [:error] [pid 26449:tid 26462] [client 52.236.56.26:24496] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acNBXtpZ2T15NDqzAjHsFAAAAkk"]
[Wed Mar 25 09:58:55.477928 2026] [:error] [pid 892:tid 912] [client 52.236.56.26:41144] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acNBXyT_G8WMU3T3yxpqEgAAAM4"]
[Wed Mar 25 09:58:56.099060 2026] [:error] [pid 26449:tid 26467] [client 52.236.56.26:26970] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acNBYNpZ2T15NDqzAjHsHAAAAk4"]
[Wed Mar 25 09:58:56.684935 2026] [:error] [pid 26449:tid 26459] [client 52.236.56.26:55650] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acNBYNpZ2T15NDqzAjHsIAAAAkY"]
[Wed Mar 25 09:58:57.405678 2026] [:error] [pid 756:tid 861] [client 52.236.56.26:53744] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acNBYTOaW6oylMIDBCToCgAAAIk"]
[Wed Mar 25 09:58:57.996738 2026] [:error] [pid 26449:tid 26467] [client 52.236.56.26:60129] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acNBYdpZ2T15NDqzAjHsJgAAAk4"]
[Wed Mar 25 09:58:58.689780 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:32399] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acNBYiWKdJMhIccROjnZIQAAAUY"]
[Wed Mar 25 09:58:59.314507 2026] [:error] [pid 26449:tid 26459] [client 52.236.56.26:12119] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acNBY9pZ2T15NDqzAjHsKwAAAkY"]
[Wed Mar 25 09:58:59.934838 2026] [:error] [pid 755:tid 805] [client 52.236.56.26:32411] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acNBY6S6bdaeEwgCGwpe4wAAAEA"]
[Wed Mar 25 09:59:00.540822 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:60119] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acNBZCWKdJMhIccROjnZJQAAAUE"]
[Wed Mar 25 09:59:01.162345 2026] [:error] [pid 756:tid 858] [client 52.236.56.26:44987] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acNBZTOaW6oylMIDBCToEQAAAIY"]
[Wed Mar 25 09:59:01.842979 2026] [:error] [pid 755:tid 840] [client 52.236.56.26:64539] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "acNBZaS6bdaeEwgCGwpe6gAAAFE"]
[Wed Mar 25 09:59:02.473840 2026] [:error] [pid 47946:tid 47972] [client 52.236.56.26:55670] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "acNBZjipQTqBMSeKYhdCjAAAARg"]
[Wed Mar 25 09:59:03.034707 2026] [proxy_fcgi:error] [pid 47946:tid 47948] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:03.295898 2026] [proxy_fcgi:error] [pid 47946:tid 47961] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:03.560112 2026] [proxy_fcgi:error] [pid 47946:tid 47967] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:04.003857 2026] [proxy_fcgi:error] [pid 47946:tid 47969] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:04.258960 2026] [proxy_fcgi:error] [pid 47946:tid 47971] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:04.518206 2026] [proxy_fcgi:error] [pid 47946:tid 47957] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:04.772503 2026] [proxy_fcgi:error] [pid 47946:tid 47952] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:05.029020 2026] [proxy_fcgi:error] [pid 47946:tid 47955] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:05.335648 2026] [proxy_fcgi:error] [pid 47946:tid 47970] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:05.588451 2026] [proxy_fcgi:error] [pid 47946:tid 47948] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:05.843736 2026] [proxy_fcgi:error] [pid 47946:tid 47950] [client 52.236.56.26:60152] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:59:06.093969 2026] [:error] [pid 47946:tid 47965] [client 52.236.56.26:60152] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acNBajipQTqBMSeKYhdCnwAAARE"]
[Wed Mar 25 09:59:07.449360 2026] [:error] [pid 47946:tid 47967] [client 52.236.56.26:32384] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acNBazipQTqBMSeKYhdCoQAAARM"]
[Wed Mar 25 09:59:08.069173 2026] [:error] [pid 755:tid 822] [client 52.236.56.26:11728] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acNBbKS6bdaeEwgCGwpe7wAAAEc"]
[Wed Mar 25 09:59:09.547187 2026] [:error] [pid 47946:tid 47972] [client 52.236.56.26:11731] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acNBbTipQTqBMSeKYhdCqAAAARg"]
[Wed Mar 25 09:59:10.187734 2026] [:error] [pid 47946:tid 47953] [client 52.236.56.26:51775] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acNBbjipQTqBMSeKYhdCrAAAAQU"]
[Wed Mar 25 09:59:11.526413 2026] [:error] [pid 26449:tid 26465] [client 52.236.56.26:11759] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acNBb9pZ2T15NDqzAjHsSgAAAkw"]
[Wed Mar 25 09:59:12.443161 2026] [:error] [pid 892:tid 915] [client 52.236.56.26:32393] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acNBcCT_G8WMU3T3yxpqJwAAANE"]
[Wed Mar 25 09:59:13.536074 2026] [:error] [pid 26449:tid 26462] [client 52.236.56.26:24006] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acNBcdpZ2T15NDqzAjHsUAAAAkk"]
[Wed Mar 25 09:59:14.408822 2026] [:error] [pid 26321:tid 26351] [client 52.236.56.26:23171] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acNBcvKO65qqGZCSPZrH-wAAAgo"]
[Wed Mar 25 09:59:15.650176 2026] [:error] [pid 47946:tid 47970] [client 52.236.56.26:39740] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acNBczipQTqBMSeKYhdCtQAAARY"]
[Wed Mar 25 09:59:20.000097 2026] [:error] [pid 47989:tid 48001] [client 52.236.56.26:39734] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acNBdyWKdJMhIccROjnZRwAAAUo"]
[Wed Mar 25 09:59:23.330438 2026] [:error] [pid 47946:tid 47950] [client 52.236.56.26:5900] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acNBezipQTqBMSeKYhdCvwAAAQI"]
[Wed Mar 25 09:59:25.174891 2026] [:error] [pid 47946:tid 47970] [client 52.236.56.26:39728] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acNBfTipQTqBMSeKYhdCwAAAARY"]
[Wed Mar 25 09:59:28.526384 2026] [:error] [pid 26449:tid 26466] [client 52.236.56.26:26526] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acNBgNpZ2T15NDqzAjHsawAAAk0"]
[Wed Mar 25 09:59:29.480616 2026] [:error] [pid 26449:tid 26459] [client 52.236.56.26:43714] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acNBgdpZ2T15NDqzAjHscAAAAkY"]
[Wed Mar 25 09:59:30.420327 2026] [:error] [pid 26449:tid 26468] [client 52.236.56.26:11372] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acNBgtpZ2T15NDqzAjHsdQAAAk8"]
[Wed Mar 25 09:59:31.148860 2026] [:error] [pid 26449:tid 26467] [client 52.236.56.26:5358] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acNBg9pZ2T15NDqzAjHsfAAAAk4"]
[Wed Mar 25 09:59:31.863194 2026] [:error] [pid 47946:tid 47969] [client 52.236.56.26:42493] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acNBgzipQTqBMSeKYhdCxwAAARU"]
[Wed Mar 25 09:59:32.589411 2026] [:error] [pid 26449:tid 26453] [client 52.236.56.26:11351] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acNBhNpZ2T15NDqzAjHshAAAAkA"]
[Wed Mar 25 09:59:33.138564 2026] [:error] [pid 26321:tid 26343] [client 52.236.56.26:13231] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acNBhfKO65qqGZCSPZrIBwAAAgQ"]
[Wed Mar 25 09:59:33.761110 2026] [:error] [pid 756:tid 857] [client 52.236.56.26:44486] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acNBhTOaW6oylMIDBCToKwAAAIU"]
[Wed Mar 25 09:59:34.394177 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:5191] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acNBhiWKdJMhIccROjnZWAAAAUE"]
[Wed Mar 25 09:59:35.225024 2026] [:error] [pid 47946:tid 47957] [client 52.236.56.26:11744] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acNBhzipQTqBMSeKYhdCzAAAAQk"]
[Wed Mar 25 09:59:36.685976 2026] [:error] [pid 47946:tid 47962] [client 52.236.56.26:13186] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acNBiDipQTqBMSeKYhdC0wAAAQ4"]
[Wed Mar 25 09:59:37.650682 2026] [:error] [pid 47946:tid 47954] [client 52.236.56.26:5213] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acNBiTipQTqBMSeKYhdC1gAAAQY"]
[Wed Mar 25 09:59:38.453533 2026] [:error] [pid 26449:tid 26469] [client 52.236.56.26:39079] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acNBitpZ2T15NDqzAjHsiwAAAlA"]
[Wed Mar 25 09:59:39.566488 2026] [:error] [pid 47946:tid 47948] [client 52.236.56.26:5940] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acNBizipQTqBMSeKYhdC2wAAAQA"]
[Wed Mar 25 09:59:42.101349 2026] [:error] [pid 47989:tid 48011] [client 52.236.56.26:5893] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acNBjiWKdJMhIccROjnZWwAAAVQ"]
[Wed Mar 25 09:59:43.006446 2026] [:error] [pid 26449:tid 26461] [client 52.236.56.26:44490] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acNBj9pZ2T15NDqzAjHskwAAAkg"]
[Wed Mar 25 09:59:44.428485 2026] [:error] [pid 26449:tid 26472] [client 52.236.56.26:15216] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acNBkNpZ2T15NDqzAjHsmgAAAlM"]
[Wed Mar 25 09:59:44.977384 2026] [:error] [pid 755:tid 821] [client 52.236.56.26:60186] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acNBkKS6bdaeEwgCGwpe-wAAAEY"]
[Wed Mar 25 09:59:45.647087 2026] [:error] [pid 756:tid 865] [client 52.236.56.26:54372] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acNBkTOaW6oylMIDBCToNQAAAI0"]
[Wed Mar 25 09:59:46.212974 2026] [:error] [pid 47946:tid 47948] [client 52.236.56.26:44539] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acNBkjipQTqBMSeKYhdC4wAAAQA"]
[Wed Mar 25 09:59:47.012969 2026] [:error] [pid 47989:tid 47991] [client 52.236.56.26:13245] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acNBkyWKdJMhIccROjnZYAAAAUA"]
[Wed Mar 25 09:59:47.974010 2026] [:error] [pid 755:tid 809] [client 52.236.56.26:22688] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acNBk6S6bdaeEwgCGwpe_gAAAEQ"]
[Wed Mar 25 09:59:48.737583 2026] [:error] [pid 47989:tid 47998] [client 52.236.56.26:5913] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acNBlCWKdJMhIccROjnZYwAAAUc"]
[Wed Mar 25 09:59:49.562665 2026] [:error] [pid 26449:tid 26472] [client 52.236.56.26:11715] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acNBldpZ2T15NDqzAjHspgAAAlM"]
[Wed Mar 25 09:59:50.252572 2026] [:error] [pid 26449:tid 26471] [client 52.236.56.26:43067] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acNBltpZ2T15NDqzAjHswwAAAlI"]
[Wed Mar 25 09:59:51.398326 2026] [:error] [pid 47989:tid 47994] [client 52.236.56.26:13193] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acNBlyWKdJMhIccROjnZbgAAAUM"]
[Wed Mar 25 09:59:51.986304 2026] [:error] [pid 26449:tid 26471] [client 52.236.56.26:43767] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acNBl9pZ2T15NDqzAjHs4AAAAlI"]
[Wed Mar 25 09:59:54.770741 2026] [:error] [pid 26449:tid 26457] [client 52.236.56.26:43029] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acNBmtpZ2T15NDqzAjHs9gAAAkQ"]
[Wed Mar 25 09:59:57.295748 2026] [:error] [pid 47946:tid 47957] [client 52.236.56.26:59374] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acNBnTipQTqBMSeKYhdDMwAAAQk"]
[Wed Mar 25 09:59:59.467055 2026] [:error] [pid 892:tid 923] [client 52.236.56.26:60163] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acNBnyT_G8WMU3T3yxpqQAAAANg"]
[Wed Mar 25 10:00:00.218466 2026] [:error] [pid 47989:tid 47999] [client 52.236.56.26:52403] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acNBoCWKdJMhIccROjnZoAAAAUg"]
[Wed Mar 25 10:00:00.932142 2026] [:error] [pid 47989:tid 48013] [client 52.236.56.26:16956] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acNBoCWKdJMhIccROjnZowAAAVY"]
[Wed Mar 25 10:00:01.631121 2026] [:error] [pid 26449:tid 26456] [client 52.236.56.26:64954] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acNBodpZ2T15NDqzAjHtCwAAAkM"]
[Wed Mar 25 10:00:02.192935 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:12429] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acNBoiWKdJMhIccROjnZpgAAAVM"]
[Wed Mar 25 10:00:02.793308 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:28071] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acNBotpZ2T15NDqzAjHtDwAAAlg"]
[Wed Mar 25 10:00:03.687918 2026] [:error] [pid 26449:tid 26456] [client 52.236.56.26:18442] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acNBo9pZ2T15NDqzAjHtEgAAAkM"]
[Wed Mar 25 10:00:04.678927 2026] [:error] [pid 26449:tid 26464] [client 52.236.56.26:43045] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acNBpNpZ2T15NDqzAjHtFgAAAks"]
[Wed Mar 25 10:00:05.873646 2026] [proxy_fcgi:error] [pid 47989:tid 47999] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:07.789594 2026] [proxy_fcgi:error] [pid 47989:tid 48008] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:08.062628 2026] [proxy_fcgi:error] [pid 47989:tid 48000] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:08.334133 2026] [proxy_fcgi:error] [pid 47989:tid 48003] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:08.897275 2026] [proxy_fcgi:error] [pid 47989:tid 48006] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:09.170386 2026] [proxy_fcgi:error] [pid 47989:tid 47993] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:09.441740 2026] [proxy_fcgi:error] [pid 47989:tid 48004] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:09.714108 2026] [proxy_fcgi:error] [pid 47989:tid 47996] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:09.985422 2026] [proxy_fcgi:error] [pid 47989:tid 47994] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:10.258960 2026] [proxy_fcgi:error] [pid 47989:tid 48011] [client 52.236.56.26:22678] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 10:00:10.547782 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:22678] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acNBqiWKdJMhIccROjnZyAAAAUQ"]
[Wed Mar 25 10:00:11.287161 2026] [:error] [pid 47946:tid 47968] [client 52.236.56.26:12468] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acNBqzipQTqBMSeKYhdDRgAAARQ"]
[Wed Mar 25 10:00:12.049622 2026] [:error] [pid 47989:tid 48005] [client 52.236.56.26:63605] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acNBrCWKdJMhIccROjnZzwAAAU4"]
[Wed Mar 25 10:00:12.714825 2026] [:error] [pid 892:tid 901] [client 52.236.56.26:42455] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acNBrCT_G8WMU3T3yxpqSgAAAMQ"]
[Wed Mar 25 10:00:13.409659 2026] [:error] [pid 47946:tid 47966] [client 52.236.56.26:13188] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acNBrTipQTqBMSeKYhdDUAAAARI"]
[Wed Mar 25 10:00:14.317231 2026] [:error] [pid 756:tid 857] [client 52.236.56.26:20132] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acNBrjOaW6oylMIDBCToTgAAAIU"]
[Wed Mar 25 10:00:15.322281 2026] [:error] [pid 26321:tid 26358] [client 52.236.56.26:54344] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acNBr_KO65qqGZCSPZrIEAAAAhE"]
[Wed Mar 25 10:00:15.969477 2026] [:error] [pid 26320:tid 26347] [client 52.236.56.26:42448] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acNBrzkUgS2mHAojGnmGDgAAAco"]
[Wed Mar 25 10:00:16.613490 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:64920] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acNBsCWKdJMhIccROjnZ5QAAAUQ"]
[Wed Mar 25 10:00:17.203374 2026] [:error] [pid 755:tid 821] [client 52.236.56.26:63592] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acNBsaS6bdaeEwgCGwpfHgAAAEY"]
[Wed Mar 25 10:00:17.947615 2026] [:error] [pid 26321:tid 26356] [client 52.236.56.26:20150] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acNBsfKO65qqGZCSPZrIEgAAAg8"]
[Wed Mar 25 10:00:18.550928 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:52368] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acNBstpZ2T15NDqzAjHtIAAAAlg"]
[Wed Mar 25 10:00:19.282539 2026] [:error] [pid 47946:tid 47956] [client 52.236.56.26:19463] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acNBszipQTqBMSeKYhdDVAAAAQg"]
[Wed Mar 25 10:00:19.877445 2026] [:error] [pid 26449:tid 26474] [client 52.236.56.26:43032] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acNBs9pZ2T15NDqzAjHtJwAAAlU"]
[Wed Mar 25 10:00:20.719678 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:19468] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acNBtCWKdJMhIccROjnZ6gAAAUE"]
[Wed Mar 25 10:00:21.657659 2026] [:error] [pid 754:tid 781] [client 52.236.56.26:59727] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acNBtTisL3asPbA3CtjckwAAABA"]
[Wed Mar 25 10:00:22.189642 2026] [:error] [pid 26321:tid 26348] [client 52.236.56.26:63558] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acNBtvKO65qqGZCSPZrIFQAAAgc"]
[Wed Mar 25 10:00:22.856602 2026] [:error] [pid 26449:tid 26468] [client 52.236.56.26:13202] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acNBttpZ2T15NDqzAjHtMwAAAk8"]
[Wed Mar 25 10:00:23.600735 2026] [:error] [pid 26449:tid 26454] [client 52.236.56.26:18488] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acNBt9pZ2T15NDqzAjHtNwAAAkE"]
[Wed Mar 25 10:00:24.378555 2026] [:error] [pid 47989:tid 47993] [client 52.236.56.26:52383] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acNBuCWKdJMhIccROjnZ8AAAAUI"]
[Wed Mar 25 10:00:25.075858 2026] [:error] [pid 26449:tid 26468] [client 52.236.56.26:64944] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acNBudpZ2T15NDqzAjHtPAAAAk8"]
[Wed Mar 25 10:00:26.016720 2026] [:error] [pid 47946:tid 47957] [client 52.236.56.26:22156] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acNBujipQTqBMSeKYhdDVwAAAQk"]
[Wed Mar 25 10:00:27.091129 2026] [:error] [pid 26320:tid 26332] [client 52.236.56.26:28095] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acNBuzkUgS2mHAojGnmGDwAAAcM"]
[Wed Mar 25 10:00:27.721038 2026] [:error] [pid 756:tid 875] [client 52.236.56.26:43048] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acNBuzOaW6oylMIDBCToXAAAAJc"]
[Wed Mar 25 10:00:28.461373 2026] [:error] [pid 756:tid 865] [client 52.236.56.26:64929] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acNBvDOaW6oylMIDBCToXgAAAI0"]
[Wed Mar 25 10:00:29.446981 2026] [:error] [pid 26449:tid 26458] [client 52.236.56.26:18495] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acNBvdpZ2T15NDqzAjHtRAAAAkU"]
[Wed Mar 25 10:00:30.377818 2026] [:error] [pid 26449:tid 26463] [client 52.236.56.26:22157] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acNBvtpZ2T15NDqzAjHtTQAAAko"]
[Wed Mar 25 10:00:32.442833 2026] [:error] [pid 26449:tid 26461] [client 52.236.56.26:18434] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acNBwNpZ2T15NDqzAjHtWAAAAkg"]
[Wed Mar 25 10:00:33.148754 2026] [:error] [pid 26449:tid 26459] [client 52.236.56.26:13194] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acNBwdpZ2T15NDqzAjHtWwAAAkY"]
[Wed Mar 25 10:00:33.770766 2026] [:error] [pid 26269:tid 26293] [client 52.236.56.26:16915] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acNBwUn7e-ZQbaIs7qyKZAAAAZE"]
[Wed Mar 25 10:00:34.356607 2026] [:error] [pid 26320:tid 26372] [client 52.236.56.26:43738] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acNBwjkUgS2mHAojGnmGEQAAAdA"]
[Wed Mar 25 10:00:35.009009 2026] [:error] [pid 754:tid 784] [client 52.236.56.26:18443] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acNBwzisL3asPbA3CtjcmAAAABM"]
[Wed Mar 25 10:00:35.560416 2026] [:error] [pid 26320:tid 26329] [client 52.236.56.26:22177] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acNBwzkUgS2mHAojGnmGEgAAAcA"]
[Wed Mar 25 10:00:36.266122 2026] [:error] [pid 47946:tid 47948] [client 52.236.56.26:43011] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acNBxDipQTqBMSeKYhdDXwAAAQA"]
[Wed Mar 25 10:00:36.877294 2026] [:error] [pid 47989:tid 48000] [client 52.236.56.26:19466] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acNBxCWKdJMhIccROjnZ_QAAAUk"]
[Wed Mar 25 10:00:37.584147 2026] [:error] [pid 47946:tid 47956] [client 52.236.56.26:43758] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acNBxTipQTqBMSeKYhdDYwAAAQg"]
[Wed Mar 25 10:00:38.299829 2026] [:error] [pid 47946:tid 47962] [client 52.236.56.26:22202] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acNBxjipQTqBMSeKYhdDZQAAAQ4"]
[Wed Mar 25 10:00:38.999483 2026] [:error] [pid 756:tid 876] [client 52.236.56.26:13228] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acNBxjOaW6oylMIDBCToZwAAAJg"]
[Wed Mar 25 10:00:39.721674 2026] [:error] [pid 26321:tid 26353] [client 52.236.56.26:22701] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acNBx_KO65qqGZCSPZrIGgAAAgw"]
[Wed Mar 25 10:00:40.449593 2026] [:error] [pid 755:tid 836] [client 52.236.56.26:20107] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acNByKS6bdaeEwgCGwpfIwAAAE0"]
[Wed Mar 25 10:00:41.053000 2026] [:error] [pid 26321:tid 26359] [client 52.236.56.26:59350] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acNByfKO65qqGZCSPZrIHAAAAhI"]
[Wed Mar 25 10:00:41.667868 2026] [:error] [pid 892:tid 905] [client 52.236.56.26:22660] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acNByST_G8WMU3T3yxpqTgAAAMc"]
[Wed Mar 25 10:00:42.262432 2026] [:error] [pid 47989:tid 47996] [client 52.236.56.26:29860] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acNByiWKdJMhIccROjnaBwAAAUU"]
[Wed Mar 25 10:00:42.857428 2026] [:error] [pid 756:tid 856] [client 52.236.56.26:29853] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acNByjOaW6oylMIDBCTobQAAAIQ"]
[Wed Mar 25 10:00:43.540895 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:22686] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acNByyWKdJMhIccROjnaCgAAAVM"]
[Wed Mar 25 10:00:44.126120 2026] [:error] [pid 47946:tid 47960] [client 52.236.56.26:64912] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acNBzDipQTqBMSeKYhdDagAAAQw"]
[Wed Mar 25 10:00:44.746552 2026] [:error] [pid 754:tid 765] [client 52.236.56.26:19472] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acNBzDisL3asPbA3CtjcnQAAAAA"]
[Wed Mar 25 10:00:45.312507 2026] [:error] [pid 754:tid 766] [client 52.236.56.26:63560] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acNBzTisL3asPbA3CtjcowAAAAE"]
[Wed Mar 25 10:00:46.396811 2026] [:error] [pid 47946:tid 47967] [client 52.236.56.26:43057] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acNBzjipQTqBMSeKYhdDbAAAARM"]
[Wed Mar 25 10:00:47.421341 2026] [:error] [pid 26320:tid 26331] [client 52.236.56.26:52411] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acNBzzkUgS2mHAojGnmGGQAAAcI"]
[Wed Mar 25 10:00:48.201152 2026] [:error] [pid 47946:tid 47958] [client 52.236.56.26:12426] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acNB0DipQTqBMSeKYhdDbQAAAQo"]
[Wed Mar 25 10:00:49.217352 2026] [:error] [pid 892:tid 915] [client 52.236.56.26:64922] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acNB0ST_G8WMU3T3yxpqVAAAANE"]
[Wed Mar 25 11:25:16.804002 2026] [:error] [pid 47946:tid 47959] [client 136.144.35.149:43721] [client 136.144.35.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.149, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acNVnDipQTqBMSeKYhdduwAAAQs"]
[Wed Mar 25 11:25:16.814785 2026] [proxy_fcgi:error] [pid 47946:tid 47959] [client 136.144.35.149:43721] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:38.447318 2026] [proxy_fcgi:error] [pid 47989:tid 47992] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:38.744326 2026] [proxy_fcgi:error] [pid 47989:tid 47993] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:39.496280 2026] [proxy_fcgi:error] [pid 47989:tid 47997] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:39.747878 2026] [proxy_fcgi:error] [pid 47989:tid 47995] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:39.991475 2026] [proxy_fcgi:error] [pid 47989:tid 48009] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:40.238108 2026] [proxy_fcgi:error] [pid 47989:tid 47998] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:40.484335 2026] [proxy_fcgi:error] [pid 47989:tid 47994] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:40.740354 2026] [proxy_fcgi:error] [pid 47989:tid 48005] [client 68.221.133.183:34917] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:49:40.980169 2026] [:error] [pid 47989:tid 48015] [client 68.221.133.183:34917] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acOvtCWKdJMhIccROjmZgwAAAVg"]
[Wed Mar 25 17:49:41.466518 2026] [:error] [pid 47989:tid 47993] [client 68.221.133.183:35280] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acOvtSWKdJMhIccROjmZjgAAAUI"]
[Wed Mar 25 17:49:41.951984 2026] [:error] [pid 25967:tid 25987] [client 68.221.133.183:34820] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acOvtfg8Qtq7ZM4mSFkqAAAAA08"]
[Wed Mar 25 17:49:42.454302 2026] [:error] [pid 25967:tid 25972] [client 68.221.133.183:34904] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acOvtvg8Qtq7ZM4mSFkqAgAAA0A"]
[Wed Mar 25 17:49:42.948526 2026] [:error] [pid 47946:tid 47971] [client 68.221.133.183:35281] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acOvtjipQTqBMSeKYhd8_gAAARc"]
[Wed Mar 25 17:49:43.425936 2026] [:error] [pid 26321:tid 26340] [client 68.221.133.183:34918] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acOvt_KO65qqGZCSPZotfwAAAgE"]
[Wed Mar 25 17:49:43.908417 2026] [:error] [pid 26321:tid 26364] [client 68.221.133.183:34928] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acOvt_KO65qqGZCSPZotgQAAAhc"]
[Wed Mar 25 17:49:44.435259 2026] [:error] [pid 26321:tid 26355] [client 68.221.133.183:34915] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acOvuPKO65qqGZCSPZothQAAAg4"]
[Wed Mar 25 17:49:44.913700 2026] [:error] [pid 47989:tid 47993] [client 68.221.133.183:35250] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acOvuCWKdJMhIccROjmZtQAAAUI"]
[Wed Mar 25 17:49:45.470951 2026] [:error] [pid 47946:tid 47954] [client 68.221.133.183:34925] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acOvuTipQTqBMSeKYhd8_wAAAQY"]
[Wed Mar 25 17:49:46.141084 2026] [:error] [pid 26449:tid 26461] [client 68.221.133.183:35210] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acOvutpZ2T15NDqzAjFpRAAAAkg"]
[Wed Mar 25 17:49:46.639490 2026] [:error] [pid 25967:tid 25977] [client 68.221.133.183:34913] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acOvuvg8Qtq7ZM4mSFkqCwAAA0U"]
[Wed Mar 25 17:49:47.162322 2026] [:error] [pid 47946:tid 47957] [client 68.221.133.183:34894] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acOvuzipQTqBMSeKYhd9AAAAAQk"]
[Wed Mar 25 17:49:47.647187 2026] [:error] [pid 25967:tid 25972] [client 68.221.133.183:34821] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acOvu_g8Qtq7ZM4mSFkqDAAAA0A"]
[Wed Mar 25 17:49:48.153555 2026] [:error] [pid 25875:tid 25890] [client 68.221.133.183:34931] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acOvvBJ38QkS3NyfshzWCwAAAok"]
[Wed Mar 25 17:49:48.635268 2026] [:error] [pid 25875:tid 25903] [client 68.221.133.183:35218] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acOvvBJ38QkS3NyfshzWDQAAApY"]
[Wed Mar 25 17:49:49.121279 2026] [:error] [pid 25875:tid 25884] [client 68.221.133.183:35275] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acOvvRJ38QkS3NyfshzWDgAAAoM"]
[Wed Mar 25 17:49:49.602442 2026] [:error] [pid 47946:tid 47955] [client 68.221.133.183:34919] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acOvvTipQTqBMSeKYhd9AwAAAQc"]
[Wed Mar 25 17:49:50.089138 2026] [:error] [pid 47989:tid 48007] [client 68.221.133.183:35287] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acOvviWKdJMhIccROjmZwQAAAVA"]
[Wed Mar 25 17:49:50.568470 2026] [:error] [pid 26449:tid 26465] [client 68.221.133.183:35317] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acOvvtpZ2T15NDqzAjFpRwAAAkw"]
[Wed Mar 25 17:49:51.098186 2026] [:error] [pid 25969:tid 26030] [client 68.221.133.183:35325] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acOvvxd3aEUmOfdKja_-DgAAA8Q"]
[Wed Mar 25 18:42:00.696301 2026] [proxy_fcgi:error] [pid 25967:tid 25996] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:00.960913 2026] [proxy_fcgi:error] [pid 25967:tid 25976] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:01.755562 2026] [proxy_fcgi:error] [pid 25967:tid 25972] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:02.018117 2026] [proxy_fcgi:error] [pid 25967:tid 25991] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:02.281930 2026] [proxy_fcgi:error] [pid 25967:tid 25974] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:02.548138 2026] [proxy_fcgi:error] [pid 25967:tid 25992] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:02.812196 2026] [proxy_fcgi:error] [pid 25967:tid 25977] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:03.076920 2026] [proxy_fcgi:error] [pid 25967:tid 25994] [client 20.251.61.72:56786] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:42:03.337002 2026] [:error] [pid 25967:tid 25993] [client 20.251.61.72:56786] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acO7-_g8Qtq7ZM4mSFk_lgAAA1U"]
[Wed Mar 25 18:42:03.855691 2026] [:error] [pid 26269:tid 26279] [client 20.251.61.72:47148] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acO7-0n7e-ZQbaIs7qy1RQAAAYM"]
[Wed Mar 25 18:42:04.378015 2026] [:error] [pid 26449:tid 26466] [client 20.251.61.72:61695] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acO7_NpZ2T15NDqzAjFxqgAAAk0"]
[Wed Mar 25 18:42:04.897462 2026] [:error] [pid 47989:tid 47997] [client 20.251.61.72:61636] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AAAA.php"] [unique_id "acO7_CWKdJMhIccROjm3EgAAAUY"]
[Wed Mar 25 18:42:05.435223 2026] [:error] [pid 25967:tid 25988] [client 20.251.61.72:51338] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acO7_fg8Qtq7ZM4mSFk_mgAAA1A"]
[Wed Mar 25 18:42:05.964763 2026] [:error] [pid 26321:tid 26339] [client 20.251.61.72:44621] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO7_fKO65qqGZCSPZo5oQAAAgA"]
[Wed Mar 25 18:42:06.530311 2026] [:error] [pid 892:tid 907] [client 20.251.61.72:46584] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO7_iT_G8WMU3T3yxrKgwAAAMk"]
[Wed Mar 25 18:42:07.056546 2026] [:error] [pid 892:tid 904] [client 20.251.61.72:53472] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO7_yT_G8WMU3T3yxrKhgAAAMY"]
[Wed Mar 25 18:42:07.579096 2026] [:error] [pid 892:tid 895] [client 20.251.61.72:46535] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO7_yT_G8WMU3T3yxrKigAAAME"]
[Wed Mar 25 18:42:08.098302 2026] [:error] [pid 892:tid 909] [client 20.251.61.72:56887] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta.php"] [unique_id "acO8ACT_G8WMU3T3yxrKjQAAAMs"]
[Wed Mar 25 18:42:08.662380 2026] [:error] [pid 25875:tid 25895] [client 20.251.61.72:56853] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO8ABJ38QkS3NyfshzlCwAAAo4"]
[Wed Mar 25 18:42:09.182404 2026] [:error] [pid 25967:tid 25995] [client 20.251.61.72:44629] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO8Afg8Qtq7ZM4mSFk_oAAAA1c"]
[Wed Mar 25 18:52:02.510455 2026] [proxy_fcgi:error] [pid 25967:tid 25994] [client 4.223.157.191:44839] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:52:02.778064 2026] [proxy_fcgi:error] [pid 25967:tid 25978] [client 4.223.157.191:44839] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:52:06.338330 2026] [proxy_fcgi:error] [pid 25967:tid 25992] [client 4.223.157.191:44839] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:52:06.612939 2026] [proxy_fcgi:error] [pid 25967:tid 25981] [client 4.223.157.191:44839] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:52:06.880691 2026] [proxy_fcgi:error] [pid 25967:tid 25989] [client 4.223.157.191:44839] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:52:07.144148 2026] [:error] [pid 25967:tid 25982] [client 4.223.157.191:44839] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acO-V_g8Qtq7ZM4mSFlE1wAAA0o"]
[Wed Mar 25 18:52:07.685766 2026] [:error] [pid 25967:tid 25995] [client 4.223.157.191:43792] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acO-V_g8Qtq7ZM4mSFlE3AAAA1c"]
[Wed Mar 25 18:52:08.215195 2026] [:error] [pid 25875:tid 25897] [client 4.223.157.191:37115] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acO-WBJ38QkS3NyfshzohAAAApA"]
[Wed Mar 25 18:52:08.747749 2026] [:error] [pid 47989:tid 47998] [client 4.223.157.191:61998] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acO-WCWKdJMhIccROjm_mQAAAUc"]
[Wed Mar 25 18:52:09.301737 2026] [:error] [pid 47989:tid 48015] [client 4.223.157.191:37100] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acO-WSWKdJMhIccROjm_oQAAAVg"]
[Wed Mar 25 18:52:09.832250 2026] [:error] [pid 47989:tid 48002] [client 4.223.157.191:33512] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acO-WSWKdJMhIccROjm_pQAAAUs"]
[Wed Mar 25 18:52:10.417105 2026] [:error] [pid 47989:tid 47995] [client 4.223.157.191:43201] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acO-WiWKdJMhIccROjm_qgAAAUQ"]
[Wed Mar 25 18:52:11.161369 2026] [:error] [pid 47989:tid 48003] [client 4.223.157.191:43370] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acO-WyWKdJMhIccROjm_swAAAUw"]
[Wed Mar 25 18:52:11.800177 2026] [:error] [pid 25875:tid 25886] [client 4.223.157.191:62002] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fgd.php"] [unique_id "acO-WxJ38QkS3NyfshzohwAAAoU"]
[Wed Mar 25 18:52:12.541866 2026] [:error] [pid 25875:tid 25885] [client 4.223.157.191:45603] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acO-XBJ38QkS3NyfshzojQAAAoQ"]
[Wed Mar 25 18:52:13.074260 2026] [:error] [pid 26321:tid 26344] [client 4.223.157.191:61627] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acO-XfKO65qqGZCSPZo8iwAAAgU"]
[Wed Mar 25 18:52:13.600305 2026] [:error] [pid 47989:tid 48002] [client 4.223.157.191:61582] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acO-XSWKdJMhIccROjm_0AAAAUs"]
[Wed Mar 25 18:52:14.136884 2026] [:error] [pid 47989:tid 48014] [client 4.223.157.191:33953] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acO-XiWKdJMhIccROjm_1AAAAVc"]
[Wed Mar 25 18:52:14.665849 2026] [:error] [pid 47989:tid 47995] [client 4.223.157.191:55576] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO-XiWKdJMhIccROjm_1wAAAUQ"]
[Wed Mar 25 18:52:15.192176 2026] [:error] [pid 25969:tid 26041] [client 4.223.157.191:44827] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO-Xxd3aEUmOfdKja8FCAAAA88"]
[Wed Mar 25 18:52:15.718835 2026] [:error] [pid 26449:tid 26469] [client 4.223.157.191:1200] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO-X9pZ2T15NDqzAjFzywAAAlA"]
[Wed Mar 25 18:52:16.250158 2026] [:error] [pid 25875:tid 25900] [client 4.223.157.191:33527] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gin.php"] [unique_id "acO-YBJ38QkS3NyfshzolAAAApM"]
[Wed Mar 25 18:52:16.774853 2026] [:error] [pid 25875:tid 25895] [client 4.223.157.191:35439] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta.php"] [unique_id "acO-YBJ38QkS3NyfshzolwAAAo4"]
[Wed Mar 25 18:52:17.299325 2026] [:error] [pid 892:tid 910] [client 4.223.157.191:33958] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta.php"] [unique_id "acO-YST_G8WMU3T3yxrMMwAAAMw"]
[Wed Mar 25 18:52:17.823787 2026] [:error] [pid 892:tid 919] [client 4.223.157.191:37098] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta.php"] [unique_id "acO-YST_G8WMU3T3yxrMNAAAANQ"]
[Wed Mar 25 18:52:18.348588 2026] [:error] [pid 25967:tid 25972] [client 4.223.157.191:55585] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta.php"] [unique_id "acO-Yvg8Qtq7ZM4mSFlFPQAAA0A"]
[Wed Mar 25 18:52:18.875441 2026] [:error] [pid 25969:tid 26048] [client 4.223.157.191:1163] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO-Yhd3aEUmOfdKja8FEAAAA9Y"]
[Wed Mar 25 18:52:19.428693 2026] [:error] [pid 25969:tid 26050] [client 4.223.157.191:43106] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO-Yxd3aEUmOfdKja8FEQAAA9g"]
[Wed Mar 25 18:52:19.957378 2026] [:error] [pid 47989:tid 47996] [client 4.223.157.191:61959] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO-YyWKdJMhIccROjm_7wAAAUU"]
[Wed Mar 25 18:52:20.482629 2026] [:error] [pid 25969:tid 26030] [client 4.223.157.191:33492] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acO-ZBd3aEUmOfdKja8FEwAAA8Q"]
[Wed Mar 25 18:52:21.006710 2026] [:error] [pid 47989:tid 48007] [client 4.223.157.191:37058] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acO-ZSWKdJMhIccROjnAAgAAAVA"]
[Wed Mar 25 18:52:21.534069 2026] [:error] [pid 47989:tid 48008] [client 4.223.157.191:56375] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acO-ZSWKdJMhIccROjnABwAAAVE"]
[Wed Mar 25 18:52:22.062740 2026] [:error] [pid 25967:tid 25991] [client 4.223.157.191:50836] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acO-Zvg8Qtq7ZM4mSFlFRgAAA1M"]
[Wed Mar 25 18:52:22.587728 2026] [:error] [pid 25967:tid 25993] [client 4.223.157.191:1161] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acO-Zvg8Qtq7ZM4mSFlFSgAAA1U"]
[Wed Mar 25 18:52:23.124574 2026] [:error] [pid 26321:tid 26342] [client 4.223.157.191:43114] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acO-Z_KO65qqGZCSPZo8kwAAAgM"]
[Wed Mar 25 18:52:23.652505 2026] [:error] [pid 25967:tid 25987] [client 4.223.157.191:38365] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acO-Z_g8Qtq7ZM4mSFlFUAAAA08"]
[Wed Mar 25 18:52:24.200907 2026] [:error] [pid 25875:tid 25902] [client 4.223.157.191:55024] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acO-aBJ38QkS3NyfshzomgAAApU"]
[Wed Mar 25 18:52:24.790020 2026] [:error] [pid 25967:tid 25991] [client 4.223.157.191:35407] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x0rg.php"] [unique_id "acO-aPg8Qtq7ZM4mSFlFUwAAA1M"]
[Wed Mar 25 18:52:25.337867 2026] [:error] [pid 25967:tid 25992] [client 4.223.157.191:59499] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acO-afg8Qtq7ZM4mSFlFVgAAA1Q"]
[Wed Mar 25 18:52:25.948734 2026] [:error] [pid 25967:tid 25982] [client 4.223.157.191:44833] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acO-afg8Qtq7ZM4mSFlFWAAAA0o"]
[Wed Mar 25 18:52:26.509019 2026] [:error] [pid 25967:tid 25973] [client 4.223.157.191:33961] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acO-avg8Qtq7ZM4mSFlFWwAAA0E"]
[Wed Mar 25 18:52:27.114957 2026] [:error] [pid 26449:tid 26454] [client 4.223.157.191:43077] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dk.php"] [unique_id "acO-a9pZ2T15NDqzAjFz1QAAAkE"]
[Wed Mar 25 18:52:27.742577 2026] [:error] [pid 26449:tid 26477] [client 4.223.157.191:44861] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acO-a9pZ2T15NDqzAjFz1gAAAlg"]
[Wed Mar 25 19:02:57.512355 2026] [proxy_fcgi:error] [pid 25875:tid 25897] [client 4.223.157.191:13950] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:02:57.780880 2026] [proxy_fcgi:error] [pid 25875:tid 25892] [client 4.223.157.191:13950] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:02:58.584313 2026] [proxy_fcgi:error] [pid 25875:tid 25890] [client 4.223.157.191:13950] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:02:58.878931 2026] [proxy_fcgi:error] [pid 25875:tid 25884] [client 4.223.157.191:13950] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:02:59.145088 2026] [proxy_fcgi:error] [pid 25875:tid 25895] [client 4.223.157.191:13950] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 19:02:59.409088 2026] [:error] [pid 25875:tid 25899] [client 4.223.157.191:13950] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPA4xJ38QkS3NyfshzsCgAAApI"]
[Wed Mar 25 19:02:59.940095 2026] [:error] [pid 26321:tid 26355] [client 4.223.157.191:13836] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPA4_KO65qqGZCSPZpA_QAAAg4"]
[Wed Mar 25 19:03:00.466650 2026] [:error] [pid 25967:tid 25978] [client 4.223.157.191:13825] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPA5Pg8Qtq7ZM4mSFlL5wAAA0Y"]
[Wed Mar 25 19:03:02.071068 2026] [:error] [pid 47989:tid 48007] [client 4.223.157.191:13935] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPA5iWKdJMhIccROjnKLAAAAVA"]
[Wed Mar 25 19:03:02.601093 2026] [:error] [pid 47989:tid 47996] [client 4.223.157.191:13849] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acPA5iWKdJMhIccROjnKLwAAAUU"]
[Wed Mar 25 19:03:03.200906 2026] [:error] [pid 47989:tid 48006] [client 4.223.157.191:13827] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acPA5yWKdJMhIccROjnKNAAAAU8"]
[Wed Mar 25 19:03:03.785341 2026] [:error] [pid 47989:tid 47997] [client 4.223.157.191:13942] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acPA5yWKdJMhIccROjnKNwAAAUY"]
[Wed Mar 25 19:03:04.325706 2026] [:error] [pid 47989:tid 47999] [client 4.223.157.191:13910] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl2024.php"] [unique_id "acPA6CWKdJMhIccROjnKOgAAAUg"]
[Wed Mar 25 19:03:04.864004 2026] [:error] [pid 892:tid 920] [client 4.223.157.191:13932] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fgd.php"] [unique_id "acPA6CT_G8WMU3T3yxrOHAAAANU"]
[Wed Mar 25 19:03:05.495303 2026] [:error] [pid 47989:tid 48012] [client 4.223.157.191:13830] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fgd.php"] [unique_id "acPA6SWKdJMhIccROjnKPgAAAVU"]
[Wed Mar 25 19:03:06.169953 2026] [:error] [pid 47989:tid 48001] [client 4.223.157.191:13914] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPA6iWKdJMhIccROjnKQAAAAUo"]
[Wed Mar 25 19:03:06.727252 2026] [:error] [pid 25969:tid 26027] [client 4.223.157.191:13903] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPA6hd3aEUmOfdKja8GOgAAA8E"]
[Wed Mar 25 19:03:07.267664 2026] [:error] [pid 26269:tid 26296] [client 4.223.157.191:4514] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPA60n7e-ZQbaIs7qy3ZgAAAZQ"]
[Wed Mar 25 21:42:42.689724 2026] [proxy_fcgi:error] [pid 26321:tid 26342] [client 4.223.157.191:43364] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:42:42.960138 2026] [proxy_fcgi:error] [pid 26321:tid 26343] [client 4.223.157.191:43364] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:42:43.759699 2026] [proxy_fcgi:error] [pid 26321:tid 26359] [client 4.223.157.191:43364] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:42:44.043129 2026] [proxy_fcgi:error] [pid 26321:tid 26364] [client 4.223.157.191:43364] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:42:44.308926 2026] [proxy_fcgi:error] [pid 26321:tid 26356] [client 4.223.157.191:43364] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 21:42:44.572120 2026] [:error] [pid 26321:tid 26362] [client 4.223.157.191:43364] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPmVPKO65qqGZCSPZpd4QAAAhU"]
[Wed Mar 25 21:42:45.186461 2026] [:error] [pid 26449:tid 26462] [client 4.223.157.191:55549] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "acPmVdpZ2T15NDqzAjGLogAAAkk"]
[Wed Mar 25 21:42:45.844216 2026] [:error] [pid 26449:tid 26453] [client 4.223.157.191:45947] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPmVdpZ2T15NDqzAjGLpgAAAkA"]
[Wed Mar 25 21:42:46.391612 2026] [:error] [pid 25967:tid 25978] [client 4.223.157.191:51208] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPmVvg8Qtq7ZM4mSFl1uQAAA0Y"]
[Wed Mar 25 21:42:46.917291 2026] [:error] [pid 47989:tid 48013] [client 4.223.157.191:43331] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPmViWKdJMhIccROjkC-QAAAVY"]
[Wed Mar 25 21:42:47.445308 2026] [:error] [pid 25875:tid 25886] [client 4.223.157.191:57588] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fde.php"] [unique_id "acPmVxJ38QkS3NyfshwtzwAAAoU"]
[Wed Mar 25 21:42:47.971821 2026] [:error] [pid 25875:tid 25891] [client 4.223.157.191:57543] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjde.php"] [unique_id "acPmVxJ38QkS3Nyfshwt0gAAAoo"]
[Wed Mar 25 21:42:48.515195 2026] [:error] [pid 26321:tid 26339] [client 4.223.157.191:37539] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acPmWPKO65qqGZCSPZpd5gAAAgA"]
[Wed Mar 25 21:42:49.046724 2026] [:error] [pid 26449:tid 26459] [client 4.223.157.191:57561] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acPmWdpZ2T15NDqzAjGLqwAAAkY"]
[Wed Mar 25 21:42:49.572498 2026] [:error] [pid 26269:tid 26281] [client 4.223.157.191:45155] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acPmWUn7e-ZQbaIs7qzDOwAAAYU"]
[Wed Mar 25 21:42:50.100563 2026] [:error] [pid 892:tid 906] [client 4.223.157.191:44319] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yawa.php"] [unique_id "acPmWiT_G8WMU3T3yxrfjAAAAMg"]
[Wed Mar 25 21:42:50.627376 2026] [:error] [pid 47989:tid 48000] [client 4.223.157.191:22594] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acPmWiWKdJMhIccROjkC_gAAAUk"]
[Wed Mar 25 21:42:51.174604 2026] [:error] [pid 26269:tid 26293] [client 4.223.157.191:22655] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bays.php"] [unique_id "acPmW0n7e-ZQbaIs7qzDPAAAAZE"]
[Wed Mar 25 21:42:51.759097 2026] [:error] [pid 25967:tid 25983] [client 4.223.157.191:51254] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acPmW_g8Qtq7ZM4mSFl1ugAAA0s"]
[Wed Mar 25 21:42:52.285052 2026] [:error] [pid 47989:tid 47994] [client 4.223.157.191:1042] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acPmXCWKdJMhIccROjkDAwAAAUM"]
[Wed Mar 25 21:42:52.811761 2026] [:error] [pid 26269:tid 26290] [client 4.223.157.191:55530] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acPmXEn7e-ZQbaIs7qzDPQAAAY4"]
[Wed Mar 25 21:42:53.341343 2026] [:error] [pid 26269:tid 26284] [client 4.223.157.191:1551] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "acPmXUn7e-ZQbaIs7qzDPgAAAYg"]
[Thu Mar 26 07:12:51.674861 2026] [:error] [pid 19818:tid 19823] [client 192.3.207.218:56458] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/artisan"] [unique_id "acRr88zaSnm3d1BeM5WNQgAAAMM"]
[Thu Mar 26 07:12:52.098139 2026] [:error] [pid 60829:tid 60839] [client 192.3.207.218:56916] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/artisan"] [unique_id "acRr9PTdjHKeZokybaQpcQAAAQg"]
[Thu Mar 26 07:12:53.306170 2026] [:error] [pid 19710:tid 19722] [client 192.3.207.218:57624] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6oyAAAAAA"]
[Thu Mar 26 07:12:54.270702 2026] [:error] [pid 19712:tid 19785] [client 192.3.207.218:57950] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "acRr9tWhKhRNqm23vFPeQAAAAIk"]
[Thu Mar 26 07:12:54.692106 2026] [:error] [pid 19818:tid 19825] [client 192.3.207.218:58686] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "acRr9szaSnm3d1BeM5WN1gAAAMU"]
[Thu Mar 26 07:12:55.572074 2026] [:error] [pid 31778:tid 31799] [client 192.3.207.218:59528] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env"] [unique_id "acRr9w3kybI2o-xasmA3FAAAAcY"]
[Thu Mar 26 22:54:01.161687 2026] [:error] [pid 19710:tid 19738] [client 20.63.103.30:13701] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acVIiQVEWP8Ar68Njk499QAAABA"]
[Thu Mar 26 22:54:01.994173 2026] [:error] [pid 19710:tid 19746] [client 20.63.103.30:13716] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acVIiQVEWP8Ar68Njk49-gAAABg"]
[Thu Mar 26 22:54:02.817847 2026] [:error] [pid 19711:tid 19752] [client 20.63.103.30:56755] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acVIimj3l1y81GYfluTPoAAAAEM"]
[Thu Mar 26 22:54:03.655577 2026] [:error] [pid 19712:tid 19799] [client 20.63.103.30:63644] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acVIi9WhKhRNqm23vFNXdQAAAJc"]
[Fri Mar 27 00:07:23.884918 2026] [proxy_fcgi:error] [pid 31780:tid 31836] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:24.127895 2026] [proxy_fcgi:error] [pid 31780:tid 31844] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:24.370873 2026] [proxy_fcgi:error] [pid 31780:tid 31834] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:24.650624 2026] [proxy_fcgi:error] [pid 31780:tid 31831] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:24.892618 2026] [proxy_fcgi:error] [pid 31780:tid 31822] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:25.138858 2026] [proxy_fcgi:error] [pid 31780:tid 31820] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:25.382142 2026] [proxy_fcgi:error] [pid 31780:tid 31826] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:25.625190 2026] [proxy_fcgi:error] [pid 31780:tid 31821] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:25.867847 2026] [proxy_fcgi:error] [pid 31780:tid 31830] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:26.110404 2026] [proxy_fcgi:error] [pid 31780:tid 31823] [client 68.221.186.27:34659] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:07:26.350129 2026] [:error] [pid 31780:tid 31825] [client 68.221.186.27:34659] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acVZvpJDwZsy5O4ZXEjbVwAAAgU"]
[Fri Mar 27 00:07:26.930217 2026] [:error] [pid 31778:tid 31813] [client 68.221.186.27:34665] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acVZvg3kybI2o-xasmAzHQAAAdQ"]
[Fri Mar 27 00:07:27.492154 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:30149] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acVZv2j3l1y81GYfluTwxQAAAEU"]
[Fri Mar 27 00:07:27.996349 2026] [:error] [pid 19711:tid 19771] [client 68.221.186.27:34643] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acVZv2j3l1y81GYfluTwyQAAAFY"]
[Fri Mar 27 00:07:28.535496 2026] [:error] [pid 19711:tid 19752] [client 68.221.186.27:34684] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "acVZwGj3l1y81GYfluTwzAAAAEM"]
[Fri Mar 27 00:07:29.085278 2026] [:error] [pid 19710:tid 19740] [client 68.221.186.27:45266] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "acVZwQVEWP8Ar68Njk5acwAAABI"]
[Fri Mar 27 00:07:29.588764 2026] [:error] [pid 60829:tid 60840] [client 68.221.186.27:34641] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "acVZwfTdjHKeZokybaTopAAAAQk"]
[Fri Mar 27 00:07:30.136437 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:30146] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "acVZwmj3l1y81GYfluTw0QAAAEc"]
[Fri Mar 27 00:07:30.683586 2026] [:error] [pid 19710:tid 19725] [client 68.221.186.27:45306] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acVZwgVEWP8Ar68Njk5aeQAAAAM"]
[Fri Mar 27 00:07:31.186039 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:30144] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acVZw2j3l1y81GYfluTw1AAAAEs"]
[Fri Mar 27 00:07:34.292195 2026] [:error] [pid 19710:tid 19737] [client 68.221.186.27:34624] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acVZxgVEWP8Ar68Njk5aewAAAA8"]
[Fri Mar 27 00:07:34.916185 2026] [:error] [pid 19710:tid 19734] [client 68.221.186.27:36786] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acVZxgVEWP8Ar68Njk5afgAAAAw"]
[Fri Mar 27 00:07:35.417390 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:34634] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acVZx2j3l1y81GYfluTw4wAAAFg"]
[Fri Mar 27 00:07:35.961738 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:45270] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acVZx2j3l1y81GYfluTw5gAAAEU"]
[Fri Mar 27 00:07:36.475361 2026] [:error] [pid 31780:tid 31827] [client 68.221.186.27:36797] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acVZyJJDwZsy5O4ZXEjbWgAAAgc"]
[Fri Mar 27 00:07:37.023429 2026] [:error] [pid 60829:tid 60853] [client 68.221.186.27:45277] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acVZyfTdjHKeZokybaToqQAAARY"]
[Fri Mar 27 00:07:37.541220 2026] [:error] [pid 19818:tid 19833] [client 68.221.186.27:36747] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "acVZyczaSnm3d1BeM5VQ4wAAAM0"]
[Fri Mar 27 00:07:38.075802 2026] [:error] [pid 31778:tid 31817] [client 68.221.186.27:30159] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "acVZyg3kybI2o-xasmAzIwAAAdg"]
[Fri Mar 27 00:07:38.564746 2026] [:error] [pid 31778:tid 31803] [client 68.221.186.27:34632] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "acVZyg3kybI2o-xasmAzJAAAAco"]
[Fri Mar 27 00:07:39.122997 2026] [:error] [pid 19710:tid 19727] [client 68.221.186.27:45278] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "acVZywVEWP8Ar68Njk5ahQAAAAU"]
[Fri Mar 27 00:07:39.610431 2026] [:error] [pid 19710:tid 19723] [client 68.221.186.27:17724] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "acVZywVEWP8Ar68Njk5ahwAAAAE"]
[Fri Mar 27 00:07:40.158140 2026] [:error] [pid 31780:tid 31840] [client 68.221.186.27:30145] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "acVZzJJDwZsy5O4ZXEjbYQAAAhM"]
[Fri Mar 27 00:07:40.681217 2026] [:error] [pid 19711:tid 19758] [client 68.221.186.27:34678] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "acVZzGj3l1y81GYfluTw6gAAAEk"]
[Fri Mar 27 00:07:41.242961 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:36788] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "acVZzWj3l1y81GYfluTw7QAAAEU"]
[Fri Mar 27 00:07:41.801806 2026] [:error] [pid 19711:tid 19765] [client 68.221.186.27:36750] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acVZzWj3l1y81GYfluTw7gAAAFA"]
[Fri Mar 27 00:07:42.313375 2026] [:error] [pid 31670:tid 31694] [client 68.221.186.27:30180] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acVZzjXVthXxCnWjOTT7dAAAAVY"]
[Fri Mar 27 00:07:42.820005 2026] [:error] [pid 31670:tid 31696] [client 68.221.186.27:45272] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acVZzjXVthXxCnWjOTT7eAAAAVg"]
[Fri Mar 27 00:07:43.369273 2026] [:error] [pid 19710:tid 19731] [client 68.221.186.27:34637] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "acVZzwVEWP8Ar68Njk5ajgAAAAk"]
[Fri Mar 27 00:07:43.871952 2026] [:error] [pid 19712:tid 19788] [client 68.221.186.27:34673] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "acVZz9WhKhRNqm23vFNmlAAAAIw"]
[Fri Mar 27 00:07:44.356927 2026] [:error] [pid 19712:tid 19796] [client 68.221.186.27:34669] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "acVZ0NWhKhRNqm23vFNmmAAAAJQ"]
[Fri Mar 27 00:07:44.885799 2026] [:error] [pid 19711:tid 19772] [client 68.221.186.27:45311] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "acVZ0Gj3l1y81GYfluTw9gAAAFc"]
[Fri Mar 27 00:07:45.485532 2026] [:error] [pid 19711:tid 19753] [client 68.221.186.27:45298] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "acVZ0Wj3l1y81GYfluTw-QAAAEQ"]
[Fri Mar 27 00:07:45.984005 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:34657] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acVZ0Wj3l1y81GYfluTw_AAAAFQ"]
[Fri Mar 27 00:07:46.487796 2026] [:error] [pid 60829:tid 60851] [client 68.221.186.27:36780] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acVZ0vTdjHKeZokybaToqwAAARQ"]
[Fri Mar 27 00:07:47.076817 2026] [:error] [pid 31670:tid 31674] [client 68.221.186.27:36742] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acVZ0zXVthXxCnWjOTT7ewAAAUI"]
[Fri Mar 27 00:07:47.636809 2026] [:error] [pid 19711:tid 19772] [client 68.221.186.27:45248] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "acVZ02j3l1y81GYfluTxAAAAAFc"]
[Fri Mar 27 00:07:48.166187 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:34649] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acVZ1Gj3l1y81GYfluTxAwAAAEU"]
[Fri Mar 27 00:07:48.716345 2026] [:error] [pid 19711:tid 19770] [client 68.221.186.27:30182] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acVZ1Gj3l1y81GYfluTxCQAAAFU"]
[Fri Mar 27 00:07:49.361543 2026] [:error] [pid 19818:tid 19826] [client 68.221.186.27:45286] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acVZ1czaSnm3d1BeM5VQ6wAAAMY"]
[Fri Mar 27 00:07:49.916786 2026] [:error] [pid 19712:tid 19800] [client 68.221.186.27:45274] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "acVZ1dWhKhRNqm23vFNmoQAAAJg"]
[Fri Mar 27 00:07:50.464553 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:36743] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tbute.php"] [unique_id "acVZ1mj3l1y81GYfluTxDQAAAEs"]
[Fri Mar 27 00:07:51.008402 2026] [:error] [pid 31670:tid 31696] [client 68.221.186.27:34680] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tbute.php"] [unique_id "acVZ1zXVthXxCnWjOTT7gwAAAVg"]
[Fri Mar 27 00:07:51.515985 2026] [:error] [pid 19710:tid 19741] [client 68.221.186.27:36752] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tbute.php"] [unique_id "acVZ1wVEWP8Ar68Njk5amgAAABM"]
[Fri Mar 27 00:07:52.072678 2026] [:error] [pid 19818:tid 19821] [client 68.221.186.27:36769] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tbute.php"] [unique_id "acVZ2MzaSnm3d1BeM5VQ7QAAAME"]
[Fri Mar 27 00:07:52.604922 2026] [:error] [pid 19818:tid 19840] [client 68.221.186.27:29485] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acVZ2MzaSnm3d1BeM5VQ7wAAANQ"]
[Fri Mar 27 00:07:53.089843 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:34631] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acVZ2QVEWP8Ar68Njk5anwAAABY"]
[Fri Mar 27 00:07:53.615357 2026] [:error] [pid 19818:tid 19829] [client 68.221.186.27:34667] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acVZ2czaSnm3d1BeM5VQ9AAAAMk"]
[Fri Mar 27 00:07:54.177406 2026] [:error] [pid 19710:tid 19729] [client 68.221.186.27:45275] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rovoj.php"] [unique_id "acVZ2gVEWP8Ar68Njk5apAAAAAc"]
[Fri Mar 27 00:07:54.669299 2026] [:error] [pid 60829:tid 60840] [client 68.221.186.27:36761] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r3grt7.php"] [unique_id "acVZ2vTdjHKeZokybaTorAAAAQk"]
[Fri Mar 27 00:07:55.163673 2026] [:error] [pid 19711:tid 19749] [client 68.221.186.27:45292] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r3grt7.php"] [unique_id "acVZ22j3l1y81GYfluTxEgAAAEA"]
[Fri Mar 27 00:07:55.743218 2026] [:error] [pid 31670:tid 31674] [client 68.221.186.27:45281] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r3grt7.php"] [unique_id "acVZ2zXVthXxCnWjOTT7hgAAAUI"]
[Fri Mar 27 00:07:56.264407 2026] [:error] [pid 31717:tid 31741] [client 68.221.186.27:36789] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r3grt7.php"] [unique_id "acVZ3L-SCF7YDISDX48GjAAAAZM"]
[Fri Mar 27 00:07:56.822245 2026] [:error] [pid 19711:tid 19761] [client 68.221.186.27:45264] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acVZ3Gj3l1y81GYfluTxFgAAAEw"]
[Fri Mar 27 00:07:57.325869 2026] [:error] [pid 19712:tid 19781] [client 68.221.186.27:36791] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acVZ3dWhKhRNqm23vFNmqAAAAIU"]
[Fri Mar 27 00:07:57.855774 2026] [:error] [pid 19710:tid 19725] [client 68.221.186.27:36770] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acVZ3QVEWP8Ar68Njk5apgAAAAM"]
[Fri Mar 27 00:07:58.377457 2026] [:error] [pid 19710:tid 19723] [client 68.221.186.27:17704] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phina.php"] [unique_id "acVZ3gVEWP8Ar68Njk5aqAAAAAE"]
[Fri Mar 27 00:07:58.943636 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:34670] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acVZ3mj3l1y81GYfluTxGgAAAEg"]
[Fri Mar 27 00:07:59.511793 2026] [:error] [pid 19711:tid 19766] [client 68.221.186.27:34655] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acVZ32j3l1y81GYfluTxHwAAAFE"]
[Fri Mar 27 00:08:00.097096 2026] [:error] [pid 19712:tid 19777] [client 68.221.186.27:30157] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acVZ4NWhKhRNqm23vFNmqwAAAIE"]
[Fri Mar 27 00:08:01.062417 2026] [:error] [pid 19712:tid 19793] [client 68.221.186.27:34683] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acVZ4dWhKhRNqm23vFNmrAAAAJE"]
[Fri Mar 27 00:08:01.594356 2026] [:error] [pid 19818:tid 19821] [client 68.221.186.27:45251] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "acVZ4czaSnm3d1BeM5VQ-AAAAME"]
[Fri Mar 27 00:08:02.075991 2026] [:error] [pid 31780:tid 31822] [client 68.221.186.27:30160] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "acVZ4pJDwZsy5O4ZXEjbaAAAAgI"]
[Fri Mar 27 00:08:02.579562 2026] [:error] [pid 19712:tid 19785] [client 68.221.186.27:34650] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "acVZ4tWhKhRNqm23vFNmsAAAAIk"]
[Fri Mar 27 00:08:03.097294 2026] [:error] [pid 31780:tid 31832] [client 68.221.186.27:45299] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "acVZ45JDwZsy5O4ZXEjbawAAAgs"]
[Fri Mar 27 00:08:03.629909 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:36754] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "acVZ42j3l1y81GYfluTxJAAAAEg"]
[Fri Mar 27 00:08:04.209052 2026] [:error] [pid 19711:tid 19767] [client 68.221.186.27:30193] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "acVZ5Gj3l1y81GYfluTxJgAAAFI"]
[Fri Mar 27 00:08:04.839888 2026] [:error] [pid 19710:tid 19745] [client 68.221.186.27:34664] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "acVZ5AVEWP8Ar68Njk5argAAABc"]
[Fri Mar 27 00:08:05.468141 2026] [:error] [pid 31780:tid 31820] [client 68.221.186.27:34674] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "acVZ5ZJDwZsy5O4ZXEjbbQAAAgA"]
[Fri Mar 27 00:08:06.046585 2026] [:error] [pid 31670:tid 31672] [client 68.221.186.27:36749] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "acVZ5jXVthXxCnWjOTT7kAAAAUA"]
[Fri Mar 27 00:08:06.530203 2026] [:error] [pid 19711:tid 19749] [client 68.221.186.27:17684] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "acVZ5mj3l1y81GYfluTxLwAAAEA"]
[Fri Mar 27 00:08:07.125944 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:36741] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "acVZ52j3l1y81GYfluTxNQAAAFQ"]
[Fri Mar 27 00:08:07.726666 2026] [:error] [pid 19712:tid 19777] [client 68.221.186.27:45282] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "acVZ59WhKhRNqm23vFNmuAAAAIE"]
[Fri Mar 27 00:08:08.340474 2026] [:error] [pid 19712:tid 19800] [client 68.221.186.27:34660] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/595.php"] [unique_id "acVZ6NWhKhRNqm23vFNmuwAAAJg"]
[Fri Mar 27 00:08:08.928905 2026] [:error] [pid 19712:tid 19782] [client 68.221.186.27:17665] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/595.php"] [unique_id "acVZ6NWhKhRNqm23vFNmwAAAAIY"]
[Fri Mar 27 00:08:09.556800 2026] [:error] [pid 60829:tid 60839] [client 68.221.186.27:36772] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/595.php"] [unique_id "acVZ6fTdjHKeZokybaTosQAAAQg"]
[Fri Mar 27 00:08:10.105824 2026] [:error] [pid 31780:tid 31840] [client 68.221.186.27:30153] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/595.php"] [unique_id "acVZ6pJDwZsy5O4ZXEjbdAAAAhM"]
[Fri Mar 27 00:08:10.709758 2026] [:error] [pid 19711:tid 19751] [client 68.221.186.27:34679] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "acVZ6mj3l1y81GYfluTxPgAAAEI"]
[Fri Mar 27 00:08:11.257845 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:36771] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "acVZ6wVEWP8Ar68Njk5asQAAABY"]
[Fri Mar 27 00:08:11.974690 2026] [:error] [pid 60829:tid 60844] [client 68.221.186.27:36740] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "acVZ6_TdjHKeZokybaTotAAAAQ0"]
[Fri Mar 27 00:08:12.585737 2026] [:error] [pid 60829:tid 60836] [client 68.221.186.27:36782] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "acVZ7PTdjHKeZokybaTotgAAAQU"]
[Fri Mar 27 00:08:13.898122 2026] [:error] [pid 19818:tid 19840] [client 68.221.186.27:30151] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acVZ7czaSnm3d1BeM5VRAAAAANQ"]
[Fri Mar 27 00:08:14.619524 2026] [:error] [pid 19711:tid 19765] [client 68.221.186.27:45310] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acVZ7mj3l1y81GYfluTxRgAAAFA"]
[Fri Mar 27 00:08:15.127959 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:30152] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acVZ72j3l1y81GYfluTxSgAAAEg"]
[Fri Mar 27 00:08:15.614957 2026] [:error] [pid 31670:tid 31693] [client 68.221.186.27:45304] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "acVZ7zXVthXxCnWjOTT7kgAAAVU"]
[Fri Mar 27 00:08:16.269303 2026] [:error] [pid 19711:tid 19772] [client 68.221.186.27:30175] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acVZ8Gj3l1y81GYfluTxTgAAAFc"]
[Fri Mar 27 00:08:16.880894 2026] [:error] [pid 19818:tid 19838] [client 68.221.186.27:36760] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acVZ8MzaSnm3d1BeM5VRAwAAANI"]
[Fri Mar 27 00:08:17.525634 2026] [:error] [pid 19711:tid 19768] [client 68.221.186.27:45253] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acVZ8Wj3l1y81GYfluTxUgAAAFM"]
[Fri Mar 27 00:08:18.197269 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:30186] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acVZ8mj3l1y81GYfluTxVQAAAFg"]
[Fri Mar 27 00:08:18.792944 2026] [:error] [pid 19711:tid 19752] [client 68.221.186.27:29472] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acVZ8mj3l1y81GYfluTxVwAAAEM"]
[Fri Mar 27 00:08:19.406454 2026] [:error] [pid 19711:tid 19758] [client 68.221.186.27:34638] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acVZ82j3l1y81GYfluTxWwAAAEk"]
[Fri Mar 27 00:08:20.106286 2026] [:error] [pid 19711:tid 19768] [client 68.221.186.27:29474] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acVZ9Gj3l1y81GYfluTxXgAAAFM"]
[Fri Mar 27 00:08:20.711104 2026] [:error] [pid 19711:tid 19759] [client 68.221.186.27:34640] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acVZ9Gj3l1y81GYfluTxYAAAAEo"]
[Fri Mar 27 00:08:21.280874 2026] [:error] [pid 19710:tid 19742] [client 68.221.186.27:36794] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acVZ9QVEWP8Ar68Njk5auQAAABQ"]
[Fri Mar 27 00:08:21.780035 2026] [:error] [pid 19710:tid 19741] [client 68.221.186.27:45290] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acVZ9QVEWP8Ar68Njk5auwAAABM"]
[Fri Mar 27 00:08:22.301833 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:45271] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acVZ9mj3l1y81GYfluTxaAAAAFg"]
[Fri Mar 27 00:08:22.978347 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:30148] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acVZ9gVEWP8Ar68Njk5avgAAABY"]
[Fri Mar 27 00:08:24.108583 2026] [:error] [pid 31778:tid 31814] [client 68.221.186.27:34629] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "acVZ-A3kybI2o-xasmAzMAAAAdU"]
[Fri Mar 27 00:08:24.799429 2026] [:error] [pid 19712:tid 19790] [client 68.221.186.27:45296] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "acVZ-NWhKhRNqm23vFNmxgAAAI4"]
[Fri Mar 27 00:08:25.348957 2026] [:error] [pid 60829:tid 60847] [client 68.221.186.27:34682] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "acVZ-fTdjHKeZokybaTowAAAARA"]
[Fri Mar 27 00:08:26.027929 2026] [proxy_fcgi:error] [pid 19711:tid 19754] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:26.285709 2026] [proxy_fcgi:error] [pid 19711:tid 19757] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:26.529076 2026] [proxy_fcgi:error] [pid 19711:tid 19755] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:26.902374 2026] [proxy_fcgi:error] [pid 19711:tid 19765] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:27.147600 2026] [proxy_fcgi:error] [pid 19711:tid 19771] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:27.391340 2026] [proxy_fcgi:error] [pid 19711:tid 19766] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:27.647323 2026] [proxy_fcgi:error] [pid 19711:tid 19758] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:27.892612 2026] [proxy_fcgi:error] [pid 19711:tid 19765] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:28.137732 2026] [proxy_fcgi:error] [pid 19711:tid 19771] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:28.381617 2026] [proxy_fcgi:error] [pid 19711:tid 19759] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:28.626862 2026] [proxy_fcgi:error] [pid 19711:tid 19766] [client 68.221.186.27:34645] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:08:28.867044 2026] [:error] [pid 19711:tid 19762] [client 68.221.186.27:34645] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvz.php"] [unique_id "acVZ_Gj3l1y81GYfluTxhQAAAE0"]
[Fri Mar 27 00:08:29.383021 2026] [:error] [pid 19710:tid 19746] [client 68.221.186.27:45268] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvz.php"] [unique_id "acVZ_QVEWP8Ar68Njk5ayQAAABg"]
[Fri Mar 27 00:08:29.882574 2026] [:error] [pid 19710:tid 19730] [client 68.221.186.27:34686] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvz.php"] [unique_id "acVZ_QVEWP8Ar68Njk5azAAAAAg"]
[Fri Mar 27 00:08:30.451186 2026] [:error] [pid 19710:tid 19741] [client 68.221.186.27:29449] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvz.php"] [unique_id "acVZ_gVEWP8Ar68Njk5a0QAAABM"]
[Fri Mar 27 00:08:31.006757 2026] [:error] [pid 19710:tid 19746] [client 68.221.186.27:36739] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acVZ_wVEWP8Ar68Njk5a1QAAABg"]
[Fri Mar 27 00:08:31.523423 2026] [:error] [pid 19710:tid 19722] [client 68.221.186.27:34666] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acVZ_wVEWP8Ar68Njk5a2gAAAAA"]
[Fri Mar 27 00:08:32.036313 2026] [:error] [pid 19711:tid 19764] [client 68.221.186.27:30198] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acVaAGj3l1y81GYfluTxhgAAAE8"]
[Fri Mar 27 00:08:32.573060 2026] [:error] [pid 31778:tid 31808] [client 68.221.186.27:34639] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acVaAA3kybI2o-xasmAzMwAAAc8"]
[Fri Mar 27 00:08:33.075032 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:45302] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acVaAWj3l1y81GYfluTxhwAAAFQ"]
[Fri Mar 27 00:08:33.675569 2026] [:error] [pid 31780:tid 31826] [client 68.221.186.27:36773] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acVaAZJDwZsy5O4ZXEjbfgAAAgY"]
[Fri Mar 27 00:08:34.193146 2026] [:error] [pid 31780:tid 31823] [client 68.221.186.27:34652] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acVaApJDwZsy5O4ZXEjbfwAAAgM"]
[Fri Mar 27 00:08:34.748480 2026] [:error] [pid 19710:tid 19730] [client 68.221.186.27:34677] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "acVaAgVEWP8Ar68Njk5a4QAAAAg"]
[Fri Mar 27 00:08:35.250467 2026] [:error] [pid 31780:tid 31837] [client 68.221.186.27:36765] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acVaA5JDwZsy5O4ZXEjbhAAAAhA"]
[Fri Mar 27 00:08:35.751668 2026] [:error] [pid 31717:tid 31732] [client 68.221.186.27:34633] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acVaA7-SCF7YDISDX48GnQAAAYo"]
[Fri Mar 27 00:08:36.328181 2026] [:error] [pid 19711:tid 19766] [client 68.221.186.27:17671] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acVaBGj3l1y81GYfluTxiQAAAFE"]
[Fri Mar 27 00:08:36.887160 2026] [:error] [pid 19711:tid 19752] [client 68.221.186.27:34636] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "acVaBGj3l1y81GYfluTxjQAAAEM"]
[Fri Mar 27 00:08:37.381465 2026] [:error] [pid 60829:tid 60831] [client 68.221.186.27:45273] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acVaBfTdjHKeZokybaToxAAAAQA"]
[Fri Mar 27 00:08:37.906910 2026] [:error] [pid 19712:tid 19785] [client 68.221.186.27:29487] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acVaBdWhKhRNqm23vFNmywAAAIk"]
[Fri Mar 27 00:08:38.387066 2026] [:error] [pid 19710:tid 19743] [client 68.221.186.27:36792] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acVaBgVEWP8Ar68Njk5a5gAAABU"]
[Fri Mar 27 00:08:38.986004 2026] [:error] [pid 19710:tid 19745] [client 68.221.186.27:17553] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acVaBgVEWP8Ar68Njk5a6AAAABc"]
[Fri Mar 27 00:08:39.567371 2026] [:error] [pid 19710:tid 19736] [client 68.221.186.27:36757] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acVaBwVEWP8Ar68Njk5a6gAAAA4"]
[Fri Mar 27 00:08:40.238492 2026] [:error] [pid 19710:tid 19746] [client 68.221.186.27:29479] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acVaCAVEWP8Ar68Njk5a8QAAABg"]
[Fri Mar 27 00:08:40.770288 2026] [:error] [pid 19710:tid 19743] [client 68.221.186.27:34681] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acVaCAVEWP8Ar68Njk5a9AAAABU"]
[Fri Mar 27 00:08:41.261686 2026] [:error] [pid 19710:tid 19739] [client 68.221.186.27:30181] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sc.php"] [unique_id "acVaCQVEWP8Ar68Njk5a9wAAABE"]
[Fri Mar 27 00:08:41.744679 2026] [:error] [pid 19710:tid 19731] [client 68.221.186.27:30169] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acVaCQVEWP8Ar68Njk5a-gAAAAk"]
[Fri Mar 27 00:08:42.327702 2026] [:error] [pid 19711:tid 19766] [client 68.221.186.27:34630] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acVaCmj3l1y81GYfluTxlgAAAFE"]
[Fri Mar 27 00:08:42.873165 2026] [:error] [pid 19711:tid 19772] [client 68.221.186.27:34653] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acVaCmj3l1y81GYfluTxmwAAAFc"]
[Fri Mar 27 00:08:43.401465 2026] [:error] [pid 19818:tid 19821] [client 68.221.186.27:30161] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acVaC8zaSnm3d1BeM5VRFAAAAME"]
[Fri Mar 27 00:08:43.910700 2026] [:error] [pid 31778:tid 31807] [client 68.221.186.27:36778] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acVaCw3kybI2o-xasmAzOwAAAc4"]
[Fri Mar 27 00:08:44.453420 2026] [:error] [pid 31778:tid 31814] [client 68.221.186.27:34625] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acVaDA3kybI2o-xasmAzPQAAAdU"]
[Fri Mar 27 00:08:45.091465 2026] [:error] [pid 31778:tid 31810] [client 68.221.186.27:45291] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acVaDQ3kybI2o-xasmAzPgAAAdE"]
[Fri Mar 27 00:08:45.680752 2026] [:error] [pid 31778:tid 31797] [client 68.221.186.27:34626] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acVaDQ3kybI2o-xasmAzQAAAAcQ"]
[Fri Mar 27 00:08:46.165768 2026] [:error] [pid 31778:tid 31799] [client 68.221.186.27:36764] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acVaDg3kybI2o-xasmAzQgAAAcY"]
[Fri Mar 27 00:08:46.727630 2026] [:error] [pid 31778:tid 31815] [client 68.221.186.27:29489] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acVaDg3kybI2o-xasmAzQwAAAdY"]
[Fri Mar 27 00:08:47.309123 2026] [:error] [pid 31778:tid 31793] [client 68.221.186.27:36751] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acVaDw3kybI2o-xasmAzRQAAAcA"]
[Fri Mar 27 00:08:47.833202 2026] [:error] [pid 19711:tid 19761] [client 68.221.186.27:34647] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acVaD2j3l1y81GYfluTxnQAAAEw"]
[Fri Mar 27 00:08:48.352774 2026] [:error] [pid 19711:tid 19766] [client 68.221.186.27:30155] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "acVaEGj3l1y81GYfluTxnwAAAFE"]
[Fri Mar 27 00:08:48.930264 2026] [:error] [pid 19711:tid 19768] [client 68.221.186.27:34671] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "acVaEGj3l1y81GYfluTxpAAAAFM"]
[Fri Mar 27 00:08:49.434253 2026] [:error] [pid 19711:tid 19765] [client 68.221.186.27:30180] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "acVaEWj3l1y81GYfluTxqgAAAFA"]
[Fri Mar 27 00:08:50.000707 2026] [:error] [pid 31717:tid 31739] [client 68.221.186.27:45283] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "acVaEb-SCF7YDISDX48GpgAAAZE"]
[Fri Mar 27 00:08:50.570392 2026] [:error] [pid 19711:tid 19751] [client 68.221.186.27:36793] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acVaEmj3l1y81GYfluTxrgAAAEI"]
[Fri Mar 27 00:08:51.067111 2026] [:error] [pid 19818:tid 19828] [client 68.221.186.27:36745] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acVaE8zaSnm3d1BeM5VRFwAAAMg"]
[Fri Mar 27 00:08:51.596677 2026] [:error] [pid 19711:tid 19758] [client 68.221.186.27:36777] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acVaE2j3l1y81GYfluTxtAAAAEk"]
[Fri Mar 27 00:08:52.132036 2026] [:error] [pid 31780:tid 31830] [client 68.221.186.27:17598] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acVaFJJDwZsy5O4ZXEjbmQAAAgk"]
[Fri Mar 27 00:08:52.709675 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:30150] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acVaFGj3l1y81GYfluTxuQAAAFQ"]
[Fri Mar 27 00:08:53.245395 2026] [:error] [pid 31717:tid 31741] [client 68.221.186.27:30164] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acVaFb-SCF7YDISDX48GqAAAAZM"]
[Fri Mar 27 00:08:53.784053 2026] [:error] [pid 19711:tid 19753] [client 68.221.186.27:36756] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acVaFWj3l1y81GYfluTxvAAAAEQ"]
[Fri Mar 27 00:08:54.325187 2026] [:error] [pid 31778:tid 31803] [client 68.221.186.27:30171] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acVaFg3kybI2o-xasmAzSQAAAco"]
[Fri Mar 27 00:08:54.864948 2026] [:error] [pid 19711:tid 19761] [client 68.221.186.27:45257] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acVaFmj3l1y81GYfluTxvwAAAEw"]
[Fri Mar 27 00:08:55.408607 2026] [:error] [pid 31778:tid 31799] [client 68.221.186.27:17715] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acVaFw3kybI2o-xasmAzTAAAAcY"]
[Fri Mar 27 00:08:56.210548 2026] [:error] [pid 31717:tid 31743] [client 68.221.186.27:30189] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acVaGL-SCF7YDISDX48GqgAAAZU"]
[Fri Mar 27 00:08:56.715536 2026] [:error] [pid 31780:tid 31836] [client 68.221.186.27:34675] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acVaGJJDwZsy5O4ZXEjboAAAAg8"]
[Fri Mar 27 00:08:57.277748 2026] [:error] [pid 31780:tid 31838] [client 68.221.186.27:29499] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "acVaGZJDwZsy5O4ZXEjbogAAAhE"]
[Fri Mar 27 00:08:57.860075 2026] [:error] [pid 31780:tid 31833] [client 68.221.186.27:15570] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "acVaGZJDwZsy5O4ZXEjbpAAAAgw"]
[Fri Mar 27 00:08:58.403746 2026] [:error] [pid 19710:tid 19728] [client 68.221.186.27:17538] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "acVaGgVEWP8Ar68Njk5bBQAAAAY"]
[Fri Mar 27 00:08:58.911810 2026] [:error] [pid 19710:tid 19742] [client 68.221.186.27:17679] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "acVaGgVEWP8Ar68Njk5bBgAAABQ"]
[Fri Mar 27 00:08:59.397515 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:36767] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "acVaGwVEWP8Ar68Njk5bBwAAABY"]
[Fri Mar 27 00:08:59.908911 2026] [:error] [pid 19710:tid 19740] [client 68.221.186.27:34658] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "acVaGwVEWP8Ar68Njk5bCgAAABI"]
[Fri Mar 27 00:09:00.520522 2026] [:error] [pid 19710:tid 19736] [client 68.221.186.27:45289] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "acVaHAVEWP8Ar68Njk5bDwAAAA4"]
[Fri Mar 27 00:09:01.068179 2026] [:error] [pid 19712:tid 19794] [client 68.221.186.27:34646] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "acVaHdWhKhRNqm23vFNm3QAAAJI"]
[Fri Mar 27 00:09:01.591061 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:45307] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "acVaHQVEWP8Ar68Njk5bEgAAABY"]
[Fri Mar 27 00:09:02.140839 2026] [:error] [pid 19712:tid 19776] [client 68.221.186.27:17717] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "acVaHtWhKhRNqm23vFNm4QAAAIA"]
[Fri Mar 27 00:09:02.679532 2026] [:error] [pid 19710:tid 19746] [client 68.221.186.27:30188] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "acVaHgVEWP8Ar68Njk5bFAAAABg"]
[Fri Mar 27 00:09:03.207591 2026] [:error] [pid 31717:tid 31723] [client 68.221.186.27:17723] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "acVaH7-SCF7YDISDX48GrwAAAYE"]
[Fri Mar 27 00:09:03.710472 2026] [:error] [pid 31717:tid 31742] [client 68.221.186.27:17693] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "acVaH7-SCF7YDISDX48GsAAAAZQ"]
[Fri Mar 27 00:09:04.225389 2026] [:error] [pid 19710:tid 19727] [client 68.221.186.27:45249] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "acVaIAVEWP8Ar68Njk5bHQAAAAU"]
[Fri Mar 27 00:09:04.771922 2026] [:error] [pid 19712:tid 19780] [client 68.221.186.27:34661] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "acVaINWhKhRNqm23vFNm5QAAAIQ"]
[Fri Mar 27 00:09:05.282250 2026] [:error] [pid 31670:tid 31680] [client 68.221.186.27:36755] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "acVaITXVthXxCnWjOTT7pQAAAUg"]
[Fri Mar 27 00:09:05.762789 2026] [:error] [pid 31780:tid 31844] [client 68.221.186.27:15558] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acVaIZJDwZsy5O4ZXEjbqAAAAhc"]
[Fri Mar 27 00:09:06.252979 2026] [:error] [pid 31670:tid 31674] [client 68.221.186.27:34628] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acVaIjXVthXxCnWjOTT7pwAAAUI"]
[Fri Mar 27 00:09:06.774941 2026] [:error] [pid 60829:tid 60849] [client 68.221.186.27:36736] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acVaIvTdjHKeZokybaTo0AAAARI"]
[Fri Mar 27 00:09:07.291930 2026] [:error] [pid 31778:tid 31807] [client 68.221.186.27:34656] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acVaIw3kybI2o-xasmAzVQAAAc4"]
[Fri Mar 27 00:09:07.786957 2026] [:error] [pid 19818:tid 19824] [client 68.221.186.27:29442] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfuKK.php"] [unique_id "acVaI8zaSnm3d1BeM5VRGwAAAMQ"]
[Fri Mar 27 00:09:08.293849 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:36766] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfuKK.php"] [unique_id "acVaJGj3l1y81GYfluTxywAAAEg"]
[Fri Mar 27 00:09:08.778143 2026] [:error] [pid 60829:tid 60836] [client 68.221.186.27:30163] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfuKK.php"] [unique_id "acVaJPTdjHKeZokybaTo0QAAAQU"]
[Fri Mar 27 00:09:09.285315 2026] [:error] [pid 19712:tid 19782] [client 68.221.186.27:17561] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfuKK.php"] [unique_id "acVaJdWhKhRNqm23vFNm6gAAAIY"]
[Fri Mar 27 00:09:09.774940 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:30205] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OpVq6.php"] [unique_id "acVaJWj3l1y81GYfluTxzQAAAEs"]
[Fri Mar 27 00:09:10.276764 2026] [:error] [pid 19711:tid 19763] [client 68.221.186.27:30194] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OpVq6.php"] [unique_id "acVaJmj3l1y81GYfluTxzwAAAE4"]
[Fri Mar 27 00:09:10.767377 2026] [:error] [pid 19818:tid 19827] [client 68.221.186.27:30172] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OpVq6.php"] [unique_id "acVaJszaSnm3d1BeM5VRIQAAAMc"]
[Fri Mar 27 00:09:11.254156 2026] [:error] [pid 31670:tid 31679] [client 68.221.186.27:45303] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OpVq6.php"] [unique_id "acVaJzXVthXxCnWjOTT7sQAAAUc"]
[Fri Mar 27 00:09:11.748678 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:17719] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Q73BO.php"] [unique_id "acVaJ2j3l1y81GYfluTx0gAAAFg"]
[Fri Mar 27 00:09:12.250037 2026] [:error] [pid 31780:tid 31820] [client 68.221.186.27:36758] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Q73BO.php"] [unique_id "acVaKJJDwZsy5O4ZXEjbqwAAAgA"]
[Fri Mar 27 00:09:12.781535 2026] [:error] [pid 19711:tid 19768] [client 68.221.186.27:45285] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Q73BO.php"] [unique_id "acVaKGj3l1y81GYfluTx1gAAAFM"]
[Fri Mar 27 00:09:13.336452 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:17670] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Q73BO.php"] [unique_id "acVaKWj3l1y81GYfluTx1wAAAEg"]
[Fri Mar 27 00:09:13.922035 2026] [:error] [pid 19711:tid 19749] [client 68.221.186.27:29457] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rmpoa.php"] [unique_id "acVaKWj3l1y81GYfluTx2gAAAEA"]
[Fri Mar 27 00:09:14.437663 2026] [:error] [pid 19712:tid 19781] [client 68.221.186.27:34648] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rmpoa.php"] [unique_id "acVaKtWhKhRNqm23vFNm8gAAAIU"]
[Fri Mar 27 00:09:14.987977 2026] [:error] [pid 31670:tid 31691] [client 68.221.186.27:36768] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rmpoa.php"] [unique_id "acVaKjXVthXxCnWjOTT7tQAAAVM"]
[Fri Mar 27 00:09:15.467343 2026] [:error] [pid 19710:tid 19743] [client 68.221.186.27:34668] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rmpoa.php"] [unique_id "acVaKwVEWP8Ar68Njk5bKAAAABU"]
[Fri Mar 27 00:09:15.950971 2026] [:error] [pid 31670:tid 31687] [client 68.221.186.27:17696] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acVaKzXVthXxCnWjOTT7ugAAAU8"]
[Fri Mar 27 00:09:16.542000 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:36795] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acVaLGj3l1y81GYfluTx4AAAAEU"]
[Fri Mar 27 00:09:17.032663 2026] [:error] [pid 19711:tid 19768] [client 68.221.186.27:34663] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acVaLWj3l1y81GYfluTx4wAAAFM"]
[Fri Mar 27 00:09:17.751750 2026] [:error] [pid 31717:tid 31730] [client 68.221.186.27:45250] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acVaLb-SCF7YDISDX48GswAAAYg"]
[Fri Mar 27 00:09:18.369968 2026] [:error] [pid 19712:tid 19777] [client 68.221.186.27:30187] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acVaLtWhKhRNqm23vFNm9QAAAIE"]
[Fri Mar 27 00:09:19.038865 2026] [:error] [pid 19711:tid 19752] [client 68.221.186.27:29481] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acVaL2j3l1y81GYfluTx6gAAAEM"]
[Fri Mar 27 00:09:19.535498 2026] [:error] [pid 19711:tid 19759] [client 68.221.186.27:17688] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acVaL2j3l1y81GYfluTx7AAAAEo"]
[Fri Mar 27 00:09:20.040304 2026] [:error] [pid 19818:tid 19837] [client 68.221.186.27:17700] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acVaMMzaSnm3d1BeM5VRJwAAANE"]
[Fri Mar 27 00:09:20.564603 2026] [:error] [pid 19711:tid 19758] [client 68.221.186.27:45301] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acVaMGj3l1y81GYfluTx7wAAAEk"]
[Fri Mar 27 00:09:21.056964 2026] [:error] [pid 19711:tid 19763] [client 68.221.186.27:30206] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acVaMWj3l1y81GYfluTx8QAAAE4"]
[Fri Mar 27 00:09:21.577103 2026] [:error] [pid 19712:tid 19785] [client 68.221.186.27:36779] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acVaMdWhKhRNqm23vFNm_AAAAIk"]
[Fri Mar 27 00:09:22.148775 2026] [:error] [pid 19710:tid 19725] [client 68.221.186.27:36785] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acVaMgVEWP8Ar68Njk5bLAAAAAM"]
[Fri Mar 27 00:09:22.993942 2026] [:error] [pid 19710:tid 19737] [client 68.221.186.27:17687] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acVaMgVEWP8Ar68Njk5bNAAAAA8"]
[Fri Mar 27 00:09:23.585450 2026] [:error] [pid 31780:tid 31832] [client 68.221.186.27:30174] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acVaM5JDwZsy5O4ZXEjbswAAAgs"]
[Fri Mar 27 00:09:24.213526 2026] [:error] [pid 19711:tid 19750] [client 68.221.186.27:29496] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acVaNGj3l1y81GYfluTx9wAAAEE"]
[Fri Mar 27 00:09:24.886069 2026] [:error] [pid 19711:tid 19761] [client 68.221.186.27:29475] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acVaNGj3l1y81GYfluTx-gAAAEw"]
[Fri Mar 27 00:09:25.422724 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:17578] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "acVaNWj3l1y81GYfluTx_QAAAEU"]
[Fri Mar 27 00:09:25.931743 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:29451] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "acVaNWj3l1y81GYfluTyAAAAAEc"]
[Fri Mar 27 00:09:26.625592 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:17666] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "acVaNmj3l1y81GYfluTyBAAAAFg"]
[Fri Mar 27 00:09:27.134933 2026] [:error] [pid 19710:tid 19737] [client 68.221.186.27:29464] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "acVaNwVEWP8Ar68Njk5bPwAAAA8"]
[Fri Mar 27 00:09:27.676186 2026] [:error] [pid 19710:tid 19732] [client 68.221.186.27:29469] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acVaNwVEWP8Ar68Njk5bQQAAAAo"]
[Fri Mar 27 00:09:28.218193 2026] [proxy_fcgi:error] [pid 19711:tid 19769] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:28.474775 2026] [proxy_fcgi:error] [pid 19711:tid 19763] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:28.730529 2026] [proxy_fcgi:error] [pid 19711:tid 19749] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:29.009058 2026] [proxy_fcgi:error] [pid 19711:tid 19768] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:29.396280 2026] [proxy_fcgi:error] [pid 19711:tid 19764] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:29.639716 2026] [proxy_fcgi:error] [pid 19711:tid 19762] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:31.256917 2026] [proxy_fcgi:error] [pid 19711:tid 19752] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:31.653934 2026] [proxy_fcgi:error] [pid 19711:tid 19751] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:31.962605 2026] [proxy_fcgi:error] [pid 19711:tid 19756] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:32.242113 2026] [proxy_fcgi:error] [pid 19711:tid 19763] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:32.487348 2026] [proxy_fcgi:error] [pid 19711:tid 19758] [client 68.221.186.27:36762] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:09:32.768817 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:36762] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acVaPGj3l1y81GYfluTyJgAAAEs"]
[Fri Mar 27 00:09:38.829757 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:45260] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acVaQmj3l1y81GYfluTyQwAAAEs"]
[Fri Mar 27 00:09:39.573641 2026] [:error] [pid 31670:tid 31692] [client 68.221.186.27:30176] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acVaQzXVthXxCnWjOTT7ygAAAVQ"]
[Fri Mar 27 00:09:40.096032 2026] [:error] [pid 19710:tid 19739] [client 68.221.186.27:30199] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acVaRAVEWP8Ar68Njk5bRgAAABE"]
[Fri Mar 27 00:09:40.649747 2026] [:error] [pid 60829:tid 60850] [client 68.221.186.27:45287] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acVaRPTdjHKeZokybaTo2gAAARM"]
[Fri Mar 27 00:09:41.154048 2026] [:error] [pid 19711:tid 19751] [client 68.221.186.27:36748] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acVaRWj3l1y81GYfluTyTgAAAEI"]
[Fri Mar 27 00:09:41.649550 2026] [:error] [pid 19712:tid 19776] [client 68.221.186.27:17583] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acVaRdWhKhRNqm23vFNnCgAAAIA"]
[Fri Mar 27 00:09:42.140615 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:30147] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acVaRmj3l1y81GYfluTyUgAAAFQ"]
[Fri Mar 27 00:09:42.658088 2026] [:error] [pid 19711:tid 19750] [client 68.221.186.27:36783] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel4y.php"] [unique_id "acVaRmj3l1y81GYfluTyVgAAAEE"]
[Fri Mar 27 00:09:43.224804 2026] [:error] [pid 19712:tid 19781] [client 68.221.186.27:15569] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel4y.php"] [unique_id "acVaR9WhKhRNqm23vFNnCwAAAIU"]
[Fri Mar 27 00:09:43.724732 2026] [:error] [pid 31670:tid 31690] [client 68.221.186.27:36746] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel4y.php"] [unique_id "acVaRzXVthXxCnWjOTT7zgAAAVI"]
[Fri Mar 27 00:09:44.232929 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:17676] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel4y.php"] [unique_id "acVaSAVEWP8Ar68Njk5bSwAAAAQ"]
[Fri Mar 27 00:09:44.821614 2026] [:error] [pid 19818:tid 19826] [client 68.221.186.27:17582] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "acVaSMzaSnm3d1BeM5VRMQAAAMY"]
[Fri Mar 27 00:09:45.325626 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:17581] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "acVaSQVEWP8Ar68Njk5bTwAAABY"]
[Fri Mar 27 00:09:45.843998 2026] [:error] [pid 31670:tid 31684] [client 68.221.186.27:17705] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "acVaSTXVthXxCnWjOTT70gAAAUw"]
[Fri Mar 27 00:09:46.386479 2026] [:error] [pid 19818:tid 19827] [client 68.221.186.27:30191] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "acVaSszaSnm3d1BeM5VRNgAAAMc"]
[Fri Mar 27 00:09:46.903464 2026] [:error] [pid 19711:tid 19763] [client 68.221.186.27:45297] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "acVaSmj3l1y81GYfluTyYAAAAE4"]
[Fri Mar 27 00:09:47.429170 2026] [:error] [pid 19710:tid 19735] [client 68.221.186.27:17722] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "acVaSwVEWP8Ar68Njk5bVwAAAA0"]
[Fri Mar 27 00:09:47.918146 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:15595] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "acVaSwVEWP8Ar68Njk5bWwAAAAQ"]
[Fri Mar 27 00:09:48.444297 2026] [:error] [pid 60829:tid 60840] [client 68.221.186.27:17548] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "acVaTPTdjHKeZokybaTo3AAAAQk"]
[Fri Mar 27 00:09:48.942067 2026] [:error] [pid 19818:tid 19843] [client 68.221.186.27:17547] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/resp.php"] [unique_id "acVaTMzaSnm3d1BeM5VRNwAAANc"]
[Fri Mar 27 00:09:49.449848 2026] [:error] [pid 31670:tid 31692] [client 68.221.186.27:30185] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/resp.php"] [unique_id "acVaTTXVthXxCnWjOTT71gAAAVQ"]
[Fri Mar 27 00:09:49.981049 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:17708] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/resp.php"] [unique_id "acVaTWj3l1y81GYfluTyZgAAAEg"]
[Fri Mar 27 00:09:50.472622 2026] [:error] [pid 19711:tid 19764] [client 68.221.186.27:17674] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/resp.php"] [unique_id "acVaTmj3l1y81GYfluTyagAAAE8"]
[Fri Mar 27 00:09:50.984194 2026] [:error] [pid 31717:tid 31726] [client 68.221.186.27:17584] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lanou.php"] [unique_id "acVaTr-SCF7YDISDX48GvAAAAYQ"]
[Fri Mar 27 00:09:51.469643 2026] [:error] [pid 19712:tid 19799] [client 68.221.186.27:36787] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lanou.php"] [unique_id "acVaT9WhKhRNqm23vFNnDwAAAJc"]
[Fri Mar 27 00:09:51.993433 2026] [:error] [pid 31670:tid 31674] [client 68.221.186.27:17706] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lanou.php"] [unique_id "acVaTzXVthXxCnWjOTT72wAAAUI"]
[Fri Mar 27 00:09:52.523668 2026] [:error] [pid 19711:tid 19758] [client 68.221.186.27:29466] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lanou.php"] [unique_id "acVaUGj3l1y81GYfluTybgAAAEk"]
[Fri Mar 27 00:09:53.052312 2026] [:error] [pid 19711:tid 19749] [client 68.221.186.27:17588] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "acVaUWj3l1y81GYfluTycwAAAEA"]
[Fri Mar 27 00:09:53.559417 2026] [:error] [pid 19711:tid 19767] [client 68.221.186.27:36796] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "acVaUWj3l1y81GYfluTyeQAAAFI"]
[Fri Mar 27 00:09:54.167757 2026] [:error] [pid 19710:tid 19733] [client 68.221.186.27:17536] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "acVaUgVEWP8Ar68Njk5bYAAAAAs"]
[Fri Mar 27 00:09:54.686046 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:17682] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "acVaUmj3l1y81GYfluTygQAAAEc"]
[Fri Mar 27 00:09:55.185504 2026] [:error] [pid 31670:tid 31696] [client 68.221.186.27:36790] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acVaUzXVthXxCnWjOTT73gAAAVg"]
[Fri Mar 27 00:09:55.723614 2026] [:error] [pid 19712:tid 19794] [client 68.221.186.27:29446] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acVaU9WhKhRNqm23vFNnFAAAAJI"]
[Fri Mar 27 00:09:56.277321 2026] [:error] [pid 19710:tid 19725] [client 68.221.186.27:34687] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acVaVAVEWP8Ar68Njk5bYQAAAAM"]
[Fri Mar 27 00:09:56.803195 2026] [:error] [pid 19710:tid 19723] [client 68.221.186.27:29454] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pas2.php"] [unique_id "acVaVAVEWP8Ar68Njk5bYwAAAAE"]
[Fri Mar 27 00:09:57.323927 2026] [:error] [pid 31780:tid 31840] [client 68.221.186.27:45261] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schal.php"] [unique_id "acVaVZJDwZsy5O4ZXEjbvQAAAhM"]
[Fri Mar 27 00:09:57.872931 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:17695] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schal.php"] [unique_id "acVaVWj3l1y81GYfluTyigAAAFg"]
[Fri Mar 27 00:09:58.431975 2026] [:error] [pid 31670:tid 31682] [client 68.221.186.27:11665] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schal.php"] [unique_id "acVaVjXVthXxCnWjOTT75wAAAUo"]
[Fri Mar 27 00:09:58.956021 2026] [:error] [pid 31670:tid 31691] [client 68.221.186.27:15564] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schal.php"] [unique_id "acVaVjXVthXxCnWjOTT76gAAAVM"]
[Fri Mar 27 00:09:59.476906 2026] [:error] [pid 31717:tid 31733] [client 68.221.186.27:17702] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acVaV7-SCF7YDISDX48GvwAAAYs"]
[Fri Mar 27 00:10:00.083391 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:17694] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acVaWGj3l1y81GYfluTylAAAAEc"]
[Fri Mar 27 00:10:00.614349 2026] [:error] [pid 31717:tid 31737] [client 68.221.186.27:29491] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acVaWL-SCF7YDISDX48GwwAAAY8"]
[Fri Mar 27 00:10:01.120618 2026] [:error] [pid 31780:tid 31827] [client 68.221.186.27:17701] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xex.php"] [unique_id "acVaWZJDwZsy5O4ZXEjbwwAAAgc"]
[Fri Mar 27 00:10:01.673690 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:29455] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acVaWWj3l1y81GYfluTymgAAAEc"]
[Fri Mar 27 00:10:02.190228 2026] [:error] [pid 31670:tid 31684] [client 68.221.186.27:15558] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acVaWjXVthXxCnWjOTT78gAAAUw"]
[Fri Mar 27 00:10:02.672946 2026] [:error] [pid 31670:tid 31685] [client 68.221.186.27:29461] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acVaWjXVthXxCnWjOTT78wAAAU0"]
[Fri Mar 27 00:10:03.205034 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:30154] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acVaWwVEWP8Ar68Njk5bagAAAAQ"]
[Fri Mar 27 00:10:03.745547 2026] [:error] [pid 19710:tid 19725] [client 68.221.186.27:34635] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acVaWwVEWP8Ar68Njk5bbgAAAAM"]
[Fri Mar 27 00:10:04.306809 2026] [:error] [pid 31780:tid 31822] [client 68.221.186.27:30178] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acVaXJJDwZsy5O4ZXEjbxwAAAgI"]
[Fri Mar 27 00:10:04.811074 2026] [:error] [pid 19712:tid 19799] [client 68.221.186.27:36774] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acVaXNWhKhRNqm23vFNnGwAAAJc"]
[Fri Mar 27 00:10:05.356867 2026] [:error] [pid 31778:tid 31803] [client 68.221.186.27:36798] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acVaXQ3kybI2o-xasmAzcQAAAco"]
[Fri Mar 27 00:10:05.879726 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:17683] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acVaXWj3l1y81GYfluTyogAAAEU"]
[Fri Mar 27 00:10:06.362813 2026] [:error] [pid 31778:tid 31814] [client 68.221.186.27:34662] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acVaXg3kybI2o-xasmAzcwAAAdU"]
[Fri Mar 27 00:10:06.982947 2026] [:error] [pid 31780:tid 31840] [client 68.221.186.27:45262] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acVaXpJDwZsy5O4ZXEjbygAAAhM"]
[Fri Mar 27 00:10:07.493063 2026] [:error] [pid 31717:tid 31725] [client 68.221.186.27:29447] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acVaX7-SCF7YDISDX48GyQAAAYM"]
[Fri Mar 27 00:10:07.981492 2026] [:error] [pid 19711:tid 19773] [client 68.221.186.27:29450] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "acVaX2j3l1y81GYfluTypgAAAFg"]
[Fri Mar 27 00:10:08.520326 2026] [:error] [pid 19711:tid 19756] [client 68.221.186.27:17540] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "acVaYGj3l1y81GYfluTyqAAAAEc"]
[Fri Mar 27 00:10:09.255324 2026] [:error] [pid 19711:tid 19754] [client 68.221.186.27:17569] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "acVaYWj3l1y81GYfluTyqgAAAEU"]
[Fri Mar 27 00:10:09.867752 2026] [:error] [pid 19711:tid 19769] [client 68.221.186.27:17589] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "acVaYWj3l1y81GYfluTyrAAAAFQ"]
[Fri Mar 27 00:10:10.432435 2026] [:error] [pid 19711:tid 19764] [client 68.221.186.27:17539] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acVaYmj3l1y81GYfluTyrgAAAE8"]
[Fri Mar 27 00:10:10.963376 2026] [:error] [pid 19712:tid 19776] [client 68.221.186.27:15581] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acVaYtWhKhRNqm23vFNnIQAAAIA"]
[Fri Mar 27 00:10:11.493570 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:17564] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acVaYwVEWP8Ar68Njk5bdAAAAAQ"]
[Fri Mar 27 00:10:12.047046 2026] [:error] [pid 19711:tid 19762] [client 68.221.186.27:29490] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acVaZGj3l1y81GYfluTyrwAAAE0"]
[Fri Mar 27 00:10:12.626515 2026] [:error] [pid 19818:tid 19828] [client 68.221.186.27:29488] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acVaZMzaSnm3d1BeM5VRQwAAAMg"]
[Fri Mar 27 00:10:13.141002 2026] [:error] [pid 60829:tid 60837] [client 68.221.186.27:17542] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acVaZfTdjHKeZokybaTo6AAAAQY"]
[Fri Mar 27 00:10:13.758342 2026] [:error] [pid 31778:tid 31807] [client 68.221.186.27:17574] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acVaZQ3kybI2o-xasmAzeQAAAc4"]
[Fri Mar 27 00:10:14.468692 2026] [:error] [pid 19710:tid 19742] [client 68.221.186.27:30166] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acVaZgVEWP8Ar68Njk5bdgAAABQ"]
[Fri Mar 27 00:10:15.170549 2026] [:error] [pid 60829:tid 60839] [client 68.221.186.27:34654] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acVaZ_TdjHKeZokybaTo7gAAAQg"]
[Fri Mar 27 00:10:15.705941 2026] [:error] [pid 31670:tid 31680] [client 68.221.186.27:17691] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acVaZzXVthXxCnWjOTT8AAAAAUg"]
[Fri Mar 27 00:10:16.303182 2026] [:error] [pid 19712:tid 19790] [client 68.221.186.27:29497] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acVaaNWhKhRNqm23vFNnLQAAAI4"]
[Fri Mar 27 00:10:16.938327 2026] [:error] [pid 31670:tid 31685] [client 68.221.186.27:17714] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acVaaDXVthXxCnWjOTT8BgAAAU0"]
[Fri Mar 27 00:10:17.459026 2026] [:error] [pid 31780:tid 31837] [client 68.221.186.27:17546] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acVaaZJDwZsy5O4ZXEjbzwAAAhA"]
[Fri Mar 27 00:10:18.114506 2026] [:error] [pid 19710:tid 19723] [client 68.221.186.27:30203] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acVaagVEWP8Ar68Njk5bgwAAAAE"]
[Fri Mar 27 00:10:18.604053 2026] [:error] [pid 19710:tid 19743] [client 68.221.186.27:36799] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acVaagVEWP8Ar68Njk5bhwAAABU"]
[Fri Mar 27 00:10:19.144835 2026] [:error] [pid 19710:tid 19745] [client 68.221.186.27:29494] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acVaawVEWP8Ar68Njk5biwAAABc"]
[Fri Mar 27 00:10:19.633810 2026] [:error] [pid 31780:tid 31821] [client 68.221.186.27:61573] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acVaa5JDwZsy5O4ZXEjb0QAAAgE"]
[Fri Mar 27 00:10:20.173959 2026] [:error] [pid 19712:tid 19780] [client 68.221.186.27:45263] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acVabNWhKhRNqm23vFNnMAAAAIQ"]
[Fri Mar 27 00:10:20.697077 2026] [:error] [pid 19712:tid 19778] [client 68.221.186.27:34676] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acVabNWhKhRNqm23vFNnMQAAAII"]
[Fri Mar 27 00:10:21.229379 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:30184] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acVabQVEWP8Ar68Njk5bjgAAAAQ"]
[Fri Mar 27 00:10:21.815494 2026] [:error] [pid 31670:tid 31692] [client 68.221.186.27:45257] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acVabTXVthXxCnWjOTT8EQAAAVQ"]
[Fri Mar 27 00:10:22.308008 2026] [:error] [pid 19710:tid 19744] [client 68.221.186.27:30173] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acVabgVEWP8Ar68Njk5bjwAAABY"]
[Fri Mar 27 00:10:22.873519 2026] [:error] [pid 19710:tid 19733] [client 68.221.186.27:30200] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acVabgVEWP8Ar68Njk5bkgAAAAs"]
[Fri Mar 27 00:10:23.376384 2026] [:error] [pid 19710:tid 19722] [client 68.221.186.27:45284] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acVabwVEWP8Ar68Njk5blgAAAAA"]
[Fri Mar 27 00:10:23.886179 2026] [:error] [pid 19711:tid 19762] [client 68.221.186.27:45267] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acVab2j3l1y81GYfluTyvAAAAE0"]
[Fri Mar 27 00:10:24.409195 2026] [:error] [pid 19710:tid 19723] [client 68.221.186.27:15559] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acVacAVEWP8Ar68Njk5bmwAAAAE"]
[Fri Mar 27 00:10:24.987699 2026] [:error] [pid 31670:tid 31690] [client 68.221.186.27:34640] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acVacDXVthXxCnWjOTT8IgAAAVI"]
[Fri Mar 27 00:10:25.552010 2026] [:error] [pid 19710:tid 19740] [client 68.221.186.27:29465] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acVacQVEWP8Ar68Njk5bnwAAABI"]
[Fri Mar 27 00:10:26.137474 2026] [:error] [pid 19818:tid 19842] [client 68.221.186.27:17554] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acVacszaSnm3d1BeM5VRTQAAANY"]
[Fri Mar 27 00:10:26.626123 2026] [:error] [pid 19712:tid 19786] [client 68.221.186.27:17577] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acVactWhKhRNqm23vFNnPQAAAIo"]
[Fri Mar 27 00:10:27.142684 2026] [:error] [pid 19711:tid 19763] [client 68.221.186.27:45252] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acVac2j3l1y81GYfluTy0wAAAE4"]
[Fri Mar 27 00:10:27.642752 2026] [:error] [pid 19710:tid 19730] [client 68.221.186.27:34672] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "acVacwVEWP8Ar68Njk5bogAAAAg"]
[Fri Mar 27 00:10:28.161446 2026] [:error] [pid 19711:tid 19764] [client 68.221.186.27:15610] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acVadGj3l1y81GYfluTy1wAAAE8"]
[Fri Mar 27 00:10:28.707811 2026] [:error] [pid 19711:tid 19759] [client 68.221.186.27:15566] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acVadGj3l1y81GYfluTy2wAAAEo"]
[Fri Mar 27 00:10:29.253468 2026] [:error] [pid 31778:tid 31806] [client 68.221.186.27:17667] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acVadQ3kybI2o-xasmAzgAAAAc0"]
[Fri Mar 27 00:10:29.801511 2026] [:error] [pid 19710:tid 19726] [client 68.221.186.27:11685] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acVadQVEWP8Ar68Njk5brgAAAAQ"]
[Fri Mar 27 00:10:30.321590 2026] [:error] [pid 19710:tid 19737] [client 68.221.186.27:45300] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "acVadgVEWP8Ar68Njk5bsAAAAA8"]
[Fri Mar 27 00:10:30.855648 2026] [:error] [pid 19712:tid 19797] [client 68.221.186.27:29458] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "acVadtWhKhRNqm23vFNnQgAAAJU"]
[Fri Mar 27 00:10:31.407357 2026] [:error] [pid 31670:tid 31673] [client 68.221.186.27:48844] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "acVadzXVthXxCnWjOTT8LgAAAUE"]
[Fri Mar 27 00:10:31.968526 2026] [:error] [pid 31780:tid 31825] [client 68.221.186.27:30165] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "acVad5JDwZsy5O4ZXEjb1gAAAgU"]
[Fri Mar 27 00:10:32.460764 2026] [proxy_fcgi:error] [pid 60829:tid 60842] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:32.704861 2026] [proxy_fcgi:error] [pid 60829:tid 60848] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:32.959597 2026] [proxy_fcgi:error] [pid 60829:tid 60833] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:33.222015 2026] [proxy_fcgi:error] [pid 60829:tid 60850] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:33.467010 2026] [proxy_fcgi:error] [pid 60829:tid 60839] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:33.710229 2026] [proxy_fcgi:error] [pid 60829:tid 60844] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:33.989079 2026] [proxy_fcgi:error] [pid 60829:tid 60832] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:34.234312 2026] [proxy_fcgi:error] [pid 60829:tid 60855] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:34.736545 2026] [proxy_fcgi:error] [pid 60829:tid 60851] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:34.981283 2026] [proxy_fcgi:error] [pid 60829:tid 60838] [client 68.221.186.27:11656] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 00:10:35.221403 2026] [:error] [pid 60829:tid 60843] [client 68.221.186.27:11656] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acVae_TdjHKeZokybaTpAwAAAQw"]
[Fri Mar 27 00:10:35.928622 2026] [:error] [pid 31670:tid 31673] [client 68.221.186.27:15588] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acVaezXVthXxCnWjOTT8OQAAAUE"]
[Fri Mar 27 00:10:36.445548 2026] [:error] [pid 31717:tid 31723] [client 68.221.186.27:45279] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acVafL-SCF7YDISDX48G2AAAAYE"]
[Fri Mar 27 00:10:36.961912 2026] [:error] [pid 19710:tid 19733] [client 68.221.186.27:30204] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acVafAVEWP8Ar68Njk5btQAAAAs"]
[Fri Mar 27 00:10:37.445839 2026] [:error] [pid 19710:tid 19736] [client 68.221.186.27:45276] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "acVafQVEWP8Ar68Njk5btwAAAA4"]
[Fri Mar 27 00:10:37.980647 2026] [:error] [pid 19712:tid 19800] [client 68.221.186.27:11658] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "acVafdWhKhRNqm23vFNnSAAAAJg"]
[Fri Mar 27 00:10:38.463460 2026] [:error] [pid 19818:tid 19843] [client 68.221.186.27:30158] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "acVafszaSnm3d1BeM5VRUgAAANc"]
[Fri Mar 27 00:10:39.025907 2026] [:error] [pid 19818:tid 19839] [client 68.221.186.27:34627] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "acVaf8zaSnm3d1BeM5VRVAAAANM"]
[Fri Mar 27 00:10:39.676704 2026] [:error] [pid 31780:tid 31823] [client 68.221.186.27:17727] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "acVaf5JDwZsy5O4ZXEjb2wAAAgM"]
[Fri Mar 27 00:10:40.188317 2026] [:error] [pid 31778:tid 31803] [client 68.221.186.27:36775] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "acVagA3kybI2o-xasmAzjAAAAco"]
[Fri Mar 27 00:10:40.687620 2026] [:error] [pid 19818:tid 19842] [client 68.221.186.27:17718] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "acVagMzaSnm3d1BeM5VRWQAAANY"]
[Fri Mar 27 00:10:41.201088 2026] [:error] [pid 31717:tid 31743] [client 68.221.186.27:15552] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "acVagb-SCF7YDISDX48G3QAAAZU"]
[Fri Mar 27 00:10:41.703468 2026] [:error] [pid 31717:tid 31744] [client 68.221.186.27:29502] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "acVagb-SCF7YDISDX48G4AAAAZY"]
[Fri Mar 27 00:10:42.227131 2026] [:error] [pid 31670:tid 31684] [client 68.221.186.27:30151] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "acVagjXVthXxCnWjOTT8PwAAAUw"]
[Fri Mar 27 00:10:42.821898 2026] [:error] [pid 19818:tid 19821] [client 68.221.186.27:29443] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "acVagszaSnm3d1BeM5VRWwAAAME"]
[Fri Mar 27 00:10:43.438580 2026] [:error] [pid 31780:tid 31839] [client 68.221.186.27:45293] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "acVag5JDwZsy5O4ZXEjb3QAAAhI"]
[Fri Mar 27 00:10:43.938411 2026] [:error] [pid 31670:tid 31692] [client 68.221.186.27:11677] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acVagzXVthXxCnWjOTT8QAAAAVQ"]
[Fri Mar 27 00:10:44.529506 2026] [:error] [pid 19711:tid 19757] [client 68.221.186.27:17544] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acVahGj3l1y81GYfluTy5QAAAEg"]
[Fri Mar 27 00:10:45.037205 2026] [:error] [pid 19711:tid 19760] [client 68.221.186.27:29445] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acVahWj3l1y81GYfluTy6AAAAEs"]
[Fri Mar 27 00:10:45.572558 2026] [:error] [pid 31717:tid 31738] [client 68.221.186.27:30196] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acVahb-SCF7YDISDX48G4gAAAZA"]
[Fri Mar 27 00:10:46.134091 2026] [:error] [pid 31717:tid 31737] [client 68.221.186.27:29503] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acVahr-SCF7YDISDX48G4wAAAY8"]
[Fri Mar 27 00:10:46.636159 2026] [:error] [pid 31670:tid 31689] [client 68.221.186.27:29448] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acVahjXVthXxCnWjOTT8RwAAAVE"]
[Fri Mar 27 00:10:47.178749 2026] [:error] [pid 31670:tid 31674] [client 68.221.186.27:17672] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acVahzXVthXxCnWjOTT8SgAAAUI"]
[Fri Mar 27 00:10:47.704098 2026] [:error] [pid 31670:tid 31673] [client 68.221.186.27:11668] [client 68.221.186.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acVahzXVthXxCnWjOTT8TQAAAUE"]
[Fri Mar 27 01:38:35.546129 2026] [:error] [pid 62147:tid 62467] [client 185.169.4.152:56022] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "acVvGxPjxn06mcLazN6AQgAAAAc"]
[Fri Mar 27 01:38:36.219372 2026] [:error] [pid 62147:tid 62466] [client 185.169.4.152:60806] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acVvHBPjxn06mcLazN6ARAAAAAY"]
[Fri Mar 27 12:39:17.603606 2026] [:error] [pid 4341:tid 4367] [client 2.57.168.15:29015] [client 2.57.168.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.57.168.15, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "acYJ9eKJWrNB5dMlERG_awAAAZg"]
[Fri Mar 27 12:39:17.616089 2026] [proxy_fcgi:error] [pid 4341:tid 4367] [client 2.57.168.15:29015] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 15:26:52.371281 2026] [:error] [pid 27743:tid 27767] [client 217.216.37.53:64329] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "acYxPCA46UYYLqzw99BTfwAAAAM"]
[Fri Mar 27 15:26:52.583296 2026] [:error] [pid 27851:tid 27867] [client 217.216.37.53:51965] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acYxPHR2ccxe3RMCLbqt8QAAAMk"]
[Fri Mar 27 15:26:52.796687 2026] [:error] [pid 4341:tid 4367] [client 217.216.37.53:57883] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/media/system/js/core.js"] [unique_id "acYxPOKJWrNB5dMlERExdAAAAZg"]
[Fri Mar 27 17:40:06.117465 2026] [proxy_fcgi:error] [pid 63897:tid 63904] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:06.406283 2026] [proxy_fcgi:error] [pid 63897:tid 63916] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:06.693046 2026] [proxy_fcgi:error] [pid 63897:tid 63913] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:06.932608 2026] [proxy_fcgi:error] [pid 63897:tid 63910] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:07.216210 2026] [proxy_fcgi:error] [pid 63897:tid 63914] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:07.512619 2026] [proxy_fcgi:error] [pid 63897:tid 63920] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:07.784525 2026] [proxy_fcgi:error] [pid 63897:tid 63908] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:08.026338 2026] [proxy_fcgi:error] [pid 63897:tid 63911] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:08.288848 2026] [proxy_fcgi:error] [pid 63897:tid 63922] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:08.561855 2026] [proxy_fcgi:error] [pid 63897:tid 63899] [client 172.161.73.24:64701] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:40:08.839661 2026] [:error] [pid 63897:tid 63906] [client 172.161.73.24:64701] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "acZQeGVSkmYmLu7ycYgkNQAAAQc"]
[Fri Mar 27 17:40:09.322930 2026] [:error] [pid 4293:tid 4298] [client 172.161.73.24:65032] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "acZQeZLjeJUC3OKtEx8ciwAAAUM"]
[Fri Mar 27 17:40:09.856021 2026] [:error] [pid 4293:tid 4319] [client 172.161.73.24:65429] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "acZQeZLjeJUC3OKtEx8ckQAAAVg"]
[Fri Mar 27 17:40:10.362816 2026] [:error] [pid 4341:tid 4361] [client 172.161.73.24:64640] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "acZQeuKJWrNB5dMlERFqDAAAAZI"]
[Fri Mar 27 17:40:10.853673 2026] [:error] [pid 4341:tid 4353] [client 172.161.73.24:65002] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acZQeuKJWrNB5dMlERFqDQAAAYo"]
[Fri Mar 27 17:40:11.334127 2026] [:error] [pid 63897:tid 63912] [client 172.161.73.24:65419] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acZQe2VSkmYmLu7ycYgkNgAAAQ0"]
[Fri Mar 27 17:40:11.821877 2026] [:error] [pid 63897:tid 63915] [client 172.161.73.24:65052] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acZQe2VSkmYmLu7ycYgkOQAAARA"]
[Fri Mar 27 17:40:12.297449 2026] [:error] [pid 63897:tid 63919] [client 172.161.73.24:64668] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acZQfGVSkmYmLu7ycYgkOwAAARQ"]
[Fri Mar 27 17:40:12.821997 2026] [:error] [pid 27743:tid 27773] [client 172.161.73.24:64646] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acZQfCA46UYYLqzw99CYiAAAAAk"]
[Fri Mar 27 17:40:13.296014 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:64641] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acZQfWVSkmYmLu7ycYgkPQAAAQU"]
[Fri Mar 27 17:40:13.801871 2026] [:error] [pid 27851:tid 27864] [client 172.161.73.24:65042] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acZQfXR2ccxe3RMCLbrNmQAAAMY"]
[Fri Mar 27 17:40:14.331946 2026] [:error] [pid 27750:tid 27822] [client 172.161.73.24:64070] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acZQfoaSil5rd17ieLzT3wAAAIQ"]
[Fri Mar 27 17:40:14.819126 2026] [:error] [pid 27750:tid 27821] [client 172.161.73.24:64655] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "acZQfoaSil5rd17ieLzT4QAAAIM"]
[Fri Mar 27 17:40:15.376687 2026] [:error] [pid 27743:tid 27767] [client 172.161.73.24:65352] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "acZQfyA46UYYLqzw99CYkQAAAAM"]
[Fri Mar 27 17:40:15.855474 2026] [:error] [pid 27743:tid 27776] [client 172.161.73.24:65072] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "acZQfyA46UYYLqzw99CYlAAAAAw"]
[Fri Mar 27 17:40:16.342223 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:65022] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "acZQgJLjeJUC3OKtEx8cmAAAAUg"]
[Fri Mar 27 17:40:16.815018 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:64688] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acZQgCA46UYYLqzw99CYlQAAAAs"]
[Fri Mar 27 17:40:17.291551 2026] [:error] [pid 63897:tid 63920] [client 172.161.73.24:65424] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acZQgWVSkmYmLu7ycYgkQQAAARU"]
[Fri Mar 27 17:40:17.784113 2026] [:error] [pid 63897:tid 63922] [client 172.161.73.24:64964] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acZQgWVSkmYmLu7ycYgkQwAAARc"]
[Fri Mar 27 17:40:18.306373 2026] [:error] [pid 27743:tid 27764] [client 172.161.73.24:64662] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acZQgiA46UYYLqzw99CYnAAAAAA"]
[Fri Mar 27 17:40:18.803895 2026] [:error] [pid 63897:tid 63899] [client 172.161.73.24:65054] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "acZQgmVSkmYmLu7ycYgkRAAAAQA"]
[Fri Mar 27 17:40:19.305083 2026] [:error] [pid 27851:tid 27858] [client 172.161.73.24:64682] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "acZQg3R2ccxe3RMCLbrNmwAAAMA"]
[Fri Mar 27 17:40:19.840035 2026] [:error] [pid 4293:tid 4298] [client 172.161.73.24:65388] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "acZQg5LjeJUC3OKtEx8cnQAAAUM"]
[Fri Mar 27 17:40:20.317542 2026] [:error] [pid 27743:tid 27768] [client 172.161.73.24:64623] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "acZQhCA46UYYLqzw99CYqQAAAAQ"]
[Fri Mar 27 17:40:20.829553 2026] [:error] [pid 63897:tid 63900] [client 172.161.73.24:65456] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acZQhGVSkmYmLu7ycYgkSQAAAQE"]
[Fri Mar 27 17:40:21.307307 2026] [:error] [pid 63897:tid 63902] [client 172.161.73.24:64632] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acZQhWVSkmYmLu7ycYgkSgAAAQM"]
[Fri Mar 27 17:40:21.798351 2026] [:error] [pid 27743:tid 27772] [client 172.161.73.24:65013] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acZQhSA46UYYLqzw99CYsAAAAAg"]
[Fri Mar 27 17:40:22.272731 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:65457] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acZQhpLjeJUC3OKtEx8cowAAAVY"]
[Fri Mar 27 17:40:22.758053 2026] [:error] [pid 27743:tid 27768] [client 172.161.73.24:64684] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acZQhiA46UYYLqzw99CYtwAAAAQ"]
[Fri Mar 27 17:40:23.275765 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:65406] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acZQh2VSkmYmLu7ycYgkTgAAAQU"]
[Fri Mar 27 17:40:23.883726 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:64691] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acZQhyA46UYYLqzw99CYvwAAABI"]
[Fri Mar 27 17:40:24.375218 2026] [:error] [pid 27743:tid 27766] [client 172.161.73.24:64990] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acZQiCA46UYYLqzw99CYwwAAAAI"]
[Fri Mar 27 17:40:24.989543 2026] [:error] [pid 27750:tid 27829] [client 172.161.73.24:65465] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acZQiIaSil5rd17ieLzT4wAAAIs"]
[Fri Mar 27 17:40:25.491373 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:65011] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acZQiZLjeJUC3OKtEx8cqAAAAU8"]
[Fri Mar 27 17:40:25.973214 2026] [:error] [pid 27749:tid 27808] [client 172.161.73.24:64996] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acZQicEqyoMni2Q6_X7a3AAAAFE"]
[Fri Mar 27 17:40:26.449799 2026] [:error] [pid 27743:tid 27766] [client 172.161.73.24:64998] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acZQiiA46UYYLqzw99CY0QAAAAI"]
[Fri Mar 27 17:40:26.925226 2026] [:error] [pid 27743:tid 27770] [client 172.161.73.24:65385] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acZQiiA46UYYLqzw99CY0wAAAAY"]
[Fri Mar 27 17:40:27.440656 2026] [:error] [pid 27743:tid 27773] [client 172.161.73.24:64976] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acZQiyA46UYYLqzw99CY2AAAAAk"]
[Fri Mar 27 17:40:27.924386 2026] [:error] [pid 27743:tid 27780] [client 172.161.73.24:65418] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acZQiyA46UYYLqzw99CY3QAAABA"]
[Fri Mar 27 17:40:28.418091 2026] [:error] [pid 63897:tid 63911] [client 172.161.73.24:65061] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acZQjGVSkmYmLu7ycYgkUAAAAQw"]
[Fri Mar 27 17:40:29.054168 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65374] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acZQjZLjeJUC3OKtEx8csQAAAUw"]
[Fri Mar 27 17:40:29.654191 2026] [:error] [pid 4293:tid 4302] [client 172.161.73.24:65047] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acZQjZLjeJUC3OKtEx8ctwAAAUc"]
[Fri Mar 27 17:40:30.158250 2026] [:error] [pid 27851:tid 27864] [client 172.161.73.24:63630] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acZQjnR2ccxe3RMCLbrNpQAAAMY"]
[Fri Mar 27 17:40:30.754310 2026] [:error] [pid 27750:tid 27835] [client 172.161.73.24:64661] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acZQjoaSil5rd17ieLzT5QAAAJE"]
[Fri Mar 27 17:40:31.288161 2026] [:error] [pid 27750:tid 27818] [client 172.161.73.24:65055] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acZQj4aSil5rd17ieLzT6AAAAIA"]
[Fri Mar 27 17:40:31.782599 2026] [:error] [pid 63897:tid 63909] [client 172.161.73.24:64593] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acZQj2VSkmYmLu7ycYgkVAAAAQo"]
[Fri Mar 27 17:40:32.254164 2026] [:error] [pid 4341:tid 4346] [client 172.161.73.24:64597] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acZQkOKJWrNB5dMlERFqKwAAAYM"]
[Fri Mar 27 17:40:32.758415 2026] [:error] [pid 27851:tid 27878] [client 172.161.73.24:64589] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "acZQkHR2ccxe3RMCLbrNqQAAANQ"]
[Fri Mar 27 17:40:33.274721 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:65432] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acZQkZLjeJUC3OKtEx8cuwAAAUg"]
[Fri Mar 27 17:40:33.753028 2026] [:error] [pid 4293:tid 4313] [client 172.161.73.24:64687] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acZQkZLjeJUC3OKtEx8cvwAAAVI"]
[Fri Mar 27 17:40:34.245269 2026] [:error] [pid 27750:tid 27834] [client 172.161.73.24:65041] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acZQkoaSil5rd17ieLzT8QAAAJA"]
[Fri Mar 27 17:40:34.753131 2026] [:error] [pid 27750:tid 27819] [client 172.161.73.24:65405] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acZQkoaSil5rd17ieLzT8wAAAIE"]
[Fri Mar 27 17:40:35.286542 2026] [:error] [pid 4293:tid 4314] [client 172.161.73.24:65344] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acZQk5LjeJUC3OKtEx8cxwAAAVM"]
[Fri Mar 27 17:40:35.762511 2026] [:error] [pid 4341:tid 4349] [client 172.161.73.24:65016] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acZQk-KJWrNB5dMlERFqMwAAAYY"]
[Fri Mar 27 17:40:36.326965 2026] [:error] [pid 27749:tid 27792] [client 172.161.73.24:64625] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acZQlMEqyoMni2Q6_X7a5AAAAEE"]
[Fri Mar 27 17:40:36.808854 2026] [:error] [pid 27749:tid 27797] [client 172.161.73.24:64130] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acZQlMEqyoMni2Q6_X7a5gAAAEY"]
[Fri Mar 27 17:40:37.302080 2026] [:error] [pid 27749:tid 27795] [client 172.161.73.24:65045] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "acZQlcEqyoMni2Q6_X7a6QAAAEQ"]
[Fri Mar 27 17:40:37.900022 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65460] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "acZQlZLjeJUC3OKtEx8c1AAAAUw"]
[Fri Mar 27 17:40:38.376641 2026] [:error] [pid 4293:tid 4299] [client 172.161.73.24:65051] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "acZQlpLjeJUC3OKtEx8c2gAAAUQ"]
[Fri Mar 27 17:40:38.902140 2026] [:error] [pid 63897:tid 63922] [client 172.161.73.24:64578] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "acZQlmVSkmYmLu7ycYgkZgAAARc"]
[Fri Mar 27 17:40:39.423942 2026] [:error] [pid 4341:tid 4366] [client 172.161.73.24:65360] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acZQl-KJWrNB5dMlERFqNwAAAZc"]
[Fri Mar 27 17:40:39.912785 2026] [:error] [pid 4341:tid 4364] [client 172.161.73.24:64985] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acZQl-KJWrNB5dMlERFqOwAAAZU"]
[Fri Mar 27 17:40:40.542657 2026] [:error] [pid 4341:tid 4354] [client 172.161.73.24:65006] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acZQmOKJWrNB5dMlERFqPgAAAYs"]
[Fri Mar 27 17:40:41.082363 2026] [:error] [pid 27750:tid 27830] [client 172.161.73.24:64693] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acZQmYaSil5rd17ieLzT-QAAAIw"]
[Fri Mar 27 17:40:41.567761 2026] [:error] [pid 63897:tid 63901] [client 172.161.73.24:65392] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acZQmWVSkmYmLu7ycYgkagAAAQI"]
[Fri Mar 27 17:40:42.062043 2026] [:error] [pid 4341:tid 4349] [client 172.161.73.24:64607] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acZQmuKJWrNB5dMlERFqQQAAAYY"]
[Fri Mar 27 17:40:42.743091 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:64989] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acZQmmVSkmYmLu7ycYgkawAAAQU"]
[Fri Mar 27 17:40:43.289380 2026] [:error] [pid 4293:tid 4298] [client 172.161.73.24:64621] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acZQm5LjeJUC3OKtEx8c_gAAAUM"]
[Fri Mar 27 17:40:43.890488 2026] [:error] [pid 4293:tid 4318] [client 172.161.73.24:64981] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acZQm5LjeJUC3OKtEx8dAgAAAVc"]
[Fri Mar 27 17:40:44.616471 2026] [:error] [pid 4293:tid 4308] [client 172.161.73.24:64966] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acZQnJLjeJUC3OKtEx8dBQAAAU0"]
[Fri Mar 27 17:40:45.163192 2026] [:error] [pid 4293:tid 4318] [client 172.161.73.24:65370] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acZQnZLjeJUC3OKtEx8dBgAAAVc"]
[Fri Mar 27 17:40:45.707035 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:65372] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acZQnZLjeJUC3OKtEx8dDQAAAUg"]
[Fri Mar 27 17:40:46.414231 2026] [:error] [pid 4293:tid 4315] [client 172.161.73.24:64160] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acZQnpLjeJUC3OKtEx8dEQAAAVQ"]
[Fri Mar 27 17:40:46.894850 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:64977] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acZQnpLjeJUC3OKtEx8dFAAAAVY"]
[Fri Mar 27 17:40:47.394319 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65044] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acZQn5LjeJUC3OKtEx8dHAAAAUw"]
[Fri Mar 27 17:40:47.929223 2026] [:error] [pid 4293:tid 4315] [client 172.161.73.24:64605] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acZQn5LjeJUC3OKtEx8dIQAAAVQ"]
[Fri Mar 27 17:40:48.422744 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:65077] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acZQoJLjeJUC3OKtEx8dJAAAAU8"]
[Fri Mar 27 17:40:48.924207 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:63614] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acZQoJLjeJUC3OKtEx8dKAAAAU4"]
[Fri Mar 27 17:40:49.417591 2026] [:error] [pid 4293:tid 4312] [client 172.161.73.24:64986] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acZQoZLjeJUC3OKtEx8dLgAAAVE"]
[Fri Mar 27 17:40:49.977562 2026] [:error] [pid 4293:tid 4296] [client 172.161.73.24:65470] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acZQoZLjeJUC3OKtEx8dMgAAAUE"]
[Fri Mar 27 17:40:50.544425 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:64072] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acZQopLjeJUC3OKtEx8dOgAAAUw"]
[Fri Mar 27 17:40:51.017569 2026] [:error] [pid 4293:tid 4318] [client 172.161.73.24:64997] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acZQo5LjeJUC3OKtEx8dQQAAAVc"]
[Fri Mar 27 17:40:51.524974 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:64617] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acZQo5LjeJUC3OKtEx8dRgAAAUo"]
[Fri Mar 27 17:40:52.097573 2026] [:error] [pid 4293:tid 4299] [client 172.161.73.24:65087] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acZQpJLjeJUC3OKtEx8dSwAAAUQ"]
[Fri Mar 27 17:40:52.715664 2026] [:error] [pid 4341:tid 4360] [client 172.161.73.24:65391] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acZQpOKJWrNB5dMlERFqUwAAAZE"]
[Fri Mar 27 17:40:53.259996 2026] [:error] [pid 4341:tid 4349] [client 172.161.73.24:65050] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acZQpeKJWrNB5dMlERFqVQAAAYY"]
[Fri Mar 27 17:40:54.054822 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:64676] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acZQpmVSkmYmLu7ycYgkegAAAQU"]
[Fri Mar 27 17:40:55.311543 2026] [:error] [pid 27743:tid 27774] [client 172.161.73.24:63668] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acZQpyA46UYYLqzw99CZOgAAAAo"]
[Fri Mar 27 17:40:55.907841 2026] [:error] [pid 27743:tid 27766] [client 172.161.73.24:64696] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acZQpyA46UYYLqzw99CZPwAAAAI"]
[Fri Mar 27 17:40:57.865786 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:64586] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acZQqZLjeJUC3OKtEx8daAAAAUg"]
[Fri Mar 27 17:40:58.859926 2026] [:error] [pid 27851:tid 27863] [client 172.161.73.24:64685] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acZQqnR2ccxe3RMCLbrNvwAAAMU"]
[Fri Mar 27 17:40:59.581865 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:65368] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acZQqyA46UYYLqzw99CZTAAAABI"]
[Fri Mar 27 17:41:00.407573 2026] [:error] [pid 4293:tid 4318] [client 172.161.73.24:65043] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acZQrJLjeJUC3OKtEx8dgAAAAVc"]
[Fri Mar 27 17:41:01.219217 2026] [:error] [pid 27743:tid 27765] [client 172.161.73.24:64647] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acZQrSA46UYYLqzw99CZVAAAAAE"]
[Fri Mar 27 17:41:01.966148 2026] [:error] [pid 27750:tid 27818] [client 172.161.73.24:64975] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acZQrYaSil5rd17ieLzUAQAAAIA"]
[Fri Mar 27 17:41:03.509694 2026] [:error] [pid 4293:tid 4302] [client 172.161.73.24:64188] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acZQr5LjeJUC3OKtEx8digAAAUc"]
[Fri Mar 27 17:41:04.249602 2026] [:error] [pid 4341:tid 4361] [client 172.161.73.24:64675] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acZQsOKJWrNB5dMlERFqbgAAAZI"]
[Fri Mar 27 17:41:04.953320 2026] [:error] [pid 4341:tid 4351] [client 172.161.73.24:64103] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acZQsOKJWrNB5dMlERFqcgAAAYg"]
[Fri Mar 27 17:41:05.497948 2026] [:error] [pid 27743:tid 27786] [client 172.161.73.24:65400] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acZQsSA46UYYLqzw99CZVQAAABY"]
[Fri Mar 27 17:41:06.389974 2026] [:error] [pid 63897:tid 63901] [client 172.161.73.24:64695] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acZQsmVSkmYmLu7ycYgkhwAAAQI"]
[Fri Mar 27 17:41:06.965774 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:64171] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acZQsmVSkmYmLu7ycYgkiAAAAQU"]
[Fri Mar 27 17:41:07.474307 2026] [:error] [pid 27743:tid 27788] [client 172.161.73.24:65411] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "acZQsyA46UYYLqzw99CZZAAAABg"]
[Fri Mar 27 17:41:08.014161 2026] [proxy_fcgi:error] [pid 27743:tid 27787] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:08.256465 2026] [proxy_fcgi:error] [pid 27743:tid 27770] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:08.525899 2026] [proxy_fcgi:error] [pid 27743:tid 27766] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:08.782987 2026] [proxy_fcgi:error] [pid 27743:tid 27774] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:09.049153 2026] [proxy_fcgi:error] [pid 27743:tid 27779] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:09.292948 2026] [proxy_fcgi:error] [pid 27743:tid 27778] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:09.534914 2026] [proxy_fcgi:error] [pid 27743:tid 27777] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:09.775887 2026] [proxy_fcgi:error] [pid 27743:tid 27788] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:10.024209 2026] [proxy_fcgi:error] [pid 27743:tid 27783] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:10.381143 2026] [proxy_fcgi:error] [pid 27743:tid 27770] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:10.621535 2026] [proxy_fcgi:error] [pid 27743:tid 27766] [client 172.161.73.24:65084] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:41:10.907741 2026] [:error] [pid 27743:tid 27780] [client 172.161.73.24:65084] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acZQtiA46UYYLqzw99CZfwAAABA"]
[Fri Mar 27 17:41:11.393018 2026] [:error] [pid 63897:tid 63899] [client 172.161.73.24:65348] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acZQt2VSkmYmLu7ycYgkjgAAAQA"]
[Fri Mar 27 17:41:12.008518 2026] [:error] [pid 27743:tid 27778] [client 172.161.73.24:64618] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acZQuCA46UYYLqzw99CZggAAAA4"]
[Fri Mar 27 17:41:12.581697 2026] [:error] [pid 27851:tid 27867] [client 172.161.73.24:65030] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acZQuHR2ccxe3RMCLbrN1gAAAMk"]
[Fri Mar 27 17:41:13.081704 2026] [:error] [pid 4293:tid 4314] [client 172.161.73.24:65034] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acZQuZLjeJUC3OKtEx8dmQAAAVM"]
[Fri Mar 27 17:41:13.628759 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:63139] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acZQuSA46UYYLqzw99CZhAAAABI"]
[Fri Mar 27 17:41:14.131918 2026] [:error] [pid 4293:tid 4312] [client 172.161.73.24:63620] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acZQupLjeJUC3OKtEx8dnAAAAVE"]
[Fri Mar 27 17:41:14.632999 2026] [:error] [pid 27851:tid 27866] [client 172.161.73.24:64120] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acZQunR2ccxe3RMCLbrN3wAAAMg"]
[Fri Mar 27 17:41:15.133203 2026] [:error] [pid 27851:tid 27872] [client 172.161.73.24:64588] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acZQu3R2ccxe3RMCLbrN4QAAAM4"]
[Fri Mar 27 17:41:15.703012 2026] [:error] [pid 27851:tid 27873] [client 172.161.73.24:65471] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acZQu3R2ccxe3RMCLbrN4wAAAM8"]
[Fri Mar 27 17:41:16.572354 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:65031] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acZQvJLjeJUC3OKtEx8dpQAAAUA"]
[Fri Mar 27 17:41:17.078764 2026] [:error] [pid 63897:tid 63909] [client 172.161.73.24:64114] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acZQvWVSkmYmLu7ycYgklwAAAQo"]
[Fri Mar 27 17:41:17.591922 2026] [:error] [pid 63897:tid 63901] [client 172.161.73.24:64595] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acZQvWVSkmYmLu7ycYgkmgAAAQI"]
[Fri Mar 27 17:41:18.119730 2026] [:error] [pid 27851:tid 27878] [client 172.161.73.24:65349] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acZQvnR2ccxe3RMCLbrN5QAAANQ"]
[Fri Mar 27 17:41:18.630945 2026] [:error] [pid 63897:tid 63913] [client 172.161.73.24:64082] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acZQvmVSkmYmLu7ycYgknwAAAQ4"]
[Fri Mar 27 17:41:19.132534 2026] [:error] [pid 27749:tid 27805] [client 172.161.73.24:64643] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acZQv8EqyoMni2Q6_X7bCAAAAE4"]
[Fri Mar 27 17:41:19.664706 2026] [:error] [pid 27851:tid 27875] [client 172.161.73.24:65053] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acZQv3R2ccxe3RMCLbrN5wAAANE"]
[Fri Mar 27 17:41:20.178901 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:64666] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acZQwJLjeJUC3OKtEx8dsQAAAU4"]
[Fri Mar 27 17:41:20.669629 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:63673] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acZQwJLjeJUC3OKtEx8dtAAAAUg"]
[Fri Mar 27 17:41:21.190783 2026] [:error] [pid 27750:tid 27836] [client 172.161.73.24:65010] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acZQwYaSil5rd17ieLzUFwAAAJI"]
[Fri Mar 27 17:41:21.664482 2026] [:error] [pid 4293:tid 4298] [client 172.161.73.24:65443] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acZQwZLjeJUC3OKtEx8dugAAAUM"]
[Fri Mar 27 17:41:22.246783 2026] [:error] [pid 4293:tid 4299] [client 172.161.73.24:64609] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acZQwpLjeJUC3OKtEx8dwAAAAUQ"]
[Fri Mar 27 17:41:22.740199 2026] [:error] [pid 27743:tid 27780] [client 172.161.73.24:65014] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acZQwiA46UYYLqzw99CZjwAAABA"]
[Fri Mar 27 17:41:23.300732 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:65377] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "acZQw5LjeJUC3OKtEx8dyAAAAU8"]
[Fri Mar 27 17:41:23.773922 2026] [:error] [pid 27851:tid 27865] [client 172.161.73.24:64660] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQw3R2ccxe3RMCLbrN6gAAAMc"]
[Fri Mar 27 17:41:24.269869 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:65420] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQxJLjeJUC3OKtEx8dzwAAAUo"]
[Fri Mar 27 17:41:24.773220 2026] [:error] [pid 63897:tid 63916] [client 172.161.73.24:63111] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQxGVSkmYmLu7ycYgkpwAAARE"]
[Fri Mar 27 17:41:25.292590 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:64658] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQxSA46UYYLqzw99CZlQAAAAs"]
[Fri Mar 27 17:41:25.850348 2026] [:error] [pid 27743:tid 27785] [client 172.161.73.24:63555] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "acZQxSA46UYYLqzw99CZmAAAABU"]
[Fri Mar 27 17:41:26.394807 2026] [:error] [pid 27851:tid 27869] [client 172.161.73.24:64095] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "acZQxnR2ccxe3RMCLbrN8AAAAMs"]
[Fri Mar 27 17:41:26.950991 2026] [:error] [pid 27750:tid 27826] [client 172.161.73.24:65347] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "acZQxoaSil5rd17ieLzUHwAAAIg"]
[Fri Mar 27 17:41:27.527800 2026] [:error] [pid 27743:tid 27787] [client 172.161.73.24:64639] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "acZQxyA46UYYLqzw99CZngAAABc"]
[Fri Mar 27 17:41:28.076796 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65071] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZQyJLjeJUC3OKtEx8d0wAAAUw"]
[Fri Mar 27 17:41:28.574995 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:65003] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZQyJLjeJUC3OKtEx8d1AAAAVY"]
[Fri Mar 27 17:41:29.128730 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:64678] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZQyZLjeJUC3OKtEx8d1gAAAU8"]
[Fri Mar 27 17:41:29.637836 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:64683] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acZQyZLjeJUC3OKtEx8d2gAAAU4"]
[Fri Mar 27 17:41:30.119720 2026] [:error] [pid 4293:tid 4301] [client 172.161.73.24:64667] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acZQypLjeJUC3OKtEx8d3QAAAUY"]
[Fri Mar 27 17:41:30.632772 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:64960] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acZQypLjeJUC3OKtEx8d4gAAAVY"]
[Fri Mar 27 17:41:31.121746 2026] [:error] [pid 27750:tid 27832] [client 172.161.73.24:64657] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acZQy4aSil5rd17ieLzUKgAAAI4"]
[Fri Mar 27 17:41:31.665991 2026] [:error] [pid 27851:tid 27867] [client 172.161.73.24:65359] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/ws49.php"] [unique_id "acZQy3R2ccxe3RMCLbrN9wAAAMk"]
[Fri Mar 27 17:41:32.143428 2026] [:error] [pid 4293:tid 4301] [client 172.161.73.24:65058] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acZQzJLjeJUC3OKtEx8d6gAAAUY"]
[Fri Mar 27 17:41:32.659076 2026] [:error] [pid 27743:tid 27765] [client 172.161.73.24:65019] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acZQzCA46UYYLqzw99CZoQAAAAE"]
[Fri Mar 27 17:41:33.244375 2026] [:error] [pid 63897:tid 63923] [client 172.161.73.24:64582] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acZQzWVSkmYmLu7ycYgktQAAARg"]
[Fri Mar 27 17:41:33.719350 2026] [:error] [pid 27851:tid 27868] [client 172.161.73.24:65402] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acZQzXR2ccxe3RMCLbrN_AAAAMo"]
[Fri Mar 27 17:41:34.209673 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:64963] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acZQzpLjeJUC3OKtEx8d7gAAAUg"]
[Fri Mar 27 17:41:34.692764 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:64629] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acZQzpLjeJUC3OKtEx8d8gAAAU8"]
[Fri Mar 27 17:41:35.240548 2026] [:error] [pid 27743:tid 27770] [client 172.161.73.24:64577] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acZQzyA46UYYLqzw99CZpgAAAAY"]
[Fri Mar 27 17:41:35.741162 2026] [:error] [pid 4341:tid 4362] [client 172.161.73.24:63677] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "acZQz-KJWrNB5dMlERFqjAAAAZM"]
[Fri Mar 27 17:41:36.365116 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:63052] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acZQ0JLjeJUC3OKtEx8d9wAAAUg"]
[Fri Mar 27 17:41:36.882382 2026] [:error] [pid 4293:tid 4300] [client 172.161.73.24:65427] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acZQ0JLjeJUC3OKtEx8d-QAAAUU"]
[Fri Mar 27 17:41:37.384933 2026] [:error] [pid 27750:tid 27820] [client 172.161.73.24:65407] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acZQ0YaSil5rd17ieLzUNQAAAII"]
[Fri Mar 27 17:41:37.919411 2026] [:error] [pid 27750:tid 27836] [client 172.161.73.24:65422] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acZQ0YaSil5rd17ieLzUOAAAAJI"]
[Fri Mar 27 17:41:38.419958 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:64630] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acZQ0pLjeJUC3OKtEx8eAAAAAUg"]
[Fri Mar 27 17:41:38.946452 2026] [:error] [pid 27851:tid 27874] [client 172.161.73.24:64591] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acZQ0nR2ccxe3RMCLbrOBwAAANA"]
[Fri Mar 27 17:41:39.440821 2026] [:error] [pid 27851:tid 27882] [client 172.161.73.24:64071] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acZQ03R2ccxe3RMCLbrOCAAAANg"]
[Fri Mar 27 17:41:39.942355 2026] [:error] [pid 27743:tid 27765] [client 172.161.73.24:64648] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acZQ0yA46UYYLqzw99CZsgAAAAE"]
[Fri Mar 27 17:41:40.417866 2026] [:error] [pid 27743:tid 27778] [client 172.161.73.24:65026] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acZQ1CA46UYYLqzw99CZtAAAAA4"]
[Fri Mar 27 17:41:40.951341 2026] [:error] [pid 63897:tid 63920] [client 172.161.73.24:64700] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acZQ1GVSkmYmLu7ycYgkugAAARU"]
[Fri Mar 27 17:41:41.466823 2026] [:error] [pid 27743:tid 27767] [client 172.161.73.24:64699] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acZQ1SA46UYYLqzw99CZuQAAAAM"]
[Fri Mar 27 17:41:42.008707 2026] [:error] [pid 27743:tid 27786] [client 172.161.73.24:65062] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acZQ1iA46UYYLqzw99CZuwAAABY"]
[Fri Mar 27 17:41:42.531481 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:64962] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acZQ1iA46UYYLqzw99CZwAAAAAs"]
[Fri Mar 27 17:41:43.026204 2026] [:error] [pid 63897:tid 63918] [client 172.161.73.24:65365] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acZQ12VSkmYmLu7ycYgkvgAAARM"]
[Fri Mar 27 17:41:43.606155 2026] [:error] [pid 4341:tid 4343] [client 172.161.73.24:64992] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acZQ1-KJWrNB5dMlERFqlQAAAYA"]
[Fri Mar 27 17:41:44.116926 2026] [:error] [pid 27851:tid 27882] [client 172.161.73.24:63114] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "acZQ2HR2ccxe3RMCLbrOEwAAANg"]
[Fri Mar 27 17:41:44.603653 2026] [:error] [pid 27750:tid 27819] [client 172.161.73.24:64994] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acZQ2IaSil5rd17ieLzUPwAAAIE"]
[Fri Mar 27 17:41:45.157470 2026] [:error] [pid 4341:tid 4363] [client 172.161.73.24:64995] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acZQ2eKJWrNB5dMlERFqmAAAAZQ"]
[Fri Mar 27 17:41:45.630087 2026] [:error] [pid 4341:tid 4348] [client 172.161.73.24:65439] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acZQ2eKJWrNB5dMlERFqmgAAAYU"]
[Fri Mar 27 17:41:46.119096 2026] [:error] [pid 27743:tid 27769] [client 172.161.73.24:65048] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acZQ2iA46UYYLqzw99CZyQAAAAU"]
[Fri Mar 27 17:41:46.639996 2026] [:error] [pid 4293:tid 4311] [client 172.161.73.24:63665] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acZQ2pLjeJUC3OKtEx8eAwAAAVA"]
[Fri Mar 27 17:41:47.147908 2026] [:error] [pid 27743:tid 27772] [client 172.161.73.24:65383] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acZQ2yA46UYYLqzw99CZzAAAAAg"]
[Fri Mar 27 17:41:47.701710 2026] [:error] [pid 4293:tid 4302] [client 172.161.73.24:64606] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acZQ25LjeJUC3OKtEx8eCQAAAUc"]
[Fri Mar 27 17:41:48.284368 2026] [:error] [pid 27743:tid 27787] [client 172.161.73.24:64961] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acZQ3CA46UYYLqzw99CZ0gAAABc"]
[Fri Mar 27 17:41:48.880054 2026] [:error] [pid 27743:tid 27769] [client 172.161.73.24:65034] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acZQ3CA46UYYLqzw99CZ1gAAAAU"]
[Fri Mar 27 17:41:49.542633 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65413] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acZQ3ZLjeJUC3OKtEx8eCwAAAUw"]
[Fri Mar 27 17:41:50.873793 2026] [:error] [pid 4293:tid 4301] [client 172.161.73.24:64965] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acZQ3pLjeJUC3OKtEx8eFwAAAUY"]
[Fri Mar 27 17:41:52.589972 2026] [:error] [pid 4341:tid 4354] [client 172.161.73.24:65399] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acZQ4OKJWrNB5dMlERFqngAAAYs"]
[Fri Mar 27 17:41:53.124872 2026] [:error] [pid 27851:tid 27860] [client 172.161.73.24:63107] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acZQ4XR2ccxe3RMCLbrOFwAAAMI"]
[Fri Mar 27 17:41:54.410894 2026] [:error] [pid 63897:tid 63905] [client 172.161.73.24:65459] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acZQ4mVSkmYmLu7ycYgkyQAAAQY"]
[Fri Mar 27 17:41:55.572271 2026] [:error] [pid 4341:tid 4365] [client 172.161.73.24:65067] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acZQ4-KJWrNB5dMlERFqqgAAAZY"]
[Fri Mar 27 17:41:56.846862 2026] [:error] [pid 63897:tid 63903] [client 172.161.73.24:65029] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "acZQ5GVSkmYmLu7ycYgkzAAAAQQ"]
[Fri Mar 27 17:42:06.320840 2026] [:error] [pid 27851:tid 27864] [client 172.161.73.24:64094] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acZQ7nR2ccxe3RMCLbrOKQAAAMY"]
[Fri Mar 27 17:42:06.987015 2026] [:error] [pid 27851:tid 27861] [client 172.161.73.24:64670] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acZQ7nR2ccxe3RMCLbrOKwAAAMM"]
[Fri Mar 27 17:42:07.539323 2026] [:error] [pid 4293:tid 4312] [client 172.161.73.24:64978] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acZQ75LjeJUC3OKtEx8eRgAAAVE"]
[Fri Mar 27 17:42:08.040888 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:64633] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "acZQ8JLjeJUC3OKtEx8eSQAAAU8"]
[Fri Mar 27 17:42:08.632677 2026] [:error] [pid 4341:tid 4360] [client 172.161.73.24:64677] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acZQ8OKJWrNB5dMlERFqzAAAAZE"]
[Fri Mar 27 17:42:09.145379 2026] [:error] [pid 4341:tid 4367] [client 172.161.73.24:64581] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acZQ8eKJWrNB5dMlERFqzwAAAZg"]
[Fri Mar 27 17:42:09.652472 2026] [:error] [pid 27743:tid 27772] [client 172.161.73.24:63618] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acZQ8SA46UYYLqzw99CZ8AAAAAg"]
[Fri Mar 27 17:42:10.155716 2026] [proxy_fcgi:error] [pid 27743:tid 27770] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:10.395863 2026] [proxy_fcgi:error] [pid 27743:tid 27787] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:10.635880 2026] [proxy_fcgi:error] [pid 27743:tid 27778] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:10.876123 2026] [proxy_fcgi:error] [pid 27743:tid 27769] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:11.356706 2026] [proxy_fcgi:error] [pid 27743:tid 27782] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:11.620071 2026] [proxy_fcgi:error] [pid 27743:tid 27786] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:11.859579 2026] [proxy_fcgi:error] [pid 27743:tid 27780] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:12.099944 2026] [proxy_fcgi:error] [pid 27743:tid 27764] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:12.346433 2026] [proxy_fcgi:error] [pid 27743:tid 27787] [client 172.161.73.24:64107] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:42:12.822773 2026] [:error] [pid 27743:tid 27769] [client 172.161.73.24:64107] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQ9CA46UYYLqzw99CaCAAAAAU"]
[Fri Mar 27 17:42:13.340415 2026] [:error] [pid 27749:tid 27791] [client 172.161.73.24:64109] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQ9cEqyoMni2Q6_X7bHQAAAEA"]
[Fri Mar 27 17:42:13.824015 2026] [:error] [pid 63897:tid 63899] [client 172.161.73.24:64634] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQ9WVSkmYmLu7ycYgk5wAAAQA"]
[Fri Mar 27 17:42:14.298408 2026] [:error] [pid 63897:tid 63912] [client 172.161.73.24:65469] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acZQ9mVSkmYmLu7ycYgk6AAAAQ0"]
[Fri Mar 27 17:42:14.772381 2026] [:error] [pid 4293:tid 4296] [client 172.161.73.24:65447] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acZQ9pLjeJUC3OKtEx8eVwAAAUE"]
[Fri Mar 27 17:42:15.325928 2026] [:error] [pid 4341:tid 4361] [client 172.161.73.24:65417] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acZQ9-KJWrNB5dMlERFq3gAAAZI"]
[Fri Mar 27 17:42:15.819616 2026] [:error] [pid 4293:tid 4314] [client 172.161.73.24:65409] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acZQ95LjeJUC3OKtEx8eXQAAAVM"]
[Fri Mar 27 17:42:16.299251 2026] [:error] [pid 4341:tid 4366] [client 172.161.73.24:65403] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acZQ-OKJWrNB5dMlERFq3wAAAZc"]
[Fri Mar 27 17:42:16.784253 2026] [:error] [pid 27749:tid 27804] [client 172.161.73.24:64979] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acZQ-MEqyoMni2Q6_X7bIQAAAE0"]
[Fri Mar 27 17:42:17.314981 2026] [:error] [pid 4293:tid 4299] [client 172.161.73.24:64689] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acZQ-ZLjeJUC3OKtEx8eYQAAAUQ"]
[Fri Mar 27 17:42:17.860775 2026] [:error] [pid 27743:tid 27786] [client 172.161.73.24:65078] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acZQ-SA46UYYLqzw99CaDAAAABY"]
[Fri Mar 27 17:42:18.366158 2026] [:error] [pid 27749:tid 27807] [client 172.161.73.24:64988] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acZQ-sEqyoMni2Q6_X7bIwAAAFA"]
[Fri Mar 27 17:42:18.970423 2026] [:error] [pid 4341:tid 4366] [client 172.161.73.24:65049] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZQ-uKJWrNB5dMlERFq6wAAAZc"]
[Fri Mar 27 17:42:19.546950 2026] [:error] [pid 4341:tid 4355] [client 172.161.73.24:64599] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZQ--KJWrNB5dMlERFq8gAAAYw"]
[Fri Mar 27 17:42:20.130041 2026] [:error] [pid 27749:tid 27809] [client 172.161.73.24:64610] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZQ_MEqyoMni2Q6_X7bJQAAAFI"]
[Fri Mar 27 17:42:20.648533 2026] [:error] [pid 27749:tid 27814] [client 172.161.73.24:65000] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZQ_MEqyoMni2Q6_X7bKAAAAFc"]
[Fri Mar 27 17:42:21.283068 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:64167] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acZQ_SA46UYYLqzw99CaFAAAAAs"]
[Fri Mar 27 17:42:21.788271 2026] [:error] [pid 27750:tid 27836] [client 172.161.73.24:65401] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acZQ_YaSil5rd17ieLzUcAAAAJI"]
[Fri Mar 27 17:42:22.336294 2026] [:error] [pid 4341:tid 4359] [client 172.161.73.24:64969] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acZQ_uKJWrNB5dMlERFq-gAAAZA"]
[Fri Mar 27 17:42:22.966174 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:64616] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acZQ_pLjeJUC3OKtEx8eZwAAAUw"]
[Fri Mar 27 17:42:23.536018 2026] [:error] [pid 4293:tid 4299] [client 172.161.73.24:63606] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acZQ_5LjeJUC3OKtEx8eaQAAAUQ"]
[Fri Mar 27 17:42:24.070722 2026] [:error] [pid 4293:tid 4296] [client 172.161.73.24:65363] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acZRAJLjeJUC3OKtEx8ebQAAAUE"]
[Fri Mar 27 17:42:24.554659 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:65464] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acZRAJLjeJUC3OKtEx8ecwAAAUA"]
[Fri Mar 27 17:42:25.163963 2026] [:error] [pid 27743:tid 27778] [client 172.161.73.24:64092] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acZRASA46UYYLqzw99CaHwAAAA4"]
[Fri Mar 27 17:42:25.682998 2026] [:error] [pid 4293:tid 4315] [client 172.161.73.24:64602] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acZRAZLjeJUC3OKtEx8edQAAAVQ"]
[Fri Mar 27 17:42:26.154815 2026] [:error] [pid 27743:tid 27773] [client 172.161.73.24:64122] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acZRAiA46UYYLqzw99CaJwAAAAk"]
[Fri Mar 27 17:42:26.629994 2026] [:error] [pid 27750:tid 27842] [client 172.161.73.24:65454] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acZRAoaSil5rd17ieLzUdQAAAJg"]
[Fri Mar 27 17:42:27.110690 2026] [:error] [pid 4341:tid 4347] [client 172.161.73.24:64614] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "acZRA-KJWrNB5dMlERFq_gAAAYQ"]
[Fri Mar 27 17:42:27.584884 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:64987] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acZRA5LjeJUC3OKtEx8edwAAAUw"]
[Fri Mar 27 17:42:28.074156 2026] [:error] [pid 27749:tid 27807] [client 172.161.73.24:63561] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acZRBMEqyoMni2Q6_X7bMAAAAFA"]
[Fri Mar 27 17:42:28.561147 2026] [:error] [pid 27743:tid 27772] [client 172.161.73.24:63071] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acZRBCA46UYYLqzw99CaLgAAAAg"]
[Fri Mar 27 17:42:29.034598 2026] [:error] [pid 27749:tid 27797] [client 172.161.73.24:65468] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acZRBcEqyoMni2Q6_X7bMwAAAEY"]
[Fri Mar 27 17:42:29.557016 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:64967] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZRBSA46UYYLqzw99CaLwAAABI"]
[Fri Mar 27 17:42:30.041277 2026] [:error] [pid 4293:tid 4302] [client 172.161.73.24:63586] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZRBpLjeJUC3OKtEx8eeQAAAUc"]
[Fri Mar 27 17:42:30.549410 2026] [:error] [pid 4341:tid 4355] [client 172.161.73.24:64149] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZRBuKJWrNB5dMlERFrAwAAAYw"]
[Fri Mar 27 17:42:31.048483 2026] [:error] [pid 27750:tid 27821] [client 172.161.73.24:65015] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acZRB4aSil5rd17ieLzUgQAAAIM"]
[Fri Mar 27 17:42:31.525541 2026] [:error] [pid 4341:tid 4352] [client 172.161.73.24:65005] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acZRB-KJWrNB5dMlERFrCwAAAYk"]
[Fri Mar 27 17:42:32.043412 2026] [:error] [pid 4293:tid 4315] [client 172.161.73.24:64583] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acZRCJLjeJUC3OKtEx8efQAAAVQ"]
[Fri Mar 27 17:42:32.575147 2026] [:error] [pid 27743:tid 27776] [client 172.161.73.24:64138] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acZRCCA46UYYLqzw99CaNgAAAAw"]
[Fri Mar 27 17:42:33.047105 2026] [:error] [pid 4293:tid 4308] [client 172.161.73.24:65375] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acZRCZLjeJUC3OKtEx8egwAAAU0"]
[Fri Mar 27 17:42:33.523884 2026] [:error] [pid 4341:tid 4356] [client 172.161.73.24:64664] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acZRCeKJWrNB5dMlERFrDQAAAY0"]
[Fri Mar 27 17:42:33.997872 2026] [:error] [pid 63897:tid 63905] [client 172.161.73.24:65346] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acZRCWVSkmYmLu7ycYgk9gAAAQY"]
[Fri Mar 27 17:42:34.493723 2026] [:error] [pid 63897:tid 63915] [client 172.161.73.24:63560] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acZRCmVSkmYmLu7ycYgk-AAAARA"]
[Fri Mar 27 17:42:34.970518 2026] [:error] [pid 4293:tid 4296] [client 172.161.73.24:64600] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acZRCpLjeJUC3OKtEx8ehgAAAUE"]
[Fri Mar 27 17:42:35.456287 2026] [:error] [pid 4341:tid 4365] [client 172.161.73.24:64635] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZRC-KJWrNB5dMlERFrFAAAAZY"]
[Fri Mar 27 17:42:35.959303 2026] [:error] [pid 4293:tid 4315] [client 172.161.73.24:65358] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZRC5LjeJUC3OKtEx8eigAAAVQ"]
[Fri Mar 27 17:42:36.476704 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:63124] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZRDCA46UYYLqzw99CaPgAAAAs"]
[Fri Mar 27 17:42:37.112903 2026] [:error] [pid 4341:tid 4353] [client 172.161.73.24:64132] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "acZRDeKJWrNB5dMlERFrGQAAAYo"]
[Fri Mar 27 17:42:37.639355 2026] [:error] [pid 4341:tid 4354] [client 172.161.73.24:63635] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acZRDeKJWrNB5dMlERFrHQAAAYs"]
[Fri Mar 27 17:42:38.247570 2026] [:error] [pid 27743:tid 27767] [client 172.161.73.24:64108] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acZRDiA46UYYLqzw99CaQQAAAAM"]
[Fri Mar 27 17:42:38.726832 2026] [:error] [pid 4341:tid 4365] [client 172.161.73.24:65004] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acZRDuKJWrNB5dMlERFrIQAAAZY"]
[Fri Mar 27 17:42:39.210802 2026] [:error] [pid 4341:tid 4347] [client 172.161.73.24:64181] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acZRD-KJWrNB5dMlERFrIgAAAYQ"]
[Fri Mar 27 17:42:39.784766 2026] [:error] [pid 4293:tid 4297] [client 172.161.73.24:64152] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acZRD5LjeJUC3OKtEx8elQAAAUI"]
[Fri Mar 27 17:42:40.598673 2026] [:error] [pid 4293:tid 4313] [client 172.161.73.24:63669] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acZREJLjeJUC3OKtEx8emwAAAVI"]
[Fri Mar 27 17:42:41.256904 2026] [:error] [pid 27750:tid 27838] [client 172.161.73.24:63628] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acZREYaSil5rd17ieLzUiAAAAJQ"]
[Fri Mar 27 17:42:41.759384 2026] [:error] [pid 27743:tid 27781] [client 172.161.73.24:64074] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acZRESA46UYYLqzw99CaSQAAABE"]
[Fri Mar 27 17:42:42.236463 2026] [:error] [pid 27743:tid 27787] [client 172.161.73.24:63562] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acZREiA46UYYLqzw99CaSwAAABc"]
[Fri Mar 27 17:42:42.712867 2026] [:error] [pid 4293:tid 4310] [client 172.161.73.24:64624] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acZREpLjeJUC3OKtEx8epAAAAU8"]
[Fri Mar 27 17:42:43.306048 2026] [:error] [pid 4293:tid 4300] [client 172.161.73.24:65366] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acZRE5LjeJUC3OKtEx8epQAAAUU"]
[Fri Mar 27 17:42:43.864322 2026] [:error] [pid 27851:tid 27864] [client 172.161.73.24:64162] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acZRE3R2ccxe3RMCLbrONAAAAMY"]
[Fri Mar 27 17:42:44.591365 2026] [:error] [pid 4293:tid 4304] [client 172.161.73.24:65398] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acZRFJLjeJUC3OKtEx8eqwAAAUk"]
[Fri Mar 27 17:42:45.545149 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:64693] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acZRFZLjeJUC3OKtEx8erQAAAUw"]
[Fri Mar 27 17:42:46.441830 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:64649] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acZRFpLjeJUC3OKtEx8etAAAAUo"]
[Fri Mar 27 17:42:47.107953 2026] [:error] [pid 27743:tid 27765] [client 172.161.73.24:63604] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "acZRFyA46UYYLqzw99CaVQAAAAE"]
[Fri Mar 27 17:42:47.710355 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:65381] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acZRFyA46UYYLqzw99CaWAAAAAs"]
[Fri Mar 27 17:42:48.238819 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:64971] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acZRGJLjeJUC3OKtEx8ewgAAAVY"]
[Fri Mar 27 17:42:48.733191 2026] [:error] [pid 4341:tid 4364] [client 172.161.73.24:65386] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acZRGOKJWrNB5dMlERFrJwAAAZU"]
[Fri Mar 27 17:42:49.211758 2026] [:error] [pid 27750:tid 27822] [client 172.161.73.24:63572] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acZRGYaSil5rd17ieLzUjQAAAIQ"]
[Fri Mar 27 17:42:49.686058 2026] [:error] [pid 4293:tid 4307] [client 172.161.73.24:65066] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acZRGZLjeJUC3OKtEx8exgAAAUw"]
[Fri Mar 27 17:42:50.321104 2026] [:error] [pid 27851:tid 27876] [client 172.161.73.24:65075] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acZRGnR2ccxe3RMCLbrOOAAAANI"]
[Fri Mar 27 17:42:50.804558 2026] [:error] [pid 27749:tid 27800] [client 172.161.73.24:64099] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acZRGsEqyoMni2Q6_X7bQwAAAEk"]
[Fri Mar 27 17:42:51.293181 2026] [:error] [pid 4341:tid 4346] [client 172.161.73.24:65065] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acZRG-KJWrNB5dMlERFrLQAAAYM"]
[Fri Mar 27 17:42:51.783413 2026] [:error] [pid 27743:tid 27783] [client 172.161.73.24:65452] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acZRGyA46UYYLqzw99CaYQAAABM"]
[Fri Mar 27 17:42:52.257120 2026] [:error] [pid 4341:tid 4357] [client 172.161.73.24:63116] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acZRHOKJWrNB5dMlERFrLgAAAY4"]
[Fri Mar 27 17:42:52.737073 2026] [:error] [pid 4341:tid 4367] [client 172.161.73.24:64645] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acZRHOKJWrNB5dMlERFrMQAAAZg"]
[Fri Mar 27 17:42:53.267791 2026] [:error] [pid 27743:tid 27780] [client 172.161.73.24:64097] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acZRHSA46UYYLqzw99CaZAAAABA"]
[Fri Mar 27 17:42:53.741428 2026] [:error] [pid 4341:tid 4350] [client 172.161.73.24:64172] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acZRHeKJWrNB5dMlERFrMwAAAYc"]
[Fri Mar 27 17:42:54.232720 2026] [:error] [pid 4293:tid 4306] [client 172.161.73.24:62662] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acZRHpLjeJUC3OKtEx8ezAAAAUs"]
[Fri Mar 27 17:42:54.739540 2026] [:error] [pid 4293:tid 4301] [client 172.161.73.24:64596] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acZRHpLjeJUC3OKtEx8ezgAAAUY"]
[Fri Mar 27 17:42:55.354188 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:65384] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acZRH5LjeJUC3OKtEx8e0gAAAUo"]
[Fri Mar 27 17:42:56.010350 2026] [:error] [pid 4293:tid 4314] [client 172.161.73.24:62670] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acZRIJLjeJUC3OKtEx8e1wAAAVM"]
[Fri Mar 27 17:42:56.504692 2026] [:error] [pid 27851:tid 27866] [client 172.161.73.24:65387] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acZRIHR2ccxe3RMCLbrORwAAAMg"]
[Fri Mar 27 17:42:57.112602 2026] [:error] [pid 27851:tid 27872] [client 172.161.73.24:63625] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acZRIXR2ccxe3RMCLbrOSAAAAM4"]
[Fri Mar 27 17:42:57.724406 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:62768] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acZRIZLjeJUC3OKtEx8e3wAAAU4"]
[Fri Mar 27 17:42:58.234877 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:65376] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acZRIpLjeJUC3OKtEx8e4QAAAUo"]
[Fri Mar 27 17:42:58.846381 2026] [:error] [pid 63897:tid 63902] [client 172.161.73.24:64698] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acZRImVSkmYmLu7ycYglBAAAAQM"]
[Fri Mar 27 17:42:59.390783 2026] [:error] [pid 4293:tid 4303] [client 172.161.73.24:64584] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acZRI5LjeJUC3OKtEx8e5QAAAUg"]
[Fri Mar 27 17:42:59.880057 2026] [:error] [pid 4341:tid 4358] [client 172.161.73.24:64703] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acZRI-KJWrNB5dMlERFrOwAAAY8"]
[Fri Mar 27 17:43:00.401447 2026] [:error] [pid 4293:tid 4311] [client 172.161.73.24:65070] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acZRJJLjeJUC3OKtEx8e7AAAAVA"]
[Fri Mar 27 17:43:00.899466 2026] [:error] [pid 27851:tid 27882] [client 172.161.73.24:65069] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acZRJHR2ccxe3RMCLbrOTQAAANg"]
[Fri Mar 27 17:43:02.981190 2026] [:error] [pid 27851:tid 27876] [client 172.161.73.24:64127] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acZRJnR2ccxe3RMCLbrOVAAAANI"]
[Fri Mar 27 17:43:07.730068 2026] [:error] [pid 4293:tid 4302] [client 172.161.73.24:64137] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acZRK5LjeJUC3OKtEx8fFAAAAUc"]
[Fri Mar 27 17:43:08.358269 2026] [:error] [pid 4293:tid 4308] [client 172.161.73.24:64065] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acZRLJLjeJUC3OKtEx8fGwAAAU0"]
[Fri Mar 27 17:43:08.936015 2026] [:error] [pid 63897:tid 63916] [client 172.161.73.24:64161] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acZRLGVSkmYmLu7ycYglEgAAARE"]
[Fri Mar 27 17:43:09.552928 2026] [:error] [pid 27743:tid 27788] [client 172.161.73.24:64663] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acZRLSA46UYYLqzw99CacwAAABg"]
[Fri Mar 27 17:43:10.083743 2026] [:error] [pid 4341:tid 4355] [client 172.161.73.24:65437] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acZRLuKJWrNB5dMlERFrUQAAAYw"]
[Fri Mar 27 17:43:10.578702 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:65461] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acZRLpLjeJUC3OKtEx8fKgAAAU4"]
[Fri Mar 27 17:43:11.133641 2026] [:error] [pid 63897:tid 63915] [client 172.161.73.24:63603] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acZRL2VSkmYmLu7ycYglFQAAARA"]
[Fri Mar 27 17:43:11.645561 2026] [:error] [pid 4341:tid 4363] [client 172.161.73.24:64580] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acZRL-KJWrNB5dMlERFrVQAAAZQ"]
[Fri Mar 27 17:43:12.157368 2026] [proxy_fcgi:error] [pid 4341:tid 4362] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:12.395115 2026] [proxy_fcgi:error] [pid 4341:tid 4357] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:12.656700 2026] [proxy_fcgi:error] [pid 4341:tid 4361] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:12.897184 2026] [proxy_fcgi:error] [pid 4341:tid 4350] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:13.137523 2026] [proxy_fcgi:error] [pid 4341:tid 4351] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:13.396395 2026] [proxy_fcgi:error] [pid 4341:tid 4352] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:13.639654 2026] [proxy_fcgi:error] [pid 4341:tid 4367] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:13.899146 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:14.170869 2026] [proxy_fcgi:error] [pid 4341:tid 4348] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:14.411033 2026] [proxy_fcgi:error] [pid 4341:tid 4355] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:14.657667 2026] [proxy_fcgi:error] [pid 4341:tid 4359] [client 172.161.73.24:65367] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:43:14.894400 2026] [:error] [pid 4341:tid 4360] [client 172.161.73.24:65367] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acZRMuKJWrNB5dMlERFrZwAAAZE"]
[Fri Mar 27 17:43:15.614132 2026] [:error] [pid 27743:tid 27767] [client 172.161.73.24:62345] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acZRMyA46UYYLqzw99CagQAAAAM"]
[Fri Mar 27 17:43:16.467650 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:64983] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acZRNJLjeJUC3OKtEx8fRwAAAUA"]
[Fri Mar 27 17:43:17.278227 2026] [:error] [pid 4293:tid 4308] [client 172.161.73.24:64585] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acZRNZLjeJUC3OKtEx8fSgAAAU0"]
[Fri Mar 27 17:43:17.897102 2026] [:error] [pid 63897:tid 63912] [client 172.161.73.24:62684] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acZRNWVSkmYmLu7ycYglGwAAAQ0"]
[Fri Mar 27 17:43:18.806772 2026] [:error] [pid 63897:tid 63916] [client 172.161.73.24:63601] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acZRNmVSkmYmLu7ycYglIQAAARE"]
[Fri Mar 27 17:43:19.552185 2026] [:error] [pid 4293:tid 4312] [client 172.161.73.24:64626] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acZRN5LjeJUC3OKtEx8fTwAAAVE"]
[Fri Mar 27 17:43:20.034170 2026] [:error] [pid 4341:tid 4359] [client 172.161.73.24:65036] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acZROOKJWrNB5dMlERFrcQAAAZA"]
[Fri Mar 27 17:43:20.611333 2026] [:error] [pid 27743:tid 27767] [client 172.161.73.24:63581] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acZROCA46UYYLqzw99CajQAAAAM"]
[Fri Mar 27 17:43:21.178815 2026] [:error] [pid 4293:tid 4298] [client 172.161.73.24:65440] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acZROZLjeJUC3OKtEx8fVAAAAUM"]
[Fri Mar 27 17:43:21.913006 2026] [:error] [pid 4341:tid 4351] [client 172.161.73.24:65408] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acZROeKJWrNB5dMlERFrfgAAAYg"]
[Fri Mar 27 17:43:22.588067 2026] [:error] [pid 63897:tid 63904] [client 172.161.73.24:65079] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d12.php"] [unique_id "acZROmVSkmYmLu7ycYglIgAAAQU"]
[Fri Mar 27 17:43:23.821415 2026] [:error] [pid 27743:tid 27781] [client 172.161.73.24:65063] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acZROyA46UYYLqzw99CalQAAABE"]
[Fri Mar 27 17:43:24.508210 2026] [:error] [pid 27743:tid 27773] [client 172.161.73.24:64592] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acZRPCA46UYYLqzw99CamgAAAAk"]
[Fri Mar 27 17:43:25.032135 2026] [:error] [pid 27743:tid 27776] [client 172.161.73.24:64604] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acZRPSA46UYYLqzw99CanQAAAAw"]
[Fri Mar 27 17:43:25.976133 2026] [:error] [pid 4293:tid 4297] [client 172.161.73.24:63583] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acZRPZLjeJUC3OKtEx8fWAAAAUI"]
[Fri Mar 27 17:43:26.579118 2026] [:error] [pid 4293:tid 4305] [client 172.161.73.24:64078] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acZRPpLjeJUC3OKtEx8fXwAAAUo"]
[Fri Mar 27 17:43:27.070671 2026] [:error] [pid 27750:tid 27820] [client 172.161.73.24:63064] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acZRP4aSil5rd17ieLzUpgAAAII"]
[Fri Mar 27 17:43:27.896758 2026] [:error] [pid 27851:tid 27869] [client 172.161.73.24:65416] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acZRP3R2ccxe3RMCLbrOZgAAAMs"]
[Fri Mar 27 17:43:28.536659 2026] [:error] [pid 63897:tid 63922] [client 172.161.73.24:64163] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acZRQGVSkmYmLu7ycYglMQAAARc"]
[Fri Mar 27 17:43:29.089265 2026] [:error] [pid 4341:tid 4346] [client 172.161.73.24:64968] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acZRQeKJWrNB5dMlERFrggAAAYM"]
[Fri Mar 27 17:43:29.627204 2026] [:error] [pid 27743:tid 27771] [client 172.161.73.24:62769] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acZRQSA46UYYLqzw99CapgAAAAc"]
[Fri Mar 27 17:43:30.201075 2026] [:error] [pid 27743:tid 27784] [client 172.161.73.24:65453] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acZRQiA46UYYLqzw99CaqwAAABQ"]
[Fri Mar 27 17:43:30.865930 2026] [:error] [pid 27743:tid 27766] [client 172.161.73.24:65059] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "acZRQiA46UYYLqzw99CasAAAAAI"]
[Fri Mar 27 17:43:31.648175 2026] [:error] [pid 63897:tid 63907] [client 172.161.73.24:65083] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acZRQ2VSkmYmLu7ycYglNgAAAQg"]
[Fri Mar 27 17:43:32.434421 2026] [:error] [pid 4293:tid 4301] [client 172.161.73.24:64637] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acZRRJLjeJUC3OKtEx8fagAAAUY"]
[Fri Mar 27 17:43:34.537245 2026] [:error] [pid 27851:tid 27875] [client 172.161.73.24:64622] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acZRRnR2ccxe3RMCLbrObAAAANE"]
[Fri Mar 27 17:43:35.021911 2026] [:error] [pid 27749:tid 27815] [client 172.161.73.24:64627] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acZRR8EqyoMni2Q6_X7bXwAAAFg"]
[Fri Mar 27 17:43:35.563400 2026] [:error] [pid 4341:tid 4344] [client 172.161.73.24:63589] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acZRR-KJWrNB5dMlERFrjwAAAYE"]
[Fri Mar 27 17:43:36.068614 2026] [:error] [pid 63897:tid 63908] [client 172.161.73.24:63062] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acZRSGVSkmYmLu7ycYglPAAAAQk"]
[Fri Mar 27 17:43:36.642115 2026] [:error] [pid 4341:tid 4355] [client 172.161.73.24:64671] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acZRSOKJWrNB5dMlERFrlgAAAYw"]
[Fri Mar 27 17:43:37.124269 2026] [:error] [pid 27851:tid 27879] [client 172.161.73.24:65038] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acZRSXR2ccxe3RMCLbrOcgAAANU"]
[Fri Mar 27 17:43:37.644061 2026] [:error] [pid 4341:tid 4366] [client 172.161.73.24:63609] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acZRSeKJWrNB5dMlERFrngAAAZc"]
[Fri Mar 27 17:43:38.251347 2026] [:error] [pid 4293:tid 4317] [client 172.161.73.24:63130] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acZRSpLjeJUC3OKtEx8fgAAAAVY"]
[Fri Mar 27 17:43:38.872354 2026] [:error] [pid 27749:tid 27812] [client 172.161.73.24:64173] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acZRSsEqyoMni2Q6_X7bYgAAAFU"]
[Fri Mar 27 17:43:39.395521 2026] [:error] [pid 63897:tid 63921] [client 172.161.73.24:63607] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acZRS2VSkmYmLu7ycYglQQAAARY"]
[Fri Mar 27 17:43:39.938762 2026] [:error] [pid 63897:tid 63914] [client 172.161.73.24:64066] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZRS2VSkmYmLu7ycYglQwAAAQ8"]
[Fri Mar 27 17:43:40.428317 2026] [:error] [pid 4293:tid 4300] [client 172.161.73.24:65086] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZRTJLjeJUC3OKtEx8fiQAAAUU"]
[Fri Mar 27 17:43:40.960056 2026] [:error] [pid 4293:tid 4296] [client 172.161.73.24:63041] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZRTJLjeJUC3OKtEx8fkAAAAUE"]
[Fri Mar 27 17:43:41.771599 2026] [:error] [pid 4293:tid 4311] [client 172.161.73.24:63137] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZRTZLjeJUC3OKtEx8fmwAAAVA"]
[Fri Mar 27 17:43:42.261516 2026] [:error] [pid 63897:tid 63909] [client 172.161.73.24:64673] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acZRTmVSkmYmLu7ycYglRQAAAQo"]
[Fri Mar 27 17:43:42.909023 2026] [:error] [pid 63897:tid 63920] [client 172.161.73.24:63056] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acZRTmVSkmYmLu7ycYglRgAAARU"]
[Fri Mar 27 17:43:43.577085 2026] [:error] [pid 27743:tid 27783] [client 172.161.73.24:64681] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acZRTyA46UYYLqzw99CaxAAAABM"]
[Fri Mar 27 17:43:44.176621 2026] [:error] [pid 27743:tid 27778] [client 172.161.73.24:65056] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acZRUCA46UYYLqzw99CayQAAAA4"]
[Fri Mar 27 17:43:44.805630 2026] [:error] [pid 4341:tid 4364] [client 172.161.73.24:63585] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acZRUOKJWrNB5dMlERFrpgAAAZU"]
[Fri Mar 27 17:43:45.369327 2026] [:error] [pid 4293:tid 4312] [client 172.161.73.24:65397] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acZRUZLjeJUC3OKtEx8fqgAAAVE"]
[Fri Mar 27 17:43:45.903880 2026] [:error] [pid 4341:tid 4354] [client 172.161.73.24:64672] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acZRUeKJWrNB5dMlERFrqQAAAYs"]
[Fri Mar 27 17:43:46.488436 2026] [:error] [pid 4293:tid 4304] [client 172.161.73.24:64106] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acZRUpLjeJUC3OKtEx8frQAAAUk"]
[Fri Mar 27 17:43:47.094864 2026] [:error] [pid 4341:tid 4359] [client 172.161.73.24:63075] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acZRU-KJWrNB5dMlERFrrAAAAZA"]
[Fri Mar 27 17:43:47.971420 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:64631] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acZRU5LjeJUC3OKtEx8fsQAAAUA"]
[Fri Mar 27 17:43:48.556076 2026] [:error] [pid 27743:tid 27770] [client 172.161.73.24:64139] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acZRVCA46UYYLqzw99Ca2gAAAAY"]
[Fri Mar 27 17:43:49.204118 2026] [:error] [pid 27743:tid 27768] [client 172.161.73.24:63664] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "acZRVSA46UYYLqzw99Ca2wAAAAQ"]
[Fri Mar 27 17:43:49.707331 2026] [:error] [pid 4293:tid 4309] [client 172.161.73.24:65033] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acZRVZLjeJUC3OKtEx8fugAAAU4"]
[Fri Mar 27 17:43:50.291746 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:63564] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acZRVpLjeJUC3OKtEx8fvgAAAUA"]
[Fri Mar 27 17:43:50.864973 2026] [:error] [pid 27743:tid 27772] [client 172.161.73.24:64970] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acZRViA46UYYLqzw99Ca3QAAAAg"]
[Fri Mar 27 17:43:51.392592 2026] [:error] [pid 4293:tid 4313] [client 172.161.73.24:64136] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "acZRV5LjeJUC3OKtEx8fxQAAAVI"]
[Fri Mar 27 17:43:52.008317 2026] [:error] [pid 27750:tid 27829] [client 172.161.73.24:65394] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acZRWIaSil5rd17ieLzUswAAAIs"]
[Fri Mar 27 17:43:52.875788 2026] [:error] [pid 27750:tid 27842] [client 172.161.73.24:64653] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acZRWIaSil5rd17ieLzUtAAAAJg"]
[Fri Mar 27 17:43:53.405707 2026] [:error] [pid 4341:tid 4344] [client 172.161.73.24:63553] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acZRWeKJWrNB5dMlERFrvgAAAYE"]
[Fri Mar 27 17:43:54.767392 2026] [:error] [pid 63897:tid 63922] [client 172.161.73.24:63162] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acZRWmVSkmYmLu7ycYglWgAAARc"]
[Fri Mar 27 17:43:55.668929 2026] [:error] [pid 63897:tid 63920] [client 172.161.73.24:65395] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acZRW2VSkmYmLu7ycYglXgAAARU"]
[Fri Mar 27 17:43:56.423757 2026] [:error] [pid 63897:tid 63908] [client 172.161.73.24:64144] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acZRXGVSkmYmLu7ycYglYQAAAQk"]
[Fri Mar 27 17:43:57.377302 2026] [:error] [pid 4341:tid 4347] [client 172.161.73.24:64686] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acZRXeKJWrNB5dMlERFrygAAAYQ"]
[Fri Mar 27 17:43:57.919352 2026] [:error] [pid 27743:tid 27769] [client 172.161.73.24:63110] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acZRXSA46UYYLqzw99Ca7wAAAAU"]
[Fri Mar 27 17:43:58.444752 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:63155] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acZRXiA46UYYLqzw99Ca8gAAABI"]
[Fri Mar 27 17:43:58.933994 2026] [:error] [pid 27749:tid 27802] [client 172.161.73.24:63151] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acZRXsEqyoMni2Q6_X7bcAAAAEs"]
[Fri Mar 27 17:43:59.463000 2026] [:error] [pid 63897:tid 63915] [client 172.161.73.24:65410] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acZRX2VSkmYmLu7ycYglZQAAARA"]
[Fri Mar 27 17:43:59.996467 2026] [:error] [pid 27743:tid 27765] [client 172.161.73.24:65353] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acZRXyA46UYYLqzw99Ca-QAAAAE"]
[Fri Mar 27 17:44:00.505641 2026] [:error] [pid 4341:tid 4366] [client 172.161.73.24:65065] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acZRYOKJWrNB5dMlERFrywAAAZc"]
[Fri Mar 27 17:44:01.025551 2026] [:error] [pid 4341:tid 4356] [client 172.161.73.24:64665] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acZRYeKJWrNB5dMlERFrzgAAAY0"]
[Fri Mar 27 17:44:01.551547 2026] [:error] [pid 27750:tid 27830] [client 172.161.73.24:64642] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acZRYYaSil5rd17ieLzUwgAAAIw"]
[Fri Mar 27 17:44:02.267841 2026] [:error] [pid 27749:tid 27810] [client 172.161.73.24:63641] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acZRYsEqyoMni2Q6_X7bdgAAAFM"]
[Fri Mar 27 17:44:02.834467 2026] [:error] [pid 27851:tid 27876] [client 172.161.73.24:65345] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acZRYnR2ccxe3RMCLbrOiAAAANI"]
[Fri Mar 27 17:44:03.372642 2026] [:error] [pid 27851:tid 27872] [client 172.161.73.24:65012] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acZRY3R2ccxe3RMCLbrOiwAAAM4"]
[Fri Mar 27 17:44:03.994262 2026] [:error] [pid 4341:tid 4359] [client 172.161.73.24:63676] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acZRY-KJWrNB5dMlERFr6gAAAZA"]
[Fri Mar 27 17:44:04.696759 2026] [:error] [pid 4341:tid 4357] [client 172.161.73.24:64174] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acZRZOKJWrNB5dMlERFr9wAAAY4"]
[Fri Mar 27 17:44:05.226106 2026] [:error] [pid 4341:tid 4343] [client 172.161.73.24:64081] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acZRZeKJWrNB5dMlERFr_gAAAYA"]
[Fri Mar 27 17:44:05.700936 2026] [:error] [pid 27743:tid 27775] [client 172.161.73.24:63105] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acZRZSA46UYYLqzw99Ca_wAAAAs"]
[Fri Mar 27 17:44:06.216479 2026] [:error] [pid 4293:tid 4304] [client 172.161.73.24:64128] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acZRZpLjeJUC3OKtEx8fygAAAUk"]
[Fri Mar 27 17:44:06.926906 2026] [:error] [pid 4293:tid 4295] [client 172.161.73.24:62720] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acZRZpLjeJUC3OKtEx8f1AAAAUA"]
[Fri Mar 27 17:44:07.425603 2026] [:error] [pid 4293:tid 4313] [client 172.161.73.24:62318] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acZRZ5LjeJUC3OKtEx8f2gAAAVI"]
[Fri Mar 27 17:44:08.112100 2026] [:error] [pid 27851:tid 27859] [client 172.161.73.24:63634] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acZRaHR2ccxe3RMCLbrOjgAAAME"]
[Fri Mar 27 17:44:08.639300 2026] [:error] [pid 27743:tid 27782] [client 172.161.73.24:64134] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acZRaCA46UYYLqzw99CbBAAAABI"]
[Fri Mar 27 17:44:09.141021 2026] [:error] [pid 4293:tid 4311] [client 172.161.73.24:64652] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acZRaZLjeJUC3OKtEx8f6AAAAVA"]
[Fri Mar 27 17:44:09.617129 2026] [:error] [pid 27743:tid 27774] [client 172.161.73.24:64142] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acZRaSA46UYYLqzw99CbBQAAAAo"]
[Fri Mar 27 17:44:10.275182 2026] [:error] [pid 27750:tid 27826] [client 172.161.73.24:64164] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acZRaoaSil5rd17ieLzUyAAAAIg"]
[Fri Mar 27 17:44:10.778069 2026] [:error] [pid 27743:tid 27787] [client 172.161.73.24:64644] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acZRaiA46UYYLqzw99CbCQAAABc"]
[Fri Mar 27 17:44:11.346373 2026] [:error] [pid 4341:tid 4359] [client 172.161.73.24:65445] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acZRa-KJWrNB5dMlERFsAgAAAZA"]
[Fri Mar 27 17:44:12.145998 2026] [:error] [pid 4293:tid 4311] [client 172.161.73.24:64656] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acZRbJLjeJUC3OKtEx8f9QAAAVA"]
[Fri Mar 27 17:44:12.660059 2026] [:error] [pid 63897:tid 63914] [client 172.161.73.24:65379] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acZRbGVSkmYmLu7ycYgldAAAAQ8"]
[Fri Mar 27 17:44:13.142398 2026] [:error] [pid 27743:tid 27780] [client 172.161.73.24:64131] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acZRbSA46UYYLqzw99CbEQAAABA"]
[Fri Mar 27 17:44:13.633818 2026] [:error] [pid 4293:tid 4314] [client 172.161.73.24:64587] [client 172.161.73.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acZRbZLjeJUC3OKtEx8f-gAAAVM"]
[Fri Mar 27 17:44:14.186496 2026] [proxy_fcgi:error] [pid 27750:tid 27840] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:14.427538 2026] [proxy_fcgi:error] [pid 27750:tid 27831] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:14.674839 2026] [proxy_fcgi:error] [pid 27750:tid 27833] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:14.919741 2026] [proxy_fcgi:error] [pid 27750:tid 27836] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:15.160995 2026] [proxy_fcgi:error] [pid 27750:tid 27841] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:15.402101 2026] [proxy_fcgi:error] [pid 27750:tid 27834] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:15.642606 2026] [proxy_fcgi:error] [pid 27750:tid 27829] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 17:44:15.883368 2026] [proxy_fcgi:error] [pid 27750:tid 27832] [client 172.161.73.24:65009] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 01:06:12.785303 2026] [:error] [pid 11323:tid 11702] [client 64.89.163.49:49723] [client 64.89.163.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.89.163.49, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aca5BBruG7-TT-rIgF_gQgAAABY"]
[Sat Mar 28 01:06:12.795352 2026] [proxy_fcgi:error] [pid 11323:tid 11702] [client 64.89.163.49:49723] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 01:06:33.001885 2026] [:error] [pid 11325:tid 11741] [client 64.89.163.49:55647] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aca5GY9aMci1IHcmG6LpvQAAAMA"]
[Sat Mar 28 01:06:33.769511 2026] [:error] [pid 11325:tid 11746] [client 64.89.163.49:58169] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aca5GY9aMci1IHcmG6LpvwAAAMU"]
[Sat Mar 28 01:06:35.468315 2026] [:error] [pid 11323:tid 11681] [client 64.89.163.49:58393] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aca5GxruG7-TT-rIgF_gmgAAAAE"]
[Sat Mar 28 01:06:36.251521 2026] [:error] [pid 11323:tid 11694] [client 64.89.163.49:58952] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aca5HBruG7-TT-rIgF_gnQAAAA4"]
[Sat Mar 28 01:06:37.002191 2026] [:error] [pid 11325:tid 11762] [client 64.89.163.49:59121] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aca5HY9aMci1IHcmG6LpyAAAANU"]
[Sat Mar 28 01:06:38.547529 2026] [:error] [pid 11325:tid 11748] [client 64.89.163.49:59566] [client 64.89.163.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aca5Ho9aMci1IHcmG6LpygAAAMc"]
[Sun Mar 29 09:39:23.797522 2026] [:error] [pid 23284:tid 23289] [client 94.247.172.129:35713] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.quarryspec.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.quarryspec.com.au"] [uri "/"] [unique_id "aciCy4zBujdPHsq7wySGTgAAAoM"]
[Sun Mar 29 21:49:46.591429 2026] [proxy_fcgi:error] [pid 23167:tid 23181] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:46.786461 2026] [proxy_fcgi:error] [pid 23167:tid 23182] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:46.980915 2026] [proxy_fcgi:error] [pid 23167:tid 23194] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:47.185077 2026] [proxy_fcgi:error] [pid 23167:tid 23183] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:47.397231 2026] [proxy_fcgi:error] [pid 23167:tid 23188] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:47.600966 2026] [proxy_fcgi:error] [pid 23167:tid 23186] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:47.800397 2026] [proxy_fcgi:error] [pid 23167:tid 23184] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:47.995712 2026] [proxy_fcgi:error] [pid 23167:tid 23170] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:48.208538 2026] [proxy_fcgi:error] [pid 23167:tid 23177] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:48.402190 2026] [proxy_fcgi:error] [pid 23167:tid 23193] [client 158.23.176.117:37613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:49:48.593093 2026] [:error] [pid 23167:tid 23187] [client 158.23.176.117:37613] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ackt_BIAHJCFaHff3_fAAQAAAdE"]
[Sun Mar 29 21:49:50.428429 2026] [:error] [pid 23137:tid 23149] [client 158.23.176.117:39609] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ackt_haWQa7LdZ_qGFb6mQAAAYo"]
[Sun Mar 29 21:49:52.079897 2026] [:error] [pid 32257:tid 32324] [client 158.23.176.117:22087] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ackuACE3TArOFrUtgWow4QAAAIY"]
[Sun Mar 29 21:49:55.524413 2026] [:error] [pid 32257:tid 32329] [client 158.23.176.117:57589] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ackuAyE3TArOFrUtgWow7AAAAIs"]
[Sun Mar 29 21:49:59.349665 2026] [:error] [pid 23250:tid 23273] [client 158.23.176.117:19144] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "ackuB5xrpj-dQjy1cvoEJQAAAlU"]
[Sun Mar 29 21:50:00.146986 2026] [:error] [pid 23284:tid 23307] [client 158.23.176.117:20132] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "ackuCIzBujdPHsq7wySbSAAAApU"]
[Sun Mar 29 21:50:01.262998 2026] [:error] [pid 32257:tid 32335] [client 158.23.176.117:18165] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "ackuCSE3TArOFrUtgWoxDQAAAJE"]
[Sun Mar 29 21:50:03.894610 2026] [:error] [pid 32255:tid 32305] [client 158.23.176.117:51332] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxs.php"] [unique_id "ackuC2nfn-AtRoMbquzriwAAAE4"]
[Sun Mar 29 21:50:05.119272 2026] [:error] [pid 32255:tid 32312] [client 158.23.176.117:51378] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ackuDWnfn-AtRoMbquzrjwAAAFU"]
[Sun Mar 29 21:50:05.729066 2026] [:error] [pid 23250:tid 23257] [client 158.23.176.117:16783] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ackuDZxrpj-dQjy1cvoEOAAAAkU"]
[Sun Mar 29 21:50:07.804159 2026] [:error] [pid 32255:tid 32311] [client 158.23.176.117:22529] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ackuD2nfn-AtRoMbquzrmQAAAFQ"]
[Sun Mar 29 21:50:10.073302 2026] [:error] [pid 32359:tid 32378] [client 158.23.176.117:19886] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ackuEgMb8G3UzfQP3WgupwAAANE"]
[Sun Mar 29 21:50:10.992470 2026] [:error] [pid 23137:tid 23155] [client 158.23.176.117:18153] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ackuEhaWQa7LdZ_qGFb6owAAAZA"]
[Sun Mar 29 21:50:11.615777 2026] [:error] [pid 32257:tid 32326] [client 158.23.176.117:23611] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ackuEyE3TArOFrUtgWoxOQAAAIg"]
[Sun Mar 29 21:50:14.291130 2026] [:error] [pid 23284:tid 23310] [client 158.23.176.117:17123] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ackuFozBujdPHsq7wySbVwAAApg"]
[Sun Mar 29 21:50:16.934142 2026] [:error] [pid 23168:tid 23204] [client 158.23.176.117:19853] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ackuGGP8p0yRL8ot_2-bNAAAAgc"]
[Sun Mar 29 21:50:18.046605 2026] [:error] [pid 23168:tid 23199] [client 158.23.176.117:37687] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ackuGmP8p0yRL8ot_2-bOwAAAgI"]
[Sun Mar 29 21:50:18.842424 2026] [:error] [pid 23168:tid 23219] [client 158.23.176.117:51349] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ackuGmP8p0yRL8ot_2-bQwAAAhY"]
[Sun Mar 29 21:50:19.755563 2026] [:error] [pid 32257:tid 32323] [client 158.23.176.117:39577] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ackuGyE3TArOFrUtgWoxXwAAAIU"]
[Sun Mar 29 21:50:20.361859 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:19571] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ackuHCE3TArOFrUtgWoxYQAAAII"]
[Sun Mar 29 21:50:22.251095 2026] [:error] [pid 32359:tid 32371] [client 158.23.176.117:17649] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "ackuHgMb8G3UzfQP3WgusAAAAMo"]
[Sun Mar 29 21:50:22.691829 2026] [:error] [pid 23284:tid 23292] [client 158.23.176.117:59533] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "ackuHozBujdPHsq7wySbcgAAAoY"]
[Sun Mar 29 21:50:23.277366 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:23590] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "ackuHyE3TArOFrUtgWoxbQAAAII"]
[Sun Mar 29 21:50:23.741337 2026] [:error] [pid 23168:tid 23215] [client 158.23.176.117:37678] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "ackuH2P8p0yRL8ot_2-bVgAAAhI"]
[Sun Mar 29 21:50:24.668470 2026] [:error] [pid 32254:tid 32271] [client 158.23.176.117:37659] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "ackuIKug2IHuyGgCTn9cKgAAAAc"]
[Sun Mar 29 21:50:25.350912 2026] [:error] [pid 32257:tid 32328] [client 158.23.176.117:37650] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "ackuISE3TArOFrUtgWoxdgAAAIo"]
[Sun Mar 29 21:50:25.917767 2026] [:error] [pid 23284:tid 23296] [client 158.23.176.117:53206] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "ackuIYzBujdPHsq7wySbewAAAoo"]
[Sun Mar 29 21:50:26.431661 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:43487] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feokc.php"] [unique_id "ackuIiE3TArOFrUtgWoxewAAAII"]
[Sun Mar 29 21:50:26.925701 2026] [:error] [pid 32257:tid 32319] [client 158.23.176.117:20101] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "ackuIiE3TArOFrUtgWoxgAAAAIE"]
[Sun Mar 29 21:50:27.393361 2026] [:error] [pid 32257:tid 32323] [client 158.23.176.117:59548] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "ackuIyE3TArOFrUtgWoxhgAAAIU"]
[Sun Mar 29 21:50:28.271397 2026] [:error] [pid 23284:tid 23303] [client 158.23.176.117:20122] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "ackuJIzBujdPHsq7wySbhQAAApE"]
[Sun Mar 29 21:50:29.327182 2026] [:error] [pid 32257:tid 32318] [client 158.23.176.117:45048] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "ackuJSE3TArOFrUtgWoxkQAAAIA"]
[Sun Mar 29 21:50:31.683790 2026] [:error] [pid 32257:tid 32326] [client 158.23.176.117:20124] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "ackuJyE3TArOFrUtgWoxoQAAAIg"]
[Sun Mar 29 21:50:33.035436 2026] [:error] [pid 32359:tid 32375] [client 158.23.176.117:30437] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "ackuKQMb8G3UzfQP3WguuAAAAM4"]
[Sun Mar 29 21:50:36.653098 2026] [:error] [pid 32255:tid 32314] [client 158.23.176.117:46351] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "ackuLGnfn-AtRoMbquzrswAAAFc"]
[Sun Mar 29 21:50:39.392272 2026] [:error] [pid 23167:tid 23183] [client 158.23.176.117:11001] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpmini.php"] [unique_id "ackuLxIAHJCFaHff3_fAGwAAAc0"]
[Sun Mar 29 21:50:41.310615 2026] [:error] [pid 8818:tid 8826] [client 158.23.176.117:47482] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ackuMSCDvotZNSF0FBrefAAAAUQ"]
[Sun Mar 29 21:50:45.811004 2026] [:error] [pid 23137:tid 23148] [client 158.23.176.117:47449] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ackuNRaWQa7LdZ_qGFb6rQAAAYk"]
[Sun Mar 29 21:50:48.468185 2026] [proxy_fcgi:error] [pid 23284:tid 23298] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:48.685207 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:48.878136 2026] [proxy_fcgi:error] [pid 23284:tid 23292] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:49.072510 2026] [proxy_fcgi:error] [pid 23284:tid 23309] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:49.274972 2026] [proxy_fcgi:error] [pid 23284:tid 23290] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:49.469044 2026] [proxy_fcgi:error] [pid 23284:tid 23299] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:49.668603 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:49.882192 2026] [proxy_fcgi:error] [pid 23284:tid 23298] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:50.088905 2026] [proxy_fcgi:error] [pid 23284:tid 23301] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:50.285715 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:50.507291 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 158.23.176.117:16370] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:50:50.700206 2026] [:error] [pid 23284:tid 23306] [client 158.23.176.117:16370] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ackuOozBujdPHsq7wySb0gAAApQ"]
[Sun Mar 29 21:50:52.211752 2026] [:error] [pid 23250:tid 23268] [client 158.23.176.117:53244] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ackuPJxrpj-dQjy1cvoEVwAAAlA"]
[Sun Mar 29 21:50:55.255961 2026] [:error] [pid 23168:tid 23215] [client 158.23.176.117:28923] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ackuP2P8p0yRL8ot_2-bYwAAAhI"]
[Sun Mar 29 21:50:57.689556 2026] [:error] [pid 32257:tid 32318] [client 158.23.176.117:41198] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "ackuQSE3TArOFrUtgWox-AAAAIA"]
[Sun Mar 29 21:50:59.751035 2026] [:error] [pid 23284:tid 23295] [client 158.23.176.117:46705] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ackuQ4zBujdPHsq7wySb_AAAAok"]
[Sun Mar 29 21:51:01.606743 2026] [:error] [pid 23168:tid 23207] [client 158.23.176.117:22076] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ackuRWP8p0yRL8ot_2-bbAAAAgo"]
[Sun Mar 29 21:51:04.633478 2026] [:error] [pid 32255:tid 32311] [client 158.23.176.117:39910] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ackuSGnfn-AtRoMbquzr_wAAAFQ"]
[Sun Mar 29 21:51:06.168793 2026] [:error] [pid 23168:tid 23212] [client 158.23.176.117:17626] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ackuSmP8p0yRL8ot_2-bcQAAAg8"]
[Sun Mar 29 21:51:07.441358 2026] [:error] [pid 32255:tid 32302] [client 158.23.176.117:20528] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ackuS2nfn-AtRoMbquzsDgAAAEs"]
[Sun Mar 29 21:51:10.152379 2026] [:error] [pid 23167:tid 23182] [client 158.23.176.117:20596] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ackuThIAHJCFaHff3_fAMwAAAcw"]
[Sun Mar 29 21:51:11.676023 2026] [:error] [pid 23168:tid 23213] [client 158.23.176.117:10758] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ackuT2P8p0yRL8ot_2-bdgAAAhA"]
[Sun Mar 29 21:51:13.811602 2026] [:error] [pid 32257:tid 32319] [client 158.23.176.117:30377] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ackuUSE3TArOFrUtgWoyOAAAAIE"]
[Sun Mar 29 21:51:16.615959 2026] [:error] [pid 32255:tid 32308] [client 158.23.176.117:17838] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "ackuVGnfn-AtRoMbquzsQgAAAFE"]
[Sun Mar 29 21:51:17.471214 2026] [:error] [pid 8818:tid 8835] [client 158.23.176.117:20500] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "ackuVSCDvotZNSF0FBresAAAAU0"]
[Sun Mar 29 21:51:18.101171 2026] [:error] [pid 32257:tid 32322] [client 158.23.176.117:54179] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "ackuViE3TArOFrUtgWoyQQAAAIQ"]
[Sun Mar 29 21:51:18.905430 2026] [:error] [pid 23167:tid 23170] [client 158.23.176.117:30794] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "ackuVhIAHJCFaHff3_fAOQAAAcA"]
[Sun Mar 29 21:51:19.960903 2026] [:error] [pid 32255:tid 32307] [client 158.23.176.117:45059] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ackuV2nfn-AtRoMbquzsSwAAAFA"]
[Sun Mar 29 21:51:20.791307 2026] [:error] [pid 23167:tid 23175] [client 158.23.176.117:17822] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ackuWBIAHJCFaHff3_fAPgAAAcU"]
[Sun Mar 29 21:51:22.271710 2026] [:error] [pid 23168:tid 23211] [client 158.23.176.117:29666] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ackuWmP8p0yRL8ot_2-bfwAAAg4"]
[Sun Mar 29 21:51:23.277830 2026] [:error] [pid 23168:tid 23209] [client 158.23.176.117:45119] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ackuW2P8p0yRL8ot_2-bgQAAAgw"]
[Sun Mar 29 21:51:24.145644 2026] [:error] [pid 23168:tid 23208] [client 158.23.176.117:4460] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "ackuXGP8p0yRL8ot_2-biQAAAgs"]
[Sun Mar 29 21:51:24.979547 2026] [:error] [pid 23168:tid 23211] [client 158.23.176.117:4460] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "ackuXGP8p0yRL8ot_2-bjwAAAg4"]
[Sun Mar 29 21:51:25.914928 2026] [:error] [pid 23284:tid 23298] [client 158.23.176.117:39546] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "ackuXYzBujdPHsq7wyScGAAAAow"]
[Sun Mar 29 21:51:26.559099 2026] [:error] [pid 23168:tid 23219] [client 158.23.176.117:30017] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "ackuXmP8p0yRL8ot_2-bpAAAAhY"]
[Sun Mar 29 21:51:27.338822 2026] [:error] [pid 23284:tid 23291] [client 158.23.176.117:39511] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws50.php"] [unique_id "ackuX4zBujdPHsq7wyScIAAAAoU"]
[Sun Mar 29 21:51:28.291681 2026] [:error] [pid 8818:tid 8828] [client 158.23.176.117:50550] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws50.php"] [unique_id "ackuYCCDvotZNSF0FBreuwAAAUY"]
[Sun Mar 29 21:51:29.322834 2026] [:error] [pid 32257:tid 32337] [client 158.23.176.117:30068] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws50.php"] [unique_id "ackuYSE3TArOFrUtgWoyWAAAAJM"]
[Sun Mar 29 21:51:30.164421 2026] [:error] [pid 23284:tid 23301] [client 158.23.176.117:50973] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws50.php"] [unique_id "ackuYozBujdPHsq7wyScLgAAAo8"]
[Sun Mar 29 21:51:30.785017 2026] [:error] [pid 32255:tid 32308] [client 158.23.176.117:36633] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws44.php"] [unique_id "ackuYmnfn-AtRoMbquzsZwAAAFE"]
[Sun Mar 29 21:51:32.572670 2026] [:error] [pid 23284:tid 23290] [client 158.23.176.117:39021] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws44.php"] [unique_id "ackuZIzBujdPHsq7wyScOAAAAoQ"]
[Sun Mar 29 21:51:33.481683 2026] [:error] [pid 23284:tid 23290] [client 158.23.176.117:20221] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws44.php"] [unique_id "ackuZYzBujdPHsq7wyScQwAAAoQ"]
[Sun Mar 29 21:51:34.123072 2026] [:error] [pid 23168:tid 23209] [client 158.23.176.117:33046] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws44.php"] [unique_id "ackuZmP8p0yRL8ot_2-bsAAAAgw"]
[Sun Mar 29 21:51:35.248372 2026] [:error] [pid 32359:tid 32381] [client 158.23.176.117:39508] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ackuZwMb8G3UzfQP3Wgu7QAAANQ"]
[Sun Mar 29 21:51:36.203465 2026] [:error] [pid 8818:tid 8843] [client 158.23.176.117:33036] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ackuaCCDvotZNSF0FBrewgAAAVU"]
[Sun Mar 29 21:51:36.888034 2026] [:error] [pid 32257:tid 32321] [client 158.23.176.117:33039] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ackuaCE3TArOFrUtgWoyagAAAIM"]
[Sun Mar 29 21:51:37.437274 2026] [:error] [pid 23284:tid 23306] [client 158.23.176.117:33116] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ackuaYzBujdPHsq7wyScVQAAApQ"]
[Sun Mar 29 21:51:38.679928 2026] [:error] [pid 23284:tid 23291] [client 158.23.176.117:24611] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ackuaozBujdPHsq7wyScYAAAAoU"]
[Sun Mar 29 21:51:39.331369 2026] [:error] [pid 23284:tid 23290] [client 158.23.176.117:22648] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ackua4zBujdPHsq7wyScZQAAAoQ"]
[Sun Mar 29 21:51:40.347009 2026] [:error] [pid 32257:tid 32330] [client 158.23.176.117:38986] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ackubCE3TArOFrUtgWoygwAAAIw"]
[Sun Mar 29 21:51:41.496766 2026] [:error] [pid 8818:tid 8841] [client 158.23.176.117:10794] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ackubSCDvotZNSF0FBreywAAAVM"]
[Sun Mar 29 21:51:43.496247 2026] [:error] [pid 32255:tid 32309] [client 158.23.176.117:45420] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ackub2nfn-AtRoMbquzskwAAAFI"]
[Sun Mar 29 21:51:44.956622 2026] [:error] [pid 23284:tid 23295] [client 158.23.176.117:31302] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ackucIzBujdPHsq7wySchgAAAok"]
[Sun Mar 29 21:51:45.733173 2026] [:error] [pid 32255:tid 32295] [client 158.23.176.117:39527] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ackucWnfn-AtRoMbquzsmAAAAEQ"]
[Sun Mar 29 21:51:46.463749 2026] [:error] [pid 23168:tid 23204] [client 158.23.176.117:47544] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ackucmP8p0yRL8ot_2-buQAAAgc"]
[Sun Mar 29 21:51:47.307655 2026] [:error] [pid 32255:tid 32292] [client 158.23.176.117:24577] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws36.php"] [unique_id "ackuc2nfn-AtRoMbquzsmgAAAEE"]
[Sun Mar 29 21:51:48.287879 2026] [:error] [pid 8818:tid 8842] [client 158.23.176.117:55808] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws36.php"] [unique_id "ackudCCDvotZNSF0FBre0AAAAVQ"]
[Sun Mar 29 21:51:49.220653 2026] [:error] [pid 23284:tid 23299] [client 158.23.176.117:33624] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws36.php"] [unique_id "ackudYzBujdPHsq7wySckgAAAo0"]
[Sun Mar 29 21:51:49.976585 2026] [:error] [pid 32255:tid 32299] [client 158.23.176.117:24629] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws36.php"] [unique_id "ackudWnfn-AtRoMbquzsowAAAEg"]
[Sun Mar 29 21:51:50.777206 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:51.028997 2026] [proxy_fcgi:error] [pid 23284:tid 23289] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:51.223211 2026] [proxy_fcgi:error] [pid 23284:tid 23286] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:51.460784 2026] [proxy_fcgi:error] [pid 23284:tid 23303] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:51.654672 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:51.849163 2026] [proxy_fcgi:error] [pid 23284:tid 23305] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:52.043786 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:52.258661 2026] [proxy_fcgi:error] [pid 23284:tid 23306] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:52.453117 2026] [proxy_fcgi:error] [pid 23284:tid 23295] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:52.652842 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:52.846744 2026] [proxy_fcgi:error] [pid 23284:tid 23299] [client 158.23.176.117:20197] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:51:53.037975 2026] [:error] [pid 23284:tid 23301] [client 158.23.176.117:20197] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ackueYzBujdPHsq7wySctwAAAo8"]
[Sun Mar 29 21:51:54.142331 2026] [:error] [pid 8818:tid 8828] [client 158.23.176.117:25151] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ackueiCDvotZNSF0FBre1QAAAUY"]
[Sun Mar 29 21:51:54.622450 2026] [:error] [pid 23284:tid 23292] [client 158.23.176.117:53454] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ackueozBujdPHsq7wyScvwAAAoY"]
[Sun Mar 29 21:51:55.384375 2026] [:error] [pid 32359:tid 32385] [client 158.23.176.117:55856] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ackuewMb8G3UzfQP3Wgu-AAAANg"]
[Sun Mar 29 21:51:55.998757 2026] [:error] [pid 32257:tid 32324] [client 158.23.176.117:47532] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "ackueyE3TArOFrUtgWoyqgAAAIY"]
[Sun Mar 29 21:51:56.747015 2026] [:error] [pid 32257:tid 32321] [client 158.23.176.117:47508] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "ackufCE3TArOFrUtgWoyrgAAAIM"]
[Sun Mar 29 21:51:57.828095 2026] [:error] [pid 32257:tid 32333] [client 158.23.176.117:31297] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "ackufSE3TArOFrUtgWoyswAAAI8"]
[Sun Mar 29 21:51:59.028178 2026] [:error] [pid 32255:tid 32312] [client 158.23.176.117:31311] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roter.php"] [unique_id "ackuf2nfn-AtRoMbquzstQAAAFU"]
[Sun Mar 29 21:52:00.627039 2026] [:error] [pid 32257:tid 32329] [client 158.23.176.117:27545] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ackugCE3TArOFrUtgWoyxAAAAIs"]
[Sun Mar 29 21:52:02.357858 2026] [:error] [pid 32257:tid 32332] [client 158.23.176.117:53470] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ackugiE3TArOFrUtgWoyygAAAI4"]
[Sun Mar 29 21:52:03.765036 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:21570] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ackugyE3TArOFrUtgWoy1AAAAII"]
[Sun Mar 29 21:52:06.221775 2026] [:error] [pid 8818:tid 8846] [client 158.23.176.117:22613] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ackuhiCDvotZNSF0FBre4QAAAVg"]
[Sun Mar 29 21:52:07.947393 2026] [:error] [pid 23137:tid 23159] [client 158.23.176.117:17028] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ackuhxaWQa7LdZ_qGFb6wgAAAZQ"]
[Sun Mar 29 21:52:11.265422 2026] [:error] [pid 23284:tid 23286] [client 158.23.176.117:53935] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ackui4zBujdPHsq7wySc8QAAAoA"]
[Sun Mar 29 21:52:13.570368 2026] [:error] [pid 32257:tid 32319] [client 158.23.176.117:59381] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ackujSE3TArOFrUtgWoy9gAAAIE"]
[Sun Mar 29 21:52:15.697888 2026] [:error] [pid 8818:tid 8822] [client 158.23.176.117:35608] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "ackujyCDvotZNSF0FBre5gAAAUA"]
[Sun Mar 29 21:52:18.071346 2026] [:error] [pid 23284:tid 23293] [client 158.23.176.117:35287] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ackukozBujdPHsq7wySdHAAAAoc"]
[Sun Mar 29 21:52:19.929469 2026] [:error] [pid 23168:tid 23214] [client 158.23.176.117:43877] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ackuk2P8p0yRL8ot_2-b5wAAAhE"]
[Sun Mar 29 21:52:22.073509 2026] [:error] [pid 23167:tid 23192] [client 158.23.176.117:39086] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ackulhIAHJCFaHff3_fAZQAAAdY"]
[Sun Mar 29 21:52:24.420101 2026] [:error] [pid 32255:tid 32300] [client 158.23.176.117:42794] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ackumGnfn-AtRoMbquzs8gAAAEk"]
[Sun Mar 29 21:52:27.871363 2026] [:error] [pid 32254:tid 32277] [client 158.23.176.117:59378] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "ackum6ug2IHuyGgCTn9cSwAAAA0"]
[Sun Mar 29 21:52:30.750281 2026] [:error] [pid 23168:tid 23204] [client 158.23.176.117:35278] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "ackunmP8p0yRL8ot_2-b-QAAAgc"]
[Sun Mar 29 21:52:33.376467 2026] [:error] [pid 32255:tid 32300] [client 158.23.176.117:34132] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "ackuoWnfn-AtRoMbquztAwAAAEk"]
[Sun Mar 29 21:52:37.955878 2026] [:error] [pid 23167:tid 23175] [client 158.23.176.117:28422] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n1GiO.php"] [unique_id "ackupRIAHJCFaHff3_fAfgAAAcU"]
[Sun Mar 29 21:52:38.978017 2026] [:error] [pid 23250:tid 23264] [client 158.23.176.117:17356] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "ackuppxrpj-dQjy1cvoEugAAAkw"]
[Sun Mar 29 21:52:40.995898 2026] [:error] [pid 23250:tid 23259] [client 158.23.176.117:10908] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "ackuqJxrpj-dQjy1cvoEwAAAAkc"]
[Sun Mar 29 21:52:41.851693 2026] [:error] [pid 32254:tid 32272] [client 158.23.176.117:28444] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "ackuqaug2IHuyGgCTn9caQAAAAg"]
[Sun Mar 29 21:52:42.506023 2026] [:error] [pid 8818:tid 8840] [client 158.23.176.117:48480] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pLdK1.php"] [unique_id "ackuqiCDvotZNSF0FBrfFgAAAVI"]
[Sun Mar 29 21:52:44.322428 2026] [:error] [pid 23250:tid 23252] [client 158.23.176.117:21556] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "ackurJxrpj-dQjy1cvoEzAAAAkA"]
[Sun Mar 29 21:52:45.636172 2026] [:error] [pid 23284:tid 23290] [client 158.23.176.117:4594] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "ackurYzBujdPHsq7wySdOwAAAoQ"]
[Sun Mar 29 21:52:46.554144 2026] [:error] [pid 32255:tid 32298] [client 158.23.176.117:34126] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "ackurmnfn-AtRoMbquztIwAAAEc"]
[Sun Mar 29 21:52:47.608808 2026] [:error] [pid 32359:tid 32373] [client 158.23.176.117:23652] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/llb1J.php"] [unique_id "ackurwMb8G3UzfQP3WgvJQAAAMw"]
[Sun Mar 29 21:52:48.141254 2026] [:error] [pid 23167:tid 23189] [client 158.23.176.117:44252] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "ackusBIAHJCFaHff3_fAiQAAAdM"]
[Sun Mar 29 21:52:50.986640 2026] [:error] [pid 32254:tid 32266] [client 158.23.176.117:49690] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "ackusqug2IHuyGgCTn9ceAAAAAI"]
[Sun Mar 29 21:52:51.912948 2026] [:error] [pid 32257:tid 32340] [client 158.23.176.117:34114] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jeZDu.php"] [unique_id "ackusyE3TArOFrUtgWozQwAAAJY"]
[Sun Mar 29 21:52:52.588457 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:52.836211 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:53.033652 2026] [proxy_fcgi:error] [pid 23284:tid 23296] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:53.293549 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:53.488012 2026] [proxy_fcgi:error] [pid 23284:tid 23288] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:53.765168 2026] [proxy_fcgi:error] [pid 23284:tid 23290] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:54.163758 2026] [proxy_fcgi:error] [pid 23284:tid 23287] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:54.359944 2026] [proxy_fcgi:error] [pid 23284:tid 23294] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:54.552792 2026] [proxy_fcgi:error] [pid 23284:tid 23308] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:54.787203 2026] [proxy_fcgi:error] [pid 23284:tid 23293] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:54.981761 2026] [proxy_fcgi:error] [pid 23284:tid 23286] [client 158.23.176.117:57372] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:52:55.189343 2026] [:error] [pid 23284:tid 23298] [client 158.23.176.117:57372] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ackut4zBujdPHsq7wySdWwAAAow"]
[Sun Mar 29 21:52:55.855852 2026] [:error] [pid 23168:tid 23217] [client 158.23.176.117:44242] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ackut2P8p0yRL8ot_2-cIQAAAhQ"]
[Sun Mar 29 21:52:57.277433 2026] [:error] [pid 23168:tid 23216] [client 158.23.176.117:24123] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ackuuWP8p0yRL8ot_2-cLgAAAhM"]
[Sun Mar 29 21:52:58.249112 2026] [:error] [pid 32257:tid 32321] [client 158.23.176.117:44269] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ackuuiE3TArOFrUtgWozUwAAAIM"]
[Sun Mar 29 21:52:59.090669 2026] [:error] [pid 23168:tid 23210] [client 158.23.176.117:34466] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ackuu2P8p0yRL8ot_2-cNAAAAg0"]
[Sun Mar 29 21:52:59.739171 2026] [:error] [pid 32254:tid 32269] [client 158.23.176.117:49667] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ackuu6ug2IHuyGgCTn9cewAAAAU"]
[Sun Mar 29 21:53:00.968530 2026] [:error] [pid 8818:tid 8831] [client 158.23.176.117:24124] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ackuvCCDvotZNSF0FBrfKwAAAUk"]
[Sun Mar 29 21:53:01.744227 2026] [:error] [pid 32359:tid 32363] [client 158.23.176.117:4656] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ackuvQMb8G3UzfQP3WgvKwAAAMI"]
[Sun Mar 29 21:53:03.532786 2026] [:error] [pid 32255:tid 32292] [client 158.23.176.117:24105] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ackuv2nfn-AtRoMbquztPQAAAEE"]
[Sun Mar 29 21:53:04.217904 2026] [:error] [pid 23284:tid 23301] [client 158.23.176.117:40170] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ackuwIzBujdPHsq7wySdfgAAAo8"]
[Sun Mar 29 21:53:05.214026 2026] [:error] [pid 23284:tid 23296] [client 158.23.176.117:49668] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ackuwYzBujdPHsq7wySdggAAAoo"]
[Sun Mar 29 21:53:05.785651 2026] [:error] [pid 23284:tid 23293] [client 158.23.176.117:34450] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ackuwYzBujdPHsq7wySdhgAAAoc"]
[Sun Mar 29 21:53:07.096376 2026] [:error] [pid 8818:tid 8824] [client 158.23.176.117:29307] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ackuwyCDvotZNSF0FBrfLQAAAUI"]
[Sun Mar 29 21:53:09.564682 2026] [:error] [pid 23137:tid 23160] [client 158.23.176.117:57345] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ackuxRaWQa7LdZ_qGFb65AAAAZU"]
[Sun Mar 29 21:53:10.650452 2026] [:error] [pid 8818:tid 8826] [client 158.23.176.117:40158] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ackuxiCDvotZNSF0FBrfPgAAAUQ"]
[Sun Mar 29 21:53:11.191071 2026] [:error] [pid 23250:tid 23271] [client 158.23.176.117:23647] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ackux5xrpj-dQjy1cvoE3gAAAlM"]
[Sun Mar 29 21:53:11.974174 2026] [:error] [pid 32254:tid 32288] [client 158.23.176.117:57402] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ackux6ug2IHuyGgCTn9chgAAABg"]
[Sun Mar 29 21:53:12.525421 2026] [:error] [pid 23167:tid 23175] [client 158.23.176.117:29262] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ackuyBIAHJCFaHff3_fAoQAAAcU"]
[Sun Mar 29 21:53:13.467011 2026] [:error] [pid 32255:tid 32298] [client 158.23.176.117:49690] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ackuyWnfn-AtRoMbquztSgAAAEc"]
[Sun Mar 29 21:53:15.491018 2026] [:error] [pid 23167:tid 23173] [client 158.23.176.117:49675] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "ackuyxIAHJCFaHff3_fApAAAAcM"]
[Sun Mar 29 21:53:16.681154 2026] [:error] [pid 23167:tid 23191] [client 158.23.176.117:51702] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ackuzBIAHJCFaHff3_fAqQAAAdU"]
[Sun Mar 29 21:53:18.638810 2026] [:error] [pid 32359:tid 32364] [client 158.23.176.117:4567] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ackuzgMb8G3UzfQP3WgvOwAAAMM"]
[Sun Mar 29 21:53:23.391908 2026] [:error] [pid 23168:tid 23198] [client 158.23.176.117:38343] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acku02P8p0yRL8ot_2-cUgAAAgE"]
[Sun Mar 29 21:53:24.810177 2026] [:error] [pid 23168:tid 23205] [client 158.23.176.117:57375] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acku1GP8p0yRL8ot_2-cWQAAAgg"]
[Sun Mar 29 21:53:26.243205 2026] [:error] [pid 23284:tid 23290] [client 158.23.176.117:24100] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acku1ozBujdPHsq7wySdpgAAAoQ"]
[Sun Mar 29 21:53:27.165300 2026] [:error] [pid 23284:tid 23300] [client 158.23.176.117:51711] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acku14zBujdPHsq7wySdrwAAAo4"]
[Sun Mar 29 21:53:28.026308 2026] [:error] [pid 23284:tid 23298] [client 158.23.176.117:28528] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acku2IzBujdPHsq7wySdtQAAAow"]
[Sun Mar 29 21:53:28.743337 2026] [:error] [pid 23168:tid 23216] [client 158.23.176.117:26216] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "acku2GP8p0yRL8ot_2-cXwAAAhM"]
[Sun Mar 29 21:53:29.500563 2026] [:error] [pid 23284:tid 23310] [client 158.23.176.117:4557] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "acku2YzBujdPHsq7wySdwAAAApg"]
[Sun Mar 29 21:53:30.258759 2026] [:error] [pid 23167:tid 23189] [client 158.23.176.117:44304] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "acku2hIAHJCFaHff3_fAwgAAAdM"]
[Sun Mar 29 21:53:31.914384 2026] [:error] [pid 32254:tid 32273] [client 158.23.176.117:40182] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "acku26ug2IHuyGgCTn9cmgAAAAk"]
[Sun Mar 29 21:53:33.148865 2026] [:error] [pid 32257:tid 32342] [client 158.23.176.117:60335] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "acku3SE3TArOFrUtgWozogAAAJg"]
[Sun Mar 29 21:53:34.102510 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:57296] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acku3iE3TArOFrUtgWozqAAAAII"]
[Sun Mar 29 21:53:34.979837 2026] [:error] [pid 32257:tid 32342] [client 158.23.176.117:4544] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acku3iE3TArOFrUtgWozrwAAAJg"]
[Sun Mar 29 21:53:35.377578 2026] [:error] [pid 23168:tid 23219] [client 158.23.176.117:44270] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acku32P8p0yRL8ot_2-cZAAAAhY"]
[Sun Mar 29 21:53:36.285402 2026] [:error] [pid 32255:tid 32292] [client 158.23.176.117:36116] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acku4Gnfn-AtRoMbquztXQAAAEE"]
[Sun Mar 29 21:53:36.821818 2026] [:error] [pid 32255:tid 32302] [client 158.23.176.117:27613] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acku4Gnfn-AtRoMbquztYAAAAEs"]
[Sun Mar 29 21:53:37.882357 2026] [:error] [pid 23168:tid 23214] [client 158.23.176.117:44297] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acku4WP8p0yRL8ot_2-cZwAAAhE"]
[Sun Mar 29 21:53:39.019185 2026] [:error] [pid 32255:tid 32315] [client 158.23.176.117:55659] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acku42nfn-AtRoMbquztZwAAAFg"]
[Sun Mar 29 21:53:41.110851 2026] [:error] [pid 32257:tid 32342] [client 158.23.176.117:26693] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acku5SE3TArOFrUtgWoz0AAAAJg"]
[Sun Mar 29 21:53:42.616563 2026] [:error] [pid 8818:tid 8830] [client 158.23.176.117:48812] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dragonshell.php"] [unique_id "acku5iCDvotZNSF0FBrfTgAAAUg"]
[Sun Mar 29 21:53:44.191861 2026] [:error] [pid 23284:tid 23300] [client 158.23.176.117:28148] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dragonshell.php"] [unique_id "acku6IzBujdPHsq7wySd2wAAAo4"]
[Sun Mar 29 21:53:45.408912 2026] [:error] [pid 32255:tid 32310] [client 158.23.176.117:28112] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dragonshell.php"] [unique_id "acku6Wnfn-AtRoMbquztbAAAAFM"]
[Sun Mar 29 21:53:46.116217 2026] [:error] [pid 23284:tid 23309] [client 158.23.176.117:19519] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dragonshell.php"] [unique_id "acku6ozBujdPHsq7wySd4QAAApc"]
[Sun Mar 29 21:53:46.882003 2026] [:error] [pid 23284:tid 23296] [client 158.23.176.117:31635] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acku6ozBujdPHsq7wySd5AAAAoo"]
[Sun Mar 29 21:53:47.630862 2026] [:error] [pid 8818:tid 8830] [client 158.23.176.117:44723] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acku6yCDvotZNSF0FBrfXAAAAUg"]
[Sun Mar 29 21:53:48.739221 2026] [:error] [pid 23284:tid 23298] [client 158.23.176.117:18715] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acku7IzBujdPHsq7wySd6AAAAow"]
[Sun Mar 29 21:53:50.176019 2026] [:error] [pid 23168:tid 23215] [client 158.23.176.117:27140] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acku7mP8p0yRL8ot_2-chwAAAhI"]
[Sun Mar 29 21:53:53.221863 2026] [:error] [pid 32255:tid 32298] [client 158.23.176.117:47839] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/caiij.php"] [unique_id "acku8Wnfn-AtRoMbquztcAAAAEc"]
[Sun Mar 29 21:53:54.287970 2026] [proxy_fcgi:error] [pid 32257:tid 32329] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:54.482705 2026] [proxy_fcgi:error] [pid 32257:tid 32330] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:54.687232 2026] [proxy_fcgi:error] [pid 32257:tid 32339] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:54.882175 2026] [proxy_fcgi:error] [pid 32257:tid 32335] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:55.077899 2026] [proxy_fcgi:error] [pid 32257:tid 32318] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:55.273684 2026] [proxy_fcgi:error] [pid 32257:tid 32337] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:55.485535 2026] [proxy_fcgi:error] [pid 32257:tid 32336] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:55.679262 2026] [proxy_fcgi:error] [pid 32257:tid 32321] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:55.873710 2026] [proxy_fcgi:error] [pid 32257:tid 32320] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:57.412729 2026] [proxy_fcgi:error] [pid 32257:tid 32322] [client 158.23.176.117:32118] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:53:57.840659 2026] [:error] [pid 32257:tid 32329] [client 158.23.176.117:32118] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acku9SE3TArOFrUtgWo0AQAAAIs"]
[Sun Mar 29 21:53:59.272012 2026] [:error] [pid 32257:tid 32327] [client 158.23.176.117:50272] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acku9yE3TArOFrUtgWo0AgAAAIk"]
[Sun Mar 29 21:53:59.735923 2026] [:error] [pid 23167:tid 23182] [client 158.23.176.117:51721] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acku9xIAHJCFaHff3_fA3AAAAcw"]
[Sun Mar 29 21:54:01.356983 2026] [:error] [pid 23137:tid 23140] [client 158.23.176.117:36554] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acku-RaWQa7LdZ_qGFb6-gAAAYE"]
[Sun Mar 29 21:54:02.846968 2026] [:error] [pid 23284:tid 23296] [client 158.23.176.117:4994] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acku-ozBujdPHsq7wySeBAAAAoo"]
[Sun Mar 29 21:54:04.997767 2026] [:error] [pid 23284:tid 23286] [client 158.23.176.117:34860] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acku_IzBujdPHsq7wySeEAAAAoA"]
[Sun Mar 29 21:54:05.988297 2026] [:error] [pid 23167:tid 23180] [client 158.23.176.117:4805] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acku_RIAHJCFaHff3_fA5QAAAco"]
[Sun Mar 29 21:54:07.199447 2026] [:error] [pid 23284:tid 23299] [client 158.23.176.117:37140] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtyh.php"] [unique_id "acku_4zBujdPHsq7wySeFAAAAo0"]
[Sun Mar 29 21:54:08.231026 2026] [:error] [pid 32254:tid 32277] [client 158.23.176.117:60276] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ackvAKug2IHuyGgCTn9cpQAAAA0"]
[Sun Mar 29 21:54:09.092194 2026] [:error] [pid 32257:tid 32325] [client 158.23.176.117:37157] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ackvASE3TArOFrUtgWo0EwAAAIc"]
[Sun Mar 29 21:54:10.459655 2026] [:error] [pid 32257:tid 32330] [client 158.23.176.117:43877] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ackvAiE3TArOFrUtgWo0GgAAAIw"]
[Sun Mar 29 21:54:11.405992 2026] [:error] [pid 23137:tid 23151] [client 158.23.176.117:16592] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wta.php"] [unique_id "ackvAxaWQa7LdZ_qGFb7AgAAAYw"]
[Sun Mar 29 21:54:11.954792 2026] [:error] [pid 32257:tid 32326] [client 158.23.176.117:34904] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ackvAyE3TArOFrUtgWo0HQAAAIg"]
[Sun Mar 29 21:54:12.520553 2026] [:error] [pid 23137:tid 23141] [client 158.23.176.117:4822] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ackvBBaWQa7LdZ_qGFb7BQAAAYI"]
[Sun Mar 29 21:54:13.226093 2026] [:error] [pid 23250:tid 23271] [client 158.23.176.117:60282] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ackvBZxrpj-dQjy1cvoFDQAAAlM"]
[Sun Mar 29 21:54:13.758855 2026] [:error] [pid 23137:tid 23150] [client 158.23.176.117:36581] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ackvBRaWQa7LdZ_qGFb7BwAAAYs"]
[Sun Mar 29 21:54:14.202529 2026] [:error] [pid 32257:tid 32339] [client 158.23.176.117:16639] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ackvBiE3TArOFrUtgWo0JwAAAJU"]
[Sun Mar 29 21:54:15.138253 2026] [:error] [pid 8818:tid 8832] [client 158.23.176.117:16550] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ackvByCDvotZNSF0FBrfcAAAAUo"]
[Sun Mar 29 21:54:15.977762 2026] [:error] [pid 23284:tid 23302] [client 158.23.176.117:37600] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ackvB4zBujdPHsq7wySeNAAAApA"]
[Sun Mar 29 21:54:16.510963 2026] [:error] [pid 23167:tid 23185] [client 158.23.176.117:17565] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ackvCBIAHJCFaHff3_fA9AAAAc8"]
[Sun Mar 29 21:54:17.451835 2026] [:error] [pid 8818:tid 8844] [client 158.23.176.117:37132] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ackvCSCDvotZNSF0FBrfcgAAAVY"]
[Sun Mar 29 21:54:17.994502 2026] [:error] [pid 23167:tid 23189] [client 158.23.176.117:37092] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ackvCRIAHJCFaHff3_fA-QAAAdM"]
[Sun Mar 29 21:54:18.560743 2026] [:error] [pid 32359:tid 32370] [client 158.23.176.117:60253] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ackvCgMb8G3UzfQP3WgvUQAAAMk"]
[Sun Mar 29 21:54:19.459463 2026] [:error] [pid 32257:tid 32323] [client 158.23.176.117:17590] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ackvCyE3TArOFrUtgWo0LgAAAIU"]
[Sun Mar 29 21:54:21.212763 2026] [:error] [pid 32257:tid 32339] [client 158.23.176.117:35255] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ackvDSE3TArOFrUtgWo0OAAAAJU"]
[Sun Mar 29 21:54:23.001616 2026] [:error] [pid 23284:tid 23296] [client 158.23.176.117:40237] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ackvD4zBujdPHsq7wySeRwAAAoo"]
[Sun Mar 29 21:54:25.824094 2026] [:error] [pid 23137:tid 23146] [client 158.23.176.117:28083] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ackvERaWQa7LdZ_qGFb7GwAAAYc"]
[Sun Mar 29 21:54:28.362878 2026] [:error] [pid 23284:tid 23304] [client 158.23.176.117:37603] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ackvFIzBujdPHsq7wySeaAAAApI"]
[Sun Mar 29 21:54:29.813785 2026] [:error] [pid 32255:tid 32310] [client 158.23.176.117:35223] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ackvFWnfn-AtRoMbquztlgAAAFM"]
[Sun Mar 29 21:54:31.810387 2026] [:error] [pid 32257:tid 32342] [client 158.23.176.117:32021] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ackvFyE3TArOFrUtgWo0VgAAAJg"]
[Sun Mar 29 21:54:33.588500 2026] [:error] [pid 8818:tid 8838] [client 158.23.176.117:34864] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ackvGSCDvotZNSF0FBrffwAAAVA"]
[Sun Mar 29 21:54:34.091871 2026] [:error] [pid 32255:tid 32307] [client 158.23.176.117:40640] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ackvGmnfn-AtRoMbquzttQAAAFA"]
[Sun Mar 29 21:54:34.637220 2026] [:error] [pid 23168:tid 23214] [client 158.23.176.117:37063] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ackvGmP8p0yRL8ot_2-c_gAAAhE"]
[Sun Mar 29 21:54:35.533853 2026] [:error] [pid 32257:tid 32325] [client 158.23.176.117:60397] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ackvGyE3TArOFrUtgWo0bwAAAIc"]
[Sun Mar 29 21:54:36.120975 2026] [:error] [pid 32257:tid 32338] [client 158.23.176.117:43959] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ackvHCE3TArOFrUtgWo0dQAAAJQ"]
[Sun Mar 29 21:54:36.684622 2026] [:error] [pid 32257:tid 32325] [client 158.23.176.117:48992] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ackvHCE3TArOFrUtgWo0fwAAAIc"]
[Sun Mar 29 21:54:37.231032 2026] [:error] [pid 32257:tid 32331] [client 158.23.176.117:37618] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ackvHSE3TArOFrUtgWo0igAAAI0"]
[Sun Mar 29 21:54:37.818527 2026] [:error] [pid 23168:tid 23204] [client 158.23.176.117:37107] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ackvHWP8p0yRL8ot_2-dAwAAAgc"]
[Sun Mar 29 21:54:38.315091 2026] [:error] [pid 23284:tid 23295] [client 158.23.176.117:34838] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ackvHozBujdPHsq7wySekwAAAok"]
[Sun Mar 29 21:54:38.777728 2026] [:error] [pid 32359:tid 32380] [client 158.23.176.117:26674] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ackvHgMb8G3UzfQP3WgvWAAAANM"]
[Sun Mar 29 21:54:39.262099 2026] [:error] [pid 23167:tid 23180] [client 158.23.176.117:37575] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ackvHxIAHJCFaHff3_fBEgAAAco"]
[Sun Mar 29 21:54:40.347493 2026] [:error] [pid 32257:tid 32333] [client 158.23.176.117:37612] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ackvICE3TArOFrUtgWo0pgAAAI8"]
[Sun Mar 29 21:54:40.999483 2026] [:error] [pid 32257:tid 32328] [client 158.23.176.117:25698] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ackvICE3TArOFrUtgWo0rwAAAIo"]
[Sun Mar 29 21:54:41.488647 2026] [:error] [pid 32257:tid 32319] [client 158.23.176.117:16625] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bywaf.php"] [unique_id "ackvISE3TArOFrUtgWo0sgAAAIE"]
[Sun Mar 29 21:54:43.032277 2026] [:error] [pid 32359:tid 32376] [client 158.23.176.117:16572] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ackvIwMb8G3UzfQP3WgvYwAAAM8"]
[Sun Mar 29 21:54:44.695813 2026] [:error] [pid 23137:tid 23162] [client 158.23.176.117:48978] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ackvJBaWQa7LdZ_qGFb7JgAAAZc"]
[Sun Mar 29 21:54:46.960937 2026] [:error] [pid 32255:tid 32308] [client 158.23.176.117:40233] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ackvJmnfn-AtRoMbquzuCQAAAFE"]
[Sun Mar 29 21:54:49.510001 2026] [:error] [pid 32255:tid 32312] [client 158.23.176.117:29208] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ackvKWnfn-AtRoMbquzuEAAAAFU"]
[Sun Mar 29 21:54:50.464056 2026] [:error] [pid 23250:tid 23261] [client 158.23.176.117:60233] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "ackvKpxrpj-dQjy1cvoFNwAAAkk"]
[Sun Mar 29 21:54:51.536985 2026] [:error] [pid 23168:tid 23215] [client 158.23.176.117:25693] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "ackvK2P8p0yRL8ot_2-dGAAAAhI"]
[Sun Mar 29 21:54:52.041757 2026] [:error] [pid 23250:tid 23259] [client 158.23.176.117:37142] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "ackvLJxrpj-dQjy1cvoFOwAAAkc"]
[Sun Mar 29 21:54:52.593941 2026] [:error] [pid 23168:tid 23204] [client 158.23.176.117:4826] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "ackvLGP8p0yRL8ot_2-dGQAAAgc"]
[Sun Mar 29 21:54:53.309154 2026] [:error] [pid 32255:tid 32301] [client 158.23.176.117:29193] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx88.php"] [unique_id "ackvLWnfn-AtRoMbquzuHAAAAEo"]
[Sun Mar 29 21:54:55.469706 2026] [:error] [pid 8818:tid 8844] [client 158.23.176.117:48965] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx88.php"] [unique_id "ackvLyCDvotZNSF0FBrfpQAAAVY"]
[Sun Mar 29 21:54:58.293612 2026] [proxy_fcgi:error] [pid 23167:tid 23193] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:58.487387 2026] [proxy_fcgi:error] [pid 23167:tid 23172] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:58.679990 2026] [proxy_fcgi:error] [pid 23167:tid 23192] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:58.875132 2026] [proxy_fcgi:error] [pid 23167:tid 23171] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:59.074560 2026] [proxy_fcgi:error] [pid 23167:tid 23182] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:59.271537 2026] [proxy_fcgi:error] [pid 23167:tid 23186] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:59.465588 2026] [proxy_fcgi:error] [pid 23167:tid 23173] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:54:59.665378 2026] [proxy_fcgi:error] [pid 23167:tid 23183] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:00.075906 2026] [proxy_fcgi:error] [pid 23167:tid 23179] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:00.273797 2026] [proxy_fcgi:error] [pid 23167:tid 23191] [client 158.23.176.117:34830] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 21:55:00.464652 2026] [:error] [pid 23167:tid 23189] [client 158.23.176.117:34830] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ackvNBIAHJCFaHff3_fBKAAAAdM"]
[Sun Mar 29 21:55:01.904212 2026] [:error] [pid 32359:tid 32380] [client 158.23.176.117:16300] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ackvNQMb8G3UzfQP3WgvcQAAANM"]
[Sun Mar 29 21:55:02.726630 2026] [:error] [pid 32359:tid 32384] [client 158.23.176.117:51713] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ackvNgMb8G3UzfQP3WgvdAAAANc"]
[Sun Mar 29 21:55:03.671960 2026] [:error] [pid 32359:tid 32369] [client 158.23.176.117:4815] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ackvNwMb8G3UzfQP3WgvegAAAMg"]
[Sun Mar 29 21:55:04.797812 2026] [:error] [pid 23137:tid 23160] [client 158.23.176.117:16299] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ackvOBaWQa7LdZ_qGFb7OgAAAZU"]
[Sun Mar 29 21:55:07.251630 2026] [:error] [pid 32257:tid 32320] [client 158.23.176.117:4844] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ackvOyE3TArOFrUtgWo00wAAAII"]
[Sun Mar 29 21:55:10.610433 2026] [:error] [pid 32255:tid 32304] [client 158.23.176.117:50293] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ackvPmnfn-AtRoMbquzuJQAAAE0"]
[Sun Mar 29 21:55:12.613131 2026] [:error] [pid 23168:tid 23221] [client 158.23.176.117:4882] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ackvQGP8p0yRL8ot_2-dMgAAAhg"]
[Sun Mar 29 21:55:14.256598 2026] [:error] [pid 23284:tid 23294] [client 158.23.176.117:27156] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ackvQozBujdPHsq7wySe_wAAAog"]
[Sun Mar 29 21:55:14.858065 2026] [:error] [pid 23284:tid 23302] [client 158.23.176.117:26728] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ackvQozBujdPHsq7wySfAwAAApA"]
[Sun Mar 29 21:55:19.074130 2026] [:error] [pid 8818:tid 8822] [client 158.23.176.117:53525] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ackvRyCDvotZNSF0FBrf2gAAAUA"]
[Sun Mar 29 21:55:20.152519 2026] [:error] [pid 23284:tid 23310] [client 158.23.176.117:55626] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ackvSIzBujdPHsq7wySfIwAAApg"]
[Sun Mar 29 21:55:21.097548 2026] [:error] [pid 32257:tid 32322] [client 158.23.176.117:48714] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "ackvSSE3TArOFrUtgWo08gAAAIQ"]
[Sun Mar 29 21:55:22.775639 2026] [:error] [pid 32254:tid 32283] [client 158.23.176.117:60338] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "ackvSqug2IHuyGgCTn9cwgAAABM"]
[Sun Mar 29 21:55:24.168966 2026] [:error] [pid 32257:tid 32342] [client 158.23.176.117:40186] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "ackvTCE3TArOFrUtgWo0-QAAAJg"]
[Sun Mar 29 21:55:25.907344 2026] [:error] [pid 23284:tid 23306] [client 158.23.176.117:51275] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpass.php"] [unique_id "ackvTYzBujdPHsq7wySfOwAAApQ"]
[Sun Mar 29 21:55:27.854055 2026] [:error] [pid 23137:tid 23155] [client 158.23.176.117:21529] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ackvTxaWQa7LdZ_qGFb7UAAAAZA"]
[Sun Mar 29 21:55:30.039330 2026] [:error] [pid 23168:tid 23206] [client 158.23.176.117:4663] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ackvUmP8p0yRL8ot_2-dSAAAAgk"]
[Sun Mar 29 21:55:31.428730 2026] [:error] [pid 23250:tid 23263] [client 158.23.176.117:48488] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ackvU5xrpj-dQjy1cvoFZgAAAks"]
[Sun Mar 29 21:55:33.095658 2026] [:error] [pid 23250:tid 23266] [client 158.23.176.117:42803] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ackvVZxrpj-dQjy1cvoFbAAAAk4"]
[Sun Mar 29 21:55:34.772982 2026] [:error] [pid 23167:tid 23193] [client 158.23.176.117:27205] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ackvVhIAHJCFaHff3_fBPAAAAdc"]
[Sun Mar 29 21:55:35.877970 2026] [:error] [pid 23168:tid 23216] [client 158.23.176.117:43184] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ackvV2P8p0yRL8ot_2-dVAAAAhM"]
[Sun Mar 29 21:55:36.348308 2026] [:error] [pid 32359:tid 32362] [client 158.23.176.117:59339] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ackvWAMb8G3UzfQP3WgvhgAAAME"]
[Sun Mar 29 21:55:36.899022 2026] [:error] [pid 23137:tid 23162] [client 158.23.176.117:55796] [client 158.23.176.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ackvWBaWQa7LdZ_qGFb7VQAAAZc"]
[Sun Mar 29 22:46:19.667824 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:15336] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ack7O4zBujdPHsq7wyTICgAAApg"]
[Sun Mar 29 22:46:20.212168 2026] [:error] [pid 23167:tid 23181] [client 68.155.145.150:15327] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ack7PBIAHJCFaHff3_fOQgAAAcs"]
[Sun Mar 29 22:46:20.610566 2026] [:error] [pid 23167:tid 23184] [client 68.155.145.150:15323] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ack7PBIAHJCFaHff3_fORgAAAc4"]
[Sun Mar 29 22:46:21.058316 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:15240] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ack7PWnfn-AtRoMbquwFlQAAAFA"]
[Sun Mar 29 23:27:38.542349 2026] [proxy_fcgi:error] [pid 32257:tid 32319] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:38.770180 2026] [proxy_fcgi:error] [pid 32257:tid 32326] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:39.201269 2026] [proxy_fcgi:error] [pid 32257:tid 32328] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:39.412756 2026] [proxy_fcgi:error] [pid 32257:tid 32339] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:41.092110 2026] [proxy_fcgi:error] [pid 32257:tid 32326] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:41.304407 2026] [proxy_fcgi:error] [pid 32257:tid 32321] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:41.515863 2026] [proxy_fcgi:error] [pid 32257:tid 32332] [client 40.87.104.188:29276] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:27:41.955499 2026] [:error] [pid 32257:tid 32335] [client 40.87.104.188:29276] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclE7SE3TArOFrUtgWpsDgAAAJE"]
[Sun Mar 29 23:27:42.784988 2026] [:error] [pid 23284:tid 23305] [client 40.87.104.188:7051] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclE7ozBujdPHsq7wyTooAAAApM"]
[Sun Mar 29 23:27:43.653857 2026] [:error] [pid 32255:tid 32301] [client 40.87.104.188:7096] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclE72nfn-AtRoMbquwZZAAAAEo"]
[Sun Mar 29 23:27:44.514798 2026] [:error] [pid 23250:tid 23274] [client 40.87.104.188:7063] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclE8Jxrpj-dQjy1cvoWWAAAAlY"]
[Mon Mar 30 02:48:14.809925 2026] [:error] [pid 32257:tid 32323] [client 172.71.164.120:10044] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/refs/heads/master"] [unique_id "aclz7iE3TArOFrUtgWr8CwAAAIU"]
[Mon Mar 30 02:48:14.809929 2026] [:error] [pid 32257:tid 32342] [client 172.71.164.120:10036] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/logs/HEAD"] [unique_id "aclz7iE3TArOFrUtgWr8DAAAAJg"]
[Mon Mar 30 02:48:14.875438 2026] [:error] [pid 32257:tid 32326] [client 172.71.164.110:12597] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aclz7iE3TArOFrUtgWr8DgAAAIg"]
[Mon Mar 30 02:48:14.882601 2026] [:error] [pid 32255:tid 32315] [client 172.71.164.133:13050] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/refs/heads/main"] [unique_id "aclz7mnfn-AtRoMbqux3RgAAAFg"]
[Mon Mar 30 02:48:14.885268 2026] [:error] [pid 32257:tid 32325] [client 172.71.164.144:9237] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/index"] [unique_id "aclz7iE3TArOFrUtgWr8EAAAAIc"]
[Mon Mar 30 02:48:14.885288 2026] [:error] [pid 32257:tid 32324] [client 172.71.164.111:10764] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "aclz7iE3TArOFrUtgWr8DwAAAIY"]
[Mon Mar 30 02:48:15.855570 2026] [:error] [pid 8818:tid 8841] [client 172.71.164.145:11009] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aclz7yCDvotZNSF0FBomOQAAAVM"]
[Mon Mar 30 02:48:15.857011 2026] [:error] [pid 8818:tid 8845] [client 172.71.164.110:12600] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aclz7yCDvotZNSF0FBomOgAAAVc"]
[Mon Mar 30 02:48:15.908932 2026] [:error] [pid 23284:tid 23299] [client 172.71.164.120:13739] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aclz74zBujdPHsq7wyRoXQAAAo0"]
[Mon Mar 30 02:48:15.913215 2026] [:error] [pid 23284:tid 23287] [client 172.71.164.144:9245] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "aclz74zBujdPHsq7wyRoXgAAAoE"]
[Mon Mar 30 02:48:15.927946 2026] [:error] [pid 23284:tid 23310] [client 172.71.164.133:13052] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "aclz74zBujdPHsq7wyRoXwAAApg"]
[Mon Mar 30 02:48:15.929878 2026] [:error] [pid 23284:tid 23288] [client 172.71.164.121:11224] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "aclz74zBujdPHsq7wyRoYAAAAoI"]
[Mon Mar 30 02:48:16.883015 2026] [:error] [pid 23137:tid 23158] [client 172.71.164.133:13053] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "aclz8BaWQa7LdZ_qGFYu-wAAAZM"]
[Mon Mar 30 02:48:16.902266 2026] [:error] [pid 23137:tid 23160] [client 172.71.164.121:11229] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "aclz8BaWQa7LdZ_qGFYu_AAAAZU"]
[Mon Mar 30 02:48:16.955658 2026] [:error] [pid 32257:tid 32330] [client 172.71.164.132:10675] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "aclz8CE3TArOFrUtgWr8FQAAAIw"]
[Mon Mar 30 02:48:16.955943 2026] [:error] [pid 32254:tid 32271] [client 172.71.164.144:9251] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "aclz8Kug2IHuyGgCTn9_VwAAAAc"]
[Mon Mar 30 02:48:16.960805 2026] [:error] [pid 32359:tid 32362] [client 172.71.164.145:11014] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "aclz8AMb8G3UzfQP3WhZDwAAAME"]
[Mon Mar 30 02:48:16.977414 2026] [:error] [pid 32254:tid 32284] [client 172.71.164.132:10682] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.tmp"] [unique_id "aclz8Kug2IHuyGgCTn9_WAAAABQ"]
[Mon Mar 30 02:48:17.926730 2026] [:error] [pid 23137:tid 23153] [client 172.71.164.120:13745] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.example"] [unique_id "aclz8RaWQa7LdZ_qGFYvAQAAAY4"]
[Mon Mar 30 02:48:17.935102 2026] [:error] [pid 23137:tid 23149] [client 172.71.164.121:11230] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production.local"] [unique_id "aclz8RaWQa7LdZ_qGFYvAgAAAYo"]
[Mon Mar 30 02:48:17.987994 2026] [:error] [pid 32255:tid 32314] [client 172.71.164.120:13752] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development.local"] [unique_id "aclz8Wnfn-AtRoMbqux3UQAAAFc"]
[Mon Mar 30 02:48:17.990321 2026] [:error] [pid 32254:tid 32286] [client 172.71.164.144:9256] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env"] [unique_id "aclz8aug2IHuyGgCTn9_XQAAABY"]
[Mon Mar 30 02:48:18.007419 2026] [:error] [pid 32255:tid 32291] [client 172.71.164.111:10232] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "aclz8mnfn-AtRoMbqux3UgAAAEA"]
[Mon Mar 30 02:48:18.023324 2026] [:error] [pid 32255:tid 32303] [client 172.71.164.145:11015] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/backend/.env"] [unique_id "aclz8mnfn-AtRoMbqux3UwAAAEw"]
[Mon Mar 30 02:48:18.977539 2026] [:error] [pid 32255:tid 32307] [client 172.71.164.110:12798] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env"] [unique_id "aclz8mnfn-AtRoMbqux3VgAAAFA"]
[Mon Mar 30 02:48:18.981151 2026] [:error] [pid 32257:tid 32341] [client 172.71.164.110:12794] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "aclz8iE3TArOFrUtgWr8GwAAAJc"]
[Mon Mar 30 02:48:19.018453 2026] [:error] [pid 32254:tid 32288] [client 172.71.164.133:11770] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/public/.env"] [unique_id "aclz86ug2IHuyGgCTn9_XwAAABg"]
[Mon Mar 30 02:48:19.030424 2026] [:error] [pid 32255:tid 32313] [client 172.71.164.144:9262] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/core/.env"] [unique_id "aclz82nfn-AtRoMbqux3WAAAAFY"]
[Mon Mar 30 02:48:19.053795 2026] [:error] [pid 23167:tid 23183] [client 172.71.164.132:12012] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/private/.env"] [unique_id "aclz8xIAHJCFaHff3_cSaQAAAc0"]
[Mon Mar 30 02:48:20.021945 2026] [:error] [pid 32257:tid 32324] [client 172.71.164.110:12803] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env.local"] [unique_id "aclz9CE3TArOFrUtgWr8IAAAAIY"]
[Mon Mar 30 02:48:20.031047 2026] [:error] [pid 32255:tid 32309] [client 172.71.164.132:12015] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.php"] [unique_id "aclz9Gnfn-AtRoMbqux3XAAAAFI"]
[Mon Mar 30 02:48:20.054054 2026] [:error] [pid 32255:tid 32293] [client 172.71.164.110:12811] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.json"] [unique_id "aclz9Gnfn-AtRoMbqux3XQAAAEI"]
[Mon Mar 30 02:48:20.078962 2026] [:error] [pid 32255:tid 32303] [client 172.71.164.121:11231] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_backup"] [unique_id "aclz9Gnfn-AtRoMbqux3XgAAAEw"]
[Mon Mar 30 02:48:20.108952 2026] [:error] [pid 32255:tid 32300] [client 172.71.164.133:11773] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "aclz9Gnfn-AtRoMbqux3XwAAAEk"]
[Mon Mar 30 02:48:20.116478 2026] [:error] [pid 8818:tid 8826] [client 172.71.164.145:11018] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env1"] [unique_id "aclz9CCDvotZNSF0FBomPQAAAUQ"]
[Mon Mar 30 02:48:20.315227 2026] [:error] [pid 23167:tid 23184] [client 172.71.164.110:12801] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.envrc"] [unique_id "aclz9BIAHJCFaHff3_cSbQAAAc4"]
[Mon Mar 30 02:48:21.055166 2026] [:error] [pid 32257:tid 32322] [client 172.71.164.132:12016] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env2"] [unique_id "aclz9SE3TArOFrUtgWr8IwAAAIQ"]
[Mon Mar 30 02:48:21.075964 2026] [:error] [pid 32257:tid 32332] [client 172.71.164.145:11024] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dist"] [unique_id "aclz9SE3TArOFrUtgWr8JAAAAI4"]
[Mon Mar 30 02:48:21.120772 2026] [:error] [pid 23167:tid 23172] [client 172.71.164.144:9268] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.orig"] [unique_id "aclz9RIAHJCFaHff3_cSbwAAAcI"]
[Mon Mar 30 02:48:21.171272 2026] [:error] [pid 32255:tid 32312] [client 172.71.164.144:9274] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "aclz9Wnfn-AtRoMbqux3YQAAAFU"]
[Mon Mar 30 02:48:21.171767 2026] [:error] [pid 32257:tid 32334] [client 172.71.164.133:11775] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production.bak"] [unique_id "aclz9SE3TArOFrUtgWr8JgAAAJA"]
[Mon Mar 30 02:48:21.361584 2026] [:error] [pid 23137:tid 23162] [client 172.71.164.132:12021] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev.local"] [unique_id "aclz9RaWQa7LdZ_qGFYvBAAAAZc"]
[Mon Mar 30 02:48:22.101654 2026] [:error] [pid 32257:tid 32324] [client 172.71.164.133:11783] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.docker"] [unique_id "aclz9iE3TArOFrUtgWr8LwAAAIY"]
[Mon Mar 30 02:48:22.117657 2026] [:error] [pid 32257:tid 32326] [client 172.71.164.132:12025] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.container"] [unique_id "aclz9iE3TArOFrUtgWr8MAAAAIg"]
[Mon Mar 30 02:48:22.170995 2026] [:error] [pid 32257:tid 32333] [client 172.71.164.110:12816] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/docker/.env"] [unique_id "aclz9iE3TArOFrUtgWr8MwAAAI8"]
[Mon Mar 30 02:48:22.214248 2026] [:error] [pid 32257:tid 32330] [client 172.71.164.120:13759] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/docker/.env.local"] [unique_id "aclz9iE3TArOFrUtgWr8NAAAAIw"]
[Mon Mar 30 02:48:22.402068 2026] [:error] [pid 32257:tid 32341] [client 172.71.164.144:9281] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/server/.env"] [unique_id "aclz9iE3TArOFrUtgWr8NgAAAJc"]
[Mon Mar 30 02:48:23.148389 2026] [:error] [pid 23168:tid 23206] [client 172.71.164.133:11791] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/srv/.env"] [unique_id "aclz92P8p0yRL8ot_28FtwAAAgk"]
[Mon Mar 30 02:48:23.170667 2026] [:error] [pid 23168:tid 23211] [client 172.71.164.120:13767] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/web/.env"] [unique_id "aclz92P8p0yRL8ot_28FuAAAAg4"]
[Mon Mar 30 02:48:23.219454 2026] [:error] [pid 23168:tid 23220] [client 172.71.164.132:12028] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/site/.env"] [unique_id "aclz92P8p0yRL8ot_28FugAAAhc"]
[Mon Mar 30 02:48:23.261059 2026] [:error] [pid 23168:tid 23200] [client 172.71.164.144:12346] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/www/.env"] [unique_id "aclz92P8p0yRL8ot_28FuwAAAgM"]
[Mon Mar 30 02:48:23.442572 2026] [:error] [pid 23168:tid 23213] [client 172.71.164.133:11797] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/var/www/.env"] [unique_id "aclz92P8p0yRL8ot_28FvwAAAhA"]
[Mon Mar 30 02:48:23.846952 2026] [:error] [pid 23250:tid 23260] [client 172.71.164.145:9914] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_settings"] [unique_id "aclz95xrpj-dQjy1cvo-mwAAAkg"]
[Mon Mar 30 02:48:24.195458 2026] [:error] [pid 32359:tid 32370] [client 172.71.164.110:12818] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/var/www/html/.env"] [unique_id "aclz-AMb8G3UzfQP3WhZEgAAAMk"]
[Mon Mar 30 02:48:24.220639 2026] [:error] [pid 32255:tid 32295] [client 172.71.164.145:9922] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/home/.env"] [unique_id "aclz-Gnfn-AtRoMbqux3ZAAAAEQ"]
[Mon Mar 30 02:48:24.295531 2026] [:error] [pid 32255:tid 32315] [client 172.71.164.110:12823] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_config"] [unique_id "aclz-Gnfn-AtRoMbqux3ZQAAAFg"]
[Mon Mar 30 02:48:24.490637 2026] [:error] [pid 23167:tid 23179] [client 172.71.164.121:11234] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_secret"] [unique_id "aclz-BIAHJCFaHff3_cScgAAAck"]
[Mon Mar 30 02:48:24.718606 2026] [:error] [pid 23167:tid 23187] [client 172.71.164.110:9574] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "aclz-BIAHJCFaHff3_cSdQAAAdE"]
[Mon Mar 30 02:48:24.750607 2026] [:error] [pid 23168:tid 23215] [client 172.71.164.133:9636] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aclz-GP8p0yRL8ot_28FxQAAAhI"]
[Mon Mar 30 02:48:24.820468 2026] [:error] [pid 32257:tid 32322] [client 172.71.164.110:9582] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/index"] [unique_id "aclz-CE3TArOFrUtgWr8OgAAAIQ"]
[Mon Mar 30 02:48:24.892189 2026] [:error] [pid 23168:tid 23211] [client 172.71.164.145:9929] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local.backup"] [unique_id "aclz-GP8p0yRL8ot_28FxgAAAg4"]
[Mon Mar 30 02:48:25.017096 2026] [:error] [pid 23250:tid 23257] [client 172.71.164.144:11294] [client 172.71.164.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/logs/HEAD"] [unique_id "aclz-Zxrpj-dQjy1cvo-nQAAAkU"]
[Mon Mar 30 02:48:25.240422 2026] [:error] [pid 23168:tid 23197] [client 172.71.164.111:13918] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/refs/heads/master"] [unique_id "aclz-WP8p0yRL8ot_28FyAAAAgA"]
[Mon Mar 30 02:48:25.266928 2026] [:error] [pid 23250:tid 23276] [client 172.71.164.120:11249] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/refs/heads/main"] [unique_id "aclz-Zxrpj-dQjy1cvo-ngAAAlg"]
[Mon Mar 30 02:48:25.339283 2026] [:error] [pid 23168:tid 23209] [client 172.71.164.110:9588] [client 172.71.164.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aclz-WP8p0yRL8ot_28FyQAAAgw"]
[Mon Mar 30 02:48:25.411873 2026] [:error] [pid 23168:tid 23210] [client 172.71.164.133:9637] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aclz-WP8p0yRL8ot_28FygAAAg0"]
[Mon Mar 30 02:48:25.537652 2026] [:error] [pid 23168:tid 23201] [client 172.71.164.121:10988] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aclz-WP8p0yRL8ot_28FzAAAAgQ"]
[Mon Mar 30 02:48:25.763432 2026] [:error] [pid 23284:tid 23299] [client 172.71.164.145:12636] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "aclz-YzBujdPHsq7wyRobAAAAo0"]
[Mon Mar 30 02:48:25.763941 2026] [:error] [pid 23250:tid 23273] [client 172.71.164.133:11802] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/root/.env"] [unique_id "aclz-Zxrpj-dQjy1cvo-nwAAAlU"]
[Mon Mar 30 02:48:25.781556 2026] [:error] [pid 32255:tid 32307] [client 172.71.164.145:12644] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "aclz-Wnfn-AtRoMbqux3aAAAAFA"]
[Mon Mar 30 02:48:25.854913 2026] [:error] [pid 23168:tid 23218] [client 172.71.164.111:13924] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "aclz-WP8p0yRL8ot_28FzgAAAhU"]
[Mon Mar 30 02:48:25.930522 2026] [:error] [pid 23168:tid 23203] [client 172.71.164.121:10989] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "aclz-WP8p0yRL8ot_28F0QAAAgY"]
[Mon Mar 30 02:48:26.055542 2026] [:error] [pid 23168:tid 23200] [client 172.71.164.121:10991] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "aclz-mP8p0yRL8ot_28F0wAAAgM"]
[Mon Mar 30 02:48:26.281563 2026] [:error] [pid 32255:tid 32296] [client 172.71.164.133:9641] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "aclz-mnfn-AtRoMbqux3bQAAAEU"]
[Mon Mar 30 02:48:26.281909 2026] [:error] [pid 23250:tid 23261] [client 172.71.164.132:10777] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "aclz-pxrpj-dQjy1cvo-oAAAAkk"]
[Mon Mar 30 02:48:26.302445 2026] [:error] [pid 23167:tid 23171] [client 172.71.164.121:10995] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "aclz-hIAHJCFaHff3_cSdgAAAcE"]
[Mon Mar 30 02:48:26.445645 2026] [:error] [pid 23167:tid 23193] [client 172.71.164.145:12648] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.example"] [unique_id "aclz-hIAHJCFaHff3_cSdwAAAdc"]
[Mon Mar 30 02:48:26.801469 2026] [:error] [pid 32257:tid 32321] [client 172.71.164.133:9645] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development.local"] [unique_id "aclz-iE3TArOFrUtgWr8RQAAAIM"]
[Mon Mar 30 02:48:26.805977 2026] [:error] [pid 32257:tid 32336] [client 172.71.164.121:11003] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env"] [unique_id "aclz-iE3TArOFrUtgWr8RgAAAJI"]
[Mon Mar 30 02:48:26.822974 2026] [:error] [pid 32257:tid 32322] [client 172.71.164.145:12653] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "aclz-iE3TArOFrUtgWr8RwAAAIQ"]
[Mon Mar 30 02:48:26.963216 2026] [:error] [pid 32257:tid 32329] [client 172.71.164.121:11006] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/backend/.env"] [unique_id "aclz-iE3TArOFrUtgWr8SAAAAIs"]
[Mon Mar 30 02:48:27.320060 2026] [:error] [pid 32257:tid 32326] [client 172.71.164.145:12654] [client 172.71.164.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "aclz-yE3TArOFrUtgWr8TQAAAIg"]
[Mon Mar 30 02:48:27.326588 2026] [:error] [pid 32257:tid 32324] [client 172.71.164.132:10782] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env"] [unique_id "aclz-yE3TArOFrUtgWr8TgAAAIY"]
[Mon Mar 30 02:48:27.346287 2026] [:error] [pid 32257:tid 32342] [client 172.71.164.121:11011] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/core/.env"] [unique_id "aclz-yE3TArOFrUtgWr8TwAAAJg"]
[Mon Mar 30 02:48:27.480063 2026] [:error] [pid 32257:tid 32333] [client 172.71.164.121:11013] [client 172.71.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/public/.env"] [unique_id "aclz-yE3TArOFrUtgWr8UAAAAI8"]
[Mon Mar 30 02:48:27.839490 2026] [:error] [pid 32257:tid 32341] [client 172.71.164.133:9647] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/private/.env"] [unique_id "aclz-yE3TArOFrUtgWr8UwAAAJc"]
[Mon Mar 30 02:48:27.871552 2026] [:error] [pid 23168:tid 23216] [client 172.71.164.133:9651] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/config/.env.local"] [unique_id "aclz-2P8p0yRL8ot_28F1AAAAhM"]
[Mon Mar 30 02:48:28.002864 2026] [:error] [pid 32257:tid 32342] [client 172.71.164.111:12291] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.php"] [unique_id "aclz_CE3TArOFrUtgWr8VQAAAJg"]
[Mon Mar 30 02:48:28.359991 2026] [:error] [pid 23250:tid 23256] [client 172.71.164.132:11938] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.json"] [unique_id "aclz_Jxrpj-dQjy1cvo-ogAAAkQ"]
[Mon Mar 30 02:48:28.520088 2026] [:error] [pid 23250:tid 23270] [client 172.71.164.133:14320] [client 172.71.164.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "aclz_Jxrpj-dQjy1cvo-owAAAlI"]
[Mon Mar 30 02:48:28.886363 2026] [:error] [pid 32254:tid 32281] [client 172.71.164.120:11252] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env1"] [unique_id "aclz_Kug2IHuyGgCTn9_YgAAABE"]
[Mon Mar 30 02:48:29.043719 2026] [:error] [pid 32254:tid 32282] [client 172.71.164.132:11939] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env2"] [unique_id "aclz_aug2IHuyGgCTn9_YwAAABI"]
[Mon Mar 30 02:48:29.565953 2026] [:error] [pid 32255:tid 32295] [client 172.71.164.132:11941] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.envrc"] [unique_id "aclz_Wnfn-AtRoMbqux3cQAAAEQ"]
[Mon Mar 30 02:48:30.088788 2026] [:error] [pid 23167:tid 23187] [client 172.71.164.111:12299] [client 172.71.164.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.orig"] [unique_id "aclz_hIAHJCFaHff3_cSfgAAAdE"]
[Mon Mar 30 02:48:30.612353 2026] [:error] [pid 23168:tid 23217] [client 172.71.164.120:11257] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production.bak"] [unique_id "aclz_mP8p0yRL8ot_28F2QAAAhQ"]
[Mon Mar 30 02:48:31.139446 2026] [:error] [pid 32255:tid 32300] [client 172.71.164.132:11943] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "aclz_2nfn-AtRoMbqux3eAAAAEk"]
[Mon Mar 30 02:48:45.515743 2026] [:error] [pid 32254:tid 32268] [client 172.69.186.151:12382] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.docker"] [unique_id "acl0Daug2IHuyGgCTn9_bQAAAAQ"]
[Mon Mar 30 02:48:46.254626 2026] [:error] [pid 32257:tid 32328] [client 172.71.164.120:11395] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/docker/.env"] [unique_id "acl0DiE3TArOFrUtgWr8hgAAAIo"]
[Mon Mar 30 02:48:47.042199 2026] [:error] [pid 32257:tid 32340] [client 172.71.164.132:10714] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/server/.env"] [unique_id "acl0DyE3TArOFrUtgWr8iAAAAJY"]
[Mon Mar 30 02:48:47.048080 2026] [:error] [pid 32257:tid 32326] [client 172.69.186.151:12390] [client 172.69.186.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/docker/.env.local"] [unique_id "acl0DyE3TArOFrUtgWr8iQAAAIg"]
[Mon Mar 30 02:48:47.567674 2026] [:error] [pid 23284:tid 23306] [client 172.71.164.120:11400] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/web/.env"] [unique_id "acl0D4zBujdPHsq7wyRomgAAApQ"]
[Mon Mar 30 02:48:47.882612 2026] [:error] [pid 32257:tid 32322] [client 172.69.186.150:13498] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/www/.env"] [unique_id "acl0DyE3TArOFrUtgWr8jgAAAIQ"]
[Mon Mar 30 02:48:48.162552 2026] [:error] [pid 32257:tid 32325] [client 172.69.186.141:10063] [client 172.69.186.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/var/www/.env"] [unique_id "acl0ECE3TArOFrUtgWr8kAAAAIc"]
[Mon Mar 30 02:48:48.439683 2026] [:error] [pid 32257:tid 32324] [client 172.69.186.194:11607] [client 172.69.186.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/var/www/html/.env"] [unique_id "acl0ECE3TArOFrUtgWr8kgAAAIY"]
[Mon Mar 30 02:48:48.906037 2026] [:error] [pid 32257:tid 32327] [client 172.69.186.207:11857] [client 172.69.186.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/root/.env"] [unique_id "acl0ECE3TArOFrUtgWr8lQAAAIk"]
[Mon Mar 30 02:48:48.952447 2026] [:error] [pid 23168:tid 23221] [client 172.71.164.120:11403] [client 172.71.164.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/home/.env"] [unique_id "acl0EGP8p0yRL8ot_28F9QAAAhg"]
[Mon Mar 30 02:48:49.417082 2026] [:error] [pid 8818:tid 8832] [client 172.71.164.132:14144] [client 172.71.164.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_config"] [unique_id "acl0ESCDvotZNSF0FBomUwAAAUo"]
[Mon Mar 30 02:49:09.067567 2026] [:error] [pid 23250:tid 23252] [client 172.69.186.140:14167] [client 172.69.186.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_settings"] [unique_id "acl0JZxrpj-dQjy1cvo-vAAAAkA"]
[Mon Mar 30 03:53:50.717527 2026] [proxy_fcgi:error] [pid 55884:tid 55968] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:50.913879 2026] [proxy_fcgi:error] [pid 55884:tid 55958] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:51.103875 2026] [proxy_fcgi:error] [pid 55884:tid 55954] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:51.314660 2026] [proxy_fcgi:error] [pid 55884:tid 55970] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:51.504390 2026] [proxy_fcgi:error] [pid 55884:tid 55960] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:51.694431 2026] [proxy_fcgi:error] [pid 55884:tid 55953] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:51.898356 2026] [proxy_fcgi:error] [pid 55884:tid 55971] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:52.105244 2026] [proxy_fcgi:error] [pid 55884:tid 55957] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:52.298066 2026] [proxy_fcgi:error] [pid 55884:tid 55966] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:52.506808 2026] [proxy_fcgi:error] [pid 55884:tid 55954] [client 52.180.158.245:62522] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:53:52.718137 2026] [:error] [pid 55884:tid 55961] [client 52.180.158.245:62522] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/anz.php"] [unique_id "acmDUDjuYLVkve3Vbhxi4AAAAQg"]
[Mon Mar 30 03:53:53.471084 2026] [:error] [pid 55884:tid 55953] [client 52.180.158.245:27310] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/anz.php"] [unique_id "acmDUTjuYLVkve3Vbhxi5gAAAQA"]
[Mon Mar 30 03:53:54.130332 2026] [:error] [pid 55884:tid 55966] [client 52.180.158.245:37200] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/anz.php"] [unique_id "acmDUjjuYLVkve3Vbhxi6AAAAQ0"]
[Mon Mar 30 03:53:55.071999 2026] [:error] [pid 4033:tid 4063] [client 52.180.158.245:32883] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/anz.php"] [unique_id "acmDU6nf-DXI9VblHi0gLAAAAAo"]
[Mon Mar 30 03:53:57.610183 2026] [:error] [pid 55884:tid 55976] [client 52.180.158.245:12137] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acmDVTjuYLVkve3Vbhxi7wAAARc"]
[Mon Mar 30 03:54:00.039608 2026] [:error] [pid 4033:tid 4056] [client 52.180.158.245:24961] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acmDWKnf-DXI9VblHi0gSgAAAAM"]
[Mon Mar 30 03:54:03.868439 2026] [:error] [pid 55884:tid 55955] [client 52.180.158.245:24998] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acmDWzjuYLVkve3Vbhxi9QAAAQI"]
[Mon Mar 30 03:54:05.695638 2026] [:error] [pid 55884:tid 55965] [client 52.180.158.245:35830] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acmDXTjuYLVkve3Vbhxi_gAAAQw"]
[Mon Mar 30 03:54:07.534027 2026] [:error] [pid 55884:tid 55969] [client 52.180.158.245:32866] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file66.php"] [unique_id "acmDXzjuYLVkve3VbhxjDgAAARA"]
[Mon Mar 30 03:54:09.649488 2026] [:error] [pid 4139:tid 4168] [client 52.180.158.245:27285] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file66.php"] [unique_id "acmDYYYyhg47TZoaP9LyoQAAANU"]
[Mon Mar 30 03:54:12.537674 2026] [:error] [pid 55884:tid 55968] [client 52.180.158.245:32154] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file66.php"] [unique_id "acmDZDjuYLVkve3VbhxjRAAAAQ8"]
[Mon Mar 30 03:54:15.111253 2026] [:error] [pid 55884:tid 55956] [client 52.180.158.245:45016] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file66.php"] [unique_id "acmDZzjuYLVkve3VbhxjZAAAAQM"]
[Mon Mar 30 03:54:16.232630 2026] [:error] [pid 4034:tid 4105] [client 52.180.158.245:32234] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kure.php"] [unique_id "acmDaLfAq8eF_uU4gu2E0AAAAFg"]
[Mon Mar 30 03:54:16.662650 2026] [:error] [pid 55884:tid 55961] [client 52.180.158.245:64775] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kure.php"] [unique_id "acmDaDjuYLVkve3VbhxjcwAAAQg"]
[Mon Mar 30 03:54:17.435533 2026] [:error] [pid 55884:tid 55960] [client 52.180.158.245:62485] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kure.php"] [unique_id "acmDaTjuYLVkve3VbhxjfAAAAQc"]
[Mon Mar 30 03:54:19.151646 2026] [:error] [pid 4040:tid 4127] [client 52.180.158.245:32826] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kure.php"] [unique_id "acmDawxlbJV8kpOpFvY-VQAAAJM"]
[Mon Mar 30 03:54:20.631064 2026] [:error] [pid 55884:tid 55959] [client 52.180.158.245:32208] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blnux.php"] [unique_id "acmDbDjuYLVkve3VbhxjjgAAAQY"]
[Mon Mar 30 03:54:22.307514 2026] [:error] [pid 4034:tid 4100] [client 52.180.158.245:45864] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blnux.php"] [unique_id "acmDbrfAq8eF_uU4gu2E5QAAAFM"]
[Mon Mar 30 03:54:25.841979 2026] [:error] [pid 4139:tid 4151] [client 52.180.158.245:62482] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blnux.php"] [unique_id "acmDcYYyhg47TZoaP9LyvgAAAMQ"]
[Mon Mar 30 03:54:27.888745 2026] [:error] [pid 55884:tid 55967] [client 52.180.158.245:24992] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blnux.php"] [unique_id "acmDczjuYLVkve3VbhxjuQAAAQ4"]
[Mon Mar 30 03:54:31.161286 2026] [:error] [pid 4040:tid 4132] [client 52.180.158.245:64798] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gaje.php"] [unique_id "acmDdwxlbJV8kpOpFvY-eAAAAJg"]
[Mon Mar 30 03:54:35.774432 2026] [:error] [pid 4033:tid 4067] [client 52.180.158.245:32231] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gaje.php"] [unique_id "acmDe6nf-DXI9VblHi0gnAAAAA4"]
[Mon Mar 30 03:54:37.613740 2026] [:error] [pid 4033:tid 4056] [client 52.180.158.245:35816] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gaje.php"] [unique_id "acmDfanf-DXI9VblHi0gpQAAAAM"]
[Mon Mar 30 03:54:42.126042 2026] [:error] [pid 55884:tid 55966] [client 52.180.158.245:51424] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gaje.php"] [unique_id "acmDgjjuYLVkve3Vbhxj-QAAAQ0"]
[Mon Mar 30 03:54:43.405009 2026] [:error] [pid 4033:tid 4065] [client 52.180.158.245:51332] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/msy.php"] [unique_id "acmDg6nf-DXI9VblHi0gxQAAAAw"]
[Mon Mar 30 03:55:08.179169 2026] [proxy_fcgi:error] [pid 4139:tid 4167] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:08.369286 2026] [proxy_fcgi:error] [pid 4139:tid 4152] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:08.561394 2026] [proxy_fcgi:error] [pid 4139:tid 4169] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:08.752745 2026] [proxy_fcgi:error] [pid 4139:tid 4154] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:08.943728 2026] [proxy_fcgi:error] [pid 4139:tid 4165] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:09.144307 2026] [proxy_fcgi:error] [pid 4139:tid 4161] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:09.337624 2026] [proxy_fcgi:error] [pid 4139:tid 4168] [client 52.180.158.245:2378] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:55:09.524260 2026] [:error] [pid 4139:tid 4170] [client 52.180.158.245:2378] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acmDnYYyhg47TZoaP9LzJQAAANc"]
[Mon Mar 30 03:55:10.635053 2026] [:error] [pid 4040:tid 4117] [client 52.180.158.245:2379] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acmDngxlbJV8kpOpFvY-0AAAAIk"]
[Mon Mar 30 03:55:11.428859 2026] [:error] [pid 4040:tid 4118] [client 52.180.158.245:2379] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "acmDnwxlbJV8kpOpFvY-1gAAAIo"]
[Mon Mar 30 03:55:13.191424 2026] [:error] [pid 4139:tid 4156] [client 52.180.158.245:50624] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "acmDoYYyhg47TZoaP9LzLgAAAMk"]
[Mon Mar 30 03:55:17.980888 2026] [:error] [pid 4139:tid 4169] [client 52.180.158.245:47247] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "acmDpYYyhg47TZoaP9LzOgAAANY"]
[Mon Mar 30 03:55:24.551498 2026] [:error] [pid 4034:tid 4096] [client 52.180.158.245:2282] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/default.php"] [unique_id "acmDrLfAq8eF_uU4gu2FQQAAAE8"]
[Mon Mar 30 03:55:28.433867 2026] [:error] [pid 4033:tid 4055] [client 52.180.158.245:17594] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ty.php"] [unique_id "acmDsKnf-DXI9VblHi0hZgAAAAI"]
[Mon Mar 30 03:55:33.419329 2026] [:error] [pid 55884:tid 55975] [client 52.180.158.245:2288] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ty.php"] [unique_id "acmDtTjuYLVkve3VbhxkkAAAARY"]
[Mon Mar 30 03:55:35.933076 2026] [:error] [pid 55884:tid 55974] [client 52.180.158.245:24405] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ty.php"] [unique_id "acmDtzjuYLVkve3VbhxklQAAARU"]
[Mon Mar 30 03:55:37.651045 2026] [:error] [pid 4034:tid 4092] [client 52.180.158.245:2256] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ty.php"] [unique_id "acmDubfAq8eF_uU4gu2FZAAAAEs"]
[Mon Mar 30 03:55:45.004808 2026] [:error] [pid 4033:tid 4076] [client 52.180.158.245:38750] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmDwanf-DXI9VblHi0h5gAAABc"]
[Mon Mar 30 03:55:48.240089 2026] [:error] [pid 55884:tid 55962] [client 52.180.158.245:17597] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmDxDjuYLVkve3VbhxkrAAAAQk"]
[Mon Mar 30 03:55:50.052755 2026] [:error] [pid 4033:tid 4074] [client 52.180.158.245:46627] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmDxqnf-DXI9VblHi0iJQAAABU"]
[Mon Mar 30 03:55:52.775823 2026] [:error] [pid 4139:tid 4163] [client 52.180.158.245:12985] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmDyIYyhg47TZoaP9LzmwAAANA"]
[Mon Mar 30 03:55:55.838160 2026] [:error] [pid 4033:tid 4066] [client 52.180.158.245:14036] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.quarryspec.com.au"] [uri "/fm.php"] [unique_id "acmDy6nf-DXI9VblHi0iXwAAAA0"]
[Mon Mar 30 03:55:56.835600 2026] [:error] [pid 4033:tid 4075] [client 52.180.158.245:41182] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmDzKnf-DXI9VblHi0ibAAAABY"]
[Mon Mar 30 03:55:57.503812 2026] [:error] [pid 4040:tid 4132] [client 52.180.158.245:24408] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmDzQxlbJV8kpOpFvY_DwAAAJg"]
[Mon Mar 30 03:55:58.047864 2026] [:error] [pid 4040:tid 4109] [client 52.180.158.245:15157] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmDzgxlbJV8kpOpFvY_FwAAAIE"]
[Mon Mar 30 03:55:58.562596 2026] [:error] [pid 55884:tid 55956] [client 52.180.158.245:15392] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "acmDzjjuYLVkve3VbhxkwAAAAQM"]
[Mon Mar 30 03:55:59.694875 2026] [:error] [pid 55884:tid 55963] [client 52.180.158.245:14024] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "acmDzzjuYLVkve3VbhxkxwAAAQo"]
[Mon Mar 30 03:56:00.952298 2026] [:error] [pid 4139:tid 4158] [client 52.180.158.245:41169] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "acmD0IYyhg47TZoaP9LzqAAAAMs"]
[Mon Mar 30 03:56:02.893180 2026] [:error] [pid 4139:tid 4155] [client 52.180.158.245:11458] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ini.php"] [unique_id "acmD0oYyhg47TZoaP9LzrQAAAMg"]
[Mon Mar 30 03:56:05.699315 2026] [:error] [pid 4034:tid 4088] [client 52.180.158.245:14038] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acmD1bfAq8eF_uU4gu2FhQAAAEc"]
[Mon Mar 30 03:56:06.765851 2026] [:error] [pid 55884:tid 55954] [client 52.180.158.245:20697] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acmD1jjuYLVkve3Vbhxk7gAAAQE"]
[Mon Mar 30 03:56:08.765416 2026] [:error] [pid 55884:tid 55956] [client 52.180.158.245:28054] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acmD2DjuYLVkve3Vbhxk-QAAAQM"]
[Mon Mar 30 03:56:10.182891 2026] [:error] [pid 4139:tid 4155] [client 52.180.158.245:38736] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acmD2oYyhg47TZoaP9LzugAAAMg"]
[Mon Mar 30 03:56:12.529970 2026] [proxy_fcgi:error] [pid 4034:tid 4088] [client 52.180.158.245:29684] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:56:12.723695 2026] [proxy_fcgi:error] [pid 4034:tid 4081] [client 52.180.158.245:29684] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:56:13.345708 2026] [proxy_fcgi:error] [pid 4034:tid 4085] [client 52.180.158.245:29684] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:56:13.541083 2026] [:error] [pid 4034:tid 4083] [client 52.180.158.245:29684] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acmD3bfAq8eF_uU4gu2FmwAAAEI"]
[Mon Mar 30 03:56:18.323676 2026] [:error] [pid 4033:tid 4069] [client 52.180.158.245:20721] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acmD4qnf-DXI9VblHi0iyQAAABA"]
[Mon Mar 30 03:56:22.021462 2026] [:error] [pid 4033:tid 4077] [client 52.180.158.245:15718] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acmD5qnf-DXI9VblHi0i2QAAABg"]
[Mon Mar 30 03:56:23.615626 2026] [:error] [pid 55884:tid 55975] [client 52.180.158.245:31619] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmD5zjuYLVkve3VbhxlMgAAARY"]
[Mon Mar 30 03:56:25.867193 2026] [:error] [pid 4139:tid 4155] [client 52.180.158.245:38231] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmD6YYyhg47TZoaP9LzwgAAAMg"]
[Mon Mar 30 03:56:28.150883 2026] [:error] [pid 4139:tid 4159] [client 52.180.158.245:25601] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmD7IYyhg47TZoaP9LzyQAAAMw"]
[Mon Mar 30 03:56:29.003063 2026] [:error] [pid 4139:tid 4166] [client 52.180.158.245:13034] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmD7YYyhg47TZoaP9LzywAAANM"]
[Mon Mar 30 03:56:29.789854 2026] [:error] [pid 55884:tid 55954] [client 52.180.158.245:40341] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/network.php"] [unique_id "acmD7TjuYLVkve3VbhxlRQAAAQE"]
[Mon Mar 30 03:56:30.755044 2026] [:error] [pid 4033:tid 4054] [client 52.180.158.245:40367] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/network.php"] [unique_id "acmD7qnf-DXI9VblHi0i-wAAAAE"]
[Mon Mar 30 03:56:32.542352 2026] [:error] [pid 4040:tid 4112] [client 52.180.158.245:20352] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/network.php"] [unique_id "acmD8AxlbJV8kpOpFvY_RgAAAIQ"]
[Mon Mar 30 03:56:36.088478 2026] [:error] [pid 4139:tid 4159] [client 52.180.158.245:15688] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/network.php"] [unique_id "acmD9IYyhg47TZoaP9Lz2wAAAMw"]
[Mon Mar 30 03:56:38.909147 2026] [:error] [pid 55884:tid 55974] [client 52.180.158.245:18518] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmD9jjuYLVkve3VbhxlVQAAARU"]
[Mon Mar 30 03:56:40.013991 2026] [:error] [pid 4033:tid 4074] [client 52.180.158.245:15680] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmD-Knf-DXI9VblHi0jFAAAABU"]
[Mon Mar 30 03:56:42.650701 2026] [:error] [pid 55884:tid 55966] [client 52.180.158.245:20874] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmD-jjuYLVkve3VbhxlXAAAAQ0"]
[Mon Mar 30 03:56:44.985277 2026] [:error] [pid 4033:tid 4069] [client 52.180.158.245:57518] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmD_Knf-DXI9VblHi0jIwAAABA"]
[Mon Mar 30 03:56:46.876898 2026] [:error] [pid 4033:tid 4060] [client 52.180.158.245:20909] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmD_qnf-DXI9VblHi0jNAAAAAc"]
[Mon Mar 30 03:56:49.855309 2026] [:error] [pid 4040:tid 4110] [client 52.180.158.245:27128] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmEAQxlbJV8kpOpFvY_VwAAAII"]
[Mon Mar 30 03:56:52.327613 2026] [:error] [pid 4034:tid 4082] [client 52.180.158.245:2500] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmEBLfAq8eF_uU4gu2GIwAAAEE"]
[Mon Mar 30 03:56:56.075105 2026] [:error] [pid 55884:tid 55964] [client 52.180.158.245:18478] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmECDjuYLVkve3VbhxldgAAAQs"]
[Mon Mar 30 03:56:57.863586 2026] [:error] [pid 4040:tid 4130] [client 52.180.158.245:44499] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmECQxlbJV8kpOpFvY_bAAAAJY"]
[Mon Mar 30 03:56:59.439386 2026] [:error] [pid 4033:tid 4061] [client 52.180.158.245:21828] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmEC6nf-DXI9VblHi0jQAAAAAg"]
[Mon Mar 30 03:57:00.662672 2026] [:error] [pid 4034:tid 4092] [client 52.180.158.245:2594] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmEDLfAq8eF_uU4gu2GNwAAAEs"]
[Mon Mar 30 03:57:01.984284 2026] [:error] [pid 4033:tid 4074] [client 52.180.158.245:38166] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmEDanf-DXI9VblHi0jTwAAABU"]
[Mon Mar 30 03:57:04.833890 2026] [:error] [pid 55884:tid 55960] [client 52.180.158.245:11558] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acmEEDjuYLVkve3VbhxljgAAAQc"]
[Mon Mar 30 03:57:09.111296 2026] [:error] [pid 4040:tid 4117] [client 52.180.158.245:21832] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acmEFQxlbJV8kpOpFvY_fAAAAIk"]
[Mon Mar 30 03:57:13.035519 2026] [:error] [pid 4040:tid 4122] [client 52.180.158.245:38205] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acmEGQxlbJV8kpOpFvY_hAAAAI4"]
[Mon Mar 30 03:57:21.085497 2026] [:error] [pid 4033:tid 4066] [client 52.180.158.245:57587] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acmEIanf-DXI9VblHi0jkwAAAA0"]
[Mon Mar 30 03:57:30.725745 2026] [:error] [pid 55884:tid 55965] [client 52.180.158.245:24460] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acmEKjjuYLVkve3Vbhxl1AAAAQw"]
[Mon Mar 30 03:57:32.897544 2026] [proxy_fcgi:error] [pid 55884:tid 55968] [client 52.180.158.245:40403] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:57:33.275376 2026] [:error] [pid 55884:tid 55955] [client 52.180.158.245:40403] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "www.quarryspec.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acmELTjuYLVkve3Vbhxl4gAAAQI"]
[Mon Mar 30 03:57:33.657686 2026] [:error] [pid 55884:tid 55963] [client 52.180.158.245:40403] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acmELTjuYLVkve3Vbhxl5AAAAQo"]
[Mon Mar 30 03:57:34.973559 2026] [:error] [pid 4139:tid 4164] [client 52.180.158.245:64136] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acmELoYyhg47TZoaP9L0YAAAANE"]
[Mon Mar 30 03:57:39.656274 2026] [:error] [pid 4040:tid 4123] [client 52.180.158.245:38693] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acmEMwxlbJV8kpOpFvY_qQAAAI8"]
[Mon Mar 30 03:57:41.015149 2026] [:error] [pid 4139:tid 4149] [client 52.180.158.245:25902] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acmENYYyhg47TZoaP9L0dQAAAMI"]
[Mon Mar 30 03:57:41.519728 2026] [proxy_fcgi:error] [pid 4139:tid 4158] [client 52.180.158.245:25902] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:57:41.771883 2026] [:error] [pid 4139:tid 4170] [client 52.180.158.245:25902] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acmENYYyhg47TZoaP9L0egAAANc"]
[Mon Mar 30 03:57:44.293690 2026] [:error] [pid 4139:tid 4171] [client 52.180.158.245:14645] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acmEOIYyhg47TZoaP9L0ewAAANg"]
[Mon Mar 30 03:57:46.940293 2026] [:error] [pid 4139:tid 4157] [client 52.180.158.245:44417] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acmEOoYyhg47TZoaP9L0hgAAAMo"]
[Mon Mar 30 03:57:50.297060 2026] [:error] [pid 55884:tid 55957] [client 52.180.158.245:64142] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/readme.php"] [unique_id "acmEPjjuYLVkve3VbhxmEAAAAQQ"]
[Mon Mar 30 03:57:51.137924 2026] [:error] [pid 4033:tid 4075] [client 52.180.158.245:14609] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/readme.php"] [unique_id "acmEP6nf-DXI9VblHi0j4gAAABY"]
[Mon Mar 30 03:57:51.729647 2026] [:error] [pid 4139:tid 4163] [client 52.180.158.245:24804] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/readme.php"] [unique_id "acmEP4Yyhg47TZoaP9L0iwAAANA"]
[Mon Mar 30 03:57:52.665717 2026] [:error] [pid 4139:tid 4160] [client 52.180.158.245:44461] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acmEQIYyhg47TZoaP9L0jgAAAM0"]
[Mon Mar 30 03:57:54.539038 2026] [:error] [pid 4040:tid 4119] [client 52.180.158.245:39747] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acmEQgxlbJV8kpOpFvY_tgAAAIs"]
[Mon Mar 30 03:57:56.084519 2026] [:error] [pid 4033:tid 4054] [client 52.180.158.245:21588] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acmERKnf-DXI9VblHi0j7QAAAAE"]
[Mon Mar 30 03:57:58.697970 2026] [:error] [pid 4033:tid 4055] [client 52.180.158.245:18192] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "acmERqnf-DXI9VblHi0j_QAAAAI"]
[Mon Mar 30 03:58:01.335492 2026] [:error] [pid 55884:tid 55960] [client 52.180.158.245:22435] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmESTjuYLVkve3VbhxmKgAAAQc"]
[Mon Mar 30 03:58:09.333768 2026] [:error] [pid 4139:tid 4157] [client 52.180.158.245:30618] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmEUYYyhg47TZoaP9L0pgAAAMo"]
[Mon Mar 30 03:58:12.240150 2026] [:error] [pid 55884:tid 55953] [client 52.180.158.245:45909] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmEVDjuYLVkve3VbhxmRAAAAQA"]
[Mon Mar 30 03:58:23.898994 2026] [:error] [pid 4040:tid 4119] [client 52.180.158.245:14913] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmEXwxlbJV8kpOpFvY_2wAAAIs"]
[Mon Mar 30 03:58:29.896076 2026] [:error] [pid 4139:tid 4157] [client 52.180.158.245:19191] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmEZYYyhg47TZoaP9L0zQAAAMo"]
[Mon Mar 30 03:58:32.028083 2026] [:error] [pid 4139:tid 4169] [client 52.180.158.245:64251] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmEaIYyhg47TZoaP9L01gAAANY"]
[Mon Mar 30 03:58:34.516247 2026] [:error] [pid 4040:tid 4120] [client 52.180.158.245:28325] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmEagxlbJV8kpOpFvY_6AAAAIw"]
[Mon Mar 30 03:58:36.027310 2026] [:error] [pid 4033:tid 4055] [client 52.180.158.245:64216] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmEbKnf-DXI9VblHi0kjwAAAAI"]
[Mon Mar 30 03:58:38.158567 2026] [:error] [pid 4033:tid 4055] [client 52.180.158.245:11424] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmEbqnf-DXI9VblHi0kmwAAAAI"]
[Mon Mar 30 03:58:40.220770 2026] [:error] [pid 4033:tid 4073] [client 52.180.158.245:12240] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "acmEcKnf-DXI9VblHi0koQAAABQ"]
[Mon Mar 30 03:58:42.447578 2026] [:error] [pid 4139:tid 4149] [client 52.180.158.245:63325] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "acmEcoYyhg47TZoaP9L05wAAAMI"]
[Mon Mar 30 03:58:43.644545 2026] [:error] [pid 55884:tid 55959] [client 52.180.158.245:36359] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "acmEczjuYLVkve3VbhxmiwAAAQY"]
[Mon Mar 30 03:58:44.337192 2026] [:error] [pid 55884:tid 55964] [client 52.180.158.245:11443] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "acmEdDjuYLVkve3VbhxmjgAAAQs"]
[Mon Mar 30 03:58:45.025797 2026] [:error] [pid 4033:tid 4068] [client 52.180.158.245:26626] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acmEdanf-DXI9VblHi0kpgAAAA8"]
[Mon Mar 30 03:58:45.828347 2026] [:error] [pid 4040:tid 4117] [client 52.180.158.245:37134] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acmEdQxlbJV8kpOpFvZAAAAAAIk"]
[Mon Mar 30 03:58:46.505959 2026] [proxy_fcgi:error] [pid 4033:tid 4056] [client 52.180.158.245:35146] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:58:46.886797 2026] [:error] [pid 4033:tid 4077] [client 52.180.158.245:35146] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acmEdqnf-DXI9VblHi0kswAAABg"]
[Mon Mar 30 03:58:48.132313 2026] [proxy_fcgi:error] [pid 4033:tid 4066] [client 52.180.158.245:13990] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:58:48.356437 2026] [proxy_fcgi:error] [pid 4033:tid 4073] [client 52.180.158.245:13990] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:58:48.542370 2026] [:error] [pid 4033:tid 4069] [client 52.180.158.245:13990] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acmEeKnf-DXI9VblHi0kvQAAABA"]
[Mon Mar 30 03:58:50.062725 2026] [:error] [pid 4033:tid 4055] [client 52.180.158.245:2091] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acmEeqnf-DXI9VblHi0kwQAAAAI"]
[Mon Mar 30 03:58:52.206725 2026] [:error] [pid 4033:tid 4073] [client 52.180.158.245:37159] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acmEfKnf-DXI9VblHi0kzgAAABQ"]
[Mon Mar 30 03:58:53.646660 2026] [proxy_fcgi:error] [pid 4034:tid 4091] [client 52.180.158.245:36360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:58:54.489587 2026] [proxy_fcgi:error] [pid 4034:tid 4096] [client 52.180.158.245:36360] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 03:58:54.676108 2026] [:error] [pid 4034:tid 4089] [client 52.180.158.245:36360] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.quarryspec.com.au"] [uri "/filemanager.php"] [unique_id "acmEfrfAq8eF_uU4gu2GiwAAAEg"]
[Mon Mar 30 03:58:56.340056 2026] [:error] [pid 55884:tid 55957] [client 52.180.158.245:36390] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acmEgDjuYLVkve3VbhxmoQAAAQQ"]
[Mon Mar 30 13:44:09.204135 2026] [:error] [pid 35250:tid 35311] [client 185.171.30.36:26234] [client 185.171.30.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqYaKM1MR6zcp2YPQtAAAAMA"]
[Tue Mar 31 01:33:25.130123 2026] [proxy_fcgi:error] [pid 39123:tid 39127] [client 4.205.8.150:65182] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 01:33:25.545728 2026] [:error] [pid 39123:tid 39135] [client 4.205.8.150:65182] [client 4.205.8.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.8.150, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acqz5SobgVY20PMQKVteXQAAAQo"]
[Tue Mar 31 01:33:25.758920 2026] [proxy_fcgi:error] [pid 39123:tid 39139] [client 4.205.8.150:65182] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 01:33:26.609667 2026] [:error] [pid 39123:tid 39145] [client 4.205.8.150:65182] [client 4.205.8.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server.php"] [unique_id "acqz5iobgVY20PMQKVteaAAAARQ"]
[Tue Mar 31 01:33:27.431018 2026] [:error] [pid 36672:tid 36819] [client 4.205.8.150:62493] [client 4.205.8.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server.php"] [unique_id "acqz57KHDzEfeL3XiLpB4AAAAEw"]
[Tue Mar 31 01:33:28.250233 2026] [:error] [pid 36672:tid 36820] [client 4.205.8.150:65197] [client 4.205.8.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server.php"] [unique_id "acqz6LKHDzEfeL3XiLpB4QAAAE0"]
[Tue Mar 31 01:33:29.071504 2026] [:error] [pid 36672:tid 36817] [client 4.205.8.150:65187] [client 4.205.8.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server.php"] [unique_id "acqz6bKHDzEfeL3XiLpB5gAAAEo"]
[Tue Mar 31 03:41:50.497433 2026] [proxy_fcgi:error] [pid 18439:tid 18461] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:50.756677 2026] [proxy_fcgi:error] [pid 18439:tid 18473] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:51.017138 2026] [proxy_fcgi:error] [pid 18439:tid 18464] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:51.277754 2026] [proxy_fcgi:error] [pid 18439:tid 18458] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:51.536141 2026] [proxy_fcgi:error] [pid 18439:tid 18454] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:51.811626 2026] [proxy_fcgi:error] [pid 18439:tid 18472] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:52.077059 2026] [proxy_fcgi:error] [pid 18439:tid 18468] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:52.338319 2026] [proxy_fcgi:error] [pid 18439:tid 18452] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:52.604084 2026] [proxy_fcgi:error] [pid 18439:tid 18467] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:52.877542 2026] [proxy_fcgi:error] [pid 18439:tid 18458] [client 74.248.131.192:52349] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:41:53.149911 2026] [:error] [pid 18439:tid 18463] [client 74.248.131.192:52349] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "acrSAS-R9nOaA8Xqs7hwpwAAAMw"]
[Tue Mar 31 03:41:55.538871 2026] [:error] [pid 18333:tid 18389] [client 74.248.131.192:49121] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acrSA0Sx2C5hLR0-8dK03AAAAEo"]
[Tue Mar 31 03:42:00.741547 2026] [:error] [pid 18439:tid 18469] [client 74.248.131.192:15633] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acrSCC-R9nOaA8Xqs7hwywAAANI"]
[Tue Mar 31 03:42:02.041195 2026] [:error] [pid 18333:tid 18385] [client 74.248.131.192:22401] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acrSCkSx2C5hLR0-8dK05gAAAEY"]
[Tue Mar 31 03:42:03.408489 2026] [:error] [pid 18334:tid 18427] [client 74.248.131.192:49113] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acrSC3qQrXLbk1cg3mgBNgAAAJU"]
[Tue Mar 31 03:42:05.205405 2026] [:error] [pid 18439:tid 18469] [client 74.248.131.192:16867] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "acrSDS-R9nOaA8Xqs7hw4QAAANI"]
[Tue Mar 31 03:42:06.740711 2026] [:error] [pid 18439:tid 18457] [client 74.248.131.192:26388] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "acrSDi-R9nOaA8Xqs7hw6QAAAMY"]
[Tue Mar 31 03:42:07.913182 2026] [:error] [pid 18332:tid 18371] [client 74.248.131.192:22449] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "acrSD74KXr1F9raS5GRyMgAAABY"]
[Tue Mar 31 03:42:09.675712 2026] [:error] [pid 18439:tid 18473] [client 74.248.131.192:40429] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "acrSES-R9nOaA8Xqs7hw7gAAANY"]
[Tue Mar 31 03:42:11.189649 2026] [:error] [pid 18439:tid 18464] [client 74.248.131.192:24961] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "acrSEy-R9nOaA8Xqs7hw-QAAAM0"]
[Tue Mar 31 03:42:12.565907 2026] [:error] [pid 18334:tid 18417] [client 74.248.131.192:24963] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "acrSFHqQrXLbk1cg3mgBTgAAAIs"]
[Tue Mar 31 03:42:13.625538 2026] [:error] [pid 18439:tid 18469] [client 74.248.131.192:23181] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acrSFS-R9nOaA8Xqs7hxAwAAANI"]
[Tue Mar 31 03:42:14.662725 2026] [:error] [pid 18334:tid 18408] [client 74.248.131.192:15675] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acrSFnqQrXLbk1cg3mgBXwAAAII"]
[Tue Mar 31 03:42:15.457685 2026] [:error] [pid 18439:tid 18459] [client 74.248.131.192:52351] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acrSFy-R9nOaA8Xqs7hxBwAAAMg"]
[Tue Mar 31 03:42:16.174573 2026] [:error] [pid 18334:tid 18408] [client 74.248.131.192:2044] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acrSGHqQrXLbk1cg3mgBbwAAAII"]
[Tue Mar 31 03:42:18.102980 2026] [:error] [pid 18334:tid 18426] [client 74.248.131.192:22420] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "acrSGnqQrXLbk1cg3mgBegAAAJQ"]
[Tue Mar 31 03:42:19.329500 2026] [:error] [pid 18334:tid 18420] [client 74.248.131.192:16816] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acrSG3qQrXLbk1cg3mgBfgAAAI4"]
[Tue Mar 31 03:42:20.123544 2026] [:error] [pid 18439:tid 18456] [client 74.248.131.192:16832] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acrSHC-R9nOaA8Xqs7hxIQAAAMU"]
[Tue Mar 31 03:42:21.093804 2026] [:error] [pid 18332:tid 18355] [client 74.248.131.192:1991] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acrSHb4KXr1F9raS5GRyPQAAAAc"]
[Tue Mar 31 03:42:22.164096 2026] [:error] [pid 18334:tid 18408] [client 74.248.131.192:2022] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acrSHnqQrXLbk1cg3mgBhwAAAII"]
[Tue Mar 31 03:42:23.028413 2026] [:error] [pid 18333:tid 18393] [client 74.248.131.192:20695] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "acrSH0Sx2C5hLR0-8dK1BQAAAE4"]
[Tue Mar 31 03:42:24.076689 2026] [:error] [pid 18333:tid 18384] [client 74.248.131.192:26419] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "acrSIESx2C5hLR0-8dK1DQAAAEU"]
[Tue Mar 31 03:42:26.458703 2026] [:error] [pid 18334:tid 18415] [client 74.248.131.192:51072] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dichku.php"] [unique_id "acrSInqQrXLbk1cg3mgBjQAAAIk"]
[Tue Mar 31 03:42:27.391191 2026] [:error] [pid 18334:tid 18411] [client 74.248.131.192:18795] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dichku.php"] [unique_id "acrSI3qQrXLbk1cg3mgBkwAAAIU"]
[Tue Mar 31 03:42:28.693446 2026] [:error] [pid 18334:tid 18412] [client 74.248.131.192:1987] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dichku.php"] [unique_id "acrSJHqQrXLbk1cg3mgBlwAAAIY"]
[Tue Mar 31 03:42:29.697895 2026] [:error] [pid 18439:tid 18472] [client 74.248.131.192:52934] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vvedr.php"] [unique_id "acrSJS-R9nOaA8Xqs7hxPQAAANU"]
[Tue Mar 31 03:42:30.385396 2026] [:error] [pid 18439:tid 18455] [client 74.248.131.192:16813] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vvedr.php"] [unique_id "acrSJi-R9nOaA8Xqs7hxRAAAAMQ"]
[Tue Mar 31 03:42:31.179726 2026] [:error] [pid 18439:tid 18467] [client 74.248.131.192:49821] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vvedr.php"] [unique_id "acrSJy-R9nOaA8Xqs7hxRwAAANA"]
[Tue Mar 31 03:42:32.125135 2026] [:error] [pid 18439:tid 18455] [client 74.248.131.192:49197] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vvedr.php"] [unique_id "acrSKC-R9nOaA8Xqs7hxTgAAAMQ"]
[Tue Mar 31 03:42:33.730980 2026] [:error] [pid 18333:tid 18387] [client 74.248.131.192:2014] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "acrSKUSx2C5hLR0-8dK1GAAAAEg"]
[Tue Mar 31 03:42:34.317189 2026] [:error] [pid 18439:tid 18462] [client 74.248.131.192:51086] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "acrSKi-R9nOaA8Xqs7hxXgAAAMs"]
[Tue Mar 31 03:42:35.318656 2026] [:error] [pid 18332:tid 18353] [client 74.248.131.192:20461] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "acrSK74KXr1F9raS5GRyZQAAAAU"]
[Tue Mar 31 03:42:36.156903 2026] [:error] [pid 18333:tid 18389] [client 74.248.131.192:20425] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "acrSLESx2C5hLR0-8dK1HQAAAEo"]
[Tue Mar 31 03:42:37.022493 2026] [:error] [pid 18333:tid 18396] [client 74.248.131.192:1777] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xhejulap.php"] [unique_id "acrSLUSx2C5hLR0-8dK1JQAAAFE"]
[Tue Mar 31 03:42:39.042934 2026] [:error] [pid 18439:tid 18471] [client 74.248.131.192:22151] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrSLy-R9nOaA8Xqs7hxcAAAANQ"]
[Tue Mar 31 03:42:40.644497 2026] [:error] [pid 18439:tid 18470] [client 74.248.131.192:20444] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrSMC-R9nOaA8Xqs7hxfAAAANM"]
[Tue Mar 31 03:42:42.365842 2026] [:error] [pid 18332:tid 18357] [client 74.248.131.192:16777] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrSMr4KXr1F9raS5GRybQAAAAk"]
[Tue Mar 31 03:42:43.232592 2026] [:error] [pid 18439:tid 18457] [client 74.248.131.192:1997] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrSMy-R9nOaA8Xqs7hxjgAAAMY"]
[Tue Mar 31 03:42:44.988043 2026] [:error] [pid 18332:tid 18362] [client 74.248.131.192:23945] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdkfu.php"] [unique_id "acrSNL4KXr1F9raS5GRycgAAAA4"]
[Tue Mar 31 03:42:45.790115 2026] [:error] [pid 18332:tid 18359] [client 74.248.131.192:49214] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdkfu.php"] [unique_id "acrSNb4KXr1F9raS5GRydwAAAAs"]
[Tue Mar 31 03:42:46.634702 2026] [:error] [pid 18333:tid 18393] [client 74.248.131.192:1988] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdkfu.php"] [unique_id "acrSNkSx2C5hLR0-8dK1PwAAAE4"]
[Tue Mar 31 04:46:04.447886 2026] [proxy_fcgi:error] [pid 18439:tid 18471] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:04.706010 2026] [proxy_fcgi:error] [pid 18439:tid 18463] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:04.994496 2026] [proxy_fcgi:error] [pid 18439:tid 18460] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:05.275730 2026] [proxy_fcgi:error] [pid 18439:tid 18459] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:05.535077 2026] [proxy_fcgi:error] [pid 18439:tid 18469] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:05.794107 2026] [proxy_fcgi:error] [pid 18439:tid 18464] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:06.052726 2026] [proxy_fcgi:error] [pid 18439:tid 18465] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:06.332479 2026] [proxy_fcgi:error] [pid 18439:tid 18466] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:06.591653 2026] [proxy_fcgi:error] [pid 18439:tid 18457] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:06.850627 2026] [proxy_fcgi:error] [pid 18439:tid 18474] [client 74.248.144.184:46951] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:46:08.228054 2026] [:error] [pid 18439:tid 18463] [client 74.248.144.184:46951] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acrhEC-R9nOaA8Xqs7iyGwAAAMw"]
[Tue Mar 31 04:46:09.199738 2026] [:error] [pid 18439:tid 18454] [client 74.248.144.184:29984] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acrhES-R9nOaA8Xqs7iyHwAAAMM"]
[Tue Mar 31 04:46:11.040577 2026] [:error] [pid 18332:tid 18368] [client 74.248.144.184:42445] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acrhE74KXr1F9raS5GSOBAAAABQ"]
[Tue Mar 31 04:46:13.278884 2026] [:error] [pid 18439:tid 18474] [client 74.248.144.184:15113] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acrhFS-R9nOaA8Xqs7iyMAAAANc"]
[Tue Mar 31 04:46:14.365348 2026] [:error] [pid 18334:tid 18427] [client 74.248.144.184:42484] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "acrhFnqQrXLbk1cg3mgxdgAAAJU"]
[Tue Mar 31 04:46:15.453949 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:4264] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "acrhF74KXr1F9raS5GSOCAAAAAg"]
[Tue Mar 31 04:46:17.014916 2026] [:error] [pid 18439:tid 18469] [client 74.248.144.184:53465] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "acrhGS-R9nOaA8Xqs7iyOgAAANI"]
[Tue Mar 31 04:46:19.397140 2026] [:error] [pid 18334:tid 18416] [client 74.248.144.184:38814] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "acrhG3qQrXLbk1cg3mgxfwAAAIo"]
[Tue Mar 31 04:46:20.416261 2026] [:error] [pid 18332:tid 18348] [client 74.248.144.184:19448] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrhHL4KXr1F9raS5GSODgAAAAA"]
[Tue Mar 31 04:46:21.628815 2026] [:error] [pid 18334:tid 18407] [client 74.248.144.184:31539] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrhHXqQrXLbk1cg3mgxhwAAAIE"]
[Tue Mar 31 04:46:22.692041 2026] [:error] [pid 18334:tid 18428] [client 74.248.144.184:32639] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrhHnqQrXLbk1cg3mgxiQAAAJY"]
[Tue Mar 31 04:46:23.736476 2026] [:error] [pid 18334:tid 18416] [client 74.248.144.184:62175] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acrhH3qQrXLbk1cg3mgxiwAAAIo"]
[Tue Mar 31 04:46:24.604590 2026] [:error] [pid 18334:tid 18414] [client 74.248.144.184:19439] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acrhIHqQrXLbk1cg3mgxjwAAAIg"]
[Tue Mar 31 04:46:25.779504 2026] [:error] [pid 18332:tid 18354] [client 74.248.144.184:45492] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acrhIb4KXr1F9raS5GSOEwAAAAY"]
[Tue Mar 31 04:46:26.784020 2026] [:error] [pid 18439:tid 18460] [client 74.248.144.184:46970] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acrhIi-R9nOaA8Xqs7iySwAAAMk"]
[Tue Mar 31 04:46:27.718091 2026] [:error] [pid 18333:tid 18393] [client 74.248.144.184:34297] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acrhI0Sx2C5hLR0-8dLXeQAAAE4"]
[Tue Mar 31 04:46:28.392371 2026] [:error] [pid 18333:tid 18389] [client 74.248.144.184:62182] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "acrhJESx2C5hLR0-8dLXfgAAAEo"]
[Tue Mar 31 04:46:29.796951 2026] [:error] [pid 18334:tid 18424] [client 74.248.144.184:43657] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "acrhJXqQrXLbk1cg3mgxmgAAAJI"]
[Tue Mar 31 04:46:30.674996 2026] [:error] [pid 18332:tid 18355] [client 74.248.144.184:27884] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "acrhJr4KXr1F9raS5GSOGAAAAAc"]
[Tue Mar 31 04:46:31.867646 2026] [:error] [pid 18334:tid 18430] [client 74.248.144.184:32622] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file.php"] [unique_id "acrhJ3qQrXLbk1cg3mgxngAAAJg"]
[Tue Mar 31 04:46:32.813040 2026] [:error] [pid 18334:tid 18424] [client 74.248.144.184:20348] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acrhKHqQrXLbk1cg3mgxoQAAAJI"]
[Tue Mar 31 04:46:34.428650 2026] [:error] [pid 18439:tid 18458] [client 74.248.144.184:37942] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acrhKi-R9nOaA8Xqs7iyYQAAAMc"]
[Tue Mar 31 04:46:37.426299 2026] [:error] [pid 18334:tid 18418] [client 74.248.144.184:24403] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acrhLXqQrXLbk1cg3mgxrQAAAIw"]
[Tue Mar 31 04:46:39.769963 2026] [:error] [pid 18439:tid 18460] [client 74.248.144.184:41223] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acrhLy-R9nOaA8Xqs7iybwAAAMk"]
[Tue Mar 31 04:46:40.609449 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:4340] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sale.php"] [unique_id "acrhMC-R9nOaA8Xqs7iycQAAAMU"]
[Tue Mar 31 04:46:41.560760 2026] [:error] [pid 18332:tid 18354] [client 74.248.144.184:45463] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sale.php"] [unique_id "acrhMb4KXr1F9raS5GSOJQAAAAY"]
[Tue Mar 31 04:46:42.863615 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:4119] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sale.php"] [unique_id "acrhMnqQrXLbk1cg3mgxxAAAAIk"]
[Tue Mar 31 04:46:43.625006 2026] [:error] [pid 18333:tid 18390] [client 74.248.144.184:4816] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sale.php"] [unique_id "acrhM0Sx2C5hLR0-8dLXoQAAAEs"]
[Tue Mar 31 04:46:44.499286 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:4118] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "acrhNC-R9nOaA8Xqs7iyeAAAANM"]
[Tue Mar 31 04:46:45.370334 2026] [:error] [pid 18333:tid 18397] [client 74.248.144.184:33577] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "acrhNUSx2C5hLR0-8dLXqwAAAFI"]
[Tue Mar 31 04:46:46.555800 2026] [:error] [pid 18332:tid 18362] [client 74.248.144.184:41230] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "acrhNr4KXr1F9raS5GSOKAAAAA4"]
[Tue Mar 31 04:46:47.270579 2026] [:error] [pid 18332:tid 18368] [client 74.248.144.184:4640] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "acrhN74KXr1F9raS5GSOKgAAABQ"]
[Tue Mar 31 04:46:48.264668 2026] [:error] [pid 18439:tid 18468] [client 74.248.144.184:27297] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acrhOC-R9nOaA8Xqs7iyggAAANE"]
[Tue Mar 31 04:46:49.055428 2026] [:error] [pid 18439:tid 18473] [client 74.248.144.184:41848] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acrhOS-R9nOaA8Xqs7iyhwAAANY"]
[Tue Mar 31 04:46:49.635812 2026] [:error] [pid 18332:tid 18354] [client 74.248.144.184:33546] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acrhOb4KXr1F9raS5GSOMAAAAAY"]
[Tue Mar 31 04:46:50.526697 2026] [:error] [pid 18439:tid 18467] [client 74.248.144.184:10961] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acrhOi-R9nOaA8Xqs7iyjgAAANA"]
[Tue Mar 31 04:46:51.402506 2026] [:error] [pid 18332:tid 18372] [client 74.248.144.184:33578] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "acrhO74KXr1F9raS5GSOMwAAABc"]
[Tue Mar 31 04:46:52.408749 2026] [:error] [pid 18439:tid 18461] [client 74.248.144.184:4344] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "acrhPC-R9nOaA8Xqs7iylgAAAMo"]
[Tue Mar 31 04:46:53.483271 2026] [:error] [pid 18333:tid 18384] [client 74.248.144.184:33536] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "acrhPUSx2C5hLR0-8dLXtAAAAEU"]
[Tue Mar 31 04:46:54.192330 2026] [:error] [pid 18332:tid 18369] [client 74.248.144.184:16738] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "acrhPr4KXr1F9raS5GSOOQAAABU"]
[Tue Mar 31 04:46:55.598731 2026] [:error] [pid 18332:tid 18371] [client 74.248.144.184:23877] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acrhP74KXr1F9raS5GSOQQAAABY"]
[Tue Mar 31 04:46:56.827191 2026] [:error] [pid 18333:tid 18381] [client 74.248.144.184:19391] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acrhQESx2C5hLR0-8dLXuQAAAEI"]
[Tue Mar 31 04:46:58.275947 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:27350] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acrhQnqQrXLbk1cg3mgx0wAAAIk"]
[Tue Mar 31 04:46:59.629802 2026] [:error] [pid 18334:tid 18420] [client 74.248.144.184:16735] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hots.php"] [unique_id "acrhQ3qQrXLbk1cg3mgx1QAAAI4"]
[Tue Mar 31 04:47:00.739531 2026] [:error] [pid 18439:tid 18467] [client 74.248.144.184:11375] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acrhRC-R9nOaA8Xqs7iyrQAAANA"]
[Tue Mar 31 04:47:01.825318 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:50218] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acrhRS-R9nOaA8Xqs7iyuAAAANM"]
[Tue Mar 31 04:47:03.302353 2026] [:error] [pid 18334:tid 18426] [client 74.248.144.184:23834] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acrhR3qQrXLbk1cg3mgx3wAAAJQ"]
[Tue Mar 31 04:47:04.888626 2026] [:error] [pid 18334:tid 18429] [client 74.248.144.184:43080] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acrhSHqQrXLbk1cg3mgx5gAAAJc"]
[Tue Mar 31 04:47:07.230837 2026] [proxy_fcgi:error] [pid 18439:tid 18471] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:07.516886 2026] [proxy_fcgi:error] [pid 18439:tid 18462] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:07.795131 2026] [proxy_fcgi:error] [pid 18439:tid 18461] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:09.235571 2026] [proxy_fcgi:error] [pid 18439:tid 18471] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:09.527527 2026] [proxy_fcgi:error] [pid 18439:tid 18451] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:09.809822 2026] [proxy_fcgi:error] [pid 18439:tid 18453] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:10.083977 2026] [proxy_fcgi:error] [pid 18439:tid 18462] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:10.353314 2026] [proxy_fcgi:error] [pid 18439:tid 18473] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:10.611350 2026] [proxy_fcgi:error] [pid 18439:tid 18463] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:10.870374 2026] [proxy_fcgi:error] [pid 18439:tid 18459] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:11.128820 2026] [proxy_fcgi:error] [pid 18439:tid 18475] [client 74.248.144.184:11342] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:47:11.396821 2026] [:error] [pid 18439:tid 18451] [client 74.248.144.184:11342] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "acrhTy-R9nOaA8Xqs7iy5gAAAMA"]
[Tue Mar 31 04:47:12.181673 2026] [:error] [pid 18333:tid 18380] [client 74.248.144.184:23304] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "acrhUESx2C5hLR0-8dLXzQAAAEE"]
[Tue Mar 31 04:47:13.054859 2026] [:error] [pid 18334:tid 18424] [client 74.248.144.184:21768] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "acrhUXqQrXLbk1cg3mgx9gAAAJI"]
[Tue Mar 31 04:47:14.020251 2026] [:error] [pid 18334:tid 18410] [client 74.248.144.184:8985] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "acrhUnqQrXLbk1cg3mgx-AAAAIQ"]
[Tue Mar 31 04:47:15.105651 2026] [:error] [pid 18439:tid 18458] [client 74.248.144.184:21798] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acrhUy-R9nOaA8Xqs7iy_wAAAMc"]
[Tue Mar 31 04:47:16.114882 2026] [:error] [pid 18439:tid 18475] [client 74.248.144.184:59691] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acrhVC-R9nOaA8Xqs7izBQAAANg"]
[Tue Mar 31 04:47:16.733087 2026] [:error] [pid 18439:tid 18461] [client 74.248.144.184:35403] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acrhVC-R9nOaA8Xqs7izCwAAAMo"]
[Tue Mar 31 04:47:17.776233 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:16753] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acrhVS-R9nOaA8Xqs7izEQAAANQ"]
[Tue Mar 31 04:47:19.015604 2026] [:error] [pid 18332:tid 18361] [client 74.248.144.184:63135] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acrhV74KXr1F9raS5GSOUQAAAA0"]
[Tue Mar 31 04:47:19.919848 2026] [:error] [pid 18334:tid 18408] [client 74.248.144.184:47987] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acrhV3qQrXLbk1cg3mgx_wAAAII"]
[Tue Mar 31 04:47:20.753086 2026] [:error] [pid 18439:tid 18467] [client 74.248.144.184:63726] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acrhWC-R9nOaA8Xqs7izGgAAANA"]
[Tue Mar 31 04:47:21.568289 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:11353] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acrhWS-R9nOaA8Xqs7izIwAAANM"]
[Tue Mar 31 04:47:23.024508 2026] [:error] [pid 18334:tid 18424] [client 74.248.144.184:11371] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acrhW3qQrXLbk1cg3mgyBQAAAJI"]
[Tue Mar 31 04:47:24.125279 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:43751] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acrhXC-R9nOaA8Xqs7izMQAAANM"]
[Tue Mar 31 04:47:25.970267 2026] [:error] [pid 18333:tid 18385] [client 74.248.144.184:25421] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acrhXUSx2C5hLR0-8dLX4QAAAEY"]
[Tue Mar 31 04:47:27.757871 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:25432] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acrhXy-R9nOaA8Xqs7izPAAAAMQ"]
[Tue Mar 31 04:47:30.049117 2026] [:error] [pid 18333:tid 18393] [client 74.248.144.184:10167] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acrhYkSx2C5hLR0-8dLX6AAAAE4"]
[Tue Mar 31 04:47:31.895863 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:23323] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acrhYy-R9nOaA8Xqs7izSgAAANQ"]
[Tue Mar 31 04:47:33.990812 2026] [:error] [pid 18439:tid 18466] [client 74.248.144.184:10153] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acrhZS-R9nOaA8Xqs7izVAAAAM8"]
[Tue Mar 31 04:47:35.193959 2026] [:error] [pid 18333:tid 18396] [client 74.248.144.184:33108] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acrhZ0Sx2C5hLR0-8dLX7gAAAFE"]
[Tue Mar 31 04:47:36.053077 2026] [:error] [pid 18332:tid 18358] [client 74.248.144.184:14065] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acrhaL4KXr1F9raS5GSOZwAAAAo"]
[Tue Mar 31 04:47:37.285365 2026] [:error] [pid 18333:tid 18403] [client 74.248.144.184:10120] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acrhaUSx2C5hLR0-8dLX9AAAAFg"]
[Tue Mar 31 04:47:38.308470 2026] [:error] [pid 18333:tid 18387] [client 74.248.144.184:16380] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acrhakSx2C5hLR0-8dLX-QAAAEg"]
[Tue Mar 31 04:47:39.321862 2026] [:error] [pid 18333:tid 18402] [client 74.248.144.184:24845] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acrha0Sx2C5hLR0-8dLX_AAAAFc"]
[Tue Mar 31 04:47:40.939402 2026] [:error] [pid 18334:tid 18421] [client 74.248.144.184:33112] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acrhbHqQrXLbk1cg3mgyIQAAAI8"]
[Tue Mar 31 04:47:42.036702 2026] [:error] [pid 18334:tid 18428] [client 74.248.144.184:48403] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acrhbnqQrXLbk1cg3mgyJQAAAJY"]
[Tue Mar 31 04:47:43.016000 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:60270] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acrhby-R9nOaA8Xqs7izaAAAAMU"]
[Tue Mar 31 04:47:43.915107 2026] [:error] [pid 18334:tid 18427] [client 74.248.144.184:54067] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acrhb3qQrXLbk1cg3mgyLgAAAJU"]
[Tue Mar 31 04:47:45.137060 2026] [:error] [pid 18439:tid 18452] [client 74.248.144.184:13979] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acrhcS-R9nOaA8Xqs7izbAAAAME"]
[Tue Mar 31 04:47:46.257143 2026] [:error] [pid 18334:tid 18414] [client 74.248.144.184:16352] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acrhcnqQrXLbk1cg3mgyOgAAAIg"]
[Tue Mar 31 04:47:48.081358 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:44947] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acrhdC-R9nOaA8Xqs7izcwAAAM0"]
[Tue Mar 31 04:47:50.924540 2026] [:error] [pid 18439:tid 18452] [client 74.248.144.184:16355] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jga.php"] [unique_id "acrhdi-R9nOaA8Xqs7izdgAAAME"]
[Tue Mar 31 04:47:52.750138 2026] [:error] [pid 18333:tid 18380] [client 74.248.144.184:48412] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acrheESx2C5hLR0-8dLYDwAAAEE"]
[Tue Mar 31 04:47:55.964785 2026] [:error] [pid 18333:tid 18392] [client 74.248.144.184:48444] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acrhe0Sx2C5hLR0-8dLYFAAAAE0"]
[Tue Mar 31 04:47:58.462916 2026] [:error] [pid 18334:tid 18406] [client 74.248.144.184:55173] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acrhfnqQrXLbk1cg3mgyeAAAAIA"]
[Tue Mar 31 04:47:59.723946 2026] [:error] [pid 18439:tid 18461] [client 74.248.144.184:26495] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acrhfy-R9nOaA8Xqs7izjQAAAMo"]
[Tue Mar 31 04:48:00.972106 2026] [:error] [pid 18439:tid 18467] [client 74.248.144.184:17043] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acrhgC-R9nOaA8Xqs7izkwAAANA"]
[Tue Mar 31 04:48:02.004907 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:55290] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acrhgnqQrXLbk1cg3mgykgAAAJE"]
[Tue Mar 31 04:48:03.579207 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:26462] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acrhgy-R9nOaA8Xqs7izmwAAAMU"]
[Tue Mar 31 04:48:04.989287 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:36693] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "acrhhC-R9nOaA8Xqs7izqAAAANM"]
[Tue Mar 31 04:48:06.033279 2026] [:error] [pid 18439:tid 18473] [client 74.248.144.184:16333] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acrhhi-R9nOaA8Xqs7izrwAAANY"]
[Tue Mar 31 04:48:07.025817 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:16345] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acrhh74KXr1F9raS5GSOhAAAAAg"]
[Tue Mar 31 04:48:10.304341 2026] [:error] [pid 18332:tid 18348] [client 74.248.144.184:14007] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "acrhir4KXr1F9raS5GSOjwAAAAA"]
[Tue Mar 31 04:48:11.464647 2026] [proxy_fcgi:error] [pid 18439:tid 18464] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:11.873003 2026] [proxy_fcgi:error] [pid 18439:tid 18470] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:12.132881 2026] [proxy_fcgi:error] [pid 18439:tid 18468] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:12.391525 2026] [proxy_fcgi:error] [pid 18439:tid 18465] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:12.913205 2026] [proxy_fcgi:error] [pid 18439:tid 18470] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:13.172736 2026] [proxy_fcgi:error] [pid 18439:tid 18456] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:13.432027 2026] [proxy_fcgi:error] [pid 18439:tid 18451] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:13.707323 2026] [proxy_fcgi:error] [pid 18439:tid 18461] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:13.965727 2026] [proxy_fcgi:error] [pid 18439:tid 18454] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:14.224212 2026] [proxy_fcgi:error] [pid 18439:tid 18453] [client 74.248.144.184:41767] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:48:14.486201 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:41767] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acrhji-R9nOaA8Xqs7iz3QAAANQ"]
[Tue Mar 31 04:48:15.829930 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:41741] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acrhjy-R9nOaA8Xqs7iz6wAAANQ"]
[Tue Mar 31 04:48:16.705607 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:25955] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acrhkC-R9nOaA8Xqs7iz8wAAAM0"]
[Tue Mar 31 04:48:17.685323 2026] [:error] [pid 18439:tid 18451] [client 74.248.144.184:27893] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acrhkS-R9nOaA8Xqs7iz_gAAAMA"]
[Tue Mar 31 04:48:18.698954 2026] [:error] [pid 18333:tid 18380] [client 74.248.144.184:47894] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acrhkkSx2C5hLR0-8dLYPQAAAEE"]
[Tue Mar 31 04:48:19.476743 2026] [:error] [pid 18439:tid 18454] [client 74.248.144.184:24834] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acrhky-R9nOaA8Xqs7i0CgAAAMM"]
[Tue Mar 31 04:48:21.596675 2026] [:error] [pid 18333:tid 18391] [client 74.248.144.184:32047] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acrhlUSx2C5hLR0-8dLYRQAAAEw"]
[Tue Mar 31 04:48:22.556957 2026] [:error] [pid 18333:tid 18388] [client 74.248.144.184:55229] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "acrhlkSx2C5hLR0-8dLYSAAAAEk"]
[Tue Mar 31 04:48:23.578066 2026] [:error] [pid 18334:tid 18427] [client 74.248.144.184:54107] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acrhl3qQrXLbk1cg3mgy7AAAAJU"]
[Tue Mar 31 04:48:24.490575 2026] [:error] [pid 18439:tid 18465] [client 74.248.144.184:26445] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acrhmC-R9nOaA8Xqs7i0FQAAAM4"]
[Tue Mar 31 04:48:25.281886 2026] [:error] [pid 18439:tid 18473] [client 74.248.144.184:55177] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acrhmS-R9nOaA8Xqs7i0FgAAANY"]
[Tue Mar 31 04:48:26.471862 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:24863] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "acrhmr4KXr1F9raS5GSOrgAAAAg"]
[Tue Mar 31 04:48:27.545649 2026] [:error] [pid 18334:tid 18407] [client 74.248.144.184:13967] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "acrhm3qQrXLbk1cg3mgy9AAAAIE"]
[Tue Mar 31 04:48:30.015905 2026] [:error] [pid 18439:tid 18468] [client 74.248.144.184:24852] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "acrhni-R9nOaA8Xqs7i0JgAAANE"]
[Tue Mar 31 04:48:30.643607 2026] [:error] [pid 18333:tid 18386] [client 74.248.144.184:5085] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "acrhnkSx2C5hLR0-8dLYVAAAAEc"]
[Tue Mar 31 04:48:31.656922 2026] [:error] [pid 18334:tid 18421] [client 74.248.144.184:33098] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "acrhn3qQrXLbk1cg3mgy-QAAAI8"]
[Tue Mar 31 04:48:32.281853 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:13988] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acrhoHqQrXLbk1cg3mgy-wAAAIk"]
[Tue Mar 31 04:48:33.171763 2026] [:error] [pid 18333:tid 18394] [client 74.248.144.184:55254] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acrhoUSx2C5hLR0-8dLYWAAAAE8"]
[Tue Mar 31 04:48:34.164383 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:26491] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acrhoi-R9nOaA8Xqs7i0LwAAAMQ"]
[Tue Mar 31 04:48:35.312574 2026] [:error] [pid 18439:tid 18452] [client 74.248.144.184:54124] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acrhoy-R9nOaA8Xqs7i0MgAAAME"]
[Tue Mar 31 04:48:36.135186 2026] [:error] [pid 18439:tid 18458] [client 74.248.144.184:55217] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acrhpC-R9nOaA8Xqs7i0NQAAAMc"]
[Tue Mar 31 04:48:36.909717 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:43062] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acrhpHqQrXLbk1cg3mgzBgAAAJE"]
[Tue Mar 31 04:48:37.555706 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:22292] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acrhpS-R9nOaA8Xqs7i0OgAAAMQ"]
[Tue Mar 31 04:48:38.423946 2026] [:error] [pid 18333:tid 18395] [client 74.248.144.184:17035] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acrhpkSx2C5hLR0-8dLYYQAAAFA"]
[Tue Mar 31 04:48:39.565810 2026] [:error] [pid 18333:tid 18393] [client 74.248.144.184:55261] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acrhp0Sx2C5hLR0-8dLYZAAAAE4"]
[Tue Mar 31 04:48:40.707030 2026] [:error] [pid 18334:tid 18410] [client 74.248.144.184:14001] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acrhqHqQrXLbk1cg3mgzEAAAAIQ"]
[Tue Mar 31 04:48:41.733007 2026] [:error] [pid 18334:tid 18411] [client 74.248.144.184:24835] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acrhqXqQrXLbk1cg3mgzEwAAAIU"]
[Tue Mar 31 04:48:43.777393 2026] [:error] [pid 18439:tid 18453] [client 74.248.144.184:25977] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acrhqy-R9nOaA8Xqs7i0QwAAAMI"]
[Tue Mar 31 04:48:44.937813 2026] [:error] [pid 18334:tid 18410] [client 74.248.144.184:44931] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acrhrHqQrXLbk1cg3mgzHAAAAIQ"]
[Tue Mar 31 04:48:45.995396 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:24324] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acrhrb4KXr1F9raS5GSOvwAAAAg"]
[Tue Mar 31 04:48:47.810796 2026] [:error] [pid 18333:tid 18403] [client 74.248.144.184:14002] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acrhr0Sx2C5hLR0-8dLYcgAAAFg"]
[Tue Mar 31 04:48:49.090967 2026] [:error] [pid 18439:tid 18462] [client 74.248.144.184:44961] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acrhsS-R9nOaA8Xqs7i0WQAAAMs"]
[Tue Mar 31 04:48:50.034371 2026] [:error] [pid 18439:tid 18473] [client 74.248.144.184:55204] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acrhsi-R9nOaA8Xqs7i0XgAAANY"]
[Tue Mar 31 04:48:51.003665 2026] [:error] [pid 18333:tid 18397] [client 74.248.144.184:14404] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acrhs0Sx2C5hLR0-8dLYdQAAAFI"]
[Tue Mar 31 04:48:52.729455 2026] [:error] [pid 18333:tid 18379] [client 74.248.144.184:58974] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acrhtESx2C5hLR0-8dLYdwAAAEA"]
[Tue Mar 31 04:48:56.365425 2026] [:error] [pid 18334:tid 18409] [client 74.248.144.184:8678] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acrhuHqQrXLbk1cg3mgzJgAAAIM"]
[Tue Mar 31 04:48:57.666276 2026] [:error] [pid 18332:tid 18348] [client 74.248.144.184:54061] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acrhub4KXr1F9raS5GSOyQAAAAA"]
[Tue Mar 31 04:48:59.011651 2026] [:error] [pid 18332:tid 18360] [client 74.248.144.184:14072] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acrhu74KXr1F9raS5GSOzQAAAAw"]
[Tue Mar 31 04:49:00.524901 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:25948] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acrhvC-R9nOaA8Xqs7i0vgAAANQ"]
[Tue Mar 31 04:49:01.478627 2026] [:error] [pid 18334:tid 18428] [client 74.248.144.184:14463] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acrhvXqQrXLbk1cg3mgzLAAAAJY"]
[Tue Mar 31 04:49:02.180533 2026] [:error] [pid 18333:tid 18380] [client 74.248.144.184:38857] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acrhvkSx2C5hLR0-8dLYfgAAAEE"]
[Tue Mar 31 04:49:04.417763 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:38874] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acrhwC-R9nOaA8Xqs7i0zQAAAMQ"]
[Tue Mar 31 04:49:06.909814 2026] [:error] [pid 18332:tid 18349] [client 74.248.144.184:54048] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acrhwr4KXr1F9raS5GSO1gAAAAE"]
[Tue Mar 31 04:49:08.245028 2026] [:error] [pid 18333:tid 18390] [client 74.248.144.184:14456] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acrhxESx2C5hLR0-8dLYggAAAEs"]
[Tue Mar 31 04:49:09.104111 2026] [:error] [pid 18439:tid 18469] [client 74.248.144.184:40765] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acrhxS-R9nOaA8Xqs7i03AAAANI"]
[Tue Mar 31 04:49:10.885174 2026] [:error] [pid 18439:tid 18469] [client 74.248.144.184:16364] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acrhxi-R9nOaA8Xqs7i05QAAANI"]
[Tue Mar 31 04:49:11.920882 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:16371] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acrhx74KXr1F9raS5GSO2wAAAAg"]
[Tue Mar 31 04:49:13.244146 2026] [:error] [pid 18439:tid 18473] [client 74.248.144.184:13666] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acrhyS-R9nOaA8Xqs7i05wAAANY"]
[Tue Mar 31 04:49:14.594020 2026] [proxy_fcgi:error] [pid 18439:tid 18474] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:14.852724 2026] [proxy_fcgi:error] [pid 18439:tid 18453] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:15.164894 2026] [proxy_fcgi:error] [pid 18439:tid 18472] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:15.423848 2026] [proxy_fcgi:error] [pid 18439:tid 18467] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:15.786077 2026] [proxy_fcgi:error] [pid 18439:tid 18463] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:16.048194 2026] [proxy_fcgi:error] [pid 18439:tid 18461] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:16.309527 2026] [proxy_fcgi:error] [pid 18439:tid 18468] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:16.578405 2026] [proxy_fcgi:error] [pid 18439:tid 18470] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:16.863507 2026] [proxy_fcgi:error] [pid 18439:tid 18474] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:17.144608 2026] [proxy_fcgi:error] [pid 18439:tid 18471] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:17.404864 2026] [proxy_fcgi:error] [pid 18439:tid 18472] [client 74.248.144.184:41791] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:49:17.682460 2026] [:error] [pid 18439:tid 18467] [client 74.248.144.184:41791] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acrhzS-R9nOaA8Xqs7i0-gAAANA"]
[Tue Mar 31 04:49:18.680443 2026] [:error] [pid 18332:tid 18373] [client 74.248.144.184:58945] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acrhzr4KXr1F9raS5GSO5QAAABg"]
[Tue Mar 31 04:49:19.395342 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:10160] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acrhz3qQrXLbk1cg3mgzPAAAAIk"]
[Tue Mar 31 04:49:20.160468 2026] [:error] [pid 18333:tid 18391] [client 74.248.144.184:59700] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acrh0ESx2C5hLR0-8dLYowAAAEw"]
[Tue Mar 31 04:49:21.104347 2026] [:error] [pid 18334:tid 18409] [client 74.248.144.184:13692] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acrh0XqQrXLbk1cg3mgzQgAAAIM"]
[Tue Mar 31 04:49:22.191878 2026] [:error] [pid 18333:tid 18383] [client 74.248.144.184:13289] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acrh0kSx2C5hLR0-8dLYqgAAAEQ"]
[Tue Mar 31 04:49:23.188044 2026] [:error] [pid 18334:tid 18418] [client 74.248.144.184:44382] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acrh03qQrXLbk1cg3mgzSQAAAIw"]
[Tue Mar 31 04:49:23.837038 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:13268] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acrh0y-R9nOaA8Xqs7i1AAAAAM0"]
[Tue Mar 31 04:49:24.430718 2026] [:error] [pid 18332:tid 18367] [client 74.248.144.184:25430] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acrh1L4KXr1F9raS5GSO6wAAABM"]
[Tue Mar 31 04:49:25.564613 2026] [:error] [pid 18333:tid 18392] [client 74.248.144.184:58944] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acrh1USx2C5hLR0-8dLYrwAAAE0"]
[Tue Mar 31 04:49:26.648123 2026] [:error] [pid 18334:tid 18407] [client 74.248.144.184:63120] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acrh1nqQrXLbk1cg3mgzUAAAAIE"]
[Tue Mar 31 04:49:27.553431 2026] [:error] [pid 18333:tid 18403] [client 74.248.144.184:43743] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acrh10Sx2C5hLR0-8dLYtQAAAFg"]
[Tue Mar 31 04:49:28.543680 2026] [:error] [pid 18334:tid 18406] [client 74.248.144.184:11384] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acrh2HqQrXLbk1cg3mgzWgAAAIA"]
[Tue Mar 31 04:49:30.752314 2026] [:error] [pid 18333:tid 18401] [client 74.248.144.184:9012] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acrh2kSx2C5hLR0-8dLYyAAAAFY"]
[Tue Mar 31 04:49:32.017887 2026] [:error] [pid 18333:tid 18383] [client 74.248.144.184:23318] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acrh3ESx2C5hLR0-8dLY0QAAAEQ"]
[Tue Mar 31 04:49:32.982478 2026] [:error] [pid 18333:tid 18380] [client 74.248.144.184:43738] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acrh3ESx2C5hLR0-8dLY1gAAAEE"]
[Tue Mar 31 04:49:35.009923 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:25470] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acrh3y-R9nOaA8Xqs7i1BgAAANM"]
[Tue Mar 31 04:49:37.211901 2026] [:error] [pid 18439:tid 18461] [client 74.248.144.184:32528] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acrh4S-R9nOaA8Xqs7i1EAAAAMo"]
[Tue Mar 31 04:49:38.328804 2026] [:error] [pid 18439:tid 18453] [client 74.248.144.184:4194] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acrh4i-R9nOaA8Xqs7i1FgAAAMI"]
[Tue Mar 31 04:49:39.647910 2026] [:error] [pid 18439:tid 18451] [client 74.248.144.184:8960] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "acrh4y-R9nOaA8Xqs7i1GQAAAMA"]
[Tue Mar 31 04:49:40.724431 2026] [:error] [pid 18334:tid 18422] [client 74.248.144.184:59690] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acrh5HqQrXLbk1cg3mgznAAAAJA"]
[Tue Mar 31 04:49:43.234777 2026] [:error] [pid 18334:tid 18412] [client 74.248.144.184:32518] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acrh53qQrXLbk1cg3mgzpAAAAIY"]
[Tue Mar 31 04:49:44.623386 2026] [:error] [pid 18334:tid 18410] [client 74.248.144.184:31009] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acrh6HqQrXLbk1cg3mgzqAAAAIQ"]
[Tue Mar 31 04:49:45.262681 2026] [:error] [pid 18334:tid 18416] [client 74.248.144.184:13191] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "acrh6XqQrXLbk1cg3mgzqwAAAIo"]
[Tue Mar 31 04:49:46.371284 2026] [:error] [pid 18333:tid 18399] [client 74.248.144.184:12804] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acrh6kSx2C5hLR0-8dLY9wAAAFQ"]
[Tue Mar 31 04:49:47.194577 2026] [:error] [pid 18439:tid 18475] [client 74.248.144.184:54687] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acrh6y-R9nOaA8Xqs7i1LAAAANg"]
[Tue Mar 31 04:49:48.494272 2026] [:error] [pid 18332:tid 18362] [client 74.248.144.184:12829] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acrh7L4KXr1F9raS5GSPAwAAAA4"]
[Tue Mar 31 04:49:50.994501 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:54662] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lm15.php"] [unique_id "acrh7nqQrXLbk1cg3mgztQAAAIk"]
[Tue Mar 31 04:49:57.742152 2026] [:error] [pid 18333:tid 18384] [client 74.248.144.184:7915] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/green.php"] [unique_id "acrh9USx2C5hLR0-8dLZBgAAAEU"]
[Tue Mar 31 04:50:00.920690 2026] [:error] [pid 18332:tid 18362] [client 74.248.144.184:43101] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/green.php"] [unique_id "acrh-L4KXr1F9raS5GSPFQAAAA4"]
[Tue Mar 31 04:50:02.110666 2026] [:error] [pid 18439:tid 18458] [client 74.248.144.184:49617] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/green.php"] [unique_id "acrh-i-R9nOaA8Xqs7i1qAAAAMc"]
[Tue Mar 31 04:50:02.817107 2026] [:error] [pid 18439:tid 18451] [client 74.248.144.184:24921] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/green.php"] [unique_id "acrh-i-R9nOaA8Xqs7i1swAAAMA"]
[Tue Mar 31 04:50:03.503637 2026] [:error] [pid 18332:tid 18351] [client 74.248.144.184:44385] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/albin.php"] [unique_id "acrh-74KXr1F9raS5GSPGgAAAAM"]
[Tue Mar 31 04:50:05.134658 2026] [:error] [pid 18334:tid 18427] [client 74.248.144.184:15188] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/albin.php"] [unique_id "acrh_XqQrXLbk1cg3mgz1gAAAJU"]
[Tue Mar 31 04:50:06.019205 2026] [:error] [pid 18333:tid 18399] [client 74.248.144.184:45002] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/albin.php"] [unique_id "acrh_kSx2C5hLR0-8dLZGQAAAFQ"]
[Tue Mar 31 04:50:06.722349 2026] [:error] [pid 18439:tid 18474] [client 74.248.144.184:12807] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/albin.php"] [unique_id "acrh_i-R9nOaA8Xqs7i1xQAAANc"]
[Tue Mar 31 04:50:07.495977 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:31065] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acrh_y-R9nOaA8Xqs7i1ygAAAMU"]
[Tue Mar 31 04:50:08.337513 2026] [:error] [pid 18334:tid 18412] [client 74.248.144.184:24956] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acriAHqQrXLbk1cg3mgz3QAAAIY"]
[Tue Mar 31 04:50:09.798741 2026] [:error] [pid 18334:tid 18406] [client 74.248.144.184:31012] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acriAXqQrXLbk1cg3mgz5AAAAIA"]
[Tue Mar 31 04:50:10.889802 2026] [:error] [pid 18333:tid 18392] [client 74.248.144.184:7919] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "acriAkSx2C5hLR0-8dLZIwAAAE0"]
[Tue Mar 31 04:50:11.637954 2026] [:error] [pid 18333:tid 18401] [client 74.248.144.184:32104] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acriA0Sx2C5hLR0-8dLZJwAAAFY"]
[Tue Mar 31 04:50:12.335335 2026] [:error] [pid 18332:tid 18361] [client 74.248.144.184:24917] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acriBL4KXr1F9raS5GSPJgAAAA0"]
[Tue Mar 31 04:50:13.585763 2026] [:error] [pid 18334:tid 18406] [client 74.248.144.184:57769] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acriBXqQrXLbk1cg3mgz6wAAAIA"]
[Tue Mar 31 04:50:14.342369 2026] [:error] [pid 18439:tid 18451] [client 74.248.144.184:49605] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "acriBi-R9nOaA8Xqs7i11wAAAMA"]
[Tue Mar 31 04:50:15.859331 2026] [:error] [pid 18333:tid 18402] [client 74.248.144.184:32090] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acriB0Sx2C5hLR0-8dLZNgAAAFc"]
[Tue Mar 31 04:50:16.905764 2026] [:error] [pid 18333:tid 18393] [client 74.248.144.184:24914] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acriCESx2C5hLR0-8dLZOwAAAE4"]
[Tue Mar 31 04:50:19.792566 2026] [proxy_fcgi:error] [pid 18332:tid 18356] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:20.060329 2026] [proxy_fcgi:error] [pid 18332:tid 18359] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:20.568924 2026] [proxy_fcgi:error] [pid 18332:tid 18348] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:21.163414 2026] [proxy_fcgi:error] [pid 18332:tid 18364] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:21.423660 2026] [proxy_fcgi:error] [pid 18332:tid 18355] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:21.697001 2026] [proxy_fcgi:error] [pid 18332:tid 18368] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:21.955386 2026] [proxy_fcgi:error] [pid 18332:tid 18361] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:22.304856 2026] [proxy_fcgi:error] [pid 18332:tid 18362] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:23.050987 2026] [proxy_fcgi:error] [pid 18332:tid 18356] [client 74.248.144.184:23373] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:50:23.310287 2026] [:error] [pid 18332:tid 18359] [client 74.248.144.184:23373] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acriD74KXr1F9raS5GSPQgAAAAs"]
[Tue Mar 31 04:50:24.754434 2026] [:error] [pid 18334:tid 18418] [client 74.248.144.184:13247] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acriEHqQrXLbk1cg3mg0AAAAAIw"]
[Tue Mar 31 04:50:25.816422 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:50226] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acriEXqQrXLbk1cg3mg0BQAAAJE"]
[Tue Mar 31 04:50:28.301499 2026] [:error] [pid 18439:tid 18468] [client 74.248.144.184:43132] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acriFC-R9nOaA8Xqs7i2EAAAANE"]
[Tue Mar 31 04:50:29.559265 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:50222] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acriFS-R9nOaA8Xqs7i2EwAAANQ"]
[Tue Mar 31 04:50:30.652035 2026] [:error] [pid 18334:tid 18424] [client 74.248.144.184:32123] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acriFnqQrXLbk1cg3mg0FQAAAJI"]
[Tue Mar 31 04:50:32.466246 2026] [:error] [pid 18334:tid 18426] [client 74.248.144.184:31007] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acriGHqQrXLbk1cg3mg0HAAAAJQ"]
[Tue Mar 31 04:50:34.144657 2026] [:error] [pid 18333:tid 18395] [client 74.248.144.184:45554] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acriGkSx2C5hLR0-8dLZUQAAAFA"]
[Tue Mar 31 04:50:35.456804 2026] [:error] [pid 18332:tid 18359] [client 74.248.144.184:4282] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "acriG74KXr1F9raS5GSPSQAAAAs"]
[Tue Mar 31 04:50:36.259644 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:45046] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "acriHHqQrXLbk1cg3mg0KAAAAJE"]
[Tue Mar 31 04:50:37.026842 2026] [:error] [pid 18333:tid 18400] [client 74.248.144.184:31010] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "acriHUSx2C5hLR0-8dLZVwAAAFU"]
[Tue Mar 31 04:50:37.964736 2026] [:error] [pid 18439:tid 18469] [client 74.248.144.184:13214] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "acriHS-R9nOaA8Xqs7i2IAAAANI"]
[Tue Mar 31 04:50:41.584458 2026] [:error] [pid 18334:tid 18420] [client 74.248.144.184:45511] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acriIXqQrXLbk1cg3mg0LgAAAI4"]
[Tue Mar 31 04:50:44.966953 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:32631] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acriJHqQrXLbk1cg3mg0OwAAAJE"]
[Tue Mar 31 04:50:49.483883 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:45031] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acriKS-R9nOaA8Xqs7i2MAAAAM0"]
[Tue Mar 31 04:50:51.946121 2026] [:error] [pid 18439:tid 18457] [client 74.248.144.184:10585] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/buc.php"] [unique_id "acriKy-R9nOaA8Xqs7i2OgAAAMY"]
[Tue Mar 31 04:50:53.636619 2026] [:error] [pid 18334:tid 18422] [client 74.248.144.184:29974] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acriLXqQrXLbk1cg3mg0TgAAAJA"]
[Tue Mar 31 04:50:54.275256 2026] [:error] [pid 18334:tid 18417] [client 74.248.144.184:43651] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acriLnqQrXLbk1cg3mg0UAAAAIs"]
[Tue Mar 31 04:50:55.865570 2026] [:error] [pid 18334:tid 18419] [client 74.248.144.184:43674] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acriL3qQrXLbk1cg3mg0WgAAAI0"]
[Tue Mar 31 04:50:57.161485 2026] [:error] [pid 18439:tid 18470] [client 74.248.144.184:21283] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acriMS-R9nOaA8Xqs7i2SQAAANM"]
[Tue Mar 31 04:50:58.299937 2026] [:error] [pid 18333:tid 18390] [client 74.248.144.184:13590] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acriMkSx2C5hLR0-8dLZeAAAAEs"]
[Tue Mar 31 04:50:59.245449 2026] [:error] [pid 18333:tid 18383] [client 74.248.144.184:27305] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acriM0Sx2C5hLR0-8dLZfQAAAEQ"]
[Tue Mar 31 04:51:00.202144 2026] [:error] [pid 18334:tid 18408] [client 74.248.144.184:4818] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acriNHqQrXLbk1cg3mg0YwAAAII"]
[Tue Mar 31 04:51:01.532230 2026] [:error] [pid 18333:tid 18384] [client 74.248.144.184:40139] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acriNUSx2C5hLR0-8dLZiAAAAEU"]
[Tue Mar 31 04:51:02.374892 2026] [:error] [pid 18439:tid 18468] [client 74.248.144.184:4299] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acriNi-R9nOaA8Xqs7i2VwAAANE"]
[Tue Mar 31 04:51:03.107643 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:40173] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acriNy-R9nOaA8Xqs7i2XwAAAM0"]
[Tue Mar 31 04:51:04.184805 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:27373] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acriOC-R9nOaA8Xqs7i2YQAAANQ"]
[Tue Mar 31 04:51:05.363021 2026] [:error] [pid 18439:tid 18463] [client 74.248.144.184:21312] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acriOS-R9nOaA8Xqs7i2ZQAAAMw"]
[Tue Mar 31 04:51:06.325586 2026] [:error] [pid 18439:tid 18457] [client 74.248.144.184:4863] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acriOi-R9nOaA8Xqs7i2agAAAMY"]
[Tue Mar 31 04:51:08.024391 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:4657] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acriPC-R9nOaA8Xqs7i2cAAAANQ"]
[Tue Mar 31 04:51:09.617505 2026] [:error] [pid 18332:tid 18363] [client 74.248.144.184:41841] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acriPb4KXr1F9raS5GSPbgAAAA8"]
[Tue Mar 31 04:51:10.439374 2026] [:error] [pid 18334:tid 18416] [client 74.248.144.184:19815] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "acriPnqQrXLbk1cg3mg0egAAAIo"]
[Tue Mar 31 04:51:11.303047 2026] [:error] [pid 18334:tid 18422] [client 74.248.144.184:58923] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acriP3qQrXLbk1cg3mg0gwAAAJA"]
[Tue Mar 31 04:51:12.278968 2026] [:error] [pid 18439:tid 18465] [client 74.248.144.184:63726] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acriQC-R9nOaA8Xqs7i2fQAAAM4"]
[Tue Mar 31 04:51:13.491306 2026] [:error] [pid 18439:tid 18464] [client 74.248.144.184:4141] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acriQS-R9nOaA8Xqs7i2iAAAAM0"]
[Tue Mar 31 04:51:15.433105 2026] [:error] [pid 18332:tid 18355] [client 74.248.144.184:13611] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acriQ74KXr1F9raS5GSPdQAAAAc"]
[Tue Mar 31 04:51:18.437290 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:9835] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acriRi-R9nOaA8Xqs7i2lQAAAMQ"]
[Tue Mar 31 04:51:19.414382 2026] [:error] [pid 18334:tid 18425] [client 74.248.144.184:9795] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acriR3qQrXLbk1cg3mg0kwAAAJM"]
[Tue Mar 31 04:51:22.178056 2026] [:error] [pid 18439:tid 18453] [client 74.248.144.184:21324] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acriSi-R9nOaA8Xqs7i2nwAAAMI"]
[Tue Mar 31 04:51:24.130564 2026] [proxy_fcgi:error] [pid 18334:tid 18414] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:24.397937 2026] [proxy_fcgi:error] [pid 18334:tid 18427] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:24.666883 2026] [proxy_fcgi:error] [pid 18334:tid 18428] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:24.925472 2026] [proxy_fcgi:error] [pid 18334:tid 18417] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:25.183340 2026] [proxy_fcgi:error] [pid 18334:tid 18430] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:25.572027 2026] [proxy_fcgi:error] [pid 18334:tid 18425] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:25.850242 2026] [proxy_fcgi:error] [pid 18334:tid 18412] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:26.124676 2026] [proxy_fcgi:error] [pid 18334:tid 18428] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:26.383768 2026] [proxy_fcgi:error] [pid 18334:tid 18429] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:26.653122 2026] [proxy_fcgi:error] [pid 18334:tid 18407] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:27.453314 2026] [proxy_fcgi:error] [pid 18334:tid 18418] [client 74.248.144.184:4345] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:51:27.710419 2026] [:error] [pid 18334:tid 18422] [client 74.248.144.184:4345] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ww.php"] [unique_id "acriT3qQrXLbk1cg3mg0vwAAAJA"]
[Tue Mar 31 04:51:32.474564 2026] [:error] [pid 18333:tid 18403] [client 74.248.144.184:54759] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ww.php"] [unique_id "acriVESx2C5hLR0-8dLZrgAAAFg"]
[Tue Mar 31 04:51:33.352932 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:37890] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ww.php"] [unique_id "acriVS-R9nOaA8Xqs7i2sQAAAMQ"]
[Tue Mar 31 04:51:34.282797 2026] [:error] [pid 18439:tid 18469] [client 74.248.144.184:35919] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ww.php"] [unique_id "acriVi-R9nOaA8Xqs7i2tgAAANI"]
[Tue Mar 31 04:51:36.927782 2026] [:error] [pid 18439:tid 18455] [client 74.248.144.184:18215] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acriWC-R9nOaA8Xqs7i2xgAAAMQ"]
[Tue Mar 31 04:51:38.518033 2026] [:error] [pid 18334:tid 18426] [client 74.248.144.184:21370] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acriWnqQrXLbk1cg3mg02QAAAJQ"]
[Tue Mar 31 04:51:40.825993 2026] [:error] [pid 18439:tid 18468] [client 74.248.144.184:9838] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acriXC-R9nOaA8Xqs7i22wAAANE"]
[Tue Mar 31 04:51:42.469520 2026] [:error] [pid 18334:tid 18420] [client 74.248.144.184:62122] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acriXnqQrXLbk1cg3mg05wAAAI4"]
[Tue Mar 31 04:51:43.508099 2026] [:error] [pid 18334:tid 18429] [client 74.248.144.184:9817] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acriX3qQrXLbk1cg3mg06gAAAJc"]
[Tue Mar 31 04:51:44.122301 2026] [:error] [pid 18333:tid 18389] [client 74.248.144.184:21351] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acriYESx2C5hLR0-8dLZugAAAEo"]
[Tue Mar 31 04:51:45.404429 2026] [:error] [pid 18334:tid 18417] [client 74.248.144.184:4315] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acriYXqQrXLbk1cg3mg08AAAAIs"]
[Tue Mar 31 04:51:46.706463 2026] [:error] [pid 18334:tid 18412] [client 74.248.144.184:62100] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nw.php"] [unique_id "acriYnqQrXLbk1cg3mg08wAAAIY"]
[Tue Mar 31 04:51:48.012404 2026] [:error] [pid 18334:tid 18419] [client 74.248.144.184:33572] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cu.php"] [unique_id "acriZHqQrXLbk1cg3mg09wAAAI0"]
[Tue Mar 31 04:51:49.481011 2026] [:error] [pid 18333:tid 18384] [client 74.248.144.184:21297] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cu.php"] [unique_id "acriZUSx2C5hLR0-8dLZxwAAAEU"]
[Tue Mar 31 04:51:50.500172 2026] [:error] [pid 18439:tid 18466] [client 74.248.144.184:15993] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cu.php"] [unique_id "acriZi-R9nOaA8Xqs7i3FwAAAM8"]
[Tue Mar 31 04:51:51.731940 2026] [:error] [pid 18334:tid 18417] [client 74.248.144.184:15113] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cu.php"] [unique_id "acriZ3qQrXLbk1cg3mg0_gAAAIs"]
[Tue Mar 31 04:51:52.795183 2026] [:error] [pid 18439:tid 18458] [client 74.248.144.184:24393] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acriaC-R9nOaA8Xqs7i3IwAAAMc"]
[Tue Mar 31 04:51:53.642688 2026] [:error] [pid 18334:tid 18413] [client 74.248.144.184:15973] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acriaXqQrXLbk1cg3mg1AwAAAIc"]
[Tue Mar 31 04:51:54.964568 2026] [:error] [pid 18332:tid 18350] [client 74.248.144.184:27307] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acriar4KXr1F9raS5GSPnwAAAAI"]
[Tue Mar 31 04:51:55.774214 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:24428] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/t.php"] [unique_id "acria3qQrXLbk1cg3mg1BgAAAIk"]
[Tue Mar 31 04:51:57.133920 2026] [:error] [pid 18439:tid 18474] [client 74.248.144.184:45466] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "acribS-R9nOaA8Xqs7i3MAAAANc"]
[Tue Mar 31 04:51:58.680205 2026] [:error] [pid 18439:tid 18454] [client 74.248.144.184:31595] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "acribi-R9nOaA8Xqs7i3OQAAAMM"]
[Tue Mar 31 04:51:59.889814 2026] [:error] [pid 18334:tid 18415] [client 74.248.144.184:20326] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "acrib3qQrXLbk1cg3mg1EQAAAIk"]
[Tue Mar 31 04:52:00.819451 2026] [:error] [pid 18332:tid 18366] [client 74.248.144.184:24388] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "acricL4KXr1F9raS5GSPpAAAABI"]
[Tue Mar 31 04:52:04.657716 2026] [:error] [pid 18333:tid 18387] [client 74.248.144.184:15911] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acridESx2C5hLR0-8dLZ3wAAAEg"]
[Tue Mar 31 04:52:06.436478 2026] [:error] [pid 18334:tid 18423] [client 74.248.144.184:58911] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acridnqQrXLbk1cg3mg1IgAAAJE"]
[Tue Mar 31 04:52:08.340862 2026] [:error] [pid 18334:tid 18413] [client 74.248.144.184:45547] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acrieHqQrXLbk1cg3mg1KwAAAIc"]
[Tue Mar 31 04:52:09.907023 2026] [:error] [pid 18439:tid 18459] [client 74.248.144.184:48476] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acrieS-R9nOaA8Xqs7i3XAAAAMg"]
[Tue Mar 31 04:52:11.537878 2026] [:error] [pid 18439:tid 18460] [client 74.248.144.184:40128] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa21.php"] [unique_id "acriey-R9nOaA8Xqs7i3YgAAAMk"]
[Tue Mar 31 04:52:12.719606 2026] [:error] [pid 18334:tid 18425] [client 74.248.144.184:17419] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa21.php"] [unique_id "acrifHqQrXLbk1cg3mg1MwAAAJM"]
[Tue Mar 31 04:52:14.009611 2026] [:error] [pid 18334:tid 18410] [client 74.248.144.184:21278] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa21.php"] [unique_id "acrifnqQrXLbk1cg3mg1NwAAAIQ"]
[Tue Mar 31 04:52:14.829168 2026] [:error] [pid 18333:tid 18381] [client 74.248.144.184:43695] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa21.php"] [unique_id "acrifkSx2C5hLR0-8dLZ8gAAAEI"]
[Tue Mar 31 04:52:15.790132 2026] [:error] [pid 18334:tid 18411] [client 74.248.144.184:46850] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acrif3qQrXLbk1cg3mg1QwAAAIU"]
[Tue Mar 31 04:52:17.827835 2026] [:error] [pid 18333:tid 18395] [client 74.248.144.184:45010] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acrigUSx2C5hLR0-8dLZ9wAAAFA"]
[Tue Mar 31 04:52:19.047707 2026] [:error] [pid 18334:tid 18422] [client 74.248.144.184:24399] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acrig3qQrXLbk1cg3mg1TQAAAJA"]
[Tue Mar 31 04:52:20.321738 2026] [:error] [pid 18439:tid 18463] [client 74.248.144.184:29961] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "acrihC-R9nOaA8Xqs7i3cwAAAMw"]
[Tue Mar 31 04:52:21.623251 2026] [:error] [pid 18332:tid 18356] [client 74.248.144.184:32627] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acrihb4KXr1F9raS5GSPuAAAAAg"]
[Tue Mar 31 04:52:23.655538 2026] [:error] [pid 18439:tid 18471] [client 74.248.144.184:29971] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acrihy-R9nOaA8Xqs7i3gQAAANQ"]
[Tue Mar 31 04:52:24.913444 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:10937] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acriiC-R9nOaA8Xqs7i3iQAAAMU"]
[Tue Mar 31 04:52:25.767305 2026] [:error] [pid 18439:tid 18456] [client 74.248.144.184:42464] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "acriiS-R9nOaA8Xqs7i3kgAAAMU"]
[Tue Mar 31 04:52:26.519673 2026] [:error] [pid 18439:tid 18463] [client 74.248.144.184:47388] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "acriii-R9nOaA8Xqs7i3nQAAAMw"]
[Tue Mar 31 04:52:27.747280 2026] [proxy_fcgi:error] [pid 18334:tid 18414] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:28.340523 2026] [proxy_fcgi:error] [pid 18334:tid 18412] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:28.599369 2026] [proxy_fcgi:error] [pid 18334:tid 18409] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:28.859030 2026] [proxy_fcgi:error] [pid 18334:tid 18428] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:29.115930 2026] [proxy_fcgi:error] [pid 18334:tid 18429] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:29.375651 2026] [proxy_fcgi:error] [pid 18334:tid 18422] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:29.643795 2026] [proxy_fcgi:error] [pid 18334:tid 18419] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:29.907303 2026] [proxy_fcgi:error] [pid 18334:tid 18430] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:30.177098 2026] [proxy_fcgi:error] [pid 18334:tid 18406] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 04:52:30.592948 2026] [proxy_fcgi:error] [pid 18334:tid 18421] [client 74.248.144.184:30991] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:10.004120 2026] [proxy_fcgi:error] [pid 11907:tid 11933] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:10.263095 2026] [proxy_fcgi:error] [pid 11907:tid 11930] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:10.523882 2026] [proxy_fcgi:error] [pid 11907:tid 11921] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:10.784663 2026] [proxy_fcgi:error] [pid 11907:tid 11915] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:11.043386 2026] [proxy_fcgi:error] [pid 11907:tid 11925] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:11.302038 2026] [proxy_fcgi:error] [pid 11907:tid 11927] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:11.560573 2026] [proxy_fcgi:error] [pid 11907:tid 11916] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:11.822543 2026] [proxy_fcgi:error] [pid 11907:tid 11910] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:12.081840 2026] [proxy_fcgi:error] [pid 11907:tid 11926] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:12.342044 2026] [proxy_fcgi:error] [pid 11907:tid 11930] [client 74.248.131.192:21509] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 06:42:12.597958 2026] [:error] [pid 11907:tid 11931] [client 74.248.131.192:21509] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "acr8RMcoKGLZkBF4Ym1d8AAAAhU"]
[Tue Mar 31 06:42:13.107875 2026] [:error] [pid 1224:tid 1229] [client 74.248.131.192:13737] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "acr8RcXGPQPzIHnCuJhMZwAAAQM"]
[Tue Mar 31 06:42:13.635723 2026] [:error] [pid 18334:tid 18428] [client 74.248.131.192:21552] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "acr8RXqQrXLbk1cg3mhjkQAAAJY"]
[Tue Mar 31 06:42:14.155820 2026] [:error] [pid 18333:tid 18396] [client 74.248.131.192:45500] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acr8RkSx2C5hLR0-8dIYugAAAFE"]
[Tue Mar 31 06:42:14.674770 2026] [:error] [pid 18333:tid 18386] [client 74.248.131.192:45498] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acr8RkSx2C5hLR0-8dIYvQAAAEc"]
[Tue Mar 31 06:42:15.186880 2026] [:error] [pid 18334:tid 18420] [client 74.248.131.192:2163] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acr8R3qQrXLbk1cg3mhjlwAAAI4"]
[Tue Mar 31 06:42:15.699677 2026] [:error] [pid 11869:tid 11875] [client 74.248.131.192:13729] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "acr8RxvAVplg9I6KoIIrfwAAAcM"]
[Tue Mar 31 06:42:16.217367 2026] [:error] [pid 18333:tid 18398] [client 74.248.131.192:32711] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acr8SESx2C5hLR0-8dIYxgAAAFM"]
[Tue Mar 31 06:42:16.731776 2026] [:error] [pid 18332:tid 18368] [client 74.248.131.192:30899] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acr8SL4KXr1F9raS5GSpiwAAABQ"]
[Tue Mar 31 06:42:17.242203 2026] [:error] [pid 11786:tid 11800] [client 74.248.131.192:40347] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acr8SU-ANHwuqDZumRDcsgAAAUw"]
[Tue Mar 31 06:42:17.752337 2026] [:error] [pid 11786:tid 11809] [client 74.248.131.192:40333] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "acr8SU-ANHwuqDZumRDctQAAAVU"]
[Tue Mar 31 06:42:18.262118 2026] [:error] [pid 18439:tid 18451] [client 74.248.131.192:2153] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "acr8Si-R9nOaA8Xqs7j0jAAAAMA"]
[Tue Mar 31 06:42:18.774602 2026] [:error] [pid 18333:tid 18380] [client 74.248.131.192:22910] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "acr8SkSx2C5hLR0-8dIY0AAAAEE"]
[Tue Mar 31 06:42:19.309274 2026] [:error] [pid 11822:tid 11847] [client 74.248.131.192:2469] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "acr8SyLLrL4a3YEM2I0PngAAAZc"]
[Tue Mar 31 06:42:19.842447 2026] [:error] [pid 18439:tid 18461] [client 74.248.131.192:31508] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "acr8Sy-R9nOaA8Xqs7j0mQAAAMo"]
[Tue Mar 31 06:42:20.378585 2026] [:error] [pid 18334:tid 18408] [client 74.248.131.192:24564] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-thi.php"] [unique_id "acr8THqQrXLbk1cg3mhjmgAAAII"]
[Tue Mar 31 06:42:20.910492 2026] [:error] [pid 11786:tid 11788] [client 74.248.131.192:2544] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-thi.php"] [unique_id "acr8TE-ANHwuqDZumRDcuQAAAUA"]
[Tue Mar 31 06:42:21.420991 2026] [:error] [pid 11786:tid 11804] [client 74.248.131.192:27606] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-thi.php"] [unique_id "acr8TU-ANHwuqDZumRDcvAAAAVA"]
[Tue Mar 31 06:42:21.932430 2026] [:error] [pid 11822:tid 11828] [client 74.248.131.192:10058] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-thi.php"] [unique_id "acr8TSLLrL4a3YEM2I0PpAAAAYQ"]
[Tue Mar 31 06:42:22.498010 2026] [:error] [pid 11869:tid 11883] [client 74.248.131.192:2558] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acr8ThvAVplg9I6KoIIriwAAAcs"]
[Tue Mar 31 06:42:23.008588 2026] [:error] [pid 11869:tid 11893] [client 74.248.131.192:2169] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acr8TxvAVplg9I6KoIIrjQAAAdU"]
[Tue Mar 31 06:42:23.523945 2026] [:error] [pid 11822:tid 11831] [client 74.248.131.192:25653] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acr8TyLLrL4a3YEM2I0PqAAAAYc"]
[Tue Mar 31 06:42:24.036951 2026] [:error] [pid 11786:tid 11793] [client 74.248.131.192:35389] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acr8UE-ANHwuqDZumRDcvwAAAUU"]
[Tue Mar 31 06:42:24.547641 2026] [:error] [pid 18332:tid 18373] [client 74.248.131.192:25651] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acr8UL4KXr1F9raS5GSplgAAABg"]
[Tue Mar 31 06:42:25.057362 2026] [:error] [pid 1224:tid 1240] [client 74.248.131.192:2935] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acr8UcXGPQPzIHnCuJhMdAAAAQ4"]
[Tue Mar 31 06:42:25.574644 2026] [:error] [pid 18333:tid 18386] [client 74.248.131.192:24515] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acr8UUSx2C5hLR0-8dIY2QAAAEc"]
[Tue Mar 31 06:42:26.084065 2026] [:error] [pid 18334:tid 18430] [client 74.248.131.192:24055] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "acr8UnqQrXLbk1cg3mhjogAAAJg"]
[Tue Mar 31 06:42:26.595454 2026] [:error] [pid 18333:tid 18384] [client 74.248.131.192:31549] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "acr8UkSx2C5hLR0-8dIY3gAAAEU"]
[Tue Mar 31 06:42:27.113127 2026] [:error] [pid 11907:tid 11925] [client 74.248.131.192:24103] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acr8U8coKGLZkBF4Ym1d_wAAAg8"]
[Tue Mar 31 06:42:27.646896 2026] [:error] [pid 18334:tid 18419] [client 74.248.131.192:10074] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acr8U3qQrXLbk1cg3mhjpQAAAI0"]
[Tue Mar 31 06:42:28.157110 2026] [:error] [pid 18334:tid 18421] [client 74.248.131.192:24011] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acr8VHqQrXLbk1cg3mhjpgAAAI8"]
[Tue Mar 31 06:42:28.667181 2026] [:error] [pid 18333:tid 18384] [client 74.248.131.192:23655] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acr8VESx2C5hLR0-8dIY5wAAAEU"]
[Tue Mar 31 06:42:29.180829 2026] [:error] [pid 11907:tid 11917] [client 74.248.131.192:2496] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acr8VccoKGLZkBF4Ym1eAgAAAgc"]
[Tue Mar 31 06:42:29.698019 2026] [:error] [pid 11822:tid 11844] [client 74.248.131.192:25603] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acr8VSLLrL4a3YEM2I0PvAAAAZQ"]
[Tue Mar 31 06:42:30.208329 2026] [:error] [pid 11907:tid 11911] [client 74.248.131.192:32071] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acr8VscoKGLZkBF4Ym1eAwAAAgE"]
[Tue Mar 31 06:42:30.718369 2026] [:error] [pid 11907:tid 11916] [client 74.248.131.192:2987] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acr8VscoKGLZkBF4Ym1eBAAAAgY"]
[Tue Mar 31 06:42:31.230749 2026] [:error] [pid 1224:tid 1242] [client 74.248.131.192:10106] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8pewqMTX.php"] [unique_id "acr8V8XGPQPzIHnCuJhMfQAAARA"]
[Tue Mar 31 06:42:31.748582 2026] [:error] [pid 1224:tid 1237] [client 74.248.131.192:40290] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "acr8V8XGPQPzIHnCuJhMgQAAAQs"]
[Tue Mar 31 06:42:32.259014 2026] [:error] [pid 11907:tid 11931] [client 74.248.131.192:2950] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "acr8WMcoKGLZkBF4Ym1eCgAAAhU"]
[Tue Mar 31 06:42:32.770281 2026] [:error] [pid 18439:tid 18463] [client 74.248.131.192:29617] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "acr8WC-R9nOaA8Xqs7j0sAAAAMw"]
[Tue Mar 31 06:42:33.291785 2026] [:error] [pid 18334:tid 18424] [client 74.248.131.192:24118] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "acr8WXqQrXLbk1cg3mhjsAAAAJI"]
[Tue Mar 31 09:46:58.839746 2026] [:error] [pid 36890:tid 36918] [client 4.204.246.56:48073] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsnkp8FASPd_uH8z7dh1QAAABc"]
[Tue Mar 31 09:46:59.298421 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:48118] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsnkxSaDjY9kKFtUQCKgQAAARM"]
[Tue Mar 31 09:46:59.770097 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:48013] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsnk_lMmeoQKN0r_GOqTAAAAMo"]
[Tue Mar 31 09:47:00.230082 2026] [:error] [pid 36982:tid 37004] [client 4.204.246.56:48126] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsnlPlMmeoQKN0r_GOqTgAAANM"]
[Tue Mar 31 09:49:17.378428 2026] [proxy_fcgi:error] [pid 36892:tid 36956] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:17.619522 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:17.861611 2026] [proxy_fcgi:error] [pid 36892:tid 36964] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:18.104224 2026] [proxy_fcgi:error] [pid 36892:tid 36966] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:18.344209 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:18.586433 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:18.829670 2026] [proxy_fcgi:error] [pid 36892:tid 36963] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:19.076156 2026] [proxy_fcgi:error] [pid 36892:tid 36970] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:20.956961 2026] [proxy_fcgi:error] [pid 36892:tid 36960] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:21.198861 2026] [proxy_fcgi:error] [pid 36892:tid 36974] [client 20.216.179.254:14265] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:49:21.437449 2026] [:error] [pid 36892:tid 36959] [client 20.216.179.254:14265] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acsoIUyj9S4G0ek3O4LixQAAAIg"]
[Tue Mar 31 09:49:21.933024 2026] [:error] [pid 36892:tid 36956] [client 20.216.179.254:11173] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acsoIUyj9S4G0ek3O4LixwAAAIU"]
[Tue Mar 31 09:49:22.419906 2026] [:error] [pid 36892:tid 36966] [client 20.216.179.254:11181] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acsoIkyj9S4G0ek3O4LiyQAAAI8"]
[Tue Mar 31 09:49:22.907584 2026] [:error] [pid 6548:tid 6556] [client 20.216.179.254:7502] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "acsoIrgIz9HgMl9YwE6qjQAAAUY"]
[Tue Mar 31 09:49:23.426573 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:22524] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acsoI7gIz9HgMl9YwE6qkAAAAUw"]
[Tue Mar 31 09:49:23.902838 2026] [:error] [pid 36891:tid 36931] [client 20.216.179.254:25079] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acsoI5JhiMaJUqoqfl5EQAAAAEc"]
[Tue Mar 31 09:49:24.386444 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:19763] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acsoJLgIz9HgMl9YwE6qlAAAAU4"]
[Tue Mar 31 09:49:24.863459 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:34304] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "acsoJPlMmeoQKN0r_GOsYAAAAM8"]
[Tue Mar 31 09:49:25.352039 2026] [:error] [pid 41421:tid 41433] [client 20.216.179.254:7404] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acsoJRSaDjY9kKFtUQCL1QAAAQk"]
[Tue Mar 31 09:49:25.828474 2026] [:error] [pid 36891:tid 36933] [client 20.216.179.254:32798] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acsoJZJhiMaJUqoqfl5ERgAAAEk"]
[Tue Mar 31 09:49:26.312412 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:14588] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acsoJvlMmeoQKN0r_GOsZgAAAMg"]
[Tue Mar 31 09:49:26.808950 2026] [:error] [pid 36891:tid 36930] [client 20.216.179.254:39718] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "acsoJpJhiMaJUqoqfl5ESAAAAEY"]
[Tue Mar 31 09:49:27.283876 2026] [:error] [pid 36891:tid 36944] [client 20.216.179.254:9718] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acsoJ5JhiMaJUqoqfl5ETAAAAFQ"]
[Tue Mar 31 09:49:27.759169 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:14221] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acsoJ_lMmeoQKN0r_GOsbAAAANE"]
[Tue Mar 31 09:49:28.260976 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:26061] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acsoKEyj9S4G0ek3O4Li0AAAAIc"]
[Tue Mar 31 09:49:28.745721 2026] [:error] [pid 36891:tid 36946] [client 20.216.179.254:11183] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "acsoKJJhiMaJUqoqfl5ETgAAAFY"]
[Tue Mar 31 09:49:29.221615 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:8852] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acsoKflMmeoQKN0r_GOscwAAAMA"]
[Tue Mar 31 09:49:29.702523 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:26065] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acsoKRSaDjY9kKFtUQCL4QAAARY"]
[Tue Mar 31 09:49:30.183871 2026] [:error] [pid 36892:tid 36963] [client 20.216.179.254:34377] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acsoKkyj9S4G0ek3O4Li1QAAAIw"]
[Tue Mar 31 09:49:30.668274 2026] [:error] [pid 6548:tid 6569] [client 20.216.179.254:13489] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "acsoKrgIz9HgMl9YwE6qnwAAAVM"]
[Tue Mar 31 09:49:31.153479 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:34431] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acsoK0yj9S4G0ek3O4Li1wAAAIA"]
[Tue Mar 31 09:49:31.640516 2026] [:error] [pid 6548:tid 6563] [client 20.216.179.254:56786] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acsoK7gIz9HgMl9YwE6qoAAAAU0"]
[Tue Mar 31 09:49:32.141843 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:13477] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acsoLLgIz9HgMl9YwE6qoQAAAVA"]
[Tue Mar 31 09:49:32.646920 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:11148] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "acsoLPlMmeoQKN0r_GOsgAAAAMw"]
[Tue Mar 31 09:49:33.148551 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:27115] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "acsoLflMmeoQKN0r_GOshQAAANQ"]
[Tue Mar 31 09:49:33.641709 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:11196] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "acsoLflMmeoQKN0r_GOshwAAAME"]
[Tue Mar 31 09:49:34.122672 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:34403] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "acsoLrgIz9HgMl9YwE6qqgAAAU4"]
[Tue Mar 31 09:49:34.616831 2026] [:error] [pid 41421:tid 41447] [client 20.216.179.254:11171] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "acsoLhSaDjY9kKFtUQCL6gAAARc"]
[Tue Mar 31 09:49:35.099924 2026] [:error] [pid 36982:tid 37003] [client 20.216.179.254:34983] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "acsoL_lMmeoQKN0r_GOsjAAAANI"]
[Tue Mar 31 09:49:35.577430 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:7593] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "acsoL_lMmeoQKN0r_GOsjwAAANE"]
[Tue Mar 31 09:49:36.048798 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:32783] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "acsoMPlMmeoQKN0r_GOslAAAANc"]
[Tue Mar 31 09:49:36.528198 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:39703] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "acsoMPlMmeoQKN0r_GOslgAAAMA"]
[Tue Mar 31 09:49:37.019932 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:26050] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acsoMflMmeoQKN0r_GOsnAAAAMo"]
[Tue Mar 31 09:49:37.522899 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:26079] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acsoMbgIz9HgMl9YwE6qrgAAAVU"]
[Tue Mar 31 09:49:38.017474 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:54151] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acsoMvlMmeoQKN0r_GOsogAAANE"]
[Tue Mar 31 09:49:38.496051 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:33828] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "acsoMrgIz9HgMl9YwE6qsQAAAUg"]
[Tue Mar 31 09:49:38.972731 2026] [:error] [pid 6548:tid 6565] [client 20.216.179.254:21439] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acsoMrgIz9HgMl9YwE6qswAAAU8"]
[Tue Mar 31 09:49:39.451606 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:34389] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acsoMxSaDjY9kKFtUQCL-AAAAQY"]
[Tue Mar 31 09:49:39.934472 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:17331] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acsoM_lMmeoQKN0r_GOsrAAAAMI"]
[Tue Mar 31 09:49:40.426297 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:27133] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "acsoNJ8FASPd_uH8z7di7wAAAAU"]
[Tue Mar 31 09:49:40.909984 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:33797] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acsoNLgIz9HgMl9YwE6qtgAAAVY"]
[Tue Mar 31 09:49:41.392925 2026] [:error] [pid 36891:tid 36930] [client 20.216.179.254:20861] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acsoNZJhiMaJUqoqfl5EUwAAAEY"]
[Tue Mar 31 09:49:41.882046 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:34395] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acsoNbgIz9HgMl9YwE6quAAAAVg"]
[Tue Mar 31 09:49:42.367452 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:44644] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "acsoNhSaDjY9kKFtUQCMAgAAARI"]
[Tue Mar 31 09:49:42.850597 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:19200] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acsoNrgIz9HgMl9YwE6quQAAAVU"]
[Tue Mar 31 09:49:43.327672 2026] [:error] [pid 6548:tid 6559] [client 20.216.179.254:10422] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acsoN7gIz9HgMl9YwE6quwAAAUk"]
[Tue Mar 31 09:49:43.802817 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:7559] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acsoN7gIz9HgMl9YwE6qvgAAAVI"]
[Tue Mar 31 09:49:44.275769 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:50635] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "acsoOPlMmeoQKN0r_GOsuAAAAME"]
[Tue Mar 31 09:49:44.752392 2026] [:error] [pid 41421:tid 41443] [client 20.216.179.254:17307] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acsoOBSaDjY9kKFtUQCMCQAAARM"]
[Tue Mar 31 09:49:45.234363 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:20859] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acsoOUyj9S4G0ek3O4Li3gAAAIA"]
[Tue Mar 31 09:49:45.729331 2026] [:error] [pid 41421:tid 41428] [client 20.216.179.254:39194] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acsoORSaDjY9kKFtUQCMDgAAAQQ"]
[Tue Mar 31 09:49:46.216845 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:50654] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "acsoOhSaDjY9kKFtUQCMEQAAAQg"]
[Tue Mar 31 09:49:46.698765 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:60040] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acsoOp8FASPd_uH8z7di9QAAAA4"]
[Tue Mar 31 09:49:47.222671 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:12433] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acsoO7gIz9HgMl9YwE6qxAAAAUE"]
[Tue Mar 31 09:49:47.705820 2026] [:error] [pid 36892:tid 36969] [client 20.216.179.254:54171] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acsoO0yj9S4G0ek3O4Li4QAAAJI"]
[Tue Mar 31 09:49:48.183385 2026] [:error] [pid 36892:tid 36972] [client 20.216.179.254:12430] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acsoPEyj9S4G0ek3O4Li4gAAAJU"]
[Tue Mar 31 09:49:48.665518 2026] [:error] [pid 36892:tid 36954] [client 20.216.179.254:33818] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acsoPEyj9S4G0ek3O4Li4wAAAIM"]
[Tue Mar 31 09:49:49.154404 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:50652] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acsoPflMmeoQKN0r_GOsvAAAAME"]
[Tue Mar 31 09:49:49.635284 2026] [:error] [pid 36892:tid 36966] [client 20.216.179.254:28131] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acsoPUyj9S4G0ek3O4Li5wAAAI8"]
[Tue Mar 31 09:49:50.110104 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:44626] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acsoPvlMmeoQKN0r_GOsvwAAANY"]
[Tue Mar 31 09:49:50.598769 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:28098] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acsoPvlMmeoQKN0r_GOswwAAANE"]
[Tue Mar 31 09:49:51.070794 2026] [:error] [pid 36890:tid 36915] [client 20.216.179.254:52340] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acsoP58FASPd_uH8z7di-gAAABQ"]
[Tue Mar 31 09:49:51.565384 2026] [:error] [pid 36891:tid 36926] [client 20.216.179.254:10400] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acsoP5JhiMaJUqoqfl5EXAAAAEI"]
[Tue Mar 31 09:49:52.048279 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:19217] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "acsoQLgIz9HgMl9YwE6q0AAAAUw"]
[Tue Mar 31 09:49:52.531719 2026] [:error] [pid 36892:tid 36961] [client 20.216.179.254:15924] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "acsoQEyj9S4G0ek3O4Li6gAAAIo"]
[Tue Mar 31 09:49:53.011630 2026] [:error] [pid 36891:tid 36938] [client 20.216.179.254:15917] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "acsoQZJhiMaJUqoqfl5EXwAAAE4"]
[Tue Mar 31 09:49:53.492183 2026] [:error] [pid 36891:tid 36942] [client 20.216.179.254:17340] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "acsoQZJhiMaJUqoqfl5EYQAAAFI"]
[Tue Mar 31 09:49:53.982186 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:23427] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "acsoQUyj9S4G0ek3O4Li7wAAAIA"]
[Tue Mar 31 09:49:54.459652 2026] [:error] [pid 6548:tid 6550] [client 20.216.179.254:10424] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acsoQrgIz9HgMl9YwE6q0gAAAUA"]
[Tue Mar 31 09:49:54.940478 2026] [:error] [pid 36892:tid 36956] [client 20.216.179.254:50627] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acsoQkyj9S4G0ek3O4Li8QAAAIU"]
[Tue Mar 31 09:49:55.418722 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:20816] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acsoQ58FASPd_uH8z7di_wAAAAc"]
[Tue Mar 31 09:49:55.895911 2026] [:error] [pid 41421:tid 41438] [client 20.216.179.254:8125] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "acsoQxSaDjY9kKFtUQCMIgAAAQ4"]
[Tue Mar 31 09:49:56.384785 2026] [:error] [pid 36892:tid 36963] [client 20.216.179.254:17312] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acsoREyj9S4G0ek3O4Li-QAAAIw"]
[Tue Mar 31 09:49:56.866615 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:8078] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acsoRJ8FASPd_uH8z7djAwAAAAQ"]
[Tue Mar 31 09:49:57.346326 2026] [:error] [pid 36891:tid 36930] [client 20.216.179.254:8386] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acsoRZJhiMaJUqoqfl5EZgAAAEY"]
[Tue Mar 31 09:49:57.833962 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:12461] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "acsoRflMmeoQKN0r_GOszQAAAMc"]
[Tue Mar 31 09:49:58.322858 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:23474] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acsoRvlMmeoQKN0r_GOszgAAANE"]
[Tue Mar 31 09:49:58.823736 2026] [:error] [pid 6548:tid 6573] [client 20.216.179.254:2871] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acsoRrgIz9HgMl9YwE6q1wAAAVc"]
[Tue Mar 31 09:49:59.309614 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:60046] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acsoR_lMmeoQKN0r_GOs0gAAAMs"]
[Tue Mar 31 09:49:59.786278 2026] [:error] [pid 36891:tid 36924] [client 20.216.179.254:2451] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/56c53.php"] [unique_id "acsoR5JhiMaJUqoqfl5EZwAAAEA"]
[Tue Mar 31 09:50:00.269863 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:8440] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acsoSLgIz9HgMl9YwE6q3AAAAUs"]
[Tue Mar 31 09:50:00.743352 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:60089] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acsoSLgIz9HgMl9YwE6q3wAAAVQ"]
[Tue Mar 31 09:50:01.226180 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:2194] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acsoSflMmeoQKN0r_GOs2gAAAMw"]
[Tue Mar 31 09:50:01.710780 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:35687] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "acsoSflMmeoQKN0r_GOs4QAAAMo"]
[Tue Mar 31 09:50:02.197575 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:60054] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "acsoSvlMmeoQKN0r_GOs5QAAAMA"]
[Tue Mar 31 09:50:02.718097 2026] [:error] [pid 36891:tid 36940] [client 20.216.179.254:20351] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "acsoSpJhiMaJUqoqfl5EaQAAAFA"]
[Tue Mar 31 09:50:03.208936 2026] [:error] [pid 36891:tid 36942] [client 20.216.179.254:23473] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "acsoS5JhiMaJUqoqfl5EawAAAFI"]
[Tue Mar 31 09:50:03.684602 2026] [:error] [pid 36892:tid 36975] [client 20.216.179.254:2197] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "acsoS0yj9S4G0ek3O4Li_wAAAJg"]
[Tue Mar 31 09:50:04.167549 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:12457] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acsoTEyj9S4G0ek3O4LjAwAAAIc"]
[Tue Mar 31 09:50:04.660546 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:15583] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acsoTPlMmeoQKN0r_GOs7AAAAMA"]
[Tue Mar 31 09:50:05.140178 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:33828] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acsoTflMmeoQKN0r_GOs8AAAANM"]
[Tue Mar 31 09:50:05.629583 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:54894] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "acsoTflMmeoQKN0r_GOs9AAAAMs"]
[Tue Mar 31 09:50:06.111682 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:10410] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acsoTvlMmeoQKN0r_GOs9gAAANc"]
[Tue Mar 31 09:50:06.588520 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:8415] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acsoTvlMmeoQKN0r_GOs-AAAAMY"]
[Tue Mar 31 09:50:07.060210 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:40352] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acsoTxSaDjY9kKFtUQCMLgAAAQo"]
[Tue Mar 31 09:50:07.538766 2026] [:error] [pid 41421:tid 41440] [client 20.216.179.254:40321] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bo.php"] [unique_id "acsoTxSaDjY9kKFtUQCMMAAAARA"]
[Tue Mar 31 09:50:08.023120 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:20282] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acsoUPlMmeoQKN0r_GOtAwAAAM4"]
[Tue Mar 31 09:50:08.516410 2026] [:error] [pid 36892:tid 36959] [client 20.216.179.254:2435] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acsoUEyj9S4G0ek3O4LjBQAAAIg"]
[Tue Mar 31 09:50:08.990883 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:7646] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acsoULgIz9HgMl9YwE6q5wAAAUs"]
[Tue Mar 31 09:50:09.476759 2026] [:error] [pid 6548:tid 6573] [client 20.216.179.254:40381] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5b9ac.php"] [unique_id "acsoUbgIz9HgMl9YwE6q6AAAAVc"]
[Tue Mar 31 09:50:09.969626 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:7842] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acsoUUyj9S4G0ek3O4LjBwAAAIk"]
[Tue Mar 31 09:50:10.463650 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:31512] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acsoUrgIz9HgMl9YwE6q8QAAAUs"]
[Tue Mar 31 09:50:10.956865 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:54267] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acsoUvlMmeoQKN0r_GOtDAAAANU"]
[Tue Mar 31 09:50:11.441782 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:10710] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acsoU_lMmeoQKN0r_GOtEAAAAMw"]
[Tue Mar 31 09:50:11.940873 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:20224] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acsoU_lMmeoQKN0r_GOtFAAAAMc"]
[Tue Mar 31 09:50:12.416284 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:20278] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acsoVPlMmeoQKN0r_GOtFwAAAMw"]
[Tue Mar 31 09:50:12.910945 2026] [:error] [pid 36982:tid 37003] [client 20.216.179.254:37931] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acsoVPlMmeoQKN0r_GOtGgAAANI"]
[Tue Mar 31 09:50:13.393394 2026] [:error] [pid 36891:tid 36943] [client 20.216.179.254:15569] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acsoVZJhiMaJUqoqfl5EeAAAAFM"]
[Tue Mar 31 09:50:13.874088 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:7813] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acsoVZ8FASPd_uH8z7djEQAAAAc"]
[Tue Mar 31 09:50:14.350631 2026] [:error] [pid 36890:tid 36896] [client 20.216.179.254:31541] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acsoVp8FASPd_uH8z7djEwAAAAE"]
[Tue Mar 31 09:50:14.823597 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:54260] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acsoVvlMmeoQKN0r_GOtIQAAANE"]
[Tue Mar 31 09:50:15.320202 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:7808] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acsoV_lMmeoQKN0r_GOtKAAAAMs"]
[Tue Mar 31 09:50:15.805085 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:9178] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acsoV_lMmeoQKN0r_GOtLgAAANQ"]
[Tue Mar 31 09:50:16.293550 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:16847] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acsoWJ8FASPd_uH8z7djFgAAAAI"]
[Tue Mar 31 09:50:16.774070 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:37934] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acsoWPlMmeoQKN0r_GOtNQAAAMc"]
[Tue Mar 31 09:50:17.245118 2026] [:error] [pid 36890:tid 36903] [client 20.216.179.254:2518] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx78.php"] [unique_id "acsoWZ8FASPd_uH8z7djGgAAAAg"]
[Tue Mar 31 09:50:17.735592 2026] [:error] [pid 36982:tid 37004] [client 20.216.179.254:43304] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acsoWflMmeoQKN0r_GOtOgAAANM"]
[Tue Mar 31 09:50:18.227364 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:45171] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acsoWhSaDjY9kKFtUQCMRgAAARY"]
[Tue Mar 31 09:50:18.709318 2026] [:error] [pid 36890:tid 36905] [client 20.216.179.254:37950] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acsoWp8FASPd_uH8z7djHQAAAAo"]
[Tue Mar 31 09:50:19.184892 2026] [:error] [pid 36891:tid 36933] [client 20.216.179.254:42704] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "acsoW5JhiMaJUqoqfl5EfgAAAEk"]
[Tue Mar 31 09:50:19.673462 2026] [:error] [pid 36892:tid 36956] [client 20.216.179.254:16848] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acsoW0yj9S4G0ek3O4LjDwAAAIU"]
[Tue Mar 31 09:50:20.156171 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:2507] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acsoXJ8FASPd_uH8z7djIAAAAAU"]
[Tue Mar 31 09:50:20.646133 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:9200] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acsoXEyj9S4G0ek3O4LjEQAAAIk"]
[Tue Mar 31 09:50:21.128696 2026] [proxy_fcgi:error] [pid 36982:tid 36991] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:21.371871 2026] [proxy_fcgi:error] [pid 36982:tid 37007] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:21.611914 2026] [proxy_fcgi:error] [pid 36982:tid 36986] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:21.853103 2026] [proxy_fcgi:error] [pid 36982:tid 37002] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:22.099546 2026] [proxy_fcgi:error] [pid 36982:tid 36998] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:22.340783 2026] [proxy_fcgi:error] [pid 36982:tid 37007] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:22.581163 2026] [proxy_fcgi:error] [pid 36982:tid 37001] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:23.067359 2026] [proxy_fcgi:error] [pid 36982:tid 36990] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:23.323458 2026] [proxy_fcgi:error] [pid 36982:tid 36997] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:23.567174 2026] [proxy_fcgi:error] [pid 36982:tid 36996] [client 20.216.179.254:43339] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:50:23.807001 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:43339] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "acsoX_lMmeoQKN0r_GOtXAAAAM4"]
[Tue Mar 31 09:50:24.318073 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:40334] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "acsoYPlMmeoQKN0r_GOtXwAAANA"]
[Tue Mar 31 09:50:24.809389 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:10886] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "acsoYEyj9S4G0ek3O4LjFAAAAIs"]
[Tue Mar 31 09:50:25.291438 2026] [:error] [pid 41421:tid 41426] [client 20.216.179.254:16854] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "acsoYRSaDjY9kKFtUQCMYAAAAQI"]
[Tue Mar 31 09:50:25.783782 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:43273] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acsoYflMmeoQKN0r_GOtaAAAAMg"]
[Tue Mar 31 09:50:26.279218 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:43367] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acsoYhSaDjY9kKFtUQCMZgAAAQY"]
[Tue Mar 31 09:50:26.769357 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:15597] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acsoYhSaDjY9kKFtUQCMagAAARg"]
[Tue Mar 31 09:50:27.254418 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:43338] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/install.php"] [unique_id "acsoY_lMmeoQKN0r_GOtbwAAAMc"]
[Tue Mar 31 09:50:27.726331 2026] [:error] [pid 36892:tid 36970] [client 20.216.179.254:15602] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acsoY0yj9S4G0ek3O4LjGgAAAJM"]
[Tue Mar 31 09:50:28.205784 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:56092] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acsoZPlMmeoQKN0r_GOtcwAAAMM"]
[Tue Mar 31 09:50:28.684310 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:10902] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acsoZPlMmeoQKN0r_GOteAAAAM4"]
[Tue Mar 31 09:50:29.155008 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:56089] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maul.php"] [unique_id "acsoZflMmeoQKN0r_GOtewAAAMc"]
[Tue Mar 31 09:50:29.630324 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:12973] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acsoZflMmeoQKN0r_GOtgwAAAMk"]
[Tue Mar 31 09:50:30.106941 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:37894] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acsoZvlMmeoQKN0r_GOtiQAAANg"]
[Tue Mar 31 09:50:30.590952 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:56125] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acsoZvlMmeoQKN0r_GOtjQAAAM0"]
[Tue Mar 31 09:50:31.064138 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:48647] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "acsoZ_lMmeoQKN0r_GOtjwAAANE"]
[Tue Mar 31 09:50:31.557925 2026] [:error] [pid 6548:tid 6560] [client 20.216.179.254:40361] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acsoZ7gIz9HgMl9YwE6rDAAAAUo"]
[Tue Mar 31 09:50:32.051636 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:12976] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acsoaPlMmeoQKN0r_GOtkwAAANg"]
[Tue Mar 31 09:50:32.541717 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:12977] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acsoaBSaDjY9kKFtUQCMewAAAQY"]
[Tue Mar 31 09:50:33.026888 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:16894] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acsoaflMmeoQKN0r_GOtlgAAAMI"]
[Tue Mar 31 09:50:33.521813 2026] [:error] [pid 36891:tid 36937] [client 20.216.179.254:48693] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acsoaZJhiMaJUqoqfl5EowAAAE0"]
[Tue Mar 31 09:50:34.008972 2026] [:error] [pid 41421:tid 41440] [client 20.216.179.254:40343] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acsoahSaDjY9kKFtUQCMfQAAARA"]
[Tue Mar 31 09:50:34.483868 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:48697] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acsoargIz9HgMl9YwE6rHAAAAUs"]
[Tue Mar 31 09:50:34.962966 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:43371] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "acsoargIz9HgMl9YwE6rIwAAAVE"]
[Tue Mar 31 09:50:35.451491 2026] [:error] [pid 6548:tid 6569] [client 20.216.179.254:27034] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "acsoa7gIz9HgMl9YwE6rJgAAAVM"]
[Tue Mar 31 09:50:35.936067 2026] [:error] [pid 36890:tid 36913] [client 20.216.179.254:16850] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "acsoa58FASPd_uH8z7djNgAAABI"]
[Tue Mar 31 09:50:36.418322 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:48662] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "acsobPlMmeoQKN0r_GOtoQAAANU"]
[Tue Mar 31 09:50:36.900796 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:43358] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "acsobPlMmeoQKN0r_GOtpQAAAMI"]
[Tue Mar 31 09:50:37.385977 2026] [:error] [pid 41421:tid 41426] [client 20.216.179.254:16871] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acsobRSaDjY9kKFtUQCMfwAAAQI"]
[Tue Mar 31 09:50:37.860757 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:37944] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acsobbgIz9HgMl9YwE6rKwAAAVg"]
[Tue Mar 31 09:50:38.342363 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:12504] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acsobvlMmeoQKN0r_GOtqgAAANQ"]
[Tue Mar 31 09:50:38.816056 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:12945] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acsobrgIz9HgMl9YwE6rLgAAAVE"]
[Tue Mar 31 09:50:39.290707 2026] [:error] [pid 36892:tid 36961] [client 20.216.179.254:43328] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acsob0yj9S4G0ek3O4LjLQAAAIo"]
[Tue Mar 31 09:50:39.775337 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:56127] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acsob7gIz9HgMl9YwE6rMQAAAVA"]
[Tue Mar 31 09:50:40.255740 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:11490] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acsocLgIz9HgMl9YwE6rNAAAAVE"]
[Tue Mar 31 09:50:40.733102 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:14504] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "acsocLgIz9HgMl9YwE6rOAAAAUg"]
[Tue Mar 31 09:50:41.208347 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:14476] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acsocZ8FASPd_uH8z7djPAAAAAs"]
[Tue Mar 31 09:50:41.695100 2026] [:error] [pid 36891:tid 36927] [client 20.216.179.254:2496] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acsocZJhiMaJUqoqfl5ErQAAAEM"]
[Tue Mar 31 09:50:42.166443 2026] [:error] [pid 36890:tid 36912] [client 20.216.179.254:30870] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acsocp8FASPd_uH8z7djQAAAABE"]
[Tue Mar 31 09:50:42.642976 2026] [:error] [pid 36890:tid 36902] [client 20.216.179.254:57223] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hehe.php"] [unique_id "acsocp8FASPd_uH8z7djQgAAAAc"]
[Tue Mar 31 09:50:43.113921 2026] [:error] [pid 36890:tid 36913] [client 20.216.179.254:40371] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acsoc58FASPd_uH8z7djRQAAABI"]
[Tue Mar 31 09:50:43.589691 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:30858] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acsoc7gIz9HgMl9YwE6rQAAAAVE"]
[Tue Mar 31 09:50:44.065412 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:40359] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acsodLgIz9HgMl9YwE6rQgAAAUs"]
[Tue Mar 31 09:50:44.547786 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:40374] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acsodPlMmeoQKN0r_GOttAAAAMM"]
[Tue Mar 31 09:50:45.032104 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:27008] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acsodZ8FASPd_uH8z7djSQAAAAU"]
[Tue Mar 31 09:50:45.519249 2026] [:error] [pid 36982:tid 36995] [client 20.216.179.254:37945] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acsodflMmeoQKN0r_GOtvgAAAMo"]
[Tue Mar 31 09:50:46.011183 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:37912] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acsodrgIz9HgMl9YwE6rSAAAAUM"]
[Tue Mar 31 09:50:46.492642 2026] [:error] [pid 6548:tid 6569] [client 20.216.179.254:27067] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "acsodrgIz9HgMl9YwE6rSgAAAVM"]
[Tue Mar 31 09:50:46.990931 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:7168] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acsodhSaDjY9kKFtUQCMhgAAARI"]
[Tue Mar 31 09:50:47.475510 2026] [:error] [pid 6548:tid 6565] [client 20.216.179.254:30865] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acsod7gIz9HgMl9YwE6rTAAAAU8"]
[Tue Mar 31 09:50:47.950897 2026] [:error] [pid 6548:tid 6573] [client 20.216.179.254:2556] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acsod7gIz9HgMl9YwE6rTgAAAVc"]
[Tue Mar 31 09:50:48.426364 2026] [:error] [pid 36892:tid 36969] [client 20.216.179.254:30872] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws73.php"] [unique_id "acsoeEyj9S4G0ek3O4LjQQAAAJI"]
[Tue Mar 31 09:50:48.904630 2026] [:error] [pid 6548:tid 6556] [client 20.216.179.254:49292] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acsoeLgIz9HgMl9YwE6rUQAAAUY"]
[Tue Mar 31 09:50:49.378688 2026] [:error] [pid 6548:tid 6553] [client 20.216.179.254:11181] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acsoebgIz9HgMl9YwE6rUwAAAUM"]
[Tue Mar 31 09:50:49.854009 2026] [:error] [pid 6548:tid 6560] [client 20.216.179.254:2525] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acsoebgIz9HgMl9YwE6rVQAAAUo"]
[Tue Mar 31 09:50:50.328021 2026] [:error] [pid 6548:tid 6554] [client 20.216.179.254:43361] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "acsoergIz9HgMl9YwE6rWgAAAUQ"]
[Tue Mar 31 09:50:50.812001 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:16866] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acsoevlMmeoQKN0r_GOt0gAAANU"]
[Tue Mar 31 09:50:51.299137 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:16840] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acsoe58FASPd_uH8z7djWAAAAAQ"]
[Tue Mar 31 09:50:51.775415 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:2558] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acsoe_lMmeoQKN0r_GOt1gAAAM0"]
[Tue Mar 31 09:50:52.262002 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:7828] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "acsofJ8FASPd_uH8z7djWgAAAAI"]
[Tue Mar 31 09:50:52.737315 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:7227] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acsofLgIz9HgMl9YwE6rZQAAAUw"]
[Tue Mar 31 09:50:53.221600 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:15562] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acsofflMmeoQKN0r_GOt3wAAAMk"]
[Tue Mar 31 09:50:53.700348 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:7828] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acsofRSaDjY9kKFtUQCMjAAAARE"]
[Tue Mar 31 09:50:54.173305 2026] [:error] [pid 41421:tid 41439] [client 20.216.179.254:7559] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "acsofhSaDjY9kKFtUQCMjgAAAQ8"]
[Tue Mar 31 09:50:54.662086 2026] [:error] [pid 6548:tid 6560] [client 20.216.179.254:40323] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acsofrgIz9HgMl9YwE6rbAAAAUo"]
[Tue Mar 31 09:50:55.141139 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:16893] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acsof7gIz9HgMl9YwE6rbQAAAUE"]
[Tue Mar 31 09:50:55.624814 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:31563] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acsof_lMmeoQKN0r_GOt7AAAANU"]
[Tue Mar 31 09:50:56.107184 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:2510] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "acsogPlMmeoQKN0r_GOt8wAAAME"]
[Tue Mar 31 09:50:56.587520 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:7617] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acsogPlMmeoQKN0r_GOt-QAAAMI"]
[Tue Mar 31 09:50:57.059110 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:30861] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acsogflMmeoQKN0r_GOt-wAAANU"]
[Tue Mar 31 09:50:57.544302 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:9639] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acsogflMmeoQKN0r_GOuAQAAAMA"]
[Tue Mar 31 09:50:58.037060 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:9620] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acsogvlMmeoQKN0r_GOuAwAAANU"]
[Tue Mar 31 09:50:58.524505 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:15568] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acsogvlMmeoQKN0r_GOuBgAAAME"]
[Tue Mar 31 09:50:59.008008 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:30861] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acsogxSaDjY9kKFtUQCMjwAAAQg"]
[Tue Mar 31 09:50:59.487570 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:2296] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acsog7gIz9HgMl9YwE6rdwAAAVY"]
[Tue Mar 31 09:50:59.971898 2026] [:error] [pid 36890:tid 36910] [client 20.216.179.254:16862] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "acsog58FASPd_uH8z7djXwAAAA8"]
[Tue Mar 31 09:51:00.468958 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:2259] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acsohBSaDjY9kKFtUQCM1wAAAQY"]
[Tue Mar 31 09:51:00.971584 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:16833] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acsohBSaDjY9kKFtUQCM2AAAARY"]
[Tue Mar 31 09:51:01.461305 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:43905] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acsohflMmeoQKN0r_GOuIAAAANg"]
[Tue Mar 31 09:51:01.937311 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:9663] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "acsohflMmeoQKN0r_GOuIgAAAMU"]
[Tue Mar 31 09:51:02.429389 2026] [:error] [pid 36891:tid 36938] [client 20.216.179.254:7192] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acsohpJhiMaJUqoqfl5E4gAAAE4"]
[Tue Mar 31 09:51:02.912281 2026] [:error] [pid 6548:tid 6572] [client 20.216.179.254:16835] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acsohrgIz9HgMl9YwE6riQAAAVY"]
[Tue Mar 31 09:51:03.399755 2026] [:error] [pid 41421:tid 41432] [client 20.216.179.254:15604] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acsohxSaDjY9kKFtUQCM4QAAAQg"]
[Tue Mar 31 09:51:03.885879 2026] [:error] [pid 41421:tid 41427] [client 20.216.179.254:7827] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "acsohxSaDjY9kKFtUQCM4gAAAQM"]
[Tue Mar 31 09:51:04.362796 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:2540] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acsoiLgIz9HgMl9YwE6riwAAAVg"]
[Tue Mar 31 09:51:04.847037 2026] [:error] [pid 36891:tid 36926] [client 20.216.179.254:16876] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acsoiJJhiMaJUqoqfl5E5wAAAEI"]
[Tue Mar 31 09:51:05.345900 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:7210] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acsoiflMmeoQKN0r_GOuJwAAAM4"]
[Tue Mar 31 09:51:05.828933 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:59076] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "acsoiflMmeoQKN0r_GOuKwAAANQ"]
[Tue Mar 31 09:51:06.330079 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:40350] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acsoirgIz9HgMl9YwE6rkQAAAVU"]
[Tue Mar 31 09:51:06.805494 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:43965] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acsoivlMmeoQKN0r_GOuLgAAAME"]
[Tue Mar 31 09:51:07.285661 2026] [:error] [pid 41421:tid 41438] [client 20.216.179.254:43916] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acsoixSaDjY9kKFtUQCM6AAAAQ4"]
[Tue Mar 31 09:51:07.773864 2026] [:error] [pid 36892:tid 36961] [client 20.216.179.254:54904] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55b76.php"] [unique_id "acsoi0yj9S4G0ek3O4LjZQAAAIo"]
[Tue Mar 31 09:51:08.255016 2026] [:error] [pid 36982:tid 36991] [client 20.216.179.254:32132] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acsojPlMmeoQKN0r_GOuOgAAAMY"]
[Tue Mar 31 09:51:08.743225 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:55440] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acsojJ8FASPd_uH8z7djcQAAABA"]
[Tue Mar 31 09:51:09.217849 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:7864] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acsojflMmeoQKN0r_GOuPQAAAMw"]
[Tue Mar 31 09:51:09.709748 2026] [:error] [pid 36892:tid 36972] [client 20.216.179.254:7668] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "acsojUyj9S4G0ek3O4LjbgAAAJU"]
[Tue Mar 31 09:51:10.223711 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:15557] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acsojvlMmeoQKN0r_GOuQQAAAMA"]
[Tue Mar 31 09:51:10.736155 2026] [:error] [pid 36982:tid 36988] [client 20.216.179.254:43934] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acsojvlMmeoQKN0r_GOuRAAAAMM"]
[Tue Mar 31 09:51:11.229066 2026] [:error] [pid 36891:tid 36926] [client 20.216.179.254:59120] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acsoj5JhiMaJUqoqfl5E_AAAAEI"]
[Tue Mar 31 09:51:11.705456 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:51764] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acsoj_lMmeoQKN0r_GOuTQAAANY"]
[Tue Mar 31 09:51:12.191876 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:21480] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acsokPlMmeoQKN0r_GOuUQAAANc"]
[Tue Mar 31 09:51:12.670059 2026] [:error] [pid 36982:tid 37003] [client 20.216.179.254:56101] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acsokPlMmeoQKN0r_GOuUwAAANI"]
[Tue Mar 31 09:51:13.147650 2026] [:error] [pid 36891:tid 36943] [client 20.216.179.254:59037] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acsokZJhiMaJUqoqfl5FCwAAAFM"]
[Tue Mar 31 09:51:13.622079 2026] [:error] [pid 36891:tid 36925] [client 20.216.179.254:37949] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acsokZJhiMaJUqoqfl5FDQAAAEE"]
[Tue Mar 31 09:51:14.094636 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:37940] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acsokp8FASPd_uH8z7djfQAAABM"]
[Tue Mar 31 09:51:14.574738 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:59039] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acsokvlMmeoQKN0r_GOuVAAAAMQ"]
[Tue Mar 31 09:51:15.046263 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:54886] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acsok_lMmeoQKN0r_GOuVgAAAM0"]
[Tue Mar 31 09:51:15.519608 2026] [:error] [pid 36982:tid 36987] [client 20.216.179.254:8341] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "acsok_lMmeoQKN0r_GOuWQAAAMI"]
[Tue Mar 31 09:51:16.004488 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:15554] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acsolPlMmeoQKN0r_GOuXAAAANg"]
[Tue Mar 31 09:51:16.481243 2026] [:error] [pid 41421:tid 41430] [client 20.216.179.254:9396] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acsolBSaDjY9kKFtUQCM-AAAAQY"]
[Tue Mar 31 09:51:16.956561 2026] [:error] [pid 41421:tid 41444] [client 20.216.179.254:8342] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acsolBSaDjY9kKFtUQCM_AAAARQ"]
[Tue Mar 31 09:51:17.433123 2026] [:error] [pid 36982:tid 37008] [client 20.216.179.254:55445] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "acsolflMmeoQKN0r_GOuYQAAANc"]
[Tue Mar 31 09:51:17.923070 2026] [:error] [pid 36890:tid 36913] [client 20.216.179.254:54905] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acsolZ8FASPd_uH8z7djggAAABI"]
[Tue Mar 31 09:51:18.414530 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:56108] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acsolvlMmeoQKN0r_GOuagAAAMc"]
[Tue Mar 31 09:51:18.893821 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:8356] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acsolrgIz9HgMl9YwE6rrgAAAUE"]
[Tue Mar 31 09:51:19.376252 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:59050] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "acsol7gIz9HgMl9YwE6rsAAAAVI"]
[Tue Mar 31 09:51:19.862463 2026] [:error] [pid 36891:tid 36931] [client 20.216.179.254:12163] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acsol5JhiMaJUqoqfl5FFwAAAEc"]
[Tue Mar 31 09:51:20.341921 2026] [:error] [pid 36891:tid 36945] [client 20.216.179.254:2338] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acsomJJhiMaJUqoqfl5FGgAAAFU"]
[Tue Mar 31 09:51:20.834092 2026] [:error] [pid 36890:tid 36908] [client 20.216.179.254:51740] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acsomJ8FASPd_uH8z7djjAAAAA0"]
[Tue Mar 31 09:51:21.316517 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:2522] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "acsomZ8FASPd_uH8z7djjgAAAAI"]
[Tue Mar 31 09:51:21.790875 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:2498] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acsomUyj9S4G0ek3O4LjjAAAAIA"]
[Tue Mar 31 09:51:22.295036 2026] [:error] [pid 36891:tid 36944] [client 20.216.179.254:56093] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acsompJhiMaJUqoqfl5FHQAAAFQ"]
[Tue Mar 31 09:51:22.809369 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:15588] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "acsomhSaDjY9kKFtUQCNAgAAARE"]
[Tue Mar 31 09:51:23.301209 2026] [proxy_fcgi:error] [pid 41421:tid 41439] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:23.543388 2026] [proxy_fcgi:error] [pid 41421:tid 41443] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:23.784988 2026] [proxy_fcgi:error] [pid 41421:tid 41436] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:24.026287 2026] [proxy_fcgi:error] [pid 41421:tid 41434] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:24.266741 2026] [proxy_fcgi:error] [pid 41421:tid 41437] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:24.509026 2026] [proxy_fcgi:error] [pid 41421:tid 41433] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:24.752348 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:24.993150 2026] [proxy_fcgi:error] [pid 41421:tid 41441] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:25.233296 2026] [proxy_fcgi:error] [pid 41421:tid 41445] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:25.474507 2026] [proxy_fcgi:error] [pid 41421:tid 41430] [client 20.216.179.254:37915] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:51:25.953935 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:37915] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acsonRSaDjY9kKFtUQCNFgAAAQA"]
[Tue Mar 31 09:51:26.433633 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:12177] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acsonvlMmeoQKN0r_GOuiAAAAMs"]
[Tue Mar 31 09:51:26.908652 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:7838] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acsonp8FASPd_uH8z7djnwAAAAM"]
[Tue Mar 31 09:51:27.392096 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:16846] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "acson_lMmeoQKN0r_GOujQAAANY"]
[Tue Mar 31 09:51:27.873460 2026] [:error] [pid 36890:tid 36908] [client 20.216.179.254:7870] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acson58FASPd_uH8z7djowAAAA0"]
[Tue Mar 31 09:51:28.347344 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:15552] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acsooJ8FASPd_uH8z7djpAAAAAI"]
[Tue Mar 31 09:51:28.828011 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:54850] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acsooLgIz9HgMl9YwE6ruQAAAUE"]
[Tue Mar 31 09:51:29.305015 2026] [:error] [pid 36892:tid 36953] [client 20.216.179.254:51756] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "acsooUyj9S4G0ek3O4LjnAAAAII"]
[Tue Mar 31 09:51:29.782051 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:16845] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acsooRSaDjY9kKFtUQCNGwAAAQo"]
[Tue Mar 31 09:51:30.262850 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:37908] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acsoovlMmeoQKN0r_GOumQAAAM4"]
[Tue Mar 31 09:51:30.739753 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:16857] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acsoovlMmeoQKN0r_GOunwAAAMc"]
[Tue Mar 31 09:51:31.211011 2026] [:error] [pid 36891:tid 36928] [client 20.216.179.254:56078] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acsoo5JhiMaJUqoqfl5FJwAAAEQ"]
[Tue Mar 31 09:51:31.690694 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:51723] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acsoo_lMmeoQKN0r_GOupwAAAMc"]
[Tue Mar 31 09:51:32.166996 2026] [:error] [pid 36892:tid 36960] [client 20.216.179.254:50635] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acsopEyj9S4G0ek3O4LjogAAAIk"]
[Tue Mar 31 09:51:32.649161 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:33857] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acsopPlMmeoQKN0r_GOuuQAAANQ"]
[Tue Mar 31 09:51:33.130479 2026] [:error] [pid 36982:tid 36992] [client 20.216.179.254:26581] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax.php"] [unique_id "acsopflMmeoQKN0r_GOuwAAAAMc"]
[Tue Mar 31 09:51:33.605563 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:32149] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acsopflMmeoQKN0r_GOuzgAAAM4"]
[Tue Mar 31 09:51:34.077604 2026] [:error] [pid 41421:tid 41431] [client 20.216.179.254:12172] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acsophSaDjY9kKFtUQCNLAAAAQc"]
[Tue Mar 31 09:51:34.566338 2026] [:error] [pid 36890:tid 36900] [client 20.216.179.254:12160] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acsopp8FASPd_uH8z7djqQAAAAU"]
[Tue Mar 31 09:51:35.039381 2026] [:error] [pid 36982:tid 36985] [client 20.216.179.254:51748] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acsop_lMmeoQKN0r_GOu2QAAAMA"]
[Tue Mar 31 09:51:35.530380 2026] [:error] [pid 36982:tid 36990] [client 20.216.179.254:15582] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acsop_lMmeoQKN0r_GOu3gAAAMU"]
[Tue Mar 31 09:51:36.033444 2026] [:error] [pid 41421:tid 41425] [client 20.216.179.254:47510] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acsoqBSaDjY9kKFtUQCNNwAAAQE"]
[Tue Mar 31 09:51:36.539421 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:15578] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acsoqJ8FASPd_uH8z7djrAAAAAs"]
[Tue Mar 31 09:51:37.018057 2026] [:error] [pid 36890:tid 36896] [client 20.216.179.254:37925] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acsoqZ8FASPd_uH8z7djrQAAAAE"]
[Tue Mar 31 09:51:37.501501 2026] [:error] [pid 36892:tid 36975] [client 20.216.179.254:55545] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acsoqUyj9S4G0ek3O4LjrQAAAJg"]
[Tue Mar 31 09:51:37.978728 2026] [:error] [pid 36890:tid 36918] [client 20.216.179.254:47546] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acsoqZ8FASPd_uH8z7djsAAAABc"]
[Tue Mar 31 09:51:38.456547 2026] [:error] [pid 36890:tid 36901] [client 20.216.179.254:55463] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acsoqp8FASPd_uH8z7djsgAAAAY"]
[Tue Mar 31 09:51:38.954800 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:37950] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "acsoqvlMmeoQKN0r_GOu7QAAANQ"]
[Tue Mar 31 09:51:39.442925 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:44607] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acsoq58FASPd_uH8z7djtQAAAAQ"]
[Tue Mar 31 09:51:39.918230 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:30029] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acsoq_lMmeoQKN0r_GOu8gAAAMQ"]
[Tue Mar 31 09:51:40.399458 2026] [:error] [pid 41421:tid 41443] [client 20.216.179.254:7868] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acsorBSaDjY9kKFtUQCNQwAAARM"]
[Tue Mar 31 09:51:40.882348 2026] [:error] [pid 41421:tid 41448] [client 20.216.179.254:55427] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "acsorBSaDjY9kKFtUQCNRQAAARg"]
[Tue Mar 31 09:51:41.356461 2026] [:error] [pid 41421:tid 41425] [client 20.216.179.254:33915] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acsorRSaDjY9kKFtUQCNSAAAAQE"]
[Tue Mar 31 09:51:41.837298 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:2365] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acsorZ8FASPd_uH8z7djvAAAABM"]
[Tue Mar 31 09:51:42.313128 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:15999] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acsorp8FASPd_uH8z7djvQAAAAs"]
[Tue Mar 31 09:51:42.806603 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:54909] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "acsorvlMmeoQKN0r_GOu9wAAANQ"]
[Tue Mar 31 09:51:43.288933 2026] [:error] [pid 36892:tid 36967] [client 20.216.179.254:44546] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acsor0yj9S4G0ek3O4LjuwAAAJA"]
[Tue Mar 31 09:51:43.764048 2026] [:error] [pid 6548:tid 6564] [client 20.216.179.254:44553] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acsor7gIz9HgMl9YwE6sCQAAAU4"]
[Tue Mar 31 09:51:44.261409 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:7834] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acsosPlMmeoQKN0r_GOu_QAAANY"]
[Tue Mar 31 09:51:44.746465 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:22446] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "acsosPlMmeoQKN0r_GOvAQAAANg"]
[Tue Mar 31 09:51:45.221932 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:33866] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acsosbgIz9HgMl9YwE6sDwAAAVQ"]
[Tue Mar 31 09:51:45.713943 2026] [:error] [pid 36890:tid 36916] [client 20.216.179.254:32244] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acsosZ8FASPd_uH8z7djvgAAABU"]
[Tue Mar 31 09:51:46.203600 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:55517] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acsoskyj9S4G0ek3O4LjwwAAAIc"]
[Tue Mar 31 09:51:46.676397 2026] [:error] [pid 36892:tid 36965] [client 20.216.179.254:51737] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "acsoskyj9S4G0ek3O4LjxgAAAI4"]
[Tue Mar 31 09:51:47.153719 2026] [:error] [pid 36892:tid 36959] [client 20.216.179.254:51742] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acsos0yj9S4G0ek3O4LjxwAAAIg"]
[Tue Mar 31 09:51:47.629970 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:7845] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acsos7gIz9HgMl9YwE6sFAAAAVg"]
[Tue Mar 31 09:51:48.101063 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:15993] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acsotLgIz9HgMl9YwE6sFwAAAUw"]
[Tue Mar 31 09:51:48.578447 2026] [:error] [pid 36892:tid 36966] [client 20.216.179.254:30067] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "acsotEyj9S4G0ek3O4LjzgAAAI8"]
[Tue Mar 31 09:51:49.050147 2026] [:error] [pid 6548:tid 6569] [client 20.216.179.254:47521] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acsotbgIz9HgMl9YwE6sHQAAAVM"]
[Tue Mar 31 09:51:49.525870 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:47508] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acsotZ8FASPd_uH8z7djwQAAAAI"]
[Tue Mar 31 09:51:50.013202 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:44603] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acsotrgIz9HgMl9YwE6sIAAAAVI"]
[Tue Mar 31 09:51:50.491341 2026] [:error] [pid 36890:tid 36903] [client 20.216.179.254:15563] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "acsotp8FASPd_uH8z7djwwAAAAg"]
[Tue Mar 31 09:51:50.969996 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:37893] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acsotvlMmeoQKN0r_GOvGgAAAM8"]
[Tue Mar 31 09:51:51.447019 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:14310] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acsot58FASPd_uH8z7djxwAAABM"]
[Tue Mar 31 09:51:51.920744 2026] [:error] [pid 36890:tid 36918] [client 20.216.179.254:26586] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acsot58FASPd_uH8z7djygAAABc"]
[Tue Mar 31 09:51:52.400279 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:41992] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okxh.php"] [unique_id "acsouPlMmeoQKN0r_GOvIgAAAMs"]
[Tue Mar 31 09:51:52.883829 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:55527] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acsouJ8FASPd_uH8z7dj0AAAAAQ"]
[Tue Mar 31 09:51:53.363870 2026] [:error] [pid 36890:tid 36904] [client 20.216.179.254:2954] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acsouZ8FASPd_uH8z7dj0QAAAAk"]
[Tue Mar 31 09:51:53.855478 2026] [:error] [pid 6548:tid 6559] [client 20.216.179.254:55541] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acsoubgIz9HgMl9YwE6sKAAAAUk"]
[Tue Mar 31 09:51:54.334206 2026] [:error] [pid 36891:tid 36947] [client 20.216.179.254:57325] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acsoupJhiMaJUqoqfl5FRQAAAFc"]
[Tue Mar 31 09:51:54.828459 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:14305] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acsourgIz9HgMl9YwE6sLAAAAUg"]
[Tue Mar 31 09:51:55.319129 2026] [:error] [pid 41421:tid 41445] [client 20.216.179.254:55532] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acsouxSaDjY9kKFtUQCNWQAAARU"]
[Tue Mar 31 09:51:55.803466 2026] [:error] [pid 36892:tid 36973] [client 20.216.179.254:50627] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acsou0yj9S4G0ek3O4Lj4AAAAJY"]
[Tue Mar 31 09:51:56.278968 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:47533] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "acsovPlMmeoQKN0r_GOvLAAAAMQ"]
[Tue Mar 31 09:51:56.772389 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:32236] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acsovBSaDjY9kKFtUQCNXAAAAQA"]
[Tue Mar 31 09:51:57.252912 2026] [:error] [pid 36891:tid 36927] [client 20.216.179.254:37889] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acsovZJhiMaJUqoqfl5FSQAAAEM"]
[Tue Mar 31 09:51:57.765581 2026] [:error] [pid 36892:tid 36962] [client 20.216.179.254:7861] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acsovUyj9S4G0ek3O4Lj6wAAAIs"]
[Tue Mar 31 09:51:58.253379 2026] [:error] [pid 41421:tid 41436] [client 20.216.179.254:55468] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acsovhSaDjY9kKFtUQCNXgAAAQw"]
[Tue Mar 31 09:51:58.724193 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:50622] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acsovvlMmeoQKN0r_GOvMQAAANE"]
[Tue Mar 31 09:51:59.212429 2026] [:error] [pid 36891:tid 36948] [client 20.216.179.254:44565] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acsov5JhiMaJUqoqfl5FVAAAAFg"]
[Tue Mar 31 09:51:59.701009 2026] [:error] [pid 36891:tid 36945] [client 20.216.179.254:57332] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acsov5JhiMaJUqoqfl5FVwAAAFU"]
[Tue Mar 31 09:52:00.185829 2026] [:error] [pid 41421:tid 41427] [client 20.216.179.254:44547] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "acsowBSaDjY9kKFtUQCNYAAAAQM"]
[Tue Mar 31 09:52:00.668707 2026] [:error] [pid 36892:tid 36963] [client 20.216.179.254:55460] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acsowEyj9S4G0ek3O4Lj8gAAAIw"]
[Tue Mar 31 09:52:01.153565 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:24544] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acsowRSaDjY9kKFtUQCNYwAAARE"]
[Tue Mar 31 09:52:01.663087 2026] [:error] [pid 41421:tid 41446] [client 20.216.179.254:2740] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acsowRSaDjY9kKFtUQCNZQAAARY"]
[Tue Mar 31 09:52:02.139672 2026] [:error] [pid 36982:tid 37006] [client 20.216.179.254:2688] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "acsowvlMmeoQKN0r_GOvRgAAANU"]
[Tue Mar 31 09:52:02.634988 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:15614] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acsowp8FASPd_uH8z7dj5wAAABM"]
[Tue Mar 31 09:52:03.113000 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:35052] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acsow58FASPd_uH8z7dj7QAAAA4"]
[Tue Mar 31 09:52:03.596829 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:16289] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acsow7gIz9HgMl9YwE6sTwAAAUE"]
[Tue Mar 31 09:52:04.068925 2026] [:error] [pid 36982:tid 36994] [client 20.216.179.254:57322] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "acsoxPlMmeoQKN0r_GOvUQAAAMk"]
[Tue Mar 31 09:52:04.554935 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:2693] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acsoxLgIz9HgMl9YwE6sWwAAAVU"]
[Tue Mar 31 09:52:05.033994 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:40427] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acsoxbgIz9HgMl9YwE6sYQAAAUE"]
[Tue Mar 31 09:52:05.529397 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:16852] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acsoxZ8FASPd_uH8z7dj8wAAAAs"]
[Tue Mar 31 09:52:06.009375 2026] [:error] [pid 36982:tid 36998] [client 20.216.179.254:42028] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "acsoxvlMmeoQKN0r_GOvXAAAAM0"]
[Tue Mar 31 09:52:06.484945 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:22463] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acsoxp8FASPd_uH8z7dj9AAAAAM"]
[Tue Mar 31 09:52:06.957846 2026] [:error] [pid 6548:tid 6566] [client 20.216.179.254:2703] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acsoxrgIz9HgMl9YwE6saQAAAVA"]
[Tue Mar 31 09:52:07.436734 2026] [:error] [pid 6548:tid 6557] [client 20.216.179.254:50616] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acsox7gIz9HgMl9YwE6sbAAAAUc"]
[Tue Mar 31 09:52:07.926482 2026] [:error] [pid 36982:tid 36986] [client 20.216.179.254:44584] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "acsox_lMmeoQKN0r_GOvagAAAME"]
[Tue Mar 31 09:52:08.400411 2026] [:error] [pid 6548:tid 6558] [client 20.216.179.254:16265] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acsoyLgIz9HgMl9YwE6sdQAAAUg"]
[Tue Mar 31 09:52:08.888549 2026] [:error] [pid 6548:tid 6550] [client 20.216.179.254:39276] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acsoyLgIz9HgMl9YwE6seQAAAUA"]
[Tue Mar 31 09:52:09.362179 2026] [:error] [pid 36892:tid 36965] [client 20.216.179.254:16307] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acsoyUyj9S4G0ek3O4LkAgAAAI4"]
[Tue Mar 31 09:52:09.847282 2026] [:error] [pid 41421:tid 41424] [client 20.216.179.254:59995] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/155.php"] [unique_id "acsoyRSaDjY9kKFtUQCNdwAAAQA"]
[Tue Mar 31 09:52:10.324001 2026] [:error] [pid 36892:tid 36973] [client 20.216.179.254:15583] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acsoykyj9S4G0ek3O4LkBQAAAJY"]
[Tue Mar 31 09:52:10.800129 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:25474] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acsoyvlMmeoQKN0r_GOvbwAAANg"]
[Tue Mar 31 09:52:11.276790 2026] [:error] [pid 36982:tid 36996] [client 20.216.179.254:7825] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acsoy_lMmeoQKN0r_GOvegAAAMs"]
[Tue Mar 31 09:52:11.759671 2026] [:error] [pid 41421:tid 41444] [client 20.216.179.254:15607] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rzki.php"] [unique_id "acsoyxSaDjY9kKFtUQCNnQAAARQ"]
[Tue Mar 31 09:52:12.239664 2026] [:error] [pid 36982:tid 37001] [client 20.216.179.254:25500] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acsozPlMmeoQKN0r_GOvjQAAANA"]
[Tue Mar 31 09:52:12.720318 2026] [:error] [pid 36982:tid 37007] [client 20.216.179.254:16864] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acsozPlMmeoQKN0r_GOvkQAAANY"]
[Tue Mar 31 09:52:13.221837 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:16880] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acsozflMmeoQKN0r_GOvlwAAAMQ"]
[Tue Mar 31 09:52:13.708315 2026] [:error] [pid 36890:tid 36896] [client 20.216.179.254:7819] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "acsozZ8FASPd_uH8z7dkAAAAAAE"]
[Tue Mar 31 09:52:14.178352 2026] [:error] [pid 36891:tid 36933] [client 20.216.179.254:22434] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acsozpJhiMaJUqoqfl5FYQAAAEk"]
[Tue Mar 31 09:52:14.679748 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:21905] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acsozvlMmeoQKN0r_GOvnAAAAMg"]
[Tue Mar 31 09:52:15.178817 2026] [:error] [pid 36982:tid 37009] [client 20.216.179.254:50623] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acsoz_lMmeoQKN0r_GOvngAAANg"]
[Tue Mar 31 09:52:15.666553 2026] [:error] [pid 36892:tid 36975] [client 20.216.179.254:21900] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws49.php"] [unique_id "acsoz0yj9S4G0ek3O4LkEgAAAJg"]
[Tue Mar 31 09:52:16.140866 2026] [:error] [pid 6548:tid 6554] [client 20.216.179.254:22406] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acso0LgIz9HgMl9YwE6s4gAAAUQ"]
[Tue Mar 31 09:52:16.624231 2026] [:error] [pid 6548:tid 6571] [client 20.216.179.254:10961] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acso0LgIz9HgMl9YwE6s5AAAAVU"]
[Tue Mar 31 09:52:17.112970 2026] [:error] [pid 36890:tid 36909] [client 20.216.179.254:37896] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acso0Z8FASPd_uH8z7dkBQAAAA4"]
[Tue Mar 31 09:52:17.595839 2026] [:error] [pid 36890:tid 36917] [client 20.216.179.254:44569] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "acso0Z8FASPd_uH8z7dkBgAAABY"]
[Tue Mar 31 09:52:18.066973 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:24518] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acso0hSaDjY9kKFtUQCNsQAAAQo"]
[Tue Mar 31 09:52:18.565627 2026] [:error] [pid 36982:tid 36999] [client 20.216.179.254:57817] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acso0vlMmeoQKN0r_GOvsAAAAM4"]
[Tue Mar 31 09:52:19.035913 2026] [:error] [pid 41421:tid 41435] [client 20.216.179.254:2897] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acso0xSaDjY9kKFtUQCNtAAAAQs"]
[Tue Mar 31 09:52:19.515577 2026] [:error] [pid 36890:tid 36914] [client 20.216.179.254:16317] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "acso058FASPd_uH8z7dkCgAAABM"]
[Tue Mar 31 09:52:19.990424 2026] [:error] [pid 41421:tid 41436] [client 20.216.179.254:16274] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acso0xSaDjY9kKFtUQCNtQAAAQw"]
[Tue Mar 31 09:52:20.484956 2026] [:error] [pid 36891:tid 36926] [client 20.216.179.254:15568] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acso1JJhiMaJUqoqfl5FaQAAAEI"]
[Tue Mar 31 09:52:20.976540 2026] [:error] [pid 36891:tid 36937] [client 20.216.179.254:55430] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acso1JJhiMaJUqoqfl5FawAAAE0"]
[Tue Mar 31 09:52:21.455395 2026] [:error] [pid 36982:tid 36997] [client 20.216.179.254:23508] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "acso1flMmeoQKN0r_GOvuQAAAMw"]
[Tue Mar 31 09:52:21.930391 2026] [:error] [pid 36890:tid 36911] [client 20.216.179.254:50566] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acso1Z8FASPd_uH8z7dkFQAAABA"]
[Tue Mar 31 09:52:22.414948 2026] [:error] [pid 36891:tid 36926] [client 20.216.179.254:54818] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acso1pJhiMaJUqoqfl5FdwAAAEI"]
[Tue Mar 31 09:52:22.889091 2026] [:error] [pid 36892:tid 36951] [client 20.216.179.254:22454] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acso1kyj9S4G0ek3O4LkJAAAAIA"]
[Tue Mar 31 09:52:23.366738 2026] [:error] [pid 36982:tid 37005] [client 20.216.179.254:10202] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "acso1_lMmeoQKN0r_GOv4AAAANQ"]
[Tue Mar 31 09:52:23.841532 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:36243] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acso1_lMmeoQKN0r_GOv5AAAAMQ"]
[Tue Mar 31 09:52:24.315421 2026] [:error] [pid 36982:tid 37000] [client 20.216.179.254:25479] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acso2PlMmeoQKN0r_GOv6gAAAM8"]
[Tue Mar 31 09:52:24.788826 2026] [:error] [pid 36982:tid 36993] [client 20.216.179.254:21942] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "acso2PlMmeoQKN0r_GOv8AAAAMg"]
[Tue Mar 31 09:52:25.278451 2026] [proxy_fcgi:error] [pid 36890:tid 36910] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:25.517807 2026] [proxy_fcgi:error] [pid 36890:tid 36912] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:25.756807 2026] [proxy_fcgi:error] [pid 36890:tid 36901] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:25.997192 2026] [proxy_fcgi:error] [pid 36890:tid 36897] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:26.238397 2026] [proxy_fcgi:error] [pid 36890:tid 36915] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:26.477743 2026] [proxy_fcgi:error] [pid 36890:tid 36909] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:26.717032 2026] [proxy_fcgi:error] [pid 36890:tid 36916] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:26.956726 2026] [proxy_fcgi:error] [pid 36890:tid 36914] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:27.442002 2026] [proxy_fcgi:error] [pid 36890:tid 36898] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:27.681491 2026] [proxy_fcgi:error] [pid 36890:tid 36902] [client 20.216.179.254:2416] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 09:52:27.919583 2026] [:error] [pid 36890:tid 36899] [client 20.216.179.254:2416] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acso258FASPd_uH8z7dkMwAAAAQ"]
[Tue Mar 31 09:52:28.396306 2026] [:error] [pid 36890:tid 36903] [client 20.216.179.254:59968] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acso3J8FASPd_uH8z7dkNAAAAAg"]
[Tue Mar 31 09:52:28.871357 2026] [:error] [pid 36982:tid 37002] [client 20.216.179.254:18242] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acso3PlMmeoQKN0r_GOv-gAAANE"]
[Tue Mar 31 09:52:29.348924 2026] [:error] [pid 6548:tid 6561] [client 20.216.179.254:18180] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "acso3bgIz9HgMl9YwE6s9QAAAUs"]
[Tue Mar 31 09:52:29.826420 2026] [:error] [pid 36890:tid 36897] [client 20.216.179.254:54843] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acso3Z8FASPd_uH8z7dkNQAAAAI"]
[Tue Mar 31 09:52:30.305552 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:10969] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acso3rgIz9HgMl9YwE6s-AAAAUw"]
[Tue Mar 31 09:52:30.786432 2026] [:error] [pid 6548:tid 6568] [client 20.216.179.254:8146] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acso3rgIz9HgMl9YwE6s-gAAAVI"]
[Tue Mar 31 09:52:31.277654 2026] [:error] [pid 36891:tid 36939] [client 20.216.179.254:45165] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "acso35JhiMaJUqoqfl5FiAAAAE8"]
[Tue Mar 31 09:52:31.755833 2026] [:error] [pid 6548:tid 6557] [client 20.216.179.254:18223] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acso37gIz9HgMl9YwE6s-wAAAUc"]
[Tue Mar 31 09:52:32.231786 2026] [:error] [pid 36892:tid 36958] [client 20.216.179.254:2384] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acso4Eyj9S4G0ek3O4LkNQAAAIc"]
[Tue Mar 31 09:52:32.710538 2026] [:error] [pid 6548:tid 6574] [client 20.216.179.254:36234] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acso4LgIz9HgMl9YwE6s_wAAAVg"]
[Tue Mar 31 09:52:33.181020 2026] [:error] [pid 6548:tid 6551] [client 20.216.179.254:60009] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "acso4bgIz9HgMl9YwE6tAAAAAUE"]
[Tue Mar 31 09:52:33.667048 2026] [:error] [pid 36890:tid 36906] [client 20.216.179.254:60003] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "acso4Z8FASPd_uH8z7dkPAAAAAs"]
[Tue Mar 31 09:52:34.139469 2026] [:error] [pid 36890:tid 36898] [client 20.216.179.254:15265] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "acso4p8FASPd_uH8z7dkPgAAAAM"]
[Tue Mar 31 09:52:34.625746 2026] [:error] [pid 41421:tid 41440] [client 20.216.179.254:54803] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "acso4hSaDjY9kKFtUQCN3gAAARA"]
[Tue Mar 31 09:52:35.099919 2026] [:error] [pid 41421:tid 41442] [client 20.216.179.254:18236] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "acso4xSaDjY9kKFtUQCN3wAAARI"]
[Tue Mar 31 09:52:35.587958 2026] [:error] [pid 41421:tid 41434] [client 20.216.179.254:28583] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acso4xSaDjY9kKFtUQCN4gAAAQo"]
[Tue Mar 31 09:52:36.059895 2026] [:error] [pid 41421:tid 41441] [client 20.216.179.254:54789] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acso5BSaDjY9kKFtUQCN5gAAARE"]
[Tue Mar 31 09:52:36.539332 2026] [:error] [pid 36982:tid 36989] [client 20.216.179.254:16840] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acso5PlMmeoQKN0r_GOwAwAAAMQ"]
[Tue Mar 31 09:52:37.015748 2026] [:error] [pid 36891:tid 36929] [client 20.216.179.254:19833] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "acso5ZJhiMaJUqoqfl5FkAAAAEU"]
[Tue Mar 31 09:52:37.491410 2026] [:error] [pid 6548:tid 6567] [client 20.216.179.254:36246] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acso5bgIz9HgMl9YwE6tBAAAAVE"]
[Tue Mar 31 09:52:37.970298 2026] [:error] [pid 6548:tid 6562] [client 20.216.179.254:15281] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acso5bgIz9HgMl9YwE6tBgAAAUw"]
[Tue Mar 31 09:52:38.460528 2026] [:error] [pid 6548:tid 6570] [client 20.216.179.254:36224] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acso5rgIz9HgMl9YwE6tCQAAAVQ"]
[Tue Mar 31 09:52:38.936446 2026] [:error] [pid 36892:tid 36973] [client 20.216.179.254:14985] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "acso5kyj9S4G0ek3O4LkQwAAAJY"]
[Tue Mar 31 09:52:39.413694 2026] [:error] [pid 6548:tid 6556] [client 20.216.179.254:13036] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acso57gIz9HgMl9YwE6tDwAAAUY"]
[Tue Mar 31 09:52:39.891418 2026] [:error] [pid 36891:tid 36938] [client 20.216.179.254:48078] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acso55JhiMaJUqoqfl5FkQAAAE4"]
[Tue Mar 31 09:52:40.368271 2026] [:error] [pid 36891:tid 36930] [client 20.216.179.254:19828] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acso6JJhiMaJUqoqfl5FkgAAAEY"]
[Tue Mar 31 09:52:40.846405 2026] [:error] [pid 41421:tid 41425] [client 20.216.179.254:9430] [client 20.216.179.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "acso6BSaDjY9kKFtUQCN7gAAAQE"]
[Tue Mar 31 12:04:08.512415 2026] [:error] [pid 36890:tid 36901] [client 4.204.246.56:56783] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "actHuJ8FASPd_uH8z7eSsQAAAAY"]
[Tue Mar 31 12:04:08.931414 2026] [:error] [pid 36982:tid 36987] [client 4.204.246.56:56802] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "actHuPlMmeoQKN0r_GMqSgAAAMI"]
[Tue Mar 31 12:04:09.386851 2026] [:error] [pid 6548:tid 6556] [client 4.204.246.56:56776] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "actHubgIz9HgMl9YwE4AywAAAUY"]
[Tue Mar 31 12:04:09.829798 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:56829] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "actHuflMmeoQKN0r_GMqUQAAAMQ"]
[Tue Mar 31 18:03:40.974846 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:41.240440 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:41.513142 2026] [proxy_fcgi:error] [pid 36892:tid 36963] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:41.779006 2026] [proxy_fcgi:error] [pid 36892:tid 36967] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:42.044792 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:42.312952 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:42.580356 2026] [proxy_fcgi:error] [pid 36892:tid 36974] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:42.846771 2026] [proxy_fcgi:error] [pid 36892:tid 36953] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:43.112775 2026] [proxy_fcgi:error] [pid 36892:tid 36968] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:43.378600 2026] [proxy_fcgi:error] [pid 36892:tid 36952] [client 4.223.110.202:64880] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:03:43.640955 2026] [:error] [pid 36892:tid 36965] [client 4.223.110.202:64880] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acub_0yj9S4G0ek3O4JviQAAAI4"]
[Tue Mar 31 18:03:44.227409 2026] [:error] [pid 36982:tid 36991] [client 4.223.110.202:65409] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucAPlMmeoQKN0r_GNeNwAAAMY"]
[Tue Mar 31 18:03:44.757724 2026] [:error] [pid 41421:tid 41442] [client 4.223.110.202:65421] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucABSaDjY9kKFtUQBokwAAARI"]
[Tue Mar 31 18:03:45.294782 2026] [:error] [pid 41421:tid 41438] [client 4.223.110.202:64799] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucARSaDjY9kKFtUQBolgAAAQ4"]
[Tue Mar 31 18:03:45.823655 2026] [:error] [pid 36890:tid 36917] [client 4.223.110.202:64774] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucAZ8FASPd_uH8z7cPygAAABY"]
[Tue Mar 31 18:03:46.368626 2026] [:error] [pid 6548:tid 6562] [client 4.223.110.202:65446] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucArgIz9HgMl9YwE7oJwAAAUw"]
[Tue Mar 31 18:03:46.896686 2026] [:error] [pid 36892:tid 36966] [client 4.223.110.202:64230] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucAkyj9S4G0ek3O4JviwAAAI8"]
[Tue Mar 31 18:03:47.426200 2026] [:error] [pid 6548:tid 6570] [client 4.223.110.202:65508] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucA7gIz9HgMl9YwE7oLwAAAVQ"]
[Tue Mar 31 18:03:47.959438 2026] [:error] [pid 36982:tid 36999] [client 4.223.110.202:65433] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucA_lMmeoQKN0r_GNeRAAAAM4"]
[Tue Mar 31 18:03:48.490568 2026] [:error] [pid 6548:tid 6565] [client 4.223.110.202:64193] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucBLgIz9HgMl9YwE7oNgAAAU8"]
[Tue Mar 31 18:03:49.018325 2026] [:error] [pid 36982:tid 36993] [client 4.223.110.202:64206] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucBflMmeoQKN0r_GNeRQAAAMg"]
[Tue Mar 31 18:03:49.543263 2026] [:error] [pid 6548:tid 6554] [client 4.223.110.202:64209] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucBbgIz9HgMl9YwE7oPgAAAUQ"]
[Tue Mar 31 18:03:50.073218 2026] [:error] [pid 36890:tid 36910] [client 4.223.110.202:64176] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucBp8FASPd_uH8z7cPzAAAAA8"]
[Tue Mar 31 18:03:50.609208 2026] [:error] [pid 36982:tid 37000] [client 4.223.110.202:65509] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucBvlMmeoQKN0r_GNeRwAAAM8"]
[Tue Mar 31 18:03:51.140099 2026] [:error] [pid 36982:tid 37006] [client 4.223.110.202:65519] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucB_lMmeoQKN0r_GNeSgAAANU"]
[Tue Mar 31 18:03:51.669814 2026] [:error] [pid 36982:tid 36998] [client 4.223.110.202:64160] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucB_lMmeoQKN0r_GNeTAAAAM0"]
[Tue Mar 31 18:03:52.195371 2026] [:error] [pid 36891:tid 36938] [client 4.223.110.202:64162] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucCJJhiMaJUqoqfl63eAAAAE4"]
[Tue Mar 31 18:03:52.735672 2026] [:error] [pid 6548:tid 6556] [client 4.223.110.202:64184] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucCLgIz9HgMl9YwE7oQwAAAUY"]
[Tue Mar 31 18:03:53.268019 2026] [:error] [pid 36892:tid 36969] [client 4.223.110.202:64195] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucCUyj9S4G0ek3O4JvjAAAAJI"]
[Tue Mar 31 18:03:53.796990 2026] [:error] [pid 36890:tid 36906] [client 4.223.110.202:65472] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucCZ8FASPd_uH8z7cP1AAAAAs"]
[Tue Mar 31 18:03:54.322533 2026] [:error] [pid 36892:tid 36963] [client 4.223.110.202:64201] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucCkyj9S4G0ek3O4JvjQAAAIw"]
[Tue Mar 31 18:03:54.851326 2026] [:error] [pid 36892:tid 36956] [client 4.223.110.202:64870] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucCkyj9S4G0ek3O4JvjwAAAIU"]
[Tue Mar 31 18:03:55.378545 2026] [:error] [pid 36891:tid 36940] [client 4.223.110.202:64843] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucC5JhiMaJUqoqfl63egAAAFA"]
[Tue Mar 31 18:03:55.910891 2026] [:error] [pid 41421:tid 41441] [client 4.223.110.202:64824] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucCxSaDjY9kKFtUQBongAAARE"]
[Tue Mar 31 18:03:56.441118 2026] [:error] [pid 41421:tid 41440] [client 4.223.110.202:65425] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucDBSaDjY9kKFtUQBoowAAARA"]
[Tue Mar 31 18:03:56.971474 2026] [:error] [pid 36982:tid 37009] [client 4.223.110.202:64220] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucDPlMmeoQKN0r_GNeUgAAANg"]
[Tue Mar 31 18:03:57.500348 2026] [:error] [pid 36890:tid 36896] [client 4.223.110.202:64787] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucDZ8FASPd_uH8z7cP3QAAAAE"]
[Tue Mar 31 18:03:58.028930 2026] [:error] [pid 36892:tid 36974] [client 4.223.110.202:65449] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucDkyj9S4G0ek3O4JvkgAAAJc"]
[Tue Mar 31 18:03:58.557222 2026] [:error] [pid 36891:tid 36928] [client 4.223.110.202:64768] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucDpJhiMaJUqoqfl63fgAAAEQ"]
[Tue Mar 31 18:03:59.095900 2026] [:error] [pid 41421:tid 41424] [client 4.223.110.202:64865] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucDxSaDjY9kKFtUQBopQAAAQA"]
[Tue Mar 31 18:03:59.633418 2026] [:error] [pid 41421:tid 41448] [client 4.223.110.202:64247] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucDxSaDjY9kKFtUQBoqAAAARg"]
[Tue Mar 31 18:04:00.221420 2026] [:error] [pid 36891:tid 36930] [client 4.223.110.202:63555] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucEJJhiMaJUqoqfl63gQAAAEY"]
[Tue Mar 31 18:04:00.771998 2026] [:error] [pid 36892:tid 36962] [client 4.223.110.202:65506] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucEEyj9S4G0ek3O4JvlAAAAIs"]
[Tue Mar 31 18:04:01.302114 2026] [:error] [pid 36982:tid 37008] [client 4.223.110.202:64852] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucEflMmeoQKN0r_GNeWAAAANc"]
[Tue Mar 31 18:04:01.850742 2026] [:error] [pid 6548:tid 6565] [client 4.223.110.202:64182] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucEbgIz9HgMl9YwE7oSQAAAU8"]
[Tue Mar 31 18:04:02.385925 2026] [:error] [pid 41421:tid 41425] [client 4.223.110.202:65427] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucEhSaDjY9kKFtUQBoqQAAAQE"]
[Tue Mar 31 18:04:02.935829 2026] [:error] [pid 6548:tid 6562] [client 4.223.110.202:64886] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucErgIz9HgMl9YwE7oTAAAAUw"]
[Tue Mar 31 18:04:03.485247 2026] [:error] [pid 36891:tid 36929] [client 4.223.110.202:65461] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucE5JhiMaJUqoqfl63hAAAAEU"]
[Tue Mar 31 18:04:04.064302 2026] [:error] [pid 36982:tid 36999] [client 4.223.110.202:64802] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucFPlMmeoQKN0r_GNeWwAAAM4"]
[Tue Mar 31 18:04:04.602694 2026] [:error] [pid 36892:tid 36957] [client 4.223.110.202:62889] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucFEyj9S4G0ek3O4JvlwAAAIY"]
[Tue Mar 31 18:04:05.152274 2026] [:error] [pid 36890:tid 36915] [client 4.223.110.202:64249] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucFZ8FASPd_uH8z7cP6AAAABQ"]
[Tue Mar 31 18:04:05.709624 2026] [:error] [pid 36891:tid 36945] [client 4.223.110.202:64210] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucFZJhiMaJUqoqfl63hgAAAFU"]
[Tue Mar 31 18:04:06.254750 2026] [:error] [pid 6548:tid 6574] [client 4.223.110.202:65525] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucFrgIz9HgMl9YwE7oWQAAAVg"]
[Tue Mar 31 18:04:06.840915 2026] [:error] [pid 36890:tid 36919] [client 4.223.110.202:64149] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucFp8FASPd_uH8z7cP6QAAABg"]
[Tue Mar 31 18:04:07.374280 2026] [:error] [pid 41421:tid 41443] [client 4.223.110.202:64172] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucFxSaDjY9kKFtUQBoqgAAARM"]
[Tue Mar 31 18:04:07.917248 2026] [:error] [pid 41421:tid 41428] [client 4.223.110.202:65485] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucFxSaDjY9kKFtUQBoqwAAAQQ"]
[Tue Mar 31 18:04:08.475767 2026] [:error] [pid 41421:tid 41441] [client 4.223.110.202:65456] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucGBSaDjY9kKFtUQBorAAAARE"]
[Tue Mar 31 18:04:09.022328 2026] [:error] [pid 6548:tid 6555] [client 4.223.110.202:64804] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucGbgIz9HgMl9YwE7oZAAAAUU"]
[Tue Mar 31 18:04:09.581704 2026] [:error] [pid 6548:tid 6569] [client 4.223.110.202:65435] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acucGbgIz9HgMl9YwE7oZgAAAVM"]
[Tue Mar 31 18:04:10.152698 2026] [:error] [pid 6548:tid 6570] [client 4.223.110.202:65487] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acucGrgIz9HgMl9YwE7oaQAAAVQ"]
[Tue Mar 31 18:04:10.692130 2026] [:error] [pid 36892:tid 36955] [client 4.223.110.202:65477] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acucGkyj9S4G0ek3O4JvnAAAAIQ"]
[Tue Mar 31 18:04:11.235904 2026] [:error] [pid 6548:tid 6555] [client 4.223.110.202:64191] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acucG7gIz9HgMl9YwE7obwAAAUU"]
[Tue Mar 31 18:04:11.773920 2026] [:error] [pid 6548:tid 6569] [client 4.223.110.202:64205] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucG7gIz9HgMl9YwE7odAAAAVM"]
[Tue Mar 31 18:04:12.315790 2026] [:error] [pid 36890:tid 36900] [client 4.223.110.202:65501] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucHJ8FASPd_uH8z7cP7wAAAAU"]
[Tue Mar 31 18:04:12.846337 2026] [:error] [pid 36890:tid 36914] [client 4.223.110.202:63566] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucHJ8FASPd_uH8z7cP8wAAABM"]
[Tue Mar 31 18:04:13.389120 2026] [:error] [pid 41421:tid 41432] [client 4.223.110.202:65445] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucHRSaDjY9kKFtUQBorwAAAQg"]
[Tue Mar 31 18:04:13.950246 2026] [:error] [pid 41421:tid 41424] [client 4.223.110.202:64823] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucHRSaDjY9kKFtUQBosAAAAQA"]
[Tue Mar 31 18:04:14.496386 2026] [:error] [pid 6548:tid 6573] [client 4.223.110.202:64835] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucHrgIz9HgMl9YwE7oewAAAVc"]
[Tue Mar 31 18:04:15.025040 2026] [:error] [pid 36982:tid 36998] [client 4.223.110.202:65411] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucH_lMmeoQKN0r_GNeXwAAAM0"]
[Tue Mar 31 18:04:15.574621 2026] [:error] [pid 6548:tid 6558] [client 4.223.110.202:64889] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucH7gIz9HgMl9YwE7ofgAAAUg"]
[Tue Mar 31 18:04:16.122318 2026] [:error] [pid 41421:tid 41433] [client 4.223.110.202:63573] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucIBSaDjY9kKFtUQBosgAAAQk"]
[Tue Mar 31 18:04:16.655674 2026] [:error] [pid 36890:tid 36895] [client 4.223.110.202:64816] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucIJ8FASPd_uH8z7cP_wAAAAA"]
[Tue Mar 31 18:04:17.211872 2026] [:error] [pid 41421:tid 41444] [client 4.223.110.202:64192] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucIRSaDjY9kKFtUQBotAAAARQ"]
[Tue Mar 31 18:04:17.749140 2026] [:error] [pid 6548:tid 6553] [client 4.223.110.202:64238] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucIbgIz9HgMl9YwE7okgAAAUM"]
[Tue Mar 31 18:04:18.301595 2026] [:error] [pid 6548:tid 6558] [client 4.223.110.202:65466] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucIrgIz9HgMl9YwE7onAAAAUg"]
[Tue Mar 31 18:04:18.832364 2026] [:error] [pid 36890:tid 36911] [client 4.223.110.202:65495] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucIp8FASPd_uH8z7cQCwAAABA"]
[Tue Mar 31 18:04:19.366805 2026] [:error] [pid 6548:tid 6566] [client 4.223.110.202:63556] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucI7gIz9HgMl9YwE7oogAAAVA"]
[Tue Mar 31 18:04:19.899943 2026] [:error] [pid 6548:tid 6558] [client 4.223.110.202:64185] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucI7gIz9HgMl9YwE7oqAAAAUg"]
[Tue Mar 31 18:04:20.444736 2026] [:error] [pid 6548:tid 6566] [client 4.223.110.202:65442] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucJLgIz9HgMl9YwE7osQAAAVA"]
[Tue Mar 31 18:04:20.983939 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:65489] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucJLgIz9HgMl9YwE7otgAAAU0"]
[Tue Mar 31 18:04:21.554062 2026] [:error] [pid 6548:tid 6567] [client 4.223.110.202:64171] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucJbgIz9HgMl9YwE7ovAAAAVE"]
[Tue Mar 31 18:04:22.084156 2026] [:error] [pid 6548:tid 6556] [client 4.223.110.202:64130] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucJrgIz9HgMl9YwE7oxgAAAUY"]
[Tue Mar 31 18:04:22.616906 2026] [:error] [pid 36890:tid 36905] [client 4.223.110.202:65422] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucJp8FASPd_uH8z7cQFgAAAAo"]
[Tue Mar 31 18:04:23.149649 2026] [:error] [pid 36892:tid 36969] [client 4.223.110.202:64246] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucJ0yj9S4G0ek3O4JvswAAAJI"]
[Tue Mar 31 18:04:23.684905 2026] [:error] [pid 36982:tid 36993] [client 4.223.110.202:65441] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucJ_lMmeoQKN0r_GNeYwAAAMg"]
[Tue Mar 31 18:04:24.219007 2026] [:error] [pid 36891:tid 36941] [client 4.223.110.202:64224] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucKJJhiMaJUqoqfl63jwAAAFE"]
[Tue Mar 31 18:04:24.749675 2026] [:error] [pid 36892:tid 36960] [client 4.223.110.202:65502] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucKEyj9S4G0ek3O4JvtwAAAIk"]
[Tue Mar 31 18:04:25.284024 2026] [:error] [pid 36982:tid 37005] [client 4.223.110.202:65458] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucKflMmeoQKN0r_GNeZQAAANQ"]
[Tue Mar 31 18:04:25.810189 2026] [:error] [pid 36982:tid 37000] [client 4.223.110.202:64138] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucKflMmeoQKN0r_GNeZwAAAM8"]
[Tue Mar 31 18:04:26.358945 2026] [:error] [pid 36982:tid 36990] [client 4.223.110.202:64233] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucKvlMmeoQKN0r_GNeawAAAMU"]
[Tue Mar 31 18:04:26.885625 2026] [:error] [pid 36982:tid 36987] [client 4.223.110.202:64839] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucKvlMmeoQKN0r_GNebwAAAMI"]
[Tue Mar 31 18:04:27.411542 2026] [:error] [pid 6548:tid 6561] [client 4.223.110.202:62894] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucK7gIz9HgMl9YwE7o4AAAAUs"]
[Tue Mar 31 18:04:27.944027 2026] [:error] [pid 36982:tid 37005] [client 4.223.110.202:64129] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucK_lMmeoQKN0r_GNecgAAANQ"]
[Tue Mar 31 18:04:28.482986 2026] [:error] [pid 6548:tid 6560] [client 4.223.110.202:64770] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucLLgIz9HgMl9YwE7o5QAAAUo"]
[Tue Mar 31 18:04:29.039895 2026] [:error] [pid 6548:tid 6561] [client 4.223.110.202:63613] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucLbgIz9HgMl9YwE7o5wAAAUs"]
[Tue Mar 31 18:04:29.582831 2026] [:error] [pid 36892:tid 36971] [client 4.223.110.202:64873] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucLUyj9S4G0ek3O4JvvAAAAJQ"]
[Tue Mar 31 18:04:30.135558 2026] [:error] [pid 36982:tid 36995] [client 4.223.110.202:64203] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucLvlMmeoQKN0r_GNeeAAAAMo"]
[Tue Mar 31 18:04:30.667611 2026] [:error] [pid 36890:tid 36903] [client 4.223.110.202:65464] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucLp8FASPd_uH8z7cQIwAAAAg"]
[Tue Mar 31 18:04:31.205906 2026] [:error] [pid 36890:tid 36900] [client 4.223.110.202:64255] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucL58FASPd_uH8z7cQJwAAAAU"]
[Tue Mar 31 18:04:31.750584 2026] [:error] [pid 36890:tid 36902] [client 4.223.110.202:62291] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucL58FASPd_uH8z7cQKgAAAAc"]
[Tue Mar 31 18:04:32.310866 2026] [:error] [pid 6548:tid 6560] [client 4.223.110.202:65465] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucMLgIz9HgMl9YwE7o7AAAAUo"]
[Tue Mar 31 18:04:32.850938 2026] [:error] [pid 36891:tid 36925] [client 4.223.110.202:65444] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucMJJhiMaJUqoqfl63lQAAAEE"]
[Tue Mar 31 18:04:33.427397 2026] [:error] [pid 41421:tid 41444] [client 4.223.110.202:65514] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucMRSaDjY9kKFtUQBovgAAARQ"]
[Tue Mar 31 18:04:33.974572 2026] [:error] [pid 36982:tid 37000] [client 4.223.110.202:65459] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucMflMmeoQKN0r_GNeegAAAM8"]
[Tue Mar 31 18:04:34.508874 2026] [:error] [pid 36892:tid 36971] [client 4.223.110.202:65507] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucMkyj9S4G0ek3O4JvwwAAAJQ"]
[Tue Mar 31 18:04:35.050271 2026] [:error] [pid 36982:tid 36992] [client 4.223.110.202:64803] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucM_lMmeoQKN0r_GNefQAAAMc"]
[Tue Mar 31 18:04:35.584564 2026] [:error] [pid 6548:tid 6553] [client 4.223.110.202:63577] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucM7gIz9HgMl9YwE7o8AAAAUM"]
[Tue Mar 31 18:04:36.135532 2026] [:error] [pid 6548:tid 6569] [client 4.223.110.202:62896] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acucNLgIz9HgMl9YwE7o8QAAAVM"]
[Tue Mar 31 18:04:36.704398 2026] [:error] [pid 6548:tid 6564] [client 4.223.110.202:64792] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acucNLgIz9HgMl9YwE7o9QAAAU4"]
[Tue Mar 31 18:04:37.240439 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:64809] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acucNbgIz9HgMl9YwE7o-QAAAU0"]
[Tue Mar 31 18:04:37.804900 2026] [:error] [pid 41421:tid 41429] [client 4.223.110.202:64812] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acucNRSaDjY9kKFtUQBowAAAAQU"]
[Tue Mar 31 18:04:38.341921 2026] [:error] [pid 41421:tid 41428] [client 4.223.110.202:64198] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucNhSaDjY9kKFtUQBowwAAAQQ"]
[Tue Mar 31 18:04:38.884255 2026] [:error] [pid 36892:tid 36961] [client 4.223.110.202:64874] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucNkyj9S4G0ek3O4JvxwAAAIo"]
[Tue Mar 31 18:04:39.461733 2026] [:error] [pid 6548:tid 6574] [client 4.223.110.202:63554] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucN7gIz9HgMl9YwE7pAwAAAVg"]
[Tue Mar 31 18:04:40.032443 2026] [:error] [pid 6548:tid 6561] [client 4.223.110.202:65471] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucOLgIz9HgMl9YwE7pCAAAAUs"]
[Tue Mar 31 18:04:40.584730 2026] [:error] [pid 36982:tid 36986] [client 4.223.110.202:65469] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucOPlMmeoQKN0r_GNehwAAAME"]
[Tue Mar 31 18:04:41.112156 2026] [:error] [pid 36982:tid 37002] [client 4.223.110.202:63557] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucOflMmeoQKN0r_GNeiAAAANE"]
[Tue Mar 31 18:04:41.660108 2026] [:error] [pid 6548:tid 6568] [client 4.223.110.202:64236] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucObgIz9HgMl9YwE7pDwAAAVI"]
[Tue Mar 31 18:04:42.259544 2026] [:error] [pid 36890:tid 36897] [client 4.223.110.202:64846] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucOp8FASPd_uH8z7cQMwAAAAI"]
[Tue Mar 31 18:04:42.796026 2026] [:error] [pid 36892:tid 36974] [client 4.223.110.202:65479] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acucOkyj9S4G0ek3O4JvygAAAJc"]
[Tue Mar 31 18:04:43.337766 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:43.606452 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:43.877923 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:44.144017 2026] [proxy_fcgi:error] [pid 36892:tid 36962] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:44.412619 2026] [proxy_fcgi:error] [pid 36892:tid 36975] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:44.679131 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:44.954075 2026] [proxy_fcgi:error] [pid 36892:tid 36957] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:45.220477 2026] [proxy_fcgi:error] [pid 36892:tid 36953] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:45.487861 2026] [proxy_fcgi:error] [pid 36892:tid 36972] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:45.755240 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:46.022649 2026] [proxy_fcgi:error] [pid 36892:tid 36968] [client 4.223.110.202:62868] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:04:46.289052 2026] [:error] [pid 36892:tid 36954] [client 4.223.110.202:62868] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acucPkyj9S4G0ek3O4Jv2QAAAIM"]
[Tue Mar 31 18:04:46.839005 2026] [:error] [pid 36982:tid 37005] [client 4.223.110.202:65410] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acucPvlMmeoQKN0r_GNekwAAANQ"]
[Tue Mar 31 18:04:47.458593 2026] [:error] [pid 36892:tid 36964] [client 4.223.110.202:64876] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acucP0yj9S4G0ek3O4Jv2gAAAI0"]
[Tue Mar 31 18:04:48.001845 2026] [:error] [pid 6548:tid 6566] [client 4.223.110.202:62965] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acucQLgIz9HgMl9YwE7pGQAAAVA"]
[Tue Mar 31 18:04:48.570575 2026] [:error] [pid 6548:tid 6568] [client 4.223.110.202:64234] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucQLgIz9HgMl9YwE7pGwAAAVI"]
[Tue Mar 31 18:04:49.125404 2026] [:error] [pid 6548:tid 6550] [client 4.223.110.202:64187] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucQbgIz9HgMl9YwE7pHgAAAUA"]
[Tue Mar 31 18:04:49.682342 2026] [:error] [pid 36982:tid 36991] [client 4.223.110.202:64783] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucQflMmeoQKN0r_GNenAAAAMY"]
[Tue Mar 31 18:04:50.256594 2026] [:error] [pid 36982:tid 36998] [client 4.223.110.202:64883] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucQvlMmeoQKN0r_GNengAAAM0"]
[Tue Mar 31 18:04:50.801891 2026] [:error] [pid 36982:tid 36986] [client 4.223.110.202:64811] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucQvlMmeoQKN0r_GNeoAAAAME"]
[Tue Mar 31 18:04:51.379363 2026] [:error] [pid 36982:tid 36997] [client 4.223.110.202:64207] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucQ_lMmeoQKN0r_GNeogAAAMw"]
[Tue Mar 31 18:04:51.933297 2026] [:error] [pid 36982:tid 36991] [client 4.223.110.202:65498] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucQ_lMmeoQKN0r_GNeqAAAAMY"]
[Tue Mar 31 18:04:52.482624 2026] [:error] [pid 6548:tid 6556] [client 4.223.110.202:62286] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucRLgIz9HgMl9YwE7pLgAAAUY"]
[Tue Mar 31 18:04:53.017304 2026] [:error] [pid 36892:tid 36974] [client 4.223.110.202:64838] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucRUyj9S4G0ek3O4Jv3AAAAJc"]
[Tue Mar 31 18:04:53.580519 2026] [:error] [pid 6548:tid 6572] [client 4.223.110.202:64240] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucRbgIz9HgMl9YwE7pNgAAAVY"]
[Tue Mar 31 18:04:54.148173 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:65434] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucRrgIz9HgMl9YwE7pOgAAAU0"]
[Tue Mar 31 18:04:54.703128 2026] [:error] [pid 41421:tid 41431] [client 4.223.110.202:64830] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucRhSaDjY9kKFtUQBozwAAAQc"]
[Tue Mar 31 18:04:55.249567 2026] [:error] [pid 6548:tid 6572] [client 4.223.110.202:64152] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acucR7gIz9HgMl9YwE7pPwAAAVY"]
[Tue Mar 31 18:04:55.836546 2026] [:error] [pid 6548:tid 6558] [client 4.223.110.202:65417] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acucR7gIz9HgMl9YwE7pRgAAAUg"]
[Tue Mar 31 18:04:56.440565 2026] [:error] [pid 36982:tid 36985] [client 4.223.110.202:62257] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acucSPlMmeoQKN0r_GNerAAAAMA"]
[Tue Mar 31 18:04:57.209227 2026] [:error] [pid 36982:tid 36998] [client 4.223.110.202:62935] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acucSflMmeoQKN0r_GNerQAAAM0"]
[Tue Mar 31 18:04:58.057274 2026] [:error] [pid 41421:tid 41436] [client 4.223.110.202:64881] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acucShSaDjY9kKFtUQBo1AAAAQw"]
[Tue Mar 31 18:04:59.584390 2026] [:error] [pid 36982:tid 36996] [client 4.223.110.202:64215] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acucS_lMmeoQKN0r_GNesgAAAMs"]
[Tue Mar 31 18:05:02.198471 2026] [:error] [pid 36982:tid 36989] [client 4.223.110.202:64174] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acucTvlMmeoQKN0r_GNetAAAAMQ"]
[Tue Mar 31 18:05:05.845838 2026] [:error] [pid 36982:tid 36987] [client 4.223.110.202:65436] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acucUflMmeoQKN0r_GNeuAAAAMI"]
[Tue Mar 31 18:05:07.338605 2026] [:error] [pid 6548:tid 6553] [client 4.223.110.202:64242] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucU7gIz9HgMl9YwE7pcQAAAUM"]
[Tue Mar 31 18:05:09.533172 2026] [:error] [pid 36982:tid 36991] [client 4.223.110.202:63572] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucVflMmeoQKN0r_GNexQAAAMY"]
[Tue Mar 31 18:05:12.771178 2026] [:error] [pid 36890:tid 36917] [client 4.223.110.202:64782] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucWJ8FASPd_uH8z7cQWAAAABY"]
[Tue Mar 31 18:05:15.683051 2026] [:error] [pid 36982:tid 36994] [client 4.223.110.202:65420] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucW_lMmeoQKN0r_GNezwAAAMk"]
[Tue Mar 31 18:05:17.095703 2026] [:error] [pid 6548:tid 6565] [client 4.223.110.202:64128] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucXbgIz9HgMl9YwE7pfQAAAU8"]
[Tue Mar 31 18:05:17.772192 2026] [:error] [pid 41421:tid 41429] [client 4.223.110.202:65526] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucXRSaDjY9kKFtUQBo6AAAAQU"]
[Tue Mar 31 18:05:18.916022 2026] [:error] [pid 6548:tid 6564] [client 4.223.110.202:64214] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucXrgIz9HgMl9YwE7pgAAAAU4"]
[Tue Mar 31 18:05:20.127941 2026] [:error] [pid 36891:tid 36948] [client 4.223.110.202:65463] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucYJJhiMaJUqoqfl63qAAAAFg"]
[Tue Mar 31 18:05:21.025693 2026] [:error] [pid 6548:tid 6569] [client 4.223.110.202:64813] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucYbgIz9HgMl9YwE7pigAAAVM"]
[Tue Mar 31 18:05:21.633846 2026] [:error] [pid 36890:tid 36915] [client 4.223.110.202:64836] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucYZ8FASPd_uH8z7cQZwAAABQ"]
[Tue Mar 31 18:05:22.214055 2026] [:error] [pid 36982:tid 36988] [client 4.223.110.202:64887] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucYvlMmeoQKN0r_GNe2wAAAMM"]
[Tue Mar 31 18:05:22.964612 2026] [:error] [pid 41421:tid 41429] [client 4.223.110.202:64871] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucYhSaDjY9kKFtUQBo7gAAAQU"]
[Tue Mar 31 18:05:23.763436 2026] [:error] [pid 36890:tid 36912] [client 4.223.110.202:64850] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucY58FASPd_uH8z7cQbgAAABE"]
[Tue Mar 31 18:05:24.435654 2026] [:error] [pid 36892:tid 36954] [client 4.223.110.202:64171] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucZEyj9S4G0ek3O4Jv-AAAAIM"]
[Tue Mar 31 18:05:25.329442 2026] [:error] [pid 36890:tid 36901] [client 4.223.110.202:64831] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucZZ8FASPd_uH8z7cQcgAAAAY"]
[Tue Mar 31 18:05:26.089172 2026] [:error] [pid 36892:tid 36955] [client 4.223.110.202:64133] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucZkyj9S4G0ek3O4Jv_gAAAIQ"]
[Tue Mar 31 18:05:26.881403 2026] [:error] [pid 41421:tid 41441] [client 4.223.110.202:64228] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucZhSaDjY9kKFtUQBo8gAAARE"]
[Tue Mar 31 18:05:27.588544 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:64161] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucZ7gIz9HgMl9YwE7pkwAAAU0"]
[Tue Mar 31 18:05:28.705491 2026] [:error] [pid 41421:tid 41437] [client 4.223.110.202:64814] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucaBSaDjY9kKFtUQBpEwAAAQ0"]
[Tue Mar 31 18:05:29.940189 2026] [:error] [pid 36982:tid 37003] [client 4.223.110.202:65478] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucaflMmeoQKN0r_GNe5wAAANI"]
[Tue Mar 31 18:05:31.453794 2026] [:error] [pid 36890:tid 36918] [client 4.223.110.202:64175] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acuca58FASPd_uH8z7cQjQAAABc"]
[Tue Mar 31 18:05:32.474346 2026] [:error] [pid 6548:tid 6573] [client 4.223.110.202:64141] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucbLgIz9HgMl9YwE7pqgAAAVc"]
[Tue Mar 31 18:05:33.157180 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:33.398671 2026] [proxy_fcgi:error] [pid 6548:tid 6565] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:33.638166 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:33.908009 2026] [proxy_fcgi:error] [pid 6548:tid 6571] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:34.148994 2026] [proxy_fcgi:error] [pid 6548:tid 6551] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:34.338560 2026] [:error] [pid 6548:tid 6568] [client 4.223.110.202:64818] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucbrgIz9HgMl9YwE7puQAAAVI"]
[Tue Mar 31 18:05:34.390233 2026] [proxy_fcgi:error] [pid 6548:tid 6563] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:34.656765 2026] [proxy_fcgi:error] [pid 6548:tid 6555] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:34.909086 2026] [proxy_fcgi:error] [pid 6548:tid 6556] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:35.149979 2026] [proxy_fcgi:error] [pid 6548:tid 6560] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:35.400763 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 172.161.1.56:65248] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:35.667399 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:65248] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucb7gIz9HgMl9YwE7pwQAAAVY"]
[Tue Mar 31 18:05:35.843855 2026] [:error] [pid 36982:tid 37004] [client 4.223.110.202:65447] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucb_lMmeoQKN0r_GNe9gAAANM"]
[Tue Mar 31 18:05:36.141480 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:65273] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuccPlMmeoQKN0r_GNe-QAAANY"]
[Tue Mar 31 18:05:36.619459 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:65156] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuccPlMmeoQKN0r_GNe_QAAAMk"]
[Tue Mar 31 18:05:37.123191 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:65222] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuccRSaDjY9kKFtUQBpMgAAAQQ"]
[Tue Mar 31 18:05:37.623710 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:65275] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuccflMmeoQKN0r_GNfAAAAAME"]
[Tue Mar 31 18:05:37.642125 2026] [:error] [pid 36982:tid 37002] [client 4.223.110.202:63519] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acuccflMmeoQKN0r_GNfAQAAANE"]
[Tue Mar 31 18:05:38.149794 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:65231] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuccrgIz9HgMl9YwE7pxwAAAUA"]
[Tue Mar 31 18:05:38.520782 2026] [:error] [pid 36892:tid 36969] [client 4.223.110.202:64148] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucckyj9S4G0ek3O4JwIQAAAJI"]
[Tue Mar 31 18:05:38.647908 2026] [:error] [pid 36982:tid 36987] [client 172.161.1.56:65242] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuccvlMmeoQKN0r_GNfBwAAAMI"]
[Tue Mar 31 18:05:39.167813 2026] [:error] [pid 41421:tid 41448] [client 172.161.1.56:65269] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuccxSaDjY9kKFtUQBpNwAAARg"]
[Tue Mar 31 18:05:39.422646 2026] [:error] [pid 6548:tid 6565] [client 4.223.110.202:62874] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucc7gIz9HgMl9YwE7p0QAAAU8"]
[Tue Mar 31 18:05:39.656333 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:65267] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucc_lMmeoQKN0r_GNfCQAAAMg"]
[Tue Mar 31 18:05:40.130072 2026] [:error] [pid 6548:tid 6563] [client 172.161.1.56:65218] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucdLgIz9HgMl9YwE7p1gAAAU0"]
[Tue Mar 31 18:05:40.634616 2026] [:error] [pid 36892:tid 36957] [client 172.161.1.56:65251] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucdEyj9S4G0ek3O4JwIwAAAIY"]
[Tue Mar 31 18:05:40.650855 2026] [:error] [pid 36890:tid 36899] [client 4.223.110.202:65454] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucdJ8FASPd_uH8z7cQmAAAAAQ"]
[Tue Mar 31 18:05:41.139095 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:65219] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucdbgIz9HgMl9YwE7p3gAAAVE"]
[Tue Mar 31 18:05:41.617397 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:65266] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucdRSaDjY9kKFtUQBpOgAAAQw"]
[Tue Mar 31 18:05:41.674566 2026] [:error] [pid 41421:tid 41429] [client 4.223.110.202:64241] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucdRSaDjY9kKFtUQBpOwAAAQU"]
[Tue Mar 31 18:05:42.119768 2026] [:error] [pid 36890:tid 36904] [client 172.161.1.56:65228] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucdp8FASPd_uH8z7cQmwAAAAk"]
[Tue Mar 31 18:05:42.323956 2026] [:error] [pid 41421:tid 41425] [client 4.223.110.202:64779] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucdhSaDjY9kKFtUQBpPQAAAQE"]
[Tue Mar 31 18:05:42.817727 2026] [:error] [pid 36890:tid 36905] [client 172.161.1.56:65253] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucdp8FASPd_uH8z7cQnQAAAAo"]
[Tue Mar 31 18:05:42.951394 2026] [:error] [pid 41421:tid 41426] [client 4.223.110.202:65497] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucdhSaDjY9kKFtUQBpPwAAAQI"]
[Tue Mar 31 18:05:43.402798 2026] [:error] [pid 36892:tid 36966] [client 172.161.1.56:65178] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucd0yj9S4G0ek3O4JwJwAAAI8"]
[Tue Mar 31 18:05:43.857160 2026] [:error] [pid 36891:tid 36937] [client 4.223.110.202:61603] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucd5JhiMaJUqoqfl63xwAAAE0"]
[Tue Mar 31 18:05:43.898958 2026] [:error] [pid 36891:tid 36931] [client 172.161.1.56:65216] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucd5JhiMaJUqoqfl63yAAAAEc"]
[Tue Mar 31 18:05:44.404781 2026] [:error] [pid 36891:tid 36946] [client 172.161.1.56:65171] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuceJJhiMaJUqoqfl63ygAAAFY"]
[Tue Mar 31 18:05:44.548481 2026] [:error] [pid 41421:tid 41433] [client 4.223.110.202:64244] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuceBSaDjY9kKFtUQBpQwAAAQk"]
[Tue Mar 31 18:05:44.890477 2026] [:error] [pid 36892:tid 36955] [client 172.161.1.56:65172] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuceEyj9S4G0ek3O4JwLwAAAIQ"]
[Tue Mar 31 18:05:45.382446 2026] [:error] [pid 36890:tid 36914] [client 172.161.1.56:65152] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuceZ8FASPd_uH8z7cQpAAAABM"]
[Tue Mar 31 18:05:45.567488 2026] [:error] [pid 41421:tid 41448] [client 4.223.110.202:63547] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuceRSaDjY9kKFtUQBpRgAAARg"]
[Tue Mar 31 18:05:45.869646 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:65270] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucebgIz9HgMl9YwE7p7QAAAVU"]
[Tue Mar 31 18:05:46.415894 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:4061] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucergIz9HgMl9YwE7p8QAAAU4"]
[Tue Mar 31 18:05:46.861753 2026] [proxy_fcgi:error] [pid 6548:tid 6567] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:46.912422 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:65262] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucergIz9HgMl9YwE7p9QAAAUg"]
[Tue Mar 31 18:05:47.129037 2026] [proxy_fcgi:error] [pid 6548:tid 6571] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:47.396132 2026] [proxy_fcgi:error] [pid 6548:tid 6572] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:47.424625 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:65167] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuce7gIz9HgMl9YwE7p-QAAAVM"]
[Tue Mar 31 18:05:47.670277 2026] [proxy_fcgi:error] [pid 6548:tid 6565] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:47.914867 2026] [:error] [pid 36891:tid 36943] [client 172.161.1.56:65176] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acuce5JhiMaJUqoqfl630AAAAFM"]
[Tue Mar 31 18:05:47.937860 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:48.210712 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:48.444750 2026] [:error] [pid 36890:tid 36899] [client 172.161.1.56:4039] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucfJ8FASPd_uH8z7cQqwAAAAQ"]
[Tue Mar 31 18:05:48.489063 2026] [proxy_fcgi:error] [pid 6548:tid 6570] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:48.940437 2026] [:error] [pid 36891:tid 36937] [client 172.161.1.56:65175] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucfJJhiMaJUqoqfl630wAAAE0"]
[Tue Mar 31 18:05:49.038606 2026] [proxy_fcgi:error] [pid 6548:tid 6573] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:49.310033 2026] [proxy_fcgi:error] [pid 6548:tid 6569] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:49.491540 2026] [:error] [pid 6548:tid 6555] [client 172.161.1.56:65249] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucfbgIz9HgMl9YwE7qCQAAAUU"]
[Tue Mar 31 18:05:49.577266 2026] [proxy_fcgi:error] [pid 6548:tid 6565] [client 4.223.110.202:65460] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:05:49.845817 2026] [:error] [pid 6548:tid 6564] [client 4.223.110.202:65460] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acucfbgIz9HgMl9YwE7qDAAAAU4"]
[Tue Mar 31 18:05:50.053988 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:65213] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucfvlMmeoQKN0r_GNfGwAAANU"]
[Tue Mar 31 18:05:50.552399 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:65274] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucfrgIz9HgMl9YwE7qDgAAAUk"]
[Tue Mar 31 18:05:50.757186 2026] [:error] [pid 6548:tid 6552] [client 4.223.110.202:64226] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acucfrgIz9HgMl9YwE7qDwAAAUI"]
[Tue Mar 31 18:05:51.053512 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:4081] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucf7gIz9HgMl9YwE7qEwAAAVU"]
[Tue Mar 31 18:05:51.361699 2026] [:error] [pid 41421:tid 41447] [client 4.223.110.202:62929] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acucfxSaDjY9kKFtUQBpUQAAARc"]
[Tue Mar 31 18:05:51.544728 2026] [:error] [pid 6548:tid 6565] [client 172.161.1.56:65163] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucf7gIz9HgMl9YwE7qGgAAAU8"]
[Tue Mar 31 18:05:52.018949 2026] [:error] [pid 36890:tid 36900] [client 172.161.1.56:65166] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucgJ8FASPd_uH8z7cQswAAAAU"]
[Tue Mar 31 18:05:52.186426 2026] [:error] [pid 41421:tid 41442] [client 4.223.110.202:64252] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acucgBSaDjY9kKFtUQBpUgAAARI"]
[Tue Mar 31 18:05:52.530347 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:65229] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucgPlMmeoQKN0r_GNfIgAAANM"]
[Tue Mar 31 18:05:53.020303 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:4037] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucgflMmeoQKN0r_GNfIwAAAM4"]
[Tue Mar 31 18:05:53.078296 2026] [:error] [pid 6548:tid 6569] [client 4.223.110.202:64822] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acucgbgIz9HgMl9YwE7qIQAAAVM"]
[Tue Mar 31 18:05:53.526696 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:65197] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucgbgIz9HgMl9YwE7qIwAAAUw"]
[Tue Mar 31 18:05:53.832569 2026] [:error] [pid 6548:tid 6560] [client 4.223.110.202:62921] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acucgbgIz9HgMl9YwE7qJgAAAUo"]
[Tue Mar 31 18:05:53.998917 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:65177] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucgbgIz9HgMl9YwE7qKgAAAUg"]
[Tue Mar 31 18:05:54.501069 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:65272] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucgrgIz9HgMl9YwE7qLgAAAVU"]
[Tue Mar 31 18:05:54.981010 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:65260] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucghSaDjY9kKFtUQBpVQAAARU"]
[Tue Mar 31 18:05:55.090466 2026] [:error] [pid 36890:tid 36917] [client 4.223.110.202:65511] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acucg58FASPd_uH8z7cQtwAAABY"]
[Tue Mar 31 18:05:55.489016 2026] [:error] [pid 41421:tid 41425] [client 172.161.1.56:65279] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucgxSaDjY9kKFtUQBpVgAAAQE"]
[Tue Mar 31 18:05:55.797074 2026] [:error] [pid 36891:tid 36929] [client 4.223.110.202:63614] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acucg5JhiMaJUqoqfl631wAAAEU"]
[Tue Mar 31 18:05:56.002870 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:65261] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuchBSaDjY9kKFtUQBpVwAAAQI"]
[Tue Mar 31 18:05:56.505654 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:4049] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuchPlMmeoQKN0r_GNfKQAAAMk"]
[Tue Mar 31 18:05:56.557632 2026] [:error] [pid 36892:tid 36969] [client 4.223.110.202:62284] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuchEyj9S4G0ek3O4JwOAAAAJI"]
[Tue Mar 31 18:05:56.978756 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:65221] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuchPlMmeoQKN0r_GNfKwAAANg"]
[Tue Mar 31 18:05:57.408617 2026] [:error] [pid 41421:tid 41439] [client 4.223.110.202:64817] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuchRSaDjY9kKFtUQBpXAAAAQ8"]
[Tue Mar 31 18:05:57.497084 2026] [:error] [pid 36892:tid 36957] [client 172.161.1.56:65246] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuchUyj9S4G0ek3O4JwOgAAAIY"]
[Tue Mar 31 18:05:58.001750 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:4064] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuchhSaDjY9kKFtUQBpXQAAARc"]
[Tue Mar 31 18:05:58.148272 2026] [:error] [pid 36982:tid 37008] [client 4.223.110.202:65481] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuchvlMmeoQKN0r_GNfLgAAANc"]
[Tue Mar 31 18:05:58.496847 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:65263] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuchvlMmeoQKN0r_GNfMQAAANQ"]
[Tue Mar 31 18:05:58.995193 2026] [:error] [pid 36892:tid 36952] [client 172.161.1.56:65252] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuchkyj9S4G0ek3O4JwOwAAAIE"]
[Tue Mar 31 18:05:59.194073 2026] [:error] [pid 41421:tid 41442] [client 4.223.110.202:64219] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuchxSaDjY9kKFtUQBpXgAAARI"]
[Tue Mar 31 18:05:59.472215 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:65278] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuch_lMmeoQKN0r_GNfMwAAANU"]
[Tue Mar 31 18:05:59.975328 2026] [:error] [pid 41421:tid 41435] [client 172.161.1.56:65256] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuchxSaDjY9kKFtUQBpYQAAAQs"]
[Tue Mar 31 18:06:00.415682 2026] [:error] [pid 36890:tid 36899] [client 4.223.110.202:63598] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuciJ8FASPd_uH8z7cQvQAAAAQ"]
[Tue Mar 31 18:06:00.454834 2026] [:error] [pid 36892:tid 36956] [client 172.161.1.56:4036] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuciEyj9S4G0ek3O4JwPwAAAIU"]
[Tue Mar 31 18:06:00.949157 2026] [:error] [pid 36890:tid 36902] [client 172.161.1.56:65155] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuciJ8FASPd_uH8z7cQvgAAAAc"]
[Tue Mar 31 18:06:01.283941 2026] [:error] [pid 36890:tid 36896] [client 4.223.110.202:65486] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuciZ8FASPd_uH8z7cQvwAAAAE"]
[Tue Mar 31 18:06:01.441023 2026] [:error] [pid 36891:tid 36925] [client 172.161.1.56:65217] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuciZJhiMaJUqoqfl633gAAAEE"]
[Tue Mar 31 18:06:01.917979 2026] [:error] [pid 36892:tid 36970] [client 172.161.1.56:65192] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuciUyj9S4G0ek3O4JwQAAAAJM"]
[Tue Mar 31 18:06:02.140285 2026] [:error] [pid 6548:tid 6572] [client 4.223.110.202:65457] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acucirgIz9HgMl9YwE7qRgAAAVY"]
[Tue Mar 31 18:06:02.401295 2026] [:error] [pid 36892:tid 36955] [client 172.161.1.56:65179] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucikyj9S4G0ek3O4JwQQAAAIQ"]
[Tue Mar 31 18:06:02.852460 2026] [:error] [pid 41421:tid 41438] [client 4.223.110.202:62918] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acucihSaDjY9kKFtUQBpaQAAAQ4"]
[Tue Mar 31 18:06:02.883118 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:65243] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acucirgIz9HgMl9YwE7qSQAAAVI"]
[Tue Mar 31 18:06:03.368792 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:65174] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuci7gIz9HgMl9YwE7qTAAAAVM"]
[Tue Mar 31 18:06:03.412159 2026] [:error] [pid 36982:tid 36985] [client 4.223.110.202:63509] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuci_lMmeoQKN0r_GNfNQAAAMA"]
[Tue Mar 31 18:06:03.840828 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:65204] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acuci7gIz9HgMl9YwE7qTgAAAUM"]
[Tue Mar 31 18:06:04.167031 2026] [:error] [pid 6548:tid 6551] [client 4.223.110.202:64245] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acucjLgIz9HgMl9YwE7qUQAAAUE"]
[Tue Mar 31 18:06:04.321884 2026] [:error] [pid 41421:tid 41442] [client 172.161.1.56:4073] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucjBSaDjY9kKFtUQBpbAAAARI"]
[Tue Mar 31 18:06:04.794687 2026] [:error] [pid 41421:tid 41432] [client 172.161.1.56:65265] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucjBSaDjY9kKFtUQBpbQAAAQg"]
[Tue Mar 31 18:06:04.806769 2026] [:error] [pid 6548:tid 6555] [client 4.223.110.202:64169] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acucjLgIz9HgMl9YwE7qVgAAAUU"]
[Tue Mar 31 18:06:05.287485 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:65206] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucjbgIz9HgMl9YwE7qWgAAAUg"]
[Tue Mar 31 18:06:05.485501 2026] [:error] [pid 36982:tid 36998] [client 4.223.110.202:63543] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acucjflMmeoQKN0r_GNfNwAAAM0"]
[Tue Mar 31 18:06:05.772905 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:65195] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucjRSaDjY9kKFtUQBpbwAAAQw"]
[Tue Mar 31 18:06:06.275610 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:65173] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucjhSaDjY9kKFtUQBpcAAAAQk"]
[Tue Mar 31 18:06:06.299781 2026] [:error] [pid 41421:tid 41428] [client 4.223.110.202:64235] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acucjhSaDjY9kKFtUQBpcQAAAQQ"]
[Tue Mar 31 18:06:06.755787 2026] [:error] [pid 41421:tid 41427] [client 172.161.1.56:65183] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucjhSaDjY9kKFtUQBpcwAAAQM"]
[Tue Mar 31 18:06:07.235191 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:65247] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucjxSaDjY9kKFtUQBpdgAAARc"]
[Tue Mar 31 18:06:07.350375 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:62850] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acucj7gIz9HgMl9YwE7qZQAAAU0"]
[Tue Mar 31 18:06:07.747069 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:65199] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucj7gIz9HgMl9YwE7qZwAAAVQ"]
[Tue Mar 31 18:06:08.072185 2026] [:error] [pid 41421:tid 41426] [client 4.223.110.202:64849] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuckBSaDjY9kKFtUQBpeQAAAQI"]
[Tue Mar 31 18:06:08.233073 2026] [:error] [pid 36982:tid 36988] [client 172.161.1.56:65238] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuckPlMmeoQKN0r_GNfOQAAAMM"]
[Tue Mar 31 18:06:08.688263 2026] [:error] [pid 36892:tid 36952] [client 4.223.110.202:64859] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuckEyj9S4G0ek3O4JwRAAAAIE"]
[Tue Mar 31 18:06:08.716877 2026] [:error] [pid 36892:tid 36958] [client 172.161.1.56:65158] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuckEyj9S4G0ek3O4JwRQAAAIc"]
[Tue Mar 31 18:06:09.192394 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:3995] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuckflMmeoQKN0r_GNfOgAAAMY"]
[Tue Mar 31 18:06:09.333163 2026] [:error] [pid 41421:tid 41424] [client 4.223.110.202:64808] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuckRSaDjY9kKFtUQBpewAAAQA"]
[Tue Mar 31 18:06:09.678606 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:65227] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuckflMmeoQKN0r_GNfPgAAAMA"]
[Tue Mar 31 18:06:10.003377 2026] [:error] [pid 6548:tid 6553] [client 4.223.110.202:64194] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuckrgIz9HgMl9YwE7qcQAAAUM"]
[Tue Mar 31 18:06:10.187491 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:65207] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuckrgIz9HgMl9YwE7qcgAAAVc"]
[Tue Mar 31 18:06:10.661552 2026] [:error] [pid 6548:tid 6554] [client 172.161.1.56:4040] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuckrgIz9HgMl9YwE7qdAAAAUQ"]
[Tue Mar 31 18:06:10.704677 2026] [:error] [pid 6548:tid 6559] [client 4.223.110.202:64890] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuckrgIz9HgMl9YwE7qdQAAAUk"]
[Tue Mar 31 18:06:11.142201 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:4052] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuck7gIz9HgMl9YwE7qeQAAAVI"]
[Tue Mar 31 18:06:11.351253 2026] [:error] [pid 41421:tid 41438] [client 4.223.110.202:64778] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuckxSaDjY9kKFtUQBpfgAAAQ4"]
[Tue Mar 31 18:06:11.578692 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:11.637286 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:65257] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuck7gIz9HgMl9YwE7qfwAAAVA"]
[Tue Mar 31 18:06:11.833691 2026] [proxy_fcgi:error] [pid 36892:tid 36963] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:12.055406 2026] [:error] [pid 6548:tid 6556] [client 4.223.110.202:64800] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuclLgIz9HgMl9YwE7qgQAAAUY"]
[Tue Mar 31 18:06:12.106443 2026] [proxy_fcgi:error] [pid 36892:tid 36975] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:12.142443 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:65236] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuclLgIz9HgMl9YwE7qggAAAUk"]
[Tue Mar 31 18:06:12.368018 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:12.619137 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:65181] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuclPlMmeoQKN0r_GNfQgAAANM"]
[Tue Mar 31 18:06:12.628605 2026] [:error] [pid 36982:tid 36990] [client 4.223.110.202:64132] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuclPlMmeoQKN0r_GNfQwAAAMU"]
[Tue Mar 31 18:06:13.124640 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:65220] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuclbgIz9HgMl9YwE7qiwAAAVY"]
[Tue Mar 31 18:06:13.233696 2026] [proxy_fcgi:error] [pid 36892:tid 36967] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:13.380564 2026] [:error] [pid 6548:tid 6560] [client 4.223.110.202:64181] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuclbgIz9HgMl9YwE7qjQAAAUo"]
[Tue Mar 31 18:06:13.488795 2026] [proxy_fcgi:error] [pid 36892:tid 36955] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:13.608364 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:4067] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuclbgIz9HgMl9YwE7qjgAAAVc"]
[Tue Mar 31 18:06:13.983772 2026] [:error] [pid 6548:tid 6572] [client 4.223.110.202:64134] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuclbgIz9HgMl9YwE7qkgAAAVY"]
[Tue Mar 31 18:06:14.163977 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:65225] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuclhSaDjY9kKFtUQBpggAAAQA"]
[Tue Mar 31 18:06:14.325414 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:14.581059 2026] [proxy_fcgi:error] [pid 36892:tid 36974] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:14.672590 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:65170] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuclrgIz9HgMl9YwE7qlgAAAVA"]
[Tue Mar 31 18:06:14.674850 2026] [:error] [pid 6548:tid 6570] [client 4.223.110.202:63536] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acuclrgIz9HgMl9YwE7qlwAAAVQ"]
[Tue Mar 31 18:06:15.176244 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:65244] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucl7gIz9HgMl9YwE7qmwAAAUY"]
[Tue Mar 31 18:06:15.259726 2026] [:error] [pid 6548:tid 6550] [client 4.223.110.202:64166] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acucl7gIz9HgMl9YwE7qnAAAAUA"]
[Tue Mar 31 18:06:15.367340 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:15.653128 2026] [proxy_fcgi:error] [pid 36892:tid 36957] [client 20.238.71.89:14869] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:15.671887 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:65233] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucl7gIz9HgMl9YwE7qnQAAAVM"]
[Tue Mar 31 18:06:15.841779 2026] [:error] [pid 6548:tid 6567] [client 4.223.110.202:64211] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acucl7gIz9HgMl9YwE7qngAAAVE"]
[Tue Mar 31 18:06:15.933962 2026] [:error] [pid 36892:tid 36958] [client 20.238.71.89:14833] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucl0yj9S4G0ek3O4JwVwAAAIc"]
[Tue Mar 31 18:06:16.231963 2026] [:error] [pid 36982:tid 36995] [client 172.161.1.56:4057] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucmPlMmeoQKN0r_GNfSAAAAMo"]
[Tue Mar 31 18:06:16.426156 2026] [:error] [pid 36892:tid 36972] [client 20.238.71.89:14869] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucmEyj9S4G0ek3O4JwWAAAAJU"]
[Tue Mar 31 18:06:16.437965 2026] [:error] [pid 41421:tid 41439] [client 20.238.71.89:14844] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucmBSaDjY9kKFtUQBphQAAAQ8"]
[Tue Mar 31 18:06:16.478968 2026] [:error] [pid 6548:tid 6563] [client 4.223.110.202:62927] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acucmLgIz9HgMl9YwE7qogAAAU0"]
[Tue Mar 31 18:06:16.947058 2026] [:error] [pid 41421:tid 41438] [client 20.238.71.89:14845] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucmBSaDjY9kKFtUQBphgAAAQ4"]
[Tue Mar 31 18:06:16.965437 2026] [:error] [pid 41421:tid 41446] [client 172.161.1.56:65164] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucmBSaDjY9kKFtUQBphwAAARY"]
[Tue Mar 31 18:06:17.037517 2026] [:error] [pid 41421:tid 41447] [client 20.238.71.89:6123] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucmRSaDjY9kKFtUQBpiAAAARc"]
[Tue Mar 31 18:06:17.315141 2026] [:error] [pid 41421:tid 41444] [client 4.223.110.202:63600] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acucmRSaDjY9kKFtUQBpiQAAARQ"]
[Tue Mar 31 18:06:17.456270 2026] [:error] [pid 36892:tid 36960] [client 20.238.71.89:14746] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucmUyj9S4G0ek3O4JwWQAAAIk"]
[Tue Mar 31 18:06:17.456681 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:4088] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucmRSaDjY9kKFtUQBpiwAAARU"]
[Tue Mar 31 18:06:17.541654 2026] [:error] [pid 36891:tid 36941] [client 20.238.71.89:14860] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucmZJhiMaJUqoqfl634QAAAFE"]
[Tue Mar 31 18:06:17.886304 2026] [:error] [pid 36890:tid 36897] [client 4.223.110.202:62299] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acucmZ8FASPd_uH8z7cQzAAAAAI"]
[Tue Mar 31 18:06:17.961637 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:65165] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucmflMmeoQKN0r_GNfSwAAAMU"]
[Tue Mar 31 18:06:18.122268 2026] [:error] [pid 36891:tid 36945] [client 20.238.71.89:14964] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acucmpJhiMaJUqoqfl634gAAAFU"]
[Tue Mar 31 18:06:18.422444 2026] [:error] [pid 36891:tid 36932] [client 4.223.110.202:63552] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acucmpJhiMaJUqoqfl634wAAAEg"]
[Tue Mar 31 18:06:18.627801 2026] [:error] [pid 36891:tid 36948] [client 20.238.71.89:14940] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucmpJhiMaJUqoqfl635AAAAFg"]
[Tue Mar 31 18:06:18.919472 2026] [:error] [pid 36890:tid 36899] [client 172.161.1.56:65169] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucmp8FASPd_uH8z7cQzQAAAAQ"]
[Tue Mar 31 18:06:18.964825 2026] [:error] [pid 36892:tid 36971] [client 4.223.110.202:64250] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acucmkyj9S4G0ek3O4JwXAAAAJQ"]
[Tue Mar 31 18:06:19.077554 2026] [:error] [pid 36890:tid 36902] [client 20.238.71.89:14749] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucm58FASPd_uH8z7cQzgAAAAc"]
[Tue Mar 31 18:06:19.132356 2026] [:error] [pid 36891:tid 36930] [client 20.238.71.89:14851] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucm5JhiMaJUqoqfl635gAAAEY"]
[Tue Mar 31 18:06:19.446477 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:4038] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucm7gIz9HgMl9YwE7qqgAAAUA"]
[Tue Mar 31 18:06:19.499865 2026] [:error] [pid 36890:tid 36905] [client 4.223.110.202:64860] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acucm58FASPd_uH8z7cQzwAAAAo"]
[Tue Mar 31 18:06:19.598667 2026] [:error] [pid 36891:tid 36940] [client 20.238.71.89:14801] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucm5JhiMaJUqoqfl636QAAAFA"]
[Tue Mar 31 18:06:19.636291 2026] [:error] [pid 41421:tid 41438] [client 20.238.71.89:14858] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucmxSaDjY9kKFtUQBplAAAAQ4"]
[Tue Mar 31 18:06:19.926195 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:65254] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucm7gIz9HgMl9YwE7qrAAAAUM"]
[Tue Mar 31 18:06:20.037977 2026] [:error] [pid 41421:tid 41432] [client 4.223.110.202:64254] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acucnBSaDjY9kKFtUQBplQAAAQg"]
[Tue Mar 31 18:06:20.128680 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:14826] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucnLgIz9HgMl9YwE7qrgAAAUQ"]
[Tue Mar 31 18:06:20.160650 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:14848] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acucnLgIz9HgMl9YwE7qrwAAAUw"]
[Tue Mar 31 18:06:20.435262 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:4032] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucnPlMmeoQKN0r_GNfUAAAAMs"]
[Tue Mar 31 18:06:20.603272 2026] [:error] [pid 36890:tid 36904] [client 4.223.110.202:65504] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acucnJ8FASPd_uH8z7cQ1AAAAAk"]
[Tue Mar 31 18:06:20.673527 2026] [:error] [pid 6548:tid 6572] [client 20.238.71.89:14932] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucnLgIz9HgMl9YwE7qsQAAAVY"]
[Tue Mar 31 18:06:20.674738 2026] [:error] [pid 6548:tid 6557] [client 20.238.71.89:14840] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acucnLgIz9HgMl9YwE7qsgAAAUc"]
[Tue Mar 31 18:06:20.917657 2026] [:error] [pid 6548:tid 6563] [client 172.161.1.56:65277] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucnLgIz9HgMl9YwE7qswAAAU0"]
[Tue Mar 31 18:06:21.177768 2026] [:error] [pid 6548:tid 6566] [client 20.238.71.89:14948] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucnbgIz9HgMl9YwE7qtAAAAVA"]
[Tue Mar 31 18:06:21.189941 2026] [:error] [pid 36890:tid 36910] [client 4.223.110.202:62859] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acucnZ8FASPd_uH8z7cQ1gAAAA8"]
[Tue Mar 31 18:06:21.395250 2026] [:error] [pid 36982:tid 36995] [client 172.161.1.56:65180] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucnflMmeoQKN0r_GNfUwAAAMo"]
[Tue Mar 31 18:06:21.761062 2026] [:error] [pid 36892:tid 36973] [client 4.223.110.202:63553] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acucnUyj9S4G0ek3O4JwXgAAAJY"]
[Tue Mar 31 18:06:21.888631 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:65239] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucnRSaDjY9kKFtUQBpnwAAAQk"]
[Tue Mar 31 18:06:22.265625 2026] [:error] [pid 36890:tid 36895] [client 20.238.71.89:14872] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucnp8FASPd_uH8z7cQ1wAAAAA"]
[Tue Mar 31 18:06:22.333333 2026] [:error] [pid 6548:tid 6558] [client 4.223.110.202:64217] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acucnrgIz9HgMl9YwE7qtgAAAUg"]
[Tue Mar 31 18:06:22.578552 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:65234] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucnrgIz9HgMl9YwE7quAAAAUA"]
[Tue Mar 31 18:06:22.792023 2026] [:error] [pid 41421:tid 41444] [client 20.238.71.89:14920] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acucnhSaDjY9kKFtUQBpoQAAARQ"]
[Tue Mar 31 18:06:22.899174 2026] [:error] [pid 6548:tid 6565] [client 4.223.110.202:63529] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acucnrgIz9HgMl9YwE7quwAAAU8"]
[Tue Mar 31 18:06:23.058803 2026] [:error] [pid 36891:tid 36942] [client 172.161.1.56:65159] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucn5JhiMaJUqoqfl636wAAAFI"]
[Tue Mar 31 18:06:23.298680 2026] [:error] [pid 36892:tid 36952] [client 20.238.71.89:14923] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucn0yj9S4G0ek3O4JwYQAAAIE"]
[Tue Mar 31 18:06:23.532774 2026] [:error] [pid 36890:tid 36918] [client 172.161.1.56:65259] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucn58FASPd_uH8z7cQ2QAAABc"]
[Tue Mar 31 18:06:23.662656 2026] [:error] [pid 6548:tid 6567] [client 4.223.110.202:63535] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acucn7gIz9HgMl9YwE7qwQAAAVE"]
[Tue Mar 31 18:06:23.803173 2026] [:error] [pid 6548:tid 6564] [client 20.238.71.89:14957] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucn7gIz9HgMl9YwE7qwgAAAU4"]
[Tue Mar 31 18:06:24.032332 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:65202] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucoJ8FASPd_uH8z7cQ2wAAABA"]
[Tue Mar 31 18:06:24.285739 2026] [:error] [pid 6548:tid 6571] [client 4.223.110.202:65448] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acucoLgIz9HgMl9YwE7qxAAAAVU"]
[Tue Mar 31 18:06:24.335544 2026] [:error] [pid 6548:tid 6550] [client 20.238.71.89:14907] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucoLgIz9HgMl9YwE7qxgAAAUA"]
[Tue Mar 31 18:06:24.513979 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:4082] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucoLgIz9HgMl9YwE7qxwAAAUM"]
[Tue Mar 31 18:06:24.835404 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:14935] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acucoLgIz9HgMl9YwE7qywAAAU8"]
[Tue Mar 31 18:06:24.838948 2026] [:error] [pid 6548:tid 6573] [client 4.223.110.202:63583] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acucoLgIz9HgMl9YwE7qzAAAAVc"]
[Tue Mar 31 18:06:25.044605 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:65162] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucobgIz9HgMl9YwE7qzQAAAUc"]
[Tue Mar 31 18:06:25.362091 2026] [:error] [pid 41421:tid 41431] [client 20.238.71.89:14850] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucoRSaDjY9kKFtUQBppgAAAQc"]
[Tue Mar 31 18:06:25.411838 2026] [:error] [pid 41421:tid 41426] [client 4.223.110.202:62297] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acucoRSaDjY9kKFtUQBppwAAAQI"]
[Tue Mar 31 18:06:25.532179 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:65209] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucobgIz9HgMl9YwE7q0QAAAVE"]
[Tue Mar 31 18:06:25.874247 2026] [:error] [pid 41421:tid 41439] [client 20.238.71.89:14852] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucoRSaDjY9kKFtUQBpqQAAAQ8"]
[Tue Mar 31 18:06:25.983290 2026] [:error] [pid 41421:tid 41425] [client 4.223.110.202:64794] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acucoRSaDjY9kKFtUQBpqgAAAQE"]
[Tue Mar 31 18:06:26.030111 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:65208] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acucohSaDjY9kKFtUQBpqwAAAQ4"]
[Tue Mar 31 18:06:26.379015 2026] [:error] [pid 36892:tid 36971] [client 20.238.71.89:14934] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucokyj9S4G0ek3O4JwYwAAAJQ"]
[Tue Mar 31 18:06:26.522416 2026] [:error] [pid 36890:tid 36902] [client 172.161.1.56:4044] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acucop8FASPd_uH8z7cQ3wAAAAc"]
[Tue Mar 31 18:06:26.578881 2026] [:error] [pid 6548:tid 6553] [client 4.223.110.202:64785] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acucorgIz9HgMl9YwE7q1wAAAUM"]
[Tue Mar 31 18:06:26.958358 2026] [:error] [pid 36890:tid 36905] [client 20.238.71.89:14921] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acucop8FASPd_uH8z7cQ4QAAAAo"]
[Tue Mar 31 18:06:27.010941 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:65245] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acuco7gIz9HgMl9YwE7q2gAAAVY"]
[Tue Mar 31 18:06:27.236084 2026] [:error] [pid 36982:tid 36992] [client 4.223.110.202:63522] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acuco_lMmeoQKN0r_GNfVgAAAMc"]
[Tue Mar 31 18:06:27.460715 2026] [:error] [pid 6548:tid 6564] [client 20.238.71.89:14953] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuco7gIz9HgMl9YwE7q3gAAAU4"]
[Tue Mar 31 18:06:27.500507 2026] [:error] [pid 36982:tid 36988] [client 172.161.1.56:65187] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acuco_lMmeoQKN0r_GNfWAAAAMM"]
[Tue Mar 31 18:06:27.904439 2026] [:error] [pid 6548:tid 6552] [client 4.223.110.202:62904] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acuco7gIz9HgMl9YwE7q4QAAAUI"]
[Tue Mar 31 18:06:27.973604 2026] [:error] [pid 36890:tid 36904] [client 172.161.1.56:65237] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acuco58FASPd_uH8z7cQ4gAAAAk"]
[Tue Mar 31 18:06:27.977469 2026] [:error] [pid 36982:tid 36995] [client 20.238.71.89:14965] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuco_lMmeoQKN0r_GNfWwAAAMo"]
[Tue Mar 31 18:06:28.484776 2026] [:error] [pid 36892:tid 36966] [client 20.238.71.89:14954] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucpEyj9S4G0ek3O4JwZAAAAI8"]
[Tue Mar 31 18:06:28.506069 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:3980] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucpLgIz9HgMl9YwE7q4gAAAVI"]
[Tue Mar 31 18:06:28.644085 2026] [:error] [pid 36892:tid 36975] [client 4.223.110.202:65452] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acucpEyj9S4G0ek3O4JwZQAAAJg"]
[Tue Mar 31 18:06:28.979440 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:3989] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucpLgIz9HgMl9YwE7q4wAAAUk"]
[Tue Mar 31 18:06:29.223945 2026] [:error] [pid 6548:tid 6572] [client 4.223.110.202:64248] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acucpbgIz9HgMl9YwE7q5QAAAVY"]
[Tue Mar 31 18:06:29.467213 2026] [:error] [pid 36890:tid 36914] [client 172.161.1.56:65230] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucpZ8FASPd_uH8z7cQ5QAAABM"]
[Tue Mar 31 18:06:29.939736 2026] [:error] [pid 36891:tid 36925] [client 172.161.1.56:3983] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acucpZJhiMaJUqoqfl637QAAAEE"]
[Tue Mar 31 18:06:29.959527 2026] [:error] [pid 36890:tid 36911] [client 4.223.110.202:63537] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acucpZ8FASPd_uH8z7cQ5gAAABA"]
[Tue Mar 31 18:06:30.430023 2026] [:error] [pid 36891:tid 36941] [client 172.161.1.56:65189] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucppJhiMaJUqoqfl638AAAAFE"]
[Tue Mar 31 18:06:30.509909 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:14969] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acucprgIz9HgMl9YwE7q6wAAAUg"]
[Tue Mar 31 18:06:30.713089 2026] [:error] [pid 6548:tid 6570] [client 4.223.110.202:65430] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acucprgIz9HgMl9YwE7q7QAAAVQ"]
[Tue Mar 31 18:06:30.910808 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:65182] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucprgIz9HgMl9YwE7q7wAAAVI"]
[Tue Mar 31 18:06:31.034955 2026] [:error] [pid 6548:tid 6572] [client 20.238.71.89:14956] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucp7gIz9HgMl9YwE7q8AAAAVY"]
[Tue Mar 31 18:06:31.371267 2026] [:error] [pid 36982:tid 37009] [client 4.223.110.202:64784] [client 4.223.110.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acucp_lMmeoQKN0r_GNfYQAAANg"]
[Tue Mar 31 18:06:31.385594 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:4047] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucp_lMmeoQKN0r_GNfYgAAAMk"]
[Tue Mar 31 18:06:31.597058 2026] [:error] [pid 36982:tid 37008] [client 20.238.71.89:14945] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucp_lMmeoQKN0r_GNfYwAAANc"]
[Tue Mar 31 18:06:31.894333 2026] [:error] [pid 36890:tid 36905] [client 172.161.1.56:3975] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acucp58FASPd_uH8z7cQ6wAAAAo"]
[Tue Mar 31 18:06:32.115473 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:14871] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucqLgIz9HgMl9YwE7q8wAAAUI"]
[Tue Mar 31 18:06:32.370348 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:4041] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acucqPlMmeoQKN0r_GNfZwAAAM0"]
[Tue Mar 31 18:06:32.658185 2026] [:error] [pid 6548:tid 6564] [client 20.238.71.89:14891] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acucqLgIz9HgMl9YwE7q9AAAAU4"]
[Tue Mar 31 18:06:32.844054 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:4085] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acucqBSaDjY9kKFtUQBpswAAAQQ"]
[Tue Mar 31 18:06:33.167035 2026] [:error] [pid 36892:tid 36959] [client 20.238.71.89:14959] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucqUyj9S4G0ek3O4JwagAAAIg"]
[Tue Mar 31 18:06:33.335961 2026] [:error] [pid 36890:tid 36917] [client 172.161.1.56:65153] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acucqZ8FASPd_uH8z7cQ7gAAABY"]
[Tue Mar 31 18:06:33.662799 2026] [:error] [pid 36891:tid 36933] [client 20.238.71.89:14975] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucqZJhiMaJUqoqfl638QAAAEk"]
[Tue Mar 31 18:06:33.832389 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:65200] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acucqbgIz9HgMl9YwE7q9QAAAVQ"]
[Tue Mar 31 18:06:34.162903 2026] [:error] [pid 36890:tid 36912] [client 20.238.71.89:14896] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucqp8FASPd_uH8z7cQ8AAAABE"]
[Tue Mar 31 18:06:34.374796 2026] [:error] [pid 36891:tid 36936] [client 172.161.1.56:65188] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acucqpJhiMaJUqoqfl639AAAAEw"]
[Tue Mar 31 18:06:34.660832 2026] [:error] [pid 36982:tid 37008] [client 20.238.71.89:14943] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acucqvlMmeoQKN0r_GNfbQAAANc"]
[Tue Mar 31 18:06:34.861319 2026] [:error] [pid 36891:tid 36943] [client 172.161.1.56:65268] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acucqpJhiMaJUqoqfl639wAAAFM"]
[Tue Mar 31 18:06:35.195945 2026] [:error] [pid 41421:tid 41448] [client 20.238.71.89:14974] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucqxSaDjY9kKFtUQBpuwAAARg"]
[Tue Mar 31 18:06:35.452220 2026] [proxy_fcgi:error] [pid 36982:tid 37000] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:35.703065 2026] [:error] [pid 36891:tid 36934] [client 20.238.71.89:14868] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucq5JhiMaJUqoqfl63-QAAAEo"]
[Tue Mar 31 18:06:35.712525 2026] [proxy_fcgi:error] [pid 36982:tid 36995] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:35.970938 2026] [proxy_fcgi:error] [pid 36982:tid 36987] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:36.211177 2026] [proxy_fcgi:error] [pid 36982:tid 37006] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:36.215394 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:14931] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucrLgIz9HgMl9YwE7q-wAAAUw"]
[Tue Mar 31 18:06:36.452337 2026] [proxy_fcgi:error] [pid 36982:tid 36997] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:36.696500 2026] [proxy_fcgi:error] [pid 36982:tid 36991] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:36.751782 2026] [:error] [pid 41421:tid 41438] [client 20.238.71.89:14863] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acucrBSaDjY9kKFtUQBpwQAAAQ4"]
[Tue Mar 31 18:06:36.935956 2026] [proxy_fcgi:error] [pid 36982:tid 36990] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:37.174972 2026] [proxy_fcgi:error] [pid 36982:tid 37003] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:37.262968 2026] [:error] [pid 36891:tid 36931] [client 20.238.71.89:14865] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucrZJhiMaJUqoqfl63-gAAAEc"]
[Tue Mar 31 18:06:37.419345 2026] [proxy_fcgi:error] [pid 36982:tid 36989] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:37.657801 2026] [proxy_fcgi:error] [pid 36982:tid 36994] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:37.834392 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:14866] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucrRSaDjY9kKFtUQBpxAAAAQM"]
[Tue Mar 31 18:06:37.902514 2026] [proxy_fcgi:error] [pid 36982:tid 37004] [client 172.161.1.56:65212] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:06:38.138339 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:65212] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucrvlMmeoQKN0r_GNffQAAAMg"]
[Tue Mar 31 18:06:38.337894 2026] [:error] [pid 36892:tid 36972] [client 20.238.71.89:14960] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucrkyj9S4G0ek3O4JwbQAAAJU"]
[Tue Mar 31 18:06:38.624019 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:4066] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucrrgIz9HgMl9YwE7q_wAAAVY"]
[Tue Mar 31 18:06:38.896358 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:14962] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acucrrgIz9HgMl9YwE7rAAAAAUo"]
[Tue Mar 31 18:06:39.116587 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:4068] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucrxSaDjY9kKFtUQBpxgAAARM"]
[Tue Mar 31 18:06:39.395381 2026] [:error] [pid 36891:tid 36946] [client 20.238.71.89:6103] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucr5JhiMaJUqoqfl63-wAAAFY"]
[Tue Mar 31 18:06:39.607742 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:65235] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acucrxSaDjY9kKFtUQBpxwAAAQk"]
[Tue Mar 31 18:06:39.913447 2026] [:error] [pid 41421:tid 41446] [client 20.238.71.89:14931] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucrxSaDjY9kKFtUQBpyQAAARY"]
[Tue Mar 31 18:06:40.095211 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:65264] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucsJ8FASPd_uH8z7cRAQAAAAA"]
[Tue Mar 31 18:06:40.431778 2026] [:error] [pid 41421:tid 41440] [client 20.238.71.89:14862] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucsBSaDjY9kKFtUQBpywAAARA"]
[Tue Mar 31 18:06:40.578563 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:65157] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucsPlMmeoQKN0r_GNffgAAANQ"]
[Tue Mar 31 18:06:40.940633 2026] [:error] [pid 36890:tid 36916] [client 20.238.71.89:14854] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acucsJ8FASPd_uH8z7cRBQAAABU"]
[Tue Mar 31 18:06:41.064333 2026] [:error] [pid 36892:tid 36966] [client 172.161.1.56:65193] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucsUyj9S4G0ek3O4JwcwAAAI8"]
[Tue Mar 31 18:06:41.456300 2026] [:error] [pid 36892:tid 36975] [client 20.238.71.89:14880] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucsUyj9S4G0ek3O4JwdAAAAJg"]
[Tue Mar 31 18:06:41.546246 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:65201] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acucsbgIz9HgMl9YwE7rCQAAAUk"]
[Tue Mar 31 18:06:41.966890 2026] [:error] [pid 36892:tid 36955] [client 20.238.71.89:6107] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucsUyj9S4G0ek3O4JwdgAAAIQ"]
[Tue Mar 31 18:06:42.055722 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:4086] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucsrgIz9HgMl9YwE7rCwAAAUo"]
[Tue Mar 31 18:06:42.496269 2026] [:error] [pid 36892:tid 36974] [client 20.238.71.89:14951] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucskyj9S4G0ek3O4JwfAAAAJc"]
[Tue Mar 31 18:06:42.539768 2026] [:error] [pid 36892:tid 36969] [client 172.161.1.56:65205] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucskyj9S4G0ek3O4JwfQAAAJI"]
[Tue Mar 31 18:06:43.017051 2026] [:error] [pid 36892:tid 36957] [client 172.161.1.56:65154] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucs0yj9S4G0ek3O4JwfgAAAIY"]
[Tue Mar 31 18:06:43.027122 2026] [:error] [pid 36982:tid 36999] [client 20.238.71.89:14946] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acucs_lMmeoQKN0r_GNfgQAAAM4"]
[Tue Mar 31 18:06:43.513669 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:65241] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acucs_lMmeoQKN0r_GNfgwAAANI"]
[Tue Mar 31 18:06:43.605455 2026] [:error] [pid 36892:tid 36968] [client 20.238.71.89:14909] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acucs0yj9S4G0ek3O4JwgAAAAJE"]
[Tue Mar 31 18:06:43.988730 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:3969] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acucs_lMmeoQKN0r_GNfhQAAAMQ"]
[Tue Mar 31 18:06:44.127967 2026] [:error] [pid 6548:tid 6555] [client 20.238.71.89:14930] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuctLgIz9HgMl9YwE7rEQAAAUU"]
[Tue Mar 31 18:06:44.469793 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:65190] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuctLgIz9HgMl9YwE7rFAAAAVQ"]
[Tue Mar 31 18:06:44.767161 2026] [:error] [pid 36982:tid 37009] [client 20.238.71.89:14898] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuctPlMmeoQKN0r_GNfhgAAANg"]
[Tue Mar 31 18:06:44.952302 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:65250] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuctLgIz9HgMl9YwE7rGgAAAUM"]
[Tue Mar 31 18:06:45.427865 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:3976] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuctflMmeoQKN0r_GNfiAAAANM"]
[Tue Mar 31 18:06:45.521106 2026] [:error] [pid 36892:tid 36956] [client 20.238.71.89:14901] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuctUyj9S4G0ek3O4JwgQAAAIU"]
[Tue Mar 31 18:06:45.903319 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:4033] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuctbgIz9HgMl9YwE7rHgAAAVg"]
[Tue Mar 31 18:06:46.042691 2026] [:error] [pid 36890:tid 36913] [client 20.238.71.89:14867] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuctp8FASPd_uH8z7cREgAAABI"]
[Tue Mar 31 18:06:46.407193 2026] [:error] [pid 36891:tid 36930] [client 172.161.1.56:4046] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuctpJhiMaJUqoqfl63_gAAAEY"]
[Tue Mar 31 18:06:46.548930 2026] [:error] [pid 6548:tid 6551] [client 20.238.71.89:14855] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuctrgIz9HgMl9YwE7rIQAAAUE"]
[Tue Mar 31 18:06:46.911409 2026] [:error] [pid 36891:tid 36929] [client 172.161.1.56:4079] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuctpJhiMaJUqoqfl64AAAAAEU"]
[Tue Mar 31 18:06:47.064509 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:14914] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuct7gIz9HgMl9YwE7rIgAAAUg"]
[Tue Mar 31 18:06:47.409513 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:4090] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuct_lMmeoQKN0r_GNfigAAANQ"]
[Tue Mar 31 18:06:47.580312 2026] [:error] [pid 36892:tid 36971] [client 20.238.71.89:14918] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuct0yj9S4G0ek3O4JwhAAAAJQ"]
[Tue Mar 31 18:06:47.881266 2026] [:error] [pid 36892:tid 36961] [client 172.161.1.56:3991] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acuct0yj9S4G0ek3O4JwhgAAAIo"]
[Tue Mar 31 18:06:48.118648 2026] [:error] [pid 6548:tid 6571] [client 20.238.71.89:14913] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucuLgIz9HgMl9YwE7rKAAAAVU"]
[Tue Mar 31 18:06:48.374630 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:4072] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucuLgIz9HgMl9YwE7rKgAAAVc"]
[Tue Mar 31 18:06:48.649130 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:14971] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucuLgIz9HgMl9YwE7rLQAAAUI"]
[Tue Mar 31 18:06:48.856904 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:4062] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucuPlMmeoQKN0r_GNfjQAAAMA"]
[Tue Mar 31 18:06:49.152664 2026] [:error] [pid 36982:tid 37006] [client 20.238.71.89:14853] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucuflMmeoQKN0r_GNfjwAAANU"]
[Tue Mar 31 18:06:49.389935 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:4055] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acucuRSaDjY9kKFtUQBp0AAAAQQ"]
[Tue Mar 31 18:06:49.741924 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:14947] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acucubgIz9HgMl9YwE7rOAAAAVc"]
[Tue Mar 31 18:06:49.886189 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:65230] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucubgIz9HgMl9YwE7rOQAAAU4"]
[Tue Mar 31 18:06:50.261094 2026] [:error] [pid 6548:tid 6570] [client 20.238.71.89:14873] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucurgIz9HgMl9YwE7rOwAAAVQ"]
[Tue Mar 31 18:06:50.469253 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:4009] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucuhSaDjY9kKFtUQBp1AAAARQ"]
[Tue Mar 31 18:06:50.828324 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:14939] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucurgIz9HgMl9YwE7rPgAAAU8"]
[Tue Mar 31 18:06:50.953105 2026] [:error] [pid 41421:tid 41442] [client 172.161.1.56:65224] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucuhSaDjY9kKFtUQBp1QAAARI"]
[Tue Mar 31 18:06:51.334452 2026] [:error] [pid 41421:tid 41432] [client 20.238.71.89:14941] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucuxSaDjY9kKFtUQBp2AAAAQg"]
[Tue Mar 31 18:06:51.464182 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:65240] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acucuxSaDjY9kKFtUQBp2wAAARM"]
[Tue Mar 31 18:06:51.837544 2026] [:error] [pid 6548:tid 6553] [client 20.238.71.89:14970] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acucu7gIz9HgMl9YwE7rQAAAAUM"]
[Tue Mar 31 18:06:51.950129 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:4078] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucu7gIz9HgMl9YwE7rQQAAAVU"]
[Tue Mar 31 18:06:52.363439 2026] [:error] [pid 36891:tid 36926] [client 20.238.71.89:14967] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucvJJhiMaJUqoqfl64BAAAAEI"]
[Tue Mar 31 18:06:52.456399 2026] [:error] [pid 36891:tid 36943] [client 172.161.1.56:3910] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucvJJhiMaJUqoqfl64BQAAAFM"]
[Tue Mar 31 18:06:52.876099 2026] [:error] [pid 36892:tid 36962] [client 20.238.71.89:14952] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucvEyj9S4G0ek3O4JwjQAAAIs"]
[Tue Mar 31 18:06:52.929054 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:65168] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucvBSaDjY9kKFtUQBp4QAAARQ"]
[Tue Mar 31 18:06:53.378286 2026] [:error] [pid 6548:tid 6559] [client 20.238.71.89:14903] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucvbgIz9HgMl9YwE7rSgAAAUk"]
[Tue Mar 31 18:06:53.451108 2026] [:error] [pid 36892:tid 36953] [client 172.161.1.56:65185] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acucvUyj9S4G0ek3O4JwjgAAAII"]
[Tue Mar 31 18:06:53.892717 2026] [:error] [pid 36890:tid 36903] [client 20.238.71.89:14874] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acucvZ8FASPd_uH8z7cRGQAAAAg"]
[Tue Mar 31 18:06:53.932949 2026] [:error] [pid 36890:tid 36909] [client 172.161.1.56:3970] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucvZ8FASPd_uH8z7cRGgAAAA4"]
[Tue Mar 31 18:06:54.402425 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:6083] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucvrgIz9HgMl9YwE7rUgAAAUg"]
[Tue Mar 31 18:06:54.422076 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:4042] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucvrgIz9HgMl9YwE7rUwAAAUo"]
[Tue Mar 31 18:06:54.905091 2026] [:error] [pid 6548:tid 6571] [client 20.238.71.89:6019] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucvrgIz9HgMl9YwE7rVQAAAVU"]
[Tue Mar 31 18:06:54.914319 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:3999] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucvrgIz9HgMl9YwE7rVgAAAUY"]
[Tue Mar 31 18:06:55.397597 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:4094] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acucv_lMmeoQKN0r_GNfnQAAAMQ"]
[Tue Mar 31 18:06:55.900738 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:4034] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucv58FASPd_uH8z7cRHwAAAAA"]
[Tue Mar 31 18:06:56.385034 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:4069] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucwLgIz9HgMl9YwE7rWgAAAVc"]
[Tue Mar 31 18:06:56.414944 2026] [:error] [pid 6548:tid 6571] [client 20.238.71.89:14879] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucwLgIz9HgMl9YwE7rWwAAAVU"]
[Tue Mar 31 18:06:56.921424 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:14955] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acucwLgIz9HgMl9YwE7rXwAAAUo"]
[Tue Mar 31 18:06:56.923314 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:3978] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucwLgIz9HgMl9YwE7rYAAAAVg"]
[Tue Mar 31 18:06:57.395729 2026] [:error] [pid 36890:tid 36910] [client 172.161.1.56:3992] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acucwZ8FASPd_uH8z7cRJgAAAA8"]
[Tue Mar 31 18:06:57.441918 2026] [:error] [pid 36890:tid 36911] [client 20.238.71.89:6109] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucwZ8FASPd_uH8z7cRJwAAABA"]
[Tue Mar 31 18:06:57.900820 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:3982] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucwbgIz9HgMl9YwE7rZAAAAVM"]
[Tue Mar 31 18:06:57.940942 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:14893] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucwbgIz9HgMl9YwE7rZQAAAUo"]
[Tue Mar 31 18:06:58.401371 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:3968] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucwhSaDjY9kKFtUQBp5AAAAQI"]
[Tue Mar 31 18:06:58.484159 2026] [:error] [pid 36890:tid 36914] [client 20.238.71.89:6141] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucwp8FASPd_uH8z7cRKAAAABM"]
[Tue Mar 31 18:06:58.889288 2026] [:error] [pid 36890:tid 36902] [client 172.161.1.56:3955] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucwp8FASPd_uH8z7cRKgAAAAc"]
[Tue Mar 31 18:06:58.995603 2026] [:error] [pid 41421:tid 41429] [client 20.238.71.89:14885] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acucwhSaDjY9kKFtUQBp6AAAAQU"]
[Tue Mar 31 18:06:59.376419 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:3936] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acucw7gIz9HgMl9YwE7rawAAAVI"]
[Tue Mar 31 18:06:59.510458 2026] [:error] [pid 41421:tid 41440] [client 20.238.71.89:14883] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucwxSaDjY9kKFtUQBp6gAAARA"]
[Tue Mar 31 18:06:59.892523 2026] [:error] [pid 36892:tid 36952] [client 172.161.1.56:3913] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucw0yj9S4G0ek3O4JwlwAAAIE"]
[Tue Mar 31 18:07:00.017269 2026] [:error] [pid 41421:tid 41424] [client 20.238.71.89:14972] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucxBSaDjY9kKFtUQBp7AAAAQA"]
[Tue Mar 31 18:07:00.398319 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:3940] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucxEyj9S4G0ek3O4JwmQAAAIk"]
[Tue Mar 31 18:07:00.523711 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:14915] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucxBSaDjY9kKFtUQBp8AAAAQM"]
[Tue Mar 31 18:07:00.882091 2026] [:error] [pid 36891:tid 36947] [client 172.161.1.56:4092] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucxJJhiMaJUqoqfl64CAAAAFc"]
[Tue Mar 31 18:07:01.028891 2026] [:error] [pid 36890:tid 36898] [client 20.238.71.89:14899] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acucxZ8FASPd_uH8z7cRLgAAAAM"]
[Tue Mar 31 18:07:01.378431 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:3987] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acucxbgIz9HgMl9YwE7rcQAAAVI"]
[Tue Mar 31 18:07:01.529586 2026] [:error] [pid 36892:tid 36967] [client 20.238.71.89:6097] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucxUyj9S4G0ek3O4JwmgAAAJA"]
[Tue Mar 31 18:07:01.873146 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:65198] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucxflMmeoQKN0r_GNfqAAAANQ"]
[Tue Mar 31 18:07:02.046878 2026] [:error] [pid 36982:tid 36995] [client 20.238.71.89:6085] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucxvlMmeoQKN0r_GNfqgAAAMo"]
[Tue Mar 31 18:07:02.359173 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:65223] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucxrgIz9HgMl9YwE7rdgAAAUI"]
[Tue Mar 31 18:07:02.558017 2026] [:error] [pid 6548:tid 6555] [client 20.238.71.89:14878] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucxrgIz9HgMl9YwE7reQAAAUU"]
[Tue Mar 31 18:07:02.860981 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:65210] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucxvlMmeoQKN0r_GNfrgAAAMc"]
[Tue Mar 31 18:07:03.105904 2026] [:error] [pid 36891:tid 36948] [client 20.238.71.89:14925] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acucx5JhiMaJUqoqfl64CwAAAFg"]
[Tue Mar 31 18:07:03.333336 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:3996] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acucx_lMmeoQKN0r_GNfrwAAANU"]
[Tue Mar 31 18:07:03.610689 2026] [:error] [pid 36982:tid 36997] [client 20.238.71.89:6102] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucx_lMmeoQKN0r_GNfsAAAAMw"]
[Tue Mar 31 18:07:03.873629 2026] [:error] [pid 6548:tid 6563] [client 172.161.1.56:4087] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acucx7gIz9HgMl9YwE7rfwAAAU0"]
[Tue Mar 31 18:07:04.238477 2026] [:error] [pid 36982:tid 37002] [client 20.238.71.89:14861] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucyPlMmeoQKN0r_GNfsQAAANE"]
[Tue Mar 31 18:07:04.390296 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:4063] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acucyPlMmeoQKN0r_GNfsgAAAMk"]
[Tue Mar 31 18:07:04.745883 2026] [:error] [pid 6548:tid 6564] [client 20.238.71.89:14958] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucyLgIz9HgMl9YwE7riAAAAU4"]
[Tue Mar 31 18:07:04.864288 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:4060] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acucyLgIz9HgMl9YwE7riQAAAVE"]
[Tue Mar 31 18:07:05.279143 2026] [:error] [pid 6548:tid 6569] [client 20.238.71.89:14887] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acucybgIz9HgMl9YwE7rjAAAAVM"]
[Tue Mar 31 18:07:05.353876 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:4084] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acucyflMmeoQKN0r_GNftQAAANg"]
[Tue Mar 31 18:07:05.801400 2026] [:error] [pid 41421:tid 41437] [client 20.238.71.89:14916] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucyRSaDjY9kKFtUQBp9AAAAQ0"]
[Tue Mar 31 18:07:05.832959 2026] [:error] [pid 36890:tid 36908] [client 172.161.1.56:65160] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acucyZ8FASPd_uH8z7cRNQAAAA0"]
[Tue Mar 31 18:07:06.305224 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:65255] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acucyhSaDjY9kKFtUQBp9gAAAQ4"]
[Tue Mar 31 18:07:06.418505 2026] [:error] [pid 6548:tid 6559] [client 20.238.71.89:14856] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucyrgIz9HgMl9YwE7rmgAAAUk"]
[Tue Mar 31 18:07:06.801217 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:4010] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acucyrgIz9HgMl9YwE7roAAAAVY"]
[Tue Mar 31 18:07:06.938537 2026] [:error] [pid 36982:tid 37004] [client 20.238.71.89:6127] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acucyvlMmeoQKN0r_GNfugAAANM"]
[Tue Mar 31 18:07:07.306668 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:65191] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acucy_lMmeoQKN0r_GNfuwAAANc"]
[Tue Mar 31 18:07:07.790462 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:4006] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acucy7gIz9HgMl9YwE7rowAAAUI"]
[Tue Mar 31 18:07:08.275781 2026] [:error] [pid 41421:tid 41446] [client 172.161.1.56:65253] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acuczBSaDjY9kKFtUQBp_QAAARY"]
[Tue Mar 31 18:07:08.474597 2026] [:error] [pid 36890:tid 36897] [client 20.238.71.89:14921] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acuczJ8FASPd_uH8z7cRPAAAAAI"]
[Tue Mar 31 18:07:08.763568 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:65271] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acuczLgIz9HgMl9YwE7ruwAAAVg"]
[Tue Mar 31 18:07:08.975929 2026] [:error] [pid 36890:tid 36905] [client 20.238.71.89:14864] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acuczJ8FASPd_uH8z7cRPQAAAAo"]
[Tue Mar 31 18:07:09.250577 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:3998] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acuczZ8FASPd_uH8z7cRPwAAABA"]
[Tue Mar 31 18:07:09.735961 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:65232] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acuczflMmeoQKN0r_GNfygAAANM"]
[Tue Mar 31 18:07:10.244571 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:4023] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acuczrgIz9HgMl9YwE7rzgAAAUI"]
[Tue Mar 31 18:07:10.502307 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:14912] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acuczrgIz9HgMl9YwE7r0AAAAUY"]
[Tue Mar 31 18:07:10.716851 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:3927] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acuczrgIz9HgMl9YwE7r0wAAAUw"]
[Tue Mar 31 18:07:11.038388 2026] [:error] [pid 6548:tid 6567] [client 20.238.71.89:14889] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucz7gIz9HgMl9YwE7r2AAAAVE"]
[Tue Mar 31 18:07:11.190863 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:65203] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acucz_lMmeoQKN0r_GNfzgAAAMc"]
[Tue Mar 31 18:07:11.555484 2026] [:error] [pid 6548:tid 6569] [client 20.238.71.89:14900] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acucz7gIz9HgMl9YwE7r2wAAAVM"]
[Tue Mar 31 18:07:11.701325 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:4076] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acucz7gIz9HgMl9YwE7r3AAAAVA"]
[Tue Mar 31 18:07:12.055895 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:14849] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acuc0LgIz9HgMl9YwE7r3gAAAUI"]
[Tue Mar 31 18:07:12.173311 2026] [:error] [pid 6548:tid 6557] [client 172.161.1.56:4001] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acuc0LgIz9HgMl9YwE7r4AAAAUc"]
[Tue Mar 31 18:07:12.573192 2026] [:error] [pid 41421:tid 41439] [client 20.238.71.89:6061] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acuc0BSaDjY9kKFtUQBqEgAAAQ8"]
[Tue Mar 31 18:07:12.674857 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:4035] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acuc0PlMmeoQKN0r_GNf0wAAANc"]
[Tue Mar 31 18:07:13.076525 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:14902] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acuc0bgIz9HgMl9YwE7r5QAAAUg"]
[Tue Mar 31 18:07:13.173778 2026] [:error] [pid 36890:tid 36904] [client 172.161.1.56:65214] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acuc0Z8FASPd_uH8z7cRQgAAAAk"]
[Tue Mar 31 18:07:13.645798 2026] [:error] [pid 36892:tid 36971] [client 172.161.1.56:4089] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acuc0Uyj9S4G0ek3O4JwmwAAAJQ"]
[Tue Mar 31 18:07:13.650944 2026] [:error] [pid 36891:tid 36932] [client 20.238.71.89:14905] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acuc0ZJhiMaJUqoqfl64GAAAAEg"]
[Tue Mar 31 18:07:14.140633 2026] [:error] [pid 41421:tid 41437] [client 172.161.1.56:65186] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acuc0hSaDjY9kKFtUQBqFAAAAQ0"]
[Tue Mar 31 18:07:14.156200 2026] [:error] [pid 41421:tid 41438] [client 20.238.71.89:14906] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acuc0hSaDjY9kKFtUQBqFQAAAQ4"]
[Tue Mar 31 18:07:14.686027 2026] [:error] [pid 6548:tid 6554] [client 172.161.1.56:3985] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acuc0rgIz9HgMl9YwE7r5gAAAUQ"]
[Tue Mar 31 18:07:14.771327 2026] [:error] [pid 6548:tid 6553] [client 20.238.71.89:14875] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acuc0rgIz9HgMl9YwE7r5wAAAUM"]
[Tue Mar 31 18:07:15.209196 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:3974] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acuc07gIz9HgMl9YwE7r6AAAAUs"]
[Tue Mar 31 18:07:15.297849 2026] [proxy_fcgi:error] [pid 6548:tid 6573] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:15.570988 2026] [proxy_fcgi:error] [pid 6548:tid 6564] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:15.687825 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:4004] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acuc07gIz9HgMl9YwE7r7AAAAVQ"]
[Tue Mar 31 18:07:16.161364 2026] [:error] [pid 6548:tid 6566] [client 172.161.1.56:3933] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acuc1LgIz9HgMl9YwE7r7wAAAVA"]
[Tue Mar 31 18:07:16.437567 2026] [proxy_fcgi:error] [pid 6548:tid 6555] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:16.664931 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:3943] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acuc1PlMmeoQKN0r_GNf1QAAANE"]
[Tue Mar 31 18:07:16.691869 2026] [proxy_fcgi:error] [pid 6548:tid 6568] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:17.147077 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:3972] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acuc1bgIz9HgMl9YwE7r9AAAAUs"]
[Tue Mar 31 18:07:17.492826 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:17.626600 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:3843] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuc1flMmeoQKN0r_GNf1gAAAME"]
[Tue Mar 31 18:07:17.766871 2026] [proxy_fcgi:error] [pid 6548:tid 6566] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:18.291950 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:3844] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuc1hSaDjY9kKFtUQBqHQAAAQA"]
[Tue Mar 31 18:07:18.395316 2026] [proxy_fcgi:error] [pid 6548:tid 6567] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:18.534212 2026] [proxy_fcgi:error] [pid 6548:tid 6553] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:18.647671 2026] [proxy_fcgi:error] [pid 6548:tid 6565] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:18.785472 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:3971] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuc1hSaDjY9kKFtUQBqHgAAAQI"]
[Tue Mar 31 18:07:18.789059 2026] [proxy_fcgi:error] [pid 6548:tid 6561] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:18.891431 2026] [proxy_fcgi:error] [pid 6548:tid 6564] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.044194 2026] [proxy_fcgi:error] [pid 6548:tid 6560] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.145979 2026] [proxy_fcgi:error] [pid 6548:tid 6572] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.300888 2026] [proxy_fcgi:error] [pid 6548:tid 6558] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.389399 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:4059] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuc17gIz9HgMl9YwE7sBwAAAUA"]
[Tue Mar 31 18:07:19.389809 2026] [proxy_fcgi:error] [pid 6548:tid 6551] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.554662 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 20.238.71.89:14904] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.636089 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:19.805664 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:14904] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuc17gIz9HgMl9YwE7sCwAAAUY"]
[Tue Mar 31 18:07:19.889157 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:3986] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acuc1_lMmeoQKN0r_GNf1wAAAMQ"]
[Tue Mar 31 18:07:19.893640 2026] [proxy_fcgi:error] [pid 6548:tid 6571] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:20.136934 2026] [proxy_fcgi:error] [pid 6548:tid 6552] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:20.309297 2026] [:error] [pid 36982:tid 37004] [client 20.238.71.89:6139] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuc2PlMmeoQKN0r_GNf2QAAANM"]
[Tue Mar 31 18:07:20.364893 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:4045] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acuc2PlMmeoQKN0r_GNf2gAAANc"]
[Tue Mar 31 18:07:20.391451 2026] [proxy_fcgi:error] [pid 6548:tid 6570] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:20.635457 2026] [proxy_fcgi:error] [pid 6548:tid 6568] [client 158.158.107.18:65294] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:20.826510 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:6088] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuc2LgIz9HgMl9YwE7sEQAAAUQ"]
[Tue Mar 31 18:07:20.875774 2026] [:error] [pid 6548:tid 6553] [client 158.158.107.18:65294] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuc2LgIz9HgMl9YwE7sEwAAAUM"]
[Tue Mar 31 18:07:20.875955 2026] [:error] [pid 36891:tid 36942] [client 172.161.1.56:3973] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acuc2JJhiMaJUqoqfl64HwAAAFI"]
[Tue Mar 31 18:07:21.362419 2026] [:error] [pid 36890:tid 36897] [client 20.238.71.89:14919] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuc2Z8FASPd_uH8z7cRSAAAAAI"]
[Tue Mar 31 18:07:21.377200 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:65396] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuc2flMmeoQKN0r_GNf3gAAAMY"]
[Tue Mar 31 18:07:21.427553 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:4013] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acuc2bgIz9HgMl9YwE7sFgAAAUg"]
[Tue Mar 31 18:07:21.858002 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:65346] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuc2bgIz9HgMl9YwE7sGgAAAUI"]
[Tue Mar 31 18:07:21.869719 2026] [:error] [pid 41421:tid 41445] [client 20.238.71.89:14892] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acuc2RSaDjY9kKFtUQBqIAAAARU"]
[Tue Mar 31 18:07:21.925625 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:3979] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acuc2bgIz9HgMl9YwE7sGwAAAVI"]
[Tue Mar 31 18:07:22.340800 2026] [:error] [pid 41421:tid 41442] [client 158.158.107.18:65369] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acuc2hSaDjY9kKFtUQBqIQAAARI"]
[Tue Mar 31 18:07:22.443835 2026] [:error] [pid 36892:tid 36964] [client 172.161.1.56:4065] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acuc2kyj9S4G0ek3O4JwoQAAAI0"]
[Tue Mar 31 18:07:22.819452 2026] [:error] [pid 36892:tid 36967] [client 158.158.107.18:65300] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuc2kyj9S4G0ek3O4JwogAAAJA"]
[Tue Mar 31 18:07:22.917057 2026] [:error] [pid 36890:tid 36910] [client 172.161.1.56:65161] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acuc2p8FASPd_uH8z7cRSgAAAA8"]
[Tue Mar 31 18:07:23.297490 2026] [:error] [pid 41421:tid 41436] [client 158.158.107.18:65307] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuc2xSaDjY9kKFtUQBqJAAAAQw"]
[Tue Mar 31 18:07:23.383417 2026] [:error] [pid 36890:tid 36907] [client 20.238.71.89:6084] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acuc258FASPd_uH8z7cRTgAAAAw"]
[Tue Mar 31 18:07:23.412224 2026] [:error] [pid 36892:tid 36957] [client 172.161.1.56:65211] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acuc20yj9S4G0ek3O4JwowAAAIY"]
[Tue Mar 31 18:07:23.796265 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:65290] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuc27gIz9HgMl9YwE7sIAAAAUU"]
[Tue Mar 31 18:07:23.884783 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:4074] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acuc27gIz9HgMl9YwE7sIQAAAVg"]
[Tue Mar 31 18:07:23.915551 2026] [:error] [pid 36892:tid 36956] [client 20.238.71.89:6100] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acuc20yj9S4G0ek3O4JwpQAAAIU"]
[Tue Mar 31 18:07:24.287030 2026] [:error] [pid 36892:tid 36970] [client 158.158.107.18:65292] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acuc3Eyj9S4G0ek3O4JwpgAAAJM"]
[Tue Mar 31 18:07:24.359542 2026] [:error] [pid 36892:tid 36953] [client 172.161.1.56:4053] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acuc3Eyj9S4G0ek3O4JwpwAAAII"]
[Tue Mar 31 18:07:24.449414 2026] [:error] [pid 36891:tid 36925] [client 20.238.71.89:14888] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "acuc3JJhiMaJUqoqfl64IAAAAEE"]
[Tue Mar 31 18:07:24.775646 2026] [:error] [pid 36892:tid 36955] [client 158.158.107.18:65378] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acuc3Eyj9S4G0ek3O4JwqQAAAIQ"]
[Tue Mar 31 18:07:24.835527 2026] [:error] [pid 36892:tid 36965] [client 172.161.1.56:4024] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acuc3Eyj9S4G0ek3O4JwqgAAAI4"]
[Tue Mar 31 18:07:24.987658 2026] [:error] [pid 36892:tid 36959] [client 20.238.71.89:14928] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "acuc3Eyj9S4G0ek3O4JwqwAAAIg"]
[Tue Mar 31 18:07:25.259266 2026] [:error] [pid 36891:tid 36927] [client 158.158.107.18:65404] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acuc3ZJhiMaJUqoqfl64IQAAAEM"]
[Tue Mar 31 18:07:25.307580 2026] [:error] [pid 36892:tid 36951] [client 172.161.1.56:3984] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acuc3Uyj9S4G0ek3O4JwrgAAAIA"]
[Tue Mar 31 18:07:25.550345 2026] [:error] [pid 36982:tid 36986] [client 20.238.71.89:14966] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "acuc3flMmeoQKN0r_GNf4gAAAME"]
[Tue Mar 31 18:07:25.763767 2026] [:error] [pid 36982:tid 36999] [client 158.158.107.18:65393] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acuc3flMmeoQKN0r_GNf5QAAAM4"]
[Tue Mar 31 18:07:25.823176 2026] [:error] [pid 36892:tid 36969] [client 172.161.1.56:4000] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acuc3Uyj9S4G0ek3O4JwsAAAAJI"]
[Tue Mar 31 18:07:26.090354 2026] [:error] [pid 6548:tid 6571] [client 20.238.71.89:6096] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "acuc3rgIz9HgMl9YwE7sJQAAAVU"]
[Tue Mar 31 18:07:26.259796 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:65387] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acuc3rgIz9HgMl9YwE7sJgAAAUA"]
[Tue Mar 31 18:07:26.333666 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:4051] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acuc3vlMmeoQKN0r_GNf5wAAANM"]
[Tue Mar 31 18:07:26.621221 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:14870] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "acuc3rgIz9HgMl9YwE7sKQAAAUQ"]
[Tue Mar 31 18:07:26.768269 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:65283] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuc3rgIz9HgMl9YwE7sKgAAAU0"]
[Tue Mar 31 18:07:26.879359 2026] [:error] [pid 6548:tid 6553] [client 172.161.1.56:65276] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acuc3rgIz9HgMl9YwE7sKwAAAUM"]
[Tue Mar 31 18:07:27.178207 2026] [:error] [pid 6548:tid 6564] [client 20.238.71.89:6114] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acuc37gIz9HgMl9YwE7sLAAAAU4"]
[Tue Mar 31 18:07:27.334738 2026] [:error] [pid 6548:tid 6572] [client 158.158.107.18:65377] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuc37gIz9HgMl9YwE7sLQAAAVY"]
[Tue Mar 31 18:07:27.369848 2026] [:error] [pid 41421:tid 41435] [client 172.161.1.56:3934] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acuc3xSaDjY9kKFtUQBqJgAAAQs"]
[Tue Mar 31 18:07:27.823587 2026] [:error] [pid 41421:tid 41433] [client 158.158.107.18:65296] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuc3xSaDjY9kKFtUQBqKQAAAQk"]
[Tue Mar 31 18:07:27.899722 2026] [:error] [pid 36982:tid 36994] [client 20.238.71.89:6137] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acuc3_lMmeoQKN0r_GNf6gAAAMk"]
[Tue Mar 31 18:07:27.906599 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:4029] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuc3_lMmeoQKN0r_GNf6wAAANY"]
[Tue Mar 31 18:07:28.403784 2026] [:error] [pid 36892:tid 36960] [client 158.158.107.18:65365] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuc4Eyj9S4G0ek3O4JwtAAAAIk"]
[Tue Mar 31 18:07:28.409402 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:4014] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuc4PlMmeoQKN0r_GNf7QAAAMg"]
[Tue Mar 31 18:07:28.523768 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:6087] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acuc4LgIz9HgMl9YwE7sLwAAAUw"]
[Tue Mar 31 18:07:28.889841 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:4050] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuc4PlMmeoQKN0r_GNf7wAAAME"]
[Tue Mar 31 18:07:28.940887 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:65310] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuc4LgIz9HgMl9YwE7sMQAAAVU"]
[Tue Mar 31 18:07:29.178333 2026] [:error] [pid 36982:tid 36992] [client 20.238.71.89:14929] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "acuc4flMmeoQKN0r_GNf8AAAAMc"]
[Tue Mar 31 18:07:29.375311 2026] [:error] [pid 36982:tid 36987] [client 172.161.1.56:3994] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuc4flMmeoQKN0r_GNf8gAAAMI"]
[Tue Mar 31 18:07:29.431857 2026] [:error] [pid 36982:tid 37001] [client 158.158.107.18:64710] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuc4flMmeoQKN0r_GNf8wAAANA"]
[Tue Mar 31 18:07:29.844006 2026] [:error] [pid 36892:tid 36959] [client 20.238.71.89:6129] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acuc4Uyj9S4G0ek3O4JwuQAAAIg"]
[Tue Mar 31 18:07:29.869318 2026] [:error] [pid 36892:tid 36966] [client 172.161.1.56:4048] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuc4Uyj9S4G0ek3O4JwugAAAI8"]
[Tue Mar 31 18:07:29.910756 2026] [:error] [pid 36892:tid 36951] [client 158.158.107.18:65397] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuc4Uyj9S4G0ek3O4JwuwAAAIA"]
[Tue Mar 31 18:07:30.359860 2026] [:error] [pid 36892:tid 36969] [client 172.161.1.56:3923] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuc4kyj9S4G0ek3O4JwvgAAAJI"]
[Tue Mar 31 18:07:30.373247 2026] [:error] [pid 36892:tid 36974] [client 20.238.71.89:14908] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acuc4kyj9S4G0ek3O4JwvwAAAJc"]
[Tue Mar 31 18:07:30.403293 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:65303] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuc4hSaDjY9kKFtUQBqLQAAAQY"]
[Tue Mar 31 18:07:30.850614 2026] [:error] [pid 6548:tid 6565] [client 172.161.1.56:4083] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuc4rgIz9HgMl9YwE7sNAAAAU8"]
[Tue Mar 31 18:07:30.906984 2026] [:error] [pid 6548:tid 6553] [client 158.158.107.18:64705] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuc4rgIz9HgMl9YwE7sNQAAAUM"]
[Tue Mar 31 18:07:30.919192 2026] [:error] [pid 6548:tid 6561] [client 20.238.71.89:6041] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acuc4rgIz9HgMl9YwE7sNgAAAUs"]
[Tue Mar 31 18:07:31.346420 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:3988] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuc4_lMmeoQKN0r_GNf9gAAANc"]
[Tue Mar 31 18:07:31.385856 2026] [:error] [pid 36982:tid 37003] [client 158.158.107.18:65355] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuc4_lMmeoQKN0r_GNf9wAAANI"]
[Tue Mar 31 18:07:31.851074 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:4012] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuc4_lMmeoQKN0r_GNf-QAAANE"]
[Tue Mar 31 18:07:31.875935 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:65367] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuc4_lMmeoQKN0r_GNf-gAAAMY"]
[Tue Mar 31 18:07:32.331195 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:65196] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuc5J8FASPd_uH8z7cRUQAAAAA"]
[Tue Mar 31 18:07:32.356361 2026] [:error] [pid 36890:tid 36916] [client 158.158.107.18:65306] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuc5J8FASPd_uH8z7cRUgAAABU"]
[Tue Mar 31 18:07:32.436605 2026] [:error] [pid 36890:tid 36901] [client 20.238.71.89:14937] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "acuc5J8FASPd_uH8z7cRUwAAAAY"]
[Tue Mar 31 18:07:32.806850 2026] [:error] [pid 41421:tid 41448] [client 172.161.1.56:3939] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuc5BSaDjY9kKFtUQBqLwAAARg"]
[Tue Mar 31 18:07:32.873486 2026] [:error] [pid 36892:tid 36962] [client 158.158.107.18:65375] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acuc5Eyj9S4G0ek3O4JwwgAAAIs"]
[Tue Mar 31 18:07:33.305855 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:3920] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuc5RSaDjY9kKFtUQBqMQAAAQQ"]
[Tue Mar 31 18:07:33.357719 2026] [:error] [pid 41421:tid 41435] [client 158.158.107.18:65298] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acuc5RSaDjY9kKFtUQBqMgAAAQs"]
[Tue Mar 31 18:07:33.829816 2026] [:error] [pid 36892:tid 36965] [client 172.161.1.56:3921] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuc5Uyj9S4G0ek3O4JwxAAAAI4"]
[Tue Mar 31 18:07:33.880535 2026] [:error] [pid 41421:tid 41426] [client 158.158.107.18:65305] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acuc5RSaDjY9kKFtUQBqNAAAAQI"]
[Tue Mar 31 18:07:33.976360 2026] [:error] [pid 41421:tid 41447] [client 20.238.71.89:6111] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acuc5RSaDjY9kKFtUQBqNgAAARc"]
[Tue Mar 31 18:07:34.317984 2026] [:error] [pid 36891:tid 36929] [client 172.161.1.56:4091] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuc5pJhiMaJUqoqfl64JAAAAEU"]
[Tue Mar 31 18:07:34.390759 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:65316] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "acuc5rgIz9HgMl9YwE7sPAAAAVU"]
[Tue Mar 31 18:07:34.795855 2026] [:error] [pid 6548:tid 6551] [client 172.161.1.56:3926] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuc5rgIz9HgMl9YwE7sPQAAAUE"]
[Tue Mar 31 18:07:34.869361 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:65313] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acuc5rgIz9HgMl9YwE7sPgAAAUA"]
[Tue Mar 31 18:07:35.305751 2026] [:error] [pid 41421:tid 41446] [client 172.161.1.56:3912] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuc5xSaDjY9kKFtUQBqNwAAARY"]
[Tue Mar 31 18:07:35.470803 2026] [:error] [pid 36892:tid 36968] [client 158.158.107.18:65400] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acuc50yj9S4G0ek3O4JwxgAAAJE"]
[Tue Mar 31 18:07:35.594159 2026] [:error] [pid 36891:tid 36933] [client 20.238.71.89:14947] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acuc55JhiMaJUqoqfl64KAAAAEk"]
[Tue Mar 31 18:07:35.812126 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:3922] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuc50yj9S4G0ek3O4JwyAAAAIk"]
[Tue Mar 31 18:07:36.096731 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:65321] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acuc6BSaDjY9kKFtUQBqOAAAAQ8"]
[Tue Mar 31 18:07:36.099368 2026] [:error] [pid 36890:tid 36898] [client 20.238.71.89:14905] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acuc6J8FASPd_uH8z7cRVgAAAAM"]
[Tue Mar 31 18:07:36.312000 2026] [:error] [pid 41421:tid 41434] [client 172.161.1.56:4080] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuc6BSaDjY9kKFtUQBqOQAAAQo"]
[Tue Mar 31 18:07:36.600293 2026] [:error] [pid 36890:tid 36897] [client 20.238.71.89:6094] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acuc6J8FASPd_uH8z7cRVwAAAAI"]
[Tue Mar 31 18:07:36.625211 2026] [:error] [pid 36890:tid 36910] [client 158.158.107.18:65330] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "acuc6J8FASPd_uH8z7cRWAAAAA8"]
[Tue Mar 31 18:07:36.792426 2026] [:error] [pid 36890:tid 36900] [client 172.161.1.56:65184] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuc6J8FASPd_uH8z7cRWQAAAAU"]
[Tue Mar 31 18:07:37.103194 2026] [:error] [pid 41421:tid 41429] [client 20.238.71.89:14895] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acuc6RSaDjY9kKFtUQBqPAAAAQU"]
[Tue Mar 31 18:07:37.117702 2026] [:error] [pid 41421:tid 41430] [client 158.158.107.18:65380] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acuc6RSaDjY9kKFtUQBqPQAAAQY"]
[Tue Mar 31 18:07:37.314758 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:37.559129 2026] [proxy_fcgi:error] [pid 36892:tid 36963] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:37.634564 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:6134] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acuc6RSaDjY9kKFtUQBqQAAAAQM"]
[Tue Mar 31 18:07:37.643498 2026] [:error] [pid 41421:tid 41425] [client 158.158.107.18:64738] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acuc6RSaDjY9kKFtUQBqQgAAAQE"]
[Tue Mar 31 18:07:37.819573 2026] [proxy_fcgi:error] [pid 36892:tid 36955] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:38.059321 2026] [proxy_fcgi:error] [pid 36892:tid 36962] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:38.124744 2026] [:error] [pid 41421:tid 41436] [client 158.158.107.18:65402] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acuc6hSaDjY9kKFtUQBqRAAAAQw"]
[Tue Mar 31 18:07:38.140876 2026] [:error] [pid 41421:tid 41428] [client 20.238.71.89:14927] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acuc6hSaDjY9kKFtUQBqRQAAAQQ"]
[Tue Mar 31 18:07:38.298594 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:38.550591 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:38.639034 2026] [:error] [pid 41421:tid 41447] [client 158.158.107.18:65338] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acuc6hSaDjY9kKFtUQBqRwAAARc"]
[Tue Mar 31 18:07:38.646461 2026] [:error] [pid 41421:tid 41446] [client 20.238.71.89:6090] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acuc6hSaDjY9kKFtUQBqSAAAARY"]
[Tue Mar 31 18:07:38.799010 2026] [proxy_fcgi:error] [pid 36892:tid 36957] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:39.063738 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:39.158741 2026] [:error] [pid 41421:tid 41434] [client 20.238.71.89:6110] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuc6xSaDjY9kKFtUQBqSwAAAQo"]
[Tue Mar 31 18:07:39.183771 2026] [:error] [pid 6548:tid 6554] [client 158.158.107.18:64740] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acuc67gIz9HgMl9YwE7sRQAAAUQ"]
[Tue Mar 31 18:07:39.304006 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:39.549096 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 172.161.1.56:3845] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:07:39.665372 2026] [:error] [pid 36891:tid 36935] [client 158.158.107.18:65389] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acuc65JhiMaJUqoqfl64KgAAAEs"]
[Tue Mar 31 18:07:39.666650 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:14942] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuc67gIz9HgMl9YwE7sRgAAAVc"]
[Tue Mar 31 18:07:40.146311 2026] [:error] [pid 36891:tid 36936] [client 158.158.107.18:64659] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acuc7JJhiMaJUqoqfl64KwAAAEw"]
[Tue Mar 31 18:07:40.628181 2026] [:error] [pid 41421:tid 41437] [client 158.158.107.18:65312] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "acuc7BSaDjY9kKFtUQBqTgAAAQ0"]
[Tue Mar 31 18:07:41.107649 2026] [:error] [pid 41421:tid 41448] [client 158.158.107.18:65309] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuc7RSaDjY9kKFtUQBqUAAAARg"]
[Tue Mar 31 18:07:41.307647 2026] [:error] [pid 41421:tid 41426] [client 20.238.71.89:6092] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuc7RSaDjY9kKFtUQBqUgAAAQI"]
[Tue Mar 31 18:07:41.606418 2026] [:error] [pid 41421:tid 41447] [client 158.158.107.18:65289] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuc7RSaDjY9kKFtUQBqUwAAARc"]
[Tue Mar 31 18:07:41.811183 2026] [:error] [pid 36892:tid 36964] [client 20.238.71.89:14859] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acuc7Uyj9S4G0ek3O4Jw1wAAAI0"]
[Tue Mar 31 18:07:42.097946 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:65398] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuc7hSaDjY9kKFtUQBqVQAAAQ8"]
[Tue Mar 31 18:07:42.313684 2026] [:error] [pid 36982:tid 36998] [client 20.238.71.89:6130] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuc7vlMmeoQKN0r_GNgAgAAAM0"]
[Tue Mar 31 18:07:42.578763 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:65346] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "acuc7vlMmeoQKN0r_GNgAwAAANM"]
[Tue Mar 31 18:07:42.815157 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:6089] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuc7rgIz9HgMl9YwE7sTAAAAUY"]
[Tue Mar 31 18:07:43.099626 2026] [:error] [pid 36892:tid 36958] [client 158.158.107.18:65405] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuc70yj9S4G0ek3O4Jw2QAAAIc"]
[Tue Mar 31 18:07:43.343561 2026] [:error] [pid 41421:tid 41425] [client 20.238.71.89:6119] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuc7xSaDjY9kKFtUQBqWgAAAQE"]
[Tue Mar 31 18:07:43.581162 2026] [:error] [pid 36890:tid 36902] [client 158.158.107.18:65379] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuc758FASPd_uH8z7cRYAAAAAc"]
[Tue Mar 31 18:07:43.856191 2026] [:error] [pid 36890:tid 36919] [client 20.238.71.89:14910] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acuc758FASPd_uH8z7cRYgAAABg"]
[Tue Mar 31 18:07:44.075414 2026] [:error] [pid 41421:tid 41428] [client 158.158.107.18:65331] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuc8BSaDjY9kKFtUQBqWwAAAQQ"]
[Tue Mar 31 18:07:44.561815 2026] [:error] [pid 36890:tid 36901] [client 158.158.107.18:65318] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "acuc8J8FASPd_uH8z7cRZAAAAAY"]
[Tue Mar 31 18:07:45.045657 2026] [:error] [pid 36982:tid 37003] [client 158.158.107.18:65287] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuc8flMmeoQKN0r_GNgBQAAANI"]
[Tue Mar 31 18:07:45.388902 2026] [:error] [pid 41421:tid 41424] [client 20.238.71.89:6076] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acuc8RSaDjY9kKFtUQBqXgAAAQA"]
[Tue Mar 31 18:07:45.527015 2026] [:error] [pid 41421:tid 41439] [client 158.158.107.18:64767] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuc8RSaDjY9kKFtUQBqXwAAAQ8"]
[Tue Mar 31 18:07:45.903944 2026] [:error] [pid 36892:tid 36959] [client 20.238.71.89:6025] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acuc8Uyj9S4G0ek3O4Jw3AAAAIg"]
[Tue Mar 31 18:07:46.037082 2026] [:error] [pid 36891:tid 36928] [client 158.158.107.18:65326] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuc8pJhiMaJUqoqfl64LQAAAEQ"]
[Tue Mar 31 18:07:46.562719 2026] [:error] [pid 36891:tid 36929] [client 158.158.107.18:65332] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "acuc8pJhiMaJUqoqfl64LgAAAEU"]
[Tue Mar 31 18:07:46.581374 2026] [:error] [pid 36890:tid 36907] [client 20.238.71.89:6108] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acuc8p8FASPd_uH8z7cRZwAAAAw"]
[Tue Mar 31 18:07:47.069928 2026] [:error] [pid 6548:tid 6574] [client 158.158.107.18:65315] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuc87gIz9HgMl9YwE7sUwAAAVg"]
[Tue Mar 31 18:07:47.168689 2026] [:error] [pid 6548:tid 6557] [client 20.238.71.89:6125] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acuc87gIz9HgMl9YwE7sVAAAAUc"]
[Tue Mar 31 18:07:47.550009 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:65324] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuc87gIz9HgMl9YwE7sVgAAAUw"]
[Tue Mar 31 18:07:47.706369 2026] [:error] [pid 6548:tid 6566] [client 20.238.71.89:6105] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acuc87gIz9HgMl9YwE7sVwAAAVA"]
[Tue Mar 31 18:07:48.039624 2026] [:error] [pid 41421:tid 41433] [client 158.158.107.18:65350] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuc9BSaDjY9kKFtUQBqZAAAAQk"]
[Tue Mar 31 18:07:48.213780 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:14894] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acuc9LgIz9HgMl9YwE7sWwAAAUI"]
[Tue Mar 31 18:07:48.543909 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:65304] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "acuc9J8FASPd_uH8z7cRawAAABM"]
[Tue Mar 31 18:07:49.077001 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:65285] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acuc9bgIz9HgMl9YwE7sZAAAAUw"]
[Tue Mar 31 18:07:49.366894 2026] [:error] [pid 36982:tid 36999] [client 20.238.71.89:14922] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acuc9flMmeoQKN0r_GNgDQAAAM4"]
[Tue Mar 31 18:07:49.566833 2026] [:error] [pid 41421:tid 41435] [client 158.158.107.18:65382] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acuc9RSaDjY9kKFtUQBqZgAAAQs"]
[Tue Mar 31 18:07:49.884683 2026] [:error] [pid 36982:tid 37005] [client 20.238.71.89:6098] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acuc9flMmeoQKN0r_GNgDwAAANQ"]
[Tue Mar 31 18:07:50.072603 2026] [:error] [pid 41421:tid 41438] [client 158.158.107.18:65329] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acuc9hSaDjY9kKFtUQBqaQAAAQ4"]
[Tue Mar 31 18:07:50.475553 2026] [:error] [pid 36890:tid 36919] [client 20.238.71.89:6030] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acuc9p8FASPd_uH8z7cRbQAAABg"]
[Tue Mar 31 18:07:50.565112 2026] [:error] [pid 36890:tid 36908] [client 158.158.107.18:64653] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "acuc9p8FASPd_uH8z7cRbgAAAA0"]
[Tue Mar 31 18:07:50.996371 2026] [:error] [pid 36890:tid 36895] [client 20.238.71.89:14944] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acuc9p8FASPd_uH8z7cRbwAAAAA"]
[Tue Mar 31 18:07:51.055777 2026] [:error] [pid 36891:tid 36926] [client 158.158.107.18:65297] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acuc95JhiMaJUqoqfl64NAAAAEI"]
[Tue Mar 31 18:07:51.521809 2026] [:error] [pid 36892:tid 36963] [client 20.238.71.89:14881] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acuc90yj9S4G0ek3O4Jw4gAAAIw"]
[Tue Mar 31 18:07:51.541157 2026] [:error] [pid 36892:tid 36955] [client 158.158.107.18:65372] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acuc90yj9S4G0ek3O4Jw4wAAAIQ"]
[Tue Mar 31 18:07:52.046831 2026] [:error] [pid 36891:tid 36937] [client 158.158.107.18:65302] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acuc-JJhiMaJUqoqfl64NwAAAE0"]
[Tue Mar 31 18:07:52.567953 2026] [:error] [pid 36982:tid 37005] [client 158.158.107.18:65345] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "acuc-PlMmeoQKN0r_GNgGAAAANQ"]
[Tue Mar 31 18:07:53.063163 2026] [:error] [pid 36982:tid 36987] [client 20.238.71.89:5952] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acuc-flMmeoQKN0r_GNgGgAAAMI"]
[Tue Mar 31 18:07:53.072813 2026] [:error] [pid 36982:tid 36992] [client 158.158.107.18:65366] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuc-flMmeoQKN0r_GNgGwAAAMc"]
[Tue Mar 31 18:07:53.575402 2026] [:error] [pid 6548:tid 6560] [client 158.158.107.18:65282] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuc-bgIz9HgMl9YwE7saAAAAUo"]
[Tue Mar 31 18:07:53.577209 2026] [:error] [pid 41421:tid 41439] [client 20.238.71.89:6051] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuc-RSaDjY9kKFtUQBqbAAAAQ8"]
[Tue Mar 31 18:07:54.068770 2026] [:error] [pid 36890:tid 36912] [client 158.158.107.18:65334] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuc-p8FASPd_uH8z7cRcwAAABE"]
[Tue Mar 31 18:07:54.577809 2026] [:error] [pid 41421:tid 41446] [client 158.158.107.18:65370] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuc-hSaDjY9kKFtUQBqcQAAARY"]
[Tue Mar 31 18:07:55.073360 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:64728] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuc-_lMmeoQKN0r_GNgHgAAAMY"]
[Tue Mar 31 18:07:55.088282 2026] [:error] [pid 36982:tid 36996] [client 20.238.71.89:6038] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuc-_lMmeoQKN0r_GNgHwAAAMs"]
[Tue Mar 31 18:07:55.559104 2026] [:error] [pid 36892:tid 36972] [client 158.158.107.18:65392] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuc-0yj9S4G0ek3O4Jw5QAAAJU"]
[Tue Mar 31 18:07:56.048350 2026] [:error] [pid 36892:tid 36959] [client 158.158.107.18:65399] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuc_Eyj9S4G0ek3O4Jw5gAAAIg"]
[Tue Mar 31 18:07:56.538546 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:65339] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuc_J8FASPd_uH8z7cRdgAAABM"]
[Tue Mar 31 18:07:56.697851 2026] [:error] [pid 36982:tid 36991] [client 20.238.71.89:14949] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuc_PlMmeoQKN0r_GNgKAAAAMY"]
[Tue Mar 31 18:07:57.042832 2026] [:error] [pid 36890:tid 36899] [client 158.158.107.18:65322] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuc_Z8FASPd_uH8z7cReQAAAAQ"]
[Tue Mar 31 18:07:57.199933 2026] [:error] [pid 36890:tid 36903] [client 20.238.71.89:6126] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuc_Z8FASPd_uH8z7cRewAAAAg"]
[Tue Mar 31 18:07:57.533182 2026] [:error] [pid 36890:tid 36917] [client 158.158.107.18:64646] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuc_Z8FASPd_uH8z7cRfAAAABY"]
[Tue Mar 31 18:07:57.788498 2026] [:error] [pid 36892:tid 36974] [client 20.238.71.89:14938] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuc_Uyj9S4G0ek3O4Jw6AAAAJc"]
[Tue Mar 31 18:07:58.022439 2026] [:error] [pid 41421:tid 41428] [client 158.158.107.18:64707] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuc_hSaDjY9kKFtUQBqdQAAAQQ"]
[Tue Mar 31 18:07:58.360180 2026] [:error] [pid 36982:tid 37002] [client 20.238.71.89:6086] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuc_vlMmeoQKN0r_GNgKgAAANE"]
[Tue Mar 31 18:07:58.534317 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:65327] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuc_vlMmeoQKN0r_GNgKwAAAMk"]
[Tue Mar 31 18:07:59.039048 2026] [:error] [pid 36982:tid 36999] [client 158.158.107.18:64726] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuc__lMmeoQKN0r_GNgLAAAAM4"]
[Tue Mar 31 18:07:59.468290 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:6017] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuc_7gIz9HgMl9YwE7sbQAAAUw"]
[Tue Mar 31 18:07:59.519052 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:65401] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuc_7gIz9HgMl9YwE7sbgAAAU0"]
[Tue Mar 31 18:08:00.004356 2026] [:error] [pid 36982:tid 36992] [client 158.158.107.18:65288] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acudAPlMmeoQKN0r_GNgLwAAAMc"]
[Tue Mar 31 18:08:00.040938 2026] [:error] [pid 41421:tid 41432] [client 20.238.71.89:6043] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acudABSaDjY9kKFtUQBqeQAAAQg"]
[Tue Mar 31 18:08:00.490814 2026] [:error] [pid 36982:tid 37003] [client 158.158.107.18:65286] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acudAPlMmeoQKN0r_GNgMAAAANI"]
[Tue Mar 31 18:08:00.563039 2026] [:error] [pid 36982:tid 36995] [client 20.238.71.89:6112] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudAPlMmeoQKN0r_GNgMQAAAMo"]
[Tue Mar 31 18:08:00.986397 2026] [:error] [pid 36892:tid 36967] [client 158.158.107.18:65360] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acudAEyj9S4G0ek3O4Jw6wAAAJA"]
[Tue Mar 31 18:08:01.471752 2026] [:error] [pid 36982:tid 36998] [client 158.158.107.18:65301] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acudAflMmeoQKN0r_GNgNAAAAM0"]
[Tue Mar 31 18:08:01.950984 2026] [:error] [pid 36982:tid 37006] [client 158.158.107.18:64761] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acudAflMmeoQKN0r_GNgNQAAANU"]
[Tue Mar 31 18:08:02.021197 2026] [:error] [pid 41421:tid 41448] [client 20.238.71.89:6050] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudAhSaDjY9kKFtUQBqfQAAARg"]
[Tue Mar 31 18:08:02.434652 2026] [:error] [pid 36890:tid 36914] [client 158.158.107.18:64660] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acudAp8FASPd_uH8z7cRhQAAABM"]
[Tue Mar 31 18:08:02.526767 2026] [:error] [pid 36982:tid 36992] [client 20.238.71.89:6023] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudAvlMmeoQKN0r_GNgNwAAAMc"]
[Tue Mar 31 18:08:02.916032 2026] [:error] [pid 36982:tid 36988] [client 158.158.107.18:65381] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acudAvlMmeoQKN0r_GNgOwAAAMM"]
[Tue Mar 31 18:08:03.042364 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:5986] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudA7gIz9HgMl9YwE7scgAAAUY"]
[Tue Mar 31 18:08:03.408120 2026] [:error] [pid 6548:tid 6560] [client 158.158.107.18:64708] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acudA7gIz9HgMl9YwE7sdAAAAUo"]
[Tue Mar 31 18:08:03.556919 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:6091] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudA7gIz9HgMl9YwE7sdgAAAUI"]
[Tue Mar 31 18:08:03.891459 2026] [:error] [pid 36982:tid 37002] [client 158.158.107.18:65391] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acudA_lMmeoQKN0r_GNgPgAAANE"]
[Tue Mar 31 18:08:04.373203 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:64765] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acudBLgIz9HgMl9YwE7seAAAAVE"]
[Tue Mar 31 18:08:04.853667 2026] [:error] [pid 6548:tid 6565] [client 158.158.107.18:65361] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acudBLgIz9HgMl9YwE7seQAAAU8"]
[Tue Mar 31 18:08:05.073995 2026] [:error] [pid 36891:tid 36943] [client 20.238.71.89:14968] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudBZJhiMaJUqoqfl64PgAAAFM"]
[Tue Mar 31 18:08:05.357222 2026] [:error] [pid 36892:tid 36964] [client 158.158.107.18:64759] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acudBUyj9S4G0ek3O4Jw7AAAAI0"]
[Tue Mar 31 18:08:05.589106 2026] [:error] [pid 36892:tid 36958] [client 20.238.71.89:6099] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudBUyj9S4G0ek3O4Jw7QAAAIc"]
[Tue Mar 31 18:08:05.853435 2026] [:error] [pid 36982:tid 36987] [client 158.158.107.18:65317] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acudBflMmeoQKN0r_GNgQAAAAMI"]
[Tue Mar 31 18:08:06.101089 2026] [:error] [pid 36890:tid 36911] [client 20.238.71.89:14876] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudBp8FASPd_uH8z7cRiQAAABA"]
[Tue Mar 31 18:08:06.336773 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:64645] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "acudBrgIz9HgMl9YwE7sfwAAAU0"]
[Tue Mar 31 18:08:06.606642 2026] [:error] [pid 36982:tid 36990] [client 20.238.71.89:6118] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudBvlMmeoQKN0r_GNgQQAAAMU"]
[Tue Mar 31 18:08:06.818614 2026] [:error] [pid 6548:tid 6574] [client 158.158.107.18:64763] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acudBrgIz9HgMl9YwE7sgQAAAVg"]
[Tue Mar 31 18:08:07.127116 2026] [:error] [pid 6548:tid 6555] [client 20.238.71.89:6082] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudB7gIz9HgMl9YwE7sgwAAAUU"]
[Tue Mar 31 18:08:07.298070 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:64082] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acudB7gIz9HgMl9YwE7shQAAAUI"]
[Tue Mar 31 18:08:07.653248 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:14857] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudB7gIz9HgMl9YwE7siQAAAUg"]
[Tue Mar 31 18:08:07.783481 2026] [:error] [pid 36982:tid 36995] [client 158.158.107.18:65371] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acudB_lMmeoQKN0r_GNgQgAAAMo"]
[Tue Mar 31 18:08:08.161013 2026] [:error] [pid 36890:tid 36896] [client 20.238.71.89:6104] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudCJ8FASPd_uH8z7cRjwAAAAE"]
[Tue Mar 31 18:08:08.269381 2026] [:error] [pid 36890:tid 36918] [client 158.158.107.18:64713] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "acudCJ8FASPd_uH8z7cRkAAAABc"]
[Tue Mar 31 18:08:08.751807 2026] [:error] [pid 36891:tid 36925] [client 158.158.107.18:64749] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acudCJJhiMaJUqoqfl64QQAAAEE"]
[Tue Mar 31 18:08:08.765648 2026] [:error] [pid 36892:tid 36955] [client 20.238.71.89:6136] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudCEyj9S4G0ek3O4Jw7gAAAIQ"]
[Tue Mar 31 18:08:09.231475 2026] [:error] [pid 36891:tid 36938] [client 158.158.107.18:65291] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acudCZJhiMaJUqoqfl64QgAAAE4"]
[Tue Mar 31 18:08:09.279973 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:14973] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudCbgIz9HgMl9YwE7sjAAAAUw"]
[Tue Mar 31 18:08:09.713136 2026] [:error] [pid 36890:tid 36916] [client 158.158.107.18:64712] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acudCZ8FASPd_uH8z7cRlAAAABU"]
[Tue Mar 31 18:08:09.824135 2026] [:error] [pid 41421:tid 41440] [client 20.238.71.89:6065] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudCRSaDjY9kKFtUQBqggAAARA"]
[Tue Mar 31 18:08:10.194821 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:64758] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uang.php"] [unique_id "acudCrgIz9HgMl9YwE7skAAAAUI"]
[Tue Mar 31 18:08:10.334549 2026] [:error] [pid 36891:tid 36944] [client 20.238.71.89:6004] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudCpJhiMaJUqoqfl64RQAAAFQ"]
[Tue Mar 31 18:08:10.673874 2026] [:error] [pid 6548:tid 6558] [client 158.158.107.18:64100] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acudCrgIz9HgMl9YwE7skwAAAUg"]
[Tue Mar 31 18:08:10.908621 2026] [:error] [pid 6548:tid 6568] [client 20.238.71.89:6101] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudCrgIz9HgMl9YwE7slAAAAVI"]
[Tue Mar 31 18:08:11.162796 2026] [:error] [pid 36891:tid 36930] [client 158.158.107.18:64700] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acudC5JhiMaJUqoqfl64RwAAAEY"]
[Tue Mar 31 18:08:11.414863 2026] [:error] [pid 36891:tid 36948] [client 20.238.71.89:6095] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudC5JhiMaJUqoqfl64SAAAAFg"]
[Tue Mar 31 18:08:11.641993 2026] [:error] [pid 36892:tid 36972] [client 158.158.107.18:65344] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acudC0yj9S4G0ek3O4Jw8AAAAJU"]
[Tue Mar 31 18:08:11.992078 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:14886] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudC7gIz9HgMl9YwE7slgAAAU0"]
[Tue Mar 31 18:08:12.130337 2026] [:error] [pid 36892:tid 36959] [client 158.158.107.18:65293] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/save.php"] [unique_id "acudDEyj9S4G0ek3O4Jw8wAAAIg"]
[Tue Mar 31 18:08:12.495699 2026] [:error] [pid 36982:tid 37000] [client 20.238.71.89:14950] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudDPlMmeoQKN0r_GNgRQAAAM8"]
[Tue Mar 31 18:08:12.621286 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:65320] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acudDLgIz9HgMl9YwE7smAAAAUI"]
[Tue Mar 31 18:08:13.001547 2026] [:error] [pid 36891:tid 36935] [client 20.238.71.89:6031] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudDZJhiMaJUqoqfl64SwAAAEs"]
[Tue Mar 31 18:08:13.113576 2026] [:error] [pid 36891:tid 36943] [client 158.158.107.18:65354] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acudDZJhiMaJUqoqfl64TAAAAFM"]
[Tue Mar 31 18:08:13.525683 2026] [:error] [pid 36982:tid 37007] [client 20.238.71.89:14936] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudDflMmeoQKN0r_GNgSAAAANY"]
[Tue Mar 31 18:08:13.600525 2026] [:error] [pid 36982:tid 36996] [client 158.158.107.18:64724] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acudDflMmeoQKN0r_GNgSQAAAMs"]
[Tue Mar 31 18:08:14.029330 2026] [:error] [pid 36982:tid 36986] [client 20.238.71.89:14882] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudDvlMmeoQKN0r_GNgSgAAAME"]
[Tue Mar 31 18:08:14.082736 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:65348] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "acudDrgIz9HgMl9YwE7snQAAAVU"]
[Tue Mar 31 18:08:14.546204 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:6143] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudDrgIz9HgMl9YwE7snwAAAU0"]
[Tue Mar 31 18:08:14.565071 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:64735] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acudDrgIz9HgMl9YwE7soAAAAUc"]
[Tue Mar 31 18:08:15.049805 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:65383] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acudD7gIz9HgMl9YwE7soQAAAUE"]
[Tue Mar 31 18:08:15.090288 2026] [:error] [pid 36982:tid 36999] [client 20.238.71.89:6034] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudD_lMmeoQKN0r_GNgTQAAAM4"]
[Tue Mar 31 18:08:15.529688 2026] [:error] [pid 36891:tid 36938] [client 158.158.107.18:65341] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acudD5JhiMaJUqoqfl64TwAAAE4"]
[Tue Mar 31 18:08:15.594486 2026] [:error] [pid 36891:tid 36928] [client 20.238.71.89:6047] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudD5JhiMaJUqoqfl64UAAAAEQ"]
[Tue Mar 31 18:08:16.018635 2026] [:error] [pid 36891:tid 36941] [client 158.158.107.18:64651] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "acudEJJhiMaJUqoqfl64UgAAAFE"]
[Tue Mar 31 18:08:16.105195 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:6080] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudELgIz9HgMl9YwE7spQAAAUg"]
[Tue Mar 31 18:08:16.512280 2026] [:error] [pid 6548:tid 6554] [client 158.158.107.18:64739] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acudELgIz9HgMl9YwE7spwAAAUQ"]
[Tue Mar 31 18:08:16.630723 2026] [:error] [pid 6548:tid 6569] [client 20.238.71.89:6133] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudELgIz9HgMl9YwE7sqAAAAVM"]
[Tue Mar 31 18:08:16.991475 2026] [:error] [pid 36891:tid 36930] [client 158.158.107.18:65295] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acudEJJhiMaJUqoqfl64VwAAAEY"]
[Tue Mar 31 18:08:17.178460 2026] [:error] [pid 36891:tid 36940] [client 20.238.71.89:6131] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudEZJhiMaJUqoqfl64WAAAAFA"]
[Tue Mar 31 18:08:17.476214 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:65358] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acudEbgIz9HgMl9YwE7sqgAAAVU"]
[Tue Mar 31 18:08:17.700851 2026] [:error] [pid 6548:tid 6570] [client 20.238.71.89:6035] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudEbgIz9HgMl9YwE7srAAAAVQ"]
[Tue Mar 31 18:08:17.966707 2026] [:error] [pid 41421:tid 41434] [client 158.158.107.18:65328] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "acudERSaDjY9kKFtUQBqigAAAQo"]
[Tue Mar 31 18:08:18.299208 2026] [:error] [pid 36982:tid 37005] [client 20.238.71.89:6075] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudEvlMmeoQKN0r_GNgTwAAANQ"]
[Tue Mar 31 18:08:18.447665 2026] [:error] [pid 36982:tid 37008] [client 158.158.107.18:65376] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acudEvlMmeoQKN0r_GNgUQAAANc"]
[Tue Mar 31 18:08:18.806368 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:6052] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudEhSaDjY9kKFtUQBqiwAAAQM"]
[Tue Mar 31 18:08:18.930861 2026] [:error] [pid 36891:tid 36931] [client 158.158.107.18:64684] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acudEpJhiMaJUqoqfl64XgAAAEc"]
[Tue Mar 31 18:08:19.406016 2026] [proxy_fcgi:error] [pid 41421:tid 41440] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:19.411273 2026] [:error] [pid 6548:tid 6566] [client 158.158.107.18:64656] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acudE7gIz9HgMl9YwE7srwAAAVA"]
[Tue Mar 31 18:08:19.661678 2026] [proxy_fcgi:error] [pid 41421:tid 41445] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:19.892073 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:64719] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "acudE7gIz9HgMl9YwE7ssAAAAUw"]
[Tue Mar 31 18:08:20.206341 2026] [proxy_fcgi:error] [pid 41421:tid 41435] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:20.374111 2026] [proxy_fcgi:error] [pid 6548:tid 6569] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:20.624138 2026] [proxy_fcgi:error] [pid 6548:tid 6573] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:20.867758 2026] [proxy_fcgi:error] [pid 6548:tid 6557] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.110418 2026] [proxy_fcgi:error] [pid 6548:tid 6553] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.354981 2026] [proxy_fcgi:error] [pid 6548:tid 6556] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.356082 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.601901 2026] [proxy_fcgi:error] [pid 6548:tid 6567] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.610682 2026] [proxy_fcgi:error] [pid 41421:tid 41436] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:21.867277 2026] [proxy_fcgi:error] [pid 6548:tid 6558] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.114215 2026] [proxy_fcgi:error] [pid 6548:tid 6573] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.132082 2026] [proxy_fcgi:error] [pid 41421:tid 41439] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.357021 2026] [proxy_fcgi:error] [pid 6548:tid 6572] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.390508 2026] [proxy_fcgi:error] [pid 41421:tid 41429] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.600944 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:22.853117 2026] [proxy_fcgi:error] [pid 6548:tid 6554] [client 158.158.107.18:65281] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:23.094095 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:65281] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acudF7gIz9HgMl9YwE7sygAAAUc"]
[Tue Mar 31 18:08:23.351082 2026] [proxy_fcgi:error] [pid 41421:tid 41444] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:23.576718 2026] [:error] [pid 41421:tid 41432] [client 158.158.107.18:65340] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acudFxSaDjY9kKFtUQBqmAAAAQg"]
[Tue Mar 31 18:08:23.606502 2026] [proxy_fcgi:error] [pid 41421:tid 41442] [client 20.238.71.89:6093] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:08:23.865937 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:6093] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudFxSaDjY9kKFtUQBqmgAAAQM"]
[Tue Mar 31 18:08:24.076040 2026] [:error] [pid 36890:tid 36911] [client 158.158.107.18:65406] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acudGJ8FASPd_uH8z7cRoAAAABA"]
[Tue Mar 31 18:08:24.384840 2026] [:error] [pid 36890:tid 36895] [client 20.238.71.89:6138] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudGJ8FASPd_uH8z7cRoQAAAAA"]
[Tue Mar 31 18:08:24.557772 2026] [:error] [pid 36890:tid 36906] [client 158.158.107.18:65385] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "acudGJ8FASPd_uH8z7cRogAAAAs"]
[Tue Mar 31 18:08:24.904776 2026] [:error] [pid 6548:tid 6550] [client 20.238.71.89:6086] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudGLgIz9HgMl9YwE7s0QAAAUA"]
[Tue Mar 31 18:08:25.035216 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:65343] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acudGbgIz9HgMl9YwE7s0wAAAUI"]
[Tue Mar 31 18:08:25.432546 2026] [:error] [pid 36982:tid 36995] [client 20.238.71.89:14877] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudGflMmeoQKN0r_GNgWwAAAMo"]
[Tue Mar 31 18:08:25.521732 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:65353] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acudGbgIz9HgMl9YwE7s1QAAAVU"]
[Tue Mar 31 18:08:25.950408 2026] [:error] [pid 36982:tid 36998] [client 20.238.71.89:5976] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudGflMmeoQKN0r_GNgXgAAAM0"]
[Tue Mar 31 18:08:26.020568 2026] [:error] [pid 36890:tid 36897] [client 158.158.107.18:65284] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acudGp8FASPd_uH8z7cRpQAAAAI"]
[Tue Mar 31 18:08:26.453523 2026] [:error] [pid 41421:tid 41425] [client 20.238.71.89:14897] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudGhSaDjY9kKFtUQBqnQAAAQE"]
[Tue Mar 31 18:08:26.505591 2026] [:error] [pid 36982:tid 37007] [client 158.158.107.18:65407] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "acudGvlMmeoQKN0r_GNgXwAAANY"]
[Tue Mar 31 18:08:26.984165 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:65357] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acudGrgIz9HgMl9YwE7s2QAAAUU"]
[Tue Mar 31 18:08:27.037755 2026] [:error] [pid 36982:tid 37002] [client 20.238.71.89:14924] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudG_lMmeoQKN0r_GNgYQAAANE"]
[Tue Mar 31 18:08:27.466025 2026] [:error] [pid 41421:tid 41433] [client 158.158.107.18:64760] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acudGxSaDjY9kKFtUQBqoQAAAQk"]
[Tue Mar 31 18:08:27.565021 2026] [:error] [pid 36890:tid 36899] [client 20.238.71.89:6081] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudG58FASPd_uH8z7cRqQAAAAQ"]
[Tue Mar 31 18:08:27.946788 2026] [:error] [pid 36982:tid 36985] [client 158.158.107.18:64641] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acudG_lMmeoQKN0r_GNgYwAAAMA"]
[Tue Mar 31 18:08:28.424740 2026] [:error] [pid 36890:tid 36896] [client 158.158.107.18:64711] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "acudHJ8FASPd_uH8z7cRqgAAAAE"]
[Tue Mar 31 18:08:28.903353 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:64737] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acudHPlMmeoQKN0r_GNgawAAAMY"]
[Tue Mar 31 18:08:29.066598 2026] [:error] [pid 36982:tid 37002] [client 20.238.71.89:6022] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acudHflMmeoQKN0r_GNgbQAAANE"]
[Tue Mar 31 18:08:29.384609 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:64715] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acudHbgIz9HgMl9YwE7s3gAAAVE"]
[Tue Mar 31 18:08:29.572381 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:5956] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acudHbgIz9HgMl9YwE7s3wAAAUI"]
[Tue Mar 31 18:08:29.868098 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:65323] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acudHbgIz9HgMl9YwE7s4AAAAUY"]
[Tue Mar 31 18:08:30.087543 2026] [:error] [pid 6548:tid 6555] [client 20.238.71.89:5990] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acudHrgIz9HgMl9YwE7s4gAAAUU"]
[Tue Mar 31 18:08:30.348482 2026] [:error] [pid 41421:tid 41429] [client 158.158.107.18:64746] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "acudHhSaDjY9kKFtUQBqpAAAAQU"]
[Tue Mar 31 18:08:30.593798 2026] [:error] [pid 6548:tid 6551] [client 20.238.71.89:5970] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acudHrgIz9HgMl9YwE7s5QAAAUE"]
[Tue Mar 31 18:08:30.830001 2026] [:error] [pid 6548:tid 6561] [client 158.158.107.18:64745] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acudHrgIz9HgMl9YwE7s6AAAAUs"]
[Tue Mar 31 18:08:31.098595 2026] [:error] [pid 6548:tid 6574] [client 20.238.71.89:5975] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acudH7gIz9HgMl9YwE7s6gAAAVg"]
[Tue Mar 31 18:08:31.318936 2026] [:error] [pid 36890:tid 36903] [client 158.158.107.18:65368] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acudH58FASPd_uH8z7cRrQAAAAg"]
[Tue Mar 31 18:08:31.798568 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:64716] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acudH7gIz9HgMl9YwE7s7AAAAU0"]
[Tue Mar 31 18:08:32.185824 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:6054] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acudILgIz9HgMl9YwE7s7wAAAU8"]
[Tue Mar 31 18:08:32.282450 2026] [:error] [pid 6548:tid 6559] [client 158.158.107.18:64696] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "acudILgIz9HgMl9YwE7s8AAAAUk"]
[Tue Mar 31 18:08:32.749833 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:5905] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acudILgIz9HgMl9YwE7s9gAAAUo"]
[Tue Mar 31 18:08:32.763753 2026] [:error] [pid 6548:tid 6553] [client 158.158.107.18:65311] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acudILgIz9HgMl9YwE7s9wAAAUM"]
[Tue Mar 31 18:08:33.247669 2026] [:error] [pid 6548:tid 6554] [client 158.158.107.18:64750] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acudIbgIz9HgMl9YwE7s-gAAAUQ"]
[Tue Mar 31 18:08:33.271753 2026] [:error] [pid 6548:tid 6572] [client 20.238.71.89:5953] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acudIbgIz9HgMl9YwE7s-wAAAVY"]
[Tue Mar 31 18:08:33.729177 2026] [:error] [pid 36890:tid 36907] [client 158.158.107.18:65333] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acudIZ8FASPd_uH8z7cRsQAAAAw"]
[Tue Mar 31 18:08:33.808604 2026] [:error] [pid 41421:tid 41445] [client 20.238.71.89:14890] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acudIRSaDjY9kKFtUQBqpgAAARU"]
[Tue Mar 31 18:08:34.228984 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:64685] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "acudIrgIz9HgMl9YwE7tAwAAAUE"]
[Tue Mar 31 18:08:34.334208 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:6123] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acudIrgIz9HgMl9YwE7tBAAAAUo"]
[Tue Mar 31 18:08:34.711961 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:64727] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acudIrgIz9HgMl9YwE7tBwAAAUU"]
[Tue Mar 31 18:08:35.192459 2026] [:error] [pid 41421:tid 41440] [client 158.158.107.18:64762] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acudIxSaDjY9kKFtUQBqpwAAARA"]
[Tue Mar 31 18:08:35.485338 2026] [:error] [pid 6548:tid 6561] [client 20.238.71.89:5985] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acudI7gIz9HgMl9YwE7tEgAAAUs"]
[Tue Mar 31 18:08:35.671845 2026] [:error] [pid 36892:tid 36964] [client 158.158.107.18:65384] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acudI0yj9S4G0ek3O4Jw-AAAAI0"]
[Tue Mar 31 18:08:36.007564 2026] [:error] [pid 36982:tid 36986] [client 20.238.71.89:6122] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "acudJPlMmeoQKN0r_GNgcwAAAME"]
[Tue Mar 31 18:08:36.174313 2026] [:error] [pid 36890:tid 36896] [client 158.158.107.18:64089] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "acudJJ8FASPd_uH8z7cRtQAAAAE"]
[Tue Mar 31 18:08:36.520996 2026] [:error] [pid 36891:tid 36939] [client 20.238.71.89:6037] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acudJJJhiMaJUqoqfl64aQAAAE8"]
[Tue Mar 31 18:08:36.658510 2026] [:error] [pid 36891:tid 36928] [client 158.158.107.18:64678] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acudJJJhiMaJUqoqfl64awAAAEQ"]
[Tue Mar 31 18:08:37.146028 2026] [:error] [pid 41421:tid 41433] [client 20.238.71.89:6024] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acudJRSaDjY9kKFtUQBqqwAAAQk"]
[Tue Mar 31 18:08:37.152657 2026] [:error] [pid 41421:tid 41435] [client 158.158.107.18:64688] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acudJRSaDjY9kKFtUQBqrAAAAQs"]
[Tue Mar 31 18:08:37.636285 2026] [:error] [pid 41421:tid 41436] [client 158.158.107.18:65394] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acudJRSaDjY9kKFtUQBqrgAAAQw"]
[Tue Mar 31 18:08:37.662016 2026] [:error] [pid 36891:tid 36941] [client 20.238.71.89:6079] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acudJZJhiMaJUqoqfl64bQAAAFE"]
[Tue Mar 31 18:08:38.140044 2026] [:error] [pid 6548:tid 6571] [client 158.158.107.18:64721] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acudJrgIz9HgMl9YwE7tGwAAAVU"]
[Tue Mar 31 18:08:38.165412 2026] [:error] [pid 36982:tid 37003] [client 20.238.71.89:5958] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "acudJvlMmeoQKN0r_GNgdQAAANI"]
[Tue Mar 31 18:08:38.625448 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:65337] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acudJrgIz9HgMl9YwE7tHQAAAUY"]
[Tue Mar 31 18:08:38.703428 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:6062] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acudJrgIz9HgMl9YwE7tHwAAAUg"]
[Tue Mar 31 18:08:39.102317 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:64657] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acudJ7gIz9HgMl9YwE7tIwAAAU4"]
[Tue Mar 31 18:08:39.209800 2026] [:error] [pid 6548:tid 6570] [client 20.238.71.89:6117] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acudJ7gIz9HgMl9YwE7tJAAAAVQ"]
[Tue Mar 31 18:08:39.598662 2026] [:error] [pid 6548:tid 6557] [client 158.158.107.18:64644] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acudJ7gIz9HgMl9YwE7tJgAAAUc"]
[Tue Mar 31 18:08:39.727309 2026] [:error] [pid 6548:tid 6559] [client 20.238.71.89:14922] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acudJ7gIz9HgMl9YwE7tJwAAAUk"]
[Tue Mar 31 18:08:40.079045 2026] [:error] [pid 36892:tid 36973] [client 158.158.107.18:64720] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acudKEyj9S4G0ek3O4JxBAAAAJY"]
[Tue Mar 31 18:08:40.294855 2026] [:error] [pid 36982:tid 36999] [client 20.238.71.89:14961] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "acudKPlMmeoQKN0r_GNgeQAAAM4"]
[Tue Mar 31 18:08:40.571664 2026] [:error] [pid 36890:tid 36911] [client 158.158.107.18:65347] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudKJ8FASPd_uH8z7cRvwAAABA"]
[Tue Mar 31 18:08:40.803452 2026] [:error] [pid 36982:tid 36988] [client 20.238.71.89:6056] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acudKPlMmeoQKN0r_GNgegAAAMM"]
[Tue Mar 31 18:08:41.052819 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:64073] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudKflMmeoQKN0r_GNgfAAAAMY"]
[Tue Mar 31 18:08:41.406125 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:6060] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acudKbgIz9HgMl9YwE7tKwAAAUQ"]
[Tue Mar 31 18:08:41.532696 2026] [:error] [pid 36891:tid 36940] [client 158.158.107.18:64743] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudKZJhiMaJUqoqfl64cAAAAFA"]
[Tue Mar 31 18:08:41.920938 2026] [:error] [pid 41421:tid 41430] [client 20.238.71.89:5989] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acudKRSaDjY9kKFtUQBqtAAAAQY"]
[Tue Mar 31 18:08:42.016028 2026] [:error] [pid 41421:tid 41444] [client 158.158.107.18:64753] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acudKhSaDjY9kKFtUQBqtgAAARQ"]
[Tue Mar 31 18:08:42.471457 2026] [:error] [pid 36982:tid 37003] [client 20.238.71.89:6028] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "acudKvlMmeoQKN0r_GNgggAAANI"]
[Tue Mar 31 18:08:42.507627 2026] [:error] [pid 36891:tid 36930] [client 158.158.107.18:64736] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudKpJhiMaJUqoqfl64cQAAAEY"]
[Tue Mar 31 18:08:42.980940 2026] [:error] [pid 6548:tid 6562] [client 20.238.71.89:5969] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acudKrgIz9HgMl9YwE7tLwAAAUw"]
[Tue Mar 31 18:08:42.988477 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:64676] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudKrgIz9HgMl9YwE7tMAAAAU4"]
[Tue Mar 31 18:08:43.491374 2026] [:error] [pid 36891:tid 36943] [client 158.158.107.18:64643] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudK5JhiMaJUqoqfl64cgAAAFM"]
[Tue Mar 31 18:08:43.505472 2026] [:error] [pid 41421:tid 41426] [client 20.238.71.89:5978] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acudKxSaDjY9kKFtUQBqvAAAAQI"]
[Tue Mar 31 18:08:43.974017 2026] [:error] [pid 36890:tid 36911] [client 158.158.107.18:65280] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acudK58FASPd_uH8z7cRxwAAABA"]
[Tue Mar 31 18:08:44.020501 2026] [:error] [pid 36890:tid 36916] [client 20.238.71.89:6003] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acudLJ8FASPd_uH8z7cRyAAAABU"]
[Tue Mar 31 18:08:44.456366 2026] [:error] [pid 36890:tid 36910] [client 158.158.107.18:64699] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudLJ8FASPd_uH8z7cRygAAAA8"]
[Tue Mar 31 18:08:44.530965 2026] [:error] [pid 41421:tid 41429] [client 20.238.71.89:6072] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "acudLBSaDjY9kKFtUQBqvgAAAQU"]
[Tue Mar 31 18:08:44.941549 2026] [:error] [pid 36890:tid 36907] [client 158.158.107.18:64649] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudLJ8FASPd_uH8z7cRzQAAAAw"]
[Tue Mar 31 18:08:45.039006 2026] [:error] [pid 36982:tid 37009] [client 20.238.71.89:6040] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acudLflMmeoQKN0r_GNgiAAAANg"]
[Tue Mar 31 18:08:45.437146 2026] [:error] [pid 6548:tid 6551] [client 158.158.107.18:64105] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudLbgIz9HgMl9YwE7tNgAAAUE"]
[Tue Mar 31 18:08:45.917879 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:64084] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acudLbgIz9HgMl9YwE7tOgAAAUw"]
[Tue Mar 31 18:08:46.141077 2026] [:error] [pid 36982:tid 37007] [client 20.238.71.89:6106] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acudLvlMmeoQKN0r_GNgiwAAANY"]
[Tue Mar 31 18:08:46.396421 2026] [:error] [pid 41421:tid 41434] [client 158.158.107.18:64704] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudLhSaDjY9kKFtUQBqvwAAAQo"]
[Tue Mar 31 18:08:46.667414 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:6120] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acudLrgIz9HgMl9YwE7tPgAAAUQ"]
[Tue Mar 31 18:08:46.875840 2026] [:error] [pid 36892:tid 36953] [client 158.158.107.18:64748] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudLkyj9S4G0ek3O4JxCQAAAII"]
[Tue Mar 31 18:08:47.171368 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:6140] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "acudL7gIz9HgMl9YwE7tQAAAAUI"]
[Tue Mar 31 18:08:47.356963 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:64731] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudL_lMmeoQKN0r_GNgjwAAAMk"]
[Tue Mar 31 18:08:47.842209 2026] [:error] [pid 6548:tid 6572] [client 158.158.107.18:64706] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acudL7gIz9HgMl9YwE7tQQAAAVY"]
[Tue Mar 31 18:08:48.321975 2026] [:error] [pid 36892:tid 36973] [client 158.158.107.18:64666] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudMEyj9S4G0ek3O4JxCgAAAJY"]
[Tue Mar 31 18:08:48.813297 2026] [:error] [pid 36891:tid 36933] [client 158.158.107.18:64729] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudMJJhiMaJUqoqfl64cwAAAEk"]
[Tue Mar 31 18:08:49.303582 2026] [:error] [pid 36890:tid 36903] [client 158.158.107.18:65364] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudMZ8FASPd_uH8z7cR0AAAAAg"]
[Tue Mar 31 18:08:49.782609 2026] [:error] [pid 36891:tid 36942] [client 158.158.107.18:64752] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acudMZJhiMaJUqoqfl64dAAAAFI"]
[Tue Mar 31 18:08:50.273979 2026] [:error] [pid 36890:tid 36898] [client 158.158.107.18:65395] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudMp8FASPd_uH8z7cR0QAAAAM"]
[Tue Mar 31 18:08:50.751908 2026] [:error] [pid 6548:tid 6573] [client 158.158.107.18:64741] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudMrgIz9HgMl9YwE7tSwAAAVc"]
[Tue Mar 31 18:08:51.230391 2026] [:error] [pid 36891:tid 36947] [client 158.158.107.18:65335] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudM5JhiMaJUqoqfl64eQAAAFc"]
[Tue Mar 31 18:08:51.724278 2026] [:error] [pid 36891:tid 36924] [client 158.158.107.18:64732] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "acudM5JhiMaJUqoqfl64egAAAEA"]
[Tue Mar 31 18:08:52.205750 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:65362] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudNLgIz9HgMl9YwE7tUwAAAUA"]
[Tue Mar 31 18:08:52.685489 2026] [:error] [pid 36891:tid 36944] [client 158.158.107.18:65342] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudNJJhiMaJUqoqfl64ewAAAFQ"]
[Tue Mar 31 18:08:53.167597 2026] [:error] [pid 41421:tid 41447] [client 158.158.107.18:64730] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudNRSaDjY9kKFtUQBqxAAAARc"]
[Tue Mar 31 18:08:53.652499 2026] [:error] [pid 41421:tid 41424] [client 158.158.107.18:64742] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "acudNRSaDjY9kKFtUQBqxgAAAQA"]
[Tue Mar 31 18:08:54.141585 2026] [:error] [pid 36891:tid 36926] [client 158.158.107.18:65299] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudNpJhiMaJUqoqfl64fQAAAEI"]
[Tue Mar 31 18:08:54.620433 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:64697] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudNrgIz9HgMl9YwE7tWgAAAUI"]
[Tue Mar 31 18:08:55.117667 2026] [:error] [pid 41421:tid 41448] [client 158.158.107.18:65388] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudNxSaDjY9kKFtUQBqyAAAARg"]
[Tue Mar 31 18:08:55.610218 2026] [:error] [pid 36890:tid 36917] [client 158.158.107.18:64725] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "acudN58FASPd_uH8z7cR1AAAABY"]
[Tue Mar 31 18:08:56.092974 2026] [:error] [pid 41421:tid 41446] [client 158.158.107.18:64723] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acudOBSaDjY9kKFtUQBqywAAARY"]
[Tue Mar 31 18:08:56.573478 2026] [:error] [pid 6548:tid 6570] [client 158.158.107.18:65390] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acudOLgIz9HgMl9YwE7tXwAAAVQ"]
[Tue Mar 31 18:08:57.058628 2026] [:error] [pid 41421:tid 41426] [client 158.158.107.18:64662] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acudORSaDjY9kKFtUQBqzQAAAQI"]
[Tue Mar 31 18:08:57.547795 2026] [:error] [pid 36890:tid 36901] [client 158.158.107.18:64654] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "acudOZ8FASPd_uH8z7cR1gAAAAY"]
[Tue Mar 31 18:08:58.037153 2026] [:error] [pid 36982:tid 36988] [client 158.158.107.18:65403] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acudOvlMmeoQKN0r_GNglwAAAMM"]
[Tue Mar 31 18:08:58.572935 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:64754] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acudOrgIz9HgMl9YwE7tYwAAAUU"]
[Tue Mar 31 18:08:59.089446 2026] [:error] [pid 6548:tid 6573] [client 158.158.107.18:64673] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acudO7gIz9HgMl9YwE7taQAAAVc"]
[Tue Mar 31 18:08:59.596651 2026] [:error] [pid 6548:tid 6562] [client 158.158.107.18:64067] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "acudO7gIz9HgMl9YwE7tbQAAAUw"]
[Tue Mar 31 18:09:00.099858 2026] [:error] [pid 6548:tid 6564] [client 158.158.107.18:64679] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acudPLgIz9HgMl9YwE7tcAAAAU4"]
[Tue Mar 31 18:09:00.602666 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:64689] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acudPPlMmeoQKN0r_GNgmwAAANM"]
[Tue Mar 31 18:09:01.097174 2026] [:error] [pid 6548:tid 6559] [client 158.158.107.18:64098] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acudPbgIz9HgMl9YwE7tdgAAAUk"]
[Tue Mar 31 18:09:01.597188 2026] [:error] [pid 36982:tid 37002] [client 158.158.107.18:64698] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acudPflMmeoQKN0r_GNgnAAAANE"]
[Tue Mar 31 18:09:02.079110 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:64081] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acudPrgIz9HgMl9YwE7teQAAAUU"]
[Tue Mar 31 18:09:02.587727 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:64691] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acudPvlMmeoQKN0r_GNgnwAAAMk"]
[Tue Mar 31 18:09:03.075660 2026] [:error] [pid 6548:tid 6572] [client 158.158.107.18:64103] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acudP7gIz9HgMl9YwE7tfAAAAVY"]
[Tue Mar 31 18:09:03.622186 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:64074] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc0252.php"] [unique_id "acudP7gIz9HgMl9YwE7tfwAAAUA"]
[Tue Mar 31 18:09:04.101597 2026] [:error] [pid 36891:tid 36936] [client 158.158.107.18:64648] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acudQJJhiMaJUqoqfl64gQAAAEw"]
[Tue Mar 31 18:09:04.663633 2026] [:error] [pid 36982:tid 36987] [client 158.158.107.18:64116] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acudQPlMmeoQKN0r_GNgowAAAMI"]
[Tue Mar 31 18:09:05.190822 2026] [:error] [pid 36891:tid 36937] [client 158.158.107.18:64075] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acudQZJhiMaJUqoqfl64gwAAAE0"]
[Tue Mar 31 18:09:05.689211 2026] [:error] [pid 36982:tid 36985] [client 158.158.107.18:64068] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "acudQflMmeoQKN0r_GNgpwAAAMA"]
[Tue Mar 31 18:09:06.192831 2026] [:error] [pid 36891:tid 36928] [client 158.158.107.18:64680] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acudQpJhiMaJUqoqfl64hgAAAEQ"]
[Tue Mar 31 18:09:06.691043 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:64017] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acudQrgIz9HgMl9YwE7thQAAAUY"]
[Tue Mar 31 18:09:07.240976 2026] [:error] [pid 36892:tid 36975] [client 158.158.107.18:64683] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acudQ0yj9S4G0ek3O4JxEwAAAJg"]
[Tue Mar 31 18:09:07.754683 2026] [:error] [pid 36982:tid 36986] [client 158.158.107.18:64695] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "acudQ_lMmeoQKN0r_GNgrQAAAME"]
[Tue Mar 31 18:09:08.243570 2026] [:error] [pid 36982:tid 37001] [client 158.158.107.18:64109] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acudRPlMmeoQKN0r_GNgrwAAANA"]
[Tue Mar 31 18:09:08.735508 2026] [:error] [pid 6548:tid 6559] [client 158.158.107.18:64756] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acudRLgIz9HgMl9YwE7thwAAAUk"]
[Tue Mar 31 18:09:09.220515 2026] [:error] [pid 6548:tid 6561] [client 158.158.107.18:64111] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acudRbgIz9HgMl9YwE7tiAAAAUs"]
[Tue Mar 31 18:09:09.720674 2026] [:error] [pid 6548:tid 6555] [client 158.158.107.18:64102] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acudRbgIz9HgMl9YwE7tiQAAAUU"]
[Tue Mar 31 18:09:10.205505 2026] [:error] [pid 41421:tid 41445] [client 158.158.107.18:64070] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acudRhSaDjY9kKFtUQBq2AAAARU"]
[Tue Mar 31 18:09:10.703665 2026] [:error] [pid 41421:tid 41444] [client 158.158.107.18:64672] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acudRhSaDjY9kKFtUQBq2wAAARQ"]
[Tue Mar 31 18:09:11.206952 2026] [:error] [pid 36890:tid 36900] [client 158.158.107.18:64642] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acudR58FASPd_uH8z7cR3wAAAAU"]
[Tue Mar 31 18:09:11.687882 2026] [:error] [pid 36982:tid 37004] [client 158.158.107.18:65314] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acudR_lMmeoQKN0r_GNguwAAANM"]
[Tue Mar 31 18:09:12.169696 2026] [:error] [pid 36982:tid 36989] [client 158.158.107.18:64028] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acudSPlMmeoQKN0r_GNgvQAAAMQ"]
[Tue Mar 31 18:09:12.653350 2026] [:error] [pid 36891:tid 36932] [client 158.158.107.18:64682] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acudSJJhiMaJUqoqfl64igAAAEg"]
[Tue Mar 31 18:09:13.137624 2026] [:error] [pid 36892:tid 36965] [client 158.158.107.18:64747] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acudSUyj9S4G0ek3O4JxGQAAAI4"]
[Tue Mar 31 18:09:13.632656 2026] [:error] [pid 6548:tid 6556] [client 158.158.107.18:64120] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acudSbgIz9HgMl9YwE7tjAAAAUY"]
[Tue Mar 31 18:09:14.142913 2026] [:error] [pid 36892:tid 36967] [client 158.158.107.18:64694] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acudSkyj9S4G0ek3O4JxGgAAAJA"]
[Tue Mar 31 18:09:14.628146 2026] [:error] [pid 36982:tid 37009] [client 158.158.107.18:64085] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acudSvlMmeoQKN0r_GNgwQAAANg"]
[Tue Mar 31 18:09:15.112655 2026] [:error] [pid 36892:tid 36963] [client 158.158.107.18:64091] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acudS0yj9S4G0ek3O4JxHAAAAIw"]
[Tue Mar 31 18:09:15.606625 2026] [:error] [pid 6548:tid 6552] [client 158.158.107.18:65373] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acudS7gIz9HgMl9YwE7tlwAAAUI"]
[Tue Mar 31 18:09:16.086443 2026] [:error] [pid 6548:tid 6567] [client 158.158.107.18:64020] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acudTLgIz9HgMl9YwE7tmgAAAVE"]
[Tue Mar 31 18:09:16.605309 2026] [:error] [pid 36890:tid 36901] [client 158.158.107.18:64734] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acudTJ8FASPd_uH8z7cR4wAAAAY"]
[Tue Mar 31 18:09:17.085301 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:65308] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acudTbgIz9HgMl9YwE7toAAAAUA"]
[Tue Mar 31 18:09:17.564759 2026] [:error] [pid 41421:tid 41442] [client 158.158.107.18:64003] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acudTRSaDjY9kKFtUQBq4gAAARI"]
[Tue Mar 31 18:09:18.052562 2026] [:error] [pid 41421:tid 41435] [client 158.158.107.18:64030] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudThSaDjY9kKFtUQBq5gAAAQs"]
[Tue Mar 31 18:09:18.531479 2026] [:error] [pid 41421:tid 41428] [client 158.158.107.18:64702] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudThSaDjY9kKFtUQBq5wAAAQQ"]
[Tue Mar 31 18:09:19.032884 2026] [:error] [pid 36890:tid 36909] [client 158.158.107.18:65363] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudT58FASPd_uH8z7cR6gAAAA4"]
[Tue Mar 31 18:09:19.527347 2026] [:error] [pid 41421:tid 41437] [client 158.158.107.18:64093] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acudTxSaDjY9kKFtUQBq6QAAAQ0"]
[Tue Mar 31 18:09:20.019070 2026] [:error] [pid 36982:tid 36991] [client 158.158.107.18:64751] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudUPlMmeoQKN0r_GNgwgAAAMY"]
[Tue Mar 31 18:09:20.523426 2026] [:error] [pid 6548:tid 6563] [client 158.158.107.18:64117] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudULgIz9HgMl9YwE7tqQAAAU0"]
[Tue Mar 31 18:09:21.006935 2026] [:error] [pid 41421:tid 41443] [client 158.158.107.18:64088] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudURSaDjY9kKFtUQBq7QAAARM"]
[Tue Mar 31 18:09:21.541987 2026] [:error] [pid 36982:tid 36988] [client 158.158.107.18:64650] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acudUflMmeoQKN0r_GNgxQAAAMM"]
[Tue Mar 31 18:09:22.080534 2026] [proxy_fcgi:error] [pid 36890:tid 36916] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:22.364687 2026] [proxy_fcgi:error] [pid 36890:tid 36901] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:22.607582 2026] [proxy_fcgi:error] [pid 36890:tid 36897] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:22.850928 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:23.096635 2026] [proxy_fcgi:error] [pid 36890:tid 36913] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:23.342097 2026] [proxy_fcgi:error] [pid 36890:tid 36908] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:23.585013 2026] [proxy_fcgi:error] [pid 36890:tid 36902] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:09:23.868536 2026] [proxy_fcgi:error] [pid 36890:tid 36909] [client 158.158.107.18:64670] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:30.998949 2026] [proxy_fcgi:error] [pid 6548:tid 6559] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:31.259306 2026] [proxy_fcgi:error] [pid 6548:tid 6566] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:31.513411 2026] [proxy_fcgi:error] [pid 6548:tid 6561] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:31.772161 2026] [proxy_fcgi:error] [pid 6548:tid 6551] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:32.029025 2026] [proxy_fcgi:error] [pid 6548:tid 6562] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:32.284275 2026] [proxy_fcgi:error] [pid 6548:tid 6550] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:32.540920 2026] [proxy_fcgi:error] [pid 6548:tid 6568] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:32.794452 2026] [proxy_fcgi:error] [pid 6548:tid 6572] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:33.048737 2026] [proxy_fcgi:error] [pid 6548:tid 6553] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:33.309732 2026] [proxy_fcgi:error] [pid 6548:tid 6567] [client 20.238.71.89:25375] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:24:33.566935 2026] [:error] [pid 6548:tid 6551] [client 20.238.71.89:25375] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acug4bgIz9HgMl9YwE77AgAAAUE"]
[Tue Mar 31 18:24:35.979545 2026] [:error] [pid 36891:tid 36925] [client 20.238.71.89:20579] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acug45JhiMaJUqoqfl68WwAAAEE"]
[Tue Mar 31 18:24:39.350064 2026] [:error] [pid 36982:tid 36998] [client 20.238.71.89:15073] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acug5_lMmeoQKN0r_GNomwAAAM0"]
[Tue Mar 31 18:24:44.759159 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:25348] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "acug7LgIz9HgMl9YwE77NgAAAU0"]
[Tue Mar 31 18:24:49.405537 2026] [:error] [pid 36982:tid 36989] [client 20.238.71.89:36421] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acug8flMmeoQKN0r_GNoqAAAAMQ"]
[Tue Mar 31 18:24:51.641168 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:39050] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acug8xSaDjY9kKFtUQBxNAAAAQM"]
[Tue Mar 31 18:24:52.388252 2026] [:error] [pid 6548:tid 6574] [client 20.238.71.89:17326] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acug9LgIz9HgMl9YwE77SAAAAVg"]
[Tue Mar 31 18:24:54.010379 2026] [:error] [pid 6548:tid 6559] [client 20.238.71.89:24684] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "acug9rgIz9HgMl9YwE77UwAAAUk"]
[Tue Mar 31 18:24:55.735785 2026] [:error] [pid 36982:tid 36990] [client 20.238.71.89:36750] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acug9_lMmeoQKN0r_GNotQAAAMU"]
[Tue Mar 31 18:24:59.321900 2026] [:error] [pid 6548:tid 6566] [client 20.238.71.89:36461] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acug-7gIz9HgMl9YwE77YwAAAVA"]
[Tue Mar 31 18:25:02.030786 2026] [:error] [pid 36982:tid 36988] [client 20.238.71.89:24685] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acug_vlMmeoQKN0r_GNoxQAAAMM"]
[Tue Mar 31 18:25:03.805277 2026] [:error] [pid 36891:tid 36938] [client 20.238.71.89:17978] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "acug_5JhiMaJUqoqfl68ugAAAE4"]
[Tue Mar 31 18:25:05.123709 2026] [:error] [pid 41421:tid 41435] [client 20.238.71.89:17395] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuhARSaDjY9kKFtUQBxSQAAAQs"]
[Tue Mar 31 18:25:06.632856 2026] [:error] [pid 41421:tid 41427] [client 20.238.71.89:1031] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuhAhSaDjY9kKFtUQBxTwAAAQM"]
[Tue Mar 31 18:25:09.036942 2026] [:error] [pid 36891:tid 36933] [client 20.238.71.89:15087] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuhBZJhiMaJUqoqfl680wAAAEk"]
[Tue Mar 31 18:25:10.520297 2026] [:error] [pid 36891:tid 36925] [client 20.238.71.89:19688] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "acuhBpJhiMaJUqoqfl681gAAAEE"]
[Tue Mar 31 18:25:16.415040 2026] [:error] [pid 36982:tid 36990] [client 20.238.71.89:21605] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuhDPlMmeoQKN0r_GNo3AAAAMU"]
[Tue Mar 31 18:25:21.516560 2026] [:error] [pid 41421:tid 41438] [client 20.238.71.89:19695] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuhERSaDjY9kKFtUQBxWwAAAQ4"]
[Tue Mar 31 18:25:22.972596 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:35620] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "acuhErgIz9HgMl9YwE77kgAAAU8"]
[Tue Mar 31 18:25:29.235925 2026] [:error] [pid 36982:tid 36992] [client 20.238.71.89:38589] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuhGflMmeoQKN0r_GNo6gAAAMc"]
[Tue Mar 31 18:25:32.898345 2026] [:error] [pid 36891:tid 36940] [client 20.238.71.89:34424] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "acuhHJJhiMaJUqoqfl687QAAAFA"]
[Tue Mar 31 18:25:34.534056 2026] [proxy_fcgi:error] [pid 36982:tid 36989] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:34.792268 2026] [proxy_fcgi:error] [pid 36982:tid 36991] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:35.053434 2026] [proxy_fcgi:error] [pid 36982:tid 37000] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:35.578795 2026] [proxy_fcgi:error] [pid 36982:tid 36988] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:35.846349 2026] [proxy_fcgi:error] [pid 36982:tid 37003] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:36.111735 2026] [proxy_fcgi:error] [pid 36982:tid 37006] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:36.366615 2026] [proxy_fcgi:error] [pid 36982:tid 36985] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:36.620167 2026] [proxy_fcgi:error] [pid 36982:tid 37000] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:36.882878 2026] [proxy_fcgi:error] [pid 36982:tid 37002] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:37.137041 2026] [proxy_fcgi:error] [pid 36982:tid 37004] [client 20.238.71.89:20480] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:25:37.387575 2026] [:error] [pid 36982:tid 36987] [client 20.238.71.89:20480] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuhIflMmeoQKN0r_GNpDAAAAMI"]
[Tue Mar 31 18:25:39.839908 2026] [:error] [pid 36891:tid 36927] [client 20.238.71.89:39615] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuhI5JhiMaJUqoqfl688QAAAEM"]
[Tue Mar 31 18:25:43.757531 2026] [:error] [pid 41421:tid 41447] [client 20.238.71.89:27549] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuhJxSaDjY9kKFtUQBxeQAAARc"]
[Tue Mar 31 18:25:50.005125 2026] [:error] [pid 36982:tid 36993] [client 20.238.71.89:33964] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "acuhLvlMmeoQKN0r_GNpHQAAAMg"]
[Tue Mar 31 18:25:52.774747 2026] [:error] [pid 36982:tid 37001] [client 20.238.71.89:44294] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuhMPlMmeoQKN0r_GNpIgAAANA"]
[Tue Mar 31 18:25:55.774642 2026] [:error] [pid 36890:tid 36917] [client 20.238.71.89:33965] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuhM58FASPd_uH8z7cXrgAAABY"]
[Tue Mar 31 18:25:56.520137 2026] [:error] [pid 36890:tid 36907] [client 20.238.71.89:33929] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuhNJ8FASPd_uH8z7cXswAAAAw"]
[Tue Mar 31 18:25:58.554107 2026] [:error] [pid 6548:tid 6551] [client 20.238.71.89:1489] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "acuhNrgIz9HgMl9YwE779QAAAUE"]
[Tue Mar 31 18:26:01.029004 2026] [:error] [pid 36891:tid 36924] [client 20.238.71.89:35247] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuhOZJhiMaJUqoqfl68_gAAAEA"]
[Tue Mar 31 18:26:05.916850 2026] [:error] [pid 36982:tid 36994] [client 20.238.71.89:1904] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuhPflMmeoQKN0r_GNpLAAAAMk"]
[Tue Mar 31 18:26:07.871274 2026] [:error] [pid 36982:tid 37003] [client 20.238.71.89:1199] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuhP_lMmeoQKN0r_GNpLQAAANI"]
[Tue Mar 31 18:26:09.941217 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:46176] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuhQbgIz9HgMl9YwE78HAAAAUg"]
[Tue Mar 31 18:26:11.943908 2026] [:error] [pid 6548:tid 6553] [client 20.238.71.89:16514] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuhQ7gIz9HgMl9YwE78JQAAAUM"]
[Tue Mar 31 18:26:15.456477 2026] [:error] [pid 36890:tid 36896] [client 20.238.71.89:1158] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuhR58FASPd_uH8z7cXygAAAAE"]
[Tue Mar 31 18:26:16.598396 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:20050] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuhSLgIz9HgMl9YwE78PAAAAUY"]
[Tue Mar 31 18:26:17.894611 2026] [:error] [pid 36982:tid 37005] [client 20.238.71.89:35991] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "acuhSflMmeoQKN0r_GNpQQAAANQ"]
[Tue Mar 31 18:26:19.971120 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:22607] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acuhS7gIz9HgMl9YwE78RgAAAUo"]
[Tue Mar 31 18:26:21.410437 2026] [:error] [pid 41421:tid 41436] [client 20.238.71.89:36017] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acuhTRSaDjY9kKFtUQBxtQAAAQw"]
[Tue Mar 31 18:26:32.880855 2026] [:error] [pid 36982:tid 36999] [client 20.238.71.89:16713] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "acuhWPlMmeoQKN0r_GNpdwAAAM4"]
[Tue Mar 31 18:26:36.701516 2026] [:error] [pid 36982:tid 36985] [client 20.238.71.89:17803] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "acuhXPlMmeoQKN0r_GNpgwAAAMA"]
[Tue Mar 31 18:26:38.388883 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:38.652542 2026] [proxy_fcgi:error] [pid 36890:tid 36896] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:38.907633 2026] [proxy_fcgi:error] [pid 36890:tid 36914] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:39.168444 2026] [proxy_fcgi:error] [pid 36890:tid 36906] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:39.431486 2026] [proxy_fcgi:error] [pid 36890:tid 36895] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:39.686887 2026] [proxy_fcgi:error] [pid 36890:tid 36916] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:39.941686 2026] [proxy_fcgi:error] [pid 36890:tid 36911] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:40.199297 2026] [proxy_fcgi:error] [pid 36890:tid 36908] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:40.453618 2026] [proxy_fcgi:error] [pid 36890:tid 36898] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:40.709073 2026] [proxy_fcgi:error] [pid 36890:tid 36900] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:40.966597 2026] [proxy_fcgi:error] [pid 36890:tid 36909] [client 20.238.71.89:15126] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:26:41.233909 2026] [:error] [pid 36890:tid 36919] [client 20.238.71.89:15126] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "acuhYZ8FASPd_uH8z7cX-gAAABg"]
[Tue Mar 31 18:27:08.289219 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:18012] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acuhfLgIz9HgMl9YwE784wAAAU0"]
[Tue Mar 31 18:27:10.860544 2026] [:error] [pid 36982:tid 36991] [client 20.238.71.89:35206] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acuhfvlMmeoQKN0r_GNptAAAAMY"]
[Tue Mar 31 18:27:13.437595 2026] [:error] [pid 36982:tid 37009] [client 20.238.71.89:18021] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acuhgflMmeoQKN0r_GNpxwAAANg"]
[Tue Mar 31 18:27:16.373359 2026] [:error] [pid 36890:tid 36905] [client 20.238.71.89:18713] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "acuhhJ8FASPd_uH8z7cYEgAAAAo"]
[Tue Mar 31 18:27:20.108878 2026] [:error] [pid 6548:tid 6569] [client 20.238.71.89:15307] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "acuhiLgIz9HgMl9YwE78_gAAAVM"]
[Tue Mar 31 18:27:21.533690 2026] [:error] [pid 6548:tid 6557] [client 20.238.71.89:16738] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "acuhibgIz9HgMl9YwE79BAAAAUc"]
[Tue Mar 31 18:27:24.406196 2026] [:error] [pid 36982:tid 37009] [client 20.238.71.89:35979] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "acuhjPlMmeoQKN0r_GNp8gAAANg"]
[Tue Mar 31 18:27:25.854657 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:23151] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "acuhjbgIz9HgMl9YwE79DgAAAVc"]
[Tue Mar 31 18:27:31.152245 2026] [:error] [pid 6548:tid 6551] [client 20.238.71.89:16067] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuhk7gIz9HgMl9YwE79IAAAAUE"]
[Tue Mar 31 18:27:32.880284 2026] [:error] [pid 36890:tid 36917] [client 20.238.71.89:1267] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuhlJ8FASPd_uH8z7cYYAAAABY"]
[Tue Mar 31 18:27:37.331048 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:24148] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "acuhmbgIz9HgMl9YwE79QQAAAUg"]
[Tue Mar 31 18:27:42.582806 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:42.849914 2026] [proxy_fcgi:error] [pid 36892:tid 36962] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:43.117878 2026] [proxy_fcgi:error] [pid 36892:tid 36960] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:43.379485 2026] [proxy_fcgi:error] [pid 36892:tid 36951] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:43.642250 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:43.903843 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:44.160442 2026] [proxy_fcgi:error] [pid 36892:tid 36959] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:44.415334 2026] [proxy_fcgi:error] [pid 36892:tid 36965] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:44.676426 2026] [proxy_fcgi:error] [pid 36892:tid 36960] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:44.941797 2026] [proxy_fcgi:error] [pid 36892:tid 36973] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:45.206251 2026] [proxy_fcgi:error] [pid 36892:tid 36955] [client 20.238.71.89:17706] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:27:45.457188 2026] [:error] [pid 36892:tid 36974] [client 20.238.71.89:17706] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuhoUyj9S4G0ek3O4J2fwAAAJc"]
[Tue Mar 31 18:27:46.922194 2026] [:error] [pid 36890:tid 36908] [client 20.238.71.89:29241] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuhop8FASPd_uH8z7cYfgAAAA0"]
[Tue Mar 31 18:27:53.491190 2026] [:error] [pid 36892:tid 36968] [client 20.238.71.89:17462] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuhqUyj9S4G0ek3O4J2gwAAAJE"]
[Tue Mar 31 18:27:55.513744 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:20441] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "acuhq7gIz9HgMl9YwE79egAAAUY"]
[Tue Mar 31 18:27:57.600991 2026] [:error] [pid 36892:tid 36951] [client 20.238.71.89:43717] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuhrUyj9S4G0ek3O4J2hwAAAIA"]
[Tue Mar 31 18:27:59.917501 2026] [:error] [pid 36982:tid 36993] [client 20.238.71.89:17680] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuhr_lMmeoQKN0r_GNqIQAAAMg"]
[Tue Mar 31 18:28:00.959186 2026] [:error] [pid 36982:tid 36992] [client 20.238.71.89:37933] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuhsPlMmeoQKN0r_GNqJQAAAMc"]
[Tue Mar 31 18:28:01.787399 2026] [:error] [pid 36982:tid 37003] [client 20.238.71.89:17714] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "acuhsflMmeoQKN0r_GNqKQAAANI"]
[Tue Mar 31 18:28:04.276328 2026] [:error] [pid 36891:tid 36926] [client 20.238.71.89:21262] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acuhtJJhiMaJUqoqfl69bwAAAEI"]
[Tue Mar 31 18:28:07.437399 2026] [:error] [pid 41421:tid 41436] [client 20.238.71.89:28466] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acuhtxSaDjY9kKFtUQBybgAAAQw"]
[Tue Mar 31 18:28:09.428249 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:15821] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acuhubgIz9HgMl9YwE79lgAAAVc"]
[Tue Mar 31 18:28:13.411090 2026] [:error] [pid 6548:tid 6567] [client 20.238.71.89:26201] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "acuhvbgIz9HgMl9YwE79pAAAAVE"]
[Tue Mar 31 18:28:14.559317 2026] [:error] [pid 36890:tid 36895] [client 20.238.71.89:18268] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acuhvp8FASPd_uH8z7cYkAAAAAA"]
[Tue Mar 31 18:28:17.394007 2026] [:error] [pid 6548:tid 6560] [client 20.238.71.89:26198] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acuhwbgIz9HgMl9YwE79rQAAAUo"]
[Tue Mar 31 18:28:20.601938 2026] [:error] [pid 36890:tid 36900] [client 20.238.71.89:16290] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acuhxJ8FASPd_uH8z7cYlAAAAAU"]
[Tue Mar 31 18:28:23.919100 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:18454] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "acuhx7gIz9HgMl9YwE79wwAAAU0"]
[Tue Mar 31 18:28:25.605077 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:21792] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acuhybgIz9HgMl9YwE79ygAAAUI"]
[Tue Mar 31 18:28:27.006512 2026] [:error] [pid 36890:tid 36911] [client 20.238.71.89:20780] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acuhy58FASPd_uH8z7cYmgAAABA"]
[Tue Mar 31 18:28:28.269124 2026] [:error] [pid 36891:tid 36932] [client 20.238.71.89:20850] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acuhzJJhiMaJUqoqfl69fgAAAEg"]
[Tue Mar 31 18:28:30.043462 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:18462] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "acuhzrgIz9HgMl9YwE790gAAAUY"]
[Tue Mar 31 18:28:31.586919 2026] [:error] [pid 36982:tid 36998] [client 20.238.71.89:21281] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuhz_lMmeoQKN0r_GNqdQAAAM0"]
[Tue Mar 31 18:28:32.383808 2026] [:error] [pid 6548:tid 6563] [client 20.238.71.89:23557] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuh0LgIz9HgMl9YwE795AAAAU0"]
[Tue Mar 31 18:28:34.172361 2026] [:error] [pid 6548:tid 6571] [client 20.238.71.89:21291] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuh0rgIz9HgMl9YwE798AAAAVU"]
[Tue Mar 31 18:28:35.590913 2026] [:error] [pid 6548:tid 6554] [client 20.238.71.89:18470] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "acuh07gIz9HgMl9YwE79-AAAAUQ"]
[Tue Mar 31 18:28:40.436048 2026] [:error] [pid 36890:tid 36917] [client 20.238.71.89:32726] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acuh2J8FASPd_uH8z7cYqQAAABY"]
[Tue Mar 31 18:28:43.792218 2026] [:error] [pid 36982:tid 36994] [client 20.238.71.89:26851] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "acuh2_lMmeoQKN0r_GNqhgAAAMk"]
[Tue Mar 31 18:28:46.432801 2026] [proxy_fcgi:error] [pid 41421:tid 41447] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:46.684083 2026] [proxy_fcgi:error] [pid 41421:tid 41445] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:46.949876 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:47.203100 2026] [proxy_fcgi:error] [pid 41421:tid 41448] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:47.461109 2026] [proxy_fcgi:error] [pid 41421:tid 41427] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:47.713965 2026] [proxy_fcgi:error] [pid 41421:tid 41433] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:48.220642 2026] [proxy_fcgi:error] [pid 41421:tid 41437] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:48.479552 2026] [proxy_fcgi:error] [pid 41421:tid 41428] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:48.731664 2026] [proxy_fcgi:error] [pid 41421:tid 41434] [client 20.238.71.89:32735] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:28:49.232604 2026] [:error] [pid 41421:tid 41435] [client 20.238.71.89:32735] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuh4RSaDjY9kKFtUQByqQAAAQs"]
[Tue Mar 31 18:28:51.744783 2026] [:error] [pid 6548:tid 6570] [client 20.238.71.89:38632] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuh47gIz9HgMl9YwE7-JQAAAVQ"]
[Tue Mar 31 18:28:53.590500 2026] [:error] [pid 6548:tid 6556] [client 20.238.71.89:16912] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuh5bgIz9HgMl9YwE7-LQAAAUY"]
[Tue Mar 31 18:28:56.113761 2026] [:error] [pid 41421:tid 41432] [client 20.238.71.89:15725] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "acuh6BSaDjY9kKFtUQByuwAAAQg"]
[Tue Mar 31 18:28:59.368439 2026] [:error] [pid 41421:tid 41448] [client 20.238.71.89:19539] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuh6xSaDjY9kKFtUQByvQAAARg"]
[Tue Mar 31 18:29:03.842433 2026] [:error] [pid 36891:tid 36927] [client 20.238.71.89:27594] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuh75JhiMaJUqoqfl69kAAAAEM"]
[Tue Mar 31 18:29:05.397785 2026] [:error] [pid 6548:tid 6555] [client 20.238.71.89:16928] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuh8bgIz9HgMl9YwE7-RAAAAUU"]
[Tue Mar 31 18:29:06.780651 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:29604] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "acuh8rgIz9HgMl9YwE7-SQAAAU8"]
[Tue Mar 31 18:29:10.475125 2026] [:error] [pid 36892:tid 36961] [client 20.238.71.89:24859] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuh9kyj9S4G0ek3O4J2tQAAAIo"]
[Tue Mar 31 18:29:13.833796 2026] [:error] [pid 36982:tid 37004] [client 20.238.71.89:31923] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuh-flMmeoQKN0r_GNqtgAAANM"]
[Tue Mar 31 18:29:15.843583 2026] [:error] [pid 36890:tid 36910] [client 20.238.71.89:1036] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuh-58FASPd_uH8z7cY1gAAAA8"]
[Tue Mar 31 18:29:18.712866 2026] [:error] [pid 36982:tid 36985] [client 20.238.71.89:36450] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v.php"] [unique_id "acuh_vlMmeoQKN0r_GNqywAAAMA"]
[Tue Mar 31 18:29:21.714657 2026] [:error] [pid 36892:tid 36953] [client 20.238.71.89:29995] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuiAUyj9S4G0ek3O4J2vAAAAII"]
[Tue Mar 31 18:29:24.911756 2026] [:error] [pid 36890:tid 36916] [client 20.238.71.89:36790] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuiBJ8FASPd_uH8z7cY3AAAABU"]
[Tue Mar 31 18:29:26.858654 2026] [:error] [pid 6548:tid 6572] [client 20.238.71.89:21848] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuiBrgIz9HgMl9YwE7-kQAAAVY"]
[Tue Mar 31 18:29:30.227762 2026] [:error] [pid 36890:tid 36903] [client 20.238.71.89:32292] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d2.php"] [unique_id "acuiCp8FASPd_uH8z7cY5QAAAAg"]
[Tue Mar 31 18:29:31.183015 2026] [:error] [pid 36890:tid 36914] [client 20.238.71.89:1283] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuiC58FASPd_uH8z7cY6AAAABM"]
[Tue Mar 31 18:29:32.154690 2026] [:error] [pid 6548:tid 6550] [client 20.238.71.89:19417] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuiDLgIz9HgMl9YwE7-ngAAAUA"]
[Tue Mar 31 18:29:32.931877 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:35626] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuiDLgIz9HgMl9YwE7-owAAAVc"]
[Tue Mar 31 18:29:33.640745 2026] [:error] [pid 36892:tid 36972] [client 20.238.71.89:1291] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xc.php"] [unique_id "acuiDUyj9S4G0ek3O4J20wAAAJU"]
[Tue Mar 31 18:29:34.449041 2026] [:error] [pid 36890:tid 36918] [client 20.238.71.89:1593] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuiDp8FASPd_uH8z7cY_QAAABc"]
[Tue Mar 31 18:29:35.673473 2026] [:error] [pid 6548:tid 6552] [client 20.238.71.89:17403] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuiD7gIz9HgMl9YwE7-qQAAAUI"]
[Tue Mar 31 18:29:36.858278 2026] [:error] [pid 6548:tid 6573] [client 20.238.71.89:39150] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuiELgIz9HgMl9YwE7-rAAAAVc"]
[Tue Mar 31 18:29:37.640205 2026] [:error] [pid 6548:tid 6565] [client 20.238.71.89:43443] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "acuiEbgIz9HgMl9YwE7-sAAAAU8"]
[Tue Mar 31 18:29:40.057859 2026] [:error] [pid 6548:tid 6558] [client 20.238.71.89:15103] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuiFLgIz9HgMl9YwE7-uQAAAUg"]
[Tue Mar 31 18:29:41.227811 2026] [:error] [pid 36891:tid 36946] [client 20.238.71.89:24666] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuiFZJhiMaJUqoqfl69rwAAAFY"]
[Tue Mar 31 18:29:42.640589 2026] [:error] [pid 36891:tid 36935] [client 20.238.71.89:39140] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuiFpJhiMaJUqoqfl69tQAAAEs"]
[Tue Mar 31 18:29:44.005459 2026] [:error] [pid 36982:tid 36989] [client 20.238.71.89:32669] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "acuiGPlMmeoQKN0r_GNq-wAAAMQ"]
[Tue Mar 31 18:29:46.555405 2026] [:error] [pid 36890:tid 36918] [client 20.238.71.89:22128] [client 20.238.71.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "acuiGp8FASPd_uH8z7cZMAAAABc"]
[Tue Mar 31 18:29:49.183088 2026] [proxy_fcgi:error] [pid 36890:tid 36911] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:49.446460 2026] [proxy_fcgi:error] [pid 36890:tid 36919] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:49.698793 2026] [proxy_fcgi:error] [pid 36890:tid 36918] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:49.959373 2026] [proxy_fcgi:error] [pid 36890:tid 36895] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:50.217315 2026] [proxy_fcgi:error] [pid 36890:tid 36905] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:50.470906 2026] [proxy_fcgi:error] [pid 36890:tid 36904] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 18:29:50.733325 2026] [proxy_fcgi:error] [pid 36890:tid 36900] [client 20.238.71.89:44825] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 03:08:43.441533 2026] [proxy_fcgi:error] [pid 19113:tid 19139] [client 20.19.190.161:14522] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:18:25.771713 2026] [proxy_fcgi:error] [pid 23715:tid 23764] [client 74.248.134.58:13571] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:18:26.031405 2026] [proxy_fcgi:error] [pid 23715:tid 23785] [client 74.248.134.58:13571] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:51:14.240659 2026] [proxy_fcgi:error] [pid 8909:tid 8947] [client 158.158.32.26:58319] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:51:14.480327 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:58319] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "ac0UwjvP_a0662gDl6C9sQAAAMM"]
[Wed Apr 01 20:51:14.962491 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:34718] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "ac0UwjvP_a0662gDl6C9swAAANI"]
[Wed Apr 01 20:51:15.444833 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:34708] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "ac0UwzvP_a0662gDl6C9uAAAAMU"]
[Wed Apr 01 20:51:15.928866 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:34733] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "ac0Uw-onaBjs3qxcRefGMwAAAAA"]
[Wed Apr 01 20:51:16.408403 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:58326] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "ac0UxD7Idlm5j9frhqQqugAAAFM"]
[Wed Apr 01 20:51:16.891768 2026] [:error] [pid 8910:tid 8968] [client 158.158.32.26:58352] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "ac0UxKJZINUcF3tYgExeqwAAAQA"]
[Wed Apr 01 20:51:17.373910 2026] [:error] [pid 17856:tid 17875] [client 158.158.32.26:58365] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "ac0UxT7Idlm5j9frhqQqvgAAAFE"]
[Wed Apr 01 20:51:17.857640 2026] [:error] [pid 8995:tid 9013] [client 158.158.32.26:58311] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "ac0UxeonaBjs3qxcRefGOAAAAA8"]
[Wed Apr 01 20:51:18.345454 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:58323] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ac0Uxi7NKI8IaNKZFIeamQAAAUo"]
[Wed Apr 01 20:51:18.830853 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:34749] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ac0Uxi7NKI8IaNKZFIeamwAAAVY"]
[Wed Apr 01 20:51:19.312377 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:58314] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ac0Uxz7Idlm5j9frhqQqxAAAAFM"]
[Wed Apr 01 20:51:19.798941 2026] [:error] [pid 17856:tid 17859] [client 158.158.32.26:34734] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ac0Uxz7Idlm5j9frhqQqyAAAAEE"]
[Wed Apr 01 20:51:20.294045 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:34385] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ac0UyDvP_a0662gDl6C9xwAAAMA"]
[Wed Apr 01 20:51:20.809130 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:58348] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ac0UyC7NKI8IaNKZFIeapwAAAVY"]
[Wed Apr 01 20:51:21.291662 2026] [:error] [pid 8910:tid 8974] [client 158.158.32.26:34695] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ac0UyaJZINUcF3tYgExesAAAAQY"]
[Wed Apr 01 20:51:21.797279 2026] [:error] [pid 8995:tid 9016] [client 158.158.32.26:58354] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws79.php"] [unique_id "ac0UyeonaBjs3qxcRefGQgAAABI"]
[Wed Apr 01 20:51:22.286209 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:34715] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "ac0Uyj7Idlm5j9frhqQqzgAAAFI"]
[Wed Apr 01 20:51:22.767308 2026] [:error] [pid 17856:tid 17873] [client 158.158.32.26:34701] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "ac0Uyj7Idlm5j9frhqQq0gAAAE8"]
[Wed Apr 01 20:51:23.251796 2026] [:error] [pid 17856:tid 17861] [client 158.158.32.26:58335] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "ac0Uyz7Idlm5j9frhqQq2QAAAEM"]
[Wed Apr 01 20:51:23.730345 2026] [:error] [pid 17856:tid 17864] [client 158.158.32.26:58310] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aee.php"] [unique_id "ac0Uyz7Idlm5j9frhqQq3wAAAEY"]
[Wed Apr 01 20:51:24.208689 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:34702] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/max.php"] [unique_id "ac0UzOonaBjs3qxcRefGRgAAAAs"]
[Wed Apr 01 20:51:24.692612 2026] [:error] [pid 8910:tid 8981] [client 158.158.32.26:34375] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/max.php"] [unique_id "ac0UzKJZINUcF3tYgExetwAAAQ0"]
[Wed Apr 01 20:51:25.193080 2026] [:error] [pid 17856:tid 17859] [client 158.158.32.26:58351] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/max.php"] [unique_id "ac0UzT7Idlm5j9frhqQq4gAAAEE"]
[Wed Apr 01 20:51:25.683347 2026] [:error] [pid 17856:tid 17879] [client 158.158.32.26:34689] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/max.php"] [unique_id "ac0UzT7Idlm5j9frhqQq5QAAAFU"]
[Wed Apr 01 20:51:26.253324 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:34741] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "ac0UzuonaBjs3qxcRefGSwAAAAA"]
[Wed Apr 01 20:51:26.741792 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:34707] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "ac0UzvkmxtJXGnLdvgCDsAAAAIY"]
[Wed Apr 01 20:51:27.245871 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:34738] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "ac0UzzvP_a0662gDl6C90QAAAMs"]
[Wed Apr 01 20:51:27.738389 2026] [:error] [pid 17856:tid 17863] [client 158.158.32.26:34698] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "ac0Uzz7Idlm5j9frhqQq7QAAAEU"]
[Wed Apr 01 20:51:28.249333 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:58344] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ac0U0DvP_a0662gDl6C90wAAAMI"]
[Wed Apr 01 20:51:28.742019 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:34431] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ac0U0DvP_a0662gDl6C93wAAAMU"]
[Wed Apr 01 20:51:29.241577 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:34712] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ac0U0TvP_a0662gDl6C96wAAANQ"]
[Wed Apr 01 20:51:29.732764 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:58336] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ac0U0S7NKI8IaNKZFIeaywAAAU8"]
[Wed Apr 01 20:51:30.241023 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:34405] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0U0i7NKI8IaNKZFIea0AAAAUU"]
[Wed Apr 01 20:51:30.734375 2026] [:error] [pid 8909:tid 8947] [client 158.158.32.26:58341] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0U0jvP_a0662gDl6C98QAAAMY"]
[Wed Apr 01 20:51:31.238026 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:34726] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0U0zvP_a0662gDl6C99wAAAMI"]
[Wed Apr 01 20:51:31.722175 2026] [:error] [pid 8909:tid 8955] [client 158.158.32.26:58355] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0U0zvP_a0662gDl6C9-wAAAM4"]
[Wed Apr 01 20:51:32.206454 2026] [:error] [pid 62559:tid 62577] [client 158.158.32.26:34396] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ac0U1C7NKI8IaNKZFIea1gAAAVA"]
[Wed Apr 01 20:51:32.713203 2026] [:error] [pid 8909:tid 8955] [client 158.158.32.26:34690] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ac0U1DvP_a0662gDl6C-CAAAAM4"]
[Wed Apr 01 20:51:33.193232 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:29794] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ac0U1T7Idlm5j9frhqQrHQAAAEQ"]
[Wed Apr 01 20:51:33.690618 2026] [:error] [pid 17856:tid 17864] [client 158.158.32.26:34727] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-true.php"] [unique_id "ac0U1T7Idlm5j9frhqQrHwAAAEY"]
[Wed Apr 01 20:51:34.191138 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:34706] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ac0U1j7Idlm5j9frhqQrIQAAAFI"]
[Wed Apr 01 20:51:34.671519 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:58321] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ac0U1j7Idlm5j9frhqQrJQAAAEI"]
[Wed Apr 01 20:51:35.175740 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:34381] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ac0U1z7Idlm5j9frhqQrKAAAAFA"]
[Wed Apr 01 20:51:35.660911 2026] [:error] [pid 17856:tid 17865] [client 158.158.32.26:58359] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws42.php"] [unique_id "ac0U1z7Idlm5j9frhqQrKwAAAEc"]
[Wed Apr 01 20:51:36.154144 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:34709] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ac0U2DvP_a0662gDl6C-GgAAANg"]
[Wed Apr 01 20:51:36.638740 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:58358] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ac0U2D7Idlm5j9frhqQrMQAAAFI"]
[Wed Apr 01 20:51:37.129484 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:58322] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ac0U2T7Idlm5j9frhqQrNgAAAEI"]
[Wed Apr 01 20:51:37.628012 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:34699] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ac0U2T7Idlm5j9frhqQrNwAAAFc"]
[Wed Apr 01 20:51:38.119078 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:34692] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac0U2j7Idlm5j9frhqQrOgAAAFA"]
[Wed Apr 01 20:51:38.598093 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:34725] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac0U2j7Idlm5j9frhqQrPQAAAEw"]
[Wed Apr 01 20:51:39.079414 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:34404] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac0U2z7Idlm5j9frhqQrQgAAAEg"]
[Wed Apr 01 20:51:39.559213 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:58350] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac0U2_kmxtJXGnLdvgCDzAAAAJI"]
[Wed Apr 01 20:51:40.042839 2026] [:error] [pid 8910:tid 8987] [client 158.158.32.26:29763] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ac0U3KJZINUcF3tYgExezQAAARM"]
[Wed Apr 01 20:51:40.527523 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:34704] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ac0U3D7Idlm5j9frhqQrSgAAAEw"]
[Wed Apr 01 20:51:41.014768 2026] [:error] [pid 17856:tid 17880] [client 158.158.32.26:34711] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ac0U3T7Idlm5j9frhqQrTwAAAFY"]
[Wed Apr 01 20:51:41.496131 2026] [:error] [pid 17856:tid 17875] [client 158.158.32.26:34747] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ac0U3T7Idlm5j9frhqQrUAAAAFE"]
[Wed Apr 01 20:51:41.996636 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:34716] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "ac0U3T7Idlm5j9frhqQrVAAAAFM"]
[Wed Apr 01 20:51:42.481440 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:29771] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "ac0U3j7Idlm5j9frhqQrVgAAAEw"]
[Wed Apr 01 20:51:42.978936 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:58309] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "ac0U3vkmxtJXGnLdvgCD0AAAAIs"]
[Wed Apr 01 20:51:43.467546 2026] [:error] [pid 17856:tid 17880] [client 158.158.32.26:58340] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/north1.php"] [unique_id "ac0U3z7Idlm5j9frhqQrWQAAAFY"]
[Wed Apr 01 20:51:43.951721 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:58367] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ac0U3y7NKI8IaNKZFIea7AAAAUo"]
[Wed Apr 01 20:51:44.433651 2026] [:error] [pid 8908:tid 8936] [client 158.158.32.26:58357] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ac0U4PkmxtJXGnLdvgCD1QAAAJc"]
[Wed Apr 01 20:51:44.925705 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:34400] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ac0U4PkmxtJXGnLdvgCD2gAAAJY"]
[Wed Apr 01 20:51:45.428860 2026] [:error] [pid 8995:tid 9003] [client 158.158.32.26:34406] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ac0U4eonaBjs3qxcRefGVAAAAAU"]
[Wed Apr 01 20:51:45.908509 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:34728] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ac0U4T7Idlm5j9frhqQrYQAAAFM"]
[Wed Apr 01 20:51:46.396206 2026] [:error] [pid 8910:tid 8982] [client 158.158.32.26:34721] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ac0U4qJZINUcF3tYgExe0gAAAQ4"]
[Wed Apr 01 20:51:46.881924 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:34748] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ac0U4j7Idlm5j9frhqQrZQAAAFQ"]
[Wed Apr 01 20:51:47.363781 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:58343] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ac0U4z7Idlm5j9frhqQraQAAAEo"]
[Wed Apr 01 20:51:47.858810 2026] [:error] [pid 8910:tid 8974] [client 158.158.32.26:58356] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0U46JZINUcF3tYgExe1wAAAQY"]
[Wed Apr 01 20:51:48.341898 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:34736] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0U5D7Idlm5j9frhqQrbgAAAFc"]
[Wed Apr 01 20:51:48.833773 2026] [:error] [pid 62559:tid 62577] [client 158.158.32.26:58362] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0U5C7NKI8IaNKZFIea9QAAAVA"]
[Wed Apr 01 20:51:49.346147 2026] [:error] [pid 62559:tid 62574] [client 158.158.32.26:34395] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0U5S7NKI8IaNKZFIea-wAAAU0"]
[Wed Apr 01 20:51:49.835136 2026] [:error] [pid 17856:tid 17880] [client 158.158.32.26:29805] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ac0U5T7Idlm5j9frhqQrdQAAAFY"]
[Wed Apr 01 20:51:50.333693 2026] [:error] [pid 17856:tid 17882] [client 158.158.32.26:58353] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ac0U5j7Idlm5j9frhqQreQAAAFg"]
[Wed Apr 01 20:51:50.817440 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:58312] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ac0U5j7Idlm5j9frhqQrfgAAAFA"]
[Wed Apr 01 20:51:51.299928 2026] [:error] [pid 8995:tid 9022] [client 158.158.32.26:58304] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ac0U5-onaBjs3qxcRefGWgAAABg"]
[Wed Apr 01 20:51:51.838070 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:58347] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0U5_kmxtJXGnLdvgCD6QAAAIo"]
[Wed Apr 01 20:51:52.328330 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:34717] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0U6OonaBjs3qxcRefGWwAAABc"]
[Wed Apr 01 20:51:52.860391 2026] [:error] [pid 8995:tid 9017] [client 158.158.32.26:58364] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0U6OonaBjs3qxcRefGXQAAABM"]
[Wed Apr 01 20:51:53.410563 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:58349] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0U6S7NKI8IaNKZFIebBQAAAUE"]
[Wed Apr 01 20:51:54.037384 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:34397] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ac0U6vkmxtJXGnLdvgCD9gAAAI0"]
[Wed Apr 01 20:51:54.522958 2026] [:error] [pid 8908:tid 8929] [client 158.158.32.26:34731] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ac0U6vkmxtJXGnLdvgCD-gAAAJA"]
[Wed Apr 01 20:51:55.019487 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:34743] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ac0U6_kmxtJXGnLdvgCD_AAAAIo"]
[Wed Apr 01 20:51:55.535971 2026] [:error] [pid 8995:tid 9004] [client 158.158.32.26:34713] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ac0U6-onaBjs3qxcRefGZAAAAAY"]
[Wed Apr 01 20:51:56.074529 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:28958] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ac0U7PkmxtJXGnLdvgCEAQAAAJI"]
[Wed Apr 01 20:51:56.574949 2026] [:error] [pid 62559:tid 62581] [client 158.158.32.26:34376] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ac0U7C7NKI8IaNKZFIebCwAAAVQ"]
[Wed Apr 01 20:51:57.080817 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:34730] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ac0U7T7Idlm5j9frhqQrmgAAAEg"]
[Wed Apr 01 20:51:57.568500 2026] [:error] [pid 8910:tid 8992] [client 158.158.32.26:58339] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ac0U7aJZINUcF3tYgExe5AAAARg"]
[Wed Apr 01 20:51:58.164298 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:34415] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac0U7vkmxtJXGnLdvgCEBgAAAJg"]
[Wed Apr 01 20:51:58.662763 2026] [:error] [pid 8910:tid 8987] [client 158.158.32.26:34411] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac0U7qJZINUcF3tYgExe6gAAARM"]
[Wed Apr 01 20:51:59.197053 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:58329] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac0U7zvP_a0662gDl6C-RgAAAMU"]
[Wed Apr 01 20:51:59.738958 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:34703] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac0U7y7NKI8IaNKZFIebEQAAAVY"]
[Wed Apr 01 20:52:00.229008 2026] [:error] [pid 8995:tid 9013] [client 158.158.32.26:34419] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0U8OonaBjs3qxcRefGawAAAA8"]
[Wed Apr 01 20:52:00.720592 2026] [:error] [pid 8909:tid 8949] [client 158.158.32.26:58345] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0U8DvP_a0662gDl6C-TQAAAMg"]
[Wed Apr 01 20:52:01.230506 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:34369] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0U8TvP_a0662gDl6C-TwAAAME"]
[Wed Apr 01 20:52:01.831004 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:29766] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0U8S7NKI8IaNKZFIebFgAAAU4"]
[Wed Apr 01 20:52:02.333147 2026] [:error] [pid 62559:tid 62581] [client 158.158.32.26:34394] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ac0U8i7NKI8IaNKZFIebGAAAAVQ"]
[Wed Apr 01 20:52:02.833539 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:34373] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ac0U8vkmxtJXGnLdvgCEFAAAAIM"]
[Wed Apr 01 20:52:03.319944 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:29815] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ac0U8_kmxtJXGnLdvgCEFwAAAIQ"]
[Wed Apr 01 20:52:03.859600 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:34422] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ad.php"] [unique_id "ac0U8_kmxtJXGnLdvgCEGwAAAIA"]
[Wed Apr 01 20:52:04.349811 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:34723] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "ac0U9DvP_a0662gDl6C-VQAAANY"]
[Wed Apr 01 20:52:04.900320 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:34714] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "ac0U9DvP_a0662gDl6C-WAAAAMs"]
[Wed Apr 01 20:52:05.387577 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:58360] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "ac0U9TvP_a0662gDl6C-XQAAANI"]
[Wed Apr 01 20:52:05.874620 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:34371] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z60.php"] [unique_id "ac0U9TvP_a0662gDl6C-YwAAANQ"]
[Wed Apr 01 20:52:06.360129 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:34425] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ac0U9vkmxtJXGnLdvgCEJgAAAIo"]
[Wed Apr 01 20:52:06.853984 2026] [:error] [pid 8908:tid 8933] [client 158.158.32.26:58363] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ac0U9vkmxtJXGnLdvgCEKgAAAJQ"]
[Wed Apr 01 20:52:07.361556 2026] [:error] [pid 8909:tid 8955] [client 158.158.32.26:34370] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ac0U9zvP_a0662gDl6C-agAAAM4"]
[Wed Apr 01 20:52:07.845559 2026] [:error] [pid 8908:tid 8921] [client 158.158.32.26:34729] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ac0U9_kmxtJXGnLdvgCELAAAAIg"]
[Wed Apr 01 20:52:08.331072 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:34724] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0U-PkmxtJXGnLdvgCELwAAAI0"]
[Wed Apr 01 20:52:08.822462 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:58342] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0U-DvP_a0662gDl6C-dAAAANc"]
[Wed Apr 01 20:52:09.320503 2026] [:error] [pid 8908:tid 8930] [client 158.158.32.26:34739] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0U-fkmxtJXGnLdvgCENAAAAJE"]
[Wed Apr 01 20:52:09.810344 2026] [:error] [pid 17856:tid 17882] [client 158.158.32.26:34693] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0U-T7Idlm5j9frhqQruQAAAFg"]
[Wed Apr 01 20:52:10.305806 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:29777] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "ac0U-vkmxtJXGnLdvgCENwAAAIQ"]
[Wed Apr 01 20:52:10.805377 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:34377] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sql.php"] [unique_id "ac0U-uonaBjs3qxcRefGeAAAABc"]
[Wed Apr 01 20:52:11.300520 2026] [proxy_fcgi:error] [pid 62559:tid 62570] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:11.562122 2026] [proxy_fcgi:error] [pid 62559:tid 62569] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:11.804487 2026] [proxy_fcgi:error] [pid 62559:tid 62561] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:12.049837 2026] [proxy_fcgi:error] [pid 62559:tid 62582] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:12.293770 2026] [proxy_fcgi:error] [pid 62559:tid 62573] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:12.537672 2026] [proxy_fcgi:error] [pid 62559:tid 62563] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:12.780799 2026] [proxy_fcgi:error] [pid 62559:tid 62584] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:13.039614 2026] [proxy_fcgi:error] [pid 62559:tid 62574] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:13.283571 2026] [proxy_fcgi:error] [pid 62559:tid 62576] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:13.533583 2026] [proxy_fcgi:error] [pid 62559:tid 62580] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:13.777187 2026] [proxy_fcgi:error] [pid 62559:tid 62575] [client 158.158.32.26:29760] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:52:14.015900 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:29760] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac0U_i7NKI8IaNKZFIebNQAAAUU"]
[Wed Apr 01 20:52:14.495781 2026] [:error] [pid 8910:tid 8969] [client 158.158.32.26:34732] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac0U_qJZINUcF3tYgExfCQAAAQE"]
[Wed Apr 01 20:52:14.975544 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:34414] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac0U_jvP_a0662gDl6C-hQAAAM8"]
[Wed Apr 01 20:52:15.474063 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:29773] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac0U_-onaBjs3qxcRefGhwAAAAA"]
[Wed Apr 01 20:52:15.954422 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:34742] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0U_zvP_a0662gDl6C-jwAAANc"]
[Wed Apr 01 20:52:16.436030 2026] [:error] [pid 8995:tid 9017] [client 158.158.32.26:29803] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0VAOonaBjs3qxcRefGiwAAABM"]
[Wed Apr 01 20:52:16.916143 2026] [:error] [pid 8995:tid 9001] [client 158.158.32.26:34409] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0VAOonaBjs3qxcRefGjwAAAAM"]
[Wed Apr 01 20:52:17.400822 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:28930] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0VAS7NKI8IaNKZFIebNwAAAVY"]
[Wed Apr 01 20:52:17.880003 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:34720] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ac0VAT7Idlm5j9frhqQrzQAAAFM"]
[Wed Apr 01 20:52:18.380674 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:34383] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ac0VAvkmxtJXGnLdvgCERwAAAI4"]
[Wed Apr 01 20:52:18.860863 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:34368] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ac0VAvkmxtJXGnLdvgCESgAAAIY"]
[Wed Apr 01 20:52:19.342468 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:29823] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ac0VA_kmxtJXGnLdvgCETgAAAIo"]
[Wed Apr 01 20:52:19.829048 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:58338] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "ac0VA_kmxtJXGnLdvgCEUgAAAIQ"]
[Wed Apr 01 20:52:20.312813 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:29770] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "ac0VBDvP_a0662gDl6C-mwAAAMo"]
[Wed Apr 01 20:52:20.849218 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:34382] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "ac0VBPkmxtJXGnLdvgCEVgAAAJY"]
[Wed Apr 01 20:52:21.326516 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:28970] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sweg.php"] [unique_id "ac0VBS7NKI8IaNKZFIebPQAAAUE"]
[Wed Apr 01 20:52:21.807576 2026] [:error] [pid 8910:tid 8979] [client 158.158.32.26:34737] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ac0VBaJZINUcF3tYgExfDgAAAQs"]
[Wed Apr 01 20:52:22.289607 2026] [:error] [pid 8908:tid 8933] [client 158.158.32.26:34401] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ac0VBvkmxtJXGnLdvgCEXAAAAJQ"]
[Wed Apr 01 20:52:22.775679 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:28937] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ac0VBvkmxtJXGnLdvgCEXwAAAJI"]
[Wed Apr 01 20:52:23.265330 2026] [:error] [pid 8995:tid 9001] [client 158.158.32.26:29775] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xpwer1.php"] [unique_id "ac0VB-onaBjs3qxcRefGmgAAAAM"]
[Wed Apr 01 20:52:23.768140 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:34374] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ac0VBzvP_a0662gDl6C-pgAAANQ"]
[Wed Apr 01 20:52:24.250061 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:34735] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ac0VCD7Idlm5j9frhqQr3wAAAFA"]
[Wed Apr 01 20:52:24.729858 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:29788] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ac0VCDvP_a0662gDl6C-rwAAANc"]
[Wed Apr 01 20:52:25.209725 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:29779] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws40.php"] [unique_id "ac0VCfkmxtJXGnLdvgCEZQAAAIM"]
[Wed Apr 01 20:52:25.690568 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:34387] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ac0VCT7Idlm5j9frhqQr5AAAAEQ"]
[Wed Apr 01 20:52:26.175337 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:34722] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ac0VCvkmxtJXGnLdvgCEaAAAAI0"]
[Wed Apr 01 20:52:26.656788 2026] [:error] [pid 17856:tid 17871] [client 158.158.32.26:58330] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ac0VCj7Idlm5j9frhqQr6gAAAE0"]
[Wed Apr 01 20:52:27.139024 2026] [:error] [pid 17856:tid 17864] [client 158.158.32.26:29822] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "ac0VCz7Idlm5j9frhqQr7AAAAEY"]
[Wed Apr 01 20:52:27.618955 2026] [:error] [pid 17856:tid 17879] [client 158.158.32.26:58306] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ac0VCz7Idlm5j9frhqQr7gAAAFU"]
[Wed Apr 01 20:52:28.098443 2026] [:error] [pid 8910:tid 8969] [client 158.158.32.26:29820] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ac0VDKJZINUcF3tYgExfFAAAAQE"]
[Wed Apr 01 20:52:28.580729 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:28928] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ac0VDPkmxtJXGnLdvgCEcAAAAIM"]
[Wed Apr 01 20:52:29.061024 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:58331] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "ac0VDTvP_a0662gDl6C-wQAAANg"]
[Wed Apr 01 20:52:29.541309 2026] [:error] [pid 17856:tid 17873] [client 158.158.32.26:34691] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "ac0VDT7Idlm5j9frhqQr8wAAAE8"]
[Wed Apr 01 20:52:30.044884 2026] [:error] [pid 8995:tid 9000] [client 158.158.32.26:34424] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "ac0VDuonaBjs3qxcRefGoAAAAAI"]
[Wed Apr 01 20:52:30.533535 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:29767] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "ac0VDjvP_a0662gDl6C-xwAAAM8"]
[Wed Apr 01 20:52:31.010578 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:58346] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellerr.php"] [unique_id "ac0VDz7Idlm5j9frhqQr-wAAAEk"]
[Wed Apr 01 20:52:31.492145 2026] [:error] [pid 8910:tid 8977] [client 158.158.32.26:29785] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0VD6JZINUcF3tYgExfGgAAAQk"]
[Wed Apr 01 20:52:31.973371 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:29810] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0VD6JZINUcF3tYgExfHAAAARA"]
[Wed Apr 01 20:52:32.451771 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:34713] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0VEDvP_a0662gDl6C-ygAAAME"]
[Wed Apr 01 20:52:32.931273 2026] [:error] [pid 17856:tid 17863] [client 158.158.32.26:34744] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0VED7Idlm5j9frhqQsAQAAAEU"]
[Wed Apr 01 20:52:33.434986 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:29764] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ac0VET7Idlm5j9frhqQsBgAAAEQ"]
[Wed Apr 01 20:52:33.916494 2026] [:error] [pid 62559:tid 62572] [client 158.158.32.26:34388] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ac0VES7NKI8IaNKZFIebUAAAAUs"]
[Wed Apr 01 20:52:34.396718 2026] [:error] [pid 8910:tid 8988] [client 158.158.32.26:58315] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ac0VEqJZINUcF3tYgExfHgAAARQ"]
[Wed Apr 01 20:52:34.879175 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:34384] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ac0VEuonaBjs3qxcRefGogAAAAA"]
[Wed Apr 01 20:52:35.357963 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:34421] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac0VEzvP_a0662gDl6C-0AAAAMw"]
[Wed Apr 01 20:52:35.841078 2026] [:error] [pid 8908:tid 8928] [client 158.158.32.26:28955] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac0VE_kmxtJXGnLdvgCEgwAAAI8"]
[Wed Apr 01 20:52:36.332129 2026] [:error] [pid 8908:tid 8915] [client 158.158.32.26:28940] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac0VFPkmxtJXGnLdvgCEhAAAAII"]
[Wed Apr 01 20:52:36.819470 2026] [:error] [pid 8908:tid 8932] [client 158.158.32.26:28957] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac0VFPkmxtJXGnLdvgCEhwAAAJM"]
[Wed Apr 01 20:52:37.303643 2026] [:error] [pid 8995:tid 9017] [client 158.158.32.26:34696] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ac0VFeonaBjs3qxcRefGpwAAABM"]
[Wed Apr 01 20:52:37.786755 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:29780] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ac0VFTvP_a0662gDl6C-2QAAAMI"]
[Wed Apr 01 20:52:38.277438 2026] [:error] [pid 8910:tid 8987] [client 158.158.32.26:34390] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ac0VFqJZINUcF3tYgExfIwAAARM"]
[Wed Apr 01 20:52:38.803757 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:34398] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ac0VFvkmxtJXGnLdvgCEjwAAAIA"]
[Wed Apr 01 20:52:39.305027 2026] [:error] [pid 17856:tid 17865] [client 158.158.32.26:28966] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ac0VFz7Idlm5j9frhqQsPQAAAEc"]
[Wed Apr 01 20:52:39.786161 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:34417] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ac0VFzvP_a0662gDl6C-5AAAAMU"]
[Wed Apr 01 20:52:40.292432 2026] [:error] [pid 17856:tid 17882] [client 158.158.32.26:29761] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ac0VGD7Idlm5j9frhqQsQgAAAFg"]
[Wed Apr 01 20:52:40.883669 2026] [:error] [pid 62559:tid 62573] [client 158.158.32.26:29762] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ant.php"] [unique_id "ac0VGC7NKI8IaNKZFIebagAAAUw"]
[Wed Apr 01 20:52:41.368651 2026] [:error] [pid 8909:tid 8962] [client 158.158.32.26:34392] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ac0VGTvP_a0662gDl6C-7QAAANU"]
[Wed Apr 01 20:52:41.849283 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:29781] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ac0VGTvP_a0662gDl6C-8wAAANg"]
[Wed Apr 01 20:52:42.333116 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:34750] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ac0VGj7Idlm5j9frhqQsTgAAAFI"]
[Wed Apr 01 20:52:42.817378 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:29772] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ac0VGjvP_a0662gDl6C-9gAAAMA"]
[Wed Apr 01 20:52:43.301886 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:34430] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "ac0VGy7NKI8IaNKZFIebbgAAAU8"]
[Wed Apr 01 20:52:43.782061 2026] [:error] [pid 8908:tid 8915] [client 158.158.32.26:34416] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "ac0VG_kmxtJXGnLdvgCEnAAAAII"]
[Wed Apr 01 20:52:44.280269 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:28932] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "ac0VHDvP_a0662gDl6C-_gAAAMc"]
[Wed Apr 01 20:52:44.758238 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:28931] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "ac0VHPkmxtJXGnLdvgCEoQAAAIY"]
[Wed Apr 01 20:52:45.238076 2026] [:error] [pid 62559:tid 62563] [client 158.158.32.26:29806] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ac0VHS7NKI8IaNKZFIebbwAAAUI"]
[Wed Apr 01 20:52:45.722510 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:29792] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ac0VHTvP_a0662gDl6C_CQAAAMk"]
[Wed Apr 01 20:52:46.218517 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:34393] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ac0VHvkmxtJXGnLdvgCEpQAAAIQ"]
[Wed Apr 01 20:52:46.707393 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:58366] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "ac0VHjvP_a0662gDl6C_EAAAAMw"]
[Wed Apr 01 20:52:47.191282 2026] [:error] [pid 62559:tid 62580] [client 158.158.32.26:21828] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "ac0VHy7NKI8IaNKZFIebcQAAAVM"]
[Wed Apr 01 20:52:47.722598 2026] [:error] [pid 8908:tid 8928] [client 158.158.32.26:28972] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "ac0VH_kmxtJXGnLdvgCEqQAAAI8"]
[Wed Apr 01 20:52:48.201092 2026] [:error] [pid 62559:tid 62581] [client 158.158.32.26:34697] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "ac0VIC7NKI8IaNKZFIebcgAAAVQ"]
[Wed Apr 01 20:52:48.693734 2026] [:error] [pid 8909:tid 8960] [client 158.158.32.26:29787] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classgoto24.php"] [unique_id "ac0VIDvP_a0662gDl6C_GAAAANM"]
[Wed Apr 01 20:52:49.175666 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:34391] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ac0VIfkmxtJXGnLdvgCErAAAAJU"]
[Wed Apr 01 20:52:49.661565 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:34378] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ac0VIfkmxtJXGnLdvgCErQAAAIA"]
[Wed Apr 01 20:52:50.148170 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:58313] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ac0VIjvP_a0662gDl6C_JwAAANQ"]
[Wed Apr 01 20:52:50.632404 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:29768] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ac0VIjvP_a0662gDl6C_KwAAAMU"]
[Wed Apr 01 20:52:51.113695 2026] [:error] [pid 8910:tid 8988] [client 158.158.32.26:34688] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ac0VI6JZINUcF3tYgExfLAAAARQ"]
[Wed Apr 01 20:52:51.593801 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:21850] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ac0VIy7NKI8IaNKZFIebfAAAAUQ"]
[Wed Apr 01 20:52:52.080828 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:34746] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ac0VJDvP_a0662gDl6C_MgAAAMs"]
[Wed Apr 01 20:52:52.571528 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:34694] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws43.php"] [unique_id "ac0VJDvP_a0662gDl6C_NQAAAMQ"]
[Wed Apr 01 20:52:53.085670 2026] [:error] [pid 8910:tid 8987] [client 158.158.32.26:58328] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "ac0VJaJZINUcF3tYgExfMgAAARM"]
[Wed Apr 01 20:52:53.570731 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:28934] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "ac0VJS7NKI8IaNKZFIebhQAAAVY"]
[Wed Apr 01 20:52:54.052893 2026] [:error] [pid 62559:tid 62568] [client 158.158.32.26:34389] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "ac0VJi7NKI8IaNKZFIebhwAAAUc"]
[Wed Apr 01 20:52:54.537544 2026] [:error] [pid 8910:tid 8986] [client 158.158.32.26:29814] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gec.php"] [unique_id "ac0VJqJZINUcF3tYgExfNwAAARI"]
[Wed Apr 01 20:52:55.042410 2026] [:error] [pid 62559:tid 62574] [client 158.158.32.26:28982] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ac0VJy7NKI8IaNKZFIebjQAAAU0"]
[Wed Apr 01 20:52:55.532833 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:34386] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ac0VJ_kmxtJXGnLdvgCEtAAAAJI"]
[Wed Apr 01 20:52:56.015946 2026] [:error] [pid 8908:tid 8933] [client 158.158.32.26:34710] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ac0VKPkmxtJXGnLdvgCEuQAAAJQ"]
[Wed Apr 01 20:52:56.502513 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:28939] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ac0VKPkmxtJXGnLdvgCEvAAAAIQ"]
[Wed Apr 01 20:52:56.983650 2026] [:error] [pid 8908:tid 8920] [client 158.158.32.26:29799] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ac0VKPkmxtJXGnLdvgCEvwAAAIc"]
[Wed Apr 01 20:52:57.469847 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:58337] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ac0VKfkmxtJXGnLdvgCEwwAAAJI"]
[Wed Apr 01 20:52:57.947027 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:29783] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ac0VKaJZINUcF3tYgExfOgAAARA"]
[Wed Apr 01 20:52:58.433883 2026] [:error] [pid 8910:tid 8992] [client 158.158.32.26:29765] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ac0VKqJZINUcF3tYgExfPgAAARg"]
[Wed Apr 01 20:52:58.930753 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:28991] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ac0VKj7Idlm5j9frhqQsZQAAAFc"]
[Wed Apr 01 20:52:59.415875 2026] [:error] [pid 8910:tid 8978] [client 158.158.32.26:29800] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ac0VK6JZINUcF3tYgExfQQAAAQo"]
[Wed Apr 01 20:52:59.907702 2026] [:error] [pid 17856:tid 17882] [client 158.158.32.26:34408] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ac0VKz7Idlm5j9frhqQsagAAAFg"]
[Wed Apr 01 20:53:00.398146 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:28942] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/size.php"] [unique_id "ac0VLC7NKI8IaNKZFIebkwAAAUo"]
[Wed Apr 01 20:53:00.884418 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:34407] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ac0VLC7NKI8IaNKZFIeblQAAAUQ"]
[Wed Apr 01 20:53:01.368499 2026] [:error] [pid 62559:tid 62582] [client 158.158.32.26:58332] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ac0VLS7NKI8IaNKZFIebmgAAAVU"]
[Wed Apr 01 20:53:01.861120 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:58324] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ac0VLaJZINUcF3tYgExfSQAAARA"]
[Wed Apr 01 20:53:02.343801 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:28947] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ac0VLvkmxtJXGnLdvgCEygAAAIQ"]
[Wed Apr 01 20:53:02.835133 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:29821] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ac0VLj7Idlm5j9frhqQscgAAAFc"]
[Wed Apr 01 20:53:03.316594 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:28979] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ac0VL_kmxtJXGnLdvgCEzgAAAJI"]
[Wed Apr 01 20:53:03.799967 2026] [:error] [pid 8910:tid 8977] [client 158.158.32.26:29797] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ac0VL6JZINUcF3tYgExfSgAAAQk"]
[Wed Apr 01 20:53:04.291991 2026] [:error] [pid 17856:tid 17858] [client 158.158.32.26:34390] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ac0VMD7Idlm5j9frhqQsdQAAAEA"]
[Wed Apr 01 20:53:04.776177 2026] [:error] [pid 8995:tid 9007] [client 158.158.32.26:21846] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac0VMOonaBjs3qxcRefGwQAAAAk"]
[Wed Apr 01 20:53:05.286047 2026] [:error] [pid 8995:tid 9005] [client 158.158.32.26:34379] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac0VMeonaBjs3qxcRefGwwAAAAc"]
[Wed Apr 01 20:53:05.765108 2026] [:error] [pid 62559:tid 62564] [client 158.158.32.26:28969] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac0VMS7NKI8IaNKZFIebpAAAAUM"]
[Wed Apr 01 20:53:06.252976 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:21826] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac0VMi7NKI8IaNKZFIebpQAAAUo"]
[Wed Apr 01 20:53:06.737112 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:28938] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "ac0VMjvP_a0662gDl6C_VAAAANY"]
[Wed Apr 01 20:53:07.230061 2026] [:error] [pid 8910:tid 8985] [client 158.158.32.26:29813] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "ac0VM6JZINUcF3tYgExfUQAAARE"]
[Wed Apr 01 20:53:07.718874 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:58320] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "ac0VMzvP_a0662gDl6C_VwAAANc"]
[Wed Apr 01 20:53:08.200949 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:28980] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b.php"] [unique_id "ac0VNOonaBjs3qxcRefGzAAAAAA"]
[Wed Apr 01 20:53:08.699534 2026] [:error] [pid 8908:tid 8921] [client 158.158.32.26:58333] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "ac0VNPkmxtJXGnLdvgCE1gAAAIg"]
[Wed Apr 01 20:53:09.192221 2026] [:error] [pid 8909:tid 8955] [client 158.158.32.26:28990] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "ac0VNTvP_a0662gDl6C_ZgAAAM4"]
[Wed Apr 01 20:53:09.673720 2026] [:error] [pid 8909:tid 8954] [client 158.158.32.26:28954] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "ac0VNTvP_a0662gDl6C_bAAAAM0"]
[Wed Apr 01 20:53:10.154431 2026] [:error] [pid 62559:tid 62577] [client 158.158.32.26:29778] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vaza.php"] [unique_id "ac0VNi7NKI8IaNKZFIebqAAAAVA"]
[Wed Apr 01 20:53:10.655225 2026] [:error] [pid 17856:tid 17879] [client 158.158.32.26:29790] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ac0VNj7Idlm5j9frhqQsgAAAAFU"]
[Wed Apr 01 20:53:11.136073 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:34413] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ac0VNy7NKI8IaNKZFIebqwAAAVI"]
[Wed Apr 01 20:53:11.647176 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:34399] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ac0VNzvP_a0662gDl6C_bgAAAMk"]
[Wed Apr 01 20:53:12.235403 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:28988] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ac0VODvP_a0662gDl6C_cwAAANI"]
[Wed Apr 01 20:53:12.742853 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:28968] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0VOD7Idlm5j9frhqQshwAAAFI"]
[Wed Apr 01 20:53:13.494461 2026] [proxy_fcgi:error] [pid 17856:tid 17869] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:13.737639 2026] [proxy_fcgi:error] [pid 17856:tid 17867] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:13.981412 2026] [proxy_fcgi:error] [pid 17856:tid 17865] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:14.466725 2026] [proxy_fcgi:error] [pid 17856:tid 17860] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:14.709601 2026] [proxy_fcgi:error] [pid 17856:tid 17876] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:15.077188 2026] [proxy_fcgi:error] [pid 17856:tid 17880] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:15.320246 2026] [proxy_fcgi:error] [pid 17856:tid 17882] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:15.646375 2026] [proxy_fcgi:error] [pid 17856:tid 17871] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:15.892427 2026] [proxy_fcgi:error] [pid 17856:tid 17861] [client 158.158.32.26:34705] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 20:53:16.265103 2026] [:error] [pid 17856:tid 17858] [client 158.158.32.26:34705] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "ac0VPD7Idlm5j9frhqQsoAAAAEA"]
[Wed Apr 01 20:53:16.972959 2026] [:error] [pid 8909:tid 8962] [client 158.158.32.26:29769] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "ac0VPDvP_a0662gDl6C_iQAAANU"]
[Wed Apr 01 20:53:17.502571 2026] [:error] [pid 8995:tid 9016] [client 158.158.32.26:28952] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "ac0VPeonaBjs3qxcRefG1gAAABI"]
[Wed Apr 01 20:53:17.983853 2026] [:error] [pid 8909:tid 8962] [client 158.158.32.26:28973] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gmo.php"] [unique_id "ac0VPTvP_a0662gDl6C_mAAAANU"]
[Wed Apr 01 20:53:18.504866 2026] [:error] [pid 8909:tid 8957] [client 158.158.32.26:21783] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ac0VPjvP_a0662gDl6C_oAAAANA"]
[Wed Apr 01 20:53:19.026145 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:28929] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ac0VPzvP_a0662gDl6C_rQAAANI"]
[Wed Apr 01 20:53:19.511683 2026] [:error] [pid 8909:tid 8947] [client 158.158.32.26:34719] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ac0VPzvP_a0662gDl6C_tAAAAMY"]
[Wed Apr 01 20:53:19.999460 2026] [:error] [pid 8909:tid 8954] [client 158.158.32.26:34410] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ac0VPzvP_a0662gDl6C_ugAAAM0"]
[Wed Apr 01 20:53:20.509982 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:28977] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "ac0VQPkmxtJXGnLdvgCE6wAAAJY"]
[Wed Apr 01 20:53:20.990567 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:28936] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "ac0VQKJZINUcF3tYgExfVQAAARA"]
[Wed Apr 01 20:53:21.490160 2026] [:error] [pid 8910:tid 8992] [client 158.158.32.26:34418] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "ac0VQaJZINUcF3tYgExfWAAAARg"]
[Wed Apr 01 20:53:21.970840 2026] [:error] [pid 8908:tid 8928] [client 158.158.32.26:21831] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/20.php"] [unique_id "ac0VQfkmxtJXGnLdvgCE7wAAAI8"]
[Wed Apr 01 20:53:22.505875 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:29789] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ac0VQuonaBjs3qxcRefG6gAAABc"]
[Wed Apr 01 20:53:22.998148 2026] [:error] [pid 8995:tid 9012] [client 158.158.32.26:29776] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ac0VQuonaBjs3qxcRefG7gAAAA4"]
[Wed Apr 01 20:53:23.491947 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:1474] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ac0VQzvP_a0662gDl6C_xgAAAMo"]
[Wed Apr 01 20:53:23.973637 2026] [:error] [pid 8908:tid 8936] [client 158.158.32.26:34740] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ac0VQ_kmxtJXGnLdvgCE8QAAAJc"]
[Wed Apr 01 20:53:24.513606 2026] [:error] [pid 8908:tid 8915] [client 158.158.32.26:34745] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "ac0VRPkmxtJXGnLdvgCE8wAAAII"]
[Wed Apr 01 20:53:24.993852 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:28956] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "ac0VRPkmxtJXGnLdvgCE-AAAAIQ"]
[Wed Apr 01 20:53:25.489175 2026] [:error] [pid 8908:tid 8930] [client 158.158.32.26:21837] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "ac0VRfkmxtJXGnLdvgCFAQAAAJE"]
[Wed Apr 01 20:53:25.976569 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:34420] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c.php"] [unique_id "ac0VRTvP_a0662gDl6C_zgAAAMA"]
[Wed Apr 01 20:53:26.476028 2026] [:error] [pid 62559:tid 62581] [client 158.158.32.26:34751] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ac0VRi7NKI8IaNKZFIebswAAAVQ"]
[Wed Apr 01 20:53:26.954747 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:28933] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ac0VRj7Idlm5j9frhqQsqQAAAEQ"]
[Wed Apr 01 20:53:27.440393 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:21885] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ac0VRzvP_a0662gDl6C_1AAAANI"]
[Wed Apr 01 20:53:27.923457 2026] [:error] [pid 8910:tid 8974] [client 158.158.32.26:58334] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ac0VR6JZINUcF3tYgExfZQAAAQY"]
[Wed Apr 01 20:53:28.409483 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:21866] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "ac0VSC7NKI8IaNKZFIebtgAAAUQ"]
[Wed Apr 01 20:53:28.896469 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:28981] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "ac0VSDvP_a0662gDl6C_2QAAANc"]
[Wed Apr 01 20:53:29.391326 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:21829] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "ac0VSTvP_a0662gDl6C_3AAAANY"]
[Wed Apr 01 20:53:29.871067 2026] [:error] [pid 8995:tid 9017] [client 158.158.32.26:21862] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/04.php"] [unique_id "ac0VSeonaBjs3qxcRefG9gAAABM"]
[Wed Apr 01 20:53:30.349608 2026] [:error] [pid 8908:tid 8914] [client 158.158.32.26:58318] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac0VSvkmxtJXGnLdvgCFFAAAAIE"]
[Wed Apr 01 20:53:30.862060 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:29807] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac0VSjvP_a0662gDl6C_5gAAAMo"]
[Wed Apr 01 20:53:31.343368 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:28964] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac0VSz7Idlm5j9frhqQsrQAAAFQ"]
[Wed Apr 01 20:53:31.826642 2026] [:error] [pid 8910:tid 8981] [client 158.158.32.26:29784] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac0VS6JZINUcF3tYgExfbgAAAQ0"]
[Wed Apr 01 21:05:11.785870 2026] [proxy_fcgi:error] [pid 8909:tid 8941] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:12.032871 2026] [proxy_fcgi:error] [pid 8909:tid 8955] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:12.280852 2026] [proxy_fcgi:error] [pid 8909:tid 8950] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:12.525578 2026] [proxy_fcgi:error] [pid 8909:tid 8965] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:12.765931 2026] [proxy_fcgi:error] [pid 8909:tid 8942] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:13.014925 2026] [proxy_fcgi:error] [pid 8909:tid 8943] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:13.254117 2026] [proxy_fcgi:error] [pid 8909:tid 8941] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:13.494966 2026] [proxy_fcgi:error] [pid 8909:tid 8964] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:13.736787 2026] [proxy_fcgi:error] [pid 8909:tid 8961] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:13.975641 2026] [proxy_fcgi:error] [pid 8909:tid 8956] [client 172.161.64.10:34238] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:05:14.212505 2026] [:error] [pid 8909:tid 8953] [client 172.161.64.10:34238] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0YCjvP_a0662gDl6DImQAAAMw"]
[Wed Apr 01 21:05:14.954594 2026] [:error] [pid 8995:tid 9011] [client 172.161.64.10:7874] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0YCuonaBjs3qxcRefJ8wAAAA0"]
[Wed Apr 01 21:05:15.785722 2026] [:error] [pid 8909:tid 8944] [client 172.161.64.10:41157] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0YCzvP_a0662gDl6DIogAAAMM"]
[Wed Apr 01 21:05:16.606308 2026] [:error] [pid 8908:tid 8924] [client 172.161.64.10:7200] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0YDPkmxtJXGnLdvgCJMQAAAIs"]
[Wed Apr 01 21:05:17.530559 2026] [:error] [pid 17856:tid 17862] [client 172.161.64.10:52748] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0YDT7Idlm5j9frhqQzSgAAAEQ"]
[Wed Apr 01 21:05:18.716198 2026] [:error] [pid 8910:tid 8976] [client 172.161.64.10:8008] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "ac0YDqJZINUcF3tYgExiBAAAAQg"]
[Wed Apr 01 21:05:19.283303 2026] [:error] [pid 8995:tid 9021] [client 172.161.64.10:8012] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "ac0YD-onaBjs3qxcRefJ-gAAABc"]
[Wed Apr 01 21:05:19.992085 2026] [:error] [pid 8995:tid 8999] [client 172.161.64.10:7168] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "ac0YD-onaBjs3qxcRefJ_gAAAAE"]
[Wed Apr 01 21:05:20.625932 2026] [:error] [pid 8909:tid 8962] [client 172.161.64.10:34191] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "ac0YEDvP_a0662gDl6DIrgAAANU"]
[Wed Apr 01 21:05:21.354819 2026] [:error] [pid 8910:tid 8973] [client 172.161.64.10:52799] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0YEaJZINUcF3tYgExiCwAAAQU"]
[Wed Apr 01 21:05:21.956325 2026] [:error] [pid 8995:tid 9009] [client 172.161.64.10:34186] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0YEeonaBjs3qxcRefJ_wAAAAs"]
[Wed Apr 01 21:05:22.563022 2026] [:error] [pid 8908:tid 8913] [client 172.161.64.10:44288] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0YEvkmxtJXGnLdvgCJOgAAAIA"]
[Wed Apr 01 21:05:23.254669 2026] [:error] [pid 8909:tid 8947] [client 172.161.64.10:38977] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0YEzvP_a0662gDl6DItgAAAMY"]
[Wed Apr 01 21:05:24.054708 2026] [:error] [pid 8909:tid 8960] [client 172.161.64.10:7227] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0YFDvP_a0662gDl6DIuwAAANM"]
[Wed Apr 01 21:05:24.587983 2026] [:error] [pid 8909:tid 8949] [client 172.161.64.10:34220] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0YFDvP_a0662gDl6DIvwAAAMg"]
[Wed Apr 01 21:05:25.240842 2026] [:error] [pid 8909:tid 8953] [client 172.161.64.10:52773] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0YFTvP_a0662gDl6DIxgAAAMw"]
[Wed Apr 01 21:05:25.970014 2026] [:error] [pid 8909:tid 8942] [client 172.161.64.10:8013] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0YFTvP_a0662gDl6DIygAAAME"]
[Wed Apr 01 21:05:26.594964 2026] [:error] [pid 8995:tid 9015] [client 172.161.64.10:7205] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0YFuonaBjs3qxcRefKAwAAABE"]
[Wed Apr 01 21:05:27.206400 2026] [:error] [pid 8908:tid 8925] [client 172.161.64.10:58891] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0YF_kmxtJXGnLdvgCJQwAAAIw"]
[Wed Apr 01 21:05:28.080002 2026] [:error] [pid 62559:tid 62583] [client 172.161.64.10:58910] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0YGC7NKI8IaNKZFIefwQAAAVY"]
[Wed Apr 01 21:05:28.778714 2026] [:error] [pid 8910:tid 8990] [client 172.161.64.10:7216] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0YGKJZINUcF3tYgExiDgAAARY"]
[Wed Apr 01 21:05:29.579511 2026] [:error] [pid 8910:tid 8980] [client 172.161.64.10:52797] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0YGaJZINUcF3tYgExiEAAAAQw"]
[Wed Apr 01 21:05:30.368999 2026] [:error] [pid 8910:tid 8968] [client 172.161.64.10:62496] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0YGqJZINUcF3tYgExiEQAAAQA"]
[Wed Apr 01 21:05:31.159412 2026] [:error] [pid 62559:tid 62567] [client 172.161.64.10:44315] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0YGy7NKI8IaNKZFIefygAAAUY"]
[Wed Apr 01 21:05:32.004184 2026] [:error] [pid 8909:tid 8959] [client 172.161.64.10:34178] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0YHDvP_a0662gDl6DI5AAAANI"]
[Wed Apr 01 21:05:32.659433 2026] [:error] [pid 8910:tid 8970] [client 172.161.64.10:34176] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0YHKJZINUcF3tYgExiFAAAAQI"]
[Wed Apr 01 21:05:33.335361 2026] [:error] [pid 17856:tid 17866] [client 172.161.64.10:62470] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "ac0YHT7Idlm5j9frhqQzXgAAAEg"]
[Wed Apr 01 21:05:33.977182 2026] [:error] [pid 8908:tid 8916] [client 172.161.64.10:52762] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "ac0YHfkmxtJXGnLdvgCJUQAAAIM"]
[Wed Apr 01 21:05:34.788959 2026] [:error] [pid 8908:tid 8922] [client 172.161.64.10:62469] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0YHvkmxtJXGnLdvgCJVQAAAIk"]
[Wed Apr 01 21:05:35.304373 2026] [:error] [pid 62559:tid 62583] [client 172.161.64.10:44314] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0YHy7NKI8IaNKZFIefzAAAAVY"]
[Wed Apr 01 21:05:35.948134 2026] [:error] [pid 8908:tid 8915] [client 172.161.64.10:8057] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0YH_kmxtJXGnLdvgCJXAAAAII"]
[Wed Apr 01 21:05:36.536650 2026] [:error] [pid 8908:tid 8920] [client 172.161.64.10:41165] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0YIPkmxtJXGnLdvgCJYAAAAIc"]
[Wed Apr 01 21:05:37.052818 2026] [:error] [pid 62559:tid 62571] [client 172.161.64.10:34211] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0YIS7NKI8IaNKZFIef0gAAAUo"]
[Wed Apr 01 21:05:37.674283 2026] [:error] [pid 8909:tid 8942] [client 172.161.64.10:63908] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0YITvP_a0662gDl6DI8gAAAME"]
[Wed Apr 01 21:05:38.214173 2026] [:error] [pid 8910:tid 8975] [client 172.161.64.10:34208] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac0YIqJZINUcF3tYgExiHQAAAQc"]
[Wed Apr 01 21:05:39.031002 2026] [:error] [pid 8908:tid 8915] [client 172.161.64.10:34237] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "ac0YI_kmxtJXGnLdvgCJZQAAAII"]
[Wed Apr 01 21:05:39.601781 2026] [:error] [pid 8909:tid 8945] [client 172.161.64.10:58890] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "ac0YIzvP_a0662gDl6DI-gAAAMQ"]
[Wed Apr 01 21:05:40.288873 2026] [:error] [pid 17856:tid 17881] [client 172.161.64.10:52769] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "ac0YJD7Idlm5j9frhqQzZwAAAFc"]
[Wed Apr 01 21:05:40.871643 2026] [:error] [pid 17856:tid 17880] [client 172.161.64.10:44325] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "ac0YJD7Idlm5j9frhqQzbgAAAFY"]
[Wed Apr 01 21:05:41.455832 2026] [:error] [pid 8909:tid 8964] [client 172.161.64.10:33337] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0YJTvP_a0662gDl6DI_gAAANc"]
[Wed Apr 01 21:05:42.016287 2026] [:error] [pid 17856:tid 17858] [client 172.161.64.10:7224] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0YJj7Idlm5j9frhqQzcwAAAEA"]
[Wed Apr 01 21:05:42.580629 2026] [:error] [pid 8909:tid 8955] [client 172.161.64.10:41177] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0YJjvP_a0662gDl6DJAwAAAM4"]
[Wed Apr 01 21:05:43.247334 2026] [:error] [pid 62559:tid 62582] [client 172.161.64.10:8011] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0YJy7NKI8IaNKZFIef2gAAAVU"]
[Wed Apr 01 21:05:43.890981 2026] [:error] [pid 8909:tid 8957] [client 172.161.64.10:52744] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ac0YJzvP_a0662gDl6DJCQAAANA"]
[Wed Apr 01 21:05:44.614768 2026] [:error] [pid 8910:tid 8987] [client 172.161.64.10:7327] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ac0YKKJZINUcF3tYgExiIwAAARM"]
[Wed Apr 01 21:05:45.723913 2026] [:error] [pid 62559:tid 62583] [client 172.161.64.10:58899] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ac0YKS7NKI8IaNKZFIef5AAAAVY"]
[Wed Apr 01 21:05:46.438643 2026] [:error] [pid 8908:tid 8932] [client 172.161.64.10:62491] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0YKvkmxtJXGnLdvgCJdwAAAJM"]
[Wed Apr 01 21:05:47.125996 2026] [:error] [pid 62559:tid 62579] [client 172.161.64.10:58900] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0YKy7NKI8IaNKZFIef6wAAAVI"]
[Wed Apr 01 21:05:47.641337 2026] [:error] [pid 8909:tid 8959] [client 172.161.64.10:63927] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0YKzvP_a0662gDl6DJFwAAANI"]
[Wed Apr 01 21:05:48.330710 2026] [:error] [pid 8909:tid 8957] [client 172.161.64.10:50350] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0YLDvP_a0662gDl6DJGgAAANA"]
[Wed Apr 01 21:05:49.053373 2026] [:error] [pid 8909:tid 8941] [client 172.161.64.10:7343] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0YLTvP_a0662gDl6DJIgAAAMA"]
[Wed Apr 01 21:05:49.632149 2026] [:error] [pid 8909:tid 8965] [client 172.161.64.10:34180] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0YLTvP_a0662gDl6DJKAAAANg"]
[Wed Apr 01 21:05:50.168019 2026] [:error] [pid 17856:tid 17881] [client 172.161.64.10:52754] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0YLj7Idlm5j9frhqQzfwAAAFc"]
[Wed Apr 01 21:05:50.750863 2026] [:error] [pid 8909:tid 8942] [client 172.161.64.10:50329] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0YLjvP_a0662gDl6DJOgAAAME"]
[Wed Apr 01 21:05:51.321363 2026] [:error] [pid 62559:tid 62569] [client 172.161.64.10:34215] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ac0YLy7NKI8IaNKZFIef8QAAAUg"]
[Wed Apr 01 21:05:51.969959 2026] [:error] [pid 17856:tid 17877] [client 172.161.64.10:44312] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ac0YLz7Idlm5j9frhqQzhgAAAFM"]
[Wed Apr 01 21:05:52.687181 2026] [:error] [pid 8909:tid 8961] [client 172.161.64.10:63914] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ac0YMDvP_a0662gDl6DJSAAAANQ"]
[Wed Apr 01 21:05:53.204259 2026] [:error] [pid 8910:tid 8970] [client 172.161.64.10:58905] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ac0YMaJZINUcF3tYgExiKwAAAQI"]
[Wed Apr 01 21:05:53.989814 2026] [:error] [pid 8908:tid 8922] [client 172.161.64.10:33323] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0YMfkmxtJXGnLdvgCJiwAAAIk"]
[Wed Apr 01 21:05:54.875462 2026] [:error] [pid 62559:tid 62571] [client 172.161.64.10:62527] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0YMi7NKI8IaNKZFIef_wAAAUo"]
[Wed Apr 01 21:05:55.869174 2026] [:error] [pid 17856:tid 17870] [client 172.161.64.10:58902] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0YMz7Idlm5j9frhqQzjQAAAEw"]
[Wed Apr 01 21:05:56.649985 2026] [:error] [pid 17856:tid 17880] [client 172.161.64.10:61248] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac0YND7Idlm5j9frhqQzlQAAAFY"]
[Wed Apr 01 21:05:58.476917 2026] [:error] [pid 17856:tid 17879] [client 172.161.64.10:8024] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0YNj7Idlm5j9frhqQzqQAAAFU"]
[Wed Apr 01 21:05:59.150143 2026] [:error] [pid 8909:tid 8942] [client 172.161.64.10:7353] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0YNzvP_a0662gDl6DJaAAAAME"]
[Wed Apr 01 21:05:59.762902 2026] [:error] [pid 17856:tid 17870] [client 172.161.64.10:7202] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0YNz7Idlm5j9frhqQzsQAAAEw"]
[Wed Apr 01 21:06:00.498505 2026] [:error] [pid 8909:tid 8953] [client 172.161.64.10:7312] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0YODvP_a0662gDl6DJcgAAAMw"]
[Wed Apr 01 21:06:00.975285 2026] [:error] [pid 8910:tid 8975] [client 172.161.64.10:58909] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0YOKJZINUcF3tYgExiMAAAAQc"]
[Wed Apr 01 21:06:01.483013 2026] [:error] [pid 62559:tid 62580] [client 172.161.64.10:63935] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0YOS7NKI8IaNKZFIegFQAAAVM"]
[Wed Apr 01 21:06:02.139252 2026] [:error] [pid 8909:tid 8961] [client 172.161.64.10:62475] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0YOjvP_a0662gDl6DJdwAAANQ"]
[Wed Apr 01 21:06:02.653089 2026] [:error] [pid 8909:tid 8941] [client 172.161.64.10:33297] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0YOjvP_a0662gDl6DJfAAAAMA"]
[Wed Apr 01 21:06:03.172630 2026] [:error] [pid 17856:tid 17861] [client 172.161.64.10:62524] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a6.php"] [unique_id "ac0YOz7Idlm5j9frhqQzxgAAAEM"]
[Wed Apr 01 21:06:03.755705 2026] [:error] [pid 8910:tid 8983] [client 172.161.64.10:50335] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0YO6JZINUcF3tYgExiMQAAAQ8"]
[Wed Apr 01 21:06:04.339800 2026] [:error] [pid 8909:tid 8949] [client 172.161.64.10:63898] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0YPDvP_a0662gDl6DJhwAAAMg"]
[Wed Apr 01 21:06:04.892025 2026] [:error] [pid 8910:tid 8976] [client 172.161.64.10:7184] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "ac0YPKJZINUcF3tYgExiNQAAAQg"]
[Wed Apr 01 21:06:05.405468 2026] [:error] [pid 17856:tid 17870] [client 172.161.64.10:8052] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "ac0YPT7Idlm5j9frhqQzzwAAAEw"]
[Wed Apr 01 21:06:05.906270 2026] [:error] [pid 17856:tid 17859] [client 172.161.64.10:7837] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "ac0YPT7Idlm5j9frhqQz1QAAAEE"]
[Wed Apr 01 21:06:06.394536 2026] [:error] [pid 8909:tid 8948] [client 172.161.64.10:44291] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "ac0YPjvP_a0662gDl6DJjgAAAMc"]
[Wed Apr 01 21:06:06.975477 2026] [:error] [pid 8910:tid 8970] [client 172.161.64.10:8026] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0YPqJZINUcF3tYgExiOQAAAQI"]
[Wed Apr 01 21:06:07.544186 2026] [:error] [pid 17856:tid 17862] [client 172.161.64.10:44296] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0YPz7Idlm5j9frhqQz5QAAAEQ"]
[Wed Apr 01 21:06:08.131297 2026] [:error] [pid 8909:tid 8962] [client 172.161.64.10:61300] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0YQDvP_a0662gDl6DJkwAAANU"]
[Wed Apr 01 21:06:08.675872 2026] [:error] [pid 8909:tid 8945] [client 172.161.64.10:7330] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0YQDvP_a0662gDl6DJmgAAAMQ"]
[Wed Apr 01 21:06:09.446515 2026] [:error] [pid 8909:tid 8952] [client 172.161.64.10:44342] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ac0YQTvP_a0662gDl6DJoQAAAMs"]
[Wed Apr 01 21:06:10.067501 2026] [:error] [pid 62559:tid 62565] [client 172.161.64.10:44294] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ac0YQi7NKI8IaNKZFIegKQAAAUQ"]
[Wed Apr 01 21:06:10.588100 2026] [:error] [pid 8909:tid 8942] [client 172.161.64.10:50359] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ac0YQjvP_a0662gDl6DJpgAAAME"]
[Wed Apr 01 21:06:11.198715 2026] [:error] [pid 8995:tid 9009] [client 172.161.64.10:7829] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ac0YQ-onaBjs3qxcRefKOQAAAAs"]
[Wed Apr 01 21:06:11.883745 2026] [:error] [pid 8909:tid 8950] [client 172.161.64.10:63885] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "ac0YQzvP_a0662gDl6DJpwAAAMk"]
[Wed Apr 01 21:06:12.542889 2026] [:error] [pid 62559:tid 62580] [client 172.161.64.10:7815] [client 172.161.64.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "ac0YRC7NKI8IaNKZFIegLwAAAVM"]
[Wed Apr 01 21:06:13.233539 2026] [proxy_fcgi:error] [pid 17856:tid 17873] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:13.480402 2026] [proxy_fcgi:error] [pid 17856:tid 17858] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:13.720200 2026] [proxy_fcgi:error] [pid 17856:tid 17863] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:15.031042 2026] [proxy_fcgi:error] [pid 17856:tid 17870] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:15.275876 2026] [proxy_fcgi:error] [pid 17856:tid 17866] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:15.514945 2026] [proxy_fcgi:error] [pid 17856:tid 17876] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:15.758645 2026] [proxy_fcgi:error] [pid 17856:tid 17867] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:16.000797 2026] [proxy_fcgi:error] [pid 17856:tid 17863] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:16.240297 2026] [proxy_fcgi:error] [pid 17856:tid 17873] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:16.479563 2026] [proxy_fcgi:error] [pid 17856:tid 17882] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:06:16.719044 2026] [proxy_fcgi:error] [pid 17856:tid 17875] [client 172.161.64.10:63902] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:35.334604 2026] [proxy_fcgi:error] [pid 8909:tid 8950] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:35.570136 2026] [proxy_fcgi:error] [pid 8909:tid 8947] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:35.806086 2026] [proxy_fcgi:error] [pid 8909:tid 8952] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:36.045272 2026] [proxy_fcgi:error] [pid 8909:tid 8944] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:36.281273 2026] [proxy_fcgi:error] [pid 8909:tid 8962] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:36.518355 2026] [proxy_fcgi:error] [pid 8909:tid 8958] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:36.753661 2026] [proxy_fcgi:error] [pid 8909:tid 8949] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:36.991099 2026] [proxy_fcgi:error] [pid 8909:tid 8955] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:37.227118 2026] [proxy_fcgi:error] [pid 8909:tid 8942] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:37.463273 2026] [proxy_fcgi:error] [pid 8909:tid 8960] [client 172.213.8.171:46735] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 21:08:37.694931 2026] [:error] [pid 8909:tid 8957] [client 172.213.8.171:46735] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0Y1TvP_a0662gDl6DMXQAAANA"]
[Wed Apr 01 21:08:38.214340 2026] [:error] [pid 8908:tid 8913] [client 172.213.8.171:46728] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0Y1vkmxtJXGnLdvgCLWgAAAIA"]
[Wed Apr 01 21:08:38.689029 2026] [:error] [pid 8908:tid 8920] [client 172.213.8.171:48013] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0Y1vkmxtJXGnLdvgCLXwAAAIc"]
[Wed Apr 01 21:08:39.168129 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:46013] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hnphq.php"] [unique_id "ac0Y1y7NKI8IaNKZFIehNQAAAUs"]
[Wed Apr 01 21:08:39.632230 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:45889] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0Y1zvP_a0662gDl6DMYQAAAMg"]
[Wed Apr 01 21:08:40.100286 2026] [:error] [pid 62559:tid 62578] [client 172.213.8.171:48047] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0Y2C7NKI8IaNKZFIehOAAAAVE"]
[Wed Apr 01 21:08:40.578736 2026] [:error] [pid 8909:tid 8941] [client 172.213.8.171:47951] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0Y2DvP_a0662gDl6DMZQAAAMA"]
[Wed Apr 01 21:08:41.062723 2026] [:error] [pid 62559:tid 62563] [client 172.213.8.171:45919] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0Y2S7NKI8IaNKZFIehPQAAAUI"]
[Wed Apr 01 21:08:41.718374 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:45896] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0Y2S7NKI8IaNKZFIehPgAAAUc"]
[Wed Apr 01 21:08:42.207914 2026] [:error] [pid 62559:tid 62576] [client 172.213.8.171:48020] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0Y2i7NKI8IaNKZFIehPwAAAU8"]
[Wed Apr 01 21:08:42.675574 2026] [:error] [pid 8908:tid 8935] [client 172.213.8.171:47207] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0Y2vkmxtJXGnLdvgCLZwAAAJY"]
[Wed Apr 01 21:08:43.177630 2026] [:error] [pid 8910:tid 8968] [client 172.213.8.171:46766] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0Y26JZINUcF3tYgExi4gAAAQA"]
[Wed Apr 01 21:08:43.673170 2026] [:error] [pid 8908:tid 8927] [client 172.213.8.171:46009] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0Y2_kmxtJXGnLdvgCLbAAAAI4"]
[Wed Apr 01 21:08:44.156941 2026] [:error] [pid 8909:tid 8948] [client 172.213.8.171:46749] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0Y3DvP_a0662gDl6DMcQAAAMc"]
[Wed Apr 01 21:08:44.654807 2026] [:error] [pid 8909:tid 8946] [client 172.213.8.171:48028] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0Y3DvP_a0662gDl6DMdAAAAMU"]
[Wed Apr 01 21:08:45.226503 2026] [:error] [pid 8909:tid 8956] [client 172.213.8.171:47223] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0Y3TvP_a0662gDl6DMdwAAAM8"]
[Wed Apr 01 21:08:45.769728 2026] [:error] [pid 8995:tid 9002] [client 172.213.8.171:46753] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0Y3eonaBjs3qxcRefLQwAAAAQ"]
[Wed Apr 01 21:08:46.252134 2026] [:error] [pid 8908:tid 8937] [client 172.213.8.171:46777] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0Y3vkmxtJXGnLdvgCLcQAAAJg"]
[Wed Apr 01 21:08:46.754329 2026] [:error] [pid 8995:tid 9010] [client 172.213.8.171:47211] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0Y3uonaBjs3qxcRefLRQAAAAw"]
[Wed Apr 01 21:08:47.246383 2026] [:error] [pid 8910:tid 8984] [client 172.213.8.171:46008] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Okxob.php"] [unique_id "ac0Y36JZINUcF3tYgExi6QAAARA"]
[Wed Apr 01 21:08:47.772471 2026] [:error] [pid 8908:tid 8927] [client 172.213.8.171:50244] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0Y3_kmxtJXGnLdvgCLeAAAAI4"]
[Wed Apr 01 21:08:48.492580 2026] [:error] [pid 8908:tid 8921] [client 172.213.8.171:46734] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0Y4PkmxtJXGnLdvgCLfAAAAIg"]
[Wed Apr 01 21:08:49.091946 2026] [:error] [pid 8908:tid 8922] [client 172.213.8.171:47174] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0Y4fkmxtJXGnLdvgCLfQAAAIk"]
[Wed Apr 01 21:08:49.623609 2026] [:error] [pid 8995:tid 9007] [client 172.213.8.171:47983] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "ac0Y4eonaBjs3qxcRefLSwAAAAk"]
[Wed Apr 01 21:08:50.119950 2026] [:error] [pid 8995:tid 9004] [client 172.213.8.171:46003] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "ac0Y4uonaBjs3qxcRefLTQAAAAY"]
[Wed Apr 01 21:08:50.632678 2026] [:error] [pid 8995:tid 9005] [client 172.213.8.171:48022] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0Y4uonaBjs3qxcRefLTwAAAAc"]
[Wed Apr 01 21:08:51.155975 2026] [:error] [pid 17856:tid 17868] [client 172.213.8.171:45940] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0Y4z7Idlm5j9frhqQ1wQAAAEo"]
[Wed Apr 01 21:08:51.674330 2026] [:error] [pid 17856:tid 17878] [client 172.213.8.171:45953] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0Y4z7Idlm5j9frhqQ1xAAAAFQ"]
[Wed Apr 01 21:08:52.144514 2026] [:error] [pid 8909:tid 8965] [client 172.213.8.171:47939] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "ac0Y5DvP_a0662gDl6DMkwAAANg"]
[Wed Apr 01 21:08:52.632522 2026] [:error] [pid 17856:tid 17866] [client 172.213.8.171:45942] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0Y5D7Idlm5j9frhqQ1xwAAAEg"]
[Wed Apr 01 21:08:53.162191 2026] [:error] [pid 8909:tid 8956] [client 172.213.8.171:45930] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0Y5TvP_a0662gDl6DMmAAAAM8"]
[Wed Apr 01 21:08:53.638107 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:47944] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ac0Y5TvP_a0662gDl6DMmgAAAMg"]
[Wed Apr 01 21:08:54.123605 2026] [:error] [pid 8995:tid 9001] [client 172.213.8.171:47945] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ac0Y5uonaBjs3qxcRefLVwAAAAM"]
[Wed Apr 01 21:08:54.792715 2026] [:error] [pid 17856:tid 17874] [client 172.213.8.171:46754] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0Y5j7Idlm5j9frhqQ1ygAAAFA"]
[Wed Apr 01 21:08:55.310703 2026] [:error] [pid 17856:tid 17880] [client 172.213.8.171:45943] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0Y5z7Idlm5j9frhqQ1zgAAAFY"]
[Wed Apr 01 21:08:55.815074 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:48042] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0Y5y7NKI8IaNKZFIehWwAAAUc"]
[Wed Apr 01 21:08:56.344074 2026] [:error] [pid 17856:tid 17879] [client 172.213.8.171:45923] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0Y6D7Idlm5j9frhqQ10gAAAFU"]
[Wed Apr 01 21:08:56.969125 2026] [:error] [pid 8910:tid 8992] [client 172.213.8.171:46765] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ac0Y6KJZINUcF3tYgExi-QAAARg"]
[Wed Apr 01 21:08:57.449555 2026] [:error] [pid 8995:tid 9005] [client 172.213.8.171:45959] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ac0Y6eonaBjs3qxcRefLXQAAAAc"]
[Wed Apr 01 21:08:57.989374 2026] [:error] [pid 8910:tid 8982] [client 172.213.8.171:46730] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ac0Y6aJZINUcF3tYgExi_QAAAQ4"]
[Wed Apr 01 21:08:58.459316 2026] [:error] [pid 8909:tid 8950] [client 172.213.8.171:45900] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ac0Y6jvP_a0662gDl6DMpAAAAMk"]
[Wed Apr 01 21:08:58.949359 2026] [:error] [pid 8995:tid 9009] [client 172.213.8.171:47942] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0Y6uonaBjs3qxcRefLYgAAAAs"]
[Wed Apr 01 21:08:59.462825 2026] [:error] [pid 8995:tid 9016] [client 172.213.8.171:48054] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0Y6-onaBjs3qxcRefLZAAAABI"]
[Wed Apr 01 21:08:59.985534 2026] [:error] [pid 8995:tid 9012] [client 172.213.8.171:48006] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0Y6-onaBjs3qxcRefLaAAAAA4"]
[Wed Apr 01 21:09:00.505346 2026] [:error] [pid 17856:tid 17862] [client 172.213.8.171:47187] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0Y7D7Idlm5j9frhqQ15QAAAEQ"]
[Wed Apr 01 21:09:01.008913 2026] [:error] [pid 17856:tid 17871] [client 172.213.8.171:45924] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ac0Y7T7Idlm5j9frhqQ16QAAAE0"]
[Wed Apr 01 21:09:01.479665 2026] [:error] [pid 17856:tid 17874] [client 172.213.8.171:47185] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ac0Y7T7Idlm5j9frhqQ16wAAAFA"]
[Wed Apr 01 21:09:01.968631 2026] [:error] [pid 8910:tid 8984] [client 172.213.8.171:49109] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ac0Y7aJZINUcF3tYgExjBAAAARA"]
[Wed Apr 01 21:09:02.443568 2026] [:error] [pid 8909:tid 8959] [client 172.213.8.171:46742] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ac0Y7jvP_a0662gDl6DMqgAAANI"]
[Wed Apr 01 21:09:02.921165 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:45917] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "ac0Y7jvP_a0662gDl6DMsQAAAMg"]
[Wed Apr 01 21:09:03.387753 2026] [:error] [pid 8909:tid 8958] [client 172.213.8.171:47199] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "ac0Y7zvP_a0662gDl6DMtgAAANE"]
[Wed Apr 01 21:09:03.856886 2026] [:error] [pid 8909:tid 8965] [client 172.213.8.171:47958] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "ac0Y7zvP_a0662gDl6DMuQAAANg"]
[Wed Apr 01 21:09:04.334330 2026] [:error] [pid 17856:tid 17872] [client 172.213.8.171:45999] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0Y8D7Idlm5j9frhqQ19QAAAE4"]
[Wed Apr 01 21:09:04.829432 2026] [:error] [pid 8909:tid 8960] [client 172.213.8.171:46768] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0Y8DvP_a0662gDl6DMxQAAANM"]
[Wed Apr 01 21:09:05.397496 2026] [:error] [pid 62559:tid 62578] [client 172.213.8.171:46724] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0Y8S7NKI8IaNKZFIehawAAAVE"]
[Wed Apr 01 21:09:05.872543 2026] [:error] [pid 8909:tid 8945] [client 172.213.8.171:45990] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0Y8TvP_a0662gDl6DM0AAAAMQ"]
[Wed Apr 01 21:09:06.339757 2026] [:error] [pid 17856:tid 17882] [client 172.213.8.171:47201] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ac0Y8j7Idlm5j9frhqQ19wAAAFg"]
[Wed Apr 01 21:09:06.806812 2026] [:error] [pid 8910:tid 8972] [client 172.213.8.171:47982] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "ac0Y8qJZINUcF3tYgExjEAAAAQQ"]
[Wed Apr 01 21:09:07.274703 2026] [:error] [pid 8909:tid 8960] [client 172.213.8.171:45971] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "ac0Y8zvP_a0662gDl6DM1gAAANM"]
[Wed Apr 01 21:09:07.750134 2026] [:error] [pid 8909:tid 8958] [client 172.213.8.171:47227] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "ac0Y8zvP_a0662gDl6DM2QAAANE"]
[Wed Apr 01 21:09:08.233188 2026] [:error] [pid 17856:tid 17871] [client 172.213.8.171:46010] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "ac0Y9D7Idlm5j9frhqQ1_QAAAE0"]
[Wed Apr 01 21:09:08.718266 2026] [:error] [pid 17856:tid 17866] [client 172.213.8.171:47969] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0Y9D7Idlm5j9frhqQ1_wAAAEg"]
[Wed Apr 01 21:09:09.255578 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:47194] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "ac0Y9TvP_a0662gDl6DM3gAAAMg"]
[Wed Apr 01 21:09:09.723815 2026] [:error] [pid 17856:tid 17867] [client 172.213.8.171:45913] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0Y9T7Idlm5j9frhqQ2AwAAAEk"]
[Wed Apr 01 21:09:10.261262 2026] [:error] [pid 62559:tid 62566] [client 172.213.8.171:45983] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0Y9i7NKI8IaNKZFIehegAAAUU"]
[Wed Apr 01 21:09:10.751748 2026] [:error] [pid 8909:tid 8954] [client 172.213.8.171:50308] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0Y9jvP_a0662gDl6DM5gAAAM0"]
[Wed Apr 01 21:09:11.271569 2026] [:error] [pid 17856:tid 17881] [client 172.213.8.171:47215] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0Y9z7Idlm5j9frhqQ2BwAAAFc"]
[Wed Apr 01 21:09:11.750035 2026] [:error] [pid 8910:tid 8982] [client 172.213.8.171:48023] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "ac0Y96JZINUcF3tYgExjKQAAAQ4"]
[Wed Apr 01 21:09:12.244777 2026] [:error] [pid 8909:tid 8941] [client 172.213.8.171:45967] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "ac0Y-DvP_a0662gDl6DM7QAAAMA"]
[Wed Apr 01 21:09:12.713191 2026] [:error] [pid 8909:tid 8955] [client 172.213.8.171:45949] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "ac0Y-DvP_a0662gDl6DM7wAAAM4"]
[Wed Apr 01 21:09:13.202012 2026] [:error] [pid 8909:tid 8951] [client 172.213.8.171:47980] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "ac0Y-TvP_a0662gDl6DM9AAAAMo"]
[Wed Apr 01 21:09:13.696730 2026] [:error] [pid 17856:tid 17870] [client 172.213.8.171:48036] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0Y-T7Idlm5j9frhqQ2EgAAAEw"]
[Wed Apr 01 21:09:14.163232 2026] [:error] [pid 17856:tid 17863] [client 172.213.8.171:50280] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0Y-j7Idlm5j9frhqQ2FgAAAEU"]
[Wed Apr 01 21:09:14.638554 2026] [:error] [pid 8908:tid 8930] [client 172.213.8.171:47971] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0Y-vkmxtJXGnLdvgCLgQAAAJE"]
[Wed Apr 01 21:09:15.116729 2026] [:error] [pid 8909:tid 8950] [client 172.213.8.171:46778] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0Y-zvP_a0662gDl6DM_QAAAMk"]
[Wed Apr 01 21:09:15.609882 2026] [:error] [pid 62559:tid 62564] [client 172.213.8.171:46736] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ac0Y-y7NKI8IaNKZFIehfQAAAUM"]
[Wed Apr 01 21:09:16.081989 2026] [:error] [pid 8910:tid 8974] [client 172.213.8.171:50333] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ac0Y_KJZINUcF3tYgExjOwAAAQY"]
[Wed Apr 01 21:09:16.599794 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:48021] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ac0Y_C7NKI8IaNKZFIehgAAAAUs"]
[Wed Apr 01 21:09:17.065298 2026] [:error] [pid 8995:tid 9010] [client 172.213.8.171:47195] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ac0Y_eonaBjs3qxcRefLcAAAAAw"]
[Wed Apr 01 21:09:17.535207 2026] [:error] [pid 8909:tid 8961] [client 172.213.8.171:50292] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "ac0Y_TvP_a0662gDl6DNDAAAANQ"]
[Wed Apr 01 21:09:18.009363 2026] [:error] [pid 8910:tid 8979] [client 172.213.8.171:47972] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "ac0Y_qJZINUcF3tYgExjRgAAAQs"]
[Wed Apr 01 21:09:18.506043 2026] [:error] [pid 8910:tid 8975] [client 172.213.8.171:45969] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "ac0Y_qJZINUcF3tYgExjSQAAAQc"]
[Wed Apr 01 21:09:18.977689 2026] [:error] [pid 8908:tid 8921] [client 172.213.8.171:47171] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "ac0Y_vkmxtJXGnLdvgCLgwAAAIg"]
[Wed Apr 01 21:09:19.443451 2026] [:error] [pid 8910:tid 8970] [client 172.213.8.171:48009] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0Y_6JZINUcF3tYgExjTgAAAQI"]
[Wed Apr 01 21:09:19.916838 2026] [:error] [pid 62559:tid 62577] [client 172.213.8.171:47209] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luyuc.php"] [unique_id "ac0Y_y7NKI8IaNKZFIehhAAAAVA"]
[Wed Apr 01 21:09:20.393491 2026] [:error] [pid 8909:tid 8948] [client 172.213.8.171:45964] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luyuc.php"] [unique_id "ac0ZADvP_a0662gDl6DNHQAAAMc"]
[Wed Apr 01 21:09:20.886483 2026] [:error] [pid 62559:tid 62573] [client 172.213.8.171:46011] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luyuc.php"] [unique_id "ac0ZAC7NKI8IaNKZFIehhgAAAUw"]
[Wed Apr 01 21:09:21.359337 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:46762] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luyuc.php"] [unique_id "ac0ZATvP_a0662gDl6DNIQAAAMg"]
[Wed Apr 01 21:09:21.872787 2026] [:error] [pid 17856:tid 17873] [client 172.213.8.171:46726] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "ac0ZAT7Idlm5j9frhqQ2LQAAAE8"]
[Wed Apr 01 21:09:22.337552 2026] [:error] [pid 17856:tid 17861] [client 172.213.8.171:45989] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "ac0ZAj7Idlm5j9frhqQ2MgAAAEM"]
[Wed Apr 01 21:09:22.835555 2026] [:error] [pid 8909:tid 8951] [client 172.213.8.171:47178] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "ac0ZAjvP_a0662gDl6DNKAAAAMo"]
[Wed Apr 01 21:09:23.300163 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:48010] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "ac0ZAy7NKI8IaNKZFIehiQAAAUc"]
[Wed Apr 01 21:09:23.792815 2026] [:error] [pid 8995:tid 9020] [client 172.213.8.171:45956] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "ac0ZA-onaBjs3qxcRefLdgAAABY"]
[Wed Apr 01 23:50:58.997864 2026] [:error] [pid 62559:tid 62578] [client 161.178.3.105:64182] [client 161.178.3.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.178.3.105, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ac0-4i7NKI8IaNKZFIcLKQAAAVE"]
[Wed Apr 01 23:50:59.284979 2026] [proxy_fcgi:error] [pid 62559:tid 62578] [client 161.178.3.105:64182] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 03:40:57.104103 2026] [:error] [pid 59201:tid 59274] [client 98.159.37.43:49713] [client 98.159.37.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac10ycAC0Tw8eL6gzZ5QIQAAAIc"]
[Thu Apr 02 04:15:12.400653 2026] [proxy_fcgi:error] [pid 29467:tid 29486] [client 20.250.12.127:65183] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:50.777287 2026] [proxy_fcgi:error] [pid 22673:tid 22764] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:51.044621 2026] [proxy_fcgi:error] [pid 22673:tid 22748] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:51.321153 2026] [proxy_fcgi:error] [pid 22673:tid 22753] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:51.589586 2026] [proxy_fcgi:error] [pid 22673:tid 22763] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:51.862961 2026] [proxy_fcgi:error] [pid 22673:tid 22755] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:52.130714 2026] [proxy_fcgi:error] [pid 22673:tid 22747] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:52.398563 2026] [proxy_fcgi:error] [pid 22673:tid 22761] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:52.667917 2026] [proxy_fcgi:error] [pid 22673:tid 22767] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:52.934718 2026] [proxy_fcgi:error] [pid 22673:tid 22769] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:53.201327 2026] [proxy_fcgi:error] [pid 22673:tid 22758] [client 20.240.235.228:21892] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:50:53.467134 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:21892] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7Ine-GlVDWdWxxwJBKRAAAAIY"]
[Fri Apr 03 03:50:54.017342 2026] [:error] [pid 22672:tid 22728] [client 20.240.235.228:21958] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7InqzrgXkFSOK0fvpUVgAAAEk"]
[Fri Apr 03 03:50:54.550806 2026] [:error] [pid 22672:tid 22739] [client 20.240.235.228:22003] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7InqzrgXkFSOK0fvpUWwAAAFQ"]
[Fri Apr 03 03:50:55.082088 2026] [:error] [pid 22672:tid 22721] [client 20.240.235.228:21971] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7In6zrgXkFSOK0fvpUXQAAAEI"]
[Fri Apr 03 03:50:55.618732 2026] [:error] [pid 22672:tid 22731] [client 20.240.235.228:22002] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7In6zrgXkFSOK0fvpUXwAAAEw"]
[Fri Apr 03 03:50:56.158582 2026] [:error] [pid 22672:tid 22736] [client 20.240.235.228:21968] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7IoKzrgXkFSOK0fvpUYwAAAFE"]
[Fri Apr 03 03:50:56.690741 2026] [:error] [pid 22672:tid 22732] [client 20.240.235.228:21915] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7IoKzrgXkFSOK0fvpUZgAAAE0"]
[Fri Apr 03 03:50:58.249792 2026] [:error] [pid 22673:tid 22766] [client 20.240.235.228:21917] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7Iou-GlVDWdWxxwJBKUQAAAJQ"]
[Fri Apr 03 03:50:58.908074 2026] [:error] [pid 22778:tid 22792] [client 20.240.235.228:22007] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7IovS-q9hkdFqUjq8zuwAAAMc"]
[Fri Apr 03 03:50:59.442852 2026] [:error] [pid 22673:tid 22749] [client 20.240.235.228:21999] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7Io--GlVDWdWxxwJBKVgAAAIM"]
[Fri Apr 03 03:51:00.014982 2026] [:error] [pid 22778:tid 22803] [client 20.240.235.228:7375] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7IpPS-q9hkdFqUjq8zwQAAANI"]
[Fri Apr 03 03:51:00.555577 2026] [:error] [pid 22673:tid 22761] [client 20.240.235.228:21912] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7IpO-GlVDWdWxxwJBKWAAAAI8"]
[Fri Apr 03 03:51:01.098676 2026] [:error] [pid 22778:tid 22799] [client 20.240.235.228:21966] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ac7IpfS-q9hkdFqUjq8zyAAAAM4"]
[Fri Apr 03 03:51:01.626006 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:21975] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ac7IpfS-q9hkdFqUjq8zygAAANQ"]
[Fri Apr 03 03:51:02.201328 2026] [:error] [pid 22673:tid 22747] [client 20.240.235.228:21985] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ac7Ipu-GlVDWdWxxwJBKWgAAAIE"]
[Fri Apr 03 03:51:02.769812 2026] [:error] [pid 22778:tid 22788] [client 20.240.235.228:21990] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ac7IpvS-q9hkdFqUjq8z0AAAAMM"]
[Fri Apr 03 03:51:03.318710 2026] [:error] [pid 22778:tid 22807] [client 20.240.235.228:21939] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "ac7Ip_S-q9hkdFqUjq8z0gAAANY"]
[Fri Apr 03 03:51:03.918075 2026] [:error] [pid 22673:tid 22755] [client 20.240.235.228:21896] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "ac7Ip--GlVDWdWxxwJBKXgAAAIk"]
[Fri Apr 03 03:51:04.469632 2026] [:error] [pid 22671:tid 22698] [client 20.240.235.228:7370] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "ac7IqCRuUnMW7r8hvyYfTQAAAAc"]
[Fri Apr 03 03:51:04.997815 2026] [:error] [pid 22673:tid 22746] [client 20.240.235.228:21902] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1.php"] [unique_id "ac7IqO-GlVDWdWxxwJBKYgAAAIA"]
[Fri Apr 03 03:51:09.790821 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:22000] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "ac7IrfS-q9hkdFqUjq8z7AAAANM"]
[Fri Apr 03 03:51:10.327869 2026] [:error] [pid 22778:tid 22803] [client 20.240.235.228:21910] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "ac7IrvS-q9hkdFqUjq8z8wAAANI"]
[Fri Apr 03 03:51:10.911419 2026] [:error] [pid 22778:tid 22799] [client 20.240.235.228:21908] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "ac7IrvS-q9hkdFqUjq8z9QAAAM4"]
[Fri Apr 03 03:51:11.438675 2026] [:error] [pid 22778:tid 22790] [client 20.240.235.228:21994] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "ac7Ir_S-q9hkdFqUjq8z-wAAAMU"]
[Fri Apr 03 03:51:12.023074 2026] [:error] [pid 22778:tid 22789] [client 20.240.235.228:21992] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "ac7IsPS-q9hkdFqUjq80AQAAAMQ"]
[Fri Apr 03 03:51:12.562277 2026] [:error] [pid 22672:tid 22727] [client 20.240.235.228:22004] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "ac7IsKzrgXkFSOK0fvpUeAAAAEg"]
[Fri Apr 03 03:51:13.118599 2026] [:error] [pid 22673:tid 22754] [client 20.240.235.228:21952] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "ac7Ise-GlVDWdWxxwJBKcQAAAIg"]
[Fri Apr 03 03:51:13.666598 2026] [:error] [pid 22672:tid 22739] [client 20.240.235.228:22001] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "ac7IsazrgXkFSOK0fvpUeQAAAFQ"]
[Fri Apr 03 03:51:14.191202 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:7362] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ac7Isu-GlVDWdWxxwJBKeAAAAIY"]
[Fri Apr 03 03:51:14.726269 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:7368] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ac7IsvS-q9hkdFqUjq80DQAAANQ"]
[Fri Apr 03 03:51:15.292463 2026] [:error] [pid 22672:tid 22738] [client 20.240.235.228:21895] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ac7Is6zrgXkFSOK0fvpUfwAAAFM"]
[Fri Apr 03 03:51:15.883694 2026] [:error] [pid 22673:tid 22747] [client 20.240.235.228:21980] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/24.php"] [unique_id "ac7Is--GlVDWdWxxwJBKewAAAIE"]
[Fri Apr 03 03:51:16.424961 2026] [:error] [pid 22673:tid 22764] [client 20.240.235.228:21991] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ac7ItO-GlVDWdWxxwJBKfAAAAJI"]
[Fri Apr 03 03:51:18.668731 2026] [:error] [pid 22778:tid 22793] [client 20.240.235.228:21898] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ac7ItvS-q9hkdFqUjq80EQAAAMg"]
[Fri Apr 03 03:51:19.344398 2026] [:error] [pid 22778:tid 22794] [client 20.240.235.228:21913] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ac7It_S-q9hkdFqUjq80EwAAAMk"]
[Fri Apr 03 03:51:22.458896 2026] [:error] [pid 22672:tid 22728] [client 20.240.235.228:21962] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ac7IuqzrgXkFSOK0fvpUjQAAAEk"]
[Fri Apr 03 03:51:22.990400 2026] [:error] [pid 22672:tid 22729] [client 20.240.235.228:21904] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac7IuqzrgXkFSOK0fvpUjwAAAEo"]
[Fri Apr 03 03:51:23.578666 2026] [:error] [pid 22672:tid 22727] [client 20.240.235.228:21907] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac7Iu6zrgXkFSOK0fvpUkAAAAEg"]
[Fri Apr 03 03:51:24.105063 2026] [:error] [pid 22672:tid 22722] [client 20.240.235.228:7398] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac7IvKzrgXkFSOK0fvpUkQAAAEM"]
[Fri Apr 03 03:51:25.642602 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:21987] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "ac7IvfS-q9hkdFqUjq80JAAAANQ"]
[Fri Apr 03 03:51:26.182949 2026] [:error] [pid 22672:tid 22735] [client 20.240.235.228:7381] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ac7IvqzrgXkFSOK0fvpUlQAAAFA"]
[Fri Apr 03 03:51:26.722627 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:21919] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ac7Ivu-GlVDWdWxxwJBKjAAAAIY"]
[Fri Apr 03 03:51:27.259392 2026] [:error] [pid 22673:tid 22768] [client 20.240.235.228:21927] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ac7Iv--GlVDWdWxxwJBKkAAAAJY"]
[Fri Apr 03 03:51:27.800753 2026] [:error] [pid 22778:tid 22786] [client 20.240.235.228:21977] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyiiz.php"] [unique_id "ac7Iv_S-q9hkdFqUjq80LgAAAME"]
[Fri Apr 03 03:51:28.351164 2026] [:error] [pid 22673:tid 22761] [client 20.240.235.228:21963] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac7IwO-GlVDWdWxxwJBKlgAAAI8"]
[Fri Apr 03 03:51:28.880642 2026] [:error] [pid 22778:tid 22802] [client 20.240.235.228:21888] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7IwPS-q9hkdFqUjq80NQAAANE"]
[Fri Apr 03 03:51:29.423065 2026] [:error] [pid 22778:tid 22799] [client 20.240.235.228:7365] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7IwfS-q9hkdFqUjq80OQAAAM4"]
[Fri Apr 03 03:51:30.019730 2026] [:error] [pid 22778:tid 22786] [client 20.240.235.228:21954] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7IwvS-q9hkdFqUjq80PgAAAME"]
[Fri Apr 03 03:51:30.571912 2026] [:error] [pid 22778:tid 22796] [client 20.240.235.228:7314] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac7IwvS-q9hkdFqUjq80QQAAAMs"]
[Fri Apr 03 03:51:31.953893 2026] [:error] [pid 22671:tid 22696] [client 20.240.235.228:21961] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac7IwyRuUnMW7r8hvyYfXAAAAAU"]
[Fri Apr 03 03:51:32.488789 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:21989] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac7IxPS-q9hkdFqUjq80SgAAANM"]
[Fri Apr 03 03:51:33.093693 2026] [:error] [pid 22673:tid 22761] [client 20.240.235.228:21951] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ac7Ixe-GlVDWdWxxwJBKmAAAAI8"]
[Fri Apr 03 03:51:33.623691 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:21982] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7IxfS-q9hkdFqUjq80TQAAAMY"]
[Fri Apr 03 03:51:34.156777 2026] [:error] [pid 22672:tid 22729] [client 20.240.235.228:21891] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7IxqzrgXkFSOK0fvpUmwAAAEo"]
[Fri Apr 03 03:51:34.707285 2026] [:error] [pid 22672:tid 22727] [client 20.240.235.228:21945] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7IxqzrgXkFSOK0fvpUnAAAAEg"]
[Fri Apr 03 03:51:35.866542 2026] [:error] [pid 22778:tid 22806] [client 20.240.235.228:21997] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7Ix_S-q9hkdFqUjq80WQAAANU"]
[Fri Apr 03 03:51:36.410669 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:21928] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ac7IyPS-q9hkdFqUjq80WwAAAMI"]
[Fri Apr 03 03:51:36.975224 2026] [:error] [pid 22778:tid 22798] [client 20.240.235.228:22015] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ac7IyPS-q9hkdFqUjq80XgAAAM0"]
[Fri Apr 03 03:51:37.520196 2026] [:error] [pid 22778:tid 22800] [client 20.240.235.228:21974] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ac7IyfS-q9hkdFqUjq80XwAAAM8"]
[Fri Apr 03 03:51:38.068495 2026] [:error] [pid 22671:tid 22710] [client 20.240.235.228:21916] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ac7IyiRuUnMW7r8hvyYfZwAAABM"]
[Fri Apr 03 03:51:38.616012 2026] [:error] [pid 22673:tid 22760] [client 20.240.235.228:7366] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7Iyu-GlVDWdWxxwJBKmQAAAI4"]
[Fri Apr 03 03:51:39.141948 2026] [:error] [pid 22671:tid 22715] [client 20.240.235.228:21923] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7IyyRuUnMW7r8hvyYfagAAABg"]
[Fri Apr 03 03:51:39.777778 2026] [:error] [pid 22778:tid 22798] [client 20.240.235.228:21979] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7Iy_S-q9hkdFqUjq80ZQAAAM0"]
[Fri Apr 03 03:51:40.304674 2026] [:error] [pid 22673:tid 22766] [client 20.240.235.228:21973] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac7IzO-GlVDWdWxxwJBKmwAAAJQ"]
[Fri Apr 03 03:51:40.868567 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:21897] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ac7IzPS-q9hkdFqUjq80aAAAANQ"]
[Fri Apr 03 03:51:41.398931 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:21988] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ac7Ize-GlVDWdWxxwJBKnwAAAIY"]
[Fri Apr 03 03:51:41.933485 2026] [:error] [pid 22672:tid 22728] [client 20.240.235.228:22010] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ac7IzazrgXkFSOK0fvpUpQAAAEk"]
[Fri Apr 03 03:51:42.459759 2026] [:error] [pid 22671:tid 22712] [client 20.240.235.228:21947] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "ac7IziRuUnMW7r8hvyYfbgAAABU"]
[Fri Apr 03 03:51:43.003978 2026] [:error] [pid 22778:tid 22790] [client 20.240.235.228:22012] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ac7Iz_S-q9hkdFqUjq80bgAAAMU"]
[Fri Apr 03 03:51:44.215764 2026] [:error] [pid 22778:tid 22792] [client 20.240.235.228:21967] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ac7I0PS-q9hkdFqUjq80cgAAAMc"]
[Fri Apr 03 03:51:45.537268 2026] [:error] [pid 22778:tid 22788] [client 20.240.235.228:21922] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ac7I0fS-q9hkdFqUjq80dwAAAMM"]
[Fri Apr 03 03:51:46.070184 2026] [:error] [pid 22673:tid 22751] [client 20.240.235.228:7416] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "ac7I0u-GlVDWdWxxwJBKoQAAAIU"]
[Fri Apr 03 03:51:46.636354 2026] [:error] [pid 22672:tid 22738] [client 20.240.235.228:21941] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac7I0qzrgXkFSOK0fvpUrgAAAFM"]
[Fri Apr 03 03:51:47.173219 2026] [:error] [pid 22672:tid 22721] [client 20.240.235.228:21948] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac7I06zrgXkFSOK0fvpUsQAAAEI"]
[Fri Apr 03 03:51:47.698451 2026] [:error] [pid 22778:tid 22799] [client 20.240.235.228:7392] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac7I0_S-q9hkdFqUjq80gwAAAM4"]
[Fri Apr 03 03:51:48.263559 2026] [:error] [pid 22672:tid 22740] [client 20.240.235.228:21996] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ac7I1KzrgXkFSOK0fvpUsgAAAFU"]
[Fri Apr 03 03:51:48.795977 2026] [:error] [pid 22671:tid 22699] [client 20.240.235.228:21909] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ac7I1CRuUnMW7r8hvyYfeQAAAAg"]
[Fri Apr 03 03:51:49.354563 2026] [:error] [pid 22673:tid 22760] [client 20.240.235.228:21960] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ac7I1e-GlVDWdWxxwJBKpQAAAI4"]
[Fri Apr 03 03:51:49.946957 2026] [:error] [pid 22673:tid 22766] [client 20.240.235.228:21956] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ac7I1e-GlVDWdWxxwJBKqAAAAJQ"]
[Fri Apr 03 03:51:50.571280 2026] [:error] [pid 22673:tid 22756] [client 20.240.235.228:21926] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "ac7I1u-GlVDWdWxxwJBKqgAAAIo"]
[Fri Apr 03 03:51:51.133038 2026] [:error] [pid 22673:tid 22750] [client 20.240.235.228:21972] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ac7I1--GlVDWdWxxwJBKrQAAAIQ"]
[Fri Apr 03 03:51:51.683856 2026] [:error] [pid 22778:tid 22796] [client 20.240.235.228:21906] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ac7I1_S-q9hkdFqUjq80iwAAAMs"]
[Fri Apr 03 03:51:52.268655 2026] [:error] [pid 22778:tid 22798] [client 20.240.235.228:21918] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ac7I2PS-q9hkdFqUjq80jgAAAM0"]
[Fri Apr 03 03:51:52.816209 2026] [:error] [pid 22778:tid 22803] [client 20.240.235.228:21978] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ac7I2PS-q9hkdFqUjq80kQAAANI"]
[Fri Apr 03 03:51:53.411738 2026] [proxy_fcgi:error] [pid 22778:tid 22807] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:56.076026 2026] [proxy_fcgi:error] [pid 22778:tid 22793] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:56.377112 2026] [proxy_fcgi:error] [pid 22778:tid 22808] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:56.642980 2026] [proxy_fcgi:error] [pid 22778:tid 22790] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:57.597100 2026] [proxy_fcgi:error] [pid 22778:tid 22795] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:57.862917 2026] [proxy_fcgi:error] [pid 22778:tid 22796] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:58.131395 2026] [proxy_fcgi:error] [pid 22778:tid 22805] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:59.577751 2026] [proxy_fcgi:error] [pid 22778:tid 22803] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:51:59.844152 2026] [proxy_fcgi:error] [pid 22778:tid 22797] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:52:00.228853 2026] [proxy_fcgi:error] [pid 22778:tid 22801] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:52:00.498834 2026] [proxy_fcgi:error] [pid 22778:tid 22809] [client 20.240.235.228:7391] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:52:00.788000 2026] [:error] [pid 22778:tid 22806] [client 20.240.235.228:7391] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "ac7I4PS-q9hkdFqUjq80sAAAANU"]
[Fri Apr 03 03:52:01.333526 2026] [:error] [pid 22671:tid 22708] [client 20.240.235.228:7349] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "ac7I4SRuUnMW7r8hvyYfhwAAABE"]
[Fri Apr 03 03:52:01.890953 2026] [:error] [pid 22673:tid 22761] [client 20.240.235.228:22014] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "ac7I4e-GlVDWdWxxwJBKvgAAAI8"]
[Fri Apr 03 03:52:02.440888 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:21940] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/az.php"] [unique_id "ac7I4vS-q9hkdFqUjq80sgAAANQ"]
[Fri Apr 03 03:52:02.979005 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:21953] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web.php"] [unique_id "ac7I4vS-q9hkdFqUjq80tAAAAMY"]
[Fri Apr 03 03:52:06.676788 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:7408] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web.php"] [unique_id "ac7I5vS-q9hkdFqUjq80wwAAANM"]
[Fri Apr 03 03:52:07.209949 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:7383] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web.php"] [unique_id "ac7I5_S-q9hkdFqUjq80yAAAAMI"]
[Fri Apr 03 03:52:07.750998 2026] [:error] [pid 22672:tid 22743] [client 20.240.235.228:21944] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web.php"] [unique_id "ac7I56zrgXkFSOK0fvpU5AAAAFg"]
[Fri Apr 03 03:52:08.295116 2026] [:error] [pid 22778:tid 22802] [client 20.240.235.228:22005] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7I6PS-q9hkdFqUjq80zAAAANE"]
[Fri Apr 03 03:52:08.854870 2026] [:error] [pid 22672:tid 22732] [client 20.240.235.228:21889] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7I6KzrgXkFSOK0fvpU6QAAAE0"]
[Fri Apr 03 03:52:09.408622 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:22011] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7I6fS-q9hkdFqUjq800QAAANM"]
[Fri Apr 03 03:52:09.994563 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:21914] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7I6fS-q9hkdFqUjq800wAAAMY"]
[Fri Apr 03 03:52:10.543796 2026] [:error] [pid 22673:tid 22755] [client 20.240.235.228:21976] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ac7I6u-GlVDWdWxxwJBK6QAAAIk"]
[Fri Apr 03 03:52:18.102033 2026] [:error] [pid 22778:tid 22794] [client 20.240.235.228:7402] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ac7I8vS-q9hkdFqUjq806gAAAMk"]
[Fri Apr 03 03:52:18.649839 2026] [:error] [pid 22673:tid 22760] [client 20.240.235.228:7387] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ac7I8u-GlVDWdWxxwJBK_AAAAI4"]
[Fri Apr 03 03:52:21.382749 2026] [:error] [pid 22673:tid 22757] [client 20.240.235.228:7382] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp6.php"] [unique_id "ac7I9e-GlVDWdWxxwJBLAwAAAIs"]
[Fri Apr 03 03:52:21.906244 2026] [:error] [pid 22673:tid 22758] [client 20.240.235.228:21901] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ac7I9e-GlVDWdWxxwJBLBQAAAIw"]
[Fri Apr 03 03:52:22.442450 2026] [:error] [pid 22672:tid 22729] [client 20.240.235.228:22006] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ac7I9qzrgXkFSOK0fvpVCgAAAEo"]
[Fri Apr 03 03:52:22.975805 2026] [:error] [pid 22673:tid 22769] [client 20.240.235.228:21925] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ac7I9u-GlVDWdWxxwJBLCwAAAJc"]
[Fri Apr 03 03:52:23.526988 2026] [:error] [pid 22673:tid 22764] [client 20.240.235.228:21984] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/com.php"] [unique_id "ac7I9--GlVDWdWxxwJBLDgAAAJI"]
[Fri Apr 03 03:52:24.065269 2026] [:error] [pid 22673:tid 22750] [client 20.240.235.228:7421] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ac7I-O-GlVDWdWxxwJBLEAAAAIQ"]
[Fri Apr 03 03:52:24.629902 2026] [:error] [pid 22778:tid 22789] [client 20.240.235.228:21931] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ac7I-PS-q9hkdFqUjq809gAAAMQ"]
[Fri Apr 03 03:52:25.161430 2026] [:error] [pid 22673:tid 22755] [client 20.240.235.228:21995] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ac7I-e-GlVDWdWxxwJBLEwAAAIk"]
[Fri Apr 03 03:52:26.729941 2026] [:error] [pid 22671:tid 22712] [client 20.240.235.228:21986] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ac7I-iRuUnMW7r8hvyYfpAAAABU"]
[Fri Apr 03 03:52:27.281177 2026] [:error] [pid 22673:tid 22762] [client 20.240.235.228:21981] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac7I---GlVDWdWxxwJBLFwAAAJA"]
[Fri Apr 03 03:52:27.842619 2026] [:error] [pid 22672:tid 22731] [client 20.240.235.228:21955] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac7I-6zrgXkFSOK0fvpVFgAAAEw"]
[Fri Apr 03 03:52:31.647997 2026] [:error] [pid 22672:tid 22736] [client 20.240.235.228:7403] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac7I_6zrgXkFSOK0fvpVHwAAAFE"]
[Fri Apr 03 03:52:33.193324 2026] [:error] [pid 22778:tid 22796] [client 20.240.235.228:21924] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "ac7JAfS-q9hkdFqUjq81AQAAAMs"]
[Fri Apr 03 03:52:33.751658 2026] [:error] [pid 22778:tid 22792] [client 20.240.235.228:7420] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ac7JAfS-q9hkdFqUjq81BQAAAMc"]
[Fri Apr 03 03:52:34.276778 2026] [:error] [pid 22673:tid 22751] [client 20.240.235.228:7316] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ac7JAu-GlVDWdWxxwJBLIwAAAIU"]
[Fri Apr 03 03:52:34.808832 2026] [:error] [pid 22673:tid 22750] [client 20.240.235.228:7363] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ac7JAu-GlVDWdWxxwJBLJQAAAIQ"]
[Fri Apr 03 03:52:35.472429 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:7307] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "ac7JA--GlVDWdWxxwJBLKQAAAIY"]
[Fri Apr 03 03:52:36.017738 2026] [:error] [pid 22671:tid 22706] [client 20.240.235.228:7407] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7JBCRuUnMW7r8hvyYfswAAAA8"]
[Fri Apr 03 03:52:37.571163 2026] [:error] [pid 22671:tid 22695] [client 20.240.235.228:21903] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7JBSRuUnMW7r8hvyYftgAAAAQ"]
[Fri Apr 03 03:52:38.166720 2026] [:error] [pid 22673:tid 22753] [client 20.240.235.228:21936] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7JBu-GlVDWdWxxwJBLMQAAAIc"]
[Fri Apr 03 03:52:38.752914 2026] [:error] [pid 22673:tid 22764] [client 20.240.235.228:7389] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7JBu-GlVDWdWxxwJBLNQAAAJI"]
[Fri Apr 03 03:52:39.291427 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:7367] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ac7JB_S-q9hkdFqUjq81CQAAAMI"]
[Fri Apr 03 03:52:39.876478 2026] [:error] [pid 22672:tid 22727] [client 20.240.235.228:21969] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ac7JB6zrgXkFSOK0fvpVKgAAAEg"]
[Fri Apr 03 03:52:40.442480 2026] [:error] [pid 22673:tid 22763] [client 20.240.235.228:7374] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ac7JCO-GlVDWdWxxwJBLPgAAAJE"]
[Fri Apr 03 03:52:43.325496 2026] [:error] [pid 22778:tid 22785] [client 20.240.235.228:7311] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ac7JC_S-q9hkdFqUjq81EgAAAMA"]
[Fri Apr 03 03:52:44.545474 2026] [:error] [pid 22778:tid 22795] [client 20.240.235.228:7361] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac7JDPS-q9hkdFqUjq81HwAAAMo"]
[Fri Apr 03 03:52:45.900904 2026] [:error] [pid 22778:tid 22800] [client 20.240.235.228:7379] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac7JDfS-q9hkdFqUjq81JAAAAM8"]
[Fri Apr 03 03:52:46.427270 2026] [:error] [pid 22778:tid 22801] [client 20.240.235.228:21959] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac7JDvS-q9hkdFqUjq81JQAAANA"]
[Fri Apr 03 03:52:46.973318 2026] [:error] [pid 22672:tid 22734] [client 20.240.235.228:7318] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ac7JDqzrgXkFSOK0fvpVLgAAAE8"]
[Fri Apr 03 03:52:47.513223 2026] [:error] [pid 22673:tid 22765] [client 20.240.235.228:21998] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac7JD--GlVDWdWxxwJBLVQAAAJM"]
[Fri Apr 03 03:52:48.079427 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:21932] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac7JEPS-q9hkdFqUjq81KgAAAMI"]
[Fri Apr 03 03:52:48.610227 2026] [:error] [pid 22673:tid 22747] [client 20.240.235.228:7399] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac7JEO-GlVDWdWxxwJBLWwAAAIE"]
[Fri Apr 03 03:52:49.151968 2026] [:error] [pid 22671:tid 22692] [client 20.240.235.228:7300] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/to.php"] [unique_id "ac7JESRuUnMW7r8hvyYfxAAAAAE"]
[Fri Apr 03 03:52:49.691229 2026] [:error] [pid 22778:tid 22808] [client 20.240.235.228:21970] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ac7JEfS-q9hkdFqUjq81LwAAANc"]
[Fri Apr 03 03:52:50.233350 2026] [:error] [pid 22671:tid 22704] [client 20.240.235.228:7298] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ac7JEiRuUnMW7r8hvyYfxQAAAA0"]
[Fri Apr 03 03:52:50.770632 2026] [:error] [pid 22673:tid 22758] [client 20.240.235.228:7297] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ac7JEu-GlVDWdWxxwJBLZAAAAIw"]
[Fri Apr 03 03:52:51.352005 2026] [:error] [pid 22778:tid 22806] [client 20.240.235.228:7396] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wqqs.php"] [unique_id "ac7JE_S-q9hkdFqUjq81NgAAANU"]
[Fri Apr 03 03:52:51.883149 2026] [:error] [pid 22673:tid 22753] [client 20.240.235.228:7357] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ac7JE--GlVDWdWxxwJBLZwAAAIc"]
[Fri Apr 03 03:52:52.413811 2026] [:error] [pid 22673:tid 22756] [client 20.240.235.228:7352] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ac7JFO-GlVDWdWxxwJBLaAAAAIo"]
[Fri Apr 03 03:52:52.938751 2026] [:error] [pid 22672:tid 22743] [client 20.240.235.228:7369] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ac7JFKzrgXkFSOK0fvpVNwAAAFg"]
[Fri Apr 03 03:52:53.471828 2026] [:error] [pid 22778:tid 22798] [client 20.240.235.228:21899] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ac7JFfS-q9hkdFqUjq81PAAAAM0"]
[Fri Apr 03 03:52:54.010814 2026] [:error] [pid 22778:tid 22801] [client 20.240.235.228:7413] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ac7JFvS-q9hkdFqUjq81PQAAANA"]
[Fri Apr 03 03:52:57.582315 2026] [:error] [pid 22673:tid 22760] [client 20.240.235.228:7263] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ac7JGe-GlVDWdWxxwJBLdgAAAI4"]
[Fri Apr 03 03:52:58.201212 2026] [:error] [pid 22672:tid 22734] [client 20.240.235.228:21946] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ac7JGqzrgXkFSOK0fvpVOgAAAE8"]
[Fri Apr 03 03:52:58.739280 2026] [:error] [pid 22778:tid 22809] [client 20.240.235.228:21957] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ac7JGvS-q9hkdFqUjq81TQAAANg"]
[Fri Apr 03 03:52:59.272806 2026] [:error] [pid 22673:tid 22747] [client 20.240.235.228:7331] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "ac7JG--GlVDWdWxxwJBLeAAAAIE"]
[Fri Apr 03 03:52:59.797478 2026] [:error] [pid 22671:tid 22703] [client 20.240.235.228:7409] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aifa.php"] [unique_id "ac7JGyRuUnMW7r8hvyYf0gAAAAw"]
[Fri Apr 03 03:53:00.389121 2026] [proxy_fcgi:error] [pid 22673:tid 22757] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:00.655629 2026] [proxy_fcgi:error] [pid 22673:tid 22756] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:00.922520 2026] [proxy_fcgi:error] [pid 22673:tid 22766] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:01.188681 2026] [proxy_fcgi:error] [pid 22673:tid 22765] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:01.455732 2026] [proxy_fcgi:error] [pid 22673:tid 22770] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:01.986673 2026] [proxy_fcgi:error] [pid 22673:tid 22764] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:02.252827 2026] [proxy_fcgi:error] [pid 22673:tid 22748] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:02.518741 2026] [proxy_fcgi:error] [pid 22673:tid 22757] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:02.787442 2026] [proxy_fcgi:error] [pid 22673:tid 22767] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:03.054690 2026] [proxy_fcgi:error] [pid 22673:tid 22766] [client 20.240.235.228:7385] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:53:03.316858 2026] [:error] [pid 22673:tid 22765] [client 20.240.235.228:7385] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "ac7JH--GlVDWdWxxwJBLkAAAAJM"]
[Fri Apr 03 03:53:03.889081 2026] [:error] [pid 22673:tid 22769] [client 20.240.235.228:7373] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "ac7JH--GlVDWdWxxwJBLkQAAAJc"]
[Fri Apr 03 03:53:05.460960 2026] [:error] [pid 22673:tid 22760] [client 20.240.235.228:7369] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "ac7JIe-GlVDWdWxxwJBLlAAAAI4"]
[Fri Apr 03 03:53:06.000123 2026] [:error] [pid 22778:tid 22790] [client 20.240.235.228:7410] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "ac7JIfS-q9hkdFqUjq81YQAAAMU"]
[Fri Apr 03 03:53:06.580328 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:7322] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ac7JIvS-q9hkdFqUjq81YgAAAMY"]
[Fri Apr 03 03:53:07.133197 2026] [:error] [pid 22673:tid 22767] [client 20.240.235.228:7411] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ac7JI--GlVDWdWxxwJBLmAAAAJU"]
[Fri Apr 03 03:53:07.667395 2026] [:error] [pid 22671:tid 22709] [client 20.240.235.228:7406] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ac7JIyRuUnMW7r8hvyYf2wAAABI"]
[Fri Apr 03 03:53:08.209668 2026] [:error] [pid 22671:tid 22703] [client 20.240.235.228:21965] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ac7JJCRuUnMW7r8hvyYf3gAAAAw"]
[Fri Apr 03 03:53:08.780452 2026] [:error] [pid 22671:tid 22715] [client 20.240.235.228:21938] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "ac7JJCRuUnMW7r8hvyYf3wAAABg"]
[Fri Apr 03 03:53:09.375301 2026] [:error] [pid 22671:tid 22701] [client 20.240.235.228:7390] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "ac7JJSRuUnMW7r8hvyYf4QAAAAo"]
[Fri Apr 03 03:53:09.904172 2026] [:error] [pid 22778:tid 22802] [client 20.240.235.228:7353] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "ac7JJfS-q9hkdFqUjq81ZgAAANE"]
[Fri Apr 03 03:53:10.473843 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:7376] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "ac7JJvS-q9hkdFqUjq81aAAAAMY"]
[Fri Apr 03 03:53:11.016897 2026] [:error] [pid 22778:tid 22797] [client 20.240.235.228:7371] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac7JJ_S-q9hkdFqUjq81bQAAAMw"]
[Fri Apr 03 03:53:11.562105 2026] [:error] [pid 22671:tid 22700] [client 20.240.235.228:21921] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7JJyRuUnMW7r8hvyYf5AAAAAk"]
[Fri Apr 03 03:53:12.115049 2026] [:error] [pid 22673:tid 22757] [client 20.240.235.228:21920] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ac7JKO-GlVDWdWxxwJBLoQAAAIs"]
[Fri Apr 03 03:53:12.689147 2026] [:error] [pid 22671:tid 22692] [client 20.240.235.228:7401] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ac7JKCRuUnMW7r8hvyYf5wAAAAE"]
[Fri Apr 03 03:53:13.230865 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:7405] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ac7JKfS-q9hkdFqUjq81dQAAANQ"]
[Fri Apr 03 03:53:13.788200 2026] [:error] [pid 22778:tid 22785] [client 20.240.235.228:21911] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock.php"] [unique_id "ac7JKfS-q9hkdFqUjq81eQAAAMA"]
[Fri Apr 03 03:53:14.326750 2026] [:error] [pid 22671:tid 22712] [client 20.240.235.228:7377] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock.php"] [unique_id "ac7JKiRuUnMW7r8hvyYf6gAAABU"]
[Fri Apr 03 03:53:14.889083 2026] [:error] [pid 22673:tid 22769] [client 20.240.235.228:7328] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock.php"] [unique_id "ac7JKu-GlVDWdWxxwJBLowAAAJc"]
[Fri Apr 03 03:53:15.458856 2026] [:error] [pid 22778:tid 22785] [client 20.240.235.228:7386] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock.php"] [unique_id "ac7JK_S-q9hkdFqUjq81iAAAAMA"]
[Fri Apr 03 03:53:16.002689 2026] [:error] [pid 22671:tid 22703] [client 20.240.235.228:7341] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "ac7JLCRuUnMW7r8hvyYf7QAAAAw"]
[Fri Apr 03 03:53:16.532450 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:22008] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "ac7JLPS-q9hkdFqUjq81igAAANM"]
[Fri Apr 03 03:53:17.079562 2026] [:error] [pid 22671:tid 22697] [client 20.240.235.228:7356] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "ac7JLSRuUnMW7r8hvyYf8gAAAAY"]
[Fri Apr 03 03:53:17.684359 2026] [:error] [pid 22672:tid 22729] [client 20.240.235.228:22013] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail.php"] [unique_id "ac7JLazrgXkFSOK0fvpVTgAAAEo"]
[Fri Apr 03 03:53:18.212711 2026] [:error] [pid 22672:tid 22737] [client 20.240.235.228:21900] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/marijuana.php"] [unique_id "ac7JLqzrgXkFSOK0fvpVUQAAAFI"]
[Fri Apr 03 03:53:18.814150 2026] [:error] [pid 22672:tid 22719] [client 20.240.235.228:7334] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/marijuana.php"] [unique_id "ac7JLqzrgXkFSOK0fvpVUgAAAEA"]
[Fri Apr 03 03:53:19.350754 2026] [:error] [pid 22672:tid 22742] [client 20.240.235.228:22009] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/marijuana.php"] [unique_id "ac7JL6zrgXkFSOK0fvpVVQAAAFc"]
[Fri Apr 03 03:53:20.036494 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:7233] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/marijuana.php"] [unique_id "ac7JMPS-q9hkdFqUjq81lgAAAMY"]
[Fri Apr 03 03:53:20.579717 2026] [:error] [pid 22671:tid 22692] [client 20.240.235.228:7340] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac7JMCRuUnMW7r8hvyYf9gAAAAE"]
[Fri Apr 03 03:53:21.136873 2026] [:error] [pid 22673:tid 22752] [client 20.240.235.228:7308] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac7JMe-GlVDWdWxxwJBLtAAAAIY"]
[Fri Apr 03 03:53:21.735287 2026] [:error] [pid 22673:tid 22765] [client 20.240.235.228:21942] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac7JMe-GlVDWdWxxwJBLuAAAAJM"]
[Fri Apr 03 03:53:22.280160 2026] [:error] [pid 22778:tid 22807] [client 20.240.235.228:7313] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ac7JMvS-q9hkdFqUjq81nAAAANY"]
[Fri Apr 03 03:53:25.860081 2026] [:error] [pid 22671:tid 22700] [client 20.240.235.228:7306] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ac7JNSRuUnMW7r8hvyYf_gAAAAk"]
[Fri Apr 03 03:53:26.396064 2026] [:error] [pid 22671:tid 22712] [client 20.240.235.228:7337] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ac7JNiRuUnMW7r8hvyYgAAAAABU"]
[Fri Apr 03 03:53:26.970017 2026] [:error] [pid 22778:tid 22801] [client 20.240.235.228:7266] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ac7JNvS-q9hkdFqUjq81tgAAANA"]
[Fri Apr 03 03:53:27.515696 2026] [:error] [pid 22778:tid 22786] [client 20.240.235.228:21929] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ac7JN_S-q9hkdFqUjq81vgAAAME"]
[Fri Apr 03 03:53:28.649516 2026] [:error] [pid 22672:tid 22725] [client 20.240.235.228:7254] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ac7JOKzrgXkFSOK0fvpVZQAAAEY"]
[Fri Apr 03 03:53:33.205276 2026] [:error] [pid 22673:tid 22748] [client 20.240.235.228:7325] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ac7JPe-GlVDWdWxxwJBL0AAAAII"]
[Fri Apr 03 03:53:33.738081 2026] [:error] [pid 22673:tid 22753] [client 20.240.235.228:7309] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ac7JPe-GlVDWdWxxwJBL0wAAAIc"]
[Fri Apr 03 03:53:34.332215 2026] [:error] [pid 22778:tid 22785] [client 20.240.235.228:7292] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ac7JPvS-q9hkdFqUjq815wAAAMA"]
[Fri Apr 03 03:53:34.857760 2026] [:error] [pid 22671:tid 22697] [client 20.240.235.228:7419] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filesss.php"] [unique_id "ac7JPiRuUnMW7r8hvyYgNQAAAAY"]
[Fri Apr 03 03:53:35.395183 2026] [:error] [pid 22671:tid 22711] [client 20.240.235.228:7326] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filesss.php"] [unique_id "ac7JPyRuUnMW7r8hvyYgNwAAABQ"]
[Fri Apr 03 03:53:36.945457 2026] [:error] [pid 22673:tid 22754] [client 20.240.235.228:7277] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filesss.php"] [unique_id "ac7JQO-GlVDWdWxxwJBL4gAAAIg"]
[Fri Apr 03 03:53:37.600883 2026] [:error] [pid 22671:tid 22699] [client 20.240.235.228:7394] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filesss.php"] [unique_id "ac7JQSRuUnMW7r8hvyYgPwAAAAg"]
[Fri Apr 03 03:53:38.134100 2026] [:error] [pid 22671:tid 22694] [client 20.240.235.228:21937] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ac7JQiRuUnMW7r8hvyYgQAAAAAM"]
[Fri Apr 03 03:53:38.671654 2026] [:error] [pid 22778:tid 22797] [client 20.240.235.228:7317] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ac7JQvS-q9hkdFqUjq818AAAAMw"]
[Fri Apr 03 03:53:39.199203 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:21993] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ac7JQ_S-q9hkdFqUjq818wAAAMI"]
[Fri Apr 03 03:53:39.813463 2026] [:error] [pid 22778:tid 22790] [client 20.240.235.228:7338] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ac7JQ_S-q9hkdFqUjq819QAAAMU"]
[Fri Apr 03 03:53:40.401202 2026] [:error] [pid 22671:tid 22697] [client 20.240.235.228:7359] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admir.php"] [unique_id "ac7JRCRuUnMW7r8hvyYgRAAAAAY"]
[Fri Apr 03 03:53:40.934525 2026] [:error] [pid 22673:tid 22767] [client 20.240.235.228:7299] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admir.php"] [unique_id "ac7JRO-GlVDWdWxxwJBL6AAAAJU"]
[Fri Apr 03 03:53:41.473952 2026] [:error] [pid 22672:tid 22733] [client 20.240.235.228:7247] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admir.php"] [unique_id "ac7JRazrgXkFSOK0fvpVdwAAAE4"]
[Fri Apr 03 03:53:43.154309 2026] [:error] [pid 22778:tid 22806] [client 20.240.235.228:7351] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admir.php"] [unique_id "ac7JR_S-q9hkdFqUjq81-gAAANU"]
[Fri Apr 03 03:53:43.731678 2026] [:error] [pid 22673:tid 22763] [client 20.240.235.228:7358] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj.php"] [unique_id "ac7JR--GlVDWdWxxwJBL7wAAAJE"]
[Fri Apr 03 03:53:44.276810 2026] [:error] [pid 22672:tid 22743] [client 20.240.235.228:21935] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj.php"] [unique_id "ac7JSKzrgXkFSOK0fvpVfgAAAFg"]
[Fri Apr 03 03:53:44.836447 2026] [:error] [pid 22778:tid 22794] [client 20.240.235.228:7319] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj.php"] [unique_id "ac7JSPS-q9hkdFqUjq81_wAAAMk"]
[Fri Apr 03 03:53:45.436004 2026] [:error] [pid 22672:tid 22741] [client 20.240.235.228:7335] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj.php"] [unique_id "ac7JSazrgXkFSOK0fvpVfwAAAFY"]
[Fri Apr 03 03:53:45.965584 2026] [:error] [pid 22778:tid 22803] [client 20.240.235.228:21933] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "ac7JSfS-q9hkdFqUjq82BAAAANI"]
[Fri Apr 03 03:53:46.563574 2026] [:error] [pid 22778:tid 22789] [client 20.240.235.228:21950] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "ac7JSvS-q9hkdFqUjq82CAAAAMQ"]
[Fri Apr 03 03:53:47.114607 2026] [:error] [pid 22673:tid 22762] [client 20.240.235.228:7412] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "ac7JS--GlVDWdWxxwJBL8wAAAJA"]
[Fri Apr 03 03:53:47.653493 2026] [:error] [pid 22673:tid 22751] [client 20.240.235.228:7418] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "ac7JS--GlVDWdWxxwJBL9AAAAIU"]
[Fri Apr 03 03:53:48.234106 2026] [:error] [pid 22778:tid 22792] [client 20.240.235.228:7255] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filer.php"] [unique_id "ac7JTPS-q9hkdFqUjq82EwAAAMc"]
[Fri Apr 03 03:53:48.856661 2026] [:error] [pid 22778:tid 22807] [client 20.240.235.228:7342] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filer.php"] [unique_id "ac7JTPS-q9hkdFqUjq82FAAAANY"]
[Fri Apr 03 03:53:49.388035 2026] [:error] [pid 22671:tid 22692] [client 20.240.235.228:7336] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filer.php"] [unique_id "ac7JTSRuUnMW7r8hvyYgSwAAAAE"]
[Fri Apr 03 03:53:49.994194 2026] [:error] [pid 22778:tid 22804] [client 20.240.235.228:7177] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filer.php"] [unique_id "ac7JTfS-q9hkdFqUjq82GgAAANM"]
[Fri Apr 03 03:53:50.533197 2026] [:error] [pid 22778:tid 22800] [client 20.240.235.228:7397] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "ac7JTvS-q9hkdFqUjq82GwAAAM8"]
[Fri Apr 03 03:53:51.088824 2026] [:error] [pid 22778:tid 22802] [client 20.240.235.228:7330] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "ac7JT_S-q9hkdFqUjq82HgAAANE"]
[Fri Apr 03 03:53:51.621295 2026] [:error] [pid 22671:tid 22709] [client 20.240.235.228:7235] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "ac7JTyRuUnMW7r8hvyYgTAAAABI"]
[Fri Apr 03 03:53:52.161597 2026] [:error] [pid 22778:tid 22788] [client 20.240.235.228:7400] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lites.php"] [unique_id "ac7JUPS-q9hkdFqUjq82JAAAAMM"]
[Fri Apr 03 03:53:52.737677 2026] [:error] [pid 22778:tid 22791] [client 20.240.235.228:21905] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "ac7JUPS-q9hkdFqUjq82JgAAAMY"]
[Fri Apr 03 03:53:53.285154 2026] [:error] [pid 22778:tid 22798] [client 20.240.235.228:7384] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "ac7JUfS-q9hkdFqUjq82KQAAAM0"]
[Fri Apr 03 03:53:53.823415 2026] [:error] [pid 22778:tid 22795] [client 20.240.235.228:7414] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "ac7JUfS-q9hkdFqUjq82LgAAAMo"]
[Fri Apr 03 03:53:54.365455 2026] [:error] [pid 22778:tid 22787] [client 20.240.235.228:7343] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "ac7JUvS-q9hkdFqUjq82MQAAAMI"]
[Fri Apr 03 03:53:54.919902 2026] [:error] [pid 22778:tid 22803] [client 20.240.235.228:7258] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/he.php"] [unique_id "ac7JUvS-q9hkdFqUjq82NAAAANI"]
[Fri Apr 03 03:53:55.491664 2026] [:error] [pid 22778:tid 22789] [client 20.240.235.228:7348] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/he.php"] [unique_id "ac7JU_S-q9hkdFqUjq82NgAAAMQ"]
[Fri Apr 03 03:53:56.028988 2026] [:error] [pid 22778:tid 22805] [client 20.240.235.228:7383] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/he.php"] [unique_id "ac7JVPS-q9hkdFqUjq82OQAAANQ"]
[Fri Apr 03 03:53:56.565929 2026] [:error] [pid 22778:tid 22799] [client 20.240.235.228:21930] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/he.php"] [unique_id "ac7JVPS-q9hkdFqUjq82PQAAAM4"]
[Fri Apr 03 03:53:57.096583 2026] [:error] [pid 22778:tid 22793] [client 20.240.235.228:7388] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aves.php"] [unique_id "ac7JVfS-q9hkdFqUjq82PwAAAMg"]
[Fri Apr 03 03:53:57.634175 2026] [:error] [pid 22673:tid 22767] [client 20.240.235.228:7271] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aves.php"] [unique_id "ac7JVe-GlVDWdWxxwJBL-AAAAJU"]
[Fri Apr 03 03:53:58.177403 2026] [:error] [pid 22673:tid 22746] [client 20.240.235.228:7333] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aves.php"] [unique_id "ac7JVu-GlVDWdWxxwJBL-QAAAIA"]
[Fri Apr 03 03:53:58.729405 2026] [:error] [pid 22671:tid 22697] [client 20.240.235.228:7232] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aves.php"] [unique_id "ac7JViRuUnMW7r8hvyYgUgAAAAY"]
[Fri Apr 03 03:53:59.340440 2026] [:error] [pid 22673:tid 22756] [client 20.240.235.228:7364] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gorila.php"] [unique_id "ac7JV--GlVDWdWxxwJBL-wAAAIo"]
[Fri Apr 03 03:54:00.924207 2026] [:error] [pid 22673:tid 22748] [client 20.240.235.228:7393] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gorila.php"] [unique_id "ac7JWO-GlVDWdWxxwJBL_AAAAII"]
[Fri Apr 03 03:54:02.460722 2026] [:error] [pid 22671:tid 22714] [client 20.240.235.228:7270] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gorila.php"] [unique_id "ac7JWiRuUnMW7r8hvyYgWwAAABc"]
[Fri Apr 03 03:54:03.020822 2026] [proxy_fcgi:error] [pid 22671:tid 22697] [client 20.240.235.228:7285] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:54:03.288443 2026] [proxy_fcgi:error] [pid 22671:tid 22711] [client 20.240.235.228:7285] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:54:03.553837 2026] [proxy_fcgi:error] [pid 22671:tid 22713] [client 20.240.235.228:7285] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 03:54:03.819502 2026] [proxy_fcgi:error] [pid 22671:tid 22704] [client 20.240.235.228:7285] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 06:09:45.166350 2026] [proxy_fcgi:error] [pid 22673:tid 22762] [client 20.63.60.10:22941] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 16:17:39.628710 2026] [:error] [pid 40562:tid 40582] [client 173.239.218.43:22813] [client 173.239.218.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac93ozfFMXuP9zvqCeoiAAAAAZE"]
[Sat Apr 04 17:54:16.251700 2026] [:error] [pid 2459:tid 2555] [client 45.131.195.81:49549] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDfyAefyCmu4LR_PlqdTQAAAJc"]
[Sun Apr 05 06:13:34.477814 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:34.719750 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:34.979913 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:35.241489 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:35.484352 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:35.976095 2026] [proxy_fcgi:error] [pid 30921:tid 30944] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:36.230553 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:36.477684 2026] [proxy_fcgi:error] [pid 30921:tid 30931] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:36.720214 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:37.268441 2026] [proxy_fcgi:error] [pid 30921:tid 30945] [client 68.221.68.133:14261] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:13:37.507330 2026] [:error] [pid 30921:tid 30926] [client 68.221.68.133:14261] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adGNEWFGQVn8Q0ueB252SQAAAQM"]
[Sun Apr 05 06:13:38.488339 2026] [:error] [pid 45409:tid 45432] [client 68.221.68.133:12363] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adGNEtHt_Oyw03gjCNjY9QAAANU"]
[Sun Apr 05 06:13:39.291017 2026] [:error] [pid 45304:tid 45357] [client 68.221.68.133:32705] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adGNEw5jnqDKKovdRkkM6QAAAE0"]
[Sun Apr 05 06:13:40.238266 2026] [:error] [pid 45303:tid 45340] [client 68.221.68.133:31698] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adGNFLboQ9eViZ4hdnmLMAAAABc"]
[Sun Apr 05 06:13:41.196888 2026] [:error] [pid 45409:tid 45429] [client 68.221.68.133:11565] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adGNFdHt_Oyw03gjCNjY-wAAANI"]
[Sun Apr 05 06:13:42.811773 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:12632] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adGNFmFGQVn8Q0ueB252VgAAARg"]
[Sun Apr 05 06:13:45.567747 2026] [:error] [pid 45303:tid 45325] [client 68.221.68.133:2754] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adGNGbboQ9eViZ4hdnmLPQAAAAg"]
[Sun Apr 05 06:13:49.552740 2026] [:error] [pid 30921:tid 30934] [client 68.221.68.133:12651] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adGNHWFGQVn8Q0ueB252bQAAAQs"]
[Sun Apr 05 06:13:51.237649 2026] [:error] [pid 30921:tid 30936] [client 68.221.68.133:11606] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adGNH2FGQVn8Q0ueB252fQAAAQ0"]
[Sun Apr 05 06:13:52.567658 2026] [:error] [pid 45305:tid 45395] [client 68.221.68.133:33022] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adGNIOjDQjr7aWhjflAowAAAAJg"]
[Sun Apr 05 06:13:54.116158 2026] [:error] [pid 45305:tid 45392] [client 68.221.68.133:27606] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adGNIujDQjr7aWhjflAowwAAAJU"]
[Sun Apr 05 06:13:54.930997 2026] [:error] [pid 30921:tid 30927] [client 68.221.68.133:13206] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adGNImFGQVn8Q0ueB252jgAAAQQ"]
[Sun Apr 05 06:13:55.835370 2026] [:error] [pid 45305:tid 45383] [client 68.221.68.133:32714] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGNI-jDQjr7aWhjflAoyAAAAIw"]
[Sun Apr 05 06:13:56.636110 2026] [:error] [pid 45305:tid 45382] [client 68.221.68.133:32961] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGNJOjDQjr7aWhjflAozgAAAIs"]
[Sun Apr 05 06:13:57.737216 2026] [:error] [pid 45303:tid 45339] [client 68.221.68.133:32706] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGNJbboQ9eViZ4hdnmLTAAAABY"]
[Sun Apr 05 06:13:58.436562 2026] [:error] [pid 45303:tid 45326] [client 68.221.68.133:15008] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGNJrboQ9eViZ4hdnmLTgAAAAk"]
[Sun Apr 05 06:13:59.232275 2026] [:error] [pid 45305:tid 45379] [client 68.221.68.133:23043] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adGNJ-jDQjr7aWhjflAo1AAAAIg"]
[Sun Apr 05 06:14:00.249199 2026] [:error] [pid 45305:tid 45395] [client 68.221.68.133:23057] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adGNKOjDQjr7aWhjflAo3AAAAJg"]
[Sun Apr 05 06:14:01.292900 2026] [:error] [pid 45305:tid 45376] [client 68.221.68.133:12913] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adGNKejDQjr7aWhjflAo4AAAAIU"]
[Sun Apr 05 06:14:02.536593 2026] [:error] [pid 45305:tid 45381] [client 68.221.68.133:23082] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adGNKujDQjr7aWhjflAo6QAAAIo"]
[Sun Apr 05 06:14:03.604620 2026] [:error] [pid 45409:tid 45433] [client 68.221.68.133:12600] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGNK9Ht_Oyw03gjCNjZHgAAANY"]
[Sun Apr 05 06:14:04.680550 2026] [:error] [pid 45409:tid 45431] [client 68.221.68.133:17394] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGNLNHt_Oyw03gjCNjZIAAAANQ"]
[Sun Apr 05 06:14:05.356846 2026] [:error] [pid 45305:tid 45382] [client 68.221.68.133:32999] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGNLejDQjr7aWhjflAo-gAAAIs"]
[Sun Apr 05 06:14:06.590297 2026] [:error] [pid 30921:tid 30926] [client 68.221.68.133:14992] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGNLmFGQVn8Q0ueB252rQAAAQM"]
[Sun Apr 05 06:14:07.365044 2026] [:error] [pid 30921:tid 30937] [client 68.221.68.133:12891] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adGNL2FGQVn8Q0ueB252sgAAAQ4"]
[Sun Apr 05 06:14:08.001393 2026] [:error] [pid 45304:tid 45347] [client 68.221.68.133:15024] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adGNMA5jnqDKKovdRkkNDwAAAEM"]
[Sun Apr 05 06:14:08.835057 2026] [:error] [pid 45409:tid 45420] [client 68.221.68.133:38363] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adGNMNHt_Oyw03gjCNjZJwAAAMk"]
[Sun Apr 05 06:14:10.196586 2026] [:error] [pid 45304:tid 45357] [client 68.221.68.133:27598] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adGNMg5jnqDKKovdRkkNEQAAAE0"]
[Sun Apr 05 06:14:11.538162 2026] [:error] [pid 30921:tid 30943] [client 68.221.68.133:14988] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGNM2FGQVn8Q0ueB252xgAAARQ"]
[Sun Apr 05 06:14:12.787428 2026] [:error] [pid 45303:tid 45320] [client 68.221.68.133:15032] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGNNLboQ9eViZ4hdnmLZwAAAAM"]
[Sun Apr 05 06:14:13.509327 2026] [:error] [pid 30921:tid 30926] [client 68.221.68.133:32972] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGNNWFGQVn8Q0ueB252zAAAAQM"]
[Sun Apr 05 06:14:14.265214 2026] [:error] [pid 45409:tid 45422] [client 68.221.68.133:12602] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adGNNtHt_Oyw03gjCNjZOgAAAMs"]
[Sun Apr 05 06:14:15.415378 2026] [:error] [pid 45409:tid 45415] [client 68.221.68.133:11612] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGNN9Ht_Oyw03gjCNjZPgAAAMQ"]
[Sun Apr 05 06:14:17.359183 2026] [:error] [pid 45303:tid 45330] [client 68.221.68.133:38372] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGNObboQ9eViZ4hdnmLcAAAAA0"]
[Sun Apr 05 06:14:18.229935 2026] [:error] [pid 45409:tid 45419] [client 68.221.68.133:2759] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGNOtHt_Oyw03gjCNjZSgAAAMg"]
[Sun Apr 05 06:14:19.580173 2026] [:error] [pid 45305:tid 45387] [client 68.221.68.133:32984] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adGNO-jDQjr7aWhjflApIwAAAJA"]
[Sun Apr 05 06:14:20.637086 2026] [:error] [pid 45409:tid 45412] [client 68.221.68.133:32748] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adGNPNHt_Oyw03gjCNjZUQAAAME"]
[Sun Apr 05 06:14:21.661821 2026] [:error] [pid 45409:tid 45435] [client 68.221.68.133:14993] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adGNPdHt_Oyw03gjCNjZVgAAANg"]
[Sun Apr 05 06:14:23.296823 2026] [:error] [pid 45305:tid 45378] [client 68.221.68.133:33000] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adGNP-jDQjr7aWhjflApMQAAAIc"]
[Sun Apr 05 06:14:24.729956 2026] [:error] [pid 45409:tid 45435] [client 68.221.68.133:23058] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adGNQNHt_Oyw03gjCNjZYgAAANg"]
[Sun Apr 05 06:14:25.783674 2026] [:error] [pid 30921:tid 30930] [client 68.221.68.133:32962] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGNQWFGQVn8Q0ueB2527AAAAQc"]
[Sun Apr 05 06:14:26.765279 2026] [:error] [pid 45409:tid 45411] [client 68.221.68.133:27593] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGNQtHt_Oyw03gjCNjZaQAAAMA"]
[Sun Apr 05 06:14:28.010881 2026] [:error] [pid 45305:tid 45379] [client 68.221.68.133:17352] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGNROjDQjr7aWhjflApPgAAAIg"]
[Sun Apr 05 06:14:29.761533 2026] [:error] [pid 45409:tid 45423] [client 68.221.68.133:12876] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adGNRdHt_Oyw03gjCNjZdQAAAMw"]
[Sun Apr 05 06:14:31.185198 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:10868] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adGNR-jDQjr7aWhjflApVQAAAII"]
[Sun Apr 05 06:14:32.539960 2026] [:error] [pid 45305:tid 45382] [client 68.221.68.133:11639] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adGNSOjDQjr7aWhjflApYQAAAIs"]
[Sun Apr 05 06:14:34.234065 2026] [:error] [pid 45304:tid 45346] [client 68.221.68.133:15007] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adGNSg5jnqDKKovdRkkNHgAAAEI"]
[Sun Apr 05 06:14:35.420438 2026] [:error] [pid 30921:tid 30928] [client 68.221.68.133:14246] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adGNS2FGQVn8Q0ueB2529QAAAQU"]
[Sun Apr 05 06:14:36.580882 2026] [:error] [pid 30921:tid 30923] [client 68.221.68.133:17377] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adGNTGFGQVn8Q0ueB252-wAAAQA"]
[Sun Apr 05 06:14:37.659560 2026] [proxy_fcgi:error] [pid 30921:tid 30935] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:37.906790 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:38.149451 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:38.396143 2026] [proxy_fcgi:error] [pid 30921:tid 30925] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:38.639570 2026] [proxy_fcgi:error] [pid 30921:tid 30944] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:38.886990 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:39.144468 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:39.387071 2026] [proxy_fcgi:error] [pid 30921:tid 30930] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:39.632008 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:39.874395 2026] [proxy_fcgi:error] [pid 30921:tid 30933] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:40.117153 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 68.221.68.133:27590] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:14:40.394633 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:27590] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adGNUGFGQVn8Q0ueB253DAAAARg"]
[Sun Apr 05 06:14:41.329494 2026] [:error] [pid 45409:tid 45418] [client 68.221.68.133:31691] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adGNUdHt_Oyw03gjCNjZlAAAAMc"]
[Sun Apr 05 06:14:42.359290 2026] [:error] [pid 45305:tid 45386] [client 68.221.68.133:12562] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adGNUujDQjr7aWhjflApiwAAAI8"]
[Sun Apr 05 06:14:43.088642 2026] [:error] [pid 45305:tid 45389] [client 68.221.68.133:13197] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adGNU-jDQjr7aWhjflApkwAAAJI"]
[Sun Apr 05 06:14:44.135443 2026] [:error] [pid 45409:tid 45418] [client 68.221.68.133:10847] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adGNVNHt_Oyw03gjCNjZngAAAMc"]
[Sun Apr 05 06:14:44.884718 2026] [:error] [pid 45303:tid 45335] [client 68.221.68.133:23062] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adGNVLboQ9eViZ4hdnmLlwAAABI"]
[Sun Apr 05 06:14:45.973611 2026] [:error] [pid 45303:tid 45341] [client 68.221.68.133:12878] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adGNVbboQ9eViZ4hdnmLngAAABg"]
[Sun Apr 05 06:14:46.757157 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:23100] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adGNVmFGQVn8Q0ueB253GgAAARg"]
[Sun Apr 05 06:14:47.983694 2026] [:error] [pid 45409:tid 45430] [client 68.221.68.133:17366] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGNV9Ht_Oyw03gjCNjZqQAAANM"]
[Sun Apr 05 06:14:48.486231 2026] [:error] [pid 45409:tid 45434] [client 68.221.68.133:27613] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGNWNHt_Oyw03gjCNjZqwAAANc"]
[Sun Apr 05 06:14:49.308260 2026] [:error] [pid 45305:tid 45393] [client 68.221.68.133:11602] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGNWejDQjr7aWhjflApvAAAAJY"]
[Sun Apr 05 06:14:49.915846 2026] [:error] [pid 45409:tid 45420] [client 68.221.68.133:12872] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGNWdHt_Oyw03gjCNjZrwAAAMk"]
[Sun Apr 05 06:14:50.726665 2026] [:error] [pid 30921:tid 30935] [client 68.221.68.133:31717] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adGNWmFGQVn8Q0ueB253KgAAAQw"]
[Sun Apr 05 06:14:51.508931 2026] [:error] [pid 45304:tid 45352] [client 68.221.68.133:37637] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adGNWw5jnqDKKovdRkkNJQAAAEg"]
[Sun Apr 05 06:14:52.842496 2026] [:error] [pid 30921:tid 30943] [client 68.221.68.133:12581] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adGNXGFGQVn8Q0ueB253MgAAARQ"]
[Sun Apr 05 06:14:53.402346 2026] [:error] [pid 45303:tid 45319] [client 68.221.68.133:32738] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adGNXbboQ9eViZ4hdnmLsAAAAAI"]
[Sun Apr 05 06:14:54.233412 2026] [:error] [pid 45303:tid 45335] [client 68.221.68.133:32967] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adGNXrboQ9eViZ4hdnmLtgAAABI"]
[Sun Apr 05 06:14:55.154367 2026] [:error] [pid 45304:tid 45358] [client 68.221.68.133:17370] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adGNXw5jnqDKKovdRkkNKgAAAE4"]
[Sun Apr 05 06:14:57.228293 2026] [:error] [pid 45304:tid 45350] [client 68.221.68.133:31731] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adGNYQ5jnqDKKovdRkkNMQAAAEY"]
[Sun Apr 05 06:14:59.238997 2026] [:error] [pid 45305:tid 45380] [client 68.221.68.133:37678] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adGNY-jDQjr7aWhjflAp2wAAAIk"]
[Sun Apr 05 06:15:01.876899 2026] [:error] [pid 30921:tid 30928] [client 68.221.68.133:14981] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGNZWFGQVn8Q0ueB253QQAAAQU"]
[Sun Apr 05 06:15:05.010430 2026] [:error] [pid 45303:tid 45321] [client 68.221.68.133:17390] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGNabboQ9eViZ4hdnmL5wAAAAQ"]
[Sun Apr 05 06:15:07.309816 2026] [:error] [pid 45304:tid 45350] [client 68.221.68.133:11585] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGNaw5jnqDKKovdRkkNUQAAAEY"]
[Sun Apr 05 06:15:08.535980 2026] [:error] [pid 30921:tid 30931] [client 68.221.68.133:33069] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adGNbGFGQVn8Q0ueB253VAAAAQg"]
[Sun Apr 05 06:15:09.898308 2026] [:error] [pid 45303:tid 45317] [client 68.221.68.133:32974] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adGNbbboQ9eViZ4hdnmL8QAAAAA"]
[Sun Apr 05 06:15:11.870164 2026] [:error] [pid 45305:tid 45386] [client 68.221.68.133:12578] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adGNb-jDQjr7aWhjflAp6wAAAI8"]
[Sun Apr 05 06:15:13.879339 2026] [:error] [pid 45305:tid 45371] [client 68.221.68.133:12604] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adGNcejDQjr7aWhjflAp9gAAAIA"]
[Sun Apr 05 06:15:15.280871 2026] [:error] [pid 30921:tid 30926] [client 68.221.68.133:58014] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adGNc2FGQVn8Q0ueB253aAAAAQM"]
[Sun Apr 05 06:15:16.447427 2026] [:error] [pid 45303:tid 45333] [client 68.221.68.133:13209] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adGNdLboQ9eViZ4hdnmL_wAAABA"]
[Sun Apr 05 06:15:17.253119 2026] [:error] [pid 45409:tid 45421] [client 68.221.68.133:13238] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adGNddHt_Oyw03gjCNjZ6wAAAMo"]
[Sun Apr 05 06:15:18.146526 2026] [:error] [pid 45409:tid 45411] [client 68.221.68.133:10871] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adGNdtHt_Oyw03gjCNjZ8wAAAMA"]
[Sun Apr 05 06:15:19.839198 2026] [:error] [pid 45305:tid 45380] [client 68.221.68.133:33018] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adGNd-jDQjr7aWhjflAqBQAAAIk"]
[Sun Apr 05 06:15:20.624798 2026] [:error] [pid 30921:tid 30928] [client 68.221.68.133:15039] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adGNeGFGQVn8Q0ueB253dwAAAQU"]
[Sun Apr 05 06:15:21.230793 2026] [:error] [pid 30921:tid 30944] [client 68.221.68.133:33073] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adGNeWFGQVn8Q0ueB253egAAARU"]
[Sun Apr 05 06:15:21.805792 2026] [:error] [pid 30921:tid 30933] [client 68.221.68.133:57988] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adGNeWFGQVn8Q0ueB253fQAAAQo"]
[Sun Apr 05 06:15:22.334229 2026] [:error] [pid 30921:tid 30931] [client 68.221.68.133:10860] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adGNemFGQVn8Q0ueB253ggAAAQg"]
[Sun Apr 05 06:15:23.219456 2026] [:error] [pid 45304:tid 45354] [client 68.221.68.133:31707] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNew5jnqDKKovdRkkNcgAAAEo"]
[Sun Apr 05 06:15:23.927764 2026] [:error] [pid 45305:tid 45391] [client 68.221.68.133:33081] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNe-jDQjr7aWhjflAqEwAAAJQ"]
[Sun Apr 05 06:15:24.717076 2026] [:error] [pid 45409:tid 45411] [client 68.221.68.133:15039] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNfNHt_Oyw03gjCNjZ9wAAAMA"]
[Sun Apr 05 06:15:25.781596 2026] [:error] [pid 45305:tid 45376] [client 68.221.68.133:31713] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNfejDQjr7aWhjflAqHwAAAIU"]
[Sun Apr 05 06:15:26.584492 2026] [:error] [pid 45305:tid 45375] [client 68.221.68.133:12894] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adGNfujDQjr7aWhjflAqJwAAAIQ"]
[Sun Apr 05 06:15:27.161280 2026] [:error] [pid 45304:tid 45366] [client 68.221.68.133:11615] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adGNfw5jnqDKKovdRkkNewAAAFY"]
[Sun Apr 05 06:15:28.834570 2026] [:error] [pid 45304:tid 45349] [client 68.221.68.133:12901] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adGNgA5jnqDKKovdRkkNfgAAAEU"]
[Sun Apr 05 06:15:31.751996 2026] [:error] [pid 45409:tid 45431] [client 68.221.68.133:23102] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adGNg9Ht_Oyw03gjCNjZ_QAAANQ"]
[Sun Apr 05 06:15:33.806751 2026] [:error] [pid 45305:tid 45394] [client 68.221.68.133:38396] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGNhejDQjr7aWhjflAqRQAAAJc"]
[Sun Apr 05 06:15:35.850164 2026] [:error] [pid 45409:tid 45432] [client 68.221.68.133:37692] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGNh9Ht_Oyw03gjCNjaBgAAANU"]
[Sun Apr 05 06:15:37.138294 2026] [:error] [pid 45305:tid 45390] [client 68.221.68.133:23054] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGNiejDQjr7aWhjflAqUQAAAJM"]
[Sun Apr 05 06:15:38.417425 2026] [:error] [pid 45303:tid 45321] [client 68.221.68.133:58017] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGNirboQ9eViZ4hdnmMFQAAAAQ"]
[Sun Apr 05 06:15:39.474975 2026] [:error] [pid 45303:tid 45332] [client 68.221.68.133:12915] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGNi7boQ9eViZ4hdnmMHAAAAA8"]
[Sun Apr 05 06:15:40.091033 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:40.337982 2026] [proxy_fcgi:error] [pid 45305:tid 45378] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:40.581708 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:40.850560 2026] [proxy_fcgi:error] [pid 45305:tid 45388] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:41.354652 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:41.609445 2026] [proxy_fcgi:error] [pid 45305:tid 45376] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:41.852247 2026] [proxy_fcgi:error] [pid 45305:tid 45374] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:42.094459 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:42.338214 2026] [proxy_fcgi:error] [pid 45305:tid 45393] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:42.580377 2026] [proxy_fcgi:error] [pid 45305:tid 45387] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:42.842484 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 68.221.68.133:12869] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:15:43.082081 2026] [:error] [pid 45305:tid 45381] [client 68.221.68.133:12869] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adGNj-jDQjr7aWhjflAqcAAAAIo"]
[Sun Apr 05 06:15:44.002153 2026] [:error] [pid 45303:tid 45340] [client 68.221.68.133:12548] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adGNkLboQ9eViZ4hdnmMJAAAABc"]
[Sun Apr 05 06:15:45.261661 2026] [:error] [pid 45409:tid 45411] [client 68.221.68.133:31703] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adGNkdHt_Oyw03gjCNjaGAAAAMA"]
[Sun Apr 05 06:15:46.458305 2026] [:error] [pid 30921:tid 30945] [client 68.221.68.133:37674] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adGNkmFGQVn8Q0ueB253ywAAARY"]
[Sun Apr 05 06:15:47.468903 2026] [:error] [pid 45303:tid 45334] [client 68.221.68.133:12924] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "adGNk7boQ9eViZ4hdnmMKAAAABE"]
[Sun Apr 05 06:15:48.573746 2026] [:error] [pid 45305:tid 45386] [client 68.221.68.133:37632] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "adGNlOjDQjr7aWhjflAqhAAAAI8"]
[Sun Apr 05 06:15:49.992703 2026] [:error] [pid 45305:tid 45378] [client 68.221.68.133:58024] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "adGNlejDQjr7aWhjflAqjwAAAIc"]
[Sun Apr 05 06:15:50.952341 2026] [:error] [pid 45303:tid 45326] [client 68.221.68.133:32719] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "adGNlrboQ9eViZ4hdnmMLQAAAAk"]
[Sun Apr 05 06:15:51.977596 2026] [:error] [pid 45305:tid 45394] [client 68.221.68.133:11632] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adGNl-jDQjr7aWhjflAqmgAAAJc"]
[Sun Apr 05 06:15:54.028777 2026] [:error] [pid 45303:tid 45331] [client 68.221.68.133:27592] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adGNmrboQ9eViZ4hdnmMMQAAAA4"]
[Sun Apr 05 06:15:55.587521 2026] [:error] [pid 30921:tid 30943] [client 68.221.68.133:32762] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adGNm2FGQVn8Q0ueB2532AAAARQ"]
[Sun Apr 05 06:15:57.682142 2026] [:error] [pid 45409:tid 45418] [client 68.221.68.133:33058] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adGNndHt_Oyw03gjCNjaOAAAAMc"]
[Sun Apr 05 06:15:58.640806 2026] [:error] [pid 45303:tid 45333] [client 68.221.68.133:15010] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adGNnrboQ9eViZ4hdnmMPgAAABA"]
[Sun Apr 05 06:15:59.811837 2026] [:error] [pid 45409:tid 45429] [client 68.221.68.133:23059] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adGNn9Ht_Oyw03gjCNjaPAAAANI"]
[Sun Apr 05 06:16:01.372901 2026] [:error] [pid 45305:tid 45380] [client 68.221.68.133:31714] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adGNoejDQjr7aWhjflAqqwAAAIk"]
[Sun Apr 05 06:16:02.223326 2026] [:error] [pid 45303:tid 45339] [client 68.221.68.133:32725] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adGNorboQ9eViZ4hdnmMRwAAABY"]
[Sun Apr 05 06:16:03.659831 2026] [:error] [pid 45304:tid 45367] [client 68.221.68.133:11605] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNow5jnqDKKovdRkkNngAAAFc"]
[Sun Apr 05 06:16:04.981190 2026] [:error] [pid 30921:tid 30941] [client 68.221.68.133:23069] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNpGFGQVn8Q0ueB2539gAAARI"]
[Sun Apr 05 06:16:05.733809 2026] [:error] [pid 45409:tid 45434] [client 68.221.68.133:32720] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNpdHt_Oyw03gjCNjaQwAAANc"]
[Sun Apr 05 06:16:06.645102 2026] [:error] [pid 45303:tid 45317] [client 68.221.68.133:33033] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adGNprboQ9eViZ4hdnmMTAAAAAA"]
[Sun Apr 05 06:16:07.598375 2026] [:error] [pid 45409:tid 45429] [client 68.221.68.133:17367] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adGNp9Ht_Oyw03gjCNjaRwAAANI"]
[Sun Apr 05 06:16:08.869854 2026] [:error] [pid 45303:tid 45340] [client 68.221.68.133:12925] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adGNqLboQ9eViZ4hdnmMVwAAABc"]
[Sun Apr 05 06:16:09.989469 2026] [:error] [pid 45409:tid 45421] [client 68.221.68.133:32992] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adGNqdHt_Oyw03gjCNjaTQAAAMo"]
[Sun Apr 05 06:16:11.740821 2026] [:error] [pid 45409:tid 45416] [client 68.221.68.133:10838] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adGNq9Ht_Oyw03gjCNjaUwAAAMU"]
[Sun Apr 05 06:16:12.911374 2026] [:error] [pid 45305:tid 45376] [client 68.221.68.133:10844] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adGNrOjDQjr7aWhjflAqxAAAAIU"]
[Sun Apr 05 06:16:15.326629 2026] [:error] [pid 45409:tid 45417] [client 68.221.68.133:12564] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adGNr9Ht_Oyw03gjCNjaWAAAAMY"]
[Sun Apr 05 06:16:19.022406 2026] [:error] [pid 45305:tid 45372] [client 68.221.68.133:17378] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adGNs-jDQjr7aWhjflAq2gAAAIE"]
[Sun Apr 05 06:16:21.465658 2026] [:error] [pid 45409:tid 45417] [client 68.221.68.133:58029] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adGNtdHt_Oyw03gjCNjajAAAAMY"]
[Sun Apr 05 06:16:22.572319 2026] [:error] [pid 45305:tid 45376] [client 68.221.68.133:32973] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGNtujDQjr7aWhjflAq8wAAAIU"]
[Sun Apr 05 06:16:23.733471 2026] [:error] [pid 30921:tid 30935] [client 68.221.68.133:58037] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGNt2FGQVn8Q0ueB254KQAAAQw"]
[Sun Apr 05 06:16:24.676726 2026] [:error] [pid 45409:tid 45414] [client 68.221.68.133:12354] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGNuNHt_Oyw03gjCNjakwAAAMM"]
[Sun Apr 05 06:16:25.967041 2026] [:error] [pid 45303:tid 45335] [client 68.221.68.133:12613] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGNubboQ9eViZ4hdnmMfQAAABI"]
[Sun Apr 05 06:16:26.970035 2026] [:error] [pid 45305:tid 45383] [client 68.221.68.133:14208] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adGNuujDQjr7aWhjflArCQAAAIw"]
[Sun Apr 05 06:16:28.719924 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:12666] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adGNvGFGQVn8Q0ueB254PgAAARg"]
[Sun Apr 05 06:16:29.881017 2026] [:error] [pid 45303:tid 45327] [client 68.221.68.133:14213] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adGNvbboQ9eViZ4hdnmMggAAAAo"]
[Sun Apr 05 06:16:30.904613 2026] [:error] [pid 45409:tid 45418] [client 68.221.68.133:25834] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adGNvtHt_Oyw03gjCNjaowAAAMc"]
[Sun Apr 05 06:16:32.539701 2026] [:error] [pid 45303:tid 45329] [client 68.221.68.133:14241] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adGNwLboQ9eViZ4hdnmMhwAAAAw"]
[Sun Apr 05 06:16:33.619287 2026] [:error] [pid 45409:tid 45417] [client 68.221.68.133:13189] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adGNwdHt_Oyw03gjCNjatwAAAMY"]
[Sun Apr 05 06:16:36.150646 2026] [:error] [pid 45304:tid 45362] [client 68.221.68.133:36404] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adGNxA5jnqDKKovdRkkNtwAAAFI"]
[Sun Apr 05 06:16:37.812548 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:39295] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adGNxejDQjr7aWhjflArQAAAAII"]
[Sun Apr 05 06:16:39.299189 2026] [:error] [pid 45409:tid 45414] [client 68.221.68.133:30246] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adGNx9Ht_Oyw03gjCNjazQAAAMM"]
[Sun Apr 05 06:16:40.962169 2026] [:error] [pid 45409:tid 45413] [client 68.221.68.133:13729] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adGNyNHt_Oyw03gjCNja0gAAAMI"]
[Sun Apr 05 06:16:42.791803 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:43.035404 2026] [proxy_fcgi:error] [pid 45409:tid 45423] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:43.278722 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:43.521456 2026] [proxy_fcgi:error] [pid 45409:tid 45424] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:43.777813 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:45.335420 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:45.585267 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:45.833031 2026] [proxy_fcgi:error] [pid 45409:tid 45429] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:46.083380 2026] [proxy_fcgi:error] [pid 45409:tid 45418] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:46.326883 2026] [proxy_fcgi:error] [pid 45409:tid 45430] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:46.569891 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 68.221.68.133:13725] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 06:16:46.814052 2026] [:error] [pid 45409:tid 45415] [client 68.221.68.133:13725] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adGNztHt_Oyw03gjCNja9AAAAMQ"]
[Sun Apr 05 06:16:47.925175 2026] [:error] [pid 30921:tid 30930] [client 68.221.68.133:12354] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adGNz2FGQVn8Q0ueB254aQAAAQc"]
[Sun Apr 05 06:16:49.738825 2026] [:error] [pid 45409:tid 45430] [client 68.221.68.133:19475] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adGN0dHt_Oyw03gjCNjbCQAAANM"]
[Sun Apr 05 06:16:50.725644 2026] [:error] [pid 45305:tid 45374] [client 68.221.68.133:13453] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adGN0ujDQjr7aWhjflArdwAAAIM"]
[Sun Apr 05 06:16:52.206132 2026] [:error] [pid 45303:tid 45339] [client 68.221.68.133:31753] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "adGN1LboQ9eViZ4hdnmMpAAAABY"]
[Sun Apr 05 06:16:53.339043 2026] [:error] [pid 30921:tid 30931] [client 68.221.68.133:5498] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "adGN1WFGQVn8Q0ueB254eAAAAQg"]
[Sun Apr 05 06:16:54.236305 2026] [:error] [pid 45304:tid 45366] [client 68.221.68.133:9574] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "adGN1g5jnqDKKovdRkkNywAAAFY"]
[Sun Apr 05 06:16:55.190471 2026] [:error] [pid 30921:tid 30946] [client 68.221.68.133:11270] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "adGN12FGQVn8Q0ueB254hAAAARc"]
[Sun Apr 05 06:16:56.406896 2026] [:error] [pid 45305:tid 45382] [client 68.221.68.133:43163] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adGN2OjDQjr7aWhjflArgAAAAIs"]
[Sun Apr 05 06:16:57.294618 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:13127] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adGN2ejDQjr7aWhjflArgQAAAII"]
[Sun Apr 05 06:16:58.080734 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:10609] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adGN2mFGQVn8Q0ueB254igAAARg"]
[Sun Apr 05 06:16:58.879563 2026] [:error] [pid 45409:tid 45428] [client 68.221.68.133:13148] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adGN2tHt_Oyw03gjCNjbKwAAANE"]
[Sun Apr 05 06:17:00.181101 2026] [:error] [pid 45305:tid 45390] [client 68.221.68.133:15744] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adGN3OjDQjr7aWhjflArjQAAAJM"]
[Sun Apr 05 06:17:01.228785 2026] [:error] [pid 45305:tid 45377] [client 68.221.68.133:10598] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adGN3ejDQjr7aWhjflArkgAAAIY"]
[Sun Apr 05 06:17:02.322667 2026] [:error] [pid 45305:tid 45391] [client 68.221.68.133:56241] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adGN3ujDQjr7aWhjflArnAAAAJQ"]
[Sun Apr 05 06:17:03.082681 2026] [:error] [pid 45304:tid 45348] [client 68.221.68.133:25235] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adGN3w5jnqDKKovdRkkN0wAAAEQ"]
[Sun Apr 05 06:17:04.164283 2026] [:error] [pid 45409:tid 45419] [client 68.221.68.133:59716] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adGN4NHt_Oyw03gjCNjbQgAAAMg"]
[Sun Apr 05 06:17:05.222071 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:16295] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adGN4ejDQjr7aWhjflArpQAAAII"]
[Sun Apr 05 06:17:05.956375 2026] [:error] [pid 30921:tid 30946] [client 68.221.68.133:22655] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adGN4WFGQVn8Q0ueB254lQAAARc"]
[Sun Apr 05 06:17:06.971637 2026] [:error] [pid 45304:tid 45367] [client 68.221.68.133:30138] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adGN4g5jnqDKKovdRkkN2AAAAFc"]
[Sun Apr 05 06:17:07.674212 2026] [:error] [pid 45409:tid 45422] [client 68.221.68.133:35800] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adGN49Ht_Oyw03gjCNjbUQAAAMs"]
[Sun Apr 05 06:17:08.504207 2026] [:error] [pid 45409:tid 45435] [client 68.221.68.133:13802] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adGN5NHt_Oyw03gjCNjbVQAAANg"]
[Sun Apr 05 06:17:09.251013 2026] [:error] [pid 45304:tid 45347] [client 68.221.68.133:34645] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adGN5Q5jnqDKKovdRkkN3gAAAEM"]
[Sun Apr 05 06:17:09.858375 2026] [:error] [pid 45304:tid 45349] [client 68.221.68.133:19124] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adGN5Q5jnqDKKovdRkkN4AAAAEU"]
[Sun Apr 05 06:17:11.327422 2026] [:error] [pid 45305:tid 45384] [client 68.221.68.133:13966] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adGN5-jDQjr7aWhjflArwQAAAI0"]
[Sun Apr 05 06:17:12.508456 2026] [:error] [pid 30921:tid 30944] [client 68.221.68.133:16884] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adGN6GFGQVn8Q0ueB254ogAAARU"]
[Sun Apr 05 06:17:13.885327 2026] [:error] [pid 45303:tid 45317] [client 68.221.68.133:16010] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adGN6bboQ9eViZ4hdnmMvAAAAAA"]
[Sun Apr 05 06:17:15.412608 2026] [:error] [pid 45305:tid 45374] [client 68.221.68.133:9278] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adGN6-jDQjr7aWhjflAr1QAAAIM"]
[Sun Apr 05 06:17:16.471416 2026] [:error] [pid 45304:tid 45362] [client 68.221.68.133:16832] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adGN7A5jnqDKKovdRkkN5QAAAFI"]
[Sun Apr 05 06:17:17.581732 2026] [:error] [pid 45409:tid 45427] [client 68.221.68.133:12136] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adGN7dHt_Oyw03gjCNjbaQAAANA"]
[Sun Apr 05 06:17:19.922811 2026] [:error] [pid 45305:tid 45389] [client 68.221.68.133:17888] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adGN7-jDQjr7aWhjflAr6wAAAJI"]
[Sun Apr 05 06:17:23.049419 2026] [:error] [pid 45304:tid 45365] [client 68.221.68.133:16018] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adGN8w5jnqDKKovdRkkN7gAAAFU"]
[Sun Apr 05 09:06:01.341292 2026] [:error] [pid 45409:tid 45433] [client 20.199.97.195:6625] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG1edHt_Oyw03gjCNg3mAAAANY"]
[Sun Apr 05 09:06:03.180496 2026] [:error] [pid 45305:tid 45391] [client 20.199.97.195:33048] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG1e-jDQjr7aWhjflCs0gAAAJQ"]
[Sun Apr 05 09:06:05.893759 2026] [:error] [pid 45409:tid 45415] [client 20.199.97.195:33027] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG1fdHt_Oyw03gjCNg3nwAAAMQ"]
[Sun Apr 05 09:06:07.476935 2026] [:error] [pid 30921:tid 30944] [client 20.199.97.195:6792] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG1f2FGQVn8Q0ueB267RAAAARU"]
[Sun Apr 05 10:44:34.835680 2026] [proxy_fcgi:error] [pid 45303:tid 45321] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:35.086695 2026] [proxy_fcgi:error] [pid 45303:tid 45317] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:35.326033 2026] [proxy_fcgi:error] [pid 45303:tid 45318] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:35.577432 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:35.818601 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:36.073883 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:36.313747 2026] [proxy_fcgi:error] [pid 45303:tid 45337] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:36.567276 2026] [proxy_fcgi:error] [pid 45303:tid 45326] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:36.807471 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 51.107.75.125:34508] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:44:37.050480 2026] [:error] [pid 45303:tid 45325] [client 51.107.75.125:34508] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHMlbboQ9eViZ4hdnnlCAAAAAg"]
[Sun Apr 05 10:44:40.330685 2026] [:error] [pid 30921:tid 30937] [client 51.107.75.125:18990] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHMmGFGQVn8Q0ueB27nQAAAAQ4"]
[Sun Apr 05 10:44:47.581274 2026] [:error] [pid 45303:tid 45318] [client 51.107.75.125:12240] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHMn7boQ9eViZ4hdnnlEgAAAAE"]
[Sun Apr 05 10:44:50.184030 2026] [:error] [pid 45305:tid 45390] [client 51.107.75.125:37451] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHMoujDQjr7aWhjflD_TAAAAJM"]
[Sun Apr 05 10:44:52.253560 2026] [:error] [pid 45303:tid 45329] [client 51.107.75.125:33492] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHMpLboQ9eViZ4hdnnlGAAAAAw"]
[Sun Apr 05 10:44:56.523379 2026] [:error] [pid 45305:tid 45384] [client 51.107.75.125:33478] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHMqOjDQjr7aWhjflD_YwAAAI0"]
[Sun Apr 05 10:44:57.950780 2026] [:error] [pid 45409:tid 45412] [client 51.107.75.125:24335] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHMqdHt_Oyw03gjCNhyHgAAAME"]
[Sun Apr 05 10:44:59.599509 2026] [:error] [pid 45305:tid 45390] [client 51.107.75.125:18966] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHMq-jDQjr7aWhjflD_bwAAAJM"]
[Sun Apr 05 10:45:00.702074 2026] [:error] [pid 30921:tid 30944] [client 51.107.75.125:12230] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHMrGFGQVn8Q0ueB27ngQAAARU"]
[Sun Apr 05 10:45:02.132256 2026] [:error] [pid 45409:tid 45411] [client 51.107.75.125:18968] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHMrtHt_Oyw03gjCNhyJwAAAMA"]
[Sun Apr 05 10:45:05.022885 2026] [:error] [pid 45303:tid 45325] [client 51.107.75.125:33485] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHMsbboQ9eViZ4hdnnlLQAAAAg"]
[Sun Apr 05 10:45:06.153355 2026] [:error] [pid 45409:tid 45415] [client 51.107.75.125:24278] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHMstHt_Oyw03gjCNhyLQAAAMQ"]
[Sun Apr 05 10:45:07.778761 2026] [:error] [pid 45305:tid 45391] [client 51.107.75.125:24279] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHMs-jDQjr7aWhjflD_oAAAAJQ"]
[Sun Apr 05 10:45:09.870733 2026] [:error] [pid 45303:tid 45328] [client 51.107.75.125:34533] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHMtbboQ9eViZ4hdnnlMwAAAAs"]
[Sun Apr 05 10:45:12.727730 2026] [:error] [pid 45305:tid 45377] [client 51.107.75.125:12277] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHMuOjDQjr7aWhjflD_twAAAIY"]
[Sun Apr 05 10:45:15.556894 2026] [:error] [pid 45304:tid 45346] [client 51.107.75.125:24356] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHMuw5jnqDKKovdRklYPQAAAEI"]
[Sun Apr 05 10:45:20.120811 2026] [:error] [pid 30921:tid 30937] [client 51.107.75.125:24281] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHMwGFGQVn8Q0ueB27noQAAAQ4"]
[Sun Apr 05 10:45:21.842526 2026] [:error] [pid 45303:tid 45322] [client 51.107.75.125:57119] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHMwbboQ9eViZ4hdnnlQwAAAAU"]
[Sun Apr 05 10:45:24.146660 2026] [:error] [pid 45303:tid 45334] [client 51.107.75.125:1245] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHMxLboQ9eViZ4hdnnlRgAAABE"]
[Sun Apr 05 10:45:25.018907 2026] [:error] [pid 45305:tid 45376] [client 51.107.75.125:34558] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHMxejDQjr7aWhjflD_4QAAAIU"]
[Sun Apr 05 10:45:48.912883 2026] [:error] [pid 45303:tid 45338] [client 51.107.75.125:24375] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "adHM3LboQ9eViZ4hdnnlkAAAABU"]
[Sun Apr 05 10:45:50.766682 2026] [:error] [pid 30921:tid 30937] [client 51.107.75.125:12281] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "adHM3mFGQVn8Q0ueB27oMwAAAQ4"]
[Sun Apr 05 10:45:53.093496 2026] [:error] [pid 45409:tid 45423] [client 51.107.75.125:57114] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "adHM4dHt_Oyw03gjCNhywwAAAMw"]
[Sun Apr 05 10:45:56.000797 2026] [:error] [pid 45305:tid 45373] [client 51.107.75.125:57133] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "adHM4-jDQjr7aWhjflAAHgAAAII"]
[Sun Apr 05 10:46:21.623758 2026] [:error] [pid 45305:tid 45395] [client 51.107.75.125:19002] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHM_ejDQjr7aWhjflAApgAAAJg"]
[Sun Apr 05 10:46:27.481106 2026] [:error] [pid 45409:tid 45432] [client 51.107.75.125:36224] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHNA9Ht_Oyw03gjCNhzCwAAANU"]
[Sun Apr 05 10:46:32.227640 2026] [:error] [pid 45305:tid 45380] [client 51.107.75.125:24346] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adHNCOjDQjr7aWhjflAAxgAAAIk"]
[Sun Apr 05 10:46:33.339689 2026] [:error] [pid 45409:tid 45419] [client 51.107.75.125:34528] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adHNCdHt_Oyw03gjCNhzPgAAAMg"]
[Sun Apr 05 10:46:36.908385 2026] [:error] [pid 45305:tid 45387] [client 51.107.75.125:57146] [client 51.107.75.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adHNDOjDQjr7aWhjflAA4gAAAJA"]
[Sun Apr 05 10:46:44.623458 2026] [proxy_fcgi:error] [pid 45303:tid 45321] [client 51.107.75.125:33496] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:46:44.884224 2026] [proxy_fcgi:error] [pid 45303:tid 45338] [client 51.107.75.125:33496] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 10:46:45.123346 2026] [proxy_fcgi:error] [pid 45303:tid 45336] [client 51.107.75.125:33496] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:06:33.247953 2026] [proxy_fcgi:error] [pid 45409:tid 45425] [client 68.221.137.197:20467] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:47.992448 2026] [proxy_fcgi:error] [pid 45304:tid 45354] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:48.229127 2026] [proxy_fcgi:error] [pid 45304:tid 45355] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:48.603039 2026] [proxy_fcgi:error] [pid 45304:tid 45348] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:48.840576 2026] [proxy_fcgi:error] [pid 45304:tid 45368] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:49.079887 2026] [proxy_fcgi:error] [pid 45304:tid 45347] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:49.738143 2026] [proxy_fcgi:error] [pid 45304:tid 45350] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:49.979351 2026] [proxy_fcgi:error] [pid 45304:tid 45365] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:50.228141 2026] [proxy_fcgi:error] [pid 45304:tid 45353] [client 172.213.234.56:60293] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 11:17:50.461188 2026] [:error] [pid 45304:tid 45352] [client 172.213.234.56:60293] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "adHUXg5jnqDKKovdRklkHQAAAEg"]
[Sun Apr 05 11:17:52.014749 2026] [:error] [pid 45409:tid 45411] [client 172.213.234.56:43377] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "adHUYNHt_Oyw03gjCNiH2AAAAMA"]
[Sun Apr 05 11:17:55.480149 2026] [:error] [pid 45303:tid 45325] [client 172.213.234.56:14884] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHUY7boQ9eViZ4hdnnyHwAAAAg"]
[Sun Apr 05 11:17:57.015876 2026] [:error] [pid 30921:tid 30942] [client 172.213.234.56:57688] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHUZWFGQVn8Q0ueB273wwAAARM"]
[Sun Apr 05 11:17:58.538110 2026] [:error] [pid 30921:tid 30932] [client 172.213.234.56:37256] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHUZmFGQVn8Q0ueB273xQAAAQk"]
[Sun Apr 05 11:17:59.997712 2026] [:error] [pid 45305:tid 45392] [client 172.213.234.56:35718] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "adHUZ-jDQjr7aWhjflAdSAAAAJU"]
[Sun Apr 05 11:18:00.827808 2026] [:error] [pid 45409:tid 45421] [client 172.213.234.56:10501] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHUaNHt_Oyw03gjCNiH9wAAAMo"]
[Sun Apr 05 11:18:01.745581 2026] [:error] [pid 45304:tid 45357] [client 172.213.234.56:4457] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHUaQ5jnqDKKovdRklkLAAAAE0"]
[Sun Apr 05 11:18:03.406979 2026] [:error] [pid 45409:tid 45421] [client 172.213.234.56:21833] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHUa9Ht_Oyw03gjCNiIAQAAAMo"]
[Sun Apr 05 11:18:04.302228 2026] [:error] [pid 45303:tid 45318] [client 172.213.234.56:37279] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/55l453.php"] [unique_id "adHUbLboQ9eViZ4hdnnyLAAAAAE"]
[Sun Apr 05 11:18:05.183523 2026] [:error] [pid 45409:tid 45422] [client 172.213.234.56:4443] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHUbdHt_Oyw03gjCNiIAwAAAMs"]
[Sun Apr 05 11:18:06.640293 2026] [:error] [pid 45305:tid 45387] [client 172.213.234.56:4460] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHUbujDQjr7aWhjflAdYgAAAJA"]
[Sun Apr 05 11:18:08.870027 2026] [:error] [pid 45303:tid 45328] [client 172.213.234.56:4119] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHUcLboQ9eViZ4hdnnyMwAAAAs"]
[Sun Apr 05 11:18:10.644719 2026] [:error] [pid 30921:tid 30937] [client 172.213.234.56:17627] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "adHUcmFGQVn8Q0ueB273ygAAAQ4"]
[Sun Apr 05 11:18:11.973442 2026] [:error] [pid 45304:tid 45363] [client 172.213.234.56:17638] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHUcw5jnqDKKovdRklkNAAAAFM"]
[Sun Apr 05 11:18:13.354226 2026] [:error] [pid 45409:tid 45420] [client 172.213.234.56:21848] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHUddHt_Oyw03gjCNiIHAAAAMk"]
[Sun Apr 05 11:18:14.282810 2026] [:error] [pid 45305:tid 45383] [client 172.213.234.56:14901] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHUdujDQjr7aWhjflAdggAAAIw"]
[Sun Apr 05 11:18:15.971572 2026] [:error] [pid 45305:tid 45386] [client 172.213.234.56:20790] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "adHUd-jDQjr7aWhjflAdiQAAAI8"]
[Sun Apr 05 11:18:17.356614 2026] [:error] [pid 45305:tid 45383] [client 172.213.234.56:13527] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHUeejDQjr7aWhjflAdiwAAAIw"]
[Sun Apr 05 11:18:18.816779 2026] [:error] [pid 45305:tid 45374] [client 172.213.234.56:14852] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHUeujDQjr7aWhjflAdkQAAAIM"]
[Sun Apr 05 11:18:19.765638 2026] [:error] [pid 45305:tid 45384] [client 172.213.234.56:30536] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHUe-jDQjr7aWhjflAdlAAAAI0"]
[Sun Apr 05 11:18:21.171072 2026] [:error] [pid 45305:tid 45392] [client 172.213.234.56:17601] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "adHUfejDQjr7aWhjflAdngAAAJU"]
[Sun Apr 05 11:18:24.517539 2026] [:error] [pid 45304:tid 45364] [client 172.213.234.56:44954] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsc.php"] [unique_id "adHUgA5jnqDKKovdRklkRgAAAFQ"]
[Sun Apr 05 11:18:29.351496 2026] [:error] [pid 45305:tid 45389] [client 172.213.234.56:20751] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsc.php"] [unique_id "adHUhejDQjr7aWhjflAdzgAAAJI"]
[Sun Apr 05 11:18:33.751055 2026] [:error] [pid 45409:tid 45416] [client 172.213.234.56:44970] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsc.php"] [unique_id "adHUidHt_Oyw03gjCNiINAAAAMU"]
[Sun Apr 05 11:18:36.718917 2026] [:error] [pid 45409:tid 45413] [client 172.213.234.56:44931] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsc.php"] [unique_id "adHUjNHt_Oyw03gjCNiIQwAAAMI"]
[Sun Apr 05 11:18:39.186844 2026] [:error] [pid 45409:tid 45419] [client 172.213.234.56:13522] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dczem.php"] [unique_id "adHUj9Ht_Oyw03gjCNiISwAAAMg"]
[Sun Apr 05 11:18:40.905847 2026] [:error] [pid 45303:tid 45327] [client 172.213.234.56:35730] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dczem.php"] [unique_id "adHUkLboQ9eViZ4hdnnyWQAAAAo"]
[Sun Apr 05 11:18:43.695012 2026] [:error] [pid 30921:tid 30940] [client 172.213.234.56:22296] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dczem.php"] [unique_id "adHUk2FGQVn8Q0ueB2739AAAARE"]
[Sun Apr 05 11:18:47.817916 2026] [:error] [pid 30921:tid 30936] [client 172.213.234.56:18535] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dczem.php"] [unique_id "adHUl2FGQVn8Q0ueB273_wAAAQ0"]
[Sun Apr 05 11:18:49.463330 2026] [proxy_fcgi:error] [pid 45304:tid 45364] [client 172.213.234.56:20746] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:23:50.460347 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 74.234.80.3:2442] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:25.795011 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:26.049160 2026] [proxy_fcgi:error] [pid 45303:tid 45330] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:26.342306 2026] [proxy_fcgi:error] [pid 45303:tid 45334] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:26.614201 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:27.846602 2026] [proxy_fcgi:error] [pid 45303:tid 45337] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:28.099493 2026] [proxy_fcgi:error] [pid 45303:tid 45322] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:28.370190 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:28.735143 2026] [proxy_fcgi:error] [pid 45303:tid 45339] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:28.988699 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:29.243310 2026] [proxy_fcgi:error] [pid 45303:tid 45328] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:29.494139 2026] [:error] [pid 45303:tid 45332] [client 98.71.77.84:20951] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGpbboQ9eViZ4hdnmmKQAAAA8"]
[Sun Apr 05 23:58:30.148956 2026] [:error] [pid 45303:tid 45340] [client 98.71.77.84:20984] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGprboQ9eViZ4hdnmmKwAAABc"]
[Sun Apr 05 23:58:30.675046 2026] [:error] [pid 45304:tid 45355] [client 98.71.77.84:20865] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGpg5jnqDKKovdRklTngAAAEs"]
[Sun Apr 05 23:58:31.380672 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20942] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGp9Ht_Oyw03gjCNidpAAAANc"]
[Sun Apr 05 23:58:31.984696 2026] [:error] [pid 45305:tid 45391] [client 98.71.77.84:20866] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGp-jDQjr7aWhjflCgFQAAAJQ"]
[Sun Apr 05 23:58:32.540714 2026] [:error] [pid 30921:tid 30935] [client 98.71.77.84:20934] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGqGFGQVn8Q0ueB25tYwAAAQw"]
[Sun Apr 05 23:58:33.242004 2026] [:error] [pid 30921:tid 30928] [client 98.71.77.84:20869] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGqWFGQVn8Q0ueB25taAAAAQU"]
[Sun Apr 05 23:58:34.234875 2026] [:error] [pid 45409:tid 45435] [client 98.71.77.84:20890] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGqtHt_Oyw03gjCNidtAAAANg"]
[Sun Apr 05 23:58:35.267600 2026] [:error] [pid 45304:tid 45353] [client 98.71.77.84:20958] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGqw5jnqDKKovdRklTxgAAAEk"]
[Sun Apr 05 23:58:36.138299 2026] [:error] [pid 45409:tid 45417] [client 98.71.77.84:20985] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGrNHt_Oyw03gjCNidvQAAAMY"]
[Sun Apr 05 23:58:36.737902 2026] [:error] [pid 45304:tid 45357] [client 98.71.77.84:20957] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGrA5jnqDKKovdRklTxwAAAE0"]
[Sun Apr 05 23:58:37.261683 2026] [:error] [pid 30921:tid 30939] [client 98.71.77.84:20955] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGrWFGQVn8Q0ueB25teAAAARA"]
[Sun Apr 05 23:58:37.765679 2026] [:error] [pid 45303:tid 45331] [client 98.71.77.84:20931] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGrbboQ9eViZ4hdnmmQwAAAA4"]
[Sun Apr 05 23:58:38.316201 2026] [:error] [pid 45409:tid 45429] [client 98.71.77.84:20962] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGrtHt_Oyw03gjCNidxQAAANI"]
[Sun Apr 05 23:58:38.849112 2026] [:error] [pid 30921:tid 30925] [client 98.71.77.84:20873] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGrmFGQVn8Q0ueB25tgAAAAQI"]
[Sun Apr 05 23:58:39.623071 2026] [:error] [pid 45305:tid 45395] [client 98.71.77.84:20946] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGr-jDQjr7aWhjflCgSwAAAJg"]
[Sun Apr 05 23:58:40.307664 2026] [:error] [pid 45409:tid 45427] [client 98.71.77.84:20932] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGsNHt_Oyw03gjCNid0gAAANA"]
[Sun Apr 05 23:58:42.399135 2026] [:error] [pid 45305:tid 45388] [client 98.71.77.84:20988] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGsujDQjr7aWhjflCgTQAAAJE"]
[Sun Apr 05 23:58:43.942164 2026] [:error] [pid 30921:tid 30945] [client 98.71.77.84:20949] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGs2FGQVn8Q0ueB25tjwAAARY"]
[Sun Apr 05 23:58:44.941321 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20884] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGtGFGQVn8Q0ueB25tlAAAAQk"]
[Sun Apr 05 23:58:45.786076 2026] [:error] [pid 45305:tid 45376] [client 98.71.77.84:20973] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGtejDQjr7aWhjflCgUAAAAIU"]
[Sun Apr 05 23:58:46.415141 2026] [:error] [pid 45304:tid 45349] [client 98.71.77.84:20933] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGtg5jnqDKKovdRklT1AAAAEU"]
[Sun Apr 05 23:58:48.333639 2026] [:error] [pid 45409:tid 45417] [client 98.71.77.84:20980] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGuNHt_Oyw03gjCNieBwAAAMY"]
[Sun Apr 05 23:58:49.246640 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20875] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGudHt_Oyw03gjCNieEQAAAMo"]
[Sun Apr 05 23:58:50.030586 2026] [:error] [pid 45303:tid 45329] [client 98.71.77.84:20928] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGurboQ9eViZ4hdnmmYwAAAAw"]
[Sun Apr 05 23:58:50.679794 2026] [:error] [pid 30921:tid 30937] [client 98.71.77.84:20972] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGumFGQVn8Q0ueB25tngAAAQ4"]
[Sun Apr 05 23:58:51.185014 2026] [:error] [pid 45305:tid 45375] [client 98.71.77.84:20941] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGu-jDQjr7aWhjflCgUgAAAIQ"]
[Sun Apr 05 23:58:51.711821 2026] [:error] [pid 30921:tid 30942] [client 98.71.77.84:20803] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGu2FGQVn8Q0ueB25towAAARM"]
[Sun Apr 05 23:58:52.307702 2026] [:error] [pid 30921:tid 30926] [client 98.71.77.84:20948] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGvGFGQVn8Q0ueB25tpgAAAQM"]
[Sun Apr 05 23:58:52.844498 2026] [:error] [pid 45409:tid 45433] [client 98.71.77.84:20811] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGvNHt_Oyw03gjCNieKQAAANY"]
[Sun Apr 05 23:58:53.381422 2026] [:error] [pid 45409:tid 45435] [client 98.71.77.84:20879] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGvdHt_Oyw03gjCNieLwAAANg"]
[Sun Apr 05 23:58:53.910458 2026] [:error] [pid 45303:tid 45328] [client 98.71.77.84:20881] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGvbboQ9eViZ4hdnmmaQAAAAs"]
[Sun Apr 05 23:58:54.411835 2026] [:error] [pid 45303:tid 45337] [client 98.71.77.84:20961] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGvrboQ9eViZ4hdnmmagAAABQ"]
[Sun Apr 05 23:58:55.003868 2026] [:error] [pid 45303:tid 45326] [client 98.71.77.84:20971] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGv7boQ9eViZ4hdnmmbgAAAAk"]
[Sun Apr 05 23:58:55.542908 2026] [:error] [pid 45304:tid 45365] [client 98.71.77.84:20882] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGvw5jnqDKKovdRklT4AAAAFU"]
[Sun Apr 05 23:58:56.075566 2026] [:error] [pid 45303:tid 45335] [client 98.71.77.84:20969] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGwLboQ9eViZ4hdnmmcwAAABI"]
[Sun Apr 05 23:58:56.793437 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20950] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGwNHt_Oyw03gjCNieUgAAAMk"]
[Sun Apr 05 23:58:57.345039 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20820] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGwdHt_Oyw03gjCNieVgAAAMQ"]
[Sun Apr 05 23:58:58.013478 2026] [:error] [pid 45409:tid 45412] [client 98.71.77.84:20893] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGwtHt_Oyw03gjCNieXQAAAME"]
[Sun Apr 05 23:58:58.778802 2026] [:error] [pid 45303:tid 45333] [client 98.71.77.84:20952] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGwrboQ9eViZ4hdnmmewAAABA"]
[Sun Apr 05 23:58:59.413606 2026] [:error] [pid 45303:tid 45326] [client 98.71.77.84:20876] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGw7boQ9eViZ4hdnmmfQAAAAk"]
[Sun Apr 05 23:59:00.000292 2026] [:error] [pid 30921:tid 30925] [client 98.71.77.84:20975] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGw2FGQVn8Q0ueB25ttAAAAQI"]
[Sun Apr 05 23:59:00.747115 2026] [:error] [pid 45305:tid 45386] [client 98.71.77.84:20895] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGxOjDQjr7aWhjflCgXwAAAI8"]
[Sun Apr 05 23:59:01.292472 2026] [:error] [pid 45305:tid 45393] [client 98.71.77.84:20903] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGxejDQjr7aWhjflCgYQAAAJY"]
[Sun Apr 05 23:59:01.851765 2026] [:error] [pid 30921:tid 30945] [client 98.71.77.84:20842] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGxWFGQVn8Q0ueB25tvwAAARY"]
[Sun Apr 05 23:59:02.362745 2026] [:error] [pid 30921:tid 30934] [client 98.71.77.84:20965] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGxmFGQVn8Q0ueB25twwAAAQs"]
[Sun Apr 05 23:59:03.286103 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20917] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGx9Ht_Oyw03gjCNieggAAAMo"]
[Sun Apr 05 23:59:04.385542 2026] [:error] [pid 45304:tid 45368] [client 98.71.77.84:20900] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGyA5jnqDKKovdRklT7gAAAFg"]
[Sun Apr 05 23:59:05.055047 2026] [:error] [pid 45303:tid 45331] [client 98.71.77.84:20983] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGybboQ9eViZ4hdnmmhAAAAA4"]
[Sun Apr 05 23:59:06.083110 2026] [:error] [pid 45305:tid 45394] [client 98.71.77.84:20914] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGyujDQjr7aWhjflCgaQAAAJc"]
[Sun Apr 05 23:59:06.654898 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20936] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGytHt_Oyw03gjCNiekQAAAMk"]
[Sun Apr 05 23:59:07.527184 2026] [:error] [pid 45305:tid 45393] [client 98.71.77.84:20926] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGy-jDQjr7aWhjflCgcgAAAJY"]
[Sun Apr 05 23:59:08.151499 2026] [:error] [pid 30921:tid 30929] [client 98.71.77.84:20939] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGzGFGQVn8Q0ueB25t2gAAAQY"]
[Sun Apr 05 23:59:09.028326 2026] [:error] [pid 45304:tid 45363] [client 98.71.77.84:20812] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGzQ5jnqDKKovdRklT_gAAAFM"]
[Sun Apr 05 23:59:09.902886 2026] [:error] [pid 45305:tid 45377] [client 98.71.77.84:20738] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGzejDQjr7aWhjflCghAAAAIY"]
[Sun Apr 05 23:59:10.533508 2026] [:error] [pid 45303:tid 45330] [client 98.71.77.84:20905] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGzrboQ9eViZ4hdnmmlQAAAA0"]
[Sun Apr 05 23:59:11.247398 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20899] [client 98.71.77.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "adKGz2FGQVn8Q0ueB25t6AAAAQk"]
[Sun Apr 05 23:59:11.996835 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20868] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adKGz9Ht_Oyw03gjCNierQAAAMM"]
[Sun Apr 05 23:59:12.652096 2026] [:error] [pid 30921:tid 30946] [client 98.71.77.84:20880] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adKG0GFGQVn8Q0ueB25t7wAAARc"]
[Sun Apr 05 23:59:13.278140 2026] [:error] [pid 45409:tid 45413] [client 98.71.77.84:20967] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adKG0dHt_Oyw03gjCNietQAAAMI"]
[Sun Apr 05 23:59:13.961884 2026] [:error] [pid 45303:tid 45336] [client 98.71.77.84:20874] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adKG0bboQ9eViZ4hdnmmmQAAABM"]
[Sun Apr 05 23:59:14.561800 2026] [:error] [pid 45409:tid 45419] [client 98.71.77.84:20989] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adKG0tHt_Oyw03gjCNievwAAAMg"]
[Sun Apr 05 23:59:15.273307 2026] [:error] [pid 45305:tid 45394] [client 98.71.77.84:20853] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adKG0-jDQjr7aWhjflCgiAAAAJc"]
[Sun Apr 05 23:59:16.018434 2026] [:error] [pid 45305:tid 45389] [client 98.71.77.84:20877] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adKG1OjDQjr7aWhjflCgiwAAAJI"]
[Sun Apr 05 23:59:16.938098 2026] [:error] [pid 45303:tid 45323] [client 98.71.77.84:20990] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adKG1LboQ9eViZ4hdnmmngAAAAY"]
[Sun Apr 05 23:59:17.694083 2026] [:error] [pid 45303:tid 45324] [client 98.71.77.84:20833] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "adKG1bboQ9eViZ4hdnmmoQAAAAc"]
[Sun Apr 05 23:59:18.233575 2026] [:error] [pid 45303:tid 45337] [client 98.71.77.84:20878] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "adKG1rboQ9eViZ4hdnmmowAAABQ"]
[Sun Apr 05 23:59:18.890668 2026] [:error] [pid 45303:tid 45317] [client 98.71.77.84:20963] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "adKG1rboQ9eViZ4hdnmmpAAAAAA"]
[Sun Apr 05 23:59:19.963993 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20974] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "adKG17boQ9eViZ4hdnmmqQAAAAo"]
[Sun Apr 05 23:59:21.073569 2026] [:error] [pid 45304:tid 45362] [client 98.71.77.84:20978] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adKG2Q5jnqDKKovdRklUDgAAAFI"]
[Sun Apr 05 23:59:21.663099 2026] [:error] [pid 45304:tid 45346] [client 98.71.77.84:20902] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adKG2Q5jnqDKKovdRklUDwAAAEI"]
[Sun Apr 05 23:59:23.210742 2026] [:error] [pid 45304:tid 45357] [client 98.71.77.84:20968] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adKG2w5jnqDKKovdRklUEQAAAE0"]
[Sun Apr 05 23:59:25.135698 2026] [:error] [pid 45409:tid 45431] [client 98.71.77.84:20814] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adKG3dHt_Oyw03gjCNie3AAAANQ"]
[Sun Apr 05 23:59:25.761667 2026] [:error] [pid 45303:tid 45330] [client 98.71.77.84:20944] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adKG3bboQ9eViZ4hdnmmvwAAAA0"]
[Sun Apr 05 23:59:26.678692 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20954] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adKG3rboQ9eViZ4hdnmmxQAAAAo"]
[Sun Apr 05 23:59:27.649512 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20892] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adKG39Ht_Oyw03gjCNie4AAAANM"]
[Sun Apr 05 23:59:28.420306 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20943] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adKG4NHt_Oyw03gjCNie4gAAAMo"]
[Sun Apr 05 23:59:29.336204 2026] [proxy_fcgi:error] [pid 45304:tid 45357] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:29.589734 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:29.843412 2026] [proxy_fcgi:error] [pid 45304:tid 45365] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:30.126699 2026] [proxy_fcgi:error] [pid 45304:tid 45355] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:30.390031 2026] [proxy_fcgi:error] [pid 45304:tid 45351] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:30.645291 2026] [proxy_fcgi:error] [pid 45304:tid 45358] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:30.899427 2026] [proxy_fcgi:error] [pid 45304:tid 45348] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:31.154601 2026] [proxy_fcgi:error] [pid 45304:tid 45364] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:31.656465 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:31.920045 2026] [proxy_fcgi:error] [pid 45304:tid 45366] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:32.259339 2026] [proxy_fcgi:error] [pid 45304:tid 45359] [client 98.71.77.84:20871] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:32.510727 2026] [:error] [pid 45304:tid 45349] [client 98.71.77.84:20871] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/villain.php"] [unique_id "adKG5A5jnqDKKovdRklULgAAAEU"]
[Sun Apr 05 23:59:35.264836 2026] [:error] [pid 45303:tid 45321] [client 98.71.77.84:20916] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/villain.php"] [unique_id "adKG57boQ9eViZ4hdnmm4gAAAAQ"]
[Sun Apr 05 23:59:36.633678 2026] [:error] [pid 30921:tid 30943] [client 98.71.77.84:20981] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/villain.php"] [unique_id "adKG6GFGQVn8Q0ueB25uEQAAARQ"]
[Sun Apr 05 23:59:37.195914 2026] [:error] [pid 45303:tid 45324] [client 98.71.77.84:20911] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/villain.php"] [unique_id "adKG6bboQ9eViZ4hdnmm6gAAAAc"]
[Sun Apr 05 23:59:37.750303 2026] [:error] [pid 45409:tid 45419] [client 98.71.77.84:20805] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-db.php"] [unique_id "adKG6dHt_Oyw03gjCNie9AAAAMg"]
[Sun Apr 05 23:59:38.300767 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20832] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-db.php"] [unique_id "adKG6tHt_Oyw03gjCNie9QAAAMk"]
[Sun Apr 05 23:59:38.999542 2026] [:error] [pid 30921:tid 30928] [client 98.71.77.84:20867] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-db.php"] [unique_id "adKG6mFGQVn8Q0ueB25uEwAAAQU"]
[Sun Apr 05 23:59:40.134178 2026] [:error] [pid 30921:tid 30941] [client 98.71.77.84:20959] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-db.php"] [unique_id "adKG7GFGQVn8Q0ueB25uFAAAARI"]
[Sun Apr 05 23:59:41.084203 2026] [:error] [pid 45305:tid 45392] [client 98.71.77.84:20886] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/red.php"] [unique_id "adKG7ejDQjr7aWhjflCgrwAAAJU"]
[Sun Apr 05 23:59:41.737695 2026] [:error] [pid 45305:tid 45383] [client 98.71.77.84:20945] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/red.php"] [unique_id "adKG7ejDQjr7aWhjflCgswAAAIw"]
[Sun Apr 05 23:59:42.383940 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20947] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/red.php"] [unique_id "adKG7tHt_Oyw03gjCNie_wAAAMk"]
[Sun Apr 05 23:59:43.024697 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20810] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/red.php"] [unique_id "adKG79Ht_Oyw03gjCNifBAAAAMM"]
[Sun Apr 05 23:59:43.628913 2026] [:error] [pid 45304:tid 45363] [client 98.71.77.84:20862] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "adKG7w5jnqDKKovdRklUOgAAAFM"]
[Sun Apr 05 23:59:44.331629 2026] [:error] [pid 45409:tid 45428] [client 98.71.77.84:20910] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "adKG8NHt_Oyw03gjCNifDAAAANE"]
[Sun Apr 05 23:59:45.027403 2026] [:error] [pid 45305:tid 45371] [client 98.71.77.84:20849] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "adKG8ejDQjr7aWhjflCgwAAAAIA"]
[Sun Apr 05 23:59:45.842887 2026] [:error] [pid 45303:tid 45338] [client 98.71.77.84:20915] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "adKG8bboQ9eViZ4hdnmm9gAAABU"]
[Sun Apr 05 23:59:46.717895 2026] [:error] [pid 45409:tid 45412] [client 98.71.77.84:20896] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adKG8tHt_Oyw03gjCNifFQAAAME"]
[Sun Apr 05 23:59:47.680877 2026] [:error] [pid 45409:tid 45435] [client 98.71.77.84:20888] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adKG89Ht_Oyw03gjCNifGAAAANg"]
[Sun Apr 05 23:59:48.329422 2026] [:error] [pid 45409:tid 45425] [client 98.71.77.84:20840] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adKG9NHt_Oyw03gjCNifHAAAAM4"]
[Sun Apr 05 23:59:48.905634 2026] [:error] [pid 45303:tid 45323] [client 98.71.77.84:20845] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adKG9LboQ9eViZ4hdnmm_QAAAAY"]
[Sun Apr 05 23:59:49.893204 2026] [:error] [pid 45303:tid 45334] [client 98.71.77.84:20940] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "adKG9bboQ9eViZ4hdnmm_gAAABE"]
[Sun Apr 05 23:59:50.447401 2026] [:error] [pid 45303:tid 45325] [client 98.71.77.84:20908] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "adKG9rboQ9eViZ4hdnmm_wAAAAg"]
[Sun Apr 05 23:59:51.105820 2026] [:error] [pid 30921:tid 30931] [client 98.71.77.84:20925] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "adKG92FGQVn8Q0ueB25uJgAAAQg"]
[Sun Apr 05 23:59:52.031692 2026] [:error] [pid 45303:tid 45333] [client 98.71.77.84:20901] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxijj.php"] [unique_id "adKG-LboQ9eViZ4hdnmnCQAAABA"]
[Sun Apr 05 23:59:52.576110 2026] [:error] [pid 45304:tid 45345] [client 98.71.77.84:20906] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "adKG-A5jnqDKKovdRklUSAAAAEE"]
[Sun Apr 05 23:59:53.113318 2026] [:error] [pid 45409:tid 45428] [client 98.71.77.84:20856] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "adKG-dHt_Oyw03gjCNifLwAAANE"]
[Sun Apr 05 23:59:53.629900 2026] [:error] [pid 45409:tid 45411] [client 98.71.77.84:20741] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "adKG-dHt_Oyw03gjCNifMQAAAMA"]
[Sun Apr 05 23:59:54.135540 2026] [:error] [pid 45304:tid 45353] [client 98.71.77.84:20956] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs7.php"] [unique_id "adKG-g5jnqDKKovdRklUTAAAAEk"]
[Sun Apr 05 23:59:54.647046 2026] [:error] [pid 45409:tid 45423] [client 98.71.77.84:20870] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool2.php"] [unique_id "adKG-tHt_Oyw03gjCNifNgAAAMw"]
[Sun Apr 05 23:59:55.147994 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20960] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool2.php"] [unique_id "adKG-9Ht_Oyw03gjCNifNwAAANc"]
[Sun Apr 05 23:59:55.647685 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20851] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool2.php"] [unique_id "adKG-9Ht_Oyw03gjCNifPQAAANM"]
[Sun Apr 05 23:59:56.357789 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20970] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool2.php"] [unique_id "adKG_GFGQVn8Q0ueB25uLgAAAQk"]
[Sun Apr 05 23:59:56.906070 2026] [:error] [pid 45305:tid 45372] [client 98.71.77.84:20817] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zjllx.php"] [unique_id "adKG_OjDQjr7aWhjflCg2QAAAIE"]
[Sun Apr 05 23:59:57.449049 2026] [:error] [pid 30921:tid 30928] [client 98.71.77.84:20800] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zjllx.php"] [unique_id "adKG_WFGQVn8Q0ueB25uOQAAAQU"]
[Sun Apr 05 23:59:57.969417 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20909] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zjllx.php"] [unique_id "adKG_dHt_Oyw03gjCNifQwAAANc"]
[Sun Apr 05 23:59:58.692214 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20991] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zjllx.php"] [unique_id "adKG_tHt_Oyw03gjCNifRgAAAM8"]
[Sun Apr 05 23:59:59.312013 2026] [:error] [pid 45303:tid 45334] [client 98.71.77.84:20907] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "adKG_7boQ9eViZ4hdnmnFwAAABE"]
[Sun Apr 05 23:59:59.831985 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20809] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "adKG_2FGQVn8Q0ueB25uQgAAAQk"]
[Mon Apr 06 00:00:00.349323 2026] [:error] [pid 45409:tid 45429] [client 98.71.77.84:20806] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "adKHANHt_Oyw03gjCNifTwAAANI"]
[Mon Apr 06 00:00:01.013831 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20808] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "adKHAdHt_Oyw03gjCNifVQAAAMo"]
[Mon Apr 06 00:00:01.982674 2026] [:error] [pid 45409:tid 45412] [client 98.71.77.84:20883] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adKHAdHt_Oyw03gjCNifWAAAAME"]
[Mon Apr 06 00:00:02.821655 2026] [:error] [pid 45305:tid 45382] [client 98.71.77.84:20776] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adKHAujDQjr7aWhjflCg4wAAAIs"]
[Mon Apr 06 00:00:03.372345 2026] [:error] [pid 45409:tid 45433] [client 98.71.77.84:20848] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adKHA9Ht_Oyw03gjCNifXAAAANY"]
[Mon Apr 06 00:00:04.206817 2026] [:error] [pid 45409:tid 45417] [client 98.71.77.84:20818] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adKHBNHt_Oyw03gjCNifXgAAAMY"]
[Mon Apr 06 00:00:04.790484 2026] [:error] [pid 45409:tid 45411] [client 98.71.77.84:20784] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adKHBNHt_Oyw03gjCNifYAAAAMA"]
[Mon Apr 06 00:00:05.361604 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20872] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adKHBdHt_Oyw03gjCNifZAAAAMQ"]
[Mon Apr 06 00:00:05.867192 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20751] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adKHBdHt_Oyw03gjCNifaAAAAMk"]
[Mon Apr 06 00:00:06.389035 2026] [:error] [pid 45303:tid 45335] [client 98.71.77.84:20836] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adKHBrboQ9eViZ4hdnmnKAAAABI"]
[Mon Apr 06 00:00:07.009434 2026] [:error] [pid 45303:tid 45337] [client 98.71.77.84:20986] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dbc.php"] [unique_id "adKHB7boQ9eViZ4hdnmnKwAAABQ"]
[Mon Apr 06 00:00:07.606286 2026] [:error] [pid 45409:tid 45432] [client 98.71.77.84:20807] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dbc.php"] [unique_id "adKHB9Ht_Oyw03gjCNifbAAAANU"]
[Mon Apr 06 00:00:08.143897 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20922] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dbc.php"] [unique_id "adKHCGFGQVn8Q0ueB25uTgAAAQk"]
[Mon Apr 06 00:00:08.767783 2026] [:error] [pid 45409:tid 45425] [client 98.71.77.84:20982] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dbc.php"] [unique_id "adKHCNHt_Oyw03gjCNifbQAAAM4"]
[Mon Apr 06 00:00:09.432898 2026] [:error] [pid 45305:tid 45380] [client 98.71.77.84:20924] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adKHCejDQjr7aWhjflCg5wAAAIk"]
[Mon Apr 06 00:00:10.018738 2026] [:error] [pid 45305:tid 45390] [client 98.71.77.84:20913] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adKHCujDQjr7aWhjflCg7AAAAJM"]
[Mon Apr 06 00:00:10.565466 2026] [:error] [pid 45305:tid 45387] [client 98.71.77.84:20787] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adKHCujDQjr7aWhjflCg7QAAAJA"]
[Mon Apr 06 00:00:11.099628 2026] [:error] [pid 45305:tid 45377] [client 98.71.77.84:20819] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adKHC-jDQjr7aWhjflCg7wAAAIY"]
[Mon Apr 06 00:00:11.784683 2026] [:error] [pid 45303:tid 45322] [client 98.71.77.84:20864] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ukaa.php"] [unique_id "adKHC7boQ9eViZ4hdnmnPQAAAAU"]
[Mon Apr 06 00:00:12.342143 2026] [:error] [pid 45409:tid 45432] [client 98.71.77.84:20897] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ukaa.php"] [unique_id "adKHDNHt_Oyw03gjCNifdQAAANU"]
[Mon Apr 06 00:00:12.979459 2026] [:error] [pid 45305:tid 45388] [client 98.71.77.84:20824] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ukaa.php"] [unique_id "adKHDOjDQjr7aWhjflCg8gAAAJE"]
[Mon Apr 06 00:00:13.651452 2026] [:error] [pid 30921:tid 30926] [client 98.71.77.84:20794] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ukaa.php"] [unique_id "adKHDWFGQVn8Q0ueB25uWgAAAQM"]
[Mon Apr 06 00:00:14.224227 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20821] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adKHDtHt_Oyw03gjCNifewAAAMo"]
[Mon Apr 06 00:00:14.868785 2026] [:error] [pid 45409:tid 45412] [client 98.71.77.84:20904] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adKHDtHt_Oyw03gjCNifgwAAAME"]
[Mon Apr 06 00:00:15.398582 2026] [:error] [pid 45409:tid 45432] [client 98.71.77.84:20921] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adKHD9Ht_Oyw03gjCNifhAAAANU"]
[Mon Apr 06 00:00:15.920599 2026] [:error] [pid 45409:tid 45425] [client 98.71.77.84:20918] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adKHD9Ht_Oyw03gjCNifiAAAAM4"]
[Mon Apr 06 00:00:16.441156 2026] [:error] [pid 45303:tid 45329] [client 98.71.77.84:20825] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adKHELboQ9eViZ4hdnmnSQAAAAw"]
[Mon Apr 06 00:00:16.967356 2026] [:error] [pid 30921:tid 30945] [client 98.71.77.84:20938] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adKHEGFGQVn8Q0ueB25uYAAAARY"]
[Mon Apr 06 00:00:17.561109 2026] [:error] [pid 30921:tid 30927] [client 98.71.77.84:20964] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adKHEWFGQVn8Q0ueB25uYgAAAQQ"]
[Mon Apr 06 00:00:18.071631 2026] [:error] [pid 30921:tid 30939] [client 98.71.77.84:20977] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adKHEmFGQVn8Q0ueB25uZwAAARA"]
[Mon Apr 06 00:00:18.676874 2026] [:error] [pid 45303:tid 45326] [client 98.71.77.84:20837] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "adKHErboQ9eViZ4hdnmnTwAAAAk"]
[Mon Apr 06 00:00:19.198375 2026] [:error] [pid 45303:tid 45334] [client 98.71.77.84:20929] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "adKHE7boQ9eViZ4hdnmnUgAAABE"]
[Mon Apr 06 00:00:19.818844 2026] [:error] [pid 45305:tid 45386] [client 98.71.77.84:20843] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "adKHE-jDQjr7aWhjflCg-gAAAI8"]
[Mon Apr 06 00:00:20.361785 2026] [:error] [pid 45305:tid 45393] [client 98.71.77.84:20945] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "adKHFOjDQjr7aWhjflCg_gAAAJY"]
[Mon Apr 06 00:00:20.969676 2026] [:error] [pid 45409:tid 45419] [client 98.71.77.84:20835] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adKHFNHt_Oyw03gjCNifnwAAAMg"]
[Mon Apr 06 00:00:21.512158 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20816] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adKHFdHt_Oyw03gjCNifpQAAANM"]
[Mon Apr 06 00:00:22.167180 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20745] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adKHFtHt_Oyw03gjCNifrwAAAMM"]
[Mon Apr 06 00:00:22.684537 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20898] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adKHFtHt_Oyw03gjCNiftgAAAMo"]
[Mon Apr 06 00:00:23.204724 2026] [:error] [pid 45409:tid 45433] [client 98.71.77.84:20912] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adKHF9Ht_Oyw03gjCNifuAAAANY"]
[Mon Apr 06 00:00:23.742183 2026] [:error] [pid 45304:tid 45354] [client 98.71.77.84:20759] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adKHFw5jnqDKKovdRklUagAAAEo"]
[Mon Apr 06 00:00:24.593850 2026] [:error] [pid 45303:tid 45336] [client 98.71.77.84:20830] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adKHGLboQ9eViZ4hdnmnXwAAABM"]
[Mon Apr 06 00:00:25.179887 2026] [:error] [pid 45304:tid 45358] [client 98.71.77.84:20920] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adKHGQ5jnqDKKovdRklUbQAAAE4"]
[Mon Apr 06 00:00:26.145071 2026] [:error] [pid 45304:tid 45348] [client 98.71.77.84:20826] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "adKHGg5jnqDKKovdRklUcAAAAEQ"]
[Mon Apr 06 00:00:27.463286 2026] [:error] [pid 45303:tid 45318] [client 98.71.77.84:20764] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "adKHG7boQ9eViZ4hdnmnZAAAAAE"]
[Mon Apr 06 00:00:28.749165 2026] [:error] [pid 45303:tid 45336] [client 98.71.77.84:20760] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "adKHHLboQ9eViZ4hdnmnagAAABM"]
[Mon Apr 06 00:00:29.467220 2026] [:error] [pid 45303:tid 45322] [client 98.71.77.84:20801] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "adKHHbboQ9eViZ4hdnmnbgAAAAU"]
[Mon Apr 06 00:00:31.051056 2026] [:error] [pid 45304:tid 45360] [client 98.71.77.84:20750] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "adKHHw5jnqDKKovdRklUegAAAFA"]
[Mon Apr 06 00:00:32.573490 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:32.846221 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:33.115545 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:33.380872 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:33.635805 2026] [proxy_fcgi:error] [pid 30921:tid 30935] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:33.892105 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:34.146490 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:34.402727 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:34.665027 2026] [proxy_fcgi:error] [pid 30921:tid 30923] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:34.937901 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:35.339570 2026] [proxy_fcgi:error] [pid 30921:tid 30930] [client 98.71.77.84:20755] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:35.631412 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20755] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "adKHI2FGQVn8Q0ueB25ulAAAAQk"]
[Mon Apr 06 00:00:37.565380 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20844] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "adKHJdHt_Oyw03gjCNif1gAAAMo"]
[Mon Apr 06 00:00:38.465010 2026] [:error] [pid 45305:tid 45374] [client 98.71.77.84:20927] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "adKHJujDQjr7aWhjflChKAAAAIM"]
[Mon Apr 06 00:00:39.073504 2026] [:error] [pid 30921:tid 30942] [client 98.71.77.84:20748] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "adKHJ2FGQVn8Q0ueB25umwAAARM"]
[Mon Apr 06 00:00:39.681266 2026] [:error] [pid 45305:tid 45395] [client 98.71.77.84:20890] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "adKHJ-jDQjr7aWhjflChKwAAAJg"]
[Mon Apr 06 00:00:40.531959 2026] [:error] [pid 45303:tid 45339] [client 98.71.77.84:20744] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "adKHKLboQ9eViZ4hdnmniwAAABY"]
[Mon Apr 06 00:00:41.426517 2026] [:error] [pid 45304:tid 45360] [client 98.71.77.84:20891] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "adKHKQ5jnqDKKovdRklUhgAAAFA"]
[Mon Apr 06 00:00:42.110031 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20923] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "adKHKtHt_Oyw03gjCNif4gAAANM"]
[Mon Apr 06 00:00:42.642528 2026] [:error] [pid 45409:tid 45418] [client 98.71.77.84:20743] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123x.php"] [unique_id "adKHKtHt_Oyw03gjCNif5QAAAMc"]
[Mon Apr 06 00:00:43.236612 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20775] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123x.php"] [unique_id "adKHK9Ht_Oyw03gjCNif5wAAAM8"]
[Mon Apr 06 00:00:43.855155 2026] [:error] [pid 45305:tid 45388] [client 98.71.77.84:20935] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123x.php"] [unique_id "adKHK-jDQjr7aWhjflChLQAAAJE"]
[Mon Apr 06 00:00:44.366712 2026] [:error] [pid 45304:tid 45363] [client 98.71.77.84:20858] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123x.php"] [unique_id "adKHLA5jnqDKKovdRklUiQAAAFM"]
[Mon Apr 06 00:00:45.063770 2026] [:error] [pid 30921:tid 30945] [client 98.71.77.84:20839] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "adKHLWFGQVn8Q0ueB25upAAAARY"]
[Mon Apr 06 00:00:45.685998 2026] [:error] [pid 45303:tid 45340] [client 98.71.77.84:20756] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "adKHLbboQ9eViZ4hdnmnjwAAABc"]
[Mon Apr 06 00:00:46.338433 2026] [:error] [pid 45304:tid 45347] [client 98.71.77.84:20780] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "adKHLg5jnqDKKovdRklUjQAAAEM"]
[Mon Apr 06 00:00:46.863377 2026] [:error] [pid 45305:tid 45393] [client 98.71.77.84:20798] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "adKHLujDQjr7aWhjflChNQAAAJY"]
[Mon Apr 06 00:00:47.419055 2026] [:error] [pid 45409:tid 45417] [client 98.71.77.84:20860] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adKHL9Ht_Oyw03gjCNif9QAAAMY"]
[Mon Apr 06 00:00:48.041163 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20852] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adKHMNHt_Oyw03gjCNif_wAAANc"]
[Mon Apr 06 00:00:48.610377 2026] [:error] [pid 45409:tid 45435] [client 98.71.77.84:20779] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adKHMNHt_Oyw03gjCNigAwAAANg"]
[Mon Apr 06 00:00:49.208568 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20976] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adKHMdHt_Oyw03gjCNigCQAAAMM"]
[Mon Apr 06 00:00:49.734425 2026] [:error] [pid 45303:tid 45335] [client 98.71.77.84:20769] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adKHMbboQ9eViZ4hdnmnlAAAABI"]
[Mon Apr 06 00:00:50.303335 2026] [:error] [pid 45305:tid 45392] [client 98.71.77.84:20857] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adKHMujDQjr7aWhjflChOwAAAJU"]
[Mon Apr 06 00:00:50.871541 2026] [:error] [pid 45303:tid 45334] [client 98.71.77.84:20767] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adKHMrboQ9eViZ4hdnmnlgAAABE"]
[Mon Apr 06 00:00:51.719126 2026] [:error] [pid 45304:tid 45367] [client 98.71.77.84:20705] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adKHMw5jnqDKKovdRklUlAAAAFc"]
[Mon Apr 06 00:00:52.590749 2026] [:error] [pid 45304:tid 45351] [client 98.71.77.84:20815] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adKHNA5jnqDKKovdRklUlwAAAEc"]
[Mon Apr 06 00:00:53.392491 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20828] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adKHNdHt_Oyw03gjCNigJQAAANc"]
[Mon Apr 06 00:00:53.903420 2026] [:error] [pid 45409:tid 45413] [client 98.71.77.84:20677] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adKHNdHt_Oyw03gjCNigKAAAAMI"]
[Mon Apr 06 00:00:54.416412 2026] [:error] [pid 45409:tid 45411] [client 98.71.77.84:20761] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adKHNtHt_Oyw03gjCNigKgAAAMA"]
[Mon Apr 06 00:00:54.952112 2026] [:error] [pid 45303:tid 45325] [client 98.71.77.84:20773] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adKHNrboQ9eViZ4hdnmnmgAAAAg"]
[Mon Apr 06 00:00:55.451907 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20682] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adKHN9Ht_Oyw03gjCNigLwAAAMo"]
[Mon Apr 06 00:00:55.976584 2026] [:error] [pid 45409:tid 45433] [client 98.71.77.84:20887] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adKHN9Ht_Oyw03gjCNigMwAAANY"]
[Mon Apr 06 00:00:56.578283 2026] [:error] [pid 45409:tid 45429] [client 98.71.77.84:20847] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adKHONHt_Oyw03gjCNigOAAAANI"]
[Mon Apr 06 00:00:57.084906 2026] [:error] [pid 30921:tid 30947] [client 98.71.77.84:20831] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "adKHOWFGQVn8Q0ueB25uwAAAARg"]
[Mon Apr 06 00:00:57.603164 2026] [:error] [pid 45303:tid 45334] [client 98.71.77.84:20889] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "adKHObboQ9eViZ4hdnmnpQAAABE"]
[Mon Apr 06 00:00:58.144141 2026] [:error] [pid 45303:tid 45324] [client 98.71.77.84:20894] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "adKHOrboQ9eViZ4hdnmnqwAAAAc"]
[Mon Apr 06 00:00:58.739830 2026] [:error] [pid 45303:tid 45318] [client 98.71.77.84:20752] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xdd.php"] [unique_id "adKHOrboQ9eViZ4hdnmnrQAAAAE"]
[Mon Apr 06 00:00:59.342635 2026] [:error] [pid 45303:tid 45336] [client 98.71.77.84:20799] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adKHO7boQ9eViZ4hdnmntAAAABM"]
[Mon Apr 06 00:01:00.068687 2026] [:error] [pid 45305:tid 45387] [client 98.71.77.84:20966] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adKHPOjDQjr7aWhjflChTAAAAJA"]
[Mon Apr 06 00:01:00.586596 2026] [:error] [pid 45304:tid 45365] [client 98.71.77.84:20766] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adKHPA5jnqDKKovdRklUnAAAAFU"]
[Mon Apr 06 00:01:01.746815 2026] [:error] [pid 45305:tid 45391] [client 98.71.77.84:20739] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adKHPejDQjr7aWhjflChTwAAAJQ"]
[Mon Apr 06 00:01:02.290890 2026] [:error] [pid 45303:tid 45335] [client 98.71.77.84:20850] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adKHPrboQ9eViZ4hdnmnxAAAABI"]
[Mon Apr 06 00:01:02.900278 2026] [:error] [pid 45303:tid 45329] [client 98.71.77.84:20695] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adKHPrboQ9eViZ4hdnmnxwAAAAw"]
[Mon Apr 06 00:01:03.669120 2026] [:error] [pid 45304:tid 45348] [client 98.71.77.84:20726] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adKHPw5jnqDKKovdRklUogAAAEQ"]
[Mon Apr 06 00:01:04.310008 2026] [:error] [pid 45303:tid 45324] [client 98.71.77.84:20822] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adKHQLboQ9eViZ4hdnmnzAAAAAc"]
[Mon Apr 06 00:01:05.169828 2026] [:error] [pid 45409:tid 45413] [client 98.71.77.84:20754] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update1.php"] [unique_id "adKHQdHt_Oyw03gjCNigSAAAAMI"]
[Mon Apr 06 00:01:05.675892 2026] [:error] [pid 45303:tid 45332] [client 98.71.77.84:20689] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update1.php"] [unique_id "adKHQbboQ9eViZ4hdnmnzgAAAA8"]
[Mon Apr 06 00:01:06.220399 2026] [:error] [pid 30921:tid 30946] [client 98.71.77.84:20674] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update1.php"] [unique_id "adKHQmFGQVn8Q0ueB25u0QAAARc"]
[Mon Apr 06 00:01:06.729229 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20804] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update1.php"] [unique_id "adKHQtHt_Oyw03gjCNigUwAAAMM"]
[Mon Apr 06 00:01:07.249089 2026] [:error] [pid 45409:tid 45422] [client 98.71.77.84:20711] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "adKHQ9Ht_Oyw03gjCNigVgAAAMs"]
[Mon Apr 06 00:01:07.758046 2026] [:error] [pid 45409:tid 45428] [client 98.71.77.84:20685] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "adKHQ9Ht_Oyw03gjCNigWgAAANE"]
[Mon Apr 06 00:01:08.609733 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20770] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "adKHRNHt_Oyw03gjCNigXgAAAM8"]
[Mon Apr 06 00:01:09.423462 2026] [:error] [pid 45303:tid 45318] [client 98.71.77.84:20813] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "adKHRbboQ9eViZ4hdnmn3QAAAAE"]
[Mon Apr 06 00:01:09.947505 2026] [:error] [pid 45409:tid 45411] [client 98.71.77.84:20753] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adKHRdHt_Oyw03gjCNigZAAAAMA"]
[Mon Apr 06 00:01:10.455898 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20841] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adKHRtHt_Oyw03gjCNigaAAAAM8"]
[Mon Apr 06 00:01:10.970619 2026] [:error] [pid 45305:tid 45374] [client 98.71.77.84:20937] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adKHRujDQjr7aWhjflChXwAAAIM"]
[Mon Apr 06 00:01:11.495959 2026] [:error] [pid 45409:tid 45414] [client 98.71.77.84:20796] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adKHR9Ht_Oyw03gjCNigbgAAAMM"]
[Mon Apr 06 00:01:12.038321 2026] [:error] [pid 30921:tid 30946] [client 98.71.77.84:20758] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new2.php"] [unique_id "adKHSGFGQVn8Q0ueB25u2QAAARc"]
[Mon Apr 06 00:01:12.585795 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20979] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new2.php"] [unique_id "adKHSNHt_Oyw03gjCNigdwAAANc"]
[Mon Apr 06 00:01:13.140639 2026] [:error] [pid 45409:tid 45427] [client 98.71.77.84:20802] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new2.php"] [unique_id "adKHSdHt_Oyw03gjCNigewAAANA"]
[Mon Apr 06 00:01:13.749067 2026] [:error] [pid 30921:tid 30930] [client 98.71.77.84:20763] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new2.php"] [unique_id "adKHSWFGQVn8Q0ueB25u2wAAAQc"]
[Mon Apr 06 00:01:14.254230 2026] [:error] [pid 45303:tid 45333] [client 98.71.77.84:20687] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adKHSrboQ9eViZ4hdnmn5QAAABA"]
[Mon Apr 06 00:01:14.795547 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20846] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adKHStHt_Oyw03gjCNiggwAAAM8"]
[Mon Apr 06 00:01:15.323292 2026] [:error] [pid 30921:tid 30935] [client 98.71.77.84:20829] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adKHS2FGQVn8Q0ueB25u4QAAAQw"]
[Mon Apr 06 00:01:15.924562 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20838] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adKHS7boQ9eViZ4hdnmn7QAAAAo"]
[Mon Apr 06 00:01:16.428616 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20859] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adKHTNHt_Oyw03gjCNigiAAAAMQ"]
[Mon Apr 06 00:01:17.243761 2026] [:error] [pid 45409:tid 45425] [client 98.71.77.84:20827] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adKHTdHt_Oyw03gjCNigjQAAAM4"]
[Mon Apr 06 00:01:18.021797 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20683] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adKHTtHt_Oyw03gjCNiglgAAAMQ"]
[Mon Apr 06 00:01:18.606525 2026] [:error] [pid 45303:tid 45339] [client 98.71.77.84:20701] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adKHTrboQ9eViZ4hdnmn8gAAABY"]
[Mon Apr 06 00:01:19.662869 2026] [:error] [pid 45303:tid 45336] [client 98.71.77.84:20885] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adKHT7boQ9eViZ4hdnmn-QAAABM"]
[Mon Apr 06 00:01:20.515541 2026] [:error] [pid 45305:tid 45389] [client 98.71.77.84:20987] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adKHUOjDQjr7aWhjflChbgAAAJI"]
[Mon Apr 06 00:01:21.150375 2026] [:error] [pid 45305:tid 45375] [client 98.71.77.84:20692] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adKHUejDQjr7aWhjflChcwAAAIQ"]
[Mon Apr 06 00:01:21.663014 2026] [:error] [pid 45409:tid 45432] [client 98.71.77.84:20688] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adKHUdHt_Oyw03gjCNigoAAAANU"]
[Mon Apr 06 00:01:22.166131 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20863] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "adKHUtHt_Oyw03gjCNigoQAAANc"]
[Mon Apr 06 00:01:22.675309 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20708] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "adKHUrboQ9eViZ4hdnmoBAAAAAo"]
[Mon Apr 06 00:01:23.409200 2026] [:error] [pid 45304:tid 45361] [client 98.71.77.84:20765] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "adKHUw5jnqDKKovdRklUvQAAAFE"]
[Mon Apr 06 00:01:24.138089 2026] [:error] [pid 45305:tid 45391] [client 98.71.77.84:20792] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "adKHVOjDQjr7aWhjflChewAAAJQ"]
[Mon Apr 06 00:01:25.092158 2026] [:error] [pid 45304:tid 45346] [client 98.71.77.84:20703] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "adKHVQ5jnqDKKovdRklUwgAAAEI"]
[Mon Apr 06 00:01:26.315814 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20771] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "adKHVrboQ9eViZ4hdnmoEQAAAAo"]
[Mon Apr 06 00:01:27.408624 2026] [:error] [pid 45305:tid 45384] [client 98.71.77.84:20781] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "adKHV-jDQjr7aWhjflChgAAAAI0"]
[Mon Apr 06 00:01:28.118042 2026] [:error] [pid 45304:tid 45358] [client 98.71.77.84:20854] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wo.php"] [unique_id "adKHWA5jnqDKKovdRklU1QAAAE4"]
[Mon Apr 06 00:01:28.664930 2026] [:error] [pid 30921:tid 30926] [client 98.71.77.84:20722] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adKHWGFGQVn8Q0ueB25u5wAAAQM"]
[Mon Apr 06 00:01:29.189220 2026] [:error] [pid 45303:tid 45341] [client 98.71.77.84:20772] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adKHWbboQ9eViZ4hdnmoGQAAABg"]
[Mon Apr 06 00:01:29.769052 2026] [:error] [pid 45409:tid 45431] [client 98.71.77.84:20861] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adKHWdHt_Oyw03gjCNigtAAAANQ"]
[Mon Apr 06 00:01:30.534808 2026] [:error] [pid 45304:tid 45362] [client 98.71.77.84:20791] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adKHWg5jnqDKKovdRklU2wAAAFI"]
[Mon Apr 06 00:01:31.511496 2026] [:error] [pid 45409:tid 45425] [client 98.71.77.84:20693] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/floya.php"] [unique_id "adKHW9Ht_Oyw03gjCNigvwAAAM4"]
[Mon Apr 06 00:01:32.074918 2026] [:error] [pid 45409:tid 45420] [client 98.71.77.84:20697] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/floya.php"] [unique_id "adKHXNHt_Oyw03gjCNigxQAAAMk"]
[Mon Apr 06 00:01:32.766679 2026] [:error] [pid 30921:tid 30923] [client 98.71.77.84:20712] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/floya.php"] [unique_id "adKHXGFGQVn8Q0ueB25u7AAAAQA"]
[Mon Apr 06 00:01:33.287316 2026] [:error] [pid 45303:tid 45328] [client 98.71.77.84:20783] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/floya.php"] [unique_id "adKHXbboQ9eViZ4hdnmoIQAAAAs"]
[Mon Apr 06 00:01:33.894859 2026] [:error] [pid 45303:tid 45321] [client 98.71.77.84:20676] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolf.php"] [unique_id "adKHXbboQ9eViZ4hdnmoJQAAAAQ"]
[Mon Apr 06 00:01:34.451452 2026] [:error] [pid 30921:tid 30931] [client 98.71.77.84:20714] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolf.php"] [unique_id "adKHXmFGQVn8Q0ueB25u7wAAAQg"]
[Mon Apr 06 00:01:35.151463 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:35.406618 2026] [proxy_fcgi:error] [pid 30921:tid 30944] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:35.661904 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:35.914923 2026] [proxy_fcgi:error] [pid 30921:tid 30932] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:36.179768 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:36.465843 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:36.719094 2026] [proxy_fcgi:error] [pid 30921:tid 30938] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:37.004988 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:37.297974 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:37.616078 2026] [proxy_fcgi:error] [pid 30921:tid 30932] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:37.875945 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 98.71.77.84:20919] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:38.135923 2026] [:error] [pid 30921:tid 30926] [client 98.71.77.84:20919] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenium4.php"] [unique_id "adKHYmFGQVn8Q0ueB25vFAAAAQM"]
[Mon Apr 06 00:01:38.650099 2026] [:error] [pid 45305:tid 45377] [client 98.71.77.84:20704] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenium4.php"] [unique_id "adKHYujDQjr7aWhjflChlgAAAIY"]
[Mon Apr 06 00:01:39.331622 2026] [:error] [pid 30921:tid 30923] [client 98.71.77.84:20736] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenium4.php"] [unique_id "adKHY2FGQVn8Q0ueB25vGQAAAQA"]
[Mon Apr 06 00:01:39.836729 2026] [:error] [pid 45409:tid 45435] [client 98.71.77.84:20823] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenium4.php"] [unique_id "adKHY9Ht_Oyw03gjCNig4gAAANg"]
[Mon Apr 06 00:01:40.411736 2026] [:error] [pid 45303:tid 45339] [client 98.71.77.84:20953] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1aa.php"] [unique_id "adKHZLboQ9eViZ4hdnmoVwAAABY"]
[Mon Apr 06 00:01:40.950243 2026] [:error] [pid 45303:tid 45324] [client 98.71.77.84:20749] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1aa.php"] [unique_id "adKHZLboQ9eViZ4hdnmoWgAAAAc"]
[Mon Apr 06 00:01:41.544430 2026] [:error] [pid 45303:tid 45327] [client 98.71.77.84:20694] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1aa.php"] [unique_id "adKHZbboQ9eViZ4hdnmoXwAAAAo"]
[Mon Apr 06 00:01:42.139511 2026] [:error] [pid 45303:tid 45339] [client 98.71.77.84:20686] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1aa.php"] [unique_id "adKHZrboQ9eViZ4hdnmoZQAAABY"]
[Mon Apr 06 00:01:42.651894 2026] [:error] [pid 30921:tid 30947] [client 98.71.77.84:20678] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpyur.php"] [unique_id "adKHZmFGQVn8Q0ueB25vHQAAARg"]
[Mon Apr 06 00:01:43.346414 2026] [:error] [pid 30921:tid 30935] [client 98.71.77.84:20709] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpyur.php"] [unique_id "adKHZ2FGQVn8Q0ueB25vIAAAAQw"]
[Mon Apr 06 00:01:43.934549 2026] [:error] [pid 45303:tid 45326] [client 98.71.77.84:20795] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpyur.php"] [unique_id "adKHZ7boQ9eViZ4hdnmocAAAAAk"]
[Mon Apr 06 00:01:44.910209 2026] [:error] [pid 45305:tid 45388] [client 98.71.77.84:20733] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpyur.php"] [unique_id "adKHaOjDQjr7aWhjflChnwAAAJE"]
[Mon Apr 06 00:01:45.816503 2026] [:error] [pid 45303:tid 45337] [client 98.71.77.84:20802] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum.php"] [unique_id "adKHabboQ9eViZ4hdnmoeAAAABQ"]
[Mon Apr 06 00:01:46.740497 2026] [:error] [pid 45303:tid 45339] [client 98.71.77.84:20690] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum.php"] [unique_id "adKHarboQ9eViZ4hdnmofAAAABY"]
[Mon Apr 06 00:01:47.459943 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20740] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum.php"] [unique_id "adKHa9Ht_Oyw03gjCNig-AAAAMo"]
[Mon Apr 06 00:01:48.096537 2026] [:error] [pid 45409:tid 45424] [client 98.71.77.84:20778] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum.php"] [unique_id "adKHbNHt_Oyw03gjCNig_AAAAM0"]
[Mon Apr 06 00:01:48.737230 2026] [:error] [pid 45304:tid 45367] [client 98.71.77.84:20768] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "adKHbA5jnqDKKovdRklVDgAAAFc"]
[Mon Apr 06 00:01:49.544035 2026] [:error] [pid 45303:tid 45322] [client 98.71.77.84:20641] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "adKHbbboQ9eViZ4hdnmohAAAAAU"]
[Mon Apr 06 00:01:50.299585 2026] [:error] [pid 45303:tid 45337] [client 98.71.77.84:20675] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "adKHbrboQ9eViZ4hdnmoiwAAABQ"]
[Mon Apr 06 00:01:51.260931 2026] [:error] [pid 45409:tid 45433] [client 98.71.77.84:20707] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "adKHb9Ht_Oyw03gjCNihBQAAANY"]
[Mon Apr 06 00:01:51.891204 2026] [:error] [pid 45303:tid 45333] [client 98.71.77.84:20735] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "adKHb7boQ9eViZ4hdnmolAAAABA"]
[Mon Apr 06 00:01:52.645712 2026] [:error] [pid 45409:tid 45422] [client 98.71.77.84:20702] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "adKHcNHt_Oyw03gjCNihDAAAAMs"]
[Mon Apr 06 00:01:53.310095 2026] [:error] [pid 45304:tid 45351] [client 98.71.77.84:20706] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "adKHcQ5jnqDKKovdRklVEAAAAEc"]
[Mon Apr 06 00:01:53.972419 2026] [:error] [pid 30921:tid 30945] [client 98.71.77.84:20625] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byp8.php"] [unique_id "adKHcWFGQVn8Q0ueB25vNgAAARY"]
[Mon Apr 06 00:01:54.819412 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20717] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adKHctHt_Oyw03gjCNihEgAAAMQ"]
[Mon Apr 06 00:01:55.363668 2026] [:error] [pid 45303:tid 45319] [client 98.71.77.84:20719] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adKHc7boQ9eViZ4hdnmomQAAAAI"]
[Mon Apr 06 00:01:55.986713 2026] [:error] [pid 45409:tid 45412] [client 98.71.77.84:20786] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adKHc9Ht_Oyw03gjCNihGgAAAME"]
[Mon Apr 06 00:01:56.573522 2026] [:error] [pid 45409:tid 45422] [client 98.71.77.84:20727] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CZoaz8QUeQEV.php"] [unique_id "adKHdNHt_Oyw03gjCNihHwAAAMs"]
[Mon Apr 06 00:01:57.457668 2026] [:error] [pid 45409:tid 45427] [client 98.71.77.84:20684] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adKHddHt_Oyw03gjCNihJgAAANA"]
[Mon Apr 06 00:01:58.678406 2026] [:error] [pid 45303:tid 45322] [client 98.71.77.84:20638] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adKHdrboQ9eViZ4hdnmooQAAAAU"]
[Mon Apr 06 00:01:59.738689 2026] [:error] [pid 45303:tid 45318] [client 98.71.77.84:20762] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adKHd7boQ9eViZ4hdnmoogAAAAE"]
[Mon Apr 06 00:02:00.392069 2026] [:error] [pid 45409:tid 45431] [client 98.71.77.84:20720] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ttRc68YLe0tB.php"] [unique_id "adKHeNHt_Oyw03gjCNihMgAAANQ"]
[Mon Apr 06 00:02:01.180555 2026] [:error] [pid 45303:tid 45341] [client 98.71.77.84:20855] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "adKHebboQ9eViZ4hdnmoqQAAABg"]
[Mon Apr 06 00:02:02.215691 2026] [:error] [pid 30921:tid 30940] [client 98.71.77.84:20617] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "adKHemFGQVn8Q0ueB25vRgAAARE"]
[Mon Apr 06 00:02:02.791632 2026] [:error] [pid 45305:tid 45390] [client 98.71.77.84:20680] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "adKHeujDQjr7aWhjflChzQAAAJM"]
[Mon Apr 06 00:02:03.702377 2026] [:error] [pid 45303:tid 45333] [client 98.71.77.84:20789] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "adKHe7boQ9eViZ4hdnmoswAAABA"]
[Mon Apr 06 00:02:04.276890 2026] [:error] [pid 30921:tid 30938] [client 98.71.77.84:20696] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHfGFGQVn8Q0ueB25vTgAAAQ8"]
[Mon Apr 06 00:02:05.099753 2026] [:error] [pid 45409:tid 45416] [client 98.71.77.84:20732] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHfdHt_Oyw03gjCNihRAAAAMU"]
[Mon Apr 06 00:02:05.868899 2026] [:error] [pid 30921:tid 30940] [client 98.71.77.84:20628] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHfWFGQVn8Q0ueB25vUQAAARE"]
[Mon Apr 06 00:02:06.581062 2026] [:error] [pid 45303:tid 45331] [client 98.71.77.84:20788] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHfrboQ9eViZ4hdnmoxQAAAA4"]
[Mon Apr 06 00:02:07.484683 2026] [:error] [pid 45409:tid 45421] [client 98.71.77.84:20637] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adKHf9Ht_Oyw03gjCNihTQAAAMo"]
[Mon Apr 06 00:02:08.458683 2026] [:error] [pid 30921:tid 30934] [client 98.71.77.84:20729] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adKHgGFGQVn8Q0ueB25vWgAAAQs"]
[Mon Apr 06 00:02:09.528659 2026] [:error] [pid 30921:tid 30941] [client 98.71.77.84:20721] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adKHgWFGQVn8Q0ueB25vXgAAARI"]
[Mon Apr 06 00:02:10.071472 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20651] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4qtafzz.php"] [unique_id "adKHgtHt_Oyw03gjCNihWAAAANc"]
[Mon Apr 06 00:02:10.656222 2026] [:error] [pid 45303:tid 45318] [client 98.71.77.84:20610] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gilo.php"] [unique_id "adKHgrboQ9eViZ4hdnmozgAAAAE"]
[Mon Apr 06 00:02:11.239027 2026] [:error] [pid 45303:tid 45341] [client 98.71.77.84:20834] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gilo.php"] [unique_id "adKHg7boQ9eViZ4hdnmo0wAAABg"]
[Mon Apr 06 00:02:11.871440 2026] [:error] [pid 45304:tid 45363] [client 98.71.77.84:20746] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gilo.php"] [unique_id "adKHgw5jnqDKKovdRklVGwAAAFM"]
[Mon Apr 06 00:02:12.443448 2026] [:error] [pid 45409:tid 45432] [client 98.71.77.84:20660] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gilo.php"] [unique_id "adKHhNHt_Oyw03gjCNihZgAAANU"]
[Mon Apr 06 00:02:13.024630 2026] [:error] [pid 45409:tid 45427] [client 98.71.77.84:20785] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adKHhdHt_Oyw03gjCNihbQAAANA"]
[Mon Apr 06 00:02:13.765316 2026] [:error] [pid 45303:tid 45340] [client 98.71.77.84:20782] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adKHhbboQ9eViZ4hdnmo3AAAABc"]
[Mon Apr 06 00:02:14.555901 2026] [:error] [pid 45304:tid 45365] [client 98.71.77.84:20713] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adKHhg5jnqDKKovdRklVHwAAAFU"]
[Mon Apr 06 00:02:15.123158 2026] [:error] [pid 45409:tid 45426] [client 98.71.77.84:20661] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "adKHh9Ht_Oyw03gjCNihcwAAAM8"]
[Mon Apr 06 00:02:15.730551 2026] [:error] [pid 45409:tid 45429] [client 98.71.77.84:20718] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7r.php"] [unique_id "adKHh9Ht_Oyw03gjCNihegAAANI"]
[Mon Apr 06 00:02:16.392820 2026] [:error] [pid 45409:tid 45418] [client 98.71.77.84:20634] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7r.php"] [unique_id "adKHiNHt_Oyw03gjCNihggAAAMc"]
[Mon Apr 06 00:02:17.265715 2026] [:error] [pid 45409:tid 45415] [client 98.71.77.84:20650] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7r.php"] [unique_id "adKHidHt_Oyw03gjCNihiQAAAMQ"]
[Mon Apr 06 00:02:18.018666 2026] [:error] [pid 30921:tid 30935] [client 98.71.77.84:20724] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7r.php"] [unique_id "adKHimFGQVn8Q0ueB25vagAAAQw"]
[Mon Apr 06 00:02:18.660436 2026] [:error] [pid 45409:tid 45422] [client 98.71.77.84:20620] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2kpf7h.php"] [unique_id "adKHitHt_Oyw03gjCNihkwAAAMs"]
[Mon Apr 06 00:02:19.331059 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20734] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2kpf7h.php"] [unique_id "adKHi9Ht_Oyw03gjCNihmwAAANM"]
[Mon Apr 06 00:02:19.877727 2026] [:error] [pid 45409:tid 45423] [client 98.71.77.84:20556] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2kpf7h.php"] [unique_id "adKHi9Ht_Oyw03gjCNihpAAAAMw"]
[Mon Apr 06 00:02:20.608878 2026] [:error] [pid 45409:tid 45416] [client 98.71.77.84:20698] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2kpf7h.php"] [unique_id "adKHjNHt_Oyw03gjCNihqgAAAMU"]
[Mon Apr 06 00:02:21.476431 2026] [:error] [pid 45409:tid 45418] [client 98.71.77.84:20618] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-3x94erjd.php"] [unique_id "adKHjdHt_Oyw03gjCNihsQAAAMc"]
[Mon Apr 06 00:02:22.153761 2026] [:error] [pid 45409:tid 45434] [client 98.71.77.84:20624] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-3x94erjd.php"] [unique_id "adKHjtHt_Oyw03gjCNihtgAAANc"]
[Mon Apr 06 00:02:23.195372 2026] [:error] [pid 45305:tid 45372] [client 98.71.77.84:20563] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-3x94erjd.php"] [unique_id "adKHj-jDQjr7aWhjflCh8AAAAIE"]
[Mon Apr 06 00:02:23.867690 2026] [:error] [pid 45304:tid 45365] [client 98.71.77.84:20621] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-3x94erjd.php"] [unique_id "adKHjw5jnqDKKovdRklVKwAAAFU"]
[Mon Apr 06 00:02:24.505981 2026] [:error] [pid 45409:tid 45429] [client 98.71.77.84:20774] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adKHkNHt_Oyw03gjCNihwAAAANI"]
[Mon Apr 06 00:02:25.038357 2026] [:error] [pid 45304:tid 45359] [client 98.71.77.84:20615] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adKHkQ5jnqDKKovdRklVLgAAAE8"]
[Mon Apr 06 00:02:25.868996 2026] [:error] [pid 45303:tid 45322] [client 98.71.77.84:20731] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adKHkbboQ9eViZ4hdnmpCAAAAAU"]
[Mon Apr 06 00:02:26.473042 2026] [:error] [pid 45304:tid 45368] [client 98.71.77.84:20648] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adKHkg5jnqDKKovdRklVNQAAAFg"]
[Mon Apr 06 00:02:27.170162 2026] [:error] [pid 45303:tid 45330] [client 98.71.77.84:20639] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "adKHk7boQ9eViZ4hdnmpEAAAAA0"]
[Mon Apr 06 00:02:28.237855 2026] [:error] [pid 45304:tid 45351] [client 98.71.77.84:20715] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "adKHlA5jnqDKKovdRklVPAAAAEc"]
[Mon Apr 06 00:02:28.834953 2026] [:error] [pid 45303:tid 45340] [client 98.71.77.84:20790] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "adKHlLboQ9eViZ4hdnmpEgAAABc"]
[Mon Apr 06 00:02:29.493860 2026] [:error] [pid 45304:tid 45360] [client 98.71.77.84:20649] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp3.php"] [unique_id "adKHlQ5jnqDKKovdRklVQAAAAFA"]
[Mon Apr 06 00:02:30.398949 2026] [:error] [pid 30921:tid 30947] [client 98.71.77.84:20659] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "adKHlmFGQVn8Q0ueB25vdQAAARg"]
[Mon Apr 06 00:02:30.987184 2026] [:error] [pid 45303:tid 45332] [client 98.71.77.84:20728] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "adKHlrboQ9eViZ4hdnmpHwAAAA8"]
[Mon Apr 06 00:02:31.857480 2026] [:error] [pid 30921:tid 30929] [client 98.71.77.84:20793] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "adKHl2FGQVn8Q0ueB25veAAAAQY"]
[Mon Apr 06 00:02:32.617488 2026] [:error] [pid 45409:tid 45430] [client 98.71.77.84:20588] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "adKHmNHt_Oyw03gjCNih6wAAANM"]
[Mon Apr 06 00:02:33.237629 2026] [:error] [pid 30921:tid 30932] [client 98.71.77.84:20757] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adKHmWFGQVn8Q0ueB25vegAAAQk"]
[Mon Apr 06 00:02:33.863901 2026] [:error] [pid 45305:tid 45377] [client 98.71.77.84:20629] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adKHmejDQjr7aWhjflCh-AAAAIY"]
[Mon Apr 06 00:02:34.699521 2026] [:error] [pid 45305:tid 45391] [client 98.71.77.84:20663] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adKHmujDQjr7aWhjflCh-wAAAJQ"]
[Mon Apr 06 00:02:35.777183 2026] [:error] [pid 45409:tid 45427] [client 98.71.77.84:20710] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adKHm9Ht_Oyw03gjCNih-wAAANA"]
[Mon Apr 06 00:02:36.634070 2026] [:error] [pid 45409:tid 45424] [client 98.71.77.84:20716] [client 98.71.77.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ympoo.php"] [unique_id "adKHnNHt_Oyw03gjCNiiAwAAAM0"]
[Mon Apr 06 00:02:37.820566 2026] [proxy_fcgi:error] [pid 45305:tid 45375] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:38.094332 2026] [proxy_fcgi:error] [pid 45305:tid 45371] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:38.348080 2026] [proxy_fcgi:error] [pid 45305:tid 45387] [client 98.71.77.84:20951] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:17:20.560594 2026] [proxy_fcgi:error] [pid 51753:tid 51835] [client 158.158.105.166:19203] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 02:17:20.806900 2026] [proxy_fcgi:error] [pid 51753:tid 51813] [client 158.158.105.166:19203] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:46:56.854111 2026] [proxy_fcgi:error] [pid 35687:tid 35745] [client 158.158.105.166:58205] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:46:57.097356 2026] [proxy_fcgi:error] [pid 35687:tid 35735] [client 158.158.105.166:58205] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:46:57.336623 2026] [:error] [pid 35687:tid 35744] [client 158.158.105.166:58205] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adLYUZ3LtDozV0i8BiudzgAAAFU"]
[Mon Apr 06 05:46:59.284845 2026] [:error] [pid 35786:tid 35795] [client 158.158.105.166:21677] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adLYU2gkfCKTaLhwaKQjVQAAAMI"]
[Mon Apr 06 05:47:00.707160 2026] [:error] [pid 35786:tid 35808] [client 158.158.105.166:10437] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scxy.php"] [unique_id "adLYVGgkfCKTaLhwaKQjWgAAAM8"]
[Mon Apr 06 05:47:01.880095 2026] [:error] [pid 9442:tid 9444] [client 158.158.105.166:58179] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scxy.php"] [unique_id "adLYVUPsNnAJTnmz6sbHawAAAQA"]
[Mon Apr 06 05:47:04.062326 2026] [:error] [pid 35687:tid 35729] [client 158.158.105.166:21654] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scxy.php"] [unique_id "adLYWJ3LtDozV0i8Biud4gAAAEY"]
[Mon Apr 06 05:47:05.581921 2026] [:error] [pid 9442:tid 9468] [client 158.158.105.166:64306] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-scxy.php"] [unique_id "adLYWUPsNnAJTnmz6sbHjAAAARg"]
[Mon Apr 06 05:47:06.775926 2026] [:error] [pid 35687:tid 35743] [client 158.158.105.166:28145] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou1.php"] [unique_id "adLYWp3LtDozV0i8Biud6AAAAFQ"]
[Mon Apr 06 05:47:10.098724 2026] [:error] [pid 35686:tid 35714] [client 158.158.105.166:28108] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou1.php"] [unique_id "adLYXsMKdea6oORd2fxQrAAAABI"]
[Mon Apr 06 05:47:12.737573 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:28114] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reyna.php"] [unique_id "adLYYEPsNnAJTnmz6sbHswAAARY"]
[Mon Apr 06 05:47:14.382385 2026] [:error] [pid 35686:tid 35720] [client 158.158.105.166:31478] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reyna.php"] [unique_id "adLYYsMKdea6oORd2fxQtwAAABg"]
[Mon Apr 06 05:47:15.786100 2026] [:error] [pid 35686:tid 35718] [client 158.158.105.166:10448] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reyna.php"] [unique_id "adLYY8MKdea6oORd2fxQuwAAABY"]
[Mon Apr 06 05:47:17.111273 2026] [:error] [pid 35786:tid 35794] [client 158.158.105.166:23565] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reyna.php"] [unique_id "adLYZWgkfCKTaLhwaKQjkAAAAME"]
[Tue Apr 07 10:56:55.517722 2026] [:error] [pid 12948:tid 12952] [client 217.216.72.68:50848] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adRyd8beSPAN8LvMqsY2zQAAAQE"]
[Tue Apr 07 10:56:59.595793 2026] [:error] [pid 37719:tid 37732] [client 217.216.72.68:61838] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/"] [unique_id "adRye009Xv52u2xXGLDvKwAAAMo"]
[Tue Apr 07 10:56:59.704543 2026] [:error] [pid 37719:tid 37732] [client 217.216.72.68:62000] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/"] [unique_id "adRye009Xv52u2xXGLDvPAAAAMo"]
[Tue Apr 07 10:57:09.102681 2026] [:error] [pid 12948:tid 12975] [client 217.216.72.68:65123] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "adRyhcbeSPAN8LvMqsY3GwAAARg"]
[Tue Apr 07 10:57:09.237955 2026] [:error] [pid 12948:tid 12972] [client 217.216.72.68:57225] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyhcbeSPAN8LvMqsY3HwAAARU"]
[Tue Apr 07 10:57:22.170062 2026] [:error] [pid 37598:tid 37670] [client 217.216.72.68:61061] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/"] [unique_id "adRyku9g7q_cV2WhPawTsQAAAIk"]
[Tue Apr 07 10:57:22.307374 2026] [:error] [pid 59551:tid 59575] [client 217.216.72.68:60362] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/readme.html"] [unique_id "adRykl7LN7Ubyqs-sVsgGQAAAZY"]
[Wed Apr 08 02:49:40.376045 2026] [proxy_fcgi:error] [pid 303:tid 326] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:40.643992 2026] [proxy_fcgi:error] [pid 303:tid 310] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:40.916767 2026] [proxy_fcgi:error] [pid 303:tid 319] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:41.182924 2026] [proxy_fcgi:error] [pid 303:tid 328] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:41.450929 2026] [proxy_fcgi:error] [pid 303:tid 320] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:41.725696 2026] [proxy_fcgi:error] [pid 303:tid 318] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:41.991414 2026] [proxy_fcgi:error] [pid 303:tid 313] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:42.258994 2026] [proxy_fcgi:error] [pid 303:tid 326] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:42.670535 2026] [proxy_fcgi:error] [pid 303:tid 322] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:42.936467 2026] [proxy_fcgi:error] [pid 303:tid 309] [client 4.225.222.162:57665] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:49:43.198841 2026] [:error] [pid 303:tid 324] [client 4.225.222.162:57665] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adVRx89wWR0DHTrNMugvcwAAAVI"]
[Wed Apr 08 02:49:44.850627 2026] [:error] [pid 4860:tid 5230] [client 4.225.222.162:17900] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adVRyAn6KmY32L3WSeHxuQAAAI8"]
[Wed Apr 08 02:49:46.082655 2026] [:error] [pid 303:tid 320] [client 4.225.222.162:10881] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adVRys9wWR0DHTrNMugvhwAAAU4"]
[Wed Apr 08 02:49:50.265746 2026] [:error] [pid 4840:tid 5171] [client 4.225.222.162:11552] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adVRzhsUwg2fEe9p9LT4CQAAAAs"]
[Wed Apr 08 02:49:53.091961 2026] [:error] [pid 5246:tid 5267] [client 4.225.222.162:11050] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adVR0RLpySxaVC8kLEau_wAAANE"]
[Wed Apr 08 02:49:55.981620 2026] [:error] [pid 303:tid 309] [client 4.225.222.162:7935] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adVR089wWR0DHTrNMugvuQAAAUM"]
[Wed Apr 08 02:49:57.990710 2026] [:error] [pid 303:tid 322] [client 4.225.222.162:7582] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adVR1c9wWR0DHTrNMugv0QAAAVA"]
[Wed Apr 08 02:49:59.927075 2026] [:error] [pid 4840:tid 5184] [client 4.225.222.162:24590] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adVR1xsUwg2fEe9p9LT4KAAAABg"]
[Wed Apr 08 02:50:01.496440 2026] [:error] [pid 5337:tid 5361] [client 4.225.222.162:20250] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adVR2SboIFdw6tlcN11cUwAAAQM"]
[Wed Apr 08 02:50:03.297741 2026] [:error] [pid 4860:tid 5221] [client 4.225.222.162:11539] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adVR2wn6KmY32L3WSeHx-AAAAIY"]
[Wed Apr 08 02:50:05.284406 2026] [:error] [pid 5337:tid 5377] [client 4.225.222.162:14941] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adVR3SboIFdw6tlcN11cbAAAARM"]
[Wed Apr 08 02:50:08.004832 2026] [:error] [pid 303:tid 329] [client 4.225.222.162:14399] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adVR4M9wWR0DHTrNMugv7gAAAVc"]
[Wed Apr 08 02:50:09.785429 2026] [:error] [pid 4840:tid 5176] [client 4.225.222.162:14937] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adVR4RsUwg2fEe9p9LT4dAAAABA"]
[Wed Apr 08 02:50:10.663062 2026] [:error] [pid 5337:tid 5378] [client 4.225.222.162:57689] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adVR4iboIFdw6tlcN11clQAAARQ"]
[Wed Apr 08 02:50:11.853673 2026] [:error] [pid 4860:tid 5230] [client 4.225.222.162:17872] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adVR4wn6KmY32L3WSeHyEAAAAI8"]
[Wed Apr 08 02:50:12.714867 2026] [:error] [pid 4860:tid 5226] [client 4.225.222.162:7575] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adVR5An6KmY32L3WSeHyFAAAAIs"]
[Wed Apr 08 02:50:15.010801 2026] [:error] [pid 5246:tid 5256] [client 4.225.222.162:29120] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adVR5xLpySxaVC8kLEavWQAAAMY"]
[Wed Apr 08 02:50:15.926231 2026] [:error] [pid 303:tid 309] [client 4.225.222.162:55865] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adVR589wWR0DHTrNMugwMwAAAUM"]
[Wed Apr 08 02:50:22.400857 2026] [:error] [pid 303:tid 307] [client 4.225.222.162:10046] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adVR7s9wWR0DHTrNMugwSgAAAUE"]
[Wed Apr 08 02:50:23.916396 2026] [:error] [pid 5246:tid 5270] [client 4.225.222.162:8566] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adVR7xLpySxaVC8kLEavgwAAANQ"]
[Wed Apr 08 02:50:24.854611 2026] [:error] [pid 5337:tid 5363] [client 4.225.222.162:29166] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adVR8CboIFdw6tlcN11c_QAAAQU"]
[Wed Apr 08 02:50:27.893205 2026] [:error] [pid 4840:tid 5162] [client 4.225.222.162:4677] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adVR8xsUwg2fEe9p9LT43AAAAAI"]
[Wed Apr 08 02:50:31.155151 2026] [:error] [pid 5246:tid 5259] [client 4.225.222.162:16325] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adVR9xLpySxaVC8kLEavsQAAAMk"]
[Wed Apr 08 02:50:32.339980 2026] [:error] [pid 4860:tid 5231] [client 4.225.222.162:55850] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adVR-An6KmY32L3WSeHyYwAAAJA"]
[Wed Apr 08 02:50:34.782638 2026] [:error] [pid 4860:tid 5223] [client 4.225.222.162:59773] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adVR-gn6KmY32L3WSeHycgAAAIg"]
[Wed Apr 08 02:50:36.934347 2026] [:error] [pid 4840:tid 5163] [client 4.225.222.162:6203] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adVR_BsUwg2fEe9p9LT4-gAAAAM"]
[Wed Apr 08 02:50:37.965867 2026] [:error] [pid 4840:tid 5164] [client 4.225.222.162:16371] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adVR_RsUwg2fEe9p9LT5BAAAAAQ"]
[Wed Apr 08 02:50:40.248283 2026] [:error] [pid 5246:tid 5251] [client 4.225.222.162:20753] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adVSABLpySxaVC8kLEavywAAAME"]
[Wed Apr 08 02:50:43.149599 2026] [proxy_fcgi:error] [pid 4860:tid 5233] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:43.414223 2026] [proxy_fcgi:error] [pid 4860:tid 5234] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:43.678732 2026] [proxy_fcgi:error] [pid 4860:tid 5221] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:44.942451 2026] [proxy_fcgi:error] [pid 4860:tid 5231] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:45.209563 2026] [proxy_fcgi:error] [pid 4860:tid 5224] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:45.474457 2026] [proxy_fcgi:error] [pid 4860:tid 5225] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:45.750475 2026] [proxy_fcgi:error] [pid 4860:tid 5232] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:46.038880 2026] [proxy_fcgi:error] [pid 4860:tid 5237] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:46.306714 2026] [proxy_fcgi:error] [pid 4860:tid 5238] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:46.571047 2026] [proxy_fcgi:error] [pid 4860:tid 5227] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:46.835537 2026] [proxy_fcgi:error] [pid 4860:tid 5222] [client 4.225.222.162:16340] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:50:47.116307 2026] [:error] [pid 4860:tid 5220] [client 4.225.222.162:16340] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adVSBwn6KmY32L3WSeHykwAAAIU"]
[Wed Apr 08 02:50:48.810365 2026] [:error] [pid 303:tid 316] [client 4.225.222.162:10529] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adVSCM9wWR0DHTrNMugxAQAAAUo"]
[Wed Apr 08 02:50:49.971765 2026] [:error] [pid 5337:tid 5363] [client 4.225.222.162:19821] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adVSCSboIFdw6tlcN11d9gAAAQU"]
[Wed Apr 08 02:50:51.452659 2026] [:error] [pid 4860:tid 5225] [client 4.225.222.162:6461] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adVSCwn6KmY32L3WSeHyoQAAAIo"]
[Wed Apr 08 02:50:54.594432 2026] [:error] [pid 5337:tid 5381] [client 4.225.222.162:7477] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "adVSDiboIFdw6tlcN11eEwAAARc"]
[Wed Apr 08 02:50:56.639104 2026] [:error] [pid 5337:tid 5379] [client 4.225.222.162:59783] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "adVSECboIFdw6tlcN11eJAAAARU"]
[Wed Apr 08 02:50:59.764522 2026] [:error] [pid 5337:tid 5374] [client 4.225.222.162:56415] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "adVSEyboIFdw6tlcN11eUQAAARA"]
[Wed Apr 08 02:51:01.077786 2026] [:error] [pid 5246:tid 5273] [client 4.225.222.162:56439] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "adVSFRLpySxaVC8kLEawFgAAANc"]
[Wed Apr 08 02:51:06.154760 2026] [:error] [pid 5246:tid 5270] [client 4.225.222.162:29102] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adVSGhLpySxaVC8kLEawJgAAANQ"]
[Wed Apr 08 02:51:08.396473 2026] [:error] [pid 303:tid 314] [client 4.225.222.162:56891] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adVSHM9wWR0DHTrNMugxXAAAAUg"]
[Wed Apr 08 02:51:10.238129 2026] [:error] [pid 5246:tid 5255] [client 4.225.222.162:12836] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adVSHhLpySxaVC8kLEawLwAAAMU"]
[Wed Apr 08 02:51:12.769596 2026] [:error] [pid 4860:tid 5233] [client 4.225.222.162:22688] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adVSIAn6KmY32L3WSeHyywAAAJI"]
[Wed Apr 08 02:51:15.756546 2026] [:error] [pid 4860:tid 5217] [client 4.225.222.162:12849] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "adVSIwn6KmY32L3WSeHy4wAAAII"]
[Wed Apr 08 02:51:18.489080 2026] [:error] [pid 303:tid 315] [client 4.225.222.162:12800] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "adVSJs9wWR0DHTrNMugxqAAAAUk"]
[Wed Apr 08 02:51:23.323661 2026] [:error] [pid 5337:tid 5363] [client 4.225.222.162:27185] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "adVSKyboIFdw6tlcN11fDgAAAQU"]
[Wed Apr 08 02:51:25.859688 2026] [:error] [pid 303:tid 326] [client 4.225.222.162:8862] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "adVSLc9wWR0DHTrNMugx2wAAAVQ"]
[Wed Apr 08 02:51:27.948082 2026] [:error] [pid 4860:tid 5235] [client 4.225.222.162:26615] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVSLwn6KmY32L3WSeHzHwAAAJQ"]
[Wed Apr 08 02:51:31.484160 2026] [:error] [pid 5337:tid 5360] [client 4.225.222.162:18712] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVSMyboIFdw6tlcN11fVAAAAQI"]
[Wed Apr 08 02:51:32.725281 2026] [:error] [pid 5246:tid 5252] [client 4.225.222.162:8200] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVSNBLpySxaVC8kLEawnwAAAMI"]
[Wed Apr 08 02:51:35.054953 2026] [:error] [pid 4842:tid 5198] [client 4.225.222.162:27188] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVSN5dncJIGbBiMOXTt5AAAAEo"]
[Wed Apr 08 02:51:39.960384 2026] [:error] [pid 4842:tid 5188] [client 4.225.222.162:8194] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVSO5dncJIGbBiMOXTt9AAAAEA"]
[Wed Apr 08 02:51:41.694398 2026] [:error] [pid 4840:tid 5181] [client 4.225.222.162:9317] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVSPRsUwg2fEe9p9LT58AAAABU"]
[Wed Apr 08 02:51:43.929670 2026] [:error] [pid 4840:tid 5166] [client 4.225.222.162:5306] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVSPxsUwg2fEe9p9LT5_gAAAAY"]
[Wed Apr 08 02:51:45.162168 2026] [:error] [pid 303:tid 330] [client 4.225.222.162:8591] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVSQc9wWR0DHTrNMugyVAAAAVg"]
[Wed Apr 08 02:51:47.110051 2026] [proxy_fcgi:error] [pid 4840:tid 5161] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:47.376776 2026] [proxy_fcgi:error] [pid 4840:tid 5179] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:47.642856 2026] [proxy_fcgi:error] [pid 4840:tid 5164] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:47.909947 2026] [proxy_fcgi:error] [pid 4840:tid 5180] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:48.183295 2026] [proxy_fcgi:error] [pid 4840:tid 5167] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:48.451769 2026] [proxy_fcgi:error] [pid 4840:tid 5169] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:48.737154 2026] [proxy_fcgi:error] [pid 4840:tid 5163] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:49.284092 2026] [proxy_fcgi:error] [pid 4840:tid 5179] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:49.563328 2026] [proxy_fcgi:error] [pid 4840:tid 5172] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:49.829588 2026] [proxy_fcgi:error] [pid 4840:tid 5176] [client 4.225.222.162:56829] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:51:50.099228 2026] [:error] [pid 4840:tid 5180] [client 4.225.222.162:56829] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adVSRhsUwg2fEe9p9LT6JgAAABQ"]
[Wed Apr 08 02:51:51.396759 2026] [:error] [pid 5246:tid 5267] [client 4.225.222.162:65355] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adVSRxLpySxaVC8kLEaxAQAAANE"]
[Wed Apr 08 02:51:51.989026 2026] [:error] [pid 303:tid 320] [client 4.225.222.162:53914] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adVSR89wWR0DHTrNMugyjAAAAU4"]
[Wed Apr 08 02:51:52.943135 2026] [:error] [pid 4840:tid 5167] [client 4.225.222.162:8413] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adVSSBsUwg2fEe9p9LT6MAAAAAc"]
[Wed Apr 08 02:51:54.099775 2026] [:error] [pid 5337:tid 5361] [client 4.225.222.162:27163] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adVSSiboIFdw6tlcN11gCgAAAQM"]
[Wed Apr 08 02:51:56.221171 2026] [:error] [pid 4840:tid 5168] [client 4.225.222.162:7745] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adVSTBsUwg2fEe9p9LT6SgAAAAg"]
[Wed Apr 08 02:51:59.306947 2026] [:error] [pid 4860:tid 5231] [client 4.225.222.162:12818] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adVSTwn6KmY32L3WSeHzkwAAAJA"]
[Wed Apr 08 02:52:02.956167 2026] [:error] [pid 4840:tid 5161] [client 4.225.222.162:55170] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adVSUhsUwg2fEe9p9LT6XwAAAAE"]
[Wed Apr 08 02:52:05.055065 2026] [:error] [pid 4860:tid 5238] [client 4.225.222.162:8425] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adVSVQn6KmY32L3WSeHznwAAAJc"]
[Wed Apr 08 02:52:07.465642 2026] [:error] [pid 303:tid 308] [client 4.225.222.162:7671] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adVSV89wWR0DHTrNMugy3gAAAUI"]
[Wed Apr 08 02:52:11.335579 2026] [:error] [pid 5337:tid 5369] [client 4.225.222.162:8836] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adVSWyboIFdw6tlcN11gggAAAQs"]
[Wed Apr 08 02:52:13.428288 2026] [:error] [pid 303:tid 316] [client 4.225.222.162:8850] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adVSXc9wWR0DHTrNMugzDwAAAUo"]
[Wed Apr 08 02:52:16.038717 2026] [:error] [pid 5337:tid 5370] [client 4.225.222.162:18717] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adVSYCboIFdw6tlcN11gsAAAAQw"]
[Wed Apr 08 02:52:21.541403 2026] [:error] [pid 4860:tid 5218] [client 4.225.222.162:65378] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adVSZQn6KmY32L3WSeHzyAAAAIM"]
[Wed Apr 08 02:52:23.970772 2026] [:error] [pid 4860:tid 5228] [client 4.225.222.162:9338] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adVSZwn6KmY32L3WSeHz1wAAAI0"]
[Wed Apr 08 02:52:26.145866 2026] [:error] [pid 5337:tid 5371] [client 4.225.222.162:11265] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adVSaiboIFdw6tlcN11hHAAAAQ0"]
[Wed Apr 08 02:52:28.838550 2026] [:error] [pid 5337:tid 5359] [client 4.225.222.162:18750] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adVSbCboIFdw6tlcN11hRgAAAQE"]
[Wed Apr 08 02:52:31.052393 2026] [:error] [pid 303:tid 325] [client 4.225.222.162:55174] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adVSb89wWR0DHTrNMugzbwAAAVM"]
[Wed Apr 08 02:52:36.849808 2026] [:error] [pid 4842:tid 5194] [client 4.225.222.162:8446] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adVSdJdncJIGbBiMOXTuqgAAAEY"]
[Wed Apr 08 02:52:37.846003 2026] [:error] [pid 4842:tid 5203] [client 4.225.222.162:54610] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adVSdZdncJIGbBiMOXTurQAAAE8"]
[Wed Apr 08 02:52:39.499298 2026] [:error] [pid 5337:tid 5381] [client 4.225.222.162:7818] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVSdyboIFdw6tlcN11hrwAAARc"]
[Wed Apr 08 02:52:45.135053 2026] [:error] [pid 5337:tid 5372] [client 4.225.222.162:7679] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVSfSboIFdw6tlcN11h8gAAAQ4"]
[Wed Apr 08 02:52:47.399155 2026] [:error] [pid 303:tid 314] [client 4.225.222.162:52016] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVSf89wWR0DHTrNMugztwAAAUg"]
[Wed Apr 08 02:52:49.025448 2026] [proxy_fcgi:error] [pid 5337:tid 5366] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:49.292761 2026] [proxy_fcgi:error] [pid 5337:tid 5372] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:49.558266 2026] [proxy_fcgi:error] [pid 5337:tid 5369] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:49.825122 2026] [proxy_fcgi:error] [pid 5337:tid 5358] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:50.093389 2026] [proxy_fcgi:error] [pid 5337:tid 5373] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:50.360921 2026] [proxy_fcgi:error] [pid 5337:tid 5360] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:50.629168 2026] [proxy_fcgi:error] [pid 5337:tid 5378] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:50.895411 2026] [proxy_fcgi:error] [pid 5337:tid 5369] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:51.161750 2026] [proxy_fcgi:error] [pid 5337:tid 5380] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:51.427923 2026] [proxy_fcgi:error] [pid 5337:tid 5369] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:51.698405 2026] [proxy_fcgi:error] [pid 5337:tid 5373] [client 4.225.222.162:8682] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:52:51.968101 2026] [:error] [pid 5337:tid 5379] [client 4.225.222.162:8682] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adVSgyboIFdw6tlcN11iWwAAARU"]
[Wed Apr 08 02:52:53.783788 2026] [:error] [pid 5246:tid 5253] [client 4.225.222.162:54571] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adVShRLpySxaVC8kLEayIwAAAMM"]
[Wed Apr 08 02:52:58.604838 2026] [:error] [pid 4842:tid 5203] [client 4.225.222.162:11644] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adVSipdncJIGbBiMOXTu8QAAAE8"]
[Wed Apr 08 02:53:00.043487 2026] [:error] [pid 5337:tid 5365] [client 4.225.222.162:35987] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adVSjCboIFdw6tlcN11iqQAAAQc"]
[Wed Apr 08 02:53:02.311615 2026] [:error] [pid 303:tid 320] [client 4.225.222.162:54003] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adVSjs9wWR0DHTrNMugz8wAAAU4"]
[Wed Apr 08 02:53:06.177525 2026] [:error] [pid 4842:tid 5206] [client 4.225.222.162:15124] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adVSkpdncJIGbBiMOXTu_AAAAFI"]
[Wed Apr 08 02:53:09.637707 2026] [:error] [pid 5337:tid 5381] [client 4.225.222.162:17803] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adVSlSboIFdw6tlcN11i-gAAARc"]
[Wed Apr 08 02:53:11.352961 2026] [:error] [pid 4840:tid 5179] [client 4.225.222.162:15195] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adVSlxsUwg2fEe9p9LT7OQAAABM"]
[Wed Apr 08 02:53:12.816704 2026] [:error] [pid 303:tid 325] [client 4.225.222.162:30401] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVSmM9wWR0DHTrNMug0NAAAAVM"]
[Wed Apr 08 02:53:17.418317 2026] [:error] [pid 5337:tid 5367] [client 4.225.222.162:13681] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVSnSboIFdw6tlcN11jYwAAAQk"]
[Wed Apr 08 02:53:21.043432 2026] [:error] [pid 5246:tid 5262] [client 4.225.222.162:19292] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVSoRLpySxaVC8kLEaymQAAAMw"]
[Wed Apr 08 02:53:22.489646 2026] [:error] [pid 4860:tid 5224] [client 4.225.222.162:13670] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVSogn6KmY32L3WSeH0cAAAAIk"]
[Wed Apr 08 02:53:25.623093 2026] [:error] [pid 4860:tid 5236] [client 4.225.222.162:7703] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adVSpQn6KmY32L3WSeH0fgAAAJU"]
[Wed Apr 08 02:53:26.737297 2026] [:error] [pid 303:tid 316] [client 4.225.222.162:7722] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adVSps9wWR0DHTrNMug0pAAAAUo"]
[Wed Apr 08 02:53:29.645887 2026] [:error] [pid 5337:tid 5368] [client 4.225.222.162:11617] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adVSqSboIFdw6tlcN11jsQAAAQo"]
[Wed Apr 08 02:53:31.191626 2026] [:error] [pid 303:tid 313] [client 4.225.222.162:30408] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adVSq89wWR0DHTrNMug0wwAAAUc"]
[Wed Apr 08 02:53:35.324638 2026] [:error] [pid 303:tid 319] [client 4.225.222.162:11631] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVSr89wWR0DHTrNMug03QAAAU0"]
[Wed Apr 08 02:53:39.551031 2026] [:error] [pid 5337:tid 5365] [client 4.225.222.162:16278] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVSsyboIFdw6tlcN11kCAAAAQc"]
[Wed Apr 08 02:53:41.089220 2026] [:error] [pid 5246:tid 5255] [client 4.225.222.162:35981] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVStRLpySxaVC8kLEazIAAAAMU"]
[Wed Apr 08 02:53:41.931441 2026] [:error] [pid 303:tid 308] [client 4.225.222.162:9274] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVStc9wWR0DHTrNMug1HgAAAUI"]
[Wed Apr 08 02:53:43.494841 2026] [:error] [pid 5337:tid 5365] [client 4.225.222.162:30336] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adVStyboIFdw6tlcN11kJAAAAQc"]
[Wed Apr 08 02:53:46.939365 2026] [:error] [pid 303:tid 310] [client 4.225.222.162:51999] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adVSus9wWR0DHTrNMug1QwAAAUQ"]
[Wed Apr 08 02:53:49.587196 2026] [:error] [pid 4840:tid 5178] [client 4.225.222.162:51978] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsas.php"] [unique_id "adVSvRsUwg2fEe9p9LT76AAAABI"]
[Wed Apr 08 02:53:52.949741 2026] [proxy_fcgi:error] [pid 4860:tid 5229] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:53.217840 2026] [proxy_fcgi:error] [pid 4860:tid 5231] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:53.483909 2026] [proxy_fcgi:error] [pid 4860:tid 5226] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:53.752111 2026] [proxy_fcgi:error] [pid 4860:tid 5228] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:54.479551 2026] [proxy_fcgi:error] [pid 4860:tid 5220] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:54.750732 2026] [proxy_fcgi:error] [pid 4860:tid 5233] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:55.016494 2026] [proxy_fcgi:error] [pid 4860:tid 5216] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:55.295613 2026] [proxy_fcgi:error] [pid 4860:tid 5227] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:55.561527 2026] [proxy_fcgi:error] [pid 4860:tid 5217] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:55.828372 2026] [proxy_fcgi:error] [pid 4860:tid 5219] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:56.102756 2026] [proxy_fcgi:error] [pid 4860:tid 5232] [client 4.225.222.162:8640] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:53:56.365149 2026] [:error] [pid 4860:tid 5229] [client 4.225.222.162:8640] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adVSxAn6KmY32L3WSeH00QAAAI4"]
[Wed Apr 08 02:54:02.433784 2026] [:error] [pid 5246:tid 5272] [client 4.225.222.162:8631] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adVSyhLpySxaVC8kLEazdAAAANY"]
[Wed Apr 08 02:54:04.749505 2026] [:error] [pid 4840:tid 5175] [client 4.225.222.162:6447] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adVSzBsUwg2fEe9p9LT8LAAAAA8"]
[Wed Apr 08 02:54:06.614014 2026] [:error] [pid 303:tid 322] [client 4.225.222.162:16374] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adVSzs9wWR0DHTrNMug1oQAAAVA"]
[Wed Apr 08 02:54:09.180803 2026] [:error] [pid 5246:tid 5258] [client 4.225.222.162:16331] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adVS0RLpySxaVC8kLEazlgAAAMg"]
[Wed Apr 08 02:54:12.527848 2026] [:error] [pid 5337:tid 5360] [client 4.225.222.162:41733] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adVS1CboIFdw6tlcN11kwAAAAQI"]
[Wed Apr 08 02:54:15.996071 2026] [:error] [pid 4860:tid 5230] [client 4.225.222.162:64824] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adVS1wn6KmY32L3WSeH1EgAAAI8"]
[Wed Apr 08 02:54:20.356682 2026] [:error] [pid 5337:tid 5369] [client 4.225.222.162:57721] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adVS3CboIFdw6tlcN11k7wAAAQs"]
[Wed Apr 08 02:54:23.625025 2026] [:error] [pid 303:tid 315] [client 4.225.222.162:57669] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adVS389wWR0DHTrNMug19AAAAUk"]
[Wed Apr 08 02:54:24.947879 2026] [:error] [pid 5246:tid 5262] [client 4.225.222.162:53314] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adVS4BLpySxaVC8kLEazyAAAAMw"]
[Wed Apr 08 02:54:26.441514 2026] [:error] [pid 5246:tid 5259] [client 4.225.222.162:36609] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adVS4hLpySxaVC8kLEaz0wAAAMk"]
[Wed Apr 08 02:54:28.982358 2026] [:error] [pid 303:tid 315] [client 4.225.222.162:14699] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adVS5M9wWR0DHTrNMug2JgAAAUk"]
[Wed Apr 08 02:54:32.292258 2026] [:error] [pid 4842:tid 5211] [client 4.225.222.162:7567] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVS6JdncJIGbBiMOXTwEAAAAFc"]
[Wed Apr 08 02:54:36.011934 2026] [:error] [pid 303:tid 320] [client 4.225.222.162:14665] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVS7M9wWR0DHTrNMug2SgAAAU4"]
[Wed Apr 08 02:54:39.795497 2026] [:error] [pid 5337:tid 5374] [client 4.225.222.162:4385] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVS7yboIFdw6tlcN11lggAAARA"]
[Wed Apr 08 02:54:40.913598 2026] [:error] [pid 4860:tid 5217] [client 4.225.222.162:11009] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVS8An6KmY32L3WSeH1UAAAAII"]
[Wed Apr 08 02:54:41.786092 2026] [:error] [pid 5337:tid 5377] [client 4.225.222.162:6223] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVS8SboIFdw6tlcN11liQAAARM"]
[Wed Apr 08 02:54:43.811522 2026] [:error] [pid 4860:tid 5231] [client 4.225.222.162:6214] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVS8wn6KmY32L3WSeH1WAAAAJA"]
[Wed Apr 08 02:54:44.939595 2026] [:error] [pid 303:tid 320] [client 4.225.222.162:36648] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVS9M9wWR0DHTrNMug2hwAAAU4"]
[Wed Apr 08 02:54:48.758629 2026] [:error] [pid 5337:tid 5366] [client 4.225.222.162:15435] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adVS-CboIFdw6tlcN11l0AAAAQg"]
[Wed Apr 08 02:54:51.830525 2026] [:error] [pid 4840:tid 5168] [client 4.225.222.162:36638] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adVS-xsUwg2fEe9p9LT81QAAAAg"]
[Wed Apr 08 02:54:54.252476 2026] [:error] [pid 5337:tid 5359] [client 4.225.222.162:64716] [client 4.225.222.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adVS_iboIFdw6tlcN11l6AAAAQE"]
[Wed Apr 08 02:54:57.988689 2026] [proxy_fcgi:error] [pid 303:tid 323] [client 4.225.222.162:33507] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:54:58.758864 2026] [proxy_fcgi:error] [pid 303:tid 326] [client 4.225.222.162:33507] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:54:59.025283 2026] [proxy_fcgi:error] [pid 303:tid 319] [client 4.225.222.162:33507] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:25:35.473000 2026] [:error] [pid 49984:tid 50007] [client 103.168.67.159:4630] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "adWuj-YY_Bz5lRHcJIE-ewAAAVE"]
[Wed Apr 08 09:25:36.172683 2026] [:error] [pid 47732:tid 47740] [client 103.168.67.159:5188] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "adWukIm4N5QW9Mh7G128GQAAAMY"]
[Wed Apr 08 09:25:36.876642 2026] [:error] [pid 47627:tid 47702] [client 103.168.67.159:5742] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "adWukHOljf1Quv_kDjn0zgAAAIM"]
[Wed Apr 08 09:25:37.581881 2026] [:error] [pid 47626:tid 47688] [client 103.168.67.159:6262] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "adWukajWI8TWtHx2sdZKUwAAAFQ"]
[Wed Apr 08 09:25:38.286106 2026] [:error] [pid 47625:tid 47647] [client 103.168.67.159:6780] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dashboard"] [unique_id "adWukiVuHyNWzZlE8PA3DQAAAA0"]
[Wed Apr 08 09:25:39.002553 2026] [:error] [pid 544:tid 558] [client 103.168.67.159:7246] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dashboard"] [unique_id "adWukzieLKSoiLVA6YfDLwAAAYk"]
[Wed Apr 08 09:25:39.701490 2026] [:error] [pid 47732:tid 47738] [client 103.168.67.159:7720] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dashboard"] [unique_id "adWuk4m4N5QW9Mh7G128UgAAAMQ"]
[Wed Apr 08 09:25:40.405011 2026] [:error] [pid 544:tid 572] [client 103.168.67.159:8084] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dashboard"] [unique_id "adWulDieLKSoiLVA6YfDOgAAAZc"]
[Wed Apr 08 12:41:02.238213 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:02.450034 2026] [proxy_fcgi:error] [pid 12490:tid 12511] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:02.663400 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:02.873195 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:03.087921 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:03.300987 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:03.511589 2026] [proxy_fcgi:error] [pid 12490:tid 12508] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:03.723181 2026] [proxy_fcgi:error] [pid 12490:tid 12506] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:04.145315 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:04.357775 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:04.571570 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:04.781107 2026] [proxy_fcgi:error] [pid 12490:tid 12512] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:04.991581 2026] [proxy_fcgi:error] [pid 12490:tid 12501] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:05.201928 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:05.411936 2026] [proxy_fcgi:error] [pid 12490:tid 12508] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:05.621185 2026] [proxy_fcgi:error] [pid 12490:tid 12506] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:05.830659 2026] [proxy_fcgi:error] [pid 12490:tid 12515] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:06.042252 2026] [proxy_fcgi:error] [pid 12490:tid 12510] [client 194.54.144.97:50844] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:08.999059 2026] [:error] [pid 12490:tid 12503] [client 194.54.144.97:50844] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adXcZG1Fea4F4fbumr0gBwAAAMs"]
[Wed Apr 08 12:41:10.055348 2026] [:error] [pid 12453:tid 12459] [client 194.54.144.97:54002] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adXcZhjtW7S6XsLPvrTxHAAAAIQ"]
[Wed Apr 08 12:41:11.260934 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:54006] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:11.893802 2026] [:error] [pid 12490:tid 12497] [client 194.54.144.97:54006] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adXcZ21Fea4F4fbumr0gFwAAAMU"]
[Wed Apr 08 12:41:12.762187 2026] [proxy_fcgi:error] [pid 12490:tid 12514] [client 194.54.144.97:54018] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:12.969922 2026] [:error] [pid 12490:tid 12495] [client 194.54.144.97:54018] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adXcaG1Fea4F4fbumr0gIAAAAMM"]
[Wed Apr 08 12:41:13.599245 2026] [proxy_fcgi:error] [pid 12453:tid 12475] [client 194.54.144.97:54032] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:15.928040 2026] [:error] [pid 12453:tid 12455] [client 194.54.144.97:54032] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adXcaxjtW7S6XsLPvrTxQAAAAIA"]
[Wed Apr 08 12:41:17.004684 2026] [:error] [pid 12490:tid 12509] [client 194.54.144.97:54048] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adXcbW1Fea4F4fbumr0gLgAAANE"]
[Wed Apr 08 12:41:17.417764 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:54058] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adXcbW1Fea4F4fbumr0gMQAAAMQ"]
[Wed Apr 08 12:41:17.834626 2026] [:error] [pid 12490:tid 12493] [client 194.54.144.97:54072] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adXcbW1Fea4F4fbumr0gNAAAAME"]
[Wed Apr 08 12:41:18.247344 2026] [:error] [pid 12453:tid 12464] [client 194.54.144.97:54086] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adXcbhjtW7S6XsLPvrTxQgAAAIk"]
[Wed Apr 08 12:41:18.660111 2026] [:error] [pid 12453:tid 12471] [client 194.54.144.97:53834] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adXcbhjtW7S6XsLPvrTxQwAAAJA"]
[Wed Apr 08 12:41:19.283678 2026] [:error] [pid 12386:tid 12435] [client 194.54.144.97:53846] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adXcbxLhhLtqHi2gK7UwdQAAARM"]
[Wed Apr 08 12:41:19.700484 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 194.54.144.97:53856] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:20.117986 2026] [:error] [pid 12453:tid 12459] [client 194.54.144.97:53856] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/filemanager.php"] [unique_id "adXccBjtW7S6XsLPvrTxSQAAAIQ"]
[Wed Apr 08 12:41:20.956108 2026] [:error] [pid 12453:tid 12464] [client 194.54.144.97:53864] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adXccBjtW7S6XsLPvrTxTwAAAIk"]
[Wed Apr 08 12:41:21.579923 2026] [:error] [pid 12386:tid 12431] [client 194.54.144.97:53868] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adXccRLhhLtqHi2gK7UwgAAAAQ8"]
[Wed Apr 08 12:41:21.994805 2026] [proxy_fcgi:error] [pid 12490:tid 12501] [client 194.54.144.97:53872] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:22.206168 2026] [:error] [pid 12490:tid 12509] [client 194.54.144.97:53872] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adXccm1Fea4F4fbumr0gRAAAANE"]
[Wed Apr 08 12:41:22.621130 2026] [proxy_fcgi:error] [pid 12453:tid 12462] [client 194.54.144.97:53882] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:23.263474 2026] [proxy_fcgi:error] [pid 12453:tid 12475] [client 194.54.144.97:53882] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:23.895962 2026] [:error] [pid 12453:tid 12467] [client 194.54.144.97:53882] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adXccxjtW7S6XsLPvrTxXAAAAIw"]
[Wed Apr 08 12:41:24.314079 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 194.54.144.97:53896] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:24.522908 2026] [:error] [pid 12453:tid 12476] [client 194.54.144.97:53896] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adXcdBjtW7S6XsLPvrTxYAAAAJU"]
[Wed Apr 08 12:41:24.940597 2026] [proxy_fcgi:error] [pid 12490:tid 12503] [client 194.54.144.97:53898] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:25.365065 2026] [:error] [pid 12490:tid 12499] [client 194.54.144.97:53898] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adXcdW1Fea4F4fbumr0gUgAAAMc"]
[Wed Apr 08 12:41:25.989821 2026] [:error] [pid 12453:tid 12467] [client 194.54.144.97:53910] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adXcdRjtW7S6XsLPvrTxZAAAAIw"]
[Wed Apr 08 12:41:26.617038 2026] [proxy_fcgi:error] [pid 12490:tid 12514] [client 194.54.144.97:53926] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:26.826196 2026] [proxy_fcgi:error] [pid 12490:tid 12500] [client 194.54.144.97:53926] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:27.241341 2026] [:error] [pid 12490:tid 12499] [client 194.54.144.97:53926] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adXcd21Fea4F4fbumr0gdQAAAMc"]
[Wed Apr 08 12:41:27.863798 2026] [:error] [pid 12386:tid 12433] [client 194.54.144.97:53940] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adXcdxLhhLtqHi2gK7UwkQAAARE"]
[Wed Apr 08 12:41:28.488269 2026] [:error] [pid 12490:tid 12493] [client 194.54.144.97:53946] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adXceG1Fea4F4fbumr0ghAAAAME"]
[Wed Apr 08 12:41:28.907206 2026] [:error] [pid 12386:tid 12418] [client 194.54.144.97:59340] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adXceBLhhLtqHi2gK7UwkgAAAQI"]
[Wed Apr 08 12:41:29.322956 2026] [:error] [pid 12490:tid 12507] [client 194.54.144.97:59346] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adXceW1Fea4F4fbumr0gjAAAAM8"]
[Wed Apr 08 12:41:30.167849 2026] [proxy_fcgi:error] [pid 12385:tid 12397] [client 194.54.144.97:59350] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:30.375196 2026] [:error] [pid 12385:tid 12413] [client 194.54.144.97:59350] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adXceiAjtvRQEkLosq3mWAAAABg"]
[Wed Apr 08 12:41:30.788208 2026] [:error] [pid 12490:tid 12513] [client 194.54.144.97:59354] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adXcem1Fea4F4fbumr0gmAAAANU"]
[Wed Apr 08 12:41:31.200941 2026] [:error] [pid 12453:tid 12456] [client 194.54.144.97:59356] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adXcexjtW7S6XsLPvrTxcQAAAIE"]
[Wed Apr 08 12:41:32.042380 2026] [proxy_fcgi:error] [pid 12386:tid 12438] [client 194.54.144.97:59362] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:32.466401 2026] [proxy_fcgi:error] [pid 12386:tid 12435] [client 194.54.144.97:59362] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:33.302942 2026] [:error] [pid 12386:tid 12419] [client 194.54.144.97:59362] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adXcfRLhhLtqHi2gK7UwowAAAQM"]
[Wed Apr 08 12:41:34.351696 2026] [:error] [pid 12385:tid 12405] [client 194.54.144.97:59374] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adXcfiAjtvRQEkLosq3megAAABA"]
[Wed Apr 08 12:41:34.564894 2026] [proxy_fcgi:error] [pid 12385:tid 12412] [client 194.54.144.97:59374] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:35.625920 2026] [proxy_fcgi:error] [pid 12385:tid 12389] [client 194.54.144.97:59374] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:35.837479 2026] [proxy_fcgi:error] [pid 12385:tid 12399] [client 194.54.144.97:59374] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:38.283692 2026] [:error] [pid 12385:tid 12410] [client 194.54.144.97:59374] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adXcgiAjtvRQEkLosq3mkwAAABU"]
[Wed Apr 08 12:41:38.929884 2026] [proxy_fcgi:error] [pid 12385:tid 12394] [client 194.54.144.97:58234] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:40.048922 2026] [:error] [pid 12385:tid 12404] [client 194.54.144.97:58234] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adXchCAjtvRQEkLosq3moQAAAA8"]
[Wed Apr 08 12:41:40.472202 2026] [:error] [pid 12385:tid 12401] [client 194.54.144.97:58234] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/item.php"] [unique_id "adXchCAjtvRQEkLosq3mpwAAAAw"]
[Wed Apr 08 12:41:41.741081 2026] [proxy_fcgi:error] [pid 12490:tid 12503] [client 194.54.144.97:58244] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:42.165425 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 194.54.144.97:58244] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:42.589014 2026] [:error] [pid 12490:tid 12516] [client 194.54.144.97:58244] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adXchm1Fea4F4fbumr0g9wAAANg"]
[Wed Apr 08 12:41:43.007719 2026] [proxy_fcgi:error] [pid 12386:tid 12421] [client 194.54.144.97:58256] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:43.645876 2026] [proxy_fcgi:error] [pid 12386:tid 12426] [client 194.54.144.97:58256] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:44.067813 2026] [proxy_fcgi:error] [pid 12386:tid 12427] [client 194.54.144.97:58256] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:44.492328 2026] [proxy_fcgi:error] [pid 12386:tid 12438] [client 194.54.144.97:58256] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:44.701640 2026] [:error] [pid 12386:tid 12437] [client 194.54.144.97:58256] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adXciBLhhLtqHi2gK7UwxQAAARU"]
[Wed Apr 08 12:41:45.118002 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 194.54.144.97:58266] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:45.328297 2026] [proxy_fcgi:error] [pid 12490:tid 12494] [client 194.54.144.97:58266] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:45.535441 2026] [:error] [pid 12490:tid 12511] [client 194.54.144.97:58266] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adXciW1Fea4F4fbumr0hDAAAANM"]
[Wed Apr 08 12:41:46.160979 2026] [proxy_fcgi:error] [pid 12490:tid 12498] [client 194.54.144.97:58276] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:46.579814 2026] [:error] [pid 12490:tid 12512] [client 194.54.144.97:58276] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adXcim1Fea4F4fbumr0hGgAAANQ"]
[Wed Apr 08 12:41:46.795168 2026] [:error] [pid 12490:tid 12509] [client 194.54.144.97:58276] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adXcim1Fea4F4fbumr0hHQAAANE"]
[Wed Apr 08 12:41:50.492975 2026] [proxy_fcgi:error] [pid 12490:tid 12507] [client 194.54.144.97:58282] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:51.761139 2026] [proxy_fcgi:error] [pid 12490:tid 12507] [client 194.54.144.97:58282] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:51.969467 2026] [:error] [pid 12490:tid 12504] [client 194.54.144.97:58282] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adXcj21Fea4F4fbumr0hWgAAAMw"]
[Wed Apr 08 12:41:52.388124 2026] [proxy_fcgi:error] [pid 12386:tid 12436] [client 194.54.144.97:51962] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:53.015067 2026] [:error] [pid 12386:tid 12435] [client 194.54.144.97:51962] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adXckRLhhLtqHi2gK7Uw8AAAARM"]
[Wed Apr 08 12:41:53.229500 2026] [proxy_fcgi:error] [pid 12386:tid 12439] [client 194.54.144.97:51962] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:53.441832 2026] [proxy_fcgi:error] [pid 12386:tid 12430] [client 194.54.144.97:51962] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:53.656303 2026] [proxy_fcgi:error] [pid 12386:tid 12432] [client 194.54.144.97:51962] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:53.862957 2026] [:error] [pid 12386:tid 12437] [client 194.54.144.97:51962] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adXckRLhhLtqHi2gK7Uw9QAAARU"]
[Wed Apr 08 12:41:54.277927 2026] [proxy_fcgi:error] [pid 12453:tid 12460] [client 194.54.144.97:51970] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:54.483825 2026] [:error] [pid 12453:tid 12479] [client 194.54.144.97:51970] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adXckhjtW7S6XsLPvrTxtAAAAJg"]
[Wed Apr 08 12:41:55.112772 2026] [proxy_fcgi:error] [pid 12453:tid 12473] [client 194.54.144.97:51978] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:55.320147 2026] [:error] [pid 12453:tid 12463] [client 194.54.144.97:51978] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adXckxjtW7S6XsLPvrTxuwAAAIg"]
[Wed Apr 08 12:41:56.162774 2026] [proxy_fcgi:error] [pid 12453:tid 12464] [client 194.54.144.97:51986] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:56.371702 2026] [:error] [pid 12453:tid 12462] [client 194.54.144.97:51986] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adXclBjtW7S6XsLPvrTxyQAAAIc"]
[Wed Apr 08 12:41:56.783526 2026] [:error] [pid 12490:tid 12512] [client 194.54.144.97:51994] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adXclG1Fea4F4fbumr0hbQAAANQ"]
[Wed Apr 08 12:41:57.201194 2026] [proxy_fcgi:error] [pid 12453:tid 12472] [client 194.54.144.97:51996] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:57.412324 2026] [proxy_fcgi:error] [pid 12453:tid 12474] [client 194.54.144.97:51996] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:41:58.249648 2026] [:error] [pid 12453:tid 12457] [client 194.54.144.97:51996] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adXclhjtW7S6XsLPvrTx3AAAAII"]
[Wed Apr 08 12:41:58.871154 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:38622] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adXclm1Fea4F4fbumr0hgwAAAMI"]
[Wed Apr 08 12:41:59.915043 2026] [:error] [pid 12453:tid 12473] [client 194.54.144.97:38636] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adXclxjtW7S6XsLPvrTx4gAAAJI"]
[Wed Apr 08 12:42:00.345797 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 194.54.144.97:38644] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:00.776479 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:38644] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:00.987059 2026] [:error] [pid 12490:tid 12511] [client 194.54.144.97:38644] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adXcmG1Fea4F4fbumr0hxwAAANM"]
[Wed Apr 08 12:42:01.403293 2026] [proxy_fcgi:error] [pid 12385:tid 12390] [client 194.54.144.97:38648] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:01.818855 2026] [:error] [pid 12385:tid 12411] [client 194.54.144.97:38648] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/click.php"] [unique_id "adXcmSAjtvRQEkLosq3mwAAAABY"]
[Wed Apr 08 12:42:02.858630 2026] [:error] [pid 12490:tid 12508] [client 194.54.144.97:38662] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adXcmm1Fea4F4fbumr0h2QAAANA"]
[Wed Apr 08 12:42:03.490098 2026] [proxy_fcgi:error] [pid 12453:tid 12459] [client 194.54.144.97:38664] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:04.126473 2026] [proxy_fcgi:error] [pid 12453:tid 12479] [client 194.54.144.97:38664] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:04.547788 2026] [proxy_fcgi:error] [pid 12453:tid 12455] [client 194.54.144.97:38664] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:04.754104 2026] [:error] [pid 12453:tid 12469] [client 194.54.144.97:38664] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adXcnBjtW7S6XsLPvrTx8gAAAI4"]
[Wed Apr 08 12:42:05.165504 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:38674] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adXcnW1Fea4F4fbumr0h4QAAAMQ"]
[Wed Apr 08 12:42:05.576646 2026] [:error] [pid 12386:tid 12437] [client 194.54.144.97:38680] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adXcnRLhhLtqHi2gK7UxIAAAARU"]
[Wed Apr 08 12:42:05.987815 2026] [:error] [pid 12386:tid 12424] [client 194.54.144.97:38690] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adXcnRLhhLtqHi2gK7UxJQAAAQg"]
[Wed Apr 08 12:42:06.403654 2026] [proxy_fcgi:error] [pid 12386:tid 12420] [client 194.54.144.97:38700] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:06.615929 2026] [:error] [pid 12386:tid 12429] [client 194.54.144.97:38700] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adXcnhLhhLtqHi2gK7UxKQAAAQ0"]
[Wed Apr 08 12:42:07.029720 2026] [:error] [pid 12453:tid 12474] [client 194.54.144.97:38704] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adXcnxjtW7S6XsLPvrTx-QAAAJM"]
[Wed Apr 08 12:42:07.446602 2026] [proxy_fcgi:error] [pid 12386:tid 12437] [client 194.54.144.97:38716] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:07.868439 2026] [:error] [pid 12386:tid 12424] [client 194.54.144.97:38716] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adXcnxLhhLtqHi2gK7UxMQAAAQg"]
[Wed Apr 08 12:42:08.280352 2026] [:error] [pid 12385:tid 12400] [client 194.54.144.97:38732] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adXcoCAjtvRQEkLosq3mxgAAAAs"]
[Wed Apr 08 12:42:08.692659 2026] [:error] [pid 12453:tid 12468] [client 194.54.144.97:41514] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adXcoBjtW7S6XsLPvrTx_QAAAI0"]
[Wed Apr 08 12:42:09.104773 2026] [:error] [pid 12453:tid 12467] [client 194.54.144.97:41526] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adXcoRjtW7S6XsLPvrTx_wAAAIw"]
[Wed Apr 08 12:42:09.737416 2026] [:error] [pid 12453:tid 12472] [client 194.54.144.97:41540] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adXcoRjtW7S6XsLPvrTyAwAAAJE"]
[Wed Apr 08 12:42:10.570459 2026] [:error] [pid 12386:tid 12417] [client 194.54.144.97:41552] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adXcohLhhLtqHi2gK7UxPgAAAQE"]
[Wed Apr 08 12:42:10.985009 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 194.54.144.97:41568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:11.618279 2026] [proxy_fcgi:error] [pid 12453:tid 12469] [client 194.54.144.97:41568] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:11.829528 2026] [:error] [pid 12453:tid 12457] [client 194.54.144.97:41568] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adXcoxjtW7S6XsLPvrTyCQAAAII"]
[Wed Apr 08 12:42:12.458545 2026] [proxy_fcgi:error] [pid 12385:tid 12409] [client 194.54.144.97:41578] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:12.671129 2026] [proxy_fcgi:error] [pid 12385:tid 12410] [client 194.54.144.97:41578] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:13.724418 2026] [:error] [pid 12385:tid 12390] [client 194.54.144.97:41578] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adXcpSAjtvRQEkLosq3m8QAAAAE"]
[Wed Apr 08 12:42:14.772858 2026] [:error] [pid 12490:tid 12492] [client 194.54.144.97:41584] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adXcpm1Fea4F4fbumr0h_AAAAMA"]
[Wed Apr 08 12:42:15.185006 2026] [:error] [pid 12386:tid 12428] [client 194.54.144.97:41592] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adXcpxLhhLtqHi2gK7UxTAAAAQw"]
[Wed Apr 08 12:42:16.435136 2026] [:error] [pid 12490:tid 12497] [client 194.54.144.97:41598] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adXcqG1Fea4F4fbumr0iAwAAAMU"]
[Wed Apr 08 12:42:17.277216 2026] [proxy_fcgi:error] [pid 12386:tid 12431] [client 194.54.144.97:41600] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:17.487840 2026] [proxy_fcgi:error] [pid 12386:tid 12422] [client 194.54.144.97:41600] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:17.700205 2026] [proxy_fcgi:error] [pid 12386:tid 12439] [client 194.54.144.97:41600] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:17.910861 2026] [proxy_fcgi:error] [pid 12386:tid 12435] [client 194.54.144.97:41600] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:18.968692 2026] [:error] [pid 12386:tid 12422] [client 194.54.144.97:41600] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adXcqhLhhLtqHi2gK7UxawAAAQY"]
[Wed Apr 08 12:42:19.380935 2026] [:error] [pid 12490:tid 12514] [client 194.54.144.97:56642] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adXcq21Fea4F4fbumr0iEwAAANY"]
[Wed Apr 08 12:42:19.794331 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:56650] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adXcq21Fea4F4fbumr0iFgAAAMQ"]
[Wed Apr 08 12:42:20.207417 2026] [:error] [pid 12385:tid 12402] [client 194.54.144.97:56662] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adXcrCAjtvRQEkLosq3nBwAAAA0"]
[Wed Apr 08 12:42:20.621861 2026] [:error] [pid 12490:tid 12501] [client 194.54.144.97:56670] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adXcrG1Fea4F4fbumr0iGQAAAMk"]
[Wed Apr 08 12:42:21.042102 2026] [:error] [pid 12386:tid 12440] [client 194.54.144.97:56684] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adXcrRLhhLtqHi2gK7UxbgAAARg"]
[Wed Apr 08 12:42:21.667631 2026] [:error] [pid 12490:tid 12512] [client 194.54.144.97:56700] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adXcrW1Fea4F4fbumr0iJAAAANQ"]
[Wed Apr 08 12:42:22.080088 2026] [:error] [pid 12490:tid 12495] [client 194.54.144.97:56710] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adXcrm1Fea4F4fbumr0iJgAAAMM"]
[Wed Apr 08 12:42:22.491962 2026] [:error] [pid 12490:tid 12506] [client 194.54.144.97:56726] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adXcrm1Fea4F4fbumr0iKQAAAM4"]
[Wed Apr 08 12:42:22.904721 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:56728] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adXcrm1Fea4F4fbumr0iLwAAAMI"]
[Wed Apr 08 12:42:23.736100 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:56738] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adXcr21Fea4F4fbumr0iOQAAAMQ"]
[Wed Apr 08 12:42:24.357576 2026] [:error] [pid 12453:tid 12466] [client 194.54.144.97:56748] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adXcsBjtW7S6XsLPvrTyIQAAAIs"]
[Wed Apr 08 12:42:24.776329 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 194.54.144.97:56752] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:25.191664 2026] [:error] [pid 12490:tid 12507] [client 194.54.144.97:56752] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adXcsW1Fea4F4fbumr0iQAAAAM8"]
[Wed Apr 08 12:42:26.023368 2026] [:error] [pid 12453:tid 12473] [client 194.54.144.97:56758] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adXcshjtW7S6XsLPvrTyLAAAAJI"]
[Wed Apr 08 12:42:26.856149 2026] [proxy_fcgi:error] [pid 12386:tid 12430] [client 194.54.144.97:56764] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:27.062169 2026] [:error] [pid 12386:tid 12420] [client 194.54.144.97:56764] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adXcsxLhhLtqHi2gK7UxdQAAAQQ"]
[Wed Apr 08 12:42:27.685995 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:56780] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:27.896476 2026] [proxy_fcgi:error] [pid 12490:tid 12500] [client 194.54.144.97:56780] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:28.105501 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 194.54.144.97:56780] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:29.599582 2026] [:error] [pid 12490:tid 12503] [client 194.54.144.97:56780] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adXctW1Fea4F4fbumr0iTwAAAMs"]
[Wed Apr 08 12:42:30.015187 2026] [proxy_fcgi:error] [pid 12453:tid 12460] [client 194.54.144.97:45906] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:30.220764 2026] [:error] [pid 12453:tid 12457] [client 194.54.144.97:45906] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adXcthjtW7S6XsLPvrTyOAAAAII"]
[Wed Apr 08 12:42:31.063624 2026] [proxy_fcgi:error] [pid 12453:tid 12477] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:32.754909 2026] [proxy_fcgi:error] [pid 12453:tid 12479] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:32.964398 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:34.016050 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:34.227075 2026] [proxy_fcgi:error] [pid 12453:tid 12456] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:34.647142 2026] [proxy_fcgi:error] [pid 12453:tid 12466] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:35.275021 2026] [proxy_fcgi:error] [pid 12453:tid 12468] [client 194.54.144.97:45922] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:35.481518 2026] [:error] [pid 12453:tid 12460] [client 194.54.144.97:45922] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adXcuxjtW7S6XsLPvrTyUwAAAIU"]
[Wed Apr 08 12:42:35.894725 2026] [:error] [pid 12386:tid 12425] [client 194.54.144.97:45934] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adXcuxLhhLtqHi2gK7UxhAAAAQk"]
[Wed Apr 08 12:42:36.314386 2026] [proxy_fcgi:error] [pid 12385:tid 12411] [client 194.54.144.97:45948] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:37.546271 2026] [:error] [pid 12385:tid 12402] [client 194.54.144.97:45948] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adXcvSAjtvRQEkLosq3nTgAAAA0"]
[Wed Apr 08 12:42:38.171720 2026] [proxy_fcgi:error] [pid 12386:tid 12433] [client 194.54.144.97:45954] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:38.379534 2026] [:error] [pid 12386:tid 12432] [client 194.54.144.97:45954] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adXcvhLhhLtqHi2gK7UxiwAAARA"]
[Wed Apr 08 12:42:38.792646 2026] [:error] [pid 12490:tid 12503] [client 194.54.144.97:60956] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adXcvm1Fea4F4fbumr0iegAAAMs"]
[Wed Apr 08 12:42:40.042918 2026] [:error] [pid 12453:tid 12455] [client 194.54.144.97:60970] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adXcwBjtW7S6XsLPvrTyYgAAAIA"]
[Wed Apr 08 12:42:40.454504 2026] [:error] [pid 12385:tid 12413] [client 194.54.144.97:60980] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "adXcwCAjtvRQEkLosq3nXQAAABg"]
[Wed Apr 08 12:42:41.504123 2026] [proxy_fcgi:error] [pid 12490:tid 12497] [client 194.54.144.97:60986] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:41.924057 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:60986] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adXcwW1Fea4F4fbumr0ihgAAAMI"]
[Wed Apr 08 12:42:42.553129 2026] [proxy_fcgi:error] [pid 12490:tid 12502] [client 194.54.144.97:60998] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:42.969177 2026] [:error] [pid 12490:tid 12507] [client 194.54.144.97:60998] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/function.php"] [unique_id "adXcwm1Fea4F4fbumr0ijQAAAM8"]
[Wed Apr 08 12:42:43.382206 2026] [:error] [pid 12385:tid 12389] [client 194.54.144.97:32770] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adXcwyAjtvRQEkLosq3nbAAAAAA"]
[Wed Apr 08 12:42:44.011616 2026] [proxy_fcgi:error] [pid 12490:tid 12504] [client 194.54.144.97:32782] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:44.217525 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:32782] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adXcxG1Fea4F4fbumr0ikgAAAMI"]
[Wed Apr 08 12:42:44.629766 2026] [:error] [pid 12490:tid 12509] [client 194.54.144.97:32786] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adXcxG1Fea4F4fbumr0ilAAAANE"]
[Wed Apr 08 12:42:45.470081 2026] [proxy_fcgi:error] [pid 12453:tid 12462] [client 194.54.144.97:32802] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:45.679662 2026] [proxy_fcgi:error] [pid 12453:tid 12458] [client 194.54.144.97:32802] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:46.101406 2026] [proxy_fcgi:error] [pid 12453:tid 12465] [client 194.54.144.97:32802] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:46.517847 2026] [:error] [pid 12453:tid 12466] [client 194.54.144.97:32802] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adXcxhjtW7S6XsLPvrTyewAAAIs"]
[Wed Apr 08 12:42:46.937408 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:32818] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adXcxm1Fea4F4fbumr0ingAAAMQ"]
[Wed Apr 08 12:42:47.992491 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 194.54.144.97:32828] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:48.201788 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:32828] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/index.php"] [unique_id "adXcyG1Fea4F4fbumr0irQAAAMI"]
[Wed Apr 08 12:42:48.612486 2026] [:error] [pid 12386:tid 12419] [client 194.54.144.97:55668] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adXcyBLhhLtqHi2gK7UxogAAAQM"]
[Wed Apr 08 12:42:49.023831 2026] [:error] [pid 12490:tid 12516] [client 194.54.144.97:55684] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adXcyW1Fea4F4fbumr0itQAAANg"]
[Wed Apr 08 12:42:50.281870 2026] [proxy_fcgi:error] [pid 12490:tid 12494] [client 194.54.144.97:55692] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:50.488472 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:55692] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adXcym1Fea4F4fbumr0iywAAAMQ"]
[Wed Apr 08 12:42:51.108625 2026] [:error] [pid 12386:tid 12424] [client 194.54.144.97:55694] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adXcyxLhhLtqHi2gK7UxqQAAAQg"]
[Wed Apr 08 12:42:51.523049 2026] [proxy_fcgi:error] [pid 12490:tid 12500] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:51.731881 2026] [proxy_fcgi:error] [pid 12490:tid 12515] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:52.151779 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:52.990030 2026] [:error] [pid 12490:tid 12492] [client 194.54.144.97:55696] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/js/wp-login.php"] [unique_id "adXczG1Fea4F4fbumr0i6gAAAMA"]
[Wed Apr 08 12:42:53.415049 2026] [:error] [pid 12490:tid 12495] [client 194.54.144.97:55696] File does not exist: /home/quarryspec/quarryspec.com.au/worm.PhP
[Wed Apr 08 12:42:53.627164 2026] [proxy_fcgi:error] [pid 12490:tid 12511] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:53.836839 2026] [proxy_fcgi:error] [pid 12490:tid 12493] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:54.254757 2026] [:error] [pid 12490:tid 12514] [client 194.54.144.97:55696] [client 194.54.144.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.97, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adXczm1Fea4F4fbumr0i_QAAANY"]
[Wed Apr 08 12:42:54.894780 2026] [proxy_fcgi:error] [pid 12490:tid 12513] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:55.105813 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:55.524501 2026] [proxy_fcgi:error] [pid 12490:tid 12508] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:55.946156 2026] [proxy_fcgi:error] [pid 12490:tid 12494] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:56.577972 2026] [proxy_fcgi:error] [pid 12490:tid 12499] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:59.640229 2026] [proxy_fcgi:error] [pid 12490:tid 12500] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:42:59.850027 2026] [proxy_fcgi:error] [pid 12490:tid 12502] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:43:00.909424 2026] [proxy_fcgi:error] [pid 12490:tid 12515] [client 194.54.144.97:55696] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:43:01.337715 2026] [:error] [pid 12490:tid 12497] [client 194.54.144.97:55696] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adXc1W1Fea4F4fbumr0jQwAAAMU"]
[Wed Apr 08 12:43:02.180015 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 194.54.144.97:32589] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 12:43:02.403766 2026] [:error] [pid 12490:tid 12515] [client 194.54.144.97:32589] [client 194.54.144.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adXc1m1Fea4F4fbumr0jUAAAANc"]
[Wed Apr 08 12:43:02.822609 2026] [:error] [pid 12490:tid 12501] [client 194.54.144.97:54322] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/slider.php"] [unique_id "adXc1m1Fea4F4fbumr0jVwAAAMk"]
[Wed Apr 08 12:43:03.235016 2026] [:error] [pid 12490:tid 12513] [client 194.54.144.97:54330] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/slider.php"] [unique_id "adXc121Fea4F4fbumr0jWwAAANU"]
[Wed Apr 08 12:43:03.871758 2026] [:error] [pid 12490:tid 12494] [client 194.54.144.97:54342] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/slider.php"] [unique_id "adXc121Fea4F4fbumr0jZgAAAMI"]
[Wed Apr 08 12:43:04.286835 2026] [:error] [pid 12490:tid 12501] [client 194.54.144.97:54350] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/slider.php"] [unique_id "adXc2G1Fea4F4fbumr0jbQAAAMk"]
[Wed Apr 08 12:43:07.655820 2026] [:error] [pid 12385:tid 12397] [client 194.54.144.97:54356] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "adXc2yAjtvRQEkLosq3npgAAAAg"]
[Wed Apr 08 12:43:08.067818 2026] [:error] [pid 12386:tid 12436] [client 194.54.144.97:54370] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "adXc3BLhhLtqHi2gK7UxzQAAARQ"]
[Wed Apr 08 12:43:08.480689 2026] [:error] [pid 12453:tid 12470] [client 194.54.144.97:54386] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "adXc3BjtW7S6XsLPvrTymwAAAI8"]
[Wed Apr 08 12:43:08.891525 2026] [:error] [pid 12490:tid 12513] [client 194.54.144.97:49234] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "adXc3G1Fea4F4fbumr0jkQAAANU"]
[Wed Apr 08 12:43:09.304546 2026] [:error] [pid 12490:tid 12496] [client 194.54.144.97:49248] [client 194.54.144.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "adXc3W1Fea4F4fbumr0jmgAAAMQ"]
[Thu Apr 09 08:37:35.059215 2026] [proxy_fcgi:error] [pid 20641:tid 20650] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:35.269559 2026] [proxy_fcgi:error] [pid 20641:tid 20655] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:35.482183 2026] [proxy_fcgi:error] [pid 20641:tid 20663] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:35.701909 2026] [proxy_fcgi:error] [pid 20641:tid 20645] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:35.912506 2026] [proxy_fcgi:error] [pid 20641:tid 20667] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:36.123160 2026] [proxy_fcgi:error] [pid 20641:tid 20648] [client 20.220.57.112:50265] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:37:36.330005 2026] [:error] [pid 20641:tid 20656] [client 20.220.57.112:50265] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fallbackapi.php"] [unique_id "adb00G3LksBSF-6rlka3bwAAAMs"]
[Thu Apr 09 08:37:36.982447 2026] [:error] [pid 20641:tid 20651] [client 20.220.57.112:52207] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fallbackapi.php"] [unique_id "adb00G3LksBSF-6rlka3cgAAAMY"]
[Thu Apr 09 08:37:37.497483 2026] [:error] [pid 20536:tid 20573] [client 20.220.57.112:37090] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fallbackapi.php"] [unique_id "adb00cPqyUJM1s3YpIZTcgAAAEI"]
[Thu Apr 09 08:37:37.924841 2026] [:error] [pid 20537:tid 20621] [client 20.220.57.112:52196] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fallbackapi.php"] [unique_id "adb00cSTjpSeyrxLmN5NtAAAAJc"]
[Thu Apr 09 13:59:59.577504 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.220.57.112:38412] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:29.027409 2026] [proxy_fcgi:error] [pid 18477:tid 18480] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:29.283449 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:29.539170 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:29.836834 2026] [proxy_fcgi:error] [pid 18477:tid 18484] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:30.090498 2026] [proxy_fcgi:error] [pid 18477:tid 18503] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:30.346372 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 52.138.158.106:49391] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:25:30.596929 2026] [:error] [pid 18477:tid 18495] [client 52.138.158.106:49391] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "add-msDe826HlFeoLPJ3bgAAAVA"]
[Thu Apr 09 18:25:59.487294 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:2633] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/syndicate.php"] [unique_id "add-t8De826HlFeoLPJ3lwAAAUE"]
[Thu Apr 09 18:26:03.053816 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:35915] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/syndicate.php"] [unique_id "add-u61OMnvM2fMnB1N51AAAAA0"]
[Thu Apr 09 18:26:04.018130 2026] [:error] [pid 18477:tid 18487] [client 52.138.158.106:2400] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/syndicate.php"] [unique_id "add-vMDe826HlFeoLPJ3nwAAAUg"]
[Thu Apr 09 18:26:07.126568 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:49358] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/syndicate.php"] [unique_id "add-v8De826HlFeoLPJ3rgAAAUE"]
[Thu Apr 09 18:26:08.118319 2026] [:error] [pid 18477:tid 18497] [client 52.138.158.106:36426] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "add-wMDe826HlFeoLPJ3twAAAVI"]
[Thu Apr 09 18:26:09.260343 2026] [:error] [pid 24624:tid 24647] [client 52.138.158.106:24975] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "add-we4Jn-WvK1ZBTvi13QAAANU"]
[Thu Apr 09 18:26:14.249802 2026] [:error] [pid 24517:tid 24593] [client 52.138.158.106:32315] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "add-xnboYEn2ZFM_PS9w3QAAAJM"]
[Thu Apr 09 18:26:16.534597 2026] [:error] [pid 24927:tid 24953] [client 52.138.158.106:23429] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "add-yDXObuzEuw8mNJvx-AAAARc"]
[Thu Apr 09 18:26:18.079702 2026] [:error] [pid 24927:tid 24951] [client 52.138.158.106:36460] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "add-yjXObuzEuw8mNJvyAQAAARU"]
[Thu Apr 09 18:26:20.373956 2026] [:error] [pid 24927:tid 24943] [client 52.138.158.106:31819] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "add-zDXObuzEuw8mNJvyBQAAAQ0"]
[Thu Apr 09 18:26:22.853558 2026] [:error] [pid 24516:tid 24551] [client 52.138.158.106:31782] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "add-zthW7vSS-UkeWCUeYgAAAEQ"]
[Thu Apr 09 18:26:27.932982 2026] [:error] [pid 20837:tid 20839] [client 52.138.158.106:49381] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "add-0_SL71FHZkjrGzPJ0gAAAYA"]
[Thu Apr 09 18:26:28.676150 2026] [:error] [pid 24516:tid 24548] [client 52.138.158.106:2687] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "add-1NhW7vSS-UkeWCUeaQAAAEE"]
[Thu Apr 09 18:26:29.655471 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:23441] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "add-1a1OMnvM2fMnB1N6AwAAAA0"]
[Thu Apr 09 18:26:32.641685 2026] [proxy_fcgi:error] [pid 18477:tid 18484] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:32.895771 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:33.238281 2026] [proxy_fcgi:error] [pid 18477:tid 18498] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:33.492138 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:33.745317 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:34.106719 2026] [proxy_fcgi:error] [pid 18477:tid 18481] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:34.364451 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:34.684566 2026] [proxy_fcgi:error] [pid 18477:tid 18492] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:35.068853 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:35.506879 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:35.759205 2026] [proxy_fcgi:error] [pid 18477:tid 18502] [client 52.138.158.106:24036] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:26:36.080954 2026] [:error] [pid 18477:tid 18490] [client 52.138.158.106:24036] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "add-3MDe826HlFeoLPJ4FwAAAUs"]
[Thu Apr 09 18:26:38.224334 2026] [:error] [pid 24927:tid 24953] [client 52.138.158.106:25001] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "add-3jXObuzEuw8mNJvyMQAAARc"]
[Thu Apr 09 18:26:39.354176 2026] [:error] [pid 20837:tid 20856] [client 52.138.158.106:28738] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "add-3_SL71FHZkjrGzPJ3QAAAZE"]
[Thu Apr 09 18:26:46.689512 2026] [:error] [pid 24927:tid 24936] [client 52.138.158.106:24969] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "add-5jXObuzEuw8mNJvyOgAAAQY"]
[Thu Apr 09 18:26:47.612762 2026] [:error] [pid 24927:tid 24934] [client 52.138.158.106:24032] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "add-5zXObuzEuw8mNJvyPwAAAQQ"]
[Thu Apr 09 18:26:48.713562 2026] [:error] [pid 18477:tid 18481] [client 52.138.158.106:30275] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "add-6MDe826HlFeoLPJ4HgAAAUI"]
[Thu Apr 09 18:26:50.162546 2026] [:error] [pid 24624:tid 24647] [client 52.138.158.106:24979] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "add-6u4Jn-WvK1ZBTvi2IgAAANU"]
[Thu Apr 09 18:26:51.964421 2026] [:error] [pid 20837:tid 20839] [client 52.138.158.106:35909] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "add-6_SL71FHZkjrGzPJ4wAAAYA"]
[Thu Apr 09 18:26:54.232279 2026] [:error] [pid 24624:tid 24638] [client 52.138.158.106:23426] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "add-7u4Jn-WvK1ZBTvi2KQAAAMw"]
[Thu Apr 09 18:26:55.776532 2026] [:error] [pid 24515:tid 24535] [client 52.138.158.106:28799] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "add-761OMnvM2fMnB1N6IQAAABA"]
[Thu Apr 09 18:26:56.727533 2026] [:error] [pid 24515:tid 24540] [client 52.138.158.106:24572] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "add-8K1OMnvM2fMnB1N6JAAAABU"]
[Thu Apr 09 18:26:57.571179 2026] [:error] [pid 24624:tid 24648] [client 52.138.158.106:31770] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "add-8e4Jn-WvK1ZBTvi2LQAAANY"]
[Thu Apr 09 18:27:04.156993 2026] [:error] [pid 18477:tid 18485] [client 52.138.158.106:24005] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "add--MDe826HlFeoLPJ4QAAAAUY"]
[Thu Apr 09 18:27:04.927964 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:32280] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "add--K1OMnvM2fMnB1N6KQAAAA0"]
[Thu Apr 09 18:27:05.796936 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:24571] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "add--cDe826HlFeoLPJ4RgAAAUE"]
[Thu Apr 09 18:27:07.519476 2026] [:error] [pid 24515:tid 24530] [client 52.138.158.106:2640] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "add--61OMnvM2fMnB1N6KwAAAAs"]
[Thu Apr 09 18:27:08.616148 2026] [:error] [pid 24624:tid 24626] [client 52.138.158.106:36896] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "add-_O4Jn-WvK1ZBTvi2NgAAAMA"]
[Thu Apr 09 18:27:09.660764 2026] [:error] [pid 24624:tid 24644] [client 52.138.158.106:35952] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "add-_e4Jn-WvK1ZBTvi2OgAAANI"]
[Thu Apr 09 18:27:11.585758 2026] [:error] [pid 24515:tid 24541] [client 52.138.158.106:30328] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "add-_61OMnvM2fMnB1N6MwAAABY"]
[Thu Apr 09 18:27:12.377765 2026] [:error] [pid 18477:tid 18490] [client 52.138.158.106:36425] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "add_AMDe826HlFeoLPJ4UwAAAUs"]
[Thu Apr 09 18:27:13.019180 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:31813] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "add_AcDe826HlFeoLPJ4VgAAAUE"]
[Thu Apr 09 18:27:14.000440 2026] [:error] [pid 24516:tid 24558] [client 52.138.158.106:49378] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "add_AdhW7vSS-UkeWCUegAAAAEs"]
[Thu Apr 09 18:27:14.747089 2026] [:error] [pid 24515:tid 24542] [client 52.138.158.106:24545] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "add_Aq1OMnvM2fMnB1N6NAAAABc"]
[Thu Apr 09 18:27:16.213670 2026] [:error] [pid 18477:tid 18481] [client 52.138.158.106:30291] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "add_BMDe826HlFeoLPJ4XQAAAUI"]
[Thu Apr 09 18:27:17.310658 2026] [:error] [pid 24624:tid 24644] [client 52.138.158.106:29710] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "add_Be4Jn-WvK1ZBTvi2SgAAANI"]
[Thu Apr 09 18:27:18.280989 2026] [:error] [pid 24927:tid 24953] [client 52.138.158.106:21422] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "add_BjXObuzEuw8mNJvyagAAARc"]
[Thu Apr 09 18:27:18.890390 2026] [:error] [pid 24927:tid 24930] [client 52.138.158.106:32314] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "add_BjXObuzEuw8mNJvybQAAAQA"]
[Thu Apr 09 18:27:19.704963 2026] [:error] [pid 18477:tid 18490] [client 52.138.158.106:49384] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "add_B8De826HlFeoLPJ4YwAAAUs"]
[Thu Apr 09 18:27:21.250843 2026] [:error] [pid 24516:tid 24562] [client 52.138.158.106:31833] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "add_CdhW7vSS-UkeWCUehQAAAE8"]
[Thu Apr 09 18:27:21.948752 2026] [:error] [pid 18477:tid 18498] [client 52.138.158.106:31813] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "add_CcDe826HlFeoLPJ4awAAAVM"]
[Thu Apr 09 18:27:22.731047 2026] [:error] [pid 18477:tid 18483] [client 52.138.158.106:49357] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "add_CsDe826HlFeoLPJ4bwAAAUQ"]
[Thu Apr 09 18:27:24.247612 2026] [:error] [pid 24927:tid 24932] [client 52.138.158.106:2635] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "add_DDXObuzEuw8mNJvydgAAAQI"]
[Thu Apr 09 18:27:25.918449 2026] [:error] [pid 24516:tid 24570] [client 52.138.158.106:30297] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "add_DdhW7vSS-UkeWCUekQAAAFc"]
[Thu Apr 09 18:27:27.491380 2026] [:error] [pid 18477:tid 18490] [client 52.138.158.106:24557] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "add_D8De826HlFeoLPJ4dAAAAUs"]
[Thu Apr 09 18:27:28.625791 2026] [:error] [pid 24515:tid 24531] [client 52.138.158.106:24570] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "add_EK1OMnvM2fMnB1N6PQAAAAw"]
[Thu Apr 09 18:27:29.840755 2026] [:error] [pid 24624:tid 24635] [client 52.138.158.106:35904] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "add_Ee4Jn-WvK1ZBTvi2VgAAAMk"]
[Thu Apr 09 18:27:30.958739 2026] [:error] [pid 24515:tid 24539] [client 52.138.158.106:24513] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "add_Eq1OMnvM2fMnB1N6PwAAABQ"]
[Thu Apr 09 18:27:32.583539 2026] [:error] [pid 18477:tid 18492] [client 52.138.158.106:34940] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "add_FMDe826HlFeoLPJ4fgAAAU0"]
[Thu Apr 09 18:27:33.361772 2026] [:error] [pid 18477:tid 18496] [client 52.138.158.106:36427] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "add_FcDe826HlFeoLPJ4gQAAAVE"]
[Thu Apr 09 18:27:34.253777 2026] [:error] [pid 24624:tid 24648] [client 52.138.158.106:24566] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "add_Fu4Jn-WvK1ZBTvi2XAAAANY"]
[Thu Apr 09 18:27:35.567746 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:35.911976 2026] [proxy_fcgi:error] [pid 24624:tid 24633] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:36.166983 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:36.468176 2026] [proxy_fcgi:error] [pid 24624:tid 24644] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:36.789979 2026] [proxy_fcgi:error] [pid 24624:tid 24645] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:38.497160 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:38.751295 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:39.029129 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:39.321103 2026] [proxy_fcgi:error] [pid 24624:tid 24628] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:39.674551 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:40.010917 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 52.138.158.106:21381] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:27:40.311723 2026] [:error] [pid 24624:tid 24633] [client 52.138.158.106:21381] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "add_HO4Jn-WvK1ZBTvi2dgAAAMc"]
[Thu Apr 09 18:27:41.182037 2026] [:error] [pid 24515:tid 24522] [client 52.138.158.106:32310] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "add_Ha1OMnvM2fMnB1N6SwAAAAM"]
[Thu Apr 09 18:27:42.505460 2026] [:error] [pid 18477:tid 18485] [client 52.138.158.106:31837] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "add_HsDe826HlFeoLPJ4iQAAAUY"]
[Thu Apr 09 18:27:43.857043 2026] [:error] [pid 20837:tid 20862] [client 52.138.158.106:28796] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "add_H_SL71FHZkjrGzPKCQAAAZc"]
[Thu Apr 09 18:27:44.774384 2026] [:error] [pid 24515:tid 24537] [client 52.138.158.106:2642] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "add_IK1OMnvM2fMnB1N6UQAAABI"]
[Thu Apr 09 18:27:45.544562 2026] [:error] [pid 24515:tid 24523] [client 52.138.158.106:34913] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "add_Ia1OMnvM2fMnB1N6VAAAAAQ"]
[Thu Apr 09 18:27:46.436532 2026] [:error] [pid 24517:tid 24581] [client 52.138.158.106:2430] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "add_InboYEn2ZFM_PS9w6wAAAIc"]
[Thu Apr 09 18:27:47.836843 2026] [:error] [pid 24927:tid 24948] [client 52.138.158.106:49393] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "add_IzXObuzEuw8mNJvymwAAARI"]
[Thu Apr 09 18:27:49.387278 2026] [:error] [pid 24927:tid 24952] [client 52.138.158.106:30306] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "add_JTXObuzEuw8mNJvyoQAAARY"]
[Thu Apr 09 18:27:50.183485 2026] [:error] [pid 24516:tid 24571] [client 52.138.158.106:24976] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "add_JthW7vSS-UkeWCUepgAAAFg"]
[Thu Apr 09 18:27:51.108282 2026] [:error] [pid 24517:tid 24576] [client 52.138.158.106:36458] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "add_J3boYEn2ZFM_PS9w-gAAAII"]
[Thu Apr 09 18:27:52.231509 2026] [:error] [pid 24927:tid 24932] [client 52.138.158.106:31745] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "add_KDXObuzEuw8mNJvypwAAAQI"]
[Thu Apr 09 18:27:54.288388 2026] [:error] [pid 24517:tid 24579] [client 52.138.158.106:34891] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "add_KnboYEn2ZFM_PS9w_AAAAIU"]
[Thu Apr 09 18:27:55.461523 2026] [:error] [pid 24517:tid 24581] [client 52.138.158.106:31756] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "add_K3boYEn2ZFM_PS9w_QAAAIc"]
[Thu Apr 09 18:27:56.378167 2026] [:error] [pid 24517:tid 24595] [client 52.138.158.106:2379] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "add_LHboYEn2ZFM_PS9w_gAAAJU"]
[Thu Apr 09 18:27:57.520514 2026] [:error] [pid 24516:tid 24565] [client 52.138.158.106:31791] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "add_LdhW7vSS-UkeWCUesAAAAFI"]
[Thu Apr 09 18:27:59.656667 2026] [:error] [pid 24516:tid 24559] [client 52.138.158.106:31759] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "add_L9hW7vSS-UkeWCUetgAAAEw"]
[Thu Apr 09 18:28:00.909443 2026] [:error] [pid 24516:tid 24568] [client 52.138.158.106:24982] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "add_MNhW7vSS-UkeWCUeuAAAAFU"]
[Thu Apr 09 18:28:02.602782 2026] [:error] [pid 24624:tid 24627] [client 52.138.158.106:24558] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "add_Mu4Jn-WvK1ZBTvi2jwAAAME"]
[Thu Apr 09 18:28:05.443840 2026] [:error] [pid 24515:tid 24526] [client 52.138.158.106:24988] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "add_Na1OMnvM2fMnB1N6fAAAAAc"]
[Thu Apr 09 18:28:06.584169 2026] [:error] [pid 24927:tid 24933] [client 52.138.158.106:23465] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "add_NjXObuzEuw8mNJvysAAAAQM"]
[Thu Apr 09 18:28:07.682637 2026] [:error] [pid 18477:tid 18483] [client 52.138.158.106:30294] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "add_N8De826HlFeoLPJ4mgAAAUQ"]
[Thu Apr 09 18:28:09.622071 2026] [:error] [pid 20837:tid 20839] [client 52.138.158.106:24556] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "add_OfSL71FHZkjrGzPKIQAAAYA"]
[Thu Apr 09 18:28:11.106968 2026] [:error] [pid 20837:tid 20853] [client 52.138.158.106:31839] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "add_O_SL71FHZkjrGzPKJwAAAY4"]
[Thu Apr 09 18:28:12.028362 2026] [:error] [pid 20837:tid 20862] [client 52.138.158.106:28764] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "add_PPSL71FHZkjrGzPKLAAAAZc"]
[Thu Apr 09 18:28:12.735349 2026] [:error] [pid 24515:tid 24523] [client 52.138.158.106:31856] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "add_PK1OMnvM2fMnB1N6hwAAAAQ"]
[Thu Apr 09 18:28:13.758903 2026] [:error] [pid 20837:tid 20848] [client 52.138.158.106:36916] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "add_PfSL71FHZkjrGzPKMQAAAYk"]
[Thu Apr 09 18:28:14.377082 2026] [:error] [pid 18477:tid 18486] [client 52.138.158.106:2645] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "add_PsDe826HlFeoLPJ4oQAAAUc"]
[Thu Apr 09 18:28:15.268440 2026] [:error] [pid 20837:tid 20858] [client 52.138.158.106:20961] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "add_P_SL71FHZkjrGzPKMwAAAZM"]
[Thu Apr 09 18:28:16.140551 2026] [:error] [pid 24515:tid 24521] [client 52.138.158.106:30293] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "add_QK1OMnvM2fMnB1N6iQAAAAI"]
[Thu Apr 09 18:28:17.197851 2026] [:error] [pid 24516:tid 24564] [client 52.138.158.106:2381] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "add_QdhW7vSS-UkeWCUewwAAAFE"]
[Thu Apr 09 18:28:17.767458 2026] [:error] [pid 24515:tid 24534] [client 52.138.158.106:34938] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "add_Qa1OMnvM2fMnB1N6iwAAAA8"]
[Thu Apr 09 18:28:18.431170 2026] [:error] [pid 24624:tid 24646] [client 52.138.158.106:30296] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "add_Qu4Jn-WvK1ZBTvi2mQAAANQ"]
[Thu Apr 09 18:28:19.202771 2026] [:error] [pid 24515:tid 24529] [client 52.138.158.106:25995] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "add_Q61OMnvM2fMnB1N6jgAAAAo"]
[Thu Apr 09 18:28:20.416125 2026] [:error] [pid 24624:tid 24629] [client 52.138.158.106:31802] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "add_RO4Jn-WvK1ZBTvi2oAAAAMM"]
[Thu Apr 09 18:28:21.152006 2026] [:error] [pid 18477:tid 18485] [client 52.138.158.106:36439] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "add_RcDe826HlFeoLPJ4pQAAAUY"]
[Thu Apr 09 18:28:21.886640 2026] [:error] [pid 20837:tid 20841] [client 52.138.158.106:49399] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "add_RfSL71FHZkjrGzPKQAAAAYI"]
[Thu Apr 09 18:28:22.593847 2026] [:error] [pid 18477:tid 18502] [client 52.138.158.106:30845] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "add_RsDe826HlFeoLPJ4qAAAAVc"]
[Thu Apr 09 18:28:23.882301 2026] [:error] [pid 20837:tid 20839] [client 52.138.158.106:32261] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "add_R_SL71FHZkjrGzPKRQAAAYA"]
[Thu Apr 09 18:28:24.553175 2026] [:error] [pid 18477:tid 18486] [client 52.138.158.106:23449] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "add_SMDe826HlFeoLPJ4sQAAAUc"]
[Thu Apr 09 18:28:25.221077 2026] [:error] [pid 24517:tid 24596] [client 52.138.158.106:23469] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "add_SXboYEn2ZFM_PS9xBwAAAJY"]
[Thu Apr 09 18:28:26.452364 2026] [:error] [pid 24515:tid 24525] [client 52.138.158.106:49349] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "add_Sq1OMnvM2fMnB1N6kgAAAAY"]
[Thu Apr 09 18:28:27.259310 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:31774] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "add_S61OMnvM2fMnB1N6lwAAAA0"]
[Thu Apr 09 18:28:28.440949 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:2673] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "add_TMDe826HlFeoLPJ4tgAAAUE"]
[Thu Apr 09 18:28:29.454834 2026] [:error] [pid 24927:tid 24940] [client 52.138.158.106:23476] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_TTXObuzEuw8mNJvyyQAAAQo"]
[Thu Apr 09 18:28:30.294039 2026] [:error] [pid 24927:tid 24938] [client 52.138.158.106:24961] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_TjXObuzEuw8mNJvyzQAAAQg"]
[Thu Apr 09 18:28:31.616204 2026] [:error] [pid 24624:tid 24627] [client 52.138.158.106:28784] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_T-4Jn-WvK1ZBTvi2rQAAAME"]
[Thu Apr 09 18:28:33.014554 2026] [:error] [pid 24927:tid 24933] [client 52.138.158.106:24547] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_UTXObuzEuw8mNJvy1QAAAQM"]
[Thu Apr 09 18:28:34.503012 2026] [:error] [pid 18477:tid 18502] [client 52.138.158.106:24531] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "add_UsDe826HlFeoLPJ4xwAAAVc"]
[Thu Apr 09 18:28:35.803608 2026] [:error] [pid 24624:tid 24637] [client 52.138.158.106:24063] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "add_U-4Jn-WvK1ZBTvi2uAAAAMs"]
[Thu Apr 09 18:28:36.748201 2026] [:error] [pid 20837:tid 20842] [client 52.138.158.106:32772] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "add_VPSL71FHZkjrGzPKUAAAAYM"]
[Thu Apr 09 18:28:39.690685 2026] [:error] [pid 24927:tid 24947] [client 52.138.158.106:25007] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "add_VzXObuzEuw8mNJvy3gAAARE"]
[Thu Apr 09 18:28:42.086554 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:42.373465 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:42.706892 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:43.067678 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:43.487999 2026] [proxy_fcgi:error] [pid 18477:tid 18481] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:43.739520 2026] [proxy_fcgi:error] [pid 18477:tid 18499] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:44.031821 2026] [proxy_fcgi:error] [pid 18477:tid 18492] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:44.571137 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:44.909165 2026] [proxy_fcgi:error] [pid 18477:tid 18479] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:45.219763 2026] [proxy_fcgi:error] [pid 18477:tid 18497] [client 52.138.158.106:32286] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:28:45.580924 2026] [:error] [pid 18477:tid 18485] [client 52.138.158.106:32286] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "add_XcDe826HlFeoLPJ44QAAAUY"]
[Thu Apr 09 18:28:47.407561 2026] [:error] [pid 24515:tid 24537] [client 52.138.158.106:30798] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "add_X61OMnvM2fMnB1N6ogAAABI"]
[Thu Apr 09 18:28:49.376706 2026] [:error] [pid 18477:tid 18500] [client 52.138.158.106:32273] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "add_YcDe826HlFeoLPJ46AAAAVU"]
[Thu Apr 09 18:28:53.214355 2026] [:error] [pid 20837:tid 20850] [client 52.138.158.106:36925] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "add_ZfSL71FHZkjrGzPKawAAAYs"]
[Thu Apr 09 18:28:54.785869 2026] [:error] [pid 24516:tid 24550] [client 52.138.158.106:24517] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "add_ZthW7vSS-UkeWCUe0AAAAEM"]
[Thu Apr 09 18:28:55.809135 2026] [:error] [pid 20837:tid 20861] [client 52.138.158.106:21433] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "add_Z_SL71FHZkjrGzPKdQAAAZY"]
[Thu Apr 09 18:28:56.931103 2026] [:error] [pid 20837:tid 20856] [client 52.138.158.106:28763] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "add_aPSL71FHZkjrGzPKfwAAAZE"]
[Thu Apr 09 18:28:58.474968 2026] [:error] [pid 20837:tid 20862] [client 52.138.158.106:24987] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "add_avSL71FHZkjrGzPKhQAAAZc"]
[Thu Apr 09 18:29:00.270185 2026] [:error] [pid 24515:tid 24541] [client 52.138.158.106:35953] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "add_bK1OMnvM2fMnB1N6rwAAABY"]
[Thu Apr 09 18:29:02.569888 2026] [:error] [pid 24927:tid 24946] [client 52.138.158.106:30307] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "add_bjXObuzEuw8mNJvy8wAAARA"]
[Thu Apr 09 18:29:05.203089 2026] [:error] [pid 24927:tid 24940] [client 52.138.158.106:34919] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "add_cTXObuzEuw8mNJvy-wAAAQo"]
[Thu Apr 09 18:29:06.102636 2026] [:error] [pid 24624:tid 24646] [client 52.138.158.106:31758] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "add_cu4Jn-WvK1ZBTvi21QAAANQ"]
[Thu Apr 09 18:29:07.452097 2026] [:error] [pid 20837:tid 20847] [client 52.138.158.106:28772] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "add_c_SL71FHZkjrGzPKiwAAAYg"]
[Thu Apr 09 18:29:09.198823 2026] [:error] [pid 18477:tid 18483] [client 52.138.158.106:35949] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "add_dcDe826HlFeoLPJ4_AAAAUQ"]
[Thu Apr 09 18:29:10.351502 2026] [:error] [pid 18477:tid 18481] [client 52.138.158.106:23455] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "add_dsDe826HlFeoLPJ4_wAAAUI"]
[Thu Apr 09 18:29:11.447093 2026] [:error] [pid 24515:tid 24522] [client 52.138.158.106:28750] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "add_d61OMnvM2fMnB1N6vQAAAAM"]
[Thu Apr 09 18:29:12.429631 2026] [:error] [pid 24515:tid 24525] [client 52.138.158.106:24051] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_eK1OMnvM2fMnB1N6wQAAAAY"]
[Thu Apr 09 18:29:14.111496 2026] [:error] [pid 24517:tid 24589] [client 52.138.158.106:31862] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_enboYEn2ZFM_PS9xFgAAAI8"]
[Thu Apr 09 18:29:14.998374 2026] [:error] [pid 24927:tid 24940] [client 52.138.158.106:2559] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_ejXObuzEuw8mNJvzCgAAAQo"]
[Thu Apr 09 18:29:16.278250 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:28762] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_fMDe826HlFeoLPJ5BQAAAUE"]
[Thu Apr 09 18:29:17.223175 2026] [:error] [pid 24515:tid 24535] [client 52.138.158.106:24062] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add_fa1OMnvM2fMnB1N6xwAAABA"]
[Thu Apr 09 18:29:18.117512 2026] [:error] [pid 24927:tid 24933] [client 52.138.158.106:38936] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add_fjXObuzEuw8mNJvzFgAAAQM"]
[Thu Apr 09 18:29:19.554611 2026] [:error] [pid 18477:tid 18493] [client 52.138.158.106:24537] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add_f8De826HlFeoLPJ5BwAAAU4"]
[Thu Apr 09 18:29:20.730791 2026] [:error] [pid 24624:tid 24628] [client 52.138.158.106:34889] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "add_gO4Jn-WvK1ZBTvi3BwAAAMI"]
[Thu Apr 09 18:29:22.968637 2026] [:error] [pid 24624:tid 24645] [client 52.138.158.106:31836] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "add_gu4Jn-WvK1ZBTvi3DQAAANM"]
[Thu Apr 09 18:29:24.182855 2026] [:error] [pid 18477:tid 18503] [client 52.138.158.106:24011] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "add_hMDe826HlFeoLPJ5EwAAAVg"]
[Thu Apr 09 18:29:27.529920 2026] [:error] [pid 24517:tid 24590] [client 52.138.158.106:35911] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "add_h3boYEn2ZFM_PS9xGQAAAJA"]
[Thu Apr 09 18:29:28.513038 2026] [:error] [pid 18477:tid 18480] [client 52.138.158.106:31775] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "add_iMDe826HlFeoLPJ5FwAAAUE"]
[Thu Apr 09 18:29:29.450282 2026] [:error] [pid 24624:tid 24631] [client 52.138.158.106:49394] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "add_ie4Jn-WvK1ZBTvi3GQAAAMU"]
[Thu Apr 09 18:29:30.617673 2026] [:error] [pid 18477:tid 18498] [client 52.138.158.106:31846] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "add_isDe826HlFeoLPJ5IQAAAVM"]
[Thu Apr 09 18:29:32.390855 2026] [:error] [pid 20837:tid 20842] [client 52.138.158.106:31857] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "add_jPSL71FHZkjrGzPKlAAAAYM"]
[Thu Apr 09 18:29:33.783457 2026] [:error] [pid 24927:tid 24937] [client 52.138.158.106:28765] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "add_jTXObuzEuw8mNJvzHQAAAQc"]
[Thu Apr 09 18:29:35.342715 2026] [:error] [pid 24927:tid 24939] [client 52.138.158.106:36450] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "add_jzXObuzEuw8mNJvzIQAAAQk"]
[Thu Apr 09 18:29:40.375143 2026] [:error] [pid 24927:tid 24947] [client 52.138.158.106:21390] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "add_lDXObuzEuw8mNJvzJgAAARE"]
[Thu Apr 09 18:29:41.485950 2026] [:error] [pid 24517:tid 24587] [client 52.138.158.106:21428] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "add_lXboYEn2ZFM_PS9xKgAAAI0"]
[Thu Apr 09 18:29:44.261084 2026] [:error] [pid 24517:tid 24579] [client 52.138.158.106:24972] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "add_mHboYEn2ZFM_PS9xMAAAAIU"]
[Thu Apr 09 18:29:45.996291 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:46.913184 2026] [proxy_fcgi:error] [pid 24515:tid 24526] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:47.198302 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:47.864699 2026] [proxy_fcgi:error] [pid 24515:tid 24539] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:48.117925 2026] [proxy_fcgi:error] [pid 24515:tid 24527] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:48.431968 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:48.814510 2026] [proxy_fcgi:error] [pid 24515:tid 24528] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:49.902424 2026] [proxy_fcgi:error] [pid 24515:tid 24524] [client 52.138.158.106:32295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:29:50.293613 2026] [:error] [pid 24515:tid 24535] [client 52.138.158.106:32295] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "add_nq1OMnvM2fMnB1N66wAAABA"]
[Thu Apr 09 18:29:52.158468 2026] [:error] [pid 24515:tid 24533] [client 52.138.158.106:49369] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "add_oK1OMnvM2fMnB1N67QAAAA4"]
[Thu Apr 09 18:29:54.277051 2026] [:error] [pid 24517:tid 24580] [client 52.138.158.106:24555] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "add_onboYEn2ZFM_PS9xMwAAAIY"]
[Thu Apr 09 18:29:57.126501 2026] [:error] [pid 24517:tid 24575] [client 52.138.158.106:24570] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "add_pXboYEn2ZFM_PS9xNAAAAIE"]
[Thu Apr 09 18:30:02.372976 2026] [:error] [pid 24517:tid 24596] [client 52.138.158.106:36428] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "add_qnboYEn2ZFM_PS9xNwAAAJY"]
[Thu Apr 09 18:30:35.936079 2026] [:error] [pid 24927:tid 24931] [client 52.138.158.106:2535] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "add_yzXObuzEuw8mNJvzNQAAAQE"]
[Thu Apr 09 18:30:36.715519 2026] [:error] [pid 24516:tid 24565] [client 52.138.158.106:30827] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "add_zNhW7vSS-UkeWCUe4AAAAFI"]
[Thu Apr 09 18:30:37.350848 2026] [:error] [pid 24515:tid 24523] [client 52.138.158.106:2626] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "add_za1OMnvM2fMnB1N69AAAAAQ"]
[Thu Apr 09 18:30:38.659489 2026] [:error] [pid 24515:tid 24524] [client 52.138.158.106:31799] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "add_zq1OMnvM2fMnB1N69QAAAAU"]
[Thu Apr 09 18:30:39.412166 2026] [:error] [pid 24927:tid 24946] [client 52.138.158.106:31752] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add_zzXObuzEuw8mNJvzNgAAARA"]
[Thu Apr 09 18:30:40.744428 2026] [:error] [pid 24515:tid 24543] [client 52.138.158.106:30298] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add_0K1OMnvM2fMnB1N6-AAAABg"]
[Thu Apr 09 18:30:43.732105 2026] [:error] [pid 24516:tid 24560] [client 52.138.158.106:30276] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add_09hW7vSS-UkeWCUe4wAAAE0"]
[Thu Apr 09 18:30:44.683472 2026] [:error] [pid 24515:tid 24529] [client 52.138.158.106:36449] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "add_1K1OMnvM2fMnB1N6_AAAAAo"]
[Thu Apr 09 18:30:45.376276 2026] [:error] [pid 24624:tid 24634] [client 52.138.158.106:25993] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "add_1e4Jn-WvK1ZBTvi3dgAAAMg"]
[Thu Apr 09 18:30:48.075520 2026] [:error] [pid 24515:tid 24522] [client 52.138.158.106:31842] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "add_2K1OMnvM2fMnB1N7AAAAAAM"]
[Thu Apr 09 18:30:50.522401 2026] [proxy_fcgi:error] [pid 24515:tid 24542] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:51.497449 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:51.902709 2026] [proxy_fcgi:error] [pid 24515:tid 24535] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:52.236436 2026] [proxy_fcgi:error] [pid 24515:tid 24543] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:52.564302 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:52.897897 2026] [proxy_fcgi:error] [pid 24515:tid 24532] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:53.613400 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:54.171654 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 52.138.158.106:24573] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:30:54.482161 2026] [:error] [pid 24515:tid 24520] [client 52.138.158.106:24573] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "add_3q1OMnvM2fMnB1N7EAAAAAE"]
[Thu Apr 09 18:30:56.538147 2026] [:error] [pid 18477:tid 18495] [client 52.138.158.106:36462] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "add_4MDe826HlFeoLPJ5dgAAAVA"]
[Thu Apr 09 18:31:00.498429 2026] [:error] [pid 24515:tid 24541] [client 52.138.158.106:24057] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "add_5K1OMnvM2fMnB1N7GQAAABY"]
[Thu Apr 09 18:31:02.495870 2026] [:error] [pid 24517:tid 24577] [client 52.138.158.106:2676] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "add_5nboYEn2ZFM_PS9xQQAAAIM"]
[Thu Apr 09 18:31:03.196200 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:24049] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "add_561OMnvM2fMnB1N7GwAAAA0"]
[Thu Apr 09 18:31:04.064457 2026] [:error] [pid 24927:tid 24946] [client 52.138.158.106:28780] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "add_6DXObuzEuw8mNJvzRAAAARA"]
[Thu Apr 09 18:31:04.930613 2026] [:error] [pid 24927:tid 24945] [client 52.138.158.106:30300] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "add_6DXObuzEuw8mNJvzRgAAAQ8"]
[Thu Apr 09 18:31:05.971727 2026] [:error] [pid 24927:tid 24948] [client 52.138.158.106:36468] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "add_6TXObuzEuw8mNJvzSQAAARI"]
[Thu Apr 09 18:31:06.759441 2026] [:error] [pid 24927:tid 24953] [client 52.138.158.106:24974] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_6jXObuzEuw8mNJvzSgAAARc"]
[Thu Apr 09 18:31:08.765831 2026] [:error] [pid 24624:tid 24643] [client 52.138.158.106:31801] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_7O4Jn-WvK1ZBTvi3eQAAANE"]
[Thu Apr 09 18:31:10.192002 2026] [:error] [pid 24624:tid 24637] [client 52.138.158.106:24525] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_7u4Jn-WvK1ZBTvi3egAAAMs"]
[Thu Apr 09 18:31:11.031708 2026] [:error] [pid 24927:tid 24935] [client 52.138.158.106:34901] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "add_7zXObuzEuw8mNJvzUAAAAQU"]
[Thu Apr 09 18:31:12.467921 2026] [:error] [pid 24515:tid 24520] [client 52.138.158.106:36886] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add_8K1OMnvM2fMnB1N7HwAAAAE"]
[Thu Apr 09 18:31:13.745547 2026] [:error] [pid 18477:tid 18481] [client 52.138.158.106:24574] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add_8cDe826HlFeoLPJ5egAAAUI"]
[Thu Apr 09 18:31:14.939567 2026] [:error] [pid 20837:tid 20842] [client 52.138.158.106:26012] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add_8vSL71FHZkjrGzPKwAAAAYM"]
[Thu Apr 09 18:31:15.907049 2026] [:error] [pid 24927:tid 24949] [client 52.138.158.106:24551] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "add_8zXObuzEuw8mNJvzVQAAARM"]
[Thu Apr 09 18:31:17.327945 2026] [:error] [pid 24624:tid 24646] [client 52.138.158.106:31746] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_9e4Jn-WvK1ZBTvi3ewAAANQ"]
[Thu Apr 09 18:31:19.725213 2026] [:error] [pid 24515:tid 24530] [client 52.138.158.106:2374] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_961OMnvM2fMnB1N7JQAAAAs"]
[Thu Apr 09 18:31:20.798963 2026] [:error] [pid 24927:tid 24939] [client 52.138.158.106:2630] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_-DXObuzEuw8mNJvzWgAAAQk"]
[Thu Apr 09 18:31:22.440694 2026] [:error] [pid 18477:tid 18496] [client 52.138.158.106:2648] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "add_-sDe826HlFeoLPJ5hQAAAVE"]
[Thu Apr 09 18:31:23.972920 2026] [:error] [pid 24624:tid 24630] [client 52.138.158.106:31766] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "add_--4Jn-WvK1ZBTvi3fQAAAMQ"]
[Thu Apr 09 18:31:25.898406 2026] [:error] [pid 24927:tid 24949] [client 52.138.158.106:24984] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "add__TXObuzEuw8mNJvzYgAAARM"]
[Thu Apr 09 18:31:26.908127 2026] [:error] [pid 24515:tid 24521] [client 52.138.158.106:35938] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "add__q1OMnvM2fMnB1N7MAAAAAI"]
[Thu Apr 09 18:31:29.739387 2026] [:error] [pid 24624:tid 24639] [client 52.138.158.106:30274] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adeAAe4Jn-WvK1ZBTvi3gwAAAM0"]
[Thu Apr 09 18:31:31.056115 2026] [:error] [pid 24927:tid 24938] [client 52.138.158.106:32315] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adeAAzXObuzEuw8mNJvzawAAAQg"]
[Thu Apr 09 18:31:33.262324 2026] [:error] [pid 24927:tid 24940] [client 52.138.158.106:23482] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adeABTXObuzEuw8mNJvzbgAAAQo"]
[Thu Apr 09 18:31:34.811303 2026] [:error] [pid 24517:tid 24582] [client 52.138.158.106:24038] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adeABnboYEn2ZFM_PS9xRAAAAIg"]
[Thu Apr 09 18:31:37.502169 2026] [:error] [pid 24927:tid 24949] [client 52.138.158.106:28739] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adeACTXObuzEuw8mNJvzcwAAARM"]
[Thu Apr 09 18:31:43.337835 2026] [:error] [pid 24624:tid 24637] [client 52.138.158.106:32285] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "adeAD-4Jn-WvK1ZBTvi3iAAAAMs"]
[Thu Apr 09 18:31:45.446288 2026] [:error] [pid 24516:tid 24571] [client 52.138.158.106:24043] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "adeAEdhW7vSS-UkeWCUe-QAAAFg"]
[Thu Apr 09 18:31:49.255380 2026] [:error] [pid 24516:tid 24569] [client 52.138.158.106:31850] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "adeAFdhW7vSS-UkeWCUe-gAAAFY"]
[Thu Apr 09 18:31:50.204772 2026] [:error] [pid 24624:tid 24645] [client 52.138.158.106:2424] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "adeAFu4Jn-WvK1ZBTvi3mQAAANM"]
[Thu Apr 09 18:31:51.138427 2026] [:error] [pid 24516:tid 24556] [client 52.138.158.106:32292] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "adeAF9hW7vSS-UkeWCUe-wAAAEk"]
[Thu Apr 09 18:31:56.702648 2026] [:error] [pid 24624:tid 24628] [client 52.138.158.106:26008] [client 52.138.158.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adeAHO4Jn-WvK1ZBTvi3ngAAAMI"]
[Thu Apr 09 18:31:57.420047 2026] [proxy_fcgi:error] [pid 24624:tid 24639] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:31:59.664860 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:31:59.918842 2026] [proxy_fcgi:error] [pid 24624:tid 24643] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:00.254421 2026] [proxy_fcgi:error] [pid 24624:tid 24645] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:00.560619 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:00.823718 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:01.109520 2026] [proxy_fcgi:error] [pid 24624:tid 24630] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:01.365551 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 52.138.158.106:31776] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:32:02.203100 2026] [:error] [pid 24624:tid 24640] [client 52.138.158.106:31776] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adeAIu4Jn-WvK1ZBTvi3rQAAAM4"]
[Thu Apr 09 18:32:03.736245 2026] [:error] [pid 24515:tid 24530] [client 52.138.158.106:35940] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adeAI61OMnvM2fMnB1N7TwAAAAs"]
[Thu Apr 09 18:32:05.000428 2026] [:error] [pid 24624:tid 24641] [client 52.138.158.106:34886] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adeAJO4Jn-WvK1ZBTvi3rwAAAM8"]
[Thu Apr 09 18:32:07.574946 2026] [:error] [pid 24515:tid 24532] [client 52.138.158.106:30282] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adeAJ61OMnvM2fMnB1N7UgAAAA0"]
[Thu Apr 09 18:32:08.960545 2026] [:error] [pid 20837:tid 20843] [client 52.138.158.106:24964] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adeAKPSL71FHZkjrGzPKyAAAAYQ"]
[Thu Apr 09 18:32:09.794861 2026] [:error] [pid 24927:tid 24952] [client 52.138.158.106:2418] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adeAKTXObuzEuw8mNJvzjQAAARY"]
[Thu Apr 09 18:32:11.545850 2026] [:error] [pid 24927:tid 24954] [client 52.138.158.106:2828] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adeAKzXObuzEuw8mNJvzkQAAARg"]
[Thu Apr 09 18:32:12.671769 2026] [:error] [pid 20837:tid 20853] [client 52.138.158.106:24008] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adeALPSL71FHZkjrGzPKygAAAY4"]
[Thu Apr 09 18:32:13.775754 2026] [:error] [pid 24927:tid 24935] [client 52.138.158.106:24522] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeALTXObuzEuw8mNJvzlAAAAQU"]
[Thu Apr 09 18:32:16.389913 2026] [:error] [pid 24515:tid 24541] [client 52.138.158.106:36471] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeAMK1OMnvM2fMnB1N7dAAAABY"]
[Thu Apr 09 18:32:18.252731 2026] [:error] [pid 24624:tid 24634] [client 52.138.158.106:35936] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeAMu4Jn-WvK1ZBTvi3sAAAAMg"]
[Thu Apr 09 18:32:19.852093 2026] [:error] [pid 24927:tid 24930] [client 52.138.158.106:49353] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeAMzXObuzEuw8mNJvzlQAAAQA"]
[Thu Apr 09 18:32:21.538026 2026] [:error] [pid 24624:tid 24639] [client 52.138.158.106:36464] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adeANe4Jn-WvK1ZBTvi3sQAAAM0"]
[Thu Apr 09 18:32:22.640768 2026] [:error] [pid 24517:tid 24583] [client 52.138.158.106:23430] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adeANnboYEn2ZFM_PS9xSgAAAIk"]
[Thu Apr 09 18:32:25.196047 2026] [:error] [pid 20837:tid 20857] [client 52.138.158.106:24543] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adeAOfSL71FHZkjrGzPKzwAAAZI"]
[Thu Apr 09 18:32:26.418670 2026] [:error] [pid 20837:tid 20841] [client 52.138.158.106:49350] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adeAOvSL71FHZkjrGzPK0AAAAYI"]
[Thu Apr 09 18:32:28.566023 2026] [:error] [pid 24624:tid 24636] [client 52.138.158.106:31771] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adeAPO4Jn-WvK1ZBTvi3tAAAAMo"]
[Thu Apr 09 18:32:30.072630 2026] [:error] [pid 20837:tid 20843] [client 52.138.158.106:30302] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adeAPvSL71FHZkjrGzPK0wAAAYQ"]
[Thu Apr 09 18:32:34.044549 2026] [:error] [pid 24515:tid 24523] [client 52.138.158.106:23425] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adeAQq1OMnvM2fMnB1N7qgAAAAQ"]
[Thu Apr 09 18:33:03.288476 2026] [proxy_fcgi:error] [pid 18477:tid 18488] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:03.585794 2026] [proxy_fcgi:error] [pid 18477:tid 18493] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:03.841880 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:04.098171 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:04.812685 2026] [proxy_fcgi:error] [pid 18477:tid 18501] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:05.068775 2026] [proxy_fcgi:error] [pid 18477:tid 18489] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:05.323506 2026] [proxy_fcgi:error] [pid 18477:tid 18498] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:05.614320 2026] [proxy_fcgi:error] [pid 18477:tid 18492] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:05.968612 2026] [proxy_fcgi:error] [pid 18477:tid 18480] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:06.223615 2026] [proxy_fcgi:error] [pid 18477:tid 18490] [client 52.138.158.106:49376] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 18:33:06.494169 2026] [:error] [pid 18477:tid 18483] [client 52.138.158.106:49376] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adeAYsDe826HlFeoLPJ52gAAAUQ"]
[Thu Apr 09 18:33:07.650135 2026] [:error] [pid 24516:tid 24551] [client 52.138.158.106:49348] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adeAY9hW7vSS-UkeWCUfEAAAAEQ"]
[Thu Apr 09 18:33:09.353346 2026] [:error] [pid 18477:tid 18503] [client 52.138.158.106:31769] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adeAZcDe826HlFeoLPJ53QAAAVg"]
[Thu Apr 09 18:33:09.976105 2026] [:error] [pid 24927:tid 24935] [client 52.138.158.106:30318] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adeAZTXObuzEuw8mNJvzxAAAAQU"]
[Thu Apr 09 18:33:11.799646 2026] [:error] [pid 24624:tid 24627] [client 52.138.158.106:49386] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adeAZ-4Jn-WvK1ZBTvi4BgAAAME"]
[Thu Apr 09 18:33:13.258555 2026] [:error] [pid 24517:tid 24594] [client 52.138.158.106:28793] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adeAaXboYEn2ZFM_PS9xZQAAAJQ"]
[Thu Apr 09 18:33:13.993768 2026] [:error] [pid 24517:tid 24578] [client 52.138.158.106:21381] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adeAaXboYEn2ZFM_PS9xagAAAIQ"]
[Thu Apr 09 18:33:16.150068 2026] [:error] [pid 24927:tid 24951] [client 52.138.158.106:2665] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adeAbDXObuzEuw8mNJvzxwAAARU"]
[Thu Apr 09 18:33:17.154248 2026] [:error] [pid 24927:tid 24936] [client 52.138.158.106:35908] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeAbTXObuzEuw8mNJvzygAAAQY"]
[Thu Apr 09 18:33:18.002691 2026] [:error] [pid 24624:tid 24638] [client 52.138.158.106:30313] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeAbu4Jn-WvK1ZBTvi4CwAAAMw"]
[Thu Apr 09 18:33:18.729153 2026] [:error] [pid 24624:tid 24626] [client 52.138.158.106:2677] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeAbu4Jn-WvK1ZBTvi4DAAAAMA"]
[Thu Apr 09 18:33:20.030720 2026] [:error] [pid 24927:tid 24954] [client 52.138.158.106:30309] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeAcDXObuzEuw8mNJvz0wAAARg"]
[Thu Apr 09 18:33:20.853478 2026] [:error] [pid 24927:tid 24948] [client 52.138.158.106:31759] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adeAcDXObuzEuw8mNJvz1gAAARI"]
[Thu Apr 09 18:33:22.099002 2026] [:error] [pid 24515:tid 24529] [client 52.138.158.106:2412] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adeAcq1OMnvM2fMnB1N77wAAAAo"]
[Thu Apr 09 18:33:23.531075 2026] [:error] [pid 24927:tid 24932] [client 52.138.158.106:35926] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adeAczXObuzEuw8mNJvz2QAAAQI"]
[Thu Apr 09 18:33:24.254864 2026] [:error] [pid 24927:tid 24936] [client 52.138.158.106:36469] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adeAdDXObuzEuw8mNJvz2gAAAQY"]
[Thu Apr 09 18:33:25.649931 2026] [:error] [pid 24515:tid 24522] [client 52.138.158.106:24571] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adeAda1OMnvM2fMnB1N78gAAAAM"]
[Thu Apr 09 18:33:26.489923 2026] [:error] [pid 24927:tid 24943] [client 52.138.158.106:2625] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adeAdjXObuzEuw8mNJvz4QAAAQ0"]
[Thu Apr 09 18:33:27.459311 2026] [:error] [pid 24624:tid 24628] [client 52.138.158.106:2667] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adeAd-4Jn-WvK1ZBTvi4DgAAAMI"]
[Thu Apr 09 18:33:28.326992 2026] [:error] [pid 24515:tid 24531] [client 52.138.158.106:2671] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adeAeK1OMnvM2fMnB1N79gAAAAw"]
[Thu Apr 09 18:33:29.576637 2026] [:error] [pid 24517:tid 24596] [client 52.138.158.106:2405] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adeAeXboYEn2ZFM_PS9xcwAAAJY"]
[Thu Apr 09 18:33:30.279664 2026] [:error] [pid 24624:tid 24644] [client 52.138.158.106:24990] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adeAeu4Jn-WvK1ZBTvi4EwAAANI"]
[Thu Apr 09 18:33:31.428986 2026] [:error] [pid 24927:tid 24954] [client 52.138.158.106:31781] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adeAezXObuzEuw8mNJvz4gAAARg"]
[Thu Apr 09 18:33:32.710545 2026] [:error] [pid 24515:tid 24522] [client 52.138.158.106:24530] [client 52.138.158.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adeAfK1OMnvM2fMnB1N7_gAAAAM"]
[Thu Apr 09 20:20:07.069643 2026] [proxy_fcgi:error] [pid 63331:tid 63354] [client 72.146.3.136:44496] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:07.308767 2026] [proxy_fcgi:error] [pid 63331:tid 63334] [client 72.146.3.136:44496] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:07.558803 2026] [proxy_fcgi:error] [pid 63331:tid 63349] [client 72.146.3.136:44496] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:07.799936 2026] [proxy_fcgi:error] [pid 63331:tid 63355] [client 72.146.3.136:44496] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:08.253583 2026] [proxy_fcgi:error] [pid 63331:tid 63339] [client 72.146.3.136:44496] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:08.703555 2026] [:error] [pid 63331:tid 63357] [client 72.146.3.136:44496] [client 72.146.3.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adeZeCbKfIYuVjWbE4VbhwAAAdg"]
[Thu Apr 09 20:20:09.357857 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 72.146.3.136:2295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:09.618289 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 72.146.3.136:2295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:09.854003 2026] [proxy_fcgi:error] [pid 24515:tid 24537] [client 72.146.3.136:2295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:10.093685 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 72.146.3.136:2295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:10.331798 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 72.146.3.136:2295] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:20:11.847952 2026] [:error] [pid 24515:tid 24543] [client 72.146.3.136:2295] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "adeZe61OMnvM2fMnB1OjYQAAABg"]
[Thu Apr 09 20:20:12.767665 2026] [:error] [pid 18477:tid 18492] [client 72.146.3.136:21633] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "adeZfMDe826HlFeoLPKX9gAAAU0"]
[Thu Apr 09 20:20:14.125045 2026] [:error] [pid 18477:tid 18502] [client 72.146.3.136:44489] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "adeZfsDe826HlFeoLPKX_QAAAVc"]
[Thu Apr 09 20:20:15.266429 2026] [:error] [pid 18477:tid 18501] [client 72.146.3.136:38513] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "adeZf8De826HlFeoLPKYAAAAAVY"]
[Thu Apr 09 20:20:15.962980 2026] [:error] [pid 24515:tid 24529] [client 72.146.3.136:2270] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeZf61OMnvM2fMnB1OjZgAAAAo"]
[Thu Apr 09 20:20:16.600038 2026] [:error] [pid 24515:tid 24532] [client 72.146.3.136:21117] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeZgK1OMnvM2fMnB1OjZwAAAA0"]
[Thu Apr 09 20:20:18.041430 2026] [:error] [pid 24624:tid 24631] [client 72.146.3.136:56291] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeZgu4Jn-WvK1ZBTvjURQAAAMU"]
[Thu Apr 09 20:20:18.923866 2026] [:error] [pid 24624:tid 24628] [client 72.146.3.136:12373] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adeZgu4Jn-WvK1ZBTvjUSAAAAMI"]
[Thu Apr 09 20:20:19.810139 2026] [:error] [pid 24624:tid 24630] [client 72.146.3.136:20011] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adeZg-4Jn-WvK1ZBTvjUTAAAAMQ"]
[Thu Apr 09 20:20:20.478328 2026] [:error] [pid 24517:tid 24583] [client 72.146.3.136:12373] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adeZhHboYEn2ZFM_PS99LwAAAIk"]
[Thu Apr 09 20:20:21.161974 2026] [:error] [pid 20837:tid 20855] [client 72.146.3.136:21106] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adeZhfSL71FHZkjrGzPoDAAAAZA"]
[Thu Apr 09 20:20:21.732182 2026] [:error] [pid 20837:tid 20860] [client 72.146.3.136:56262] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adeZhfSL71FHZkjrGzPoDgAAAZU"]
[Thu Apr 09 20:20:22.697744 2026] [:error] [pid 20837:tid 20849] [client 72.146.3.136:43154] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adeZhvSL71FHZkjrGzPoEQAAAYo"]
[Thu Apr 09 20:20:23.770286 2026] [:error] [pid 24517:tid 24577] [client 72.146.3.136:42130] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adeZh3boYEn2ZFM_PS99MAAAAIM"]
[Thu Apr 09 20:20:24.622114 2026] [:error] [pid 24515:tid 24526] [client 72.146.3.136:45111] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adeZiK1OMnvM2fMnB1OjcwAAAAc"]
[Thu Apr 09 20:20:25.226393 2026] [:error] [pid 24515:tid 24539] [client 72.146.3.136:2465] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adeZia1OMnvM2fMnB1OjdQAAABQ"]
[Thu Apr 09 20:20:25.898903 2026] [:error] [pid 24515:tid 24533] [client 72.146.3.136:42162] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adeZia1OMnvM2fMnB1OjeAAAAA4"]
[Thu Apr 09 20:20:27.055019 2026] [:error] [pid 24515:tid 24524] [client 72.146.3.136:2651] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adeZi61OMnvM2fMnB1OjegAAAAU"]
[Thu Apr 09 20:20:27.750151 2026] [:error] [pid 24515:tid 24543] [client 72.146.3.136:2392] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adeZi61OMnvM2fMnB1OjewAAABg"]
[Thu Apr 09 20:20:28.652561 2026] [:error] [pid 63331:tid 63335] [client 72.146.3.136:11526] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adeZjCbKfIYuVjWbE4VbiwAAAcI"]
[Thu Apr 09 20:20:29.658139 2026] [:error] [pid 20837:tid 20858] [client 72.146.3.136:19983] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adeZjfSL71FHZkjrGzPoFAAAAZM"]
[Thu Apr 09 20:20:31.244158 2026] [:error] [pid 24624:tid 24632] [client 72.146.3.136:23433] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adeZj-4Jn-WvK1ZBTvjUTgAAAMY"]
[Thu Apr 09 20:20:32.475755 2026] [:error] [pid 63331:tid 63341] [client 72.146.3.136:23482] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adeZkCbKfIYuVjWbE4VbjQAAAcg"]
[Thu Apr 09 20:20:34.105665 2026] [:error] [pid 20837:tid 20855] [client 72.146.3.136:63636] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adeZkvSL71FHZkjrGzPoHgAAAZA"]
[Thu Apr 09 20:20:35.747804 2026] [:error] [pid 20837:tid 20858] [client 72.146.3.136:2394] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adeZk_SL71FHZkjrGzPoJAAAAZM"]
[Thu Apr 09 20:20:37.513957 2026] [:error] [pid 20837:tid 20844] [client 72.146.3.136:43175] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adeZlfSL71FHZkjrGzPoKwAAAYU"]
[Thu Apr 09 20:20:39.356415 2026] [:error] [pid 63331:tid 63337] [client 72.146.3.136:16993] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adeZlybKfIYuVjWbE4VbkwAAAcQ"]
[Thu Apr 09 20:20:40.660800 2026] [:error] [pid 24517:tid 24594] [client 72.146.3.136:64646] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adeZmHboYEn2ZFM_PS99QwAAAJQ"]
[Thu Apr 09 20:20:41.859817 2026] [:error] [pid 24517:tid 24577] [client 72.146.3.136:24978] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adeZmXboYEn2ZFM_PS99RAAAAIM"]
[Thu Apr 09 20:20:45.112198 2026] [:error] [pid 24515:tid 24521] [client 72.146.3.136:43174] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adeZna1OMnvM2fMnB1OjgQAAAAI"]
[Thu Apr 09 20:20:46.987364 2026] [:error] [pid 63331:tid 63350] [client 72.146.3.136:13694] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adeZnibKfIYuVjWbE4VbowAAAdE"]
[Thu Apr 09 20:20:48.213545 2026] [:error] [pid 63331:tid 63354] [client 72.146.3.136:17018] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adeZoCbKfIYuVjWbE4VbpAAAAdU"]
[Thu Apr 09 20:20:49.961489 2026] [:error] [pid 18477:tid 18497] [client 72.146.3.136:14401] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeZocDe826HlFeoLPKYEAAAAVI"]
[Thu Apr 09 20:20:51.302375 2026] [:error] [pid 63331:tid 63345] [client 72.146.3.136:38426] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeZoybKfIYuVjWbE4VbswAAAcw"]
[Thu Apr 09 20:20:52.053930 2026] [:error] [pid 24515:tid 24540] [client 72.146.3.136:30686] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeZpK1OMnvM2fMnB1OjhQAAABU"]
[Thu Apr 09 20:20:52.741522 2026] [:error] [pid 24624:tid 24630] [client 72.146.3.136:18549] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adeZpO4Jn-WvK1ZBTvjUVQAAAMQ"]
[Thu Apr 09 20:20:53.701766 2026] [:error] [pid 24515:tid 24541] [client 72.146.3.136:16924] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adeZpa1OMnvM2fMnB1OjiAAAABY"]
[Thu Apr 09 20:20:54.419489 2026] [:error] [pid 24515:tid 24528] [client 72.146.3.136:25015] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adeZpq1OMnvM2fMnB1OjjAAAAAk"]
[Thu Apr 09 20:20:55.137345 2026] [:error] [pid 63331:tid 63340] [client 72.146.3.136:13675] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adeZpybKfIYuVjWbE4VbvAAAAcc"]
[Thu Apr 09 20:20:55.983069 2026] [:error] [pid 63331:tid 63353] [client 72.146.3.136:32487] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wswer1.php"] [unique_id "adeZpybKfIYuVjWbE4VbwwAAAdQ"]
[Thu Apr 09 20:20:56.614809 2026] [:error] [pid 63331:tid 63344] [client 72.146.3.136:12908] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "adeZqCbKfIYuVjWbE4VbxgAAAcs"]
[Thu Apr 09 20:20:57.285138 2026] [:error] [pid 24515:tid 24520] [client 72.146.3.136:13665] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "adeZqa1OMnvM2fMnB1OjjwAAAAE"]
[Thu Apr 09 20:20:58.001285 2026] [:error] [pid 24515:tid 24539] [client 72.146.3.136:13941] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "adeZqq1OMnvM2fMnB1OjkQAAABQ"]
[Thu Apr 09 20:20:58.982834 2026] [:error] [pid 63331:tid 63352] [client 72.146.3.136:38451] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "adeZqibKfIYuVjWbE4VbygAAAdM"]
[Thu Apr 09 20:21:00.410505 2026] [:error] [pid 63331:tid 63334] [client 72.146.3.136:39079] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adeZrCbKfIYuVjWbE4VbzQAAAcE"]
[Thu Apr 09 20:21:02.249616 2026] [:error] [pid 20837:tid 20863] [client 72.146.3.136:12337] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adeZrvSL71FHZkjrGzPoNwAAAZg"]
[Thu Apr 09 20:21:03.168058 2026] [:error] [pid 63331:tid 63353] [client 72.146.3.136:2236] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adeZrybKfIYuVjWbE4Vb0AAAAdQ"]
[Thu Apr 09 20:21:04.168327 2026] [:error] [pid 24927:tid 24931] [client 72.146.3.136:56946] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adeZsDXObuzEuw8mNJsdjAAAAQE"]
[Thu Apr 09 20:21:06.224949 2026] [:error] [pid 63331:tid 63357] [client 72.146.3.136:13598] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adeZsibKfIYuVjWbE4Vb0QAAAdg"]
[Thu Apr 09 20:21:07.137823 2026] [:error] [pid 63331:tid 63343] [client 72.146.3.136:18506] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adeZsybKfIYuVjWbE4Vb0gAAAco"]
[Thu Apr 09 20:21:08.159711 2026] [:error] [pid 63331:tid 63356] [client 72.146.3.136:36538] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adeZtCbKfIYuVjWbE4Vb1QAAAdc"]
[Thu Apr 09 20:21:09.108797 2026] [:error] [pid 63331:tid 63337] [client 72.146.3.136:64834] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "adeZtSbKfIYuVjWbE4Vb1wAAAcQ"]
[Thu Apr 09 20:21:11.242524 2026] [proxy_fcgi:error] [pid 18477:tid 18495] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:11.479283 2026] [proxy_fcgi:error] [pid 18477:tid 18491] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:11.722408 2026] [proxy_fcgi:error] [pid 18477:tid 18486] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:11.961638 2026] [proxy_fcgi:error] [pid 18477:tid 18494] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:12.224823 2026] [proxy_fcgi:error] [pid 18477:tid 18481] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:12.461849 2026] [proxy_fcgi:error] [pid 18477:tid 18500] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:12.698523 2026] [proxy_fcgi:error] [pid 18477:tid 18483] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:12.942659 2026] [proxy_fcgi:error] [pid 18477:tid 18496] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:13.179532 2026] [proxy_fcgi:error] [pid 18477:tid 18487] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:13.432296 2026] [proxy_fcgi:error] [pid 18477:tid 18479] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:13.677008 2026] [proxy_fcgi:error] [pid 18477:tid 18503] [client 72.146.3.136:64876] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:21:13.910386 2026] [:error] [pid 18477:tid 18493] [client 72.146.3.136:64876] [client 72.146.3.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adeZucDe826HlFeoLPKYHQAAAU4"]
[Thu Apr 09 20:21:14.773424 2026] [:error] [pid 63331:tid 63336] [client 72.146.3.136:22246] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adeZuibKfIYuVjWbE4Vb2gAAAcM"]
[Thu Apr 09 20:21:15.419745 2026] [:error] [pid 24927:tid 24942] [client 72.146.3.136:25479] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adeZuzXObuzEuw8mNJsdlQAAAQw"]
[Thu Apr 09 20:21:16.111716 2026] [:error] [pid 63331:tid 63355] [client 72.146.3.136:27513] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adeZvCbKfIYuVjWbE4Vb4gAAAdY"]
[Thu Apr 09 20:21:17.118184 2026] [:error] [pid 24515:tid 24539] [client 72.146.3.136:37163] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adeZva1OMnvM2fMnB1OjmwAAABQ"]
[Thu Apr 09 20:21:18.172938 2026] [:error] [pid 63331:tid 63347] [client 72.146.3.136:2219] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adeZvibKfIYuVjWbE4Vb6gAAAc4"]
[Thu Apr 09 20:21:18.827494 2026] [:error] [pid 24927:tid 24939] [client 72.146.3.136:2797] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adeZvjXObuzEuw8mNJsdmgAAAQk"]
[Thu Apr 09 20:21:19.451941 2026] [:error] [pid 24515:tid 24538] [client 72.146.3.136:2753] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adeZv61OMnvM2fMnB1OjpQAAABM"]
[Thu Apr 09 20:21:20.027808 2026] [:error] [pid 24515:tid 24542] [client 72.146.3.136:13605] [client 72.146.3.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "adeZwK1OMnvM2fMnB1OjpwAAABc"]
[Thu Apr 09 20:21:21.047185 2026] [:error] [pid 20837:tid 20848] [client 72.146.3.136:17438] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adeZwfSL71FHZkjrGzPoTAAAAYk"]
[Thu Apr 09 20:21:21.864772 2026] [:error] [pid 63331:tid 63356] [client 72.146.3.136:24000] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adeZwSbKfIYuVjWbE4Vb8wAAAdc"]
[Thu Apr 09 20:21:22.823249 2026] [:error] [pid 24515:tid 24526] [client 72.146.3.136:36511] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adeZwq1OMnvM2fMnB1OjrQAAAAc"]
[Thu Apr 09 20:21:23.674243 2026] [:error] [pid 24515:tid 24527] [client 72.146.3.136:37158] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adeZw61OMnvM2fMnB1OjrwAAAAg"]
[Thu Apr 09 20:21:25.318292 2026] [:error] [pid 63331:tid 63341] [client 72.146.3.136:27490] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adeZxSbKfIYuVjWbE4Vb-gAAAcg"]
[Thu Apr 09 20:21:26.146875 2026] [:error] [pid 24517:tid 24576] [client 72.146.3.136:27432] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adeZxnboYEn2ZFM_PS99SwAAAII"]
[Thu Apr 09 20:21:27.105912 2026] [:error] [pid 18477:tid 18484] [client 72.146.3.136:22233] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adeZx8De826HlFeoLPKYIQAAAUU"]
[Thu Apr 09 20:21:28.379148 2026] [:error] [pid 24515:tid 24541] [client 72.146.3.136:36508] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adeZyK1OMnvM2fMnB1OjtAAAABY"]
[Thu Apr 09 20:21:30.540193 2026] [:error] [pid 24517:tid 24577] [client 72.146.3.136:27478] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adeZynboYEn2ZFM_PS99UQAAAIM"]
[Thu Apr 09 20:21:34.210634 2026] [:error] [pid 24927:tid 24954] [client 72.146.3.136:13597] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adeZzjXObuzEuw8mNJsdrAAAARg"]
[Thu Apr 09 20:21:37.588059 2026] [:error] [pid 20837:tid 20856] [client 72.146.3.136:27472] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adeZ0fSL71FHZkjrGzPoWAAAAZE"]
[Thu Apr 09 20:21:40.543716 2026] [:error] [pid 20837:tid 20858] [client 72.146.3.136:64859] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adeZ1PSL71FHZkjrGzPoXAAAAZM"]
[Thu Apr 09 20:21:42.080261 2026] [:error] [pid 24515:tid 24537] [client 72.146.3.136:18974] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "adeZ1q1OMnvM2fMnB1OjvgAAABI"]
[Thu Apr 09 20:21:43.011958 2026] [:error] [pid 24517:tid 24578] [client 72.146.3.136:22235] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "adeZ13boYEn2ZFM_PS99UgAAAIQ"]
[Thu Apr 09 20:21:44.319117 2026] [:error] [pid 63331:tid 63339] [client 72.146.3.136:63689] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "adeZ2CbKfIYuVjWbE4VcDgAAAcY"]
[Thu Apr 09 20:21:45.377672 2026] [:error] [pid 24515:tid 24532] [client 72.146.3.136:15481] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "adeZ2a1OMnvM2fMnB1OjwwAAAA0"]
[Thu Apr 09 20:21:46.385744 2026] [:error] [pid 20837:tid 20843] [client 72.146.3.136:15194] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "adeZ2vSL71FHZkjrGzPoawAAAYQ"]
[Thu Apr 09 20:21:46.997112 2026] [:error] [pid 63331:tid 63353] [client 72.146.3.136:31176] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "adeZ2ibKfIYuVjWbE4VcEwAAAdQ"]
[Thu Apr 09 20:21:47.856699 2026] [:error] [pid 24515:tid 24520] [client 72.146.3.136:15450] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "adeZ261OMnvM2fMnB1OjxgAAAAE"]
[Thu Apr 09 20:21:48.726333 2026] [:error] [pid 18477:tid 18491] [client 72.146.3.136:27398] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "adeZ3MDe826HlFeoLPKYKAAAAUw"]
[Thu Apr 09 20:21:49.497282 2026] [:error] [pid 20837:tid 20852] [client 72.146.3.136:15487] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adeZ3fSL71FHZkjrGzPocwAAAY0"]
[Thu Apr 09 20:21:50.463887 2026] [:error] [pid 20837:tid 20849] [client 72.146.3.136:31206] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adeZ3vSL71FHZkjrGzPodQAAAYo"]
[Thu Apr 09 20:21:51.115932 2026] [:error] [pid 63331:tid 63355] [client 72.146.3.136:18447] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adeZ3ybKfIYuVjWbE4VcFgAAAdY"]
[Thu Apr 09 20:21:51.585768 2026] [:error] [pid 63331:tid 63343] [client 72.146.3.136:26234] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adeZ3ybKfIYuVjWbE4VcGQAAAco"]
[Thu Apr 09 20:21:52.079105 2026] [:error] [pid 63331:tid 63341] [client 72.146.3.136:21746] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adeZ4CbKfIYuVjWbE4VcHAAAAcg"]
[Thu Apr 09 20:21:52.855621 2026] [:error] [pid 18477:tid 18483] [client 72.146.3.136:26126] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adeZ4MDe826HlFeoLPKYKgAAAUQ"]
[Thu Apr 09 20:21:54.042206 2026] [:error] [pid 63331:tid 63345] [client 72.146.3.136:31171] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adeZ4ibKfIYuVjWbE4VcHwAAAcw"]
[Thu Apr 09 20:21:54.707817 2026] [:error] [pid 63331:tid 63339] [client 72.146.3.136:19530] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adeZ4ibKfIYuVjWbE4VcIAAAAcY"]
[Thu Apr 09 20:21:55.244246 2026] [:error] [pid 24515:tid 24525] [client 72.146.3.136:2892] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adeZ461OMnvM2fMnB1OjzwAAAAY"]
[Thu Apr 09 20:21:56.413605 2026] [:error] [pid 24624:tid 24650] [client 72.146.3.136:26214] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adeZ5O4Jn-WvK1ZBTvjUcAAAANg"]
[Thu Apr 09 20:21:57.239571 2026] [:error] [pid 24624:tid 24630] [client 72.146.3.136:58230] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adeZ5e4Jn-WvK1ZBTvjUcQAAAMQ"]
[Thu Apr 09 20:21:58.357919 2026] [:error] [pid 63331:tid 63355] [client 72.146.3.136:2980] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "adeZ5ibKfIYuVjWbE4VcJgAAAdY"]
[Thu Apr 09 20:21:58.962096 2026] [:error] [pid 63331:tid 63343] [client 72.146.3.136:2156] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adeZ5ibKfIYuVjWbE4VcKAAAAco"]
[Thu Apr 09 20:21:59.532854 2026] [:error] [pid 24624:tid 24638] [client 72.146.3.136:21720] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adeZ5-4Jn-WvK1ZBTvjUcwAAAMw"]
[Thu Apr 09 20:22:00.087776 2026] [:error] [pid 24624:tid 24641] [client 72.146.3.136:33085] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adeZ6O4Jn-WvK1ZBTvjUdgAAAM8"]
[Thu Apr 09 20:22:00.814011 2026] [:error] [pid 24624:tid 24649] [client 72.146.3.136:14866] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adeZ6O4Jn-WvK1ZBTvjUeAAAANc"]
[Thu Apr 09 20:22:01.402992 2026] [:error] [pid 24517:tid 24592] [client 72.146.3.136:14896] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adeZ6XboYEn2ZFM_PS99VAAAAJI"]
[Thu Apr 09 20:22:02.175147 2026] [:error] [pid 24927:tid 24931] [client 72.146.3.136:2596] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adeZ6jXObuzEuw8mNJsdwwAAAQE"]
[Thu Apr 09 20:22:02.895185 2026] [:error] [pid 24927:tid 24935] [client 72.146.3.136:16138] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adeZ6jXObuzEuw8mNJsdxgAAAQU"]
[Thu Apr 09 20:22:03.796705 2026] [:error] [pid 24516:tid 24560] [client 72.146.3.136:45145] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adeZ69hW7vSS-UkeWCUtHwAAAE0"]
[Thu Apr 09 20:22:05.119078 2026] [:error] [pid 20837:tid 20860] [client 72.146.3.136:23986] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adeZ7fSL71FHZkjrGzPofQAAAZU"]
[Thu Apr 09 20:22:06.019030 2026] [:error] [pid 63331:tid 63342] [client 72.146.3.136:33027] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adeZ7ibKfIYuVjWbE4VcLAAAAck"]
[Thu Apr 09 20:22:06.825986 2026] [:error] [pid 63331:tid 63339] [client 72.146.3.136:60755] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adeZ7ibKfIYuVjWbE4VcMAAAAcY"]
[Thu Apr 09 20:22:08.246406 2026] [:error] [pid 24927:tid 24937] [client 72.146.3.136:60736] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adeZ8DXObuzEuw8mNJsdzAAAAQc"]
[Thu Apr 09 20:22:08.851608 2026] [:error] [pid 63331:tid 63343] [client 72.146.3.136:3018] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adeZ8CbKfIYuVjWbE4VcNQAAAco"]
[Thu Apr 09 20:22:09.947575 2026] [:error] [pid 63331:tid 63354] [client 72.146.3.136:16438] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adeZ8SbKfIYuVjWbE4VcNwAAAdU"]
[Thu Apr 09 20:22:10.798398 2026] [:error] [pid 24516:tid 24566] [client 72.146.3.136:30143] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adeZ8thW7vSS-UkeWCUtIQAAAFM"]
[Thu Apr 09 20:22:12.410431 2026] [:error] [pid 63331:tid 63334] [client 72.146.3.136:33030] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adeZ9CbKfIYuVjWbE4VcQwAAAcE"]
[Thu Apr 09 20:22:13.751570 2026] [proxy_fcgi:error] [pid 24624:tid 24637] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:14.142573 2026] [proxy_fcgi:error] [pid 24624:tid 24643] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:14.378966 2026] [proxy_fcgi:error] [pid 24624:tid 24641] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:14.628508 2026] [proxy_fcgi:error] [pid 24624:tid 24649] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:14.866964 2026] [proxy_fcgi:error] [pid 24624:tid 24644] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:15.104263 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:15.355019 2026] [proxy_fcgi:error] [pid 24624:tid 24646] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:15.590330 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:15.826727 2026] [proxy_fcgi:error] [pid 24624:tid 24642] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:16.063893 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:16.301897 2026] [proxy_fcgi:error] [pid 24624:tid 24648] [client 72.146.3.136:16129] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:22:16.555413 2026] [:error] [pid 24624:tid 24634] [client 72.146.3.136:16129] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeZ-O4Jn-WvK1ZBTvjUlQAAAMg"]
[Thu Apr 09 20:22:17.259658 2026] [:error] [pid 24515:tid 24543] [client 72.146.3.136:3033] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeZ-a1OMnvM2fMnB1Oj3AAAABg"]
[Thu Apr 09 20:22:17.973067 2026] [:error] [pid 63331:tid 63336] [client 72.146.3.136:24571] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeZ-SbKfIYuVjWbE4VcXAAAAcM"]
[Thu Apr 09 20:22:18.547892 2026] [:error] [pid 63331:tid 63343] [client 72.146.3.136:16445] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adeZ-ibKfIYuVjWbE4VcXQAAAco"]
[Thu Apr 09 20:22:19.109810 2026] [:error] [pid 20837:tid 20846] [client 72.146.3.136:16135] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeZ-_SL71FHZkjrGzPogQAAAYc"]
[Thu Apr 09 20:22:19.632709 2026] [:error] [pid 20837:tid 20849] [client 72.146.3.136:30624] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeZ-_SL71FHZkjrGzPogwAAAYo"]
[Thu Apr 09 20:22:20.171660 2026] [:error] [pid 24515:tid 24521] [client 72.146.3.136:35976] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeZ_K1OMnvM2fMnB1Oj4AAAAAI"]
[Thu Apr 09 20:22:21.505994 2026] [:error] [pid 24515:tid 24538] [client 72.146.3.136:30639] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adeZ_a1OMnvM2fMnB1Oj5gAAABM"]
[Thu Apr 09 20:22:22.288519 2026] [:error] [pid 63331:tid 63355] [client 72.146.3.136:14164] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeZ_ibKfIYuVjWbE4VcYwAAAdY"]
[Thu Apr 09 20:22:22.801038 2026] [:error] [pid 63331:tid 63357] [client 72.146.3.136:21043] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeZ_ibKfIYuVjWbE4VcZAAAAdg"]
[Thu Apr 09 20:22:23.620757 2026] [:error] [pid 24927:tid 24932] [client 72.146.3.136:24523] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeZ_zXObuzEuw8mNJsd1AAAAQI"]
[Thu Apr 09 20:22:25.715938 2026] [:error] [pid 24515:tid 24535] [client 72.146.3.136:60769] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adeaAa1OMnvM2fMnB1Oj6wAAABA"]
[Thu Apr 09 20:22:26.785945 2026] [:error] [pid 20837:tid 20862] [client 72.146.3.136:3036] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/image.php"] [unique_id "adeaAvSL71FHZkjrGzPoiAAAAZc"]
[Thu Apr 09 20:22:27.602331 2026] [:error] [pid 24515:tid 24519] [client 72.146.3.136:16139] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/image.php"] [unique_id "adeaA61OMnvM2fMnB1Oj7wAAAAA"]
[Thu Apr 09 20:22:29.161464 2026] [:error] [pid 20837:tid 20854] [client 72.146.3.136:14196] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/image.php"] [unique_id "adeaBfSL71FHZkjrGzPoiwAAAY8"]
[Thu Apr 09 20:22:32.084533 2026] [:error] [pid 63331:tid 63347] [client 72.146.3.136:16404] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/image.php"] [unique_id "adeaCCbKfIYuVjWbE4VcagAAAc4"]
[Thu Apr 09 20:22:33.955267 2026] [:error] [pid 63331:tid 63336] [client 72.146.3.136:30653] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeaCSbKfIYuVjWbE4VceAAAAcM"]
[Thu Apr 09 20:22:36.449816 2026] [:error] [pid 20837:tid 20852] [client 72.146.3.136:36004] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeaDPSL71FHZkjrGzPokAAAAY0"]
[Thu Apr 09 20:22:38.571832 2026] [:error] [pid 20837:tid 20840] [client 72.146.3.136:21019] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeaDvSL71FHZkjrGzPokwAAAYE"]
[Thu Apr 09 20:22:41.464866 2026] [:error] [pid 24515:tid 24520] [client 72.146.3.136:21552] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adeaEa1OMnvM2fMnB1Oj-gAAAAE"]
[Thu Apr 09 20:22:43.044714 2026] [:error] [pid 24927:tid 24946] [client 72.146.3.136:30105] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeaEzXObuzEuw8mNJsd6AAAARA"]
[Thu Apr 09 20:22:44.580595 2026] [:error] [pid 20837:tid 20853] [client 72.146.3.136:11609] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeaFPSL71FHZkjrGzPolQAAAY4"]
[Thu Apr 09 20:22:45.965947 2026] [:error] [pid 24515:tid 24539] [client 72.146.3.136:24539] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeaFa1OMnvM2fMnB1OkBAAAABQ"]
[Thu Apr 09 20:22:46.675454 2026] [:error] [pid 24515:tid 24538] [client 72.146.3.136:21014] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adeaFq1OMnvM2fMnB1OkBgAAABM"]
[Thu Apr 09 20:22:47.999644 2026] [:error] [pid 24927:tid 24952] [client 72.146.3.136:30133] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adeaFzXObuzEuw8mNJsd9AAAARY"]
[Thu Apr 09 20:22:49.148220 2026] [:error] [pid 63331:tid 63353] [client 72.146.3.136:23946] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adeaGSbKfIYuVjWbE4VckQAAAdQ"]
[Thu Apr 09 20:22:50.254673 2026] [:error] [pid 63331:tid 63338] [client 72.146.3.136:23947] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adeaGibKfIYuVjWbE4VclQAAAcU"]
[Thu Apr 09 20:22:51.556730 2026] [:error] [pid 24515:tid 24527] [client 72.146.3.136:33028] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adeaG61OMnvM2fMnB1OkFAAAAAg"]
[Thu Apr 09 20:22:52.254539 2026] [:error] [pid 63331:tid 63335] [client 72.146.3.136:35993] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adeaHCbKfIYuVjWbE4VcmAAAAcI"]
[Thu Apr 09 20:22:53.007158 2026] [:error] [pid 24515:tid 24528] [client 72.146.3.136:14180] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adeaHa1OMnvM2fMnB1OkHAAAAAk"]
[Thu Apr 09 20:22:54.037887 2026] [:error] [pid 63331:tid 63340] [client 72.146.3.136:21035] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adeaHibKfIYuVjWbE4VcmgAAAcc"]
[Thu Apr 09 20:22:54.908982 2026] [:error] [pid 24515:tid 24525] [client 72.146.3.136:3040] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adeaHq1OMnvM2fMnB1OkIAAAAAY"]
[Thu Apr 09 20:22:55.516690 2026] [:error] [pid 24515:tid 24533] [client 72.146.3.136:16191] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adeaH61OMnvM2fMnB1OkIwAAAA4"]
[Thu Apr 09 20:22:56.697736 2026] [:error] [pid 24516:tid 24567] [client 72.146.3.136:30084] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adeaINhW7vSS-UkeWCUtKwAAAFQ"]
[Thu Apr 09 20:23:00.733800 2026] [:error] [pid 24927:tid 24949] [client 72.146.3.136:33041] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adeaJDXObuzEuw8mNJsd-QAAARM"]
[Thu Apr 09 20:23:03.388457 2026] [:error] [pid 63331:tid 63337] [client 72.146.3.136:14882] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "adeaJybKfIYuVjWbE4VcoQAAAcQ"]
[Thu Apr 09 20:23:06.448879 2026] [:error] [pid 63331:tid 63341] [client 72.146.3.136:33061] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adeaKibKfIYuVjWbE4VcwQAAAcg"]
[Thu Apr 09 20:23:08.068915 2026] [:error] [pid 18477:tid 18486] [client 72.146.3.136:2622] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adeaLMDe826HlFeoLPKYOgAAAUc"]
[Thu Apr 09 20:23:09.229062 2026] [:error] [pid 18477:tid 18496] [client 72.146.3.136:19545] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adeaLcDe826HlFeoLPKYPQAAAVE"]
[Thu Apr 09 20:23:10.302899 2026] [:error] [pid 18477:tid 18480] [client 72.146.3.136:59473] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adeaLsDe826HlFeoLPKYQQAAAUE"]
[Thu Apr 09 20:23:12.007086 2026] [:error] [pid 24927:tid 24932] [client 72.146.3.136:2998] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeaMDXObuzEuw8mNJseDQAAAQI"]
[Thu Apr 09 20:23:13.056781 2026] [:error] [pid 20837:tid 20842] [client 72.146.3.136:15915] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeaMfSL71FHZkjrGzPosgAAAYM"]
[Thu Apr 09 20:23:14.491927 2026] [:error] [pid 20837:tid 20860] [client 72.146.3.136:2941] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeaMvSL71FHZkjrGzPotQAAAZU"]
[Thu Apr 09 20:23:15.465030 2026] [:error] [pid 20837:tid 20851] [client 72.146.3.136:31909] [client 72.146.3.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeaM_SL71FHZkjrGzPotwAAAYw"]
[Thu Apr 09 20:23:16.678608 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 72.146.3.136:18968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:23:16.972522 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 72.146.3.136:18968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:23:17.210375 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 72.146.3.136:18968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:23:17.467369 2026] [proxy_fcgi:error] [pid 24927:tid 24951] [client 72.146.3.136:18968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:23:17.737264 2026] [proxy_fcgi:error] [pid 24927:tid 24943] [client 72.146.3.136:18968] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:07.802593 2026] [proxy_fcgi:error] [pid 63331:tid 63353] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:08.041286 2026] [proxy_fcgi:error] [pid 63331:tid 63336] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:08.279935 2026] [proxy_fcgi:error] [pid 63331:tid 63344] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:08.526729 2026] [proxy_fcgi:error] [pid 63331:tid 63338] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:08.769600 2026] [proxy_fcgi:error] [pid 63331:tid 63349] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:09.018837 2026] [proxy_fcgi:error] [pid 63331:tid 63337] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:09.259990 2026] [proxy_fcgi:error] [pid 63331:tid 63343] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:09.500617 2026] [proxy_fcgi:error] [pid 63331:tid 63342] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:09.739696 2026] [proxy_fcgi:error] [pid 63331:tid 63356] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:09.979750 2026] [proxy_fcgi:error] [pid 63331:tid 63346] [client 20.199.96.18:64567] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:47:10.220885 2026] [:error] [pid 63331:tid 63348] [client 20.199.96.18:64567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "ade77ibKfIYuVjWbE4WXrgAAAc8"]
[Thu Apr 09 22:47:10.701293 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:61815] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "ade77q1OMnvM2fMnB1PsMAAAABU"]
[Thu Apr 09 22:47:11.171491 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:41652] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "ade7761OMnvM2fMnB1PsMgAAABE"]
[Thu Apr 09 22:47:11.660514 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:63621] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cxx.php"] [unique_id "ade7761OMnvM2fMnB1PsMwAAABI"]
[Thu Apr 09 22:47:12.156155 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:64604] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ade78K1OMnvM2fMnB1PsNwAAAAc"]
[Thu Apr 09 22:47:12.632308 2026] [:error] [pid 24515:tid 24533] [client 20.199.96.18:64636] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ade78K1OMnvM2fMnB1PsOQAAAA4"]
[Thu Apr 09 22:47:13.105810 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:61801] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ade78TXObuzEuw8mNJs1rgAAAQQ"]
[Thu Apr 09 22:47:13.579722 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:63619] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ade78SbKfIYuVjWbE4WXsAAAAdY"]
[Thu Apr 09 22:47:14.059015 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:61780] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ade78q1OMnvM2fMnB1PsSAAAAAU"]
[Thu Apr 09 22:47:14.545494 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:23310] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ade78q1OMnvM2fMnB1PsTAAAAAo"]
[Thu Apr 09 22:47:15.022360 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:63608] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ade7861OMnvM2fMnB1PsUgAAAAw"]
[Thu Apr 09 22:47:15.495640 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:64514] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ade7861OMnvM2fMnB1PsWQAAABU"]
[Thu Apr 09 22:47:15.970996 2026] [:error] [pid 63331:tid 63345] [client 20.199.96.18:64512] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ade78ybKfIYuVjWbE4WXsQAAAcw"]
[Thu Apr 09 22:47:16.450680 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64550] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ade79K1OMnvM2fMnB1PsXQAAAAs"]
[Thu Apr 09 22:47:16.930888 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:63646] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ade79K1OMnvM2fMnB1PsXwAAABA"]
[Thu Apr 09 22:47:17.421166 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:64551] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "ade79fSL71FHZkjrGzMOcwAAAZU"]
[Thu Apr 09 22:47:17.905514 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64538] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ade79fSL71FHZkjrGzMOdAAAAZA"]
[Thu Apr 09 22:47:18.469829 2026] [:error] [pid 18477:tid 18496] [client 20.199.96.18:64584] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ade79sDe826HlFeoLPKr1gAAAVE"]
[Thu Apr 09 22:47:18.961252 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:23341] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ade79q1OMnvM2fMnB1PsZgAAAAg"]
[Thu Apr 09 22:47:19.430846 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:61810] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ade798De826HlFeoLPKr2gAAAU0"]
[Thu Apr 09 22:47:19.916636 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:23332] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ade7961OMnvM2fMnB1PscgAAAAQ"]
[Thu Apr 09 22:47:20.387728 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:41616] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ade7-K1OMnvM2fMnB1PsdwAAAAg"]
[Thu Apr 09 22:47:20.865957 2026] [:error] [pid 18477:tid 18487] [client 20.199.96.18:64573] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ade7-MDe826HlFeoLPKr3QAAAUg"]
[Thu Apr 09 22:47:21.339673 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:63592] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ade7-cDe826HlFeoLPKr3gAAAVg"]
[Thu Apr 09 22:47:21.825164 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:61777] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ade7-a1OMnvM2fMnB1PshgAAAAQ"]
[Thu Apr 09 22:47:22.297611 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:63656] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ade7-q1OMnvM2fMnB1PsjAAAABU"]
[Thu Apr 09 22:47:22.772297 2026] [:error] [pid 24927:tid 24949] [client 20.199.96.18:63596] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ade7-jXObuzEuw8mNJs1uAAAARM"]
[Thu Apr 09 22:47:23.263218 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:64522] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ade7-zXObuzEuw8mNJs1uQAAAQ8"]
[Thu Apr 09 22:47:23.748483 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:63676] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ade7-61OMnvM2fMnB1PsoQAAABg"]
[Thu Apr 09 22:47:24.218951 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:41653] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ade7_PSL71FHZkjrGzMOeQAAAZQ"]
[Thu Apr 09 22:47:24.691771 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:61812] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ade7_DXObuzEuw8mNJs1ugAAAQg"]
[Thu Apr 09 22:47:25.162390 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:63580] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ade7_a1OMnvM2fMnB1PssgAAABM"]
[Thu Apr 09 22:47:25.643015 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:61817] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "ade7_TXObuzEuw8mNJs1vQAAAQo"]
[Thu Apr 09 22:47:26.130938 2026] [:error] [pid 24516:tid 24547] [client 20.199.96.18:64596] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "ade7_thW7vSS-UkeWCU-NAAAAEA"]
[Thu Apr 09 22:47:26.613738 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:64539] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "ade7_q1OMnvM2fMnB1PsxQAAABc"]
[Thu Apr 09 22:47:27.100750 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:61743] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "ade7_61OMnvM2fMnB1PszAAAAAE"]
[Thu Apr 09 22:47:27.576471 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:23338] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ade7_61OMnvM2fMnB1Ps0gAAABM"]
[Thu Apr 09 22:47:28.074805 2026] [:error] [pid 63331:tid 63345] [client 20.199.96.18:61813] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ade8ACbKfIYuVjWbE4WXwwAAAcw"]
[Thu Apr 09 22:47:28.551405 2026] [:error] [pid 18477:tid 18486] [client 20.199.96.18:63587] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ade8AMDe826HlFeoLPKr3wAAAUc"]
[Thu Apr 09 22:47:29.038894 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:61706] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ade8AcDe826HlFeoLPKr4gAAAVA"]
[Thu Apr 09 22:47:29.515600 2026] [:error] [pid 18477:tid 18494] [client 20.199.96.18:63569] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "ade8AcDe826HlFeoLPKr6QAAAU8"]
[Thu Apr 09 22:47:30.003900 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:64630] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "ade8Aq1OMnvM2fMnB1Ps5QAAABI"]
[Thu Apr 09 22:47:30.479737 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:64607] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "ade8Aq1OMnvM2fMnB1Ps7gAAABg"]
[Thu Apr 09 22:47:30.951399 2026] [:error] [pid 24515:tid 24533] [client 20.199.96.18:41647] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "ade8Aq1OMnvM2fMnB1Ps9AAAAA4"]
[Thu Apr 09 22:47:31.442203 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:58052] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ade8AybKfIYuVjWbE4WXyAAAAdQ"]
[Thu Apr 09 22:47:31.930873 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:23345] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ade8AybKfIYuVjWbE4WXygAAAdM"]
[Thu Apr 09 22:47:32.407942 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:64564] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ade8BCbKfIYuVjWbE4WXzgAAAcU"]
[Thu Apr 09 22:47:32.898913 2026] [:error] [pid 24517:tid 24577] [client 20.199.96.18:23312] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ade8BHboYEn2ZFM_PS-JjgAAAIM"]
[Thu Apr 09 22:47:33.407288 2026] [:error] [pid 63331:tid 63356] [client 20.199.96.18:63595] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ade8BSbKfIYuVjWbE4WX0QAAAdc"]
[Thu Apr 09 22:47:33.915647 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:41657] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ade8BSbKfIYuVjWbE4WX0wAAAcE"]
[Thu Apr 09 22:47:34.411828 2026] [:error] [pid 63331:tid 63347] [client 20.199.96.18:61816] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ade8BibKfIYuVjWbE4WX1gAAAc4"]
[Thu Apr 09 22:47:34.889022 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:64571] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ade8BsDe826HlFeoLPKr9QAAAUM"]
[Thu Apr 09 22:47:35.378640 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:64546] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ade8BybKfIYuVjWbE4WX2AAAAdQ"]
[Thu Apr 09 22:47:35.862296 2026] [:error] [pid 18477:tid 18488] [client 20.199.96.18:64533] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ade8B8De826HlFeoLPKr_wAAAUk"]
[Thu Apr 09 22:47:36.349382 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:58089] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ade8CDXObuzEuw8mNJs1wAAAARA"]
[Thu Apr 09 22:47:36.837674 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:61781] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ade8CCbKfIYuVjWbE4WX4wAAAck"]
[Thu Apr 09 22:47:37.307333 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:63671] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ade8CTXObuzEuw8mNJs1wgAAARE"]
[Thu Apr 09 22:47:37.779978 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:63590] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ade8CTXObuzEuw8mNJs1xAAAARQ"]
[Thu Apr 09 22:47:38.251185 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:61705] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ade8CthW7vSS-UkeWCU-SgAAAEg"]
[Thu Apr 09 22:47:38.722480 2026] [:error] [pid 24517:tid 24596] [client 20.199.96.18:63644] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ade8CnboYEn2ZFM_PS-JmwAAAJY"]
[Thu Apr 09 22:47:39.192404 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:63663] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ade8CybKfIYuVjWbE4WX8QAAAcA"]
[Thu Apr 09 22:47:39.671170 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:23344] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ade8CybKfIYuVjWbE4WX9gAAAck"]
[Thu Apr 09 22:47:40.147836 2026] [:error] [pid 24517:tid 24583] [client 20.199.96.18:61779] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ade8DHboYEn2ZFM_PS-JoQAAAIk"]
[Thu Apr 09 22:47:40.633402 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:64530] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ade8DCbKfIYuVjWbE4WX_wAAAdY"]
[Thu Apr 09 22:47:41.112793 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:63564] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ade8DSbKfIYuVjWbE4WYCAAAAco"]
[Thu Apr 09 22:47:41.606601 2026] [:error] [pid 63331:tid 63351] [client 20.199.96.18:64574] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ade8DSbKfIYuVjWbE4WYEAAAAdI"]
[Thu Apr 09 22:47:42.101167 2026] [:error] [pid 24517:tid 24595] [client 20.199.96.18:41614] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ade8DnboYEn2ZFM_PS-JowAAAJU"]
[Thu Apr 09 22:47:42.586108 2026] [:error] [pid 63331:tid 63344] [client 20.199.96.18:63561] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ade8DibKfIYuVjWbE4WYGAAAAcs"]
[Thu Apr 09 22:47:43.085021 2026] [:error] [pid 24516:tid 24554] [client 20.199.96.18:23323] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ade8D9hW7vSS-UkeWCU-UQAAAEc"]
[Thu Apr 09 22:47:43.562688 2026] [:error] [pid 18477:tid 18490] [client 20.199.96.18:23336] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ade8D8De826HlFeoLPKsDwAAAUs"]
[Thu Apr 09 22:47:44.043189 2026] [:error] [pid 24517:tid 24575] [client 20.199.96.18:23307] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ade8EHboYEn2ZFM_PS-JpQAAAIE"]
[Thu Apr 09 22:47:44.531692 2026] [:error] [pid 24517:tid 24589] [client 20.199.96.18:63572] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ade8EHboYEn2ZFM_PS-JqAAAAI8"]
[Thu Apr 09 22:47:45.002230 2026] [:error] [pid 24516:tid 24562] [client 20.199.96.18:63629] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ade8EdhW7vSS-UkeWCU-WwAAAE8"]
[Thu Apr 09 22:47:45.479593 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:63555] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ade8ETXObuzEuw8mNJs11AAAARA"]
[Thu Apr 09 22:47:45.960679 2026] [:error] [pid 24517:tid 24581] [client 20.199.96.18:61761] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ade8EXboYEn2ZFM_PS-JrAAAAIc"]
[Thu Apr 09 22:47:46.445563 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:63634] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ade8EvSL71FHZkjrGzMOiAAAAZg"]
[Thu Apr 09 22:47:46.917114 2026] [:error] [pid 24516:tid 24556] [client 20.199.96.18:64515] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ade8EthW7vSS-UkeWCU-XQAAAEk"]
[Thu Apr 09 22:47:47.393265 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:41637] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ade8EybKfIYuVjWbE4WYNAAAAcE"]
[Thu Apr 09 22:47:47.869722 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:63642] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ade8E8De826HlFeoLPKsEQAAAU4"]
[Thu Apr 09 22:47:48.343458 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:63636] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ade8FDXObuzEuw8mNJs14AAAAQg"]
[Thu Apr 09 22:47:48.830071 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:63651] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ade8FCbKfIYuVjWbE4WYPAAAAdQ"]
[Thu Apr 09 22:47:49.300912 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:63568] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ade8FSbKfIYuVjWbE4WYQAAAAcQ"]
[Thu Apr 09 22:47:49.774168 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:63602] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ade8FTXObuzEuw8mNJs15QAAARI"]
[Thu Apr 09 22:47:50.247332 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:41631] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ade8Fu4Jn-WvK1ZBTvjz7wAAANI"]
[Thu Apr 09 22:47:50.725018 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:41624] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ade8Fq1OMnvM2fMnB1PtMQAAAA8"]
[Thu Apr 09 22:47:51.197201 2026] [:error] [pid 24517:tid 24583] [client 20.199.96.18:41644] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ade8F3boYEn2ZFM_PS-JsQAAAIk"]
[Thu Apr 09 22:47:51.680458 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:23333] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ade8F8De826HlFeoLPKsFAAAAVg"]
[Thu Apr 09 22:47:52.150752 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:23340] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ade8GK1OMnvM2fMnB1PtNAAAAAs"]
[Thu Apr 09 22:47:52.626801 2026] [:error] [pid 24515:tid 24523] [client 20.199.96.18:64597] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ade8GK1OMnvM2fMnB1PtNwAAAAQ"]
[Thu Apr 09 22:47:53.121768 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:41628] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ade8GfSL71FHZkjrGzMOlgAAAYw"]
[Thu Apr 09 22:47:53.590834 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:63664] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ade8GfSL71FHZkjrGzMOlwAAAY4"]
[Thu Apr 09 22:47:54.071077 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:61751] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ade8GvSL71FHZkjrGzMOmAAAAZU"]
[Thu Apr 09 22:47:54.542734 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:64599] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ade8GvSL71FHZkjrGzMOnAAAAYg"]
[Thu Apr 09 22:47:55.023327 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:23346] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ade8G61OMnvM2fMnB1PtOgAAABE"]
[Thu Apr 09 22:47:55.502797 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:23358] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ade8G61OMnvM2fMnB1PtPQAAABQ"]
[Thu Apr 09 22:47:55.977466 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:61807] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ade8G_SL71FHZkjrGzMOnQAAAYo"]
[Thu Apr 09 22:47:56.454962 2026] [:error] [pid 18477:tid 18480] [client 20.199.96.18:41649] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "ade8HMDe826HlFeoLPKsJgAAAUE"]
[Thu Apr 09 22:47:56.940794 2026] [:error] [pid 24516:tid 24564] [client 20.199.96.18:61772] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "ade8HNhW7vSS-UkeWCU-ZQAAAFE"]
[Thu Apr 09 22:47:57.412023 2026] [:error] [pid 24516:tid 24567] [client 20.199.96.18:58106] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "ade8HdhW7vSS-UkeWCU-ZgAAAFQ"]
[Thu Apr 09 22:47:57.890964 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:61764] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "ade8HfSL71FHZkjrGzMOoAAAAYc"]
[Thu Apr 09 22:47:58.362891 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:64518] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "ade8HibKfIYuVjWbE4WYeAAAAcU"]
[Thu Apr 09 22:47:58.845153 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:64628] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "ade8HibKfIYuVjWbE4WYfgAAAcA"]
[Thu Apr 09 22:47:59.324138 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:23331] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "ade8H-4Jn-WvK1ZBTvjz-wAAAMM"]
[Thu Apr 09 22:47:59.804966 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:64513] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "ade8H-4Jn-WvK1ZBTvjz_wAAAMw"]
[Thu Apr 09 22:48:00.288498 2026] [:error] [pid 20837:tid 20852] [client 20.199.96.18:41606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "ade8IPSL71FHZkjrGzMOqgAAAY0"]
[Thu Apr 09 22:48:00.772760 2026] [:error] [pid 24517:tid 24581] [client 20.199.96.18:41612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "ade8IHboYEn2ZFM_PS-JvwAAAIc"]
[Thu Apr 09 22:48:01.252269 2026] [:error] [pid 24517:tid 24580] [client 20.199.96.18:63600] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "ade8IXboYEn2ZFM_PS-JxAAAAIY"]
[Thu Apr 09 22:48:01.740537 2026] [:error] [pid 24517:tid 24574] [client 20.199.96.18:41636] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "ade8IXboYEn2ZFM_PS-JyAAAAIA"]
[Thu Apr 09 22:48:02.213977 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:63589] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "ade8IibKfIYuVjWbE4WYjAAAAcU"]
[Thu Apr 09 22:48:02.704491 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:64517] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "ade8Iq1OMnvM2fMnB1PtTgAAABM"]
[Thu Apr 09 22:48:03.174152 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:64525] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "ade8I_SL71FHZkjrGzMOqwAAAZg"]
[Thu Apr 09 22:48:03.649640 2026] [:error] [pid 24516:tid 24547] [client 20.199.96.18:61803] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "ade8I9hW7vSS-UkeWCU-bQAAAEA"]
[Thu Apr 09 22:48:04.119785 2026] [:error] [pid 24624:tid 24627] [client 20.199.96.18:61822] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "ade8JO4Jn-WvK1ZBTvj0DQAAAME"]
[Thu Apr 09 22:48:04.596029 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:61746] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "ade8JK1OMnvM2fMnB1PtUgAAAAs"]
[Thu Apr 09 22:48:05.073342 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:63597] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "ade8Ja1OMnvM2fMnB1PtVQAAAAM"]
[Thu Apr 09 22:48:05.559475 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:23296] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "ade8JfSL71FHZkjrGzMOswAAAYE"]
[Thu Apr 09 22:48:06.036274 2026] [:error] [pid 18477:tid 18494] [client 20.199.96.18:63586] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "ade8JsDe826HlFeoLPKsPQAAAU8"]
[Thu Apr 09 22:48:06.508391 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:41617] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "ade8Jq1OMnvM2fMnB1PtWQAAAA0"]
[Thu Apr 09 22:48:06.984634 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:63593] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "ade8JvSL71FHZkjrGzMOugAAAYQ"]
[Thu Apr 09 22:48:07.492987 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:64610] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "ade8J61OMnvM2fMnB1PtYgAAABY"]
[Thu Apr 09 22:48:07.996919 2026] [:error] [pid 24624:tid 24635] [client 20.199.96.18:64614] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ade8J-4Jn-WvK1ZBTvj0EQAAAMk"]
[Thu Apr 09 22:48:08.469220 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:41630] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ade8KCbKfIYuVjWbE4WYowAAAdY"]
[Thu Apr 09 22:48:08.940493 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:41609] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ade8KPSL71FHZkjrGzMOwgAAAZI"]
[Thu Apr 09 22:48:09.427057 2026] [proxy_fcgi:error] [pid 24624:tid 24640] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:09.666303 2026] [proxy_fcgi:error] [pid 24624:tid 24626] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:09.904287 2026] [proxy_fcgi:error] [pid 24624:tid 24643] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:10.145693 2026] [proxy_fcgi:error] [pid 24624:tid 24636] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:10.388654 2026] [proxy_fcgi:error] [pid 24624:tid 24649] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:10.631865 2026] [proxy_fcgi:error] [pid 24624:tid 24642] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:10.877819 2026] [proxy_fcgi:error] [pid 24624:tid 24631] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:11.120451 2026] [proxy_fcgi:error] [pid 24624:tid 24632] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:11.359912 2026] [proxy_fcgi:error] [pid 24624:tid 24629] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:11.607095 2026] [proxy_fcgi:error] [pid 24624:tid 24647] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:11.846130 2026] [proxy_fcgi:error] [pid 24624:tid 24634] [client 20.199.96.18:23337] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:48:12.084559 2026] [:error] [pid 24624:tid 24627] [client 20.199.96.18:23337] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ade8LO4Jn-WvK1ZBTvj0HwAAAME"]
[Thu Apr 09 22:48:12.554350 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:64620] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ade8LK1OMnvM2fMnB1PtlgAAAAI"]
[Thu Apr 09 22:48:13.034641 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:63623] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ade8LfSL71FHZkjrGzMOywAAAZg"]
[Thu Apr 09 22:48:13.512317 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64623] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ade8LfSL71FHZkjrGzMOzgAAAZA"]
[Thu Apr 09 22:48:13.994054 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:23317] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ade8LTXObuzEuw8mNJs16AAAAQI"]
[Thu Apr 09 22:48:14.468416 2026] [:error] [pid 20837:tid 20845] [client 20.199.96.18:41651] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ade8LvSL71FHZkjrGzMO0wAAAYY"]
[Thu Apr 09 22:48:14.955738 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:63607] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ade8LvSL71FHZkjrGzMO1wAAAZM"]
[Thu Apr 09 22:48:15.461609 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:61755] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ade8L61OMnvM2fMnB1PtqwAAAAM"]
[Thu Apr 09 22:48:15.978624 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:58103] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8L61OMnvM2fMnB1PtrgAAAAY"]
[Thu Apr 09 22:48:16.490923 2026] [:error] [pid 24517:tid 24588] [client 20.199.96.18:64569] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8MHboYEn2ZFM_PS-JzgAAAI4"]
[Thu Apr 09 22:48:16.987945 2026] [:error] [pid 24516:tid 24570] [client 20.199.96.18:63673] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8MNhW7vSS-UkeWCU-dAAAAFc"]
[Thu Apr 09 22:48:17.465700 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:23347] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8MfSL71FHZkjrGzMO6wAAAYo"]
[Thu Apr 09 22:48:17.937106 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:23297] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ade8Ma1OMnvM2fMnB1PtsAAAAAg"]
[Thu Apr 09 22:48:18.430439 2026] [:error] [pid 24517:tid 24574] [client 20.199.96.18:64569] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ade8MnboYEn2ZFM_PS-J0QAAAIA"]
[Thu Apr 09 22:48:18.928309 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:64609] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ade8MsDe826HlFeoLPKsVAAAAVc"]
[Thu Apr 09 22:48:19.399379 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:23357] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ade8M-4Jn-WvK1ZBTvj0LgAAAMY"]
[Thu Apr 09 22:48:19.877795 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:41646] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ade8M9hW7vSS-UkeWCU-fAAAAFI"]
[Thu Apr 09 22:48:20.362624 2026] [:error] [pid 24516:tid 24563] [client 20.199.96.18:63648] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ade8NNhW7vSS-UkeWCU-fQAAAFA"]
[Thu Apr 09 22:48:20.875989 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:64590] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ade8NK1OMnvM2fMnB1PttQAAAAc"]
[Thu Apr 09 22:48:21.432689 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:58386] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ade8NdhW7vSS-UkeWCU-fgAAAEU"]
[Thu Apr 09 22:48:21.977996 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:58387] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ade8NSbKfIYuVjWbE4WYqwAAAc0"]
[Thu Apr 09 22:48:22.460513 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:61791] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ade8Nq1OMnvM2fMnB1PtvAAAAAM"]
[Thu Apr 09 22:48:22.932675 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:63677] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ade8NibKfIYuVjWbE4WYsQAAAcQ"]
[Thu Apr 09 22:48:23.414565 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:63643] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ade8N61OMnvM2fMnB1PtwQAAAAY"]
[Thu Apr 09 22:48:23.904243 2026] [:error] [pid 63331:tid 63348] [client 20.199.96.18:23320] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ade8NybKfIYuVjWbE4WYtQAAAc8"]
[Thu Apr 09 22:48:24.397418 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:61762] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ade8OCbKfIYuVjWbE4WYtwAAAcU"]
[Thu Apr 09 22:48:24.908772 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:58069] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ade8OPSL71FHZkjrGzMO_wAAAZQ"]
[Thu Apr 09 22:48:25.409559 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:61822] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ade8OfSL71FHZkjrGzMPAwAAAYk"]
[Thu Apr 09 22:48:25.921993 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:61797] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ade8OfSL71FHZkjrGzMPBgAAAYA"]
[Thu Apr 09 22:48:26.397286 2026] [:error] [pid 18477:tid 18480] [client 20.199.96.18:23300] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ade8OsDe826HlFeoLPKsWQAAAUE"]
[Thu Apr 09 22:48:26.910253 2026] [:error] [pid 18477:tid 18483] [client 20.199.96.18:23352] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ade8OsDe826HlFeoLPKsWwAAAUQ"]
[Thu Apr 09 22:48:27.392439 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:64555] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ade8O_SL71FHZkjrGzMPDQAAAYM"]
[Thu Apr 09 22:48:27.872370 2026] [:error] [pid 63331:tid 63349] [client 20.199.96.18:63576] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ade8OybKfIYuVjWbE4WYwAAAAdA"]
[Thu Apr 09 22:48:28.344074 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:64544] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ade8PDXObuzEuw8mNJs19wAAAQI"]
[Thu Apr 09 22:48:28.819901 2026] [:error] [pid 24624:tid 24631] [client 20.199.96.18:56516] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ade8PO4Jn-WvK1ZBTvj0OwAAAMU"]
[Thu Apr 09 22:48:29.293162 2026] [:error] [pid 63331:tid 63354] [client 20.199.96.18:41635] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ade8PSbKfIYuVjWbE4WYyAAAAdU"]
[Thu Apr 09 22:48:29.770300 2026] [:error] [pid 63331:tid 63336] [client 20.199.96.18:63577] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ade8PSbKfIYuVjWbE4WYzwAAAcM"]
[Thu Apr 09 22:48:30.241081 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:61771] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ade8PibKfIYuVjWbE4WY1gAAAcQ"]
[Thu Apr 09 22:48:30.731126 2026] [:error] [pid 63331:tid 63335] [client 20.199.96.18:64629] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ade8PibKfIYuVjWbE4WY3AAAAcI"]
[Thu Apr 09 22:48:31.206088 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:63611] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ade8PybKfIYuVjWbE4WY4wAAAdM"]
[Thu Apr 09 22:48:31.685939 2026] [:error] [pid 24624:tid 24634] [client 20.199.96.18:56581] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ade8P-4Jn-WvK1ZBTvj0PgAAAMg"]
[Thu Apr 09 22:48:32.162574 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:64548] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ade8QCbKfIYuVjWbE4WY6AAAAcE"]
[Thu Apr 09 22:48:32.638877 2026] [:error] [pid 24517:tid 24575] [client 20.199.96.18:64536] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ade8QHboYEn2ZFM_PS-J_AAAAIE"]
[Thu Apr 09 22:48:33.125761 2026] [:error] [pid 63331:tid 63353] [client 20.199.96.18:63588] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ade8QSbKfIYuVjWbE4WY8gAAAdQ"]
[Thu Apr 09 22:48:33.596463 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:63650] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade8QSbKfIYuVjWbE4WY9wAAAdg"]
[Thu Apr 09 22:48:34.090347 2026] [:error] [pid 63331:tid 63335] [client 20.199.96.18:61788] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade8QibKfIYuVjWbE4WY_QAAAcI"]
[Thu Apr 09 22:48:34.567564 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:64611] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade8QjXObuzEuw8mNJs1-AAAARU"]
[Thu Apr 09 22:48:35.040844 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:58053] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ade8Q_SL71FHZkjrGzMPHgAAAY8"]
[Thu Apr 09 22:48:35.521880 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:58400] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ade8QybKfIYuVjWbE4WZBAAAAcY"]
[Thu Apr 09 22:48:36.012072 2026] [:error] [pid 24624:tid 24626] [client 20.199.96.18:23321] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ade8RO4Jn-WvK1ZBTvj0SAAAAMA"]
[Thu Apr 09 22:48:36.488697 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:64600] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ade8RK1OMnvM2fMnB1PtygAAABA"]
[Thu Apr 09 22:48:36.966411 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:64532] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ade8RCbKfIYuVjWbE4WZFAAAAc0"]
[Thu Apr 09 22:48:37.447585 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:41608] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ade8RTXObuzEuw8mNJs1_QAAAQw"]
[Thu Apr 09 22:48:37.919517 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:64516] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ade8Re4Jn-WvK1ZBTvj0UAAAAMY"]
[Thu Apr 09 22:48:38.391341 2026] [:error] [pid 18477:tid 18491] [client 20.199.96.18:63666] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ade8RsDe826HlFeoLPKsZwAAAUw"]
[Thu Apr 09 22:48:38.883052 2026] [:error] [pid 24516:tid 24559] [client 20.199.96.18:61763] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ade8RthW7vSS-UkeWCU-hQAAAEw"]
[Thu Apr 09 22:48:39.371941 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:41604] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ade8R8De826HlFeoLPKsagAAAVM"]
[Thu Apr 09 22:48:39.860844 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:64598] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ade8R9hW7vSS-UkeWCU-hwAAAEg"]
[Thu Apr 09 22:48:40.340052 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:63635] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ade8SPSL71FHZkjrGzMPMwAAAZQ"]
[Thu Apr 09 22:48:40.819687 2026] [:error] [pid 63331:tid 63335] [client 20.199.96.18:64624] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ade8SCbKfIYuVjWbE4WZJgAAAcI"]
[Thu Apr 09 22:48:41.299356 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:61787] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ade8SSbKfIYuVjWbE4WZKwAAAdM"]
[Thu Apr 09 22:48:41.787180 2026] [:error] [pid 24624:tid 24635] [client 20.199.96.18:64531] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ade8Se4Jn-WvK1ZBTvj0WgAAAMk"]
[Thu Apr 09 22:48:42.264443 2026] [:error] [pid 24516:tid 24564] [client 20.199.96.18:64616] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ade8SthW7vSS-UkeWCU-jAAAAFE"]
[Thu Apr 09 22:48:42.736925 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:64612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ade8Sq1OMnvM2fMnB1PtzAAAABQ"]
[Thu Apr 09 22:48:43.210078 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:64543] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ade8SzXObuzEuw8mNJs2CQAAARU"]
[Thu Apr 09 22:48:43.689544 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:63606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ade8S3boYEn2ZFM_PS-KAwAAAJg"]
[Thu Apr 09 22:48:44.159477 2026] [:error] [pid 24517:tid 24585] [client 20.199.96.18:63553] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ade8THboYEn2ZFM_PS-KCQAAAIs"]
[Thu Apr 09 22:48:44.645281 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:23354] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ade8TMDe826HlFeoLPKsfAAAAU4"]
[Thu Apr 09 22:48:45.124771 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:23355] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ade8TXboYEn2ZFM_PS-KDwAAAII"]
[Thu Apr 09 22:48:45.602983 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:63578] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ade8Ta1OMnvM2fMnB1PtzQAAAAg"]
[Thu Apr 09 22:48:46.082890 2026] [:error] [pid 24927:tid 24952] [client 20.199.96.18:41620] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ade8TjXObuzEuw8mNJs2FgAAARY"]
[Thu Apr 09 22:48:46.560607 2026] [:error] [pid 24927:tid 24949] [client 20.199.96.18:63659] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ade8TjXObuzEuw8mNJs2GQAAARM"]
[Thu Apr 09 22:48:47.033980 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:41627] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ade8T61OMnvM2fMnB1Pt2QAAABE"]
[Thu Apr 09 22:48:47.509309 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:64906] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ade8T-4Jn-WvK1ZBTvj0YgAAAMw"]
[Thu Apr 09 22:48:47.987937 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:56625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ade8TybKfIYuVjWbE4WZNQAAAco"]
[Thu Apr 09 22:48:48.462060 2026] [:error] [pid 24517:tid 24582] [client 20.199.96.18:23339] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ade8UHboYEn2ZFM_PS-KEgAAAIg"]
[Thu Apr 09 22:48:48.945188 2026] [:error] [pid 18477:tid 18484] [client 20.199.96.18:64627] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8UMDe826HlFeoLPKshgAAAUU"]
[Thu Apr 09 22:48:49.427330 2026] [:error] [pid 24517:tid 24580] [client 20.199.96.18:61806] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8UXboYEn2ZFM_PS-KGAAAAIY"]
[Thu Apr 09 22:48:49.903467 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:64570] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8UcDe826HlFeoLPKsigAAAVU"]
[Thu Apr 09 22:48:50.374574 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:23350] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8Uu4Jn-WvK1ZBTvj0aQAAANI"]
[Thu Apr 09 22:48:50.852508 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:58403] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade8UjXObuzEuw8mNJs2JAAAAQ8"]
[Thu Apr 09 22:48:51.329779 2026] [:error] [pid 24517:tid 24588] [client 20.199.96.18:63626] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade8U3boYEn2ZFM_PS-KIAAAAI4"]
[Thu Apr 09 22:48:51.811084 2026] [:error] [pid 24517:tid 24590] [client 20.199.96.18:23305] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade8U3boYEn2ZFM_PS-KIwAAAJA"]
[Thu Apr 09 22:48:52.280916 2026] [:error] [pid 24624:tid 24647] [client 20.199.96.18:64625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ade8VO4Jn-WvK1ZBTvj0cwAAANU"]
[Thu Apr 09 22:48:52.756609 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:64553] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ade8VDXObuzEuw8mNJs2KQAAAQg"]
[Thu Apr 09 22:48:53.227108 2026] [:error] [pid 24927:tid 24949] [client 20.199.96.18:41632] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ade8VTXObuzEuw8mNJs2LAAAARM"]
[Thu Apr 09 22:48:53.702772 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:61802] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ade8VTXObuzEuw8mNJs2LwAAAQc"]
[Thu Apr 09 22:48:54.175549 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:64619] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ade8Vq1OMnvM2fMnB1Pt3AAAAAY"]
[Thu Apr 09 22:48:54.655632 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:64559] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ade8Vq1OMnvM2fMnB1Pt3gAAABg"]
[Thu Apr 09 22:48:55.127186 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:64635] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ade8VzXObuzEuw8mNJs2MwAAARc"]
[Thu Apr 09 22:48:55.619844 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:63616] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ade8V61OMnvM2fMnB1Pt4AAAAAg"]
[Thu Apr 09 22:48:56.092455 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:56588] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ade8WNhW7vSS-UkeWCU-oAAAAFI"]
[Thu Apr 09 22:48:56.570301 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:41613] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ade8WHboYEn2ZFM_PS-KKwAAAJg"]
[Thu Apr 09 22:48:57.058995 2026] [:error] [pid 63331:tid 63349] [client 20.199.96.18:63624] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ade8WSbKfIYuVjWbE4WZOQAAAdA"]
[Thu Apr 09 22:48:57.533400 2026] [:error] [pid 24517:tid 24585] [client 20.199.96.18:58397] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ade8WXboYEn2ZFM_PS-KLwAAAIs"]
[Thu Apr 09 22:48:58.009142 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:58402] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ade8WjXObuzEuw8mNJs2PgAAARA"]
[Thu Apr 09 22:48:58.491034 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64905] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ade8Wq1OMnvM2fMnB1Pt5wAAAAs"]
[Thu Apr 09 22:48:58.965069 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:63654] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ade8WibKfIYuVjWbE4WZPAAAAdg"]
[Thu Apr 09 22:48:59.439941 2026] [:error] [pid 24624:tid 24634] [client 20.199.96.18:53708] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ade8W-4Jn-WvK1ZBTvj0hAAAAMg"]
[Thu Apr 09 22:48:59.914318 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:63612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ade8WzXObuzEuw8mNJs2QQAAAQA"]
[Thu Apr 09 22:49:00.395100 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:64541] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ade8XDXObuzEuw8mNJs2QgAAARI"]
[Thu Apr 09 22:49:00.887186 2026] [:error] [pid 24927:tid 24941] [client 20.199.96.18:41625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ade8XDXObuzEuw8mNJs2RgAAAQs"]
[Thu Apr 09 22:49:01.358698 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:41661] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ade8Xe4Jn-WvK1ZBTvj0hgAAANI"]
[Thu Apr 09 22:49:01.832777 2026] [:error] [pid 63331:tid 63337] [client 20.199.96.18:58404] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ade8XSbKfIYuVjWbE4WZQgAAAcQ"]
[Thu Apr 09 22:49:02.308230 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:63554] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ade8XibKfIYuVjWbE4WZRQAAAco"]
[Thu Apr 09 22:49:02.788638 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:63562] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ade8XibKfIYuVjWbE4WZSwAAAcY"]
[Thu Apr 09 22:49:03.260217 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:63581] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ade8XybKfIYuVjWbE4WZTwAAAdg"]
[Thu Apr 09 22:49:03.741997 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:64581] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ade8X-4Jn-WvK1ZBTvj0hwAAAM8"]
[Thu Apr 09 22:49:04.213440 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:64914] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade8YNhW7vSS-UkeWCU-pAAAAE4"]
[Thu Apr 09 22:49:04.684302 2026] [:error] [pid 18477:tid 18483] [client 20.199.96.18:61704] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade8YMDe826HlFeoLPKspAAAAUQ"]
[Thu Apr 09 22:49:05.155611 2026] [:error] [pid 24927:tid 24941] [client 20.199.96.18:58372] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade8YTXObuzEuw8mNJs2VwAAAQs"]
[Thu Apr 09 22:49:05.633493 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:56610] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ade8YcDe826HlFeoLPKsqQAAAVQ"]
[Thu Apr 09 22:49:06.111683 2026] [:error] [pid 24517:tid 24581] [client 20.199.96.18:58100] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade8YnboYEn2ZFM_PS-KOQAAAIc"]
[Thu Apr 09 22:49:06.608354 2026] [:error] [pid 24516:tid 24567] [client 20.199.96.18:64941] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade8YthW7vSS-UkeWCU-rQAAAFQ"]
[Thu Apr 09 22:49:07.087164 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:61710] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade8Y61OMnvM2fMnB1PuBAAAAAI"]
[Thu Apr 09 22:49:07.563007 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:41622] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ade8YybKfIYuVjWbE4WZUwAAAcc"]
[Thu Apr 09 22:49:08.048335 2026] [:error] [pid 24516:tid 24562] [client 20.199.96.18:63622] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ade8ZNhW7vSS-UkeWCU-tgAAAE8"]
[Thu Apr 09 22:49:08.519284 2026] [:error] [pid 63331:tid 63356] [client 20.199.96.18:58067] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ade8ZCbKfIYuVjWbE4WZWQAAAdc"]
[Thu Apr 09 22:49:08.998464 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:61819] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ade8ZK1OMnvM2fMnB1PuDAAAAAA"]
[Thu Apr 09 22:49:09.473157 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:64634] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ade8ZfSL71FHZkjrGzMPPgAAAYc"]
[Thu Apr 09 22:49:09.954635 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:23306] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ade8Za1OMnvM2fMnB1PuEwAAABI"]
[Thu Apr 09 22:49:10.429331 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:64908] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ade8ZvSL71FHZkjrGzMPQAAAAZM"]
[Thu Apr 09 22:49:10.913302 2026] [:error] [pid 63331:tid 63334] [client 20.199.96.18:61814] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ade8ZibKfIYuVjWbE4WZZQAAAcE"]
[Thu Apr 09 22:49:11.392824 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:11.631688 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:12.349827 2026] [proxy_fcgi:error] [pid 24515:tid 24536] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:12.593269 2026] [proxy_fcgi:error] [pid 24515:tid 24539] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:12.835893 2026] [proxy_fcgi:error] [pid 24515:tid 24529] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:13.076728 2026] [proxy_fcgi:error] [pid 24515:tid 24542] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:13.316999 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:13.795008 2026] [proxy_fcgi:error] [pid 24515:tid 24526] [client 20.199.96.18:63655] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:49:14.030909 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:63655] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "ade8aq1OMnvM2fMnB1PuLQAAAA8"]
[Thu Apr 09 22:49:14.514650 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:63613] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "ade8aq1OMnvM2fMnB1PuMwAAABE"]
[Thu Apr 09 22:49:14.987358 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:61756] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "ade8au4Jn-WvK1ZBTvj0kwAAAMM"]
[Thu Apr 09 22:49:15.459909 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:64580] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "ade8a_SL71FHZkjrGzMPRwAAAYk"]
[Thu Apr 09 22:49:15.941229 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:56614] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "ade8a_SL71FHZkjrGzMPSAAAAYI"]
[Thu Apr 09 22:49:16.410559 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:64565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "ade8bPSL71FHZkjrGzMPSQAAAYw"]
[Thu Apr 09 22:49:16.881110 2026] [:error] [pid 20837:tid 20852] [client 20.199.96.18:58059] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "ade8bPSL71FHZkjrGzMPTQAAAY0"]
[Thu Apr 09 22:49:17.353988 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:63649] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "ade8bdhW7vSS-UkeWCU-0gAAAEg"]
[Thu Apr 09 22:49:17.831138 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:64899] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "ade8ba1OMnvM2fMnB1PuPgAAAA8"]
[Thu Apr 09 22:49:18.303225 2026] [:error] [pid 63331:tid 63354] [client 20.199.96.18:58424] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "ade8bibKfIYuVjWbE4WZawAAAdU"]
[Thu Apr 09 22:49:18.777377 2026] [:error] [pid 24624:tid 24635] [client 20.199.96.18:63647] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "ade8bu4Jn-WvK1ZBTvj0lgAAAMk"]
[Thu Apr 09 22:49:19.247537 2026] [:error] [pid 63331:tid 63350] [client 20.199.96.18:63669] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "ade8bybKfIYuVjWbE4WZbQAAAdE"]
[Thu Apr 09 22:49:19.725183 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:64556] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "ade8b61OMnvM2fMnB1PuQwAAAAA"]
[Thu Apr 09 22:49:20.196030 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:63661] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "ade8cK1OMnvM2fMnB1PuRQAAAAo"]
[Thu Apr 09 22:49:20.665469 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:64583] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "ade8cPSL71FHZkjrGzMPWwAAAYQ"]
[Thu Apr 09 22:49:21.142984 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:61718] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "ade8cTXObuzEuw8mNJs2XQAAARc"]
[Thu Apr 09 22:49:21.617456 2026] [:error] [pid 24624:tid 24626] [client 20.199.96.18:58384] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "ade8ce4Jn-WvK1ZBTvj0mwAAAMA"]
[Thu Apr 09 22:49:22.091435 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:64617] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "ade8cu4Jn-WvK1ZBTvj0ngAAAMI"]
[Thu Apr 09 22:49:22.561983 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:63679] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "ade8cu4Jn-WvK1ZBTvj0oQAAANY"]
[Thu Apr 09 22:49:23.038595 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:64930] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "ade8c_SL71FHZkjrGzMPXQAAAYI"]
[Thu Apr 09 22:49:23.509548 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:61727] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ade8c61OMnvM2fMnB1PuSwAAAAs"]
[Thu Apr 09 22:49:23.978325 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:61796] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ade8c-4Jn-WvK1ZBTvj0pgAAAMw"]
[Thu Apr 09 22:49:24.449459 2026] [:error] [pid 63331:tid 63349] [client 20.199.96.18:64638] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ade8dCbKfIYuVjWbE4WZeQAAAdA"]
[Thu Apr 09 22:49:24.919162 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:64924] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ade8dK1OMnvM2fMnB1PuUAAAAAI"]
[Thu Apr 09 22:49:25.405484 2026] [:error] [pid 20837:tid 20844] [client 20.199.96.18:63674] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade8dfSL71FHZkjrGzMPYQAAAYU"]
[Thu Apr 09 22:49:25.874260 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:64959] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade8da1OMnvM2fMnB1PuVgAAAAA"]
[Thu Apr 09 22:49:26.343747 2026] [:error] [pid 63331:tid 63340] [client 20.199.96.18:64522] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade8dibKfIYuVjWbE4WZggAAAcc"]
[Thu Apr 09 22:49:26.826141 2026] [:error] [pid 24624:tid 24646] [client 20.199.96.18:61759] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ade8du4Jn-WvK1ZBTvj0rwAAANQ"]
[Thu Apr 09 22:49:27.294574 2026] [:error] [pid 63331:tid 63347] [client 20.199.96.18:63625] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade8dybKfIYuVjWbE4WZiwAAAc4"]
[Thu Apr 09 22:49:27.769016 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:23319] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade8dybKfIYuVjWbE4WZjgAAAdg"]
[Thu Apr 09 22:49:28.240712 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:41623] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade8eCbKfIYuVjWbE4WZmAAAAcU"]
[Thu Apr 09 22:49:28.743828 2026] [:error] [pid 63331:tid 63336] [client 20.199.96.18:64943] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ade8eCbKfIYuVjWbE4WZnwAAAcM"]
[Thu Apr 09 22:49:29.220329 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:58070] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade8eTXObuzEuw8mNJs2YQAAARA"]
[Thu Apr 09 22:49:29.715935 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:64576] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade8ea1OMnvM2fMnB1PuXQAAAAY"]
[Thu Apr 09 22:49:30.186752 2026] [:error] [pid 63331:tid 63341] [client 20.199.96.18:56565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade8eibKfIYuVjWbE4WZpwAAAcg"]
[Thu Apr 09 22:49:30.678521 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:64621] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ade8eibKfIYuVjWbE4WZrQAAAco"]
[Thu Apr 09 22:49:31.149433 2026] [:error] [pid 24516:tid 24569] [client 20.199.96.18:41658] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ade8e9hW7vSS-UkeWCU-4QAAAFY"]
[Thu Apr 09 22:49:31.632215 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:58108] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ade8eybKfIYuVjWbE4WZtAAAAdg"]
[Thu Apr 09 22:49:32.112739 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:58409] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ade8fK1OMnvM2fMnB1PuZgAAABE"]
[Thu Apr 09 22:49:32.589426 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:61753] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ade8fK1OMnvM2fMnB1PuaQAAAAE"]
[Thu Apr 09 22:49:33.103519 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:23308] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ade8ffSL71FHZkjrGzMPbQAAAYQ"]
[Thu Apr 09 22:49:33.574874 2026] [:error] [pid 24624:tid 24649] [client 20.199.96.18:23330] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ade8fe4Jn-WvK1ZBTvj00gAAANc"]
[Thu Apr 09 22:49:34.046619 2026] [:error] [pid 63331:tid 63349] [client 20.199.96.18:61735] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ade8fibKfIYuVjWbE4WZyQAAAdA"]
[Thu Apr 09 22:49:34.516189 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:64579] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ade8fu4Jn-WvK1ZBTvj03gAAAMY"]
[Thu Apr 09 22:49:34.988336 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:63617] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade8fq1OMnvM2fMnB1PucQAAAAs"]
[Thu Apr 09 22:49:35.458363 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:56597] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade8f61OMnvM2fMnB1PuegAAABA"]
[Thu Apr 09 22:49:35.928713 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64572] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade8f_SL71FHZkjrGzMPcgAAAZA"]
[Thu Apr 09 22:49:36.398715 2026] [:error] [pid 63331:tid 63352] [client 20.199.96.18:64560] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ade8gCbKfIYuVjWbE4WZ2gAAAdM"]
[Thu Apr 09 22:49:36.869445 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:23302] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8gPSL71FHZkjrGzMPdgAAAYg"]
[Thu Apr 09 22:49:37.342313 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:23329] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8gTXObuzEuw8mNJs2ZgAAAQQ"]
[Thu Apr 09 22:49:37.813716 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:64915] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8gfSL71FHZkjrGzMPegAAAZE"]
[Thu Apr 09 22:49:38.283769 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:23316] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ade8gjXObuzEuw8mNJs2aQAAARI"]
[Thu Apr 09 22:49:38.755825 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:61773] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade8gq1OMnvM2fMnB1PuigAAABA"]
[Thu Apr 09 22:49:39.226310 2026] [:error] [pid 63331:tid 63339] [client 20.199.96.18:23316] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade8gybKfIYuVjWbE4WZ7QAAAcY"]
[Thu Apr 09 22:49:39.696180 2026] [:error] [pid 24516:tid 24558] [client 20.199.96.18:64520] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade8g9hW7vSS-UkeWCU-5gAAAEs"]
[Thu Apr 09 22:49:40.167582 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:63573] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ade8hDXObuzEuw8mNJs2awAAAQE"]
[Thu Apr 09 22:49:40.640090 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:23303] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8hK1OMnvM2fMnB1PujgAAAAU"]
[Thu Apr 09 22:49:41.114034 2026] [:error] [pid 24517:tid 24588] [client 20.199.96.18:41654] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8hXboYEn2ZFM_PS-KSQAAAI4"]
[Thu Apr 09 22:49:41.583298 2026] [:error] [pid 24516:tid 24553] [client 20.199.96.18:63556] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8hdhW7vSS-UkeWCU-5wAAAEY"]
[Thu Apr 09 22:49:42.052926 2026] [:error] [pid 24624:tid 24640] [client 20.199.96.18:64945] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ade8hu4Jn-WvK1ZBTvj0_gAAAM4"]
[Thu Apr 09 22:49:42.528550 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:63637] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ade8hvSL71FHZkjrGzMPgAAAAYI"]
[Thu Apr 09 22:49:42.999598 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:23304] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ade8hvSL71FHZkjrGzMPhQAAAYc"]
[Thu Apr 09 22:49:43.469129 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:56610] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ade8h61OMnvM2fMnB1PulAAAABM"]
[Thu Apr 09 22:49:43.938092 2026] [:error] [pid 24624:tid 24642] [client 20.199.96.18:61697] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ade8h-4Jn-WvK1ZBTvj1CQAAANA"]
[Thu Apr 09 22:49:44.410424 2026] [:error] [pid 63331:tid 63341] [client 20.199.96.18:23315] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ade8iCbKfIYuVjWbE4WaBwAAAcg"]
[Thu Apr 09 22:49:44.886624 2026] [:error] [pid 63331:tid 63346] [client 20.199.96.18:61712] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ade8iCbKfIYuVjWbE4WaDQAAAc0"]
[Thu Apr 09 22:49:45.362259 2026] [:error] [pid 24624:tid 24637] [client 20.199.96.18:58088] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ade8ie4Jn-WvK1ZBTvj1DQAAAMs"]
[Thu Apr 09 22:49:45.881746 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:63653] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ade8iSbKfIYuVjWbE4WaEgAAAcA"]
[Thu Apr 09 22:49:46.364653 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:61732] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ade8iq1OMnvM2fMnB1PumAAAAAE"]
[Thu Apr 09 22:49:46.865441 2026] [:error] [pid 63331:tid 63357] [client 20.199.96.18:56575] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ade8iibKfIYuVjWbE4WaGAAAAdg"]
[Thu Apr 09 22:49:47.343080 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:58083] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ade8i61OMnvM2fMnB1PuoQAAAAg"]
[Thu Apr 09 22:49:47.899398 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:63668] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ade8izXObuzEuw8mNJs2dQAAAQc"]
[Thu Apr 09 22:49:48.479899 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:64909] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ade8jDXObuzEuw8mNJs2dwAAARU"]
[Thu Apr 09 22:49:48.977793 2026] [:error] [pid 24624:tid 24640] [client 20.199.96.18:64931] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ade8jO4Jn-WvK1ZBTvj1EgAAAM4"]
[Thu Apr 09 22:49:49.450141 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:56583] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ade8ja1OMnvM2fMnB1PuqQAAAAI"]
[Thu Apr 09 22:49:49.920407 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:64603] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ade8jcDe826HlFeoLPKs2wAAAU0"]
[Thu Apr 09 22:49:50.464439 2026] [:error] [pid 63331:tid 63345] [client 20.199.96.18:58410] [client 20.199.96.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ade8jibKfIYuVjWbE4WaHAAAAcw"]
[Thu Apr 09 22:49:50.957100 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:23327] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ade8jvSL71FHZkjrGzMPkwAAAYw"]
[Thu Apr 09 22:49:51.427564 2026] [:error] [pid 24624:tid 24647] [client 20.199.96.18:61765] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ade8j-4Jn-WvK1ZBTvj1GQAAANU"]
[Thu Apr 09 22:49:51.914913 2026] [:error] [pid 18477:tid 18488] [client 20.199.96.18:63571] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ade8j8De826HlFeoLPKs3QAAAUk"]
[Thu Apr 09 22:49:52.398919 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:56560] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ade8kK1OMnvM2fMnB1PutgAAAAU"]
[Thu Apr 09 22:49:52.868997 2026] [:error] [pid 24517:tid 24582] [client 20.199.96.18:64633] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade8kHboYEn2ZFM_PS-KXAAAAIg"]
[Thu Apr 09 22:49:53.338709 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:56567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade8kcDe826HlFeoLPKs3gAAAVA"]
[Thu Apr 09 22:49:53.832224 2026] [:error] [pid 20837:tid 20861] [client 20.199.96.18:63630] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade8kfSL71FHZkjrGzMPlQAAAZY"]
[Thu Apr 09 22:49:54.316161 2026] [:error] [pid 20837:tid 20846] [client 20.199.96.18:58085] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ade8kvSL71FHZkjrGzMPlwAAAYc"]
[Thu Apr 09 22:49:54.815980 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:56564] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade8kjXObuzEuw8mNJs2gwAAAQg"]
[Thu Apr 09 22:49:55.290125 2026] [:error] [pid 24624:tid 24650] [client 20.199.96.18:63628] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade8k-4Jn-WvK1ZBTvj1IQAAANg"]
[Thu Apr 09 22:49:55.779461 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:54176] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade8kzXObuzEuw8mNJs2hAAAAQ4"]
[Thu Apr 09 22:49:56.276737 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:58104] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ade8lMDe826HlFeoLPKs6AAAAUM"]
[Thu Apr 09 22:49:56.752162 2026] [:error] [pid 24517:tid 24579] [client 20.199.96.18:61805] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "ade8lHboYEn2ZFM_PS-KYwAAAIU"]
[Thu Apr 09 22:49:57.234272 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:64948] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "ade8lfSL71FHZkjrGzMPnAAAAYg"]
[Thu Apr 09 22:49:57.715731 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:53751] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "ade8lTXObuzEuw8mNJs2igAAARQ"]
[Thu Apr 09 22:49:58.196640 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:63582] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prv8.php"] [unique_id "ade8ljXObuzEuw8mNJs2iwAAAQc"]
[Thu Apr 09 22:49:58.688575 2026] [:error] [pid 24927:tid 24941] [client 20.199.96.18:41640] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ade8ljXObuzEuw8mNJs2jwAAAQs"]
[Thu Apr 09 22:49:59.158604 2026] [:error] [pid 24517:tid 24593] [client 20.199.96.18:23324] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ade8l3boYEn2ZFM_PS-KbgAAAJM"]
[Thu Apr 09 22:49:59.633404 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:64946] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ade8l-4Jn-WvK1ZBTvj1LQAAAMY"]
[Thu Apr 09 22:50:00.116414 2026] [:error] [pid 24517:tid 24577] [client 20.199.96.18:64586] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ade8mHboYEn2ZFM_PS-KdgAAAIM"]
[Thu Apr 09 22:50:00.590383 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:53699] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ade8mO4Jn-WvK1ZBTvj1OQAAANI"]
[Thu Apr 09 22:50:01.064940 2026] [:error] [pid 20837:tid 20861] [client 20.199.96.18:64926] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ade8mfSL71FHZkjrGzMPqAAAAZY"]
[Thu Apr 09 22:50:01.538986 2026] [:error] [pid 24516:tid 24560] [client 20.199.96.18:64923] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ade8mdhW7vSS-UkeWCU_AAAAAE0"]
[Thu Apr 09 22:50:02.031079 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:41662] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ade8mvSL71FHZkjrGzMPrAAAAZI"]
[Thu Apr 09 22:50:02.507838 2026] [:error] [pid 20837:tid 20850] [client 20.199.96.18:64919] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ade8mvSL71FHZkjrGzMPsAAAAYs"]
[Thu Apr 09 22:50:02.994633 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:58079] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ade8mq1OMnvM2fMnB1PuxgAAAAU"]
[Thu Apr 09 22:50:03.474293 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:58369] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ade8m_SL71FHZkjrGzMPuAAAAYQ"]
[Thu Apr 09 22:50:03.961774 2026] [:error] [pid 63331:tid 63333] [client 20.199.96.18:58420] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ade8mybKfIYuVjWbE4WaJAAAAcA"]
[Thu Apr 09 22:50:04.431335 2026] [:error] [pid 24624:tid 24645] [client 20.199.96.18:64897] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ade8nO4Jn-WvK1ZBTvj1PgAAANM"]
[Thu Apr 09 22:50:04.937014 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:63566] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ade8nCbKfIYuVjWbE4WaKwAAAck"]
[Thu Apr 09 22:50:05.422691 2026] [:error] [pid 24516:tid 24571] [client 20.199.96.18:64942] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ade8ndhW7vSS-UkeWCU_CAAAAFg"]
[Thu Apr 09 22:50:05.927474 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:41605] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ade8nTXObuzEuw8mNJs2mAAAAQg"]
[Thu Apr 09 22:50:06.406684 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:64902] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ade8nvSL71FHZkjrGzMPvQAAAYE"]
[Thu Apr 09 22:50:06.890117 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:64901] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ade8nvSL71FHZkjrGzMPwgAAAZE"]
[Thu Apr 09 22:50:07.361732 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:64582] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ade8n-4Jn-WvK1ZBTvj1QAAAAMI"]
[Thu Apr 09 22:50:07.849246 2026] [:error] [pid 63331:tid 63344] [client 20.199.96.18:64632] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ade8nybKfIYuVjWbE4WaNwAAAcs"]
[Thu Apr 09 22:50:08.325896 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:64549] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "ade8oDXObuzEuw8mNJs2oAAAAQQ"]
[Thu Apr 09 22:50:08.797764 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:63609] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "ade8oK1OMnvM2fMnB1Pu2wAAAAY"]
[Thu Apr 09 22:50:09.276219 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:58096] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "ade8oTXObuzEuw8mNJs2ogAAARI"]
[Thu Apr 09 22:50:09.755686 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:63570] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "ade8oSbKfIYuVjWbE4WaQQAAAdY"]
[Thu Apr 09 22:50:10.227037 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:63575] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ade8ou4Jn-WvK1ZBTvj1RwAAAMY"]
[Thu Apr 09 22:50:10.718182 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:23318] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ade8oq1OMnvM2fMnB1Pu6AAAAAs"]
[Thu Apr 09 22:50:11.191143 2026] [:error] [pid 63331:tid 63335] [client 20.199.96.18:63607] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ade8oybKfIYuVjWbE4WaRQAAAcI"]
[Thu Apr 09 22:50:11.664308 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:58429] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ade8o-4Jn-WvK1ZBTvj1UAAAAMI"]
[Thu Apr 09 22:50:12.159277 2026] [:error] [pid 63331:tid 63348] [client 20.199.96.18:61770] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ade8pCbKfIYuVjWbE4WaSQAAAc8"]
[Thu Apr 09 22:50:12.652253 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:58084] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ade8pK1OMnvM2fMnB1Pu8wAAAAI"]
[Thu Apr 09 22:50:13.131903 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:13.611710 2026] [proxy_fcgi:error] [pid 24515:tid 24539] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:13.850886 2026] [proxy_fcgi:error] [pid 24515:tid 24525] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:14.090699 2026] [proxy_fcgi:error] [pid 24515:tid 24521] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:14.330046 2026] [proxy_fcgi:error] [pid 24515:tid 24541] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:14.571147 2026] [proxy_fcgi:error] [pid 24515:tid 24538] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:14.810312 2026] [proxy_fcgi:error] [pid 24515:tid 24531] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:15.288400 2026] [proxy_fcgi:error] [pid 24515:tid 24532] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:15.527196 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 20.199.96.18:56603] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 22:50:15.762984 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:56603] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "ade8p61OMnvM2fMnB1PvFgAAAAg"]
[Thu Apr 09 22:50:16.250739 2026] [:error] [pid 63331:tid 63344] [client 20.199.96.18:64561] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "ade8qCbKfIYuVjWbE4WaVAAAAcs"]
[Thu Apr 09 22:50:16.733013 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:63638] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "ade8qMDe826HlFeoLPKs8QAAAVA"]
[Thu Apr 09 22:50:17.214011 2026] [:error] [pid 18477:tid 18486] [client 20.199.96.18:64952] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "ade8qcDe826HlFeoLPKs8wAAAUc"]
[Thu Apr 09 22:50:17.709454 2026] [:error] [pid 63331:tid 63345] [client 20.199.96.18:56594] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "ade8qSbKfIYuVjWbE4WaXQAAAcw"]
[Thu Apr 09 22:50:18.180852 2026] [:error] [pid 20837:tid 20854] [client 20.199.96.18:64618] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "ade8qvSL71FHZkjrGzMP1AAAAY8"]
[Thu Apr 09 22:50:18.664128 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:63604] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "ade8qjXObuzEuw8mNJs2pgAAAQ8"]
[Thu Apr 09 22:50:19.144311 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:56580] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "ade8q_SL71FHZkjrGzMP2gAAAYw"]
[Thu Apr 09 22:50:19.621208 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:64907] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "ade8q8De826HlFeoLPKs9AAAAVQ"]
[Thu Apr 09 22:50:20.101784 2026] [:error] [pid 20837:tid 20857] [client 20.199.96.18:23334] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "ade8rPSL71FHZkjrGzMP2wAAAZI"]
[Thu Apr 09 22:50:20.580920 2026] [:error] [pid 20837:tid 20850] [client 20.199.96.18:41629] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "ade8rPSL71FHZkjrGzMP3gAAAYs"]
[Thu Apr 09 22:50:21.092384 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:61754] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "ade8ra1OMnvM2fMnB1PvKQAAAAE"]
[Thu Apr 09 22:50:21.585955 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:23313] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "ade8ra1OMnvM2fMnB1PvLQAAAA0"]
[Thu Apr 09 22:50:22.058168 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:58094] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "ade8rq1OMnvM2fMnB1PvMQAAAA8"]
[Thu Apr 09 22:50:22.538623 2026] [:error] [pid 24516:tid 24564] [client 20.199.96.18:64953] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "ade8rthW7vSS-UkeWCU_DQAAAFE"]
[Thu Apr 09 22:50:23.016222 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:64935] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "ade8rybKfIYuVjWbE4WacgAAAco"]
[Thu Apr 09 22:50:23.486616 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:53698] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ade8rzXObuzEuw8mNJs2rAAAAQ0"]
[Thu Apr 09 22:50:23.961343 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:58373] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ade8rzXObuzEuw8mNJs2rwAAARQ"]
[Thu Apr 09 22:50:24.436834 2026] [:error] [pid 63331:tid 63347] [client 20.199.96.18:41611] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ade8sCbKfIYuVjWbE4WaewAAAc4"]
[Thu Apr 09 22:50:24.917648 2026] [:error] [pid 63331:tid 63355] [client 20.199.96.18:63552] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ade8sCbKfIYuVjWbE4WafwAAAdY"]
[Thu Apr 09 22:50:25.393565 2026] [:error] [pid 63331:tid 63342] [client 20.199.96.18:41650] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ade8sSbKfIYuVjWbE4WahAAAAck"]
[Thu Apr 09 22:50:25.867985 2026] [:error] [pid 24515:tid 24527] [client 20.199.96.18:58080] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ade8sa1OMnvM2fMnB1PvNgAAAAg"]
[Thu Apr 09 22:50:26.353092 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:64568] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ade8sq1OMnvM2fMnB1PvOgAAABM"]
[Thu Apr 09 22:50:26.844455 2026] [:error] [pid 24624:tid 24639] [client 20.199.96.18:63640] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ade8su4Jn-WvK1ZBTvj1YgAAAM0"]
[Thu Apr 09 22:50:27.341569 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:41645] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ade8s61OMnvM2fMnB1PvQAAAAAA"]
[Thu Apr 09 22:50:27.845855 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:64631] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ade8s61OMnvM2fMnB1PvQQAAAAY"]
[Thu Apr 09 22:50:28.335718 2026] [:error] [pid 63331:tid 63338] [client 20.199.96.18:58406] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ade8tCbKfIYuVjWbE4WakAAAAcU"]
[Thu Apr 09 22:50:28.815245 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64949] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ade8tK1OMnvM2fMnB1PvRgAAAAs"]
[Thu Apr 09 22:50:29.299474 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:64526] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ade8ta1OMnvM2fMnB1PvSQAAABA"]
[Thu Apr 09 22:50:29.776741 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:58416] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ade8ta1OMnvM2fMnB1PvTQAAAAk"]
[Thu Apr 09 22:50:30.261695 2026] [:error] [pid 63331:tid 63343] [client 20.199.96.18:58374] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ade8tibKfIYuVjWbE4WalgAAAco"]
[Thu Apr 09 22:50:30.746521 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:41639] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ade8tvSL71FHZkjrGzMP6AAAAYw"]
[Thu Apr 09 22:50:31.229861 2026] [:error] [pid 24624:tid 24631] [client 20.199.96.18:41603] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ade8t-4Jn-WvK1ZBTvj1agAAAMU"]
[Thu Apr 09 22:50:31.704774 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:64563] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ade8t61OMnvM2fMnB1PvWAAAAAs"]
[Thu Apr 09 22:50:32.174212 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:43740] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ade8uK1OMnvM2fMnB1PvXQAAABQ"]
[Thu Apr 09 22:50:32.665066 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:63567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ade8uK1OMnvM2fMnB1PvYgAAABM"]
[Thu Apr 09 22:50:33.153218 2026] [:error] [pid 20837:tid 20845] [client 20.199.96.18:23359] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ade8ufSL71FHZkjrGzMP7QAAAYY"]
[Thu Apr 09 22:50:33.654156 2026] [:error] [pid 63331:tid 63347] [client 20.199.96.18:64912] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ade8uSbKfIYuVjWbE4WanwAAAc4"]
[Thu Apr 09 22:50:34.144876 2026] [:error] [pid 24516:tid 24547] [client 20.199.96.18:58098] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ade8uthW7vSS-UkeWCU_FAAAAEA"]
[Thu Apr 09 22:50:34.627247 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:58370] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ade8uvSL71FHZkjrGzMP8QAAAZE"]
[Fri Apr 10 03:27:29.401608 2026] [proxy_fcgi:error] [pid 21486:tid 21491] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:29.660972 2026] [proxy_fcgi:error] [pid 21486:tid 21505] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:29.919964 2026] [proxy_fcgi:error] [pid 21486:tid 21511] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:30.182080 2026] [proxy_fcgi:error] [pid 21486:tid 21503] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:30.440756 2026] [proxy_fcgi:error] [pid 21486:tid 21496] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:30.700142 2026] [proxy_fcgi:error] [pid 21486:tid 21499] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:31.239447 2026] [proxy_fcgi:error] [pid 21486:tid 21509] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:31.499300 2026] [proxy_fcgi:error] [pid 21486:tid 21495] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:31.759324 2026] [proxy_fcgi:error] [pid 21486:tid 21506] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:32.030103 2026] [proxy_fcgi:error] [pid 21486:tid 21492] [client 20.100.175.19:29222] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:27:32.303688 2026] [:error] [pid 21486:tid 21501] [client 20.100.175.19:29222] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adf9pKBRftltyNdYwLo7CAAAAQ0"]
[Fri Apr 10 03:27:33.078309 2026] [:error] [pid 36397:tid 36401] [client 20.100.175.19:43699] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adf9pWhis4RvVEWEv9sB1wAAAAA"]
[Fri Apr 10 03:27:33.613364 2026] [:error] [pid 36397:tid 36424] [client 20.100.175.19:49932] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adf9pWhis4RvVEWEv9sB2AAAABc"]
[Fri Apr 10 03:27:34.426061 2026] [:error] [pid 29569:tid 29575] [client 20.100.175.19:51376] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adf9prt9mkieWu8HPk5iUQAAAUI"]
[Fri Apr 10 03:27:35.019155 2026] [:error] [pid 36672:tid 36687] [client 20.100.175.19:29736] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adf9pz99r9VLJsT_o8it8wAAAM0"]
[Fri Apr 10 03:27:36.194885 2026] [:error] [pid 36672:tid 36697] [client 20.100.175.19:45435] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adf9qD99r9VLJsT_o8it9gAAANc"]
[Fri Apr 10 03:27:37.201395 2026] [:error] [pid 21486:tid 21491] [client 20.100.175.19:29209] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adf9qaBRftltyNdYwLo7CwAAAQM"]
[Fri Apr 10 03:27:38.012635 2026] [:error] [pid 36399:tid 36459] [client 20.100.175.19:35692] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adf9qq8Hkxpyh6_TlVRJ-AAAAIQ"]
[Fri Apr 10 03:27:38.608383 2026] [:error] [pid 21486:tid 21510] [client 20.100.175.19:31633] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adf9qqBRftltyNdYwLo7DgAAARY"]
[Fri Apr 10 03:27:39.522743 2026] [:error] [pid 21486:tid 21511] [client 20.100.175.19:29245] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adf9q6BRftltyNdYwLo7EQAAARc"]
[Fri Apr 10 03:27:40.314999 2026] [:error] [pid 36397:tid 36407] [client 20.100.175.19:45412] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adf9rGhis4RvVEWEv9sB2wAAAAY"]
[Fri Apr 10 03:27:40.984155 2026] [:error] [pid 36398:tid 36446] [client 20.100.175.19:25889] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adf9rOX640wXZwwgfP-E-QAAAFI"]
[Fri Apr 10 03:27:41.908212 2026] [:error] [pid 36397:tid 36404] [client 20.100.175.19:51334] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adf9rWhis4RvVEWEv9sB3AAAAAM"]
[Fri Apr 10 03:27:42.761329 2026] [:error] [pid 29569:tid 29575] [client 20.100.175.19:43653] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adf9rrt9mkieWu8HPk5iXAAAAUI"]
[Fri Apr 10 03:27:44.000210 2026] [:error] [pid 21486:tid 21509] [client 20.100.175.19:27676] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adf9r6BRftltyNdYwLo7EwAAARU"]
[Fri Apr 10 03:27:44.886884 2026] [:error] [pid 36399:tid 36463] [client 20.100.175.19:31453] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pass4.php"] [unique_id "adf9sK8Hkxpyh6_TlVRJ-wAAAIg"]
[Fri Apr 10 03:27:45.617033 2026] [:error] [pid 36399:tid 36457] [client 20.100.175.19:27669] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adf9sa8Hkxpyh6_TlVRJ_AAAAII"]
[Fri Apr 10 03:27:46.273335 2026] [:error] [pid 36398:tid 36451] [client 20.100.175.19:29216] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adf9suX640wXZwwgfP-FBAAAAFc"]
[Fri Apr 10 03:27:47.311389 2026] [:error] [pid 29569:tid 29585] [client 20.100.175.19:29242] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adf9s7t9mkieWu8HPk5iZAAAAUw"]
[Fri Apr 10 03:27:48.226002 2026] [:error] [pid 21486:tid 21497] [client 20.100.175.19:49126] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adf9tKBRftltyNdYwLo7GAAAAQk"]
[Fri Apr 10 03:27:49.217948 2026] [:error] [pid 21486:tid 21510] [client 20.100.175.19:31966] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adf9taBRftltyNdYwLo7GwAAARY"]
[Fri Apr 10 03:27:50.051176 2026] [:error] [pid 21486:tid 21507] [client 20.100.175.19:31050] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adf9tqBRftltyNdYwLo7HAAAARM"]
[Fri Apr 10 03:27:51.217674 2026] [:error] [pid 36672:tid 36681] [client 20.100.175.19:59186] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adf9tz99r9VLJsT_o8iuAwAAAMc"]
[Fri Apr 10 03:27:52.132795 2026] [:error] [pid 36398:tid 36439] [client 20.100.175.19:28696] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "adf9uOX640wXZwwgfP-FCgAAAEs"]
[Fri Apr 10 03:27:53.299302 2026] [:error] [pid 29569:tid 29597] [client 20.100.175.19:28695] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adf9ubt9mkieWu8HPk5iZwAAAVg"]
[Fri Apr 10 03:27:54.078161 2026] [:error] [pid 36399:tid 36460] [client 20.100.175.19:32548] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adf9uq8Hkxpyh6_TlVRKAwAAAIU"]
[Fri Apr 10 03:27:54.714919 2026] [:error] [pid 29569:tid 29576] [client 20.100.175.19:59159] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adf9urt9mkieWu8HPk5iaAAAAUM"]
[Fri Apr 10 03:27:55.341293 2026] [:error] [pid 36397:tid 36419] [client 20.100.175.19:49150] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adf9u2his4RvVEWEv9sB4AAAABI"]
[Fri Apr 10 03:27:55.890126 2026] [:error] [pid 36672:tid 36688] [client 20.100.175.19:43644] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adf9uz99r9VLJsT_o8iuBgAAAM4"]
[Fri Apr 10 03:27:56.485572 2026] [:error] [pid 36672:tid 36691] [client 20.100.175.19:4769] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adf9vD99r9VLJsT_o8iuCgAAANE"]
[Fri Apr 10 03:27:57.162153 2026] [:error] [pid 36672:tid 36690] [client 20.100.175.19:29707] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adf9vT99r9VLJsT_o8iuCwAAANA"]
[Fri Apr 10 03:27:58.009816 2026] [:error] [pid 21486:tid 21504] [client 20.100.175.19:32544] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adf9vqBRftltyNdYwLo7JAAAARA"]
[Fri Apr 10 03:27:58.623902 2026] [:error] [pid 36672:tid 36675] [client 20.100.175.19:31074] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adf9vj99r9VLJsT_o8iuDgAAAME"]
[Fri Apr 10 03:27:59.307948 2026] [:error] [pid 36672:tid 36687] [client 20.100.175.19:45712] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adf9vz99r9VLJsT_o8iuEAAAAM0"]
[Fri Apr 10 03:28:00.496655 2026] [:error] [pid 36672:tid 36681] [client 20.100.175.19:4126] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adf9wD99r9VLJsT_o8iuEwAAAMc"]
[Fri Apr 10 03:28:01.204747 2026] [:error] [pid 21486:tid 21493] [client 20.100.175.19:31969] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adf9waBRftltyNdYwLo7JgAAAQU"]
[Fri Apr 10 03:28:02.486015 2026] [:error] [pid 29569:tid 29594] [client 20.100.175.19:45723] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adf9wrt9mkieWu8HPk5icwAAAVU"]
[Fri Apr 10 03:28:03.522130 2026] [:error] [pid 29569:tid 29597] [client 20.100.175.19:29217] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adf9w7t9mkieWu8HPk5idgAAAVg"]
[Fri Apr 10 03:28:04.336617 2026] [:error] [pid 29569:tid 29573] [client 20.100.175.19:39567] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adf9xLt9mkieWu8HPk5ieQAAAUA"]
[Fri Apr 10 03:28:05.366741 2026] [:error] [pid 36672:tid 36674] [client 20.100.175.19:44370] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adf9xT99r9VLJsT_o8iuHwAAAMA"]
[Fri Apr 10 03:28:06.654182 2026] [:error] [pid 29569:tid 29597] [client 20.100.175.19:46732] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adf9xrt9mkieWu8HPk5igAAAAVg"]
[Fri Apr 10 03:28:07.652471 2026] [:error] [pid 29569:tid 29576] [client 20.100.175.19:52206] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adf9x7t9mkieWu8HPk5igwAAAUM"]
[Fri Apr 10 03:28:08.695765 2026] [:error] [pid 36672:tid 36693] [client 20.100.175.19:4753] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adf9yD99r9VLJsT_o8iuIgAAANM"]
[Fri Apr 10 03:28:09.652091 2026] [:error] [pid 36398:tid 36447] [client 20.100.175.19:31942] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adf9yeX640wXZwwgfP-FDQAAAFM"]
[Fri Apr 10 03:28:10.485330 2026] [:error] [pid 36672:tid 36679] [client 20.100.175.19:4096] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adf9yj99r9VLJsT_o8iuJQAAAMU"]
[Fri Apr 10 03:28:11.395887 2026] [:error] [pid 36672:tid 36675] [client 20.100.175.19:4752] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adf9yz99r9VLJsT_o8iuKQAAAME"]
[Fri Apr 10 03:28:12.410416 2026] [:error] [pid 36398:tid 36428] [client 20.100.175.19:42231] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adf9zOX640wXZwwgfP-FDwAAAEA"]
[Fri Apr 10 03:28:13.448924 2026] [:error] [pid 36672:tid 36692] [client 20.100.175.19:39898] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adf9zT99r9VLJsT_o8iuLAAAANI"]
[Fri Apr 10 03:28:14.708801 2026] [:error] [pid 36397:tid 36412] [client 20.100.175.19:24548] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "adf9zmhis4RvVEWEv9sB4gAAAAs"]
[Fri Apr 10 03:28:15.385855 2026] [:error] [pid 36397:tid 36405] [client 20.100.175.19:42297] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "adf9z2his4RvVEWEv9sB4wAAAAQ"]
[Fri Apr 10 03:28:16.618108 2026] [:error] [pid 36398:tid 36438] [client 20.100.175.19:4100] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "adf90OX640wXZwwgfP-FFgAAAEo"]
[Fri Apr 10 03:28:18.094930 2026] [:error] [pid 36672:tid 36676] [client 20.100.175.19:42190] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "adf90j99r9VLJsT_o8iuMAAAAMI"]
[Fri Apr 10 03:28:19.773166 2026] [:error] [pid 36398:tid 36452] [client 20.100.175.19:30603] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adf90-X640wXZwwgfP-FFwAAAFg"]
[Fri Apr 10 03:28:20.395364 2026] [:error] [pid 29569:tid 29583] [client 20.100.175.19:52209] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adf91Lt9mkieWu8HPk5iigAAAUo"]
[Fri Apr 10 03:28:21.301268 2026] [:error] [pid 29569:tid 29584] [client 20.100.175.19:39887] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adf91bt9mkieWu8HPk5ilAAAAUs"]
[Fri Apr 10 03:28:21.940919 2026] [:error] [pid 36397:tid 36422] [client 20.100.175.19:42260] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adf91Whis4RvVEWEv9sB6AAAABU"]
[Fri Apr 10 03:28:22.715541 2026] [:error] [pid 29569:tid 29593] [client 20.100.175.19:44198] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adf91rt9mkieWu8HPk5inwAAAVQ"]
[Fri Apr 10 03:28:23.339099 2026] [:error] [pid 29569:tid 29585] [client 20.100.175.19:32969] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adf917t9mkieWu8HPk5ipAAAAUw"]
[Fri Apr 10 03:28:24.022619 2026] [:error] [pid 29569:tid 29590] [client 20.100.175.19:52172] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adf92Lt9mkieWu8HPk5iqAAAAVE"]
[Fri Apr 10 03:28:24.634744 2026] [:error] [pid 36398:tid 36433] [client 20.100.175.19:42273] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adf92OX640wXZwwgfP-FIQAAAEU"]
[Fri Apr 10 03:28:25.213541 2026] [:error] [pid 36399:tid 36474] [client 20.100.175.19:4466] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf92a8Hkxpyh6_TlVRKFgAAAJM"]
[Fri Apr 10 03:28:25.737300 2026] [:error] [pid 21486:tid 21505] [client 20.100.175.19:44187] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf92aBRftltyNdYwLo7NwAAARE"]
[Fri Apr 10 03:28:26.400934 2026] [:error] [pid 21486:tid 21489] [client 20.100.175.19:32977] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf92qBRftltyNdYwLo7OQAAAQE"]
[Fri Apr 10 03:28:26.997515 2026] [:error] [pid 36397:tid 36406] [client 20.100.175.19:36487] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf92mhis4RvVEWEv9sB7wAAAAU"]
[Fri Apr 10 03:28:27.652965 2026] [:error] [pid 29569:tid 29591] [client 20.100.175.19:27206] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adf927t9mkieWu8HPk5irgAAAVI"]
[Fri Apr 10 03:28:28.340318 2026] [:error] [pid 29569:tid 29586] [client 20.100.175.19:38596] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adf93Lt9mkieWu8HPk5irwAAAU0"]
[Fri Apr 10 03:28:28.978339 2026] [:error] [pid 29569:tid 29588] [client 20.100.175.19:32459] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adf93Lt9mkieWu8HPk5isQAAAU8"]
[Fri Apr 10 03:28:29.585087 2026] [:error] [pid 29569:tid 29585] [client 20.100.175.19:34004] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adf93bt9mkieWu8HPk5isgAAAUw"]
[Fri Apr 10 03:28:30.223923 2026] [:error] [pid 29569:tid 29575] [client 20.100.175.19:34042] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adf93rt9mkieWu8HPk5itgAAAUI"]
[Fri Apr 10 03:28:30.756040 2026] [:error] [pid 29569:tid 29596] [client 20.100.175.19:32989] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adf93rt9mkieWu8HPk5iuQAAAVc"]
[Fri Apr 10 03:28:31.318218 2026] [:error] [pid 29569:tid 29595] [client 20.100.175.19:27238] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adf937t9mkieWu8HPk5ivQAAAVY"]
[Fri Apr 10 03:28:32.165542 2026] [proxy_fcgi:error] [pid 36672:tid 36695] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:32.426570 2026] [proxy_fcgi:error] [pid 36672:tid 36696] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:32.783134 2026] [proxy_fcgi:error] [pid 36672:tid 36690] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:33.053284 2026] [proxy_fcgi:error] [pid 36672:tid 36675] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:33.314833 2026] [proxy_fcgi:error] [pid 36672:tid 36684] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:33.588890 2026] [proxy_fcgi:error] [pid 36672:tid 36689] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:34.110655 2026] [proxy_fcgi:error] [pid 36672:tid 36697] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:34.373619 2026] [proxy_fcgi:error] [pid 36672:tid 36686] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:34.637821 2026] [proxy_fcgi:error] [pid 36672:tid 36676] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:34.901051 2026] [proxy_fcgi:error] [pid 36672:tid 36680] [client 20.100.175.19:32494] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:28:35.159629 2026] [:error] [pid 36672:tid 36679] [client 20.100.175.19:32494] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adf94z99r9VLJsT_o8iuRQAAAMU"]
[Fri Apr 10 03:28:35.741366 2026] [:error] [pid 36672:tid 36695] [client 20.100.175.19:34762] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adf94z99r9VLJsT_o8iuRwAAANU"]
[Fri Apr 10 03:28:36.355474 2026] [:error] [pid 36672:tid 36696] [client 20.100.175.19:38616] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adf95D99r9VLJsT_o8iuSAAAANY"]
[Fri Apr 10 03:28:37.104276 2026] [:error] [pid 36399:tid 36470] [client 20.100.175.19:23702] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adf95a8Hkxpyh6_TlVRKGwAAAI8"]
[Fri Apr 10 03:28:37.674404 2026] [:error] [pid 36672:tid 36687] [client 20.100.175.19:39502] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf95T99r9VLJsT_o8iuSwAAAM0"]
[Fri Apr 10 03:28:38.552152 2026] [:error] [pid 36672:tid 36692] [client 20.100.175.19:36907] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf95j99r9VLJsT_o8iuTAAAANI"]
[Fri Apr 10 03:28:39.376187 2026] [:error] [pid 29569:tid 29589] [client 20.100.175.19:34007] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf957t9mkieWu8HPk5ixgAAAVA"]
[Fri Apr 10 03:28:40.225752 2026] [:error] [pid 29569:tid 29586] [client 20.100.175.19:39531] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf96Lt9mkieWu8HPk5ixwAAAU0"]
[Fri Apr 10 03:28:41.133401 2026] [:error] [pid 36399:tid 36469] [client 20.100.175.19:36891] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf96a8Hkxpyh6_TlVRKIAAAAI4"]
[Fri Apr 10 03:28:41.652435 2026] [:error] [pid 36397:tid 36425] [client 20.100.175.19:34036] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf96Whis4RvVEWEv9sB9QAAABg"]
[Fri Apr 10 03:28:42.233410 2026] [:error] [pid 36397:tid 36422] [client 20.100.175.19:34783] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf96mhis4RvVEWEv9sB9gAAABU"]
[Fri Apr 10 03:28:42.823117 2026] [:error] [pid 36672:tid 36687] [client 20.100.175.19:45780] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf96j99r9VLJsT_o8iuVgAAAM0"]
[Fri Apr 10 03:28:43.429074 2026] [:error] [pid 36672:tid 36692] [client 20.100.175.19:34039] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf96z99r9VLJsT_o8iuVwAAANI"]
[Fri Apr 10 03:28:44.301901 2026] [:error] [pid 36672:tid 36686] [client 20.100.175.19:23688] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf97D99r9VLJsT_o8iuWQAAAMw"]
[Fri Apr 10 03:28:45.311534 2026] [:error] [pid 29569:tid 29581] [client 20.100.175.19:27226] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf97bt9mkieWu8HPk5iywAAAUg"]
[Fri Apr 10 03:28:45.975638 2026] [:error] [pid 29569:tid 29588] [client 20.100.175.19:34770] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf97bt9mkieWu8HPk5izQAAAU8"]
[Fri Apr 10 03:28:46.870613 2026] [:error] [pid 36672:tid 36677] [client 20.100.175.19:32983] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adf97j99r9VLJsT_o8iuXAAAAMM"]
[Fri Apr 10 03:28:47.764554 2026] [:error] [pid 29569:tid 29587] [client 20.100.175.19:36883] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adf977t9mkieWu8HPk5izwAAAU4"]
[Fri Apr 10 03:28:48.649922 2026] [:error] [pid 36672:tid 36696] [client 20.100.175.19:34055] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adf98D99r9VLJsT_o8iuXwAAANY"]
[Fri Apr 10 03:28:49.428114 2026] [:error] [pid 21486:tid 21500] [client 20.100.175.19:38340] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adf98aBRftltyNdYwLo7PwAAAQw"]
[Fri Apr 10 03:28:50.069610 2026] [:error] [pid 36397:tid 36410] [client 20.100.175.19:49593] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adf98mhis4RvVEWEv9sB9wAAAAk"]
[Fri Apr 10 03:28:50.893286 2026] [:error] [pid 21486:tid 21493] [client 20.100.175.19:38701] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adf98qBRftltyNdYwLo7QAAAAQU"]
[Fri Apr 10 03:28:51.875321 2026] [:error] [pid 21486:tid 21492] [client 20.100.175.19:49596] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adf986BRftltyNdYwLo7QQAAAQQ"]
[Fri Apr 10 03:28:52.672927 2026] [:error] [pid 21486:tid 21498] [client 20.100.175.19:4418] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adf99KBRftltyNdYwLo7QgAAAQo"]
[Fri Apr 10 03:28:53.508015 2026] [:error] [pid 21486:tid 21507] [client 20.100.175.19:34766] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adf99aBRftltyNdYwLo7RAAAARM"]
[Fri Apr 10 03:28:54.232809 2026] [:error] [pid 36672:tid 36694] [client 20.100.175.19:41912] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adf99j99r9VLJsT_o8iuZQAAANQ"]
[Fri Apr 10 03:28:54.891712 2026] [:error] [pid 36672:tid 36697] [client 20.100.175.19:27233] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adf99j99r9VLJsT_o8iuaAAAANc"]
[Fri Apr 10 03:28:55.563813 2026] [:error] [pid 36672:tid 36680] [client 20.100.175.19:38656] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adf99z99r9VLJsT_o8iuagAAAMY"]
[Fri Apr 10 03:28:56.386323 2026] [:error] [pid 36672:tid 36696] [client 20.100.175.19:23694] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adf9-D99r9VLJsT_o8iubAAAANY"]
[Fri Apr 10 03:28:56.943437 2026] [:error] [pid 36672:tid 36688] [client 20.100.175.19:35765] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adf9-D99r9VLJsT_o8iucAAAAM4"]
[Fri Apr 10 03:28:57.919938 2026] [:error] [pid 36672:tid 36674] [client 20.100.175.19:35765] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adf9-T99r9VLJsT_o8iucQAAAMA"]
[Fri Apr 10 03:28:58.662207 2026] [:error] [pid 29569:tid 29587] [client 20.100.175.19:38375] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "adf9-rt9mkieWu8HPk5i3QAAAU4"]
[Fri Apr 10 03:28:59.532842 2026] [:error] [pid 36397:tid 36420] [client 20.100.175.19:38362] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adf9-2his4RvVEWEv9sB-QAAABM"]
[Fri Apr 10 03:29:00.225181 2026] [:error] [pid 29569:tid 29597] [client 20.100.175.19:36527] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adf9_Lt9mkieWu8HPk5i3wAAAVg"]
[Fri Apr 10 03:29:00.900288 2026] [:error] [pid 36399:tid 36476] [client 20.100.175.19:47731] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adf9_K8Hkxpyh6_TlVRKJAAAAJU"]
[Fri Apr 10 03:29:01.483065 2026] [:error] [pid 36397:tid 36409] [client 20.100.175.19:47685] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adf9_Whis4RvVEWEv9sB-wAAAAg"]
[Fri Apr 10 03:29:02.378120 2026] [:error] [pid 29569:tid 29578] [client 20.100.175.19:36527] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adf9_rt9mkieWu8HPk5i4AAAAUU"]
[Fri Apr 10 03:29:03.180152 2026] [:error] [pid 29569:tid 29585] [client 20.100.175.19:28746] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adf9_7t9mkieWu8HPk5i4QAAAUw"]
[Fri Apr 10 03:29:04.147790 2026] [:error] [pid 36399:tid 36455] [client 20.100.175.19:38387] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adf-AK8Hkxpyh6_TlVRKJQAAAIA"]
[Fri Apr 10 03:29:04.822956 2026] [:error] [pid 36672:tid 36678] [client 20.100.175.19:50389] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adf-AD99r9VLJsT_o8iueQAAAMQ"]
[Fri Apr 10 03:29:05.445496 2026] [:error] [pid 36672:tid 36689] [client 20.100.175.19:23697] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adf-AT99r9VLJsT_o8iuewAAAM8"]
[Fri Apr 10 03:29:06.167682 2026] [:error] [pid 36399:tid 36473] [client 20.100.175.19:36868] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adf-Aq8Hkxpyh6_TlVRKJwAAAJI"]
[Fri Apr 10 03:29:07.035835 2026] [:error] [pid 29569:tid 29573] [client 20.100.175.19:35749] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adf-A7t9mkieWu8HPk5i4wAAAUA"]
[Fri Apr 10 03:29:07.700693 2026] [:error] [pid 36672:tid 36693] [client 20.100.175.19:23726] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adf-Az99r9VLJsT_o8iuhAAAANM"]
[Fri Apr 10 03:29:08.415344 2026] [:error] [pid 36672:tid 36677] [client 20.100.175.19:41917] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adf-BD99r9VLJsT_o8iuhgAAAMM"]
[Fri Apr 10 03:29:08.968283 2026] [:error] [pid 36672:tid 36694] [client 20.100.175.19:49599] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adf-BD99r9VLJsT_o8iuiQAAANQ"]
[Fri Apr 10 03:29:09.497262 2026] [:error] [pid 36672:tid 36680] [client 20.100.175.19:34105] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adf-BT99r9VLJsT_o8iuiwAAAMY"]
[Fri Apr 10 03:29:10.067003 2026] [:error] [pid 21486:tid 21496] [client 20.100.175.19:38673] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adf-BqBRftltyNdYwLo7RwAAAQg"]
[Fri Apr 10 03:29:10.638391 2026] [:error] [pid 21486:tid 21509] [client 20.100.175.19:34100] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adf-BqBRftltyNdYwLo7SQAAARU"]
[Fri Apr 10 03:29:11.187880 2026] [:error] [pid 36672:tid 36697] [client 20.100.175.19:40169] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adf-Bz99r9VLJsT_o8iukQAAANc"]
[Fri Apr 10 03:29:11.858311 2026] [:error] [pid 36672:tid 36688] [client 20.100.175.19:4374] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adf-Bz99r9VLJsT_o8iukgAAAM4"]
[Fri Apr 10 03:29:12.793929 2026] [:error] [pid 36672:tid 36680] [client 20.100.175.19:4387] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adf-CD99r9VLJsT_o8iulwAAAMY"]
[Fri Apr 10 03:29:13.358685 2026] [:error] [pid 36672:tid 36679] [client 20.100.175.19:35743] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adf-CT99r9VLJsT_o8iumQAAAMU"]
[Fri Apr 10 03:29:13.910499 2026] [:error] [pid 36672:tid 36686] [client 20.100.175.19:28737] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adf-CT99r9VLJsT_o8iunAAAAMw"]
[Fri Apr 10 03:29:14.476378 2026] [:error] [pid 21486:tid 21512] [client 20.100.175.19:4273] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adf-CqBRftltyNdYwLo7SwAAARg"]
[Fri Apr 10 03:29:15.010930 2026] [:error] [pid 36398:tid 36433] [client 20.100.175.19:4365] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adf-C-X640wXZwwgfP-FLgAAAEU"]
[Fri Apr 10 03:29:15.547500 2026] [:error] [pid 36398:tid 36434] [client 20.100.175.19:36874] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "adf-C-X640wXZwwgfP-FLwAAAEY"]
[Fri Apr 10 03:29:16.075110 2026] [:error] [pid 36399:tid 36464] [client 20.100.175.19:47741] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "adf-DK8Hkxpyh6_TlVRKKgAAAIk"]
[Fri Apr 10 03:29:16.871145 2026] [:error] [pid 36397:tid 36416] [client 20.100.175.19:28750] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "adf-DGhis4RvVEWEv9sB_QAAAA8"]
[Fri Apr 10 03:29:17.400158 2026] [:error] [pid 36397:tid 36418] [client 20.100.175.19:4407] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "adf-DWhis4RvVEWEv9sB_wAAABE"]
[Fri Apr 10 03:29:17.964658 2026] [:error] [pid 29569:tid 29595] [client 20.100.175.19:50420] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "adf-Dbt9mkieWu8HPk5i6gAAAVY"]
[Fri Apr 10 03:29:18.521448 2026] [:error] [pid 36398:tid 36452] [client 20.100.175.19:50371] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "adf-DuX640wXZwwgfP-FNAAAAFg"]
[Fri Apr 10 03:29:19.086648 2026] [:error] [pid 36399:tid 36456] [client 20.100.175.19:23689] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "adf-D68Hkxpyh6_TlVRKLAAAAIE"]
[Fri Apr 10 03:29:19.611764 2026] [:error] [pid 36399:tid 36472] [client 20.100.175.19:49553] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "adf-D68Hkxpyh6_TlVRKLgAAAJE"]
[Fri Apr 10 03:29:20.142542 2026] [:error] [pid 21486:tid 21493] [client 20.100.175.19:36880] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf-EKBRftltyNdYwLo7TQAAAQU"]
[Fri Apr 10 03:29:20.726588 2026] [:error] [pid 36672:tid 36678] [client 20.100.175.19:38694] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf-ED99r9VLJsT_o8iupwAAAMQ"]
[Fri Apr 10 03:29:21.346469 2026] [:error] [pid 21486:tid 21489] [client 20.100.175.19:38677] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf-EaBRftltyNdYwLo7UAAAAQE"]
[Fri Apr 10 03:29:22.682765 2026] [:error] [pid 36672:tid 36696] [client 20.100.175.19:47709] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf-Ej99r9VLJsT_o8iuqgAAANY"]
[Fri Apr 10 03:29:23.832645 2026] [:error] [pid 29569:tid 29577] [client 20.100.175.19:27219] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adf-E7t9mkieWu8HPk5i7gAAAUQ"]
[Fri Apr 10 03:29:24.629394 2026] [:error] [pid 29569:tid 29578] [client 20.100.175.19:38399] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adf-FLt9mkieWu8HPk5i8QAAAUU"]
[Fri Apr 10 03:29:25.563317 2026] [:error] [pid 21486:tid 21490] [client 20.100.175.19:38719] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adf-FaBRftltyNdYwLo7VgAAAQI"]
[Fri Apr 10 03:29:26.445650 2026] [:error] [pid 29569:tid 29590] [client 20.100.175.19:28766] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adf-Frt9mkieWu8HPk5i8wAAAVE"]
[Fri Apr 10 03:29:27.311690 2026] [:error] [pid 29569:tid 29584] [client 20.100.175.19:36873] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adf-F7t9mkieWu8HPk5i9AAAAUs"]
[Fri Apr 10 03:29:28.111371 2026] [:error] [pid 29569:tid 29591] [client 20.100.175.19:4363] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adf-GLt9mkieWu8HPk5i9gAAAVI"]
[Fri Apr 10 03:29:28.829002 2026] [:error] [pid 29569:tid 29574] [client 20.100.175.19:4264] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adf-GLt9mkieWu8HPk5i-QAAAUE"]
[Fri Apr 10 03:29:29.910317 2026] [:error] [pid 36672:tid 36695] [client 20.100.175.19:34076] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adf-GT99r9VLJsT_o8iutwAAANU"]
[Fri Apr 10 03:29:30.581672 2026] [:error] [pid 36672:tid 36675] [client 20.100.175.19:38687] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adf-Gj99r9VLJsT_o8iuuQAAAME"]
[Fri Apr 10 03:29:31.296461 2026] [:error] [pid 36672:tid 36686] [client 20.100.175.19:49564] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adf-Gz99r9VLJsT_o8iuuwAAAMw"]
[Fri Apr 10 03:29:32.424293 2026] [:error] [pid 36672:tid 36689] [client 20.100.175.19:40190] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adf-HD99r9VLJsT_o8iuvgAAAM8"]
[Fri Apr 10 03:29:33.161624 2026] [:error] [pid 36397:tid 36405] [client 20.100.175.19:49565] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adf-HWhis4RvVEWEv9sCAwAAAAQ"]
[Fri Apr 10 03:29:33.996509 2026] [:error] [pid 36672:tid 36691] [client 20.100.175.19:4232] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adf-HT99r9VLJsT_o8iuxAAAANE"]
[Fri Apr 10 03:29:34.892135 2026] [proxy_fcgi:error] [pid 36399:tid 36457] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:35.178502 2026] [proxy_fcgi:error] [pid 36399:tid 36463] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:35.446911 2026] [proxy_fcgi:error] [pid 36399:tid 36470] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:35.832328 2026] [proxy_fcgi:error] [pid 36399:tid 36477] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:36.092165 2026] [proxy_fcgi:error] [pid 36399:tid 36464] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:36.352034 2026] [proxy_fcgi:error] [pid 36399:tid 36456] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:37.863602 2026] [proxy_fcgi:error] [pid 36399:tid 36479] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:38.129276 2026] [proxy_fcgi:error] [pid 36399:tid 36469] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:38.694832 2026] [proxy_fcgi:error] [pid 36399:tid 36478] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:38.954472 2026] [proxy_fcgi:error] [pid 36399:tid 36461] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:39.212877 2026] [proxy_fcgi:error] [pid 36399:tid 36468] [client 20.100.175.19:4247] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 03:29:39.482294 2026] [:error] [pid 36399:tid 36465] [client 20.100.175.19:4247] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "adf-I68Hkxpyh6_TlVRKRQAAAIo"]
[Fri Apr 10 03:29:40.313138 2026] [:error] [pid 36398:tid 36433] [client 20.100.175.19:28794] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "adf-JOX640wXZwwgfP-FPwAAAEU"]
[Fri Apr 10 03:29:41.139666 2026] [:error] [pid 36397:tid 36410] [client 20.100.175.19:49559] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "adf-JWhis4RvVEWEv9sCGQAAAAk"]
[Fri Apr 10 03:29:42.056475 2026] [:error] [pid 36399:tid 36467] [client 20.100.175.19:23725] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "adf-Jq8Hkxpyh6_TlVRKRgAAAIw"]
[Fri Apr 10 03:29:42.703559 2026] [:error] [pid 29569:tid 29587] [client 20.100.175.19:4269] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adf-Jrt9mkieWu8HPk5jDgAAAU4"]
[Fri Apr 10 03:29:43.654545 2026] [:error] [pid 36672:tid 36688] [client 20.100.175.19:38376] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adf-Jz99r9VLJsT_o8iu3AAAAM4"]
[Fri Apr 10 03:29:44.237371 2026] [:error] [pid 36399:tid 36476] [client 20.100.175.19:38398] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adf-KK8Hkxpyh6_TlVRKSAAAAJU"]
[Fri Apr 10 03:29:44.829891 2026] [:error] [pid 21486:tid 21489] [client 20.100.175.19:34110] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adf-KKBRftltyNdYwLo7XwAAAQE"]
[Fri Apr 10 03:29:45.746643 2026] [:error] [pid 21486:tid 21491] [client 20.100.175.19:34101] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "adf-KaBRftltyNdYwLo7YgAAAQM"]
[Fri Apr 10 03:29:46.406173 2026] [:error] [pid 36397:tid 36419] [client 20.100.175.19:24188] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "adf-Kmhis4RvVEWEv9sCIgAAABI"]
[Fri Apr 10 03:29:47.384899 2026] [:error] [pid 36672:tid 36698] [client 20.100.175.19:49547] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "adf-Kz99r9VLJsT_o8iu5gAAANg"]
[Fri Apr 10 03:29:48.209513 2026] [:error] [pid 36398:tid 36432] [client 20.100.175.19:41858] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "adf-LOX640wXZwwgfP-FSQAAAEQ"]
[Fri Apr 10 03:29:49.148925 2026] [:error] [pid 29569:tid 29582] [client 20.100.175.19:50397] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adf-Lbt9mkieWu8HPk5jFAAAAUk"]
[Fri Apr 10 03:29:49.700890 2026] [:error] [pid 29569:tid 29580] [client 20.100.175.19:24154] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adf-Lbt9mkieWu8HPk5jFwAAAUc"]
[Fri Apr 10 03:29:50.523515 2026] [:error] [pid 36399:tid 36469] [client 20.100.175.19:41902] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adf-Lq8Hkxpyh6_TlVRKTwAAAI4"]
[Fri Apr 10 03:29:52.062842 2026] [:error] [pid 36399:tid 36461] [client 20.100.175.19:28796] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "adf-MK8Hkxpyh6_TlVRKUQAAAIY"]
[Fri Apr 10 03:29:52.829554 2026] [:error] [pid 29569:tid 29578] [client 20.100.175.19:28752] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adf-MLt9mkieWu8HPk5jHQAAAUU"]
[Fri Apr 10 03:29:53.939311 2026] [:error] [pid 29569:tid 29589] [client 20.100.175.19:50387] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adf-Mbt9mkieWu8HPk5jIAAAAVA"]
[Fri Apr 10 03:29:54.687074 2026] [:error] [pid 21486:tid 21508] [client 20.100.175.19:50370] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adf-MqBRftltyNdYwLo7ZgAAARQ"]
[Fri Apr 10 03:29:56.007966 2026] [:error] [pid 36397:tid 36423] [client 20.100.175.19:38704] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adf-NGhis4RvVEWEv9sCKQAAABY"]
[Fri Apr 10 03:29:56.997705 2026] [:error] [pid 21486:tid 21496] [client 20.100.175.19:38386] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adf-NKBRftltyNdYwLo7aAAAAQg"]
[Fri Apr 10 03:29:58.518362 2026] [:error] [pid 21486:tid 21501] [client 20.100.175.19:35736] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adf-NqBRftltyNdYwLo7bQAAAQ0"]
[Fri Apr 10 03:30:00.136628 2026] [:error] [pid 21486:tid 21507] [client 20.100.175.19:38383] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adf-OKBRftltyNdYwLo7cgAAARM"]
[Fri Apr 10 03:30:01.355681 2026] [:error] [pid 29569:tid 29593] [client 20.100.175.19:4389] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adf-Obt9mkieWu8HPk5jJgAAAVQ"]
[Fri Apr 10 03:30:02.242003 2026] [:error] [pid 36672:tid 36683] [client 20.100.175.19:24180] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adf-Oj99r9VLJsT_o8iu8wAAAMk"]
[Fri Apr 10 03:30:03.034255 2026] [:error] [pid 29569:tid 29586] [client 20.100.175.19:38714] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adf-O7t9mkieWu8HPk5jKAAAAU0"]
[Fri Apr 10 03:30:03.825745 2026] [:error] [pid 29569:tid 29589] [client 20.100.175.19:28781] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adf-O7t9mkieWu8HPk5jKQAAAVA"]
[Fri Apr 10 03:30:04.419108 2026] [:error] [pid 36398:tid 36438] [client 20.100.175.19:49585] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adf-POX640wXZwwgfP-FUAAAAEo"]
[Fri Apr 10 03:30:05.017056 2026] [:error] [pid 36398:tid 36443] [client 20.100.175.19:24159] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "adf-PeX640wXZwwgfP-FUgAAAE8"]
[Fri Apr 10 03:30:05.730978 2026] [:error] [pid 36399:tid 36475] [client 20.100.175.19:4259] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "adf-Pa8Hkxpyh6_TlVRKVwAAAJQ"]
[Fri Apr 10 03:30:06.539823 2026] [:error] [pid 36672:tid 36694] [client 20.100.175.19:38662] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "adf-Pj99r9VLJsT_o8iu9wAAANQ"]
[Fri Apr 10 03:30:07.437903 2026] [:error] [pid 36672:tid 36681] [client 20.100.175.19:34057] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "adf-Pz99r9VLJsT_o8iu_AAAAMc"]
[Fri Apr 10 03:30:09.144105 2026] [:error] [pid 36399:tid 36477] [client 20.100.175.19:41909] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adf-Qa8Hkxpyh6_TlVRKWgAAAJY"]
[Fri Apr 10 03:30:10.541353 2026] [:error] [pid 29569:tid 29591] [client 20.100.175.19:34085] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adf-Qrt9mkieWu8HPk5jMwAAAVI"]
[Fri Apr 10 03:30:11.584667 2026] [:error] [pid 29569:tid 29581] [client 20.100.175.19:50384] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adf-Q7t9mkieWu8HPk5jNQAAAUg"]
[Fri Apr 10 03:30:13.192800 2026] [:error] [pid 29569:tid 29588] [client 20.100.175.19:34102] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "adf-Rbt9mkieWu8HPk5jPgAAAU8"]
[Fri Apr 10 03:30:14.180747 2026] [:error] [pid 36672:tid 36687] [client 20.100.175.19:24156] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adf-Rj99r9VLJsT_o8ivAQAAAM0"]
[Fri Apr 10 03:30:15.614521 2026] [:error] [pid 36672:tid 36678] [client 20.100.175.19:41869] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adf-Rz99r9VLJsT_o8ivBwAAAMQ"]
[Fri Apr 10 03:30:18.044720 2026] [:error] [pid 36399:tid 36465] [client 20.100.175.19:34107] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adf-Sq8Hkxpyh6_TlVRKXgAAAIo"]
[Fri Apr 10 03:30:21.547714 2026] [:error] [pid 36399:tid 36476] [client 20.100.175.19:50401] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adf-Ta8Hkxpyh6_TlVRKYQAAAJU"]
[Fri Apr 10 03:30:22.273315 2026] [:error] [pid 36399:tid 36466] [client 20.100.175.19:40147] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adf-Tq8Hkxpyh6_TlVRKYwAAAIs"]
[Fri Apr 10 03:30:22.859531 2026] [:error] [pid 36399:tid 36459] [client 20.100.175.19:50430] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adf-Tq8Hkxpyh6_TlVRKZAAAAIQ"]
[Fri Apr 10 03:30:23.918284 2026] [:error] [pid 36399:tid 36475] [client 20.100.175.19:40187] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adf-T68Hkxpyh6_TlVRKZQAAAJQ"]
[Fri Apr 10 03:30:24.748095 2026] [:error] [pid 36398:tid 36443] [client 20.100.175.19:38683] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adf-UOX640wXZwwgfP-FXwAAAE8"]
[Fri Apr 10 03:30:25.633970 2026] [:error] [pid 36399:tid 36455] [client 20.100.175.19:24130] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf-Ua8Hkxpyh6_TlVRKaAAAAIA"]
[Fri Apr 10 03:30:26.255069 2026] [:error] [pid 21486:tid 21500] [client 20.100.175.19:40147] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf-UqBRftltyNdYwLo7eAAAAQw"]
[Fri Apr 10 03:30:26.854526 2026] [:error] [pid 36397:tid 36424] [client 20.100.175.19:28786] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf-Umhis4RvVEWEv9sCNQAAABc"]
[Fri Apr 10 03:30:27.457903 2026] [:error] [pid 29569:tid 29593] [client 20.100.175.19:36463] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf-U7t9mkieWu8HPk5jQgAAAVQ"]
[Fri Apr 10 03:30:28.114688 2026] [:error] [pid 36397:tid 36409] [client 20.100.175.19:28770] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adf-VGhis4RvVEWEv9sCNgAAAAg"]
[Fri Apr 10 03:30:28.663516 2026] [:error] [pid 29569:tid 29573] [client 20.100.175.19:47713] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adf-VLt9mkieWu8HPk5jRAAAAUA"]
[Fri Apr 10 03:30:29.231825 2026] [:error] [pid 36399:tid 36471] [client 20.100.175.19:49546] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adf-Va8Hkxpyh6_TlVRKagAAAJA"]
[Fri Apr 10 03:30:29.884839 2026] [:error] [pid 36397:tid 36423] [client 20.100.175.19:41918] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adf-VWhis4RvVEWEv9sCNwAAABY"]
[Fri Apr 10 03:30:30.523884 2026] [:error] [pid 21486:tid 21506] [client 20.100.175.19:47236] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf-VqBRftltyNdYwLo7egAAARI"]
[Fri Apr 10 03:30:31.100560 2026] [:error] [pid 36672:tid 36697] [client 20.100.175.19:38697] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf-Vz99r9VLJsT_o8ivGwAAANc"]
[Fri Apr 10 03:30:31.920773 2026] [:error] [pid 36672:tid 36696] [client 20.100.175.19:36919] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf-Vz99r9VLJsT_o8ivHQAAANY"]
[Fri Apr 10 03:30:32.564834 2026] [:error] [pid 36672:tid 36695] [client 20.100.175.19:49551] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf-WD99r9VLJsT_o8ivHwAAANU"]
[Fri Apr 10 03:30:33.116561 2026] [:error] [pid 36672:tid 36683] [client 20.100.175.19:36424] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adf-WT99r9VLJsT_o8ivIQAAAMk"]
[Fri Apr 10 03:30:33.754007 2026] [:error] [pid 36672:tid 36675] [client 20.100.175.19:47696] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adf-WT99r9VLJsT_o8ivIwAAAME"]
[Fri Apr 10 03:30:34.405315 2026] [:error] [pid 36672:tid 36684] [client 20.100.175.19:47247] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adf-Wj99r9VLJsT_o8ivJwAAAMo"]
[Fri Apr 10 03:30:34.971554 2026] [:error] [pid 36672:tid 36688] [client 20.100.175.19:38368] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adf-Wj99r9VLJsT_o8ivKAAAAM4"]
[Fri Apr 10 03:30:35.596903 2026] [:error] [pid 36399:tid 36469] [client 20.100.175.19:4231] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adf-W68Hkxpyh6_TlVRKbAAAAI4"]
[Fri Apr 10 03:30:36.205293 2026] [:error] [pid 36399:tid 36468] [client 20.100.175.19:33572] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adf-XK8Hkxpyh6_TlVRKbQAAAI0"]
[Fri Apr 10 03:30:36.793583 2026] [:error] [pid 21486:tid 21489] [client 20.100.175.19:50386] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adf-XKBRftltyNdYwLo7fQAAAQE"]
[Fri Apr 10 03:30:37.468306 2026] [:error] [pid 36399:tid 36465] [client 20.100.175.19:35712] [client 20.100.175.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adf-Xa8Hkxpyh6_TlVRKbwAAAIo"]
[Fri Apr 10 04:13:34.485258 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:9164] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/chosen.php"] [unique_id "adgIbs8f5ssYShsynapMFwAAAMY"]
[Fri Apr 10 04:13:36.636293 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:9094] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/chosen.php"] [unique_id "adgIcM8f5ssYShsynapMHQAAANc"]
[Fri Apr 10 04:13:38.812082 2026] [:error] [pid 12685:tid 12701] [client 4.204.215.156:9168] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/chosen.php"] [unique_id "adgIcs8f5ssYShsynapMIwAAAM4"]
[Fri Apr 10 04:13:40.715353 2026] [:error] [pid 12576:tid 12660] [client 4.204.215.156:9106] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about/chosen.php"] [unique_id "adgIdAZp1JUS4li1Qnug7AAAAIs"]
[Fri Apr 10 04:13:42.568975 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9181] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as/chosen.php"] [unique_id "adgIds8f5ssYShsynapMKAAAANY"]
[Fri Apr 10 04:13:45.502757 2026] [:error] [pid 12575:tid 12637] [client 4.204.215.156:9212] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as/chosen.php"] [unique_id "adgIeSjFTOT5X6zsPCk_jgAAAE8"]
[Fri Apr 10 04:13:47.491022 2026] [:error] [pid 12574:tid 12597] [client 4.204.215.156:9174] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as/chosen.php"] [unique_id "adgIe3w-1tvJISKJyrTMKgAAAAM"]
[Fri Apr 10 04:13:51.079855 2026] [:error] [pid 12575:tid 12627] [client 4.204.215.156:9091] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as/chosen.php"] [unique_id "adgIfyjFTOT5X6zsPCk_lwAAAEU"]
[Fri Apr 10 04:13:52.751027 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9179] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file/chosen.php"] [unique_id "adgIgM8f5ssYShsynapMOAAAANY"]
[Fri Apr 10 04:13:54.953661 2026] [:error] [pid 12574:tid 12616] [client 4.204.215.156:9171] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file/chosen.php"] [unique_id "adgIgnw-1tvJISKJyrTMLAAAABY"]
[Fri Apr 10 04:13:57.275919 2026] [:error] [pid 12574:tid 12610] [client 4.204.215.156:9215] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file/chosen.php"] [unique_id "adgIhXw-1tvJISKJyrTMLgAAABA"]
[Fri Apr 10 04:13:59.176206 2026] [:error] [pid 12685:tid 12700] [client 4.204.215.156:9099] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file/chosen.php"] [unique_id "adgIh88f5ssYShsynapMOgAAAM0"]
[Fri Apr 10 04:14:00.203621 2026] [:error] [pid 12576:tid 12656] [client 4.204.215.156:9179] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adgIiAZp1JUS4li1QnuhCwAAAIc"]
[Fri Apr 10 04:14:00.876452 2026] [:error] [pid 12574:tid 12595] [client 4.204.215.156:9089] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adgIiHw-1tvJISKJyrTMLwAAAAE"]
[Fri Apr 10 04:14:01.922243 2026] [:error] [pid 12576:tid 12672] [client 4.204.215.156:9201] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adgIiQZp1JUS4li1QnuhDgAAAJc"]
[Fri Apr 10 04:14:03.251327 2026] [:error] [pid 12574:tid 12608] [client 4.204.215.156:9176] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adgIi3w-1tvJISKJyrTMMAAAAA4"]
[Fri Apr 10 04:14:03.997689 2026] [:error] [pid 12574:tid 12601] [client 4.204.215.156:9156] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adgIi3w-1tvJISKJyrTMMQAAAAc"]
[Fri Apr 10 04:14:05.289614 2026] [:error] [pid 12574:tid 12603] [client 4.204.215.156:9197] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adgIjXw-1tvJISKJyrTMMgAAAAk"]
[Fri Apr 10 04:14:06.321680 2026] [:error] [pid 12575:tid 12646] [client 4.204.215.156:9193] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adgIjijFTOT5X6zsPCk_owAAAFg"]
[Fri Apr 10 04:14:08.561439 2026] [:error] [pid 12576:tid 12655] [client 4.204.215.156:9115] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adgIkAZp1JUS4li1QnuhEQAAAIY"]
[Fri Apr 10 04:14:10.656971 2026] [:error] [pid 12576:tid 12661] [client 4.204.215.156:9155] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adgIkgZp1JUS4li1QnuhEwAAAIw"]
[Fri Apr 10 04:14:12.146343 2026] [:error] [pid 12574:tid 12598] [client 4.204.215.156:9170] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adgIlHw-1tvJISKJyrTMNAAAAAQ"]
[Fri Apr 10 04:14:13.876759 2026] [:error] [pid 12576:tid 12665] [client 4.204.215.156:9208] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adgIlQZp1JUS4li1QnuhGAAAAJA"]
[Fri Apr 10 04:14:15.148910 2026] [:error] [pid 12576:tid 12658] [client 4.204.215.156:9187] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adgIlwZp1JUS4li1QnuhGQAAAIk"]
[Fri Apr 10 04:14:17.085361 2026] [:error] [pid 12574:tid 12605] [client 4.204.215.156:9097] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adgImXw-1tvJISKJyrTMNwAAAAs"]
[Fri Apr 10 04:14:18.075288 2026] [:error] [pid 12575:tid 12631] [client 4.204.215.156:9175] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adgImijFTOT5X6zsPCk_qQAAAEk"]
[Fri Apr 10 04:14:18.986305 2026] [:error] [pid 12574:tid 12597] [client 4.204.215.156:9153] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adgImnw-1tvJISKJyrTMOwAAAAM"]
[Fri Apr 10 04:14:20.838347 2026] [:error] [pid 12574:tid 12606] [client 4.204.215.156:9103] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adgInHw-1tvJISKJyrTMPwAAAAw"]
[Fri Apr 10 04:14:21.912021 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:9134] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adgInc8f5ssYShsynapMTQAAANI"]
[Fri Apr 10 04:14:22.525205 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:9133] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adgIns8f5ssYShsynapMTgAAANQ"]
[Fri Apr 10 04:14:23.665727 2026] [:error] [pid 12576:tid 12672] [client 4.204.215.156:9122] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adgInwZp1JUS4li1QnuhIAAAAJc"]
[Fri Apr 10 04:14:25.589870 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:9205] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adgIoc8f5ssYShsynapMUQAAANA"]
[Fri Apr 10 04:14:28.001220 2026] [:error] [pid 12574:tid 12603] [client 4.204.215.156:9152] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "adgIo3w-1tvJISKJyrTMQwAAAAk"]
[Fri Apr 10 04:14:28.998249 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:9102] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "adgIpAZp1JUS4li1QnuhKAAAAI4"]
[Fri Apr 10 04:14:32.910475 2026] [:error] [pid 12574:tid 12607] [client 4.204.215.156:9163] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css.php"] [unique_id "adgIqHw-1tvJISKJyrTMTQAAAA0"]
[Fri Apr 10 04:14:35.910699 2026] [proxy_fcgi:error] [pid 12575:tid 12641] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:36.121833 2026] [proxy_fcgi:error] [pid 12575:tid 12644] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:36.333591 2026] [proxy_fcgi:error] [pid 12575:tid 12642] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:36.769096 2026] [proxy_fcgi:error] [pid 12575:tid 12627] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:36.981841 2026] [proxy_fcgi:error] [pid 12575:tid 12635] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:37.194064 2026] [proxy_fcgi:error] [pid 12575:tid 12624] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:37.406167 2026] [proxy_fcgi:error] [pid 12575:tid 12640] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:37.622743 2026] [proxy_fcgi:error] [pid 12575:tid 12628] [client 4.204.215.156:9198] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:14:38.170000 2026] [:error] [pid 12575:tid 12636] [client 4.204.215.156:9198] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "adgIrijFTOT5X6zsPCk_wQAAAE4"]
[Fri Apr 10 04:14:39.559020 2026] [:error] [pid 12575:tid 12622] [client 4.204.215.156:9120] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "adgIryjFTOT5X6zsPCk_wgAAAEA"]
[Fri Apr 10 04:14:40.799036 2026] [:error] [pid 12575:tid 12633] [client 4.204.215.156:9203] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "adgIsCjFTOT5X6zsPCk_xQAAAEs"]
[Fri Apr 10 04:14:41.898155 2026] [:error] [pid 12575:tid 12639] [client 4.204.215.156:9178] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "adgIsSjFTOT5X6zsPCk_xgAAAFE"]
[Fri Apr 10 04:14:43.132353 2026] [:error] [pid 12685:tid 12690] [client 4.204.215.156:9213] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adgIs88f5ssYShsynapMagAAAMM"]
[Fri Apr 10 04:14:43.785486 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:9209] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adgIs3w-1tvJISKJyrTMWAAAAAU"]
[Fri Apr 10 04:14:44.289930 2026] [:error] [pid 12685:tid 12701] [client 4.204.215.156:9108] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adgItM8f5ssYShsynapMbAAAAM4"]
[Fri Apr 10 04:14:45.466043 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:9195] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adgItc8f5ssYShsynapMbwAAAMo"]
[Fri Apr 10 04:14:46.132543 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:9165] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index.php"] [unique_id "adgIts8f5ssYShsynapMcgAAAMc"]
[Fri Apr 10 04:14:47.531347 2026] [:error] [pid 12574:tid 12607] [client 4.204.215.156:9055] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index.php"] [unique_id "adgIt3w-1tvJISKJyrTMXQAAAA0"]
[Fri Apr 10 04:14:48.617661 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:9200] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index.php"] [unique_id "adgIuM8f5ssYShsynapMdQAAANg"]
[Fri Apr 10 04:14:49.177811 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:9199] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index.php"] [unique_id "adgIuQZp1JUS4li1QnuhQgAAAI4"]
[Fri Apr 10 04:14:49.808593 2026] [:error] [pid 12576:tid 12659] [client 4.204.215.156:9088] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/default.php"] [unique_id "adgIuQZp1JUS4li1QnuhRAAAAIo"]
[Fri Apr 10 04:14:50.467519 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:9098] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/default.php"] [unique_id "adgIus8f5ssYShsynapMegAAANM"]
[Fri Apr 10 04:14:52.044481 2026] [:error] [pid 12574:tid 12616] [client 4.204.215.156:9116] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/default.php"] [unique_id "adgIvHw-1tvJISKJyrTMXwAAABY"]
[Fri Apr 10 04:14:52.984542 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:9192] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/default.php"] [unique_id "adgIvM8f5ssYShsynapMgQAAAMo"]
[Fri Apr 10 04:14:54.172799 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:9110] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adgIvs8f5ssYShsynapMgwAAANI"]
[Fri Apr 10 04:14:55.294046 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:9154] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adgIv88f5ssYShsynapMhQAAAMY"]
[Fri Apr 10 04:14:56.697154 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:8975] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adgIwM8f5ssYShsynapMiQAAAMs"]
[Fri Apr 10 04:14:57.598418 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:9214] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adgIwc8f5ssYShsynapMjAAAANM"]
[Fri Apr 10 04:14:58.155335 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:9191] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adgIws8f5ssYShsynapMjQAAANc"]
[Fri Apr 10 04:14:59.223800 2026] [:error] [pid 12574:tid 12603] [client 4.204.215.156:9186] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adgIw3w-1tvJISKJyrTMZAAAAAk"]
[Fri Apr 10 04:14:59.805033 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:9188] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adgIw88f5ssYShsynapMmAAAAMc"]
[Fri Apr 10 04:15:00.519544 2026] [:error] [pid 12685:tid 12699] [client 4.204.215.156:9046] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adgIxM8f5ssYShsynapMmQAAAMw"]
[Fri Apr 10 04:15:01.113640 2026] [:error] [pid 12685:tid 12688] [client 4.204.215.156:9124] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/privacy.php"] [unique_id "adgIxc8f5ssYShsynapMmgAAAME"]
[Fri Apr 10 04:15:01.766824 2026] [:error] [pid 12574:tid 12602] [client 4.204.215.156:9182] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/privacy.php"] [unique_id "adgIxXw-1tvJISKJyrTMZwAAAAg"]
[Fri Apr 10 04:15:02.669805 2026] [:error] [pid 12575:tid 12630] [client 4.204.215.156:9107] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/privacy.php"] [unique_id "adgIxijFTOT5X6zsPCk_zQAAAEg"]
[Fri Apr 10 04:15:03.113106 2026] [:error] [pid 12574:tid 12605] [client 4.204.215.156:9113] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/privacy.php"] [unique_id "adgIx3w-1tvJISKJyrTMagAAAAs"]
[Fri Apr 10 04:15:03.821767 2026] [:error] [pid 12575:tid 12628] [client 4.204.215.156:9092] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "adgIxyjFTOT5X6zsPCk_zwAAAEY"]
[Fri Apr 10 04:15:04.731714 2026] [:error] [pid 12575:tid 12629] [client 4.204.215.156:9096] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "adgIyCjFTOT5X6zsPCk_0QAAAEc"]
[Fri Apr 10 04:15:05.560509 2026] [:error] [pid 12685:tid 12690] [client 4.204.215.156:9135] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "adgIyc8f5ssYShsynapMngAAAMM"]
[Fri Apr 10 04:15:06.040950 2026] [:error] [pid 12685:tid 12689] [client 4.204.215.156:9149] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test1.php"] [unique_id "adgIys8f5ssYShsynapMnwAAAMI"]
[Fri Apr 10 04:15:07.451980 2026] [:error] [pid 12576:tid 12660] [client 4.204.215.156:9052] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adgIywZp1JUS4li1QnuhSAAAAIs"]
[Fri Apr 10 04:15:09.290868 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9028] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adgIzc8f5ssYShsynapMowAAANY"]
[Fri Apr 10 04:15:10.187712 2026] [:error] [pid 12576:tid 12649] [client 4.204.215.156:9185] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adgIzgZp1JUS4li1QnuhTAAAAIA"]
[Fri Apr 10 04:15:12.561881 2026] [:error] [pid 12685:tid 12689] [client 4.204.215.156:9157] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adgI0M8f5ssYShsynapMsAAAAMI"]
[Fri Apr 10 04:15:15.494250 2026] [:error] [pid 12575:tid 12634] [client 4.204.215.156:9025] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adgI0yjFTOT5X6zsPCk_-QAAAEw"]
[Fri Apr 10 04:15:18.581747 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:9159] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adgI1s8f5ssYShsynapMuAAAANg"]
[Fri Apr 10 04:15:21.629658 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:9207] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adgI2c8f5ssYShsynapMxAAAAMs"]
[Fri Apr 10 04:15:23.813095 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:9190] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adgI288f5ssYShsynapM0QAAANI"]
[Fri Apr 10 04:15:25.182585 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9126] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adgI3c8f5ssYShsynapM1wAAANY"]
[Fri Apr 10 04:15:26.408160 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:9125] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adgI3s8f5ssYShsynapM2QAAAMk"]
[Fri Apr 10 04:15:27.235784 2026] [:error] [pid 12575:tid 12630] [client 4.204.215.156:9206] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adgI3yjFTOT5X6zsPCk__wAAAEg"]
[Fri Apr 10 04:15:28.057185 2026] [:error] [pid 12576:tid 12657] [client 4.204.215.156:9050] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adgI4AZp1JUS4li1QnuhYAAAAIg"]
[Fri Apr 10 04:15:28.521918 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:9150] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adgI4M8f5ssYShsynapM3wAAANI"]
[Fri Apr 10 04:15:29.808854 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:9196] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adgI4c8f5ssYShsynapM4gAAAMo"]
[Fri Apr 10 04:15:31.733448 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:9040] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adgI488f5ssYShsynapM5QAAAMk"]
[Fri Apr 10 04:15:33.833918 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:9211] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adgI5QZp1JUS4li1QnuhYgAAAI4"]
[Fri Apr 10 04:15:35.472412 2026] [:error] [pid 12576:tid 12666] [client 4.204.215.156:9054] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adgI5wZp1JUS4li1QnuhZgAAAJE"]
[Fri Apr 10 04:15:36.537159 2026] [:error] [pid 12685:tid 12700] [client 4.204.215.156:9161] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adgI6M8f5ssYShsynapM7gAAAM0"]
[Fri Apr 10 04:15:37.491658 2026] [proxy_fcgi:error] [pid 12576:tid 12651] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:38.337902 2026] [proxy_fcgi:error] [pid 12576:tid 12649] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:38.552685 2026] [proxy_fcgi:error] [pid 12576:tid 12662] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:38.761789 2026] [proxy_fcgi:error] [pid 12576:tid 12672] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:38.971110 2026] [proxy_fcgi:error] [pid 12576:tid 12654] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:39.190055 2026] [proxy_fcgi:error] [pid 12576:tid 12664] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:39.417205 2026] [proxy_fcgi:error] [pid 12576:tid 12668] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:39.633309 2026] [proxy_fcgi:error] [pid 12576:tid 12657] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:40.110153 2026] [proxy_fcgi:error] [pid 12576:tid 12667] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:40.320807 2026] [proxy_fcgi:error] [pid 12576:tid 12661] [client 4.204.215.156:9160] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:15:40.528612 2026] [:error] [pid 12576:tid 12663] [client 4.204.215.156:9160] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alex.php"] [unique_id "adgI7AZp1JUS4li1QnuhdAAAAI4"]
[Fri Apr 10 04:15:41.589334 2026] [:error] [pid 12574:tid 12598] [client 4.204.215.156:9128] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alex.php"] [unique_id "adgI7Xw-1tvJISKJyrTMdQAAAAQ"]
[Fri Apr 10 04:15:42.348432 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:9032] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alex.php"] [unique_id "adgI7s8f5ssYShsynapM9QAAAMc"]
[Fri Apr 10 04:15:43.886360 2026] [:error] [pid 12685:tid 12695] [client 4.204.215.156:9116] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alex.php"] [unique_id "adgI788f5ssYShsynapM9wAAAMg"]
[Fri Apr 10 04:15:45.120554 2026] [:error] [pid 12685:tid 12690] [client 4.204.215.156:9194] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adgI8c8f5ssYShsynapM-QAAAMM"]
[Fri Apr 10 04:15:46.586176 2026] [:error] [pid 12685:tid 12704] [client 4.204.215.156:9057] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adgI8s8f5ssYShsynapM-gAAANE"]
[Fri Apr 10 04:15:47.149077 2026] [:error] [pid 12575:tid 12646] [client 4.204.215.156:9189] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adgI8yjFTOT5X6zsPClABAAAAFg"]
[Fri Apr 10 04:15:47.809404 2026] [:error] [pid 12575:tid 12629] [client 4.204.215.156:9177] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adgI8yjFTOT5X6zsPClABQAAAEc"]
[Fri Apr 10 04:15:48.396076 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:8962] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adgI9M8f5ssYShsynapM-wAAANg"]
[Fri Apr 10 04:15:49.265758 2026] [:error] [pid 12574:tid 12597] [client 4.204.215.156:9130] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adgI9Xw-1tvJISKJyrTMeQAAAAM"]
[Fri Apr 10 04:15:50.414867 2026] [:error] [pid 12685:tid 12705] [client 4.204.215.156:9118] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adgI9s8f5ssYShsynapNAAAAANI"]
[Fri Apr 10 04:15:51.189924 2026] [:error] [pid 12576:tid 12657] [client 4.204.215.156:9147] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adgI9wZp1JUS4li1QnuhfwAAAIg"]
[Fri Apr 10 04:15:52.249549 2026] [:error] [pid 12685:tid 12700] [client 4.204.215.156:8984] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adgI-M8f5ssYShsynapNCQAAAM0"]
[Fri Apr 10 04:15:52.912303 2026] [:error] [pid 12576:tid 12650] [client 4.204.215.156:9095] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adgI-AZp1JUS4li1QnuhhQAAAIE"]
[Fri Apr 10 04:15:53.489841 2026] [:error] [pid 12576:tid 12673] [client 4.204.215.156:9101] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adgI-QZp1JUS4li1QnuhiAAAAJg"]
[Fri Apr 10 04:15:54.898517 2026] [:error] [pid 12576:tid 12654] [client 4.204.215.156:8987] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adgI-gZp1JUS4li1QnuhjQAAAIU"]
[Fri Apr 10 04:15:55.979270 2026] [:error] [pid 12576:tid 12668] [client 4.204.215.156:9100] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ad.php"] [unique_id "adgI-wZp1JUS4li1QnuhjwAAAJM"]
[Fri Apr 10 04:15:57.812558 2026] [:error] [pid 12685:tid 12697] [client 4.204.215.156:9049] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ad.php"] [unique_id "adgI_c8f5ssYShsynapNEgAAAMo"]
[Fri Apr 10 04:15:58.913882 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:9140] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ad.php"] [unique_id "adgI_s8f5ssYShsynapNFQAAANA"]
[Fri Apr 10 04:15:59.494298 2026] [:error] [pid 12575:tid 12632] [client 4.204.215.156:9035] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ad.php"] [unique_id "adgI_yjFTOT5X6zsPClACgAAAEo"]
[Fri Apr 10 04:16:00.291423 2026] [:error] [pid 12574:tid 12606] [client 4.204.215.156:9034] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/send.php"] [unique_id "adgJAHw-1tvJISKJyrTMfQAAAAw"]
[Fri Apr 10 04:16:01.183617 2026] [:error] [pid 12574:tid 12608] [client 4.204.215.156:9045] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/send.php"] [unique_id "adgJAXw-1tvJISKJyrTMfgAAAA4"]
[Fri Apr 10 04:16:02.702984 2026] [:error] [pid 12575:tid 12636] [client 4.204.215.156:9031] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/send.php"] [unique_id "adgJAijFTOT5X6zsPClADgAAAE4"]
[Fri Apr 10 04:16:03.448650 2026] [:error] [pid 12575:tid 12623] [client 4.204.215.156:9105] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/send.php"] [unique_id "adgJAyjFTOT5X6zsPClADwAAAEE"]
[Fri Apr 10 04:16:04.032747 2026] [:error] [pid 12575:tid 12622] [client 4.204.215.156:9044] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adgJBCjFTOT5X6zsPClAEAAAAEA"]
[Fri Apr 10 04:16:04.708005 2026] [:error] [pid 12574:tid 12596] [client 4.204.215.156:9183] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adgJBHw-1tvJISKJyrTMggAAAAI"]
[Fri Apr 10 04:16:05.326725 2026] [:error] [pid 12575:tid 12626] [client 4.204.215.156:9204] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adgJBSjFTOT5X6zsPClAEgAAAEQ"]
[Fri Apr 10 04:16:05.932516 2026] [:error] [pid 12574:tid 12611] [client 4.204.215.156:9067] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adgJBXw-1tvJISKJyrTMhQAAABE"]
[Fri Apr 10 04:16:06.620098 2026] [:error] [pid 12575:tid 12637] [client 4.204.215.156:9138] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adgJBijFTOT5X6zsPClAFAAAAE8"]
[Fri Apr 10 04:16:07.167588 2026] [:error] [pid 12576:tid 12670] [client 4.204.215.156:9104] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adgJBwZp1JUS4li1QnuhkwAAAJU"]
[Fri Apr 10 04:16:08.216009 2026] [:error] [pid 12685:tid 12696] [client 4.204.215.156:9169] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adgJCM8f5ssYShsynapNFwAAAMk"]
[Fri Apr 10 04:16:08.908932 2026] [:error] [pid 12576:tid 12660] [client 4.204.215.156:9128] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adgJCAZp1JUS4li1QnuhlAAAAIs"]
[Fri Apr 10 04:16:09.532175 2026] [:error] [pid 12575:tid 12644] [client 4.204.215.156:9139] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sendmail.php"] [unique_id "adgJCSjFTOT5X6zsPClAFwAAAFY"]
[Fri Apr 10 04:16:09.980222 2026] [:error] [pid 12576:tid 12651] [client 4.204.215.156:9144] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sendmail.php"] [unique_id "adgJCQZp1JUS4li1QnuhlgAAAII"]
[Fri Apr 10 04:16:10.811381 2026] [:error] [pid 12575:tid 12627] [client 4.204.215.156:9184] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sendmail.php"] [unique_id "adgJCijFTOT5X6zsPClAGAAAAEU"]
[Fri Apr 10 04:16:11.663584 2026] [:error] [pid 12576:tid 12649] [client 4.204.215.156:9117] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sendmail.php"] [unique_id "adgJCwZp1JUS4li1QnuhmAAAAIA"]
[Fri Apr 10 04:16:12.785747 2026] [:error] [pid 12685:tid 12695] [client 4.204.215.156:9073] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adgJDM8f5ssYShsynapNJAAAAMg"]
[Fri Apr 10 04:16:13.569843 2026] [:error] [pid 12576:tid 12662] [client 4.204.215.156:9210] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adgJDQZp1JUS4li1QnuhmQAAAI0"]
[Fri Apr 10 04:16:14.094301 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9137] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adgJDs8f5ssYShsynapNKAAAANY"]
[Fri Apr 10 04:16:14.702834 2026] [:error] [pid 12574:tid 12594] [client 4.204.215.156:9077] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adgJDnw-1tvJISKJyrTMhwAAAAA"]
[Fri Apr 10 04:16:15.510033 2026] [:error] [pid 12575:tid 12628] [client 4.204.215.156:8990] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adgJDyjFTOT5X6zsPClAGgAAAEY"]
[Fri Apr 10 04:16:16.653569 2026] [:error] [pid 12575:tid 12630] [client 4.204.215.156:9123] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adgJECjFTOT5X6zsPClAHAAAAEg"]
[Fri Apr 10 04:16:17.559319 2026] [:error] [pid 12574:tid 12606] [client 4.204.215.156:9167] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adgJEXw-1tvJISKJyrTMiwAAAAw"]
[Fri Apr 10 04:16:18.105970 2026] [:error] [pid 12576:tid 12669] [client 4.204.215.156:8981] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adgJEgZp1JUS4li1QnuhnQAAAJQ"]
[Fri Apr 10 04:16:18.575099 2026] [:error] [pid 12576:tid 12667] [client 4.204.215.156:9142] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adgJEgZp1JUS4li1QnuhngAAAJI"]
[Fri Apr 10 04:16:19.155624 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:9173] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adgJE88f5ssYShsynapNMAAAANM"]
[Fri Apr 10 04:16:19.910309 2026] [:error] [pid 12685:tid 12702] [client 4.204.215.156:9038] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adgJE88f5ssYShsynapNNQAAAM8"]
[Fri Apr 10 04:16:20.444341 2026] [:error] [pid 12576:tid 12661] [client 4.204.215.156:9076] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adgJFAZp1JUS4li1QnuhoAAAAIw"]
[Fri Apr 10 04:16:21.081394 2026] [:error] [pid 12574:tid 12596] [client 4.204.215.156:9087] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adgJFXw-1tvJISKJyrTMjQAAAAI"]
[Fri Apr 10 04:16:21.773090 2026] [:error] [pid 12576:tid 12659] [client 4.204.215.156:9145] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adgJFQZp1JUS4li1QnuhoQAAAIo"]
[Fri Apr 10 04:16:22.907317 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:9060] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adgJFs8f5ssYShsynapNPAAAANc"]
[Fri Apr 10 04:16:23.829508 2026] [:error] [pid 12576:tid 12650] [client 4.204.215.156:9172] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adgJFwZp1JUS4li1QnuhogAAAIE"]
[Fri Apr 10 04:16:25.262115 2026] [:error] [pid 12685:tid 12693] [client 4.204.215.156:9024] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload.php"] [unique_id "adgJGc8f5ssYShsynapNQgAAAMY"]
[Fri Apr 10 04:16:26.748336 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9143] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload.php"] [unique_id "adgJGs8f5ssYShsynapNRAAAANY"]
[Fri Apr 10 04:16:27.674126 2026] [:error] [pid 12574:tid 12598] [client 4.204.215.156:9039] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload.php"] [unique_id "adgJG3w-1tvJISKJyrTMjgAAAAQ"]
[Fri Apr 10 04:16:28.433997 2026] [:error] [pid 12575:tid 12631] [client 4.204.215.156:9070] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload.php"] [unique_id "adgJHCjFTOT5X6zsPClAIwAAAEk"]
[Fri Apr 10 04:16:29.012030 2026] [:error] [pid 12685:tid 12704] [client 4.204.215.156:9007] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adgJHc8f5ssYShsynapNRgAAANE"]
[Fri Apr 10 04:16:29.932064 2026] [:error] [pid 12574:tid 12611] [client 4.204.215.156:9136] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adgJHXw-1tvJISKJyrTMjwAAABE"]
[Fri Apr 10 04:16:31.350612 2026] [:error] [pid 12575:tid 12642] [client 4.204.215.156:8999] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adgJHyjFTOT5X6zsPClAJwAAAFQ"]
[Fri Apr 10 04:16:32.129508 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:9071] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adgJIM8f5ssYShsynapNSQAAANA"]
[Fri Apr 10 04:16:32.579567 2026] [:error] [pid 12576:tid 12651] [client 4.204.215.156:9069] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adgJIAZp1JUS4li1QnuhqAAAAII"]
[Fri Apr 10 04:16:33.011279 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:8967] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adgJIc8f5ssYShsynapNSwAAANc"]
[Fri Apr 10 04:16:33.462772 2026] [:error] [pid 12574:tid 12612] [client 4.204.215.156:9109] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adgJIXw-1tvJISKJyrTMkgAAABI"]
[Fri Apr 10 04:16:33.909787 2026] [:error] [pid 12685:tid 12689] [client 4.204.215.156:9033] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adgJIc8f5ssYShsynapNTAAAAMI"]
[Fri Apr 10 04:16:34.481641 2026] [:error] [pid 12574:tid 12604] [client 4.204.215.156:9121] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adgJInw-1tvJISKJyrTMlQAAAAo"]
[Fri Apr 10 04:16:34.976664 2026] [:error] [pid 12574:tid 12618] [client 4.204.215.156:9066] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adgJInw-1tvJISKJyrTMlgAAABg"]
[Fri Apr 10 04:16:36.170720 2026] [:error] [pid 12576:tid 12661] [client 4.204.215.156:9131] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adgJJAZp1JUS4li1QnuhrgAAAIw"]
[Fri Apr 10 04:16:38.413450 2026] [:error] [pid 12685:tid 12700] [client 4.204.215.156:9080] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adgJJs8f5ssYShsynapNUQAAAM0"]
[Fri Apr 10 04:16:39.037044 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:9056] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1337.php"] [unique_id "adgJJ88f5ssYShsynapNUgAAAMs"]
[Fri Apr 10 04:16:40.123582 2026] [proxy_fcgi:error] [pid 12574:tid 12607] [client 4.204.215.156:9075] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:40.351764 2026] [proxy_fcgi:error] [pid 12574:tid 12616] [client 4.204.215.156:9075] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:40.568992 2026] [proxy_fcgi:error] [pid 12574:tid 12613] [client 4.204.215.156:9075] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:40.792699 2026] [:error] [pid 12574:tid 12617] [client 4.204.215.156:9075] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adgJKHw-1tvJISKJyrTMmwAAABc"]
[Fri Apr 10 04:16:41.454907 2026] [:error] [pid 12576:tid 12653] [client 4.204.215.156:9037] [client 4.204.215.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adgJKQZp1JUS4li1QnuhtAAAAIQ"]
[Fri Apr 10 04:16:42.199785 2026] [proxy_fcgi:error] [pid 12685:tid 12703] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:42.416534 2026] [proxy_fcgi:error] [pid 12685:tid 12710] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:42.627279 2026] [proxy_fcgi:error] [pid 12685:tid 12691] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:44.171445 2026] [proxy_fcgi:error] [pid 12685:tid 12697] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:44.388359 2026] [proxy_fcgi:error] [pid 12685:tid 12693] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:44.598842 2026] [proxy_fcgi:error] [pid 12685:tid 12700] [client 4.204.215.156:8901] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:16:44.805446 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:8901] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adgJLM8f5ssYShsynapNYQAAAMs"]
[Fri Apr 10 04:16:45.345409 2026] [:error] [pid 12685:tid 12692] [client 4.204.215.156:9111] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adgJLc8f5ssYShsynapNYwAAAMU"]
[Fri Apr 10 04:16:45.804036 2026] [:error] [pid 12575:tid 12634] [client 4.204.215.156:9059] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adgJLSjFTOT5X6zsPClALQAAAEw"]
[Fri Apr 10 04:16:46.576737 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:9030] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adgJLs8f5ssYShsynapNZQAAANQ"]
[Fri Apr 10 04:16:47.238392 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:9146] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-uploads.php"] [unique_id "adgJL88f5ssYShsynapNZgAAANA"]
[Fri Apr 10 04:16:47.733579 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:9202] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-uploads.php"] [unique_id "adgJL88f5ssYShsynapNZwAAANc"]
[Fri Apr 10 04:16:48.527377 2026] [:error] [pid 12575:tid 12637] [client 4.204.215.156:9036] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-uploads.php"] [unique_id "adgJMCjFTOT5X6zsPClALgAAAE8"]
[Fri Apr 10 04:16:49.295823 2026] [:error] [pid 12685:tid 12706] [client 4.204.215.156:8982] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-uploads.php"] [unique_id "adgJMc8f5ssYShsynapNaAAAANM"]
[Fri Apr 10 04:16:50.646202 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:9053] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adgJMnw-1tvJISKJyrTMogAAAAU"]
[Fri Apr 10 04:16:51.805644 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:9016] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adgJM88f5ssYShsynapNbgAAAMs"]
[Fri Apr 10 04:16:53.154976 2026] [:error] [pid 12574:tid 12601] [client 4.204.215.156:9004] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adgJNXw-1tvJISKJyrTMpgAAAAc"]
[Fri Apr 10 04:16:54.509874 2026] [:error] [pid 12685:tid 12704] [client 4.204.215.156:9093] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adgJNs8f5ssYShsynapNcQAAANE"]
[Fri Apr 10 04:16:58.189463 2026] [:error] [pid 12685:tid 12691] [client 4.204.215.156:9112] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adgJOs8f5ssYShsynapNewAAAMQ"]
[Fri Apr 10 04:17:01.348482 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:9084] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adgJPc8f5ssYShsynapNfgAAAMs"]
[Fri Apr 10 04:17:04.266116 2026] [:error] [pid 12574:tid 12613] [client 4.204.215.156:8960] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adgJQHw-1tvJISKJyrTMuwAAABM"]
[Fri Apr 10 04:17:05.164923 2026] [:error] [pid 12576:tid 12670] [client 4.204.215.156:9041] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adgJQQZp1JUS4li1Qnuh1gAAAJU"]
[Fri Apr 10 04:17:06.359552 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:8973] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adgJQnw-1tvJISKJyrTMwgAAAAU"]
[Fri Apr 10 04:17:07.891632 2026] [:error] [pid 12574:tid 12604] [client 4.204.215.156:9068] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adgJQ3w-1tvJISKJyrTMxQAAAAo"]
[Fri Apr 10 04:17:08.934516 2026] [:error] [pid 12574:tid 12617] [client 4.204.215.156:8978] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adgJRHw-1tvJISKJyrTMygAAABc"]
[Fri Apr 10 04:17:10.040843 2026] [:error] [pid 12574:tid 12606] [client 4.204.215.156:8902] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adgJRnw-1tvJISKJyrTMzQAAAAw"]
[Fri Apr 10 04:17:11.312659 2026] [:error] [pid 12576:tid 12658] [client 4.204.215.156:8972] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgJRwZp1JUS4li1Qnuh2AAAAIk"]
[Fri Apr 10 04:17:11.958593 2026] [:error] [pid 12685:tid 12708] [client 4.204.215.156:9141] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgJR88f5ssYShsynapNigAAANU"]
[Fri Apr 10 04:17:13.577363 2026] [:error] [pid 12685:tid 12701] [client 4.204.215.156:9151] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgJSc8f5ssYShsynapNjQAAAM4"]
[Fri Apr 10 04:17:14.487566 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9127] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adgJSs8f5ssYShsynapNjgAAANY"]
[Fri Apr 10 04:17:16.627892 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:9162] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.fk.php"] [unique_id "adgJTM8f5ssYShsynapNkAAAANQ"]
[Fri Apr 10 04:17:19.510658 2026] [:error] [pid 12575:tid 12632] [client 4.204.215.156:8976] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.fk.php"] [unique_id "adgJTyjFTOT5X6zsPClAVQAAAEo"]
[Fri Apr 10 04:17:22.357665 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:9078] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.fk.php"] [unique_id "adgJUs8f5ssYShsynapNkgAAAMc"]
[Fri Apr 10 04:17:27.026811 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:9090] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.fk.php"] [unique_id "adgJV88f5ssYShsynapNlgAAAMs"]
[Fri Apr 10 04:17:29.393192 2026] [:error] [pid 12574:tid 12615] [client 4.204.215.156:9020] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adgJWXw-1tvJISKJyrTM2wAAABU"]
[Fri Apr 10 04:17:32.248494 2026] [:error] [pid 12685:tid 12695] [client 4.204.215.156:8980] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adgJXM8f5ssYShsynapNmgAAAMg"]
[Fri Apr 10 04:17:33.710449 2026] [:error] [pid 12685:tid 12702] [client 4.204.215.156:9019] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adgJXc8f5ssYShsynapNnAAAAM8"]
[Fri Apr 10 04:17:34.440099 2026] [:error] [pid 12575:tid 12639] [client 4.204.215.156:8961] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adgJXijFTOT5X6zsPClAVgAAAFE"]
[Fri Apr 10 04:17:35.196954 2026] [:error] [pid 12685:tid 12707] [client 4.204.215.156:9129] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adgJX88f5ssYShsynapNngAAANQ"]
[Fri Apr 10 04:17:36.021220 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:8977] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adgJYM8f5ssYShsynapNoQAAANA"]
[Fri Apr 10 04:17:37.202840 2026] [:error] [pid 12685:tid 12708] [client 4.204.215.156:8991] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adgJYc8f5ssYShsynapNpAAAANU"]
[Fri Apr 10 04:17:38.213807 2026] [:error] [pid 12685:tid 12701] [client 4.204.215.156:9051] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adgJYs8f5ssYShsynapNpQAAAM4"]
[Fri Apr 10 04:17:39.224298 2026] [:error] [pid 12685:tid 12692] [client 4.204.215.156:9061] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sendemail.php"] [unique_id "adgJY88f5ssYShsynapNpwAAAMU"]
[Fri Apr 10 04:17:40.733261 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:9027] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sendemail.php"] [unique_id "adgJZM8f5ssYShsynapNqAAAANY"]
[Fri Apr 10 04:17:42.125364 2026] [:error] [pid 12574:tid 12602] [client 4.204.215.156:9114] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sendemail.php"] [unique_id "adgJZnw-1tvJISKJyrTM4AAAAAg"]
[Fri Apr 10 04:17:43.598184 2026] [:error] [pid 12574:tid 12618] [client 4.204.215.156:9086] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sendemail.php"] [unique_id "adgJZ3w-1tvJISKJyrTM4gAAABg"]
[Fri Apr 10 04:17:44.574894 2026] [proxy_fcgi:error] [pid 12576:tid 12659] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:44.968527 2026] [proxy_fcgi:error] [pid 12576:tid 12650] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:45.181133 2026] [proxy_fcgi:error] [pid 12576:tid 12666] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:45.391522 2026] [proxy_fcgi:error] [pid 12576:tid 12669] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:46.389476 2026] [proxy_fcgi:error] [pid 12576:tid 12664] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:46.607298 2026] [proxy_fcgi:error] [pid 12576:tid 12671] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:46.824150 2026] [proxy_fcgi:error] [pid 12576:tid 12649] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:47.036086 2026] [proxy_fcgi:error] [pid 12576:tid 12673] [client 4.204.215.156:9085] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:17:47.242289 2026] [:error] [pid 12576:tid 12670] [client 4.204.215.156:9085] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adgJawZp1JUS4li1Qnuh6AAAAJU"]
[Fri Apr 10 04:17:48.140517 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:8970] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adgJbM8f5ssYShsynapNtAAAAMs"]
[Fri Apr 10 04:17:49.228953 2026] [:error] [pid 12574:tid 12609] [client 4.204.215.156:9029] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adgJbXw-1tvJISKJyrTM5gAAAA8"]
[Fri Apr 10 04:17:50.556497 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:8896] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adgJbs8f5ssYShsynapNtQAAANY"]
[Fri Apr 10 04:17:53.162522 2026] [:error] [pid 12576:tid 12657] [client 4.204.215.156:9047] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1.php"] [unique_id "adgJcQZp1JUS4li1Qnuh7gAAAIg"]
[Fri Apr 10 04:17:56.090540 2026] [:error] [pid 12574:tid 12607] [client 4.204.215.156:8969] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1.php"] [unique_id "adgJdHw-1tvJISKJyrTM6wAAAA0"]
[Fri Apr 10 04:17:59.218303 2026] [:error] [pid 12685:tid 12709] [client 4.204.215.156:8935] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1.php"] [unique_id "adgJd88f5ssYShsynapNvwAAANY"]
[Fri Apr 10 04:18:02.667095 2026] [:error] [pid 12685:tid 12690] [client 4.204.215.156:9058] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1.php"] [unique_id "adgJes8f5ssYShsynapNxgAAAMM"]
[Fri Apr 10 04:18:05.381947 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:8985] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adgJfc8f5ssYShsynapNxwAAANA"]
[Fri Apr 10 04:18:06.577442 2026] [:error] [pid 12685:tid 12694] [client 4.204.215.156:9021] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adgJfs8f5ssYShsynapNyAAAAMc"]
[Fri Apr 10 04:18:07.347510 2026] [:error] [pid 12575:tid 12640] [client 4.204.215.156:8899] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adgJfyjFTOT5X6zsPClAWgAAAFI"]
[Fri Apr 10 04:18:08.977015 2026] [:error] [pid 12575:tid 12622] [client 4.204.215.156:9063] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adgJgCjFTOT5X6zsPClAXAAAAEA"]
[Fri Apr 10 04:18:11.185458 2026] [:error] [pid 12575:tid 12634] [client 4.204.215.156:9062] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adgJgyjFTOT5X6zsPClAXwAAAEw"]
[Fri Apr 10 04:18:15.774336 2026] [:error] [pid 12575:tid 12642] [client 4.204.215.156:8998] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adgJhyjFTOT5X6zsPClAZgAAAFQ"]
[Fri Apr 10 04:18:18.585305 2026] [:error] [pid 12575:tid 12641] [client 4.204.215.156:9043] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adgJiijFTOT5X6zsPClAaAAAAFM"]
[Fri Apr 10 04:18:21.129440 2026] [:error] [pid 12574:tid 12599] [client 4.204.215.156:8904] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adgJjXw-1tvJISKJyrTM9gAAAAU"]
[Fri Apr 10 04:18:22.628264 2026] [:error] [pid 12685:tid 12710] [client 4.204.215.156:9083] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl.php"] [unique_id "adgJjs8f5ssYShsynapN0wAAANc"]
[Fri Apr 10 04:18:26.282195 2026] [:error] [pid 12685:tid 12687] [client 4.204.215.156:8913] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl.php"] [unique_id "adgJks8f5ssYShsynapN3QAAAMA"]
[Fri Apr 10 04:18:28.839247 2026] [:error] [pid 12574:tid 12616] [client 4.204.215.156:9072] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl.php"] [unique_id "adgJlHw-1tvJISKJyrTM_QAAABY"]
[Fri Apr 10 04:18:30.880469 2026] [:error] [pid 12685:tid 12687] [client 4.204.215.156:9193] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl.php"] [unique_id "adgJls8f5ssYShsynapN6AAAAMA"]
[Fri Apr 10 04:18:33.690354 2026] [:error] [pid 12685:tid 12711] [client 4.204.215.156:8922] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adgJmc8f5ssYShsynapN6wAAANg"]
[Fri Apr 10 04:18:36.858487 2026] [:error] [pid 12685:tid 12703] [client 4.204.215.156:9012] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adgJnM8f5ssYShsynapN8AAAANA"]
[Fri Apr 10 04:18:37.645678 2026] [:error] [pid 12685:tid 12698] [client 4.204.215.156:8974] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adgJnc8f5ssYShsynapN8wAAAMs"]
[Fri Apr 10 04:18:39.553734 2026] [:error] [pid 12576:tid 12673] [client 4.204.215.156:8905] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adgJnwZp1JUS4li1Qnuh_gAAAJg"]
[Fri Apr 10 04:18:39.969096 2026] [:error] [pid 12576:tid 12669] [client 4.204.215.156:9094] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-manager.php"] [unique_id "adgJnwZp1JUS4li1Qnuh_wAAAJQ"]
[Fri Apr 10 04:18:40.572015 2026] [:error] [pid 12576:tid 12653] [client 4.204.215.156:8871] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-manager.php"] [unique_id "adgJoAZp1JUS4li1QnuiAQAAAIQ"]
[Fri Apr 10 04:18:41.825132 2026] [:error] [pid 12576:tid 12655] [client 4.204.215.156:9099] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-manager.php"] [unique_id "adgJoQZp1JUS4li1QnuiAgAAAIY"]
[Fri Apr 10 04:18:44.561955 2026] [:error] [pid 12685:tid 12688] [client 4.204.215.156:9079] [client 4.204.215.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-manager.php"] [unique_id "adgJpM8f5ssYShsynapN-gAAAME"]
[Fri Apr 10 04:18:46.117166 2026] [proxy_fcgi:error] [pid 12685:tid 12702] [client 4.204.215.156:9201] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:18:46.328530 2026] [proxy_fcgi:error] [pid 12685:tid 12687] [client 4.204.215.156:9201] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:11.072078 2026] [proxy_fcgi:error] [pid 25984:tid 26006] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:11.346674 2026] [proxy_fcgi:error] [pid 25984:tid 25997] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:11.584281 2026] [proxy_fcgi:error] [pid 25984:tid 26002] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:11.821384 2026] [proxy_fcgi:error] [pid 25984:tid 26010] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:12.058788 2026] [proxy_fcgi:error] [pid 25984:tid 26003] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:12.313631 2026] [proxy_fcgi:error] [pid 25984:tid 26012] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:12.553054 2026] [proxy_fcgi:error] [pid 25984:tid 25997] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:12.817150 2026] [proxy_fcgi:error] [pid 25984:tid 25991] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:13.056956 2026] [proxy_fcgi:error] [pid 25984:tid 25993] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:13.294597 2026] [proxy_fcgi:error] [pid 25984:tid 26002] [client 20.203.232.30:40477] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:10:13.528335 2026] [:error] [pid 25984:tid 26008] [client 20.203.232.30:40477] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adj2tbsdbY_MC14OH14ZyQAAAVM"]
[Fri Apr 10 21:10:14.086295 2026] [:error] [pid 13189:tid 13199] [client 20.203.232.30:36519] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adj2tpAxiJKPums3eBC0MwAAAEc"]
[Fri Apr 10 21:10:14.597670 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:27767] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adj2trsdbY_MC14OH14Z1QAAAUg"]
[Fri Apr 10 21:10:15.122220 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:36527] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adj2t7sdbY_MC14OH14Z3QAAAUQ"]
[Fri Apr 10 21:10:15.623210 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:51856] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adj2t_9xLvjW2guI55bCZwAAAAU"]
[Fri Apr 10 21:10:16.165552 2026] [:error] [pid 25984:tid 26010] [client 20.203.232.30:36539] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adj2uLsdbY_MC14OH14Z4wAAAVU"]
[Fri Apr 10 21:10:16.785511 2026] [:error] [pid 25984:tid 25990] [client 20.203.232.30:40448] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adj2uLsdbY_MC14OH14Z6AAAAUE"]
[Fri Apr 10 21:10:17.440738 2026] [:error] [pid 3934:tid 3947] [client 20.203.232.30:56207] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adj2uYa41m-BS8mg82fkpAAAAMg"]
[Fri Apr 10 21:10:17.953607 2026] [:error] [pid 13101:tid 13149] [client 20.203.232.30:6291] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adj2ud8Ldw85818pj2rW2wAAAJA"]
[Fri Apr 10 21:10:18.461339 2026] [:error] [pid 13100:tid 13105] [client 20.203.232.30:36490] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adj2ulzg-ZkZ0InWIP28VwAAAQA"]
[Fri Apr 10 21:10:18.966674 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:27712] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adj2upAxiJKPums3eBC0PgAAAFU"]
[Fri Apr 10 21:10:19.508349 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:56244] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adj2u7sdbY_MC14OH14Z8gAAAVc"]
[Fri Apr 10 21:10:19.997995 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:27728] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adj2u7sdbY_MC14OH14Z9gAAAU4"]
[Fri Apr 10 21:10:20.539869 2026] [:error] [pid 25984:tid 26008] [client 20.203.232.30:6296] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adj2vLsdbY_MC14OH14Z_AAAAVM"]
[Fri Apr 10 21:10:21.086524 2026] [:error] [pid 13102:tid 13177] [client 20.203.232.30:56247] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adj2vf9xLvjW2guI55bCdwAAABE"]
[Fri Apr 10 21:10:21.599471 2026] [:error] [pid 25984:tid 26006] [client 20.203.232.30:34610] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adj2vbsdbY_MC14OH14aAQAAAVE"]
[Fri Apr 10 21:10:22.125536 2026] [:error] [pid 25984:tid 26001] [client 20.203.232.30:6924] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "adj2vrsdbY_MC14OH14aBAAAAUw"]
[Fri Apr 10 21:10:22.634949 2026] [:error] [pid 13100:tid 13108] [client 20.203.232.30:34617] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "adj2vlzg-ZkZ0InWIP28WgAAAQM"]
[Fri Apr 10 21:10:23.136649 2026] [:error] [pid 3934:tid 3951] [client 20.203.232.30:51850] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "adj2v4a41m-BS8mg82fkrgAAAMw"]
[Fri Apr 10 21:10:23.611562 2026] [:error] [pid 13189:tid 13209] [client 20.203.232.30:6975] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "adj2v5AxiJKPums3eBC0SwAAAFE"]
[Fri Apr 10 21:10:24.145903 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:36528] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adj2wJAxiJKPums3eBC0TgAAAFU"]
[Fri Apr 10 21:10:24.791682 2026] [:error] [pid 13189:tid 13193] [client 20.203.232.30:6285] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adj2wJAxiJKPums3eBC0UQAAAEE"]
[Fri Apr 10 21:10:25.389774 2026] [:error] [pid 13189:tid 13209] [client 20.203.232.30:27752] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adj2wZAxiJKPums3eBC0VgAAAFE"]
[Fri Apr 10 21:10:25.935897 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:27731] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adj2wbsdbY_MC14OH14aEQAAAUo"]
[Fri Apr 10 21:10:26.459933 2026] [:error] [pid 25984:tid 26011] [client 20.203.232.30:6305] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "adj2wrsdbY_MC14OH14aFQAAAVY"]
[Fri Apr 10 21:10:26.948704 2026] [:error] [pid 25984:tid 25995] [client 20.203.232.30:51901] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "adj2wrsdbY_MC14OH14aGwAAAUY"]
[Fri Apr 10 21:10:27.515998 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:34611] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "adj2w7sdbY_MC14OH14aIgAAAUQ"]
[Fri Apr 10 21:10:28.017940 2026] [:error] [pid 25984:tid 26013] [client 20.203.232.30:27756] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "adj2xLsdbY_MC14OH14aKAAAAVg"]
[Fri Apr 10 21:10:28.542809 2026] [:error] [pid 13102:tid 13171] [client 20.203.232.30:34583] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "adj2xP9xLvjW2guI55bCfgAAAAs"]
[Fri Apr 10 21:10:29.067859 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:6914] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "adj2xbsdbY_MC14OH14aLgAAAUo"]
[Fri Apr 10 21:10:29.609792 2026] [:error] [pid 13102:tid 13170] [client 20.203.232.30:56232] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "adj2xf9xLvjW2guI55bCiAAAAAo"]
[Fri Apr 10 21:10:30.119757 2026] [:error] [pid 3934:tid 3958] [client 20.203.232.30:6969] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "adj2xoa41m-BS8mg82fktAAAANM"]
[Fri Apr 10 21:10:30.649063 2026] [:error] [pid 13189:tid 13202] [client 20.203.232.30:36520] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adj2xpAxiJKPums3eBC0XQAAAEo"]
[Fri Apr 10 21:10:31.160048 2026] [:error] [pid 13189:tid 13203] [client 20.203.232.30:56218] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adj2x5AxiJKPums3eBC0YgAAAEs"]
[Fri Apr 10 21:10:31.650386 2026] [:error] [pid 13102:tid 13178] [client 20.203.232.30:34623] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adj2x_9xLvjW2guI55bCkgAAABI"]
[Fri Apr 10 21:10:32.196119 2026] [:error] [pid 13102:tid 13173] [client 20.203.232.30:34586] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adj2yP9xLvjW2guI55bClgAAAA0"]
[Fri Apr 10 21:10:32.694924 2026] [:error] [pid 13189:tid 13194] [client 20.203.232.30:36541] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "adj2yJAxiJKPums3eBC0aAAAAEI"]
[Fri Apr 10 21:10:33.243953 2026] [:error] [pid 3934:tid 3955] [client 20.203.232.30:40494] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "adj2yYa41m-BS8mg82fkuQAAANA"]
[Fri Apr 10 21:10:33.796247 2026] [:error] [pid 13102:tid 13172] [client 20.203.232.30:6311] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "adj2yf9xLvjW2guI55bCnAAAAAw"]
[Fri Apr 10 21:10:34.304049 2026] [:error] [pid 3934:tid 3944] [client 20.203.232.30:6289] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "adj2yoa41m-BS8mg82fkwAAAAMU"]
[Fri Apr 10 21:10:34.804115 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:41857] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "adj2yrsdbY_MC14OH14aPAAAAVc"]
[Fri Apr 10 21:10:35.283820 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:34594] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "adj2y7sdbY_MC14OH14aQAAAAUg"]
[Fri Apr 10 21:10:35.811095 2026] [:error] [pid 13102:tid 13169] [client 20.203.232.30:41856] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "adj2y_9xLvjW2guI55bCpAAAAAk"]
[Fri Apr 10 21:10:36.376489 2026] [:error] [pid 13102:tid 13182] [client 20.203.232.30:56209] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "adj2zP9xLvjW2guI55bCrQAAABY"]
[Fri Apr 10 21:10:36.892193 2026] [:error] [pid 13102:tid 13176] [client 20.203.232.30:41911] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "adj2zP9xLvjW2guI55bCswAAABA"]
[Fri Apr 10 21:10:37.565658 2026] [:error] [pid 13102:tid 13170] [client 20.203.232.30:6962] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "adj2zf9xLvjW2guI55bCuAAAAAo"]
[Fri Apr 10 21:10:38.144205 2026] [:error] [pid 13102:tid 13163] [client 20.203.232.30:36506] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "adj2zv9xLvjW2guI55bCwQAAAAM"]
[Fri Apr 10 21:10:38.662101 2026] [:error] [pid 13102:tid 13161] [client 20.203.232.30:41876] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "adj2zv9xLvjW2guI55bCxQAAAAE"]
[Fri Apr 10 21:10:39.170542 2026] [:error] [pid 13100:tid 13114] [client 20.203.232.30:36504] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adj2z1zg-ZkZ0InWIP28ZgAAAQk"]
[Fri Apr 10 21:10:39.737007 2026] [:error] [pid 13101:tid 13144] [client 20.203.232.30:27769] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adj2z98Ldw85818pj2rW6wAAAIs"]
[Fri Apr 10 21:10:40.258636 2026] [:error] [pid 3934:tid 3957] [client 20.203.232.30:27735] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adj20Ia41m-BS8mg82fkzQAAANI"]
[Fri Apr 10 21:10:40.779945 2026] [:error] [pid 3934:tid 3946] [client 20.203.232.30:56251] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adj20Ia41m-BS8mg82fk0QAAAMc"]
[Fri Apr 10 21:10:41.320731 2026] [:error] [pid 25984:tid 26000] [client 20.203.232.30:34619] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adj20bsdbY_MC14OH14aTgAAAUs"]
[Fri Apr 10 21:10:41.873797 2026] [:error] [pid 3934:tid 3943] [client 20.203.232.30:56195] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adj20Ya41m-BS8mg82fk2QAAAMQ"]
[Fri Apr 10 21:10:42.411428 2026] [:error] [pid 13101:tid 13153] [client 20.203.232.30:34618] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adj20t8Ldw85818pj2rW8AAAAJQ"]
[Fri Apr 10 21:10:42.955774 2026] [:error] [pid 13189:tid 13193] [client 20.203.232.30:56217] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adj20pAxiJKPums3eBC0dgAAAEE"]
[Fri Apr 10 21:10:43.524340 2026] [:error] [pid 13189:tid 13206] [client 20.203.232.30:34600] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adj205AxiJKPums3eBC0egAAAE4"]
[Fri Apr 10 21:10:44.010689 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:36538] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adj21LsdbY_MC14OH14aVAAAAVI"]
[Fri Apr 10 21:10:44.566085 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:41913] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adj21LsdbY_MC14OH14aVwAAAVc"]
[Fri Apr 10 21:10:45.103733 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:34614] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adj21f9xLvjW2guI55bC1AAAAAU"]
[Fri Apr 10 21:10:45.668637 2026] [:error] [pid 13189:tid 13208] [client 20.203.232.30:32042] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adj21ZAxiJKPums3eBC0fAAAAFA"]
[Fri Apr 10 21:10:46.189955 2026] [:error] [pid 25984:tid 26004] [client 20.203.232.30:27718] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adj21rsdbY_MC14OH14aYgAAAU8"]
[Fri Apr 10 21:10:46.704601 2026] [:error] [pid 13189:tid 13210] [client 20.203.232.30:51897] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adj21pAxiJKPums3eBC0fgAAAFI"]
[Fri Apr 10 21:10:47.409135 2026] [:error] [pid 13100:tid 13105] [client 20.203.232.30:6273] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adj211zg-ZkZ0InWIP28cQAAAQA"]
[Fri Apr 10 21:10:48.023586 2026] [:error] [pid 13100:tid 13114] [client 20.203.232.30:36487] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "adj22Fzg-ZkZ0InWIP28eAAAAQk"]
[Fri Apr 10 21:10:48.562454 2026] [:error] [pid 13189:tid 13207] [client 20.203.232.30:41862] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "adj22JAxiJKPums3eBC0kAAAAE8"]
[Fri Apr 10 21:10:49.066304 2026] [:error] [pid 13189:tid 13201] [client 20.203.232.30:51899] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "adj22ZAxiJKPums3eBC0mAAAAEk"]
[Fri Apr 10 21:10:49.531976 2026] [:error] [pid 13100:tid 13126] [client 20.203.232.30:27751] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "adj22Vzg-ZkZ0InWIP28ggAAARU"]
[Fri Apr 10 21:10:50.043509 2026] [:error] [pid 13102:tid 13180] [client 20.203.232.30:51869] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "adj22v9xLvjW2guI55bC4QAAABQ"]
[Fri Apr 10 21:10:50.580734 2026] [:error] [pid 3934:tid 3943] [client 20.203.232.30:40484] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "adj22oa41m-BS8mg82flCAAAAMQ"]
[Fri Apr 10 21:10:51.094004 2026] [:error] [pid 25984:tid 25991] [client 20.203.232.30:51898] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "adj227sdbY_MC14OH14aaQAAAUI"]
[Fri Apr 10 21:10:51.595467 2026] [:error] [pid 13102:tid 13172] [client 20.203.232.30:51865] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "adj22_9xLvjW2guI55bC6AAAAAw"]
[Fri Apr 10 21:10:52.092067 2026] [:error] [pid 13189:tid 13198] [client 20.203.232.30:51903] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "adj23JAxiJKPums3eBC0qwAAAEY"]
[Fri Apr 10 21:10:52.609666 2026] [:error] [pid 3934:tid 3962] [client 20.203.232.30:36509] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "adj23Ia41m-BS8mg82flGgAAANc"]
[Fri Apr 10 21:10:53.138547 2026] [:error] [pid 3934:tid 3943] [client 20.203.232.30:36511] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "adj23Ya41m-BS8mg82flGwAAAMQ"]
[Fri Apr 10 21:10:53.667115 2026] [:error] [pid 13189:tid 13202] [client 20.203.232.30:36521] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "adj23ZAxiJKPums3eBC0sgAAAEo"]
[Fri Apr 10 21:10:54.142865 2026] [:error] [pid 13102:tid 13160] [client 20.203.232.30:6326] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adj23v9xLvjW2guI55bC8gAAAAA"]
[Fri Apr 10 21:10:54.619510 2026] [:error] [pid 13102:tid 13184] [client 20.203.232.30:40474] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adj23v9xLvjW2guI55bC9AAAABg"]
[Fri Apr 10 21:10:55.090275 2026] [:error] [pid 13102:tid 13178] [client 20.203.232.30:6966] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adj23_9xLvjW2guI55bC-QAAABI"]
[Fri Apr 10 21:10:55.718647 2026] [:error] [pid 13102:tid 13166] [client 20.203.232.30:56252] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adj23_9xLvjW2guI55bDAAAAAAY"]
[Fri Apr 10 21:10:56.195091 2026] [:error] [pid 3934:tid 3958] [client 20.203.232.30:27745] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adj24Ia41m-BS8mg82flJgAAANM"]
[Fri Apr 10 21:10:56.666480 2026] [:error] [pid 25984:tid 25989] [client 20.203.232.30:56233] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adj24LsdbY_MC14OH14adQAAAUA"]
[Fri Apr 10 21:10:57.173392 2026] [:error] [pid 25984:tid 26004] [client 20.203.232.30:51841] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adj24bsdbY_MC14OH14afAAAAU8"]
[Fri Apr 10 21:10:57.670349 2026] [:error] [pid 13102:tid 13178] [client 20.203.232.30:51858] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adj24f9xLvjW2guI55bDCQAAABI"]
[Fri Apr 10 21:10:58.210011 2026] [:error] [pid 13189:tid 13207] [client 20.203.232.30:6309] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adj24pAxiJKPums3eBC0twAAAE8"]
[Fri Apr 10 21:10:58.794309 2026] [:error] [pid 13102:tid 13170] [client 20.203.232.30:41907] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adj24v9xLvjW2guI55bDDwAAAAo"]
[Fri Apr 10 21:10:59.416418 2026] [:error] [pid 3934:tid 3939] [client 20.203.232.30:56224] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adj244a41m-BS8mg82flLAAAAMA"]
[Fri Apr 10 21:10:59.926530 2026] [:error] [pid 13189:tid 13203] [client 20.203.232.30:6964] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adj245AxiJKPums3eBC0vwAAAEs"]
[Fri Apr 10 21:11:00.459955 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:27771] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adj25LsdbY_MC14OH14akQAAAVI"]
[Fri Apr 10 21:11:00.973847 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:27736] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adj25LsdbY_MC14OH14alAAAAUM"]
[Fri Apr 10 21:11:01.472938 2026] [:error] [pid 13100:tid 13113] [client 20.203.232.30:32059] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adj25Vzg-ZkZ0InWIP28nAAAAQg"]
[Fri Apr 10 21:11:01.992064 2026] [:error] [pid 25984:tid 25989] [client 20.203.232.30:34589] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adj25bsdbY_MC14OH14amQAAAUA"]
[Fri Apr 10 21:11:02.458989 2026] [:error] [pid 25984:tid 26001] [client 20.203.232.30:34564] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "adj25rsdbY_MC14OH14anAAAAUw"]
[Fri Apr 10 21:11:02.961306 2026] [:error] [pid 25984:tid 26008] [client 20.203.232.30:51877] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "adj25rsdbY_MC14OH14aoQAAAVM"]
[Fri Apr 10 21:11:03.502274 2026] [:error] [pid 25984:tid 26009] [client 20.203.232.30:6928] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "adj257sdbY_MC14OH14apwAAAVQ"]
[Fri Apr 10 21:11:04.036410 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:6328] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "adj26LsdbY_MC14OH14argAAAU4"]
[Fri Apr 10 21:11:04.606926 2026] [:error] [pid 3934:tid 3960] [client 20.203.232.30:6316] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "adj26Ia41m-BS8mg82flNAAAANU"]
[Fri Apr 10 21:11:05.111988 2026] [:error] [pid 3934:tid 3957] [client 20.203.232.30:51879] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "adj26Ya41m-BS8mg82flNQAAANI"]
[Fri Apr 10 21:11:05.645660 2026] [:error] [pid 13101:tid 13133] [client 20.203.232.30:41902] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "adj26d8Ldw85818pj2rXEgAAAIA"]
[Fri Apr 10 21:11:06.176595 2026] [:error] [pid 13101:tid 13136] [client 20.203.232.30:56200] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "adj26t8Ldw85818pj2rXFQAAAIM"]
[Fri Apr 10 21:11:06.736222 2026] [:error] [pid 3934:tid 3950] [client 20.203.232.30:40483] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "adj26oa41m-BS8mg82flPQAAAMs"]
[Fri Apr 10 21:11:07.299095 2026] [:error] [pid 3934:tid 3962] [client 20.203.232.30:36514] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "adj264a41m-BS8mg82flPwAAANc"]
[Fri Apr 10 21:11:07.826595 2026] [:error] [pid 13101:tid 13152] [client 20.203.232.30:6637] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "adj2698Ldw85818pj2rXHgAAAJM"]
[Fri Apr 10 21:11:08.301482 2026] [:error] [pid 13101:tid 13154] [client 20.203.232.30:27765] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "adj27N8Ldw85818pj2rXIAAAAJU"]
[Fri Apr 10 21:11:08.807121 2026] [:error] [pid 13189:tid 13211] [client 20.203.232.30:34599] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adj27JAxiJKPums3eBC01gAAAFM"]
[Fri Apr 10 21:11:09.306918 2026] [:error] [pid 13101:tid 13147] [client 20.203.232.30:34609] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adj27d8Ldw85818pj2rXJQAAAI4"]
[Fri Apr 10 21:11:09.847106 2026] [:error] [pid 13102:tid 13173] [client 20.203.232.30:51892] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adj27f9xLvjW2guI55bDIAAAAA0"]
[Fri Apr 10 21:11:10.392453 2026] [:error] [pid 13189:tid 13200] [client 20.203.232.30:36534] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adj27pAxiJKPums3eBC03QAAAEg"]
[Fri Apr 10 21:11:10.937195 2026] [:error] [pid 13189:tid 13192] [client 20.203.232.30:27739] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "adj27pAxiJKPums3eBC04gAAAEA"]
[Fri Apr 10 21:11:11.455798 2026] [:error] [pid 13102:tid 13161] [client 20.203.232.30:41898] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "adj27_9xLvjW2guI55bDKgAAAAE"]
[Fri Apr 10 21:11:12.022784 2026] [:error] [pid 13101:tid 13143] [client 20.203.232.30:27730] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "adj28N8Ldw85818pj2rXKgAAAIo"]
[Fri Apr 10 21:11:12.503015 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:36510] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "adj28LsdbY_MC14OH14awwAAAUM"]
[Fri Apr 10 21:11:13.044644 2026] [proxy_fcgi:error] [pid 13100:tid 13114] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:13.308404 2026] [proxy_fcgi:error] [pid 13100:tid 13122] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:14.792990 2026] [proxy_fcgi:error] [pid 13100:tid 13115] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:15.034188 2026] [proxy_fcgi:error] [pid 13100:tid 13112] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:15.269614 2026] [proxy_fcgi:error] [pid 13100:tid 13126] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:15.504833 2026] [proxy_fcgi:error] [pid 13100:tid 13127] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:15.741470 2026] [proxy_fcgi:error] [pid 13100:tid 13106] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:15.976890 2026] [proxy_fcgi:error] [pid 13100:tid 13105] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:16.233435 2026] [proxy_fcgi:error] [pid 13100:tid 13117] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:16.470318 2026] [proxy_fcgi:error] [pid 13100:tid 13123] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:16.734837 2026] [proxy_fcgi:error] [pid 13100:tid 13125] [client 20.203.232.30:54394] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:11:16.980183 2026] [:error] [pid 13100:tid 13114] [client 20.203.232.30:54394] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "adj29Fzg-ZkZ0InWIP28wgAAAQk"]
[Fri Apr 10 21:11:17.536472 2026] [:error] [pid 13189:tid 13193] [client 20.203.232.30:40461] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "adj29ZAxiJKPums3eBC07AAAAEE"]
[Fri Apr 10 21:11:18.086211 2026] [:error] [pid 25984:tid 25998] [client 20.203.232.30:56235] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "adj29rsdbY_MC14OH14a7AAAAUk"]
[Fri Apr 10 21:11:18.554732 2026] [:error] [pid 25984:tid 26004] [client 20.203.232.30:51893] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "adj29rsdbY_MC14OH14a8AAAAU8"]
[Fri Apr 10 21:11:19.132159 2026] [:error] [pid 3934:tid 3958] [client 20.203.232.30:6320] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adj294a41m-BS8mg82flWAAAANM"]
[Fri Apr 10 21:11:19.711134 2026] [:error] [pid 3934:tid 3941] [client 20.203.232.30:36483] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adj294a41m-BS8mg82flXgAAAMI"]
[Fri Apr 10 21:11:20.245854 2026] [:error] [pid 13102:tid 13166] [client 20.203.232.30:6952] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adj2-P9xLvjW2guI55bDOQAAAAY"]
[Fri Apr 10 21:11:20.871125 2026] [:error] [pid 13102:tid 13160] [client 20.203.232.30:36530] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adj2-P9xLvjW2guI55bDOwAAAAA"]
[Fri Apr 10 21:11:21.354900 2026] [:error] [pid 13102:tid 13176] [client 20.203.232.30:51849] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "adj2-f9xLvjW2guI55bDPQAAABA"]
[Fri Apr 10 21:11:21.844062 2026] [:error] [pid 13189:tid 13216] [client 20.203.232.30:33934] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "adj2-ZAxiJKPums3eBC09gAAAFg"]
[Fri Apr 10 21:11:22.400946 2026] [:error] [pid 25984:tid 26009] [client 20.203.232.30:6939] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "adj2-rsdbY_MC14OH14bAAAAAVQ"]
[Fri Apr 10 21:11:22.879395 2026] [:error] [pid 3934:tid 3958] [client 20.203.232.30:27720] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "adj2-oa41m-BS8mg82flZgAAANM"]
[Fri Apr 10 21:11:23.391632 2026] [:error] [pid 25984:tid 26002] [client 20.203.232.30:34601] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "adj2-7sdbY_MC14OH14bAwAAAU0"]
[Fri Apr 10 21:11:23.883084 2026] [:error] [pid 3934:tid 3943] [client 20.203.232.30:6275] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "adj2-4a41m-BS8mg82flbAAAAMQ"]
[Fri Apr 10 21:11:24.374383 2026] [:error] [pid 13102:tid 13161] [client 20.203.232.30:6314] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "adj2_P9xLvjW2guI55bDQwAAAAE"]
[Fri Apr 10 21:11:24.933526 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:51891] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "adj2_LsdbY_MC14OH14bDwAAAVc"]
[Fri Apr 10 21:11:26.009508 2026] [:error] [pid 13100:tid 13113] [client 20.203.232.30:56226] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adj2_lzg-ZkZ0InWIP28zwAAAQg"]
[Fri Apr 10 21:11:26.545795 2026] [:error] [pid 13102:tid 13173] [client 20.203.232.30:34568] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adj2_v9xLvjW2guI55bDUAAAAA0"]
[Fri Apr 10 21:11:27.059121 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:40460] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adj2_7sdbY_MC14OH14bLAAAAUo"]
[Fri Apr 10 21:11:27.580150 2026] [:error] [pid 13189:tid 13203] [client 20.203.232.30:27774] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adj2_5AxiJKPums3eBC1BQAAAEs"]
[Fri Apr 10 21:11:28.109443 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:56194] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "adj3ALsdbY_MC14OH14bPQAAAUQ"]
[Fri Apr 10 21:11:28.679600 2026] [:error] [pid 13189:tid 13210] [client 20.203.232.30:27768] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "adj3AJAxiJKPums3eBC1CQAAAFI"]
[Fri Apr 10 21:11:29.263547 2026] [:error] [pid 13102:tid 13184] [client 20.203.232.30:33944] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "adj3Af9xLvjW2guI55bDZQAAABg"]
[Fri Apr 10 21:11:29.783175 2026] [:error] [pid 25984:tid 25994] [client 20.203.232.30:6957] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "adj3AbsdbY_MC14OH14bSAAAAUU"]
[Fri Apr 10 21:11:30.303962 2026] [:error] [pid 13101:tid 13143] [client 20.203.232.30:51840] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adj3At8Ldw85818pj2rXRAAAAIo"]
[Fri Apr 10 21:11:30.806463 2026] [:error] [pid 13189:tid 13212] [client 20.203.232.30:36512] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adj3ApAxiJKPums3eBC1EgAAAFQ"]
[Fri Apr 10 21:11:31.537179 2026] [:error] [pid 13101:tid 13148] [client 20.203.232.30:34573] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adj3A98Ldw85818pj2rXSQAAAI8"]
[Fri Apr 10 21:11:32.152489 2026] [:error] [pid 13101:tid 13134] [client 20.203.232.30:6635] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adj3BN8Ldw85818pj2rXTAAAAIE"]
[Fri Apr 10 21:11:32.751693 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:40481] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "adj3BJAxiJKPums3eBC1HQAAAFU"]
[Fri Apr 10 21:11:33.344259 2026] [:error] [pid 13102:tid 13179] [client 20.203.232.30:40471] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "adj3Bf9xLvjW2guI55bDbgAAABM"]
[Fri Apr 10 21:11:34.020247 2026] [:error] [pid 13102:tid 13178] [client 20.203.232.30:33960] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "adj3Bv9xLvjW2guI55bDbwAAABI"]
[Fri Apr 10 21:11:34.592340 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:33951] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "adj3BrsdbY_MC14OH14bVwAAAUM"]
[Fri Apr 10 21:11:35.320391 2026] [:error] [pid 3934:tid 3941] [client 20.203.232.30:36484] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3B4a41m-BS8mg82flegAAAMI"]
[Fri Apr 10 21:11:35.922894 2026] [:error] [pid 13102:tid 13184] [client 20.203.232.30:36502] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3B_9xLvjW2guI55bDcwAAABg"]
[Fri Apr 10 21:11:36.454288 2026] [:error] [pid 13102:tid 13167] [client 20.203.232.30:51857] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3CP9xLvjW2guI55bDdQAAAAc"]
[Fri Apr 10 21:11:36.970904 2026] [:error] [pid 13102:tid 13176] [client 20.203.232.30:56205] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3CP9xLvjW2guI55bDeQAAABA"]
[Fri Apr 10 21:11:37.483733 2026] [:error] [pid 13102:tid 13178] [client 20.203.232.30:36486] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adj3Cf9xLvjW2guI55bDewAAABI"]
[Fri Apr 10 21:11:38.100423 2026] [:error] [pid 25984:tid 26001] [client 20.203.232.30:27719] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adj3CrsdbY_MC14OH14bbQAAAUw"]
[Fri Apr 10 21:11:38.697480 2026] [:error] [pid 3934:tid 3962] [client 20.203.232.30:41893] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adj3Coa41m-BS8mg82flgwAAANc"]
[Fri Apr 10 21:11:39.170281 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:34591] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adj3C7sdbY_MC14OH14beQAAAUo"]
[Fri Apr 10 21:11:39.657082 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:27729] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "adj3C7sdbY_MC14OH14bewAAAVI"]
[Fri Apr 10 21:11:40.205685 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:34607] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "adj3DLsdbY_MC14OH14bhgAAAVc"]
[Fri Apr 10 21:11:40.692251 2026] [:error] [pid 13189:tid 13203] [client 20.203.232.30:41918] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "adj3DJAxiJKPums3eBC1JQAAAEs"]
[Fri Apr 10 21:11:41.190034 2026] [:error] [pid 13100:tid 13110] [client 20.203.232.30:6934] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "adj3DVzg-ZkZ0InWIP286QAAAQU"]
[Fri Apr 10 21:11:41.671300 2026] [:error] [pid 13100:tid 13107] [client 20.203.232.30:56913] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "adj3DVzg-ZkZ0InWIP286wAAAQI"]
[Fri Apr 10 21:11:42.193763 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:41909] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "adj3DrsdbY_MC14OH14blwAAAVI"]
[Fri Apr 10 21:11:42.699464 2026] [:error] [pid 13102:tid 13184] [client 20.203.232.30:40450] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "adj3Dv9xLvjW2guI55bDfwAAABg"]
[Fri Apr 10 21:11:43.210597 2026] [:error] [pid 25984:tid 26000] [client 20.203.232.30:56230] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "adj3D7sdbY_MC14OH14bngAAAUs"]
[Fri Apr 10 21:11:43.729154 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:34603] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adj3D_9xLvjW2guI55bDggAAAAU"]
[Fri Apr 10 21:11:44.360988 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:34621] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adj3ELsdbY_MC14OH14bpQAAAU4"]
[Fri Apr 10 21:11:44.967699 2026] [:error] [pid 25984:tid 26001] [client 20.203.232.30:36526] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adj3ELsdbY_MC14OH14brAAAAUw"]
[Fri Apr 10 21:11:45.479120 2026] [:error] [pid 13100:tid 13126] [client 20.203.232.30:34620] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adj3EVzg-ZkZ0InWIP289wAAARU"]
[Fri Apr 10 21:11:46.040467 2026] [:error] [pid 13102:tid 13173] [client 20.203.232.30:50095] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adj3Ev9xLvjW2guI55bDiQAAAA0"]
[Fri Apr 10 21:11:46.541408 2026] [:error] [pid 13100:tid 13123] [client 20.203.232.30:34616] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adj3Elzg-ZkZ0InWIP28-QAAARI"]
[Fri Apr 10 21:11:47.043669 2026] [:error] [pid 13189:tid 13194] [client 20.203.232.30:41865] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adj3E5AxiJKPums3eBC1MAAAAEI"]
[Fri Apr 10 21:11:47.561147 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:51884] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adj3E7sdbY_MC14OH14bxgAAAVI"]
[Fri Apr 10 21:11:48.056204 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:6954] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "adj3FLsdbY_MC14OH14bygAAAUM"]
[Fri Apr 10 21:11:48.564023 2026] [:error] [pid 13100:tid 13124] [client 20.203.232.30:50709] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "adj3FFzg-ZkZ0InWIP28-gAAARM"]
[Fri Apr 10 21:11:49.062014 2026] [:error] [pid 3934:tid 3946] [client 20.203.232.30:6972] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "adj3FYa41m-BS8mg82flmgAAAMc"]
[Fri Apr 10 21:11:49.593565 2026] [:error] [pid 25984:tid 26009] [client 20.203.232.30:56192] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "adj3FbsdbY_MC14OH14b1gAAAVQ"]
[Fri Apr 10 21:11:50.129979 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:36501] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "adj3FrsdbY_MC14OH14b2AAAAU4"]
[Fri Apr 10 21:11:50.677203 2026] [:error] [pid 25984:tid 25996] [client 20.203.232.30:41874] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "adj3FrsdbY_MC14OH14b3AAAAUc"]
[Fri Apr 10 21:11:51.240294 2026] [:error] [pid 3934:tid 3957] [client 20.203.232.30:6931] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "adj3F4a41m-BS8mg82flngAAANI"]
[Fri Apr 10 21:11:51.821392 2026] [:error] [pid 13102:tid 13166] [client 20.203.232.30:56947] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "adj3F_9xLvjW2guI55bDkwAAAAY"]
[Fri Apr 10 21:11:52.321402 2026] [:error] [pid 13102:tid 13163] [client 20.203.232.30:27740] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adj3GP9xLvjW2guI55bDlQAAAAM"]
[Fri Apr 10 21:11:52.851591 2026] [:error] [pid 13102:tid 13180] [client 20.203.232.30:27735] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adj3GP9xLvjW2guI55bDmAAAABQ"]
[Fri Apr 10 21:11:53.416723 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:27742] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adj3GbsdbY_MC14OH14b7QAAAUg"]
[Fri Apr 10 21:11:54.015469 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:27758] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adj3GrsdbY_MC14OH14b9QAAAUg"]
[Fri Apr 10 21:11:54.549501 2026] [:error] [pid 25984:tid 26002] [client 20.203.232.30:56208] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3GrsdbY_MC14OH14b_AAAAU0"]
[Fri Apr 10 21:11:55.156887 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:6936] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3G7sdbY_MC14OH14cAQAAAUM"]
[Fri Apr 10 21:11:55.738490 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:41872] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3G5AxiJKPums3eBC1OgAAAFU"]
[Fri Apr 10 21:11:56.411691 2026] [:error] [pid 3934:tid 3946] [client 20.203.232.30:6606] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3HIa41m-BS8mg82flqAAAAMc"]
[Fri Apr 10 21:11:56.957937 2026] [:error] [pid 13101:tid 13137] [client 20.203.232.30:54372] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adj3HN8Ldw85818pj2rXYgAAAIQ"]
[Fri Apr 10 21:11:57.517118 2026] [:error] [pid 3934:tid 3958] [client 20.203.232.30:27741] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adj3HYa41m-BS8mg82flsAAAANM"]
[Fri Apr 10 21:11:58.076354 2026] [:error] [pid 3934:tid 3943] [client 20.203.232.30:41888] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adj3Hoa41m-BS8mg82fltQAAAMQ"]
[Fri Apr 10 21:11:58.724001 2026] [:error] [pid 3934:tid 3945] [client 20.203.232.30:56943] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adj3Hoa41m-BS8mg82flvAAAAMY"]
[Fri Apr 10 21:11:59.247405 2026] [:error] [pid 3934:tid 3949] [client 20.203.232.30:6329] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adj3H4a41m-BS8mg82flwAAAAMo"]
[Fri Apr 10 21:11:59.848318 2026] [:error] [pid 13101:tid 13141] [client 20.203.232.30:41905] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adj3H98Ldw85818pj2rXYwAAAIg"]
[Fri Apr 10 21:12:00.509885 2026] [:error] [pid 3934:tid 3945] [client 20.203.232.30:41882] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adj3IIa41m-BS8mg82flxgAAAMY"]
[Fri Apr 10 21:12:01.064974 2026] [:error] [pid 25984:tid 26000] [client 20.203.232.30:40479] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adj3IbsdbY_MC14OH14cDgAAAUs"]
[Fri Apr 10 21:12:01.548534 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:40475] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "adj3IbsdbY_MC14OH14cEAAAAVc"]
[Fri Apr 10 21:12:02.054551 2026] [:error] [pid 25984:tid 26005] [client 20.203.232.30:27761] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "adj3IrsdbY_MC14OH14cEgAAAVA"]
[Fri Apr 10 21:12:02.608838 2026] [:error] [pid 3934:tid 3951] [client 20.203.232.30:51890] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "adj3Ioa41m-BS8mg82flzAAAAMw"]
[Fri Apr 10 21:12:03.122119 2026] [:error] [pid 13101:tid 13134] [client 20.203.232.30:36525] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "adj3I98Ldw85818pj2rXZAAAAIE"]
[Fri Apr 10 21:12:03.821117 2026] [:error] [pid 25984:tid 25991] [client 20.203.232.30:27716] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "adj3I7sdbY_MC14OH14cGQAAAUI"]
[Fri Apr 10 21:12:04.495339 2026] [:error] [pid 13102:tid 13162] [client 20.203.232.30:50082] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "adj3JP9xLvjW2guI55bDqwAAAAI"]
[Fri Apr 10 21:12:05.075260 2026] [:error] [pid 13101:tid 13144] [client 20.203.232.30:36529] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "adj3Jd8Ldw85818pj2rXbAAAAIs"]
[Fri Apr 10 21:12:05.617170 2026] [:error] [pid 13189:tid 13203] [client 20.203.232.30:51848] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "adj3JZAxiJKPums3eBC1QgAAAEs"]
[Fri Apr 10 21:12:06.173613 2026] [:error] [pid 25984:tid 25992] [client 20.203.232.30:56234] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adj3JrsdbY_MC14OH14cIwAAAUM"]
[Fri Apr 10 21:12:06.725855 2026] [:error] [pid 3934:tid 3960] [client 20.203.232.30:6636] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adj3Joa41m-BS8mg82fl1QAAANU"]
[Fri Apr 10 21:12:07.437802 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:40500] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adj3J_9xLvjW2guI55bDsQAAAAU"]
[Fri Apr 10 21:12:08.104307 2026] [:error] [pid 25984:tid 26005] [client 20.203.232.30:50704] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adj3KLsdbY_MC14OH14cKgAAAVA"]
[Fri Apr 10 21:12:08.677326 2026] [:error] [pid 13100:tid 13128] [client 20.203.232.30:6282] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adj3KFzg-ZkZ0InWIP29AwAAARc"]
[Fri Apr 10 21:12:09.340186 2026] [:error] [pid 13102:tid 13177] [client 20.203.232.30:40506] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adj3Kf9xLvjW2guI55bDvgAAABE"]
[Fri Apr 10 21:12:10.168833 2026] [:error] [pid 25984:tid 26008] [client 20.203.232.30:6283] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adj3KrsdbY_MC14OH14cMwAAAVM"]
[Fri Apr 10 21:12:10.768839 2026] [:error] [pid 25984:tid 26005] [client 20.203.232.30:56199] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adj3KrsdbY_MC14OH14cNgAAAVA"]
[Fri Apr 10 21:12:11.339304 2026] [:error] [pid 13100:tid 13116] [client 20.203.232.30:34572] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "adj3K1zg-ZkZ0InWIP29CAAAAQs"]
[Fri Apr 10 21:12:11.879772 2026] [:error] [pid 3934:tid 3963] [client 20.203.232.30:6921] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "adj3K4a41m-BS8mg82fl4QAAANg"]
[Fri Apr 10 21:12:12.555295 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:27764] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "adj3LLsdbY_MC14OH14cQwAAAUo"]
[Fri Apr 10 21:12:13.133120 2026] [:error] [pid 3934:tid 3962] [client 20.203.232.30:6955] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "adj3LYa41m-BS8mg82fl4wAAANc"]
[Fri Apr 10 21:12:13.779191 2026] [:error] [pid 3934:tid 3955] [client 20.203.232.30:36508] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3LYa41m-BS8mg82fl5gAAANA"]
[Fri Apr 10 21:12:14.369018 2026] [:error] [pid 13101:tid 13139] [client 20.203.232.30:50694] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3Lt8Ldw85818pj2rXdAAAAIY"]
[Fri Apr 10 21:12:14.949162 2026] [:error] [pid 3934:tid 3961] [client 20.203.232.30:36513] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3Loa41m-BS8mg82fl7AAAANY"]
[Fri Apr 10 21:12:15.556821 2026] [:error] [pid 13101:tid 13145] [client 20.203.232.30:6937] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3L98Ldw85818pj2rXeQAAAIw"]
[Fri Apr 10 21:12:16.424254 2026] [proxy_fcgi:error] [pid 25984:tid 25999] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:16.715987 2026] [proxy_fcgi:error] [pid 25984:tid 26000] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:16.989339 2026] [proxy_fcgi:error] [pid 25984:tid 26005] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:17.229319 2026] [proxy_fcgi:error] [pid 25984:tid 26012] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:17.465700 2026] [proxy_fcgi:error] [pid 25984:tid 26004] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:17.702091 2026] [proxy_fcgi:error] [pid 25984:tid 26010] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:18.229878 2026] [proxy_fcgi:error] [pid 25984:tid 26005] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:18.466790 2026] [proxy_fcgi:error] [pid 25984:tid 26001] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:18.797512 2026] [proxy_fcgi:error] [pid 25984:tid 25998] [client 20.203.232.30:40454] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:12:19.030454 2026] [:error] [pid 25984:tid 26011] [client 20.203.232.30:40454] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adj3M7sdbY_MC14OH14ccQAAAVY"]
[Fri Apr 10 21:12:20.016565 2026] [:error] [pid 13189:tid 13210] [client 20.203.232.30:41864] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adj3NJAxiJKPums3eBC1TwAAAFI"]
[Fri Apr 10 21:12:20.744522 2026] [:error] [pid 13101:tid 13136] [client 20.203.232.30:41904] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adj3NN8Ldw85818pj2rXgAAAAIM"]
[Fri Apr 10 21:12:21.371851 2026] [:error] [pid 3934:tid 3950] [client 20.203.232.30:6594] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adj3NYa41m-BS8mg82fl8QAAAMs"]
[Fri Apr 10 21:12:22.008780 2026] [:error] [pid 25984:tid 25991] [client 20.203.232.30:56229] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj3NrsdbY_MC14OH14cdQAAAUI"]
[Fri Apr 10 21:12:22.613965 2026] [:error] [pid 25984:tid 25996] [client 20.203.232.30:41870] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj3NrsdbY_MC14OH14cdwAAAUc"]
[Fri Apr 10 21:12:23.207314 2026] [:error] [pid 25984:tid 26013] [client 20.203.232.30:34590] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj3N7sdbY_MC14OH14cegAAAVg"]
[Fri Apr 10 21:12:23.837917 2026] [:error] [pid 13102:tid 13181] [client 20.203.232.30:36543] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj3N_9xLvjW2guI55bD6wAAABU"]
[Fri Apr 10 21:12:24.465139 2026] [:error] [pid 13102:tid 13183] [client 20.203.232.30:34565] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3OP9xLvjW2guI55bD7QAAABc"]
[Fri Apr 10 21:12:25.661803 2026] [:error] [pid 25984:tid 26011] [client 20.203.232.30:56911] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3ObsdbY_MC14OH14ciAAAAVY"]
[Fri Apr 10 21:12:26.283388 2026] [:error] [pid 13189:tid 13201] [client 20.203.232.30:56938] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3OpAxiJKPums3eBC1VwAAAEk"]
[Fri Apr 10 21:12:26.876517 2026] [:error] [pid 13102:tid 13175] [client 20.203.232.30:6299] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj3Ov9xLvjW2guI55bD9AAAAA8"]
[Fri Apr 10 21:12:27.497776 2026] [:error] [pid 13102:tid 13161] [client 20.203.232.30:51852] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3O_9xLvjW2guI55bD9wAAAAE"]
[Fri Apr 10 21:12:28.063154 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:36522] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3PLsdbY_MC14OH14ckgAAAVc"]
[Fri Apr 10 21:12:28.547539 2026] [:error] [pid 13189:tid 13205] [client 20.203.232.30:51868] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3PJAxiJKPums3eBC1XQAAAE0"]
[Fri Apr 10 21:12:29.150167 2026] [:error] [pid 13101:tid 13150] [client 20.203.232.30:6630] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3Pd8Ldw85818pj2rXkwAAAJE"]
[Fri Apr 10 21:12:29.677993 2026] [:error] [pid 25984:tid 26005] [client 20.203.232.30:36505] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adj3PbsdbY_MC14OH14clgAAAVA"]
[Fri Apr 10 21:12:30.183482 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:50052] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adj3PrsdbY_MC14OH14cmAAAAUQ"]
[Fri Apr 10 21:12:30.714522 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:56210] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adj3PrsdbY_MC14OH14cmQAAAUo"]
[Fri Apr 10 21:12:31.303158 2026] [:error] [pid 13189:tid 13194] [client 20.203.232.30:40488] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adj3P5AxiJKPums3eBC1ZAAAAEI"]
[Fri Apr 10 21:12:31.866501 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:54360] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "adj3P7sdbY_MC14OH14cmwAAAVI"]
[Fri Apr 10 21:12:32.372300 2026] [:error] [pid 13102:tid 13181] [client 20.203.232.30:41863] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "adj3QP9xLvjW2guI55bEAwAAABU"]
[Fri Apr 10 21:12:32.975531 2026] [:error] [pid 13189:tid 13199] [client 20.203.232.30:6974] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "adj3QJAxiJKPums3eBC1aQAAAEc"]
[Fri Apr 10 21:12:33.487065 2026] [:error] [pid 13101:tid 13153] [client 20.203.232.30:51842] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "adj3Qd8Ldw85818pj2rXngAAAJQ"]
[Fri Apr 10 21:12:34.010944 2026] [:error] [pid 13101:tid 13149] [client 20.203.232.30:6293] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3Qt8Ldw85818pj2rXoQAAAJA"]
[Fri Apr 10 21:12:34.503842 2026] [:error] [pid 25984:tid 25989] [client 20.203.232.30:54381] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3QrsdbY_MC14OH14cqgAAAUA"]
[Fri Apr 10 21:12:35.092380 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:51885] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3Q7sdbY_MC14OH14csgAAAU4"]
[Fri Apr 10 21:12:35.562097 2026] [:error] [pid 13101:tid 13151] [client 20.203.232.30:34566] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adj3Q98Ldw85818pj2rXqAAAAJI"]
[Fri Apr 10 21:12:36.063431 2026] [:error] [pid 13102:tid 13181] [client 20.203.232.30:27766] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "adj3RP9xLvjW2guI55bEDgAAABU"]
[Fri Apr 10 21:12:36.540086 2026] [:error] [pid 3934:tid 3940] [client 20.203.232.30:6277] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "adj3RIa41m-BS8mg82fmBwAAAME"]
[Fri Apr 10 21:12:37.019814 2026] [:error] [pid 3934:tid 3952] [client 20.203.232.30:34585] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "adj3RYa41m-BS8mg82fmDAAAAM0"]
[Fri Apr 10 21:12:37.486877 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:51864] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "adj3RZAxiJKPums3eBC1dwAAAFU"]
[Fri Apr 10 21:12:37.993808 2026] [:error] [pid 3934:tid 3961] [client 20.203.232.30:41859] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj3RYa41m-BS8mg82fmFAAAANY"]
[Fri Apr 10 21:12:38.485855 2026] [:error] [pid 25984:tid 26011] [client 20.203.232.30:36491] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj3RrsdbY_MC14OH14cuwAAAVY"]
[Fri Apr 10 21:12:39.004836 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:40502] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj3R7sdbY_MC14OH14cvgAAAUQ"]
[Fri Apr 10 21:12:39.494161 2026] [:error] [pid 3934:tid 3945] [client 20.203.232.30:6927] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj3R4a41m-BS8mg82fmFwAAAMY"]
[Fri Apr 10 21:12:40.034428 2026] [:error] [pid 3934:tid 3948] [client 20.203.232.30:36536] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adj3SIa41m-BS8mg82fmHwAAAMk"]
[Fri Apr 10 21:12:40.538737 2026] [:error] [pid 25984:tid 25993] [client 20.203.232.30:27713] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adj3SLsdbY_MC14OH14cxgAAAUQ"]
[Fri Apr 10 21:12:41.075300 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:56248] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adj3SbsdbY_MC14OH14cygAAAUo"]
[Fri Apr 10 21:12:41.572720 2026] [:error] [pid 13101:tid 13145] [client 20.203.232.30:51861] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "adj3Sd8Ldw85818pj2rXsAAAAIw"]
[Fri Apr 10 21:12:42.043680 2026] [:error] [pid 25984:tid 25999] [client 20.203.232.30:56216] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3SrsdbY_MC14OH14c0QAAAUo"]
[Fri Apr 10 21:12:42.539439 2026] [:error] [pid 13189:tid 13207] [client 20.203.232.30:27750] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3SpAxiJKPums3eBC1fwAAAE8"]
[Fri Apr 10 21:12:43.044562 2026] [:error] [pid 3934:tid 3962] [client 20.203.232.30:36480] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3S4a41m-BS8mg82fmIgAAANc"]
[Fri Apr 10 21:12:43.515285 2026] [:error] [pid 3934:tid 3961] [client 20.203.232.30:41900] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3S4a41m-BS8mg82fmKQAAANY"]
[Fri Apr 10 21:12:44.021484 2026] [:error] [pid 3934:tid 3955] [client 20.203.232.30:6307] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "adj3TIa41m-BS8mg82fmKwAAANA"]
[Fri Apr 10 21:12:44.555431 2026] [:error] [pid 13101:tid 13149] [client 20.203.232.30:56197] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "adj3TN8Ldw85818pj2rXtwAAAJA"]
[Fri Apr 10 21:12:45.118575 2026] [:error] [pid 13101:tid 13141] [client 20.203.232.30:27723] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "adj3Td8Ldw85818pj2rXugAAAIg"]
[Fri Apr 10 21:12:45.686099 2026] [:error] [pid 62615:tid 62618] [client 20.203.232.30:40466] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "adj3TdSLyvZ9rO5uVseU2wAAAYE"]
[Fri Apr 10 21:12:46.209886 2026] [:error] [pid 13102:tid 13179] [client 20.203.232.30:6298] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adj3Tv9xLvjW2guI55bENgAAABM"]
[Fri Apr 10 21:12:46.762070 2026] [:error] [pid 3934:tid 3961] [client 20.203.232.30:56238] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adj3Toa41m-BS8mg82fmMwAAANY"]
[Fri Apr 10 21:12:47.283748 2026] [:error] [pid 13100:tid 13129] [client 20.203.232.30:50064] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adj3T1zg-ZkZ0InWIP29LAAAARg"]
[Fri Apr 10 21:12:47.816656 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:6946] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adj3T7sdbY_MC14OH14c5wAAAUg"]
[Fri Apr 10 21:12:48.341395 2026] [:error] [pid 3934:tid 3956] [client 20.203.232.30:54389] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adj3UIa41m-BS8mg82fmNgAAANE"]
[Fri Apr 10 21:12:48.862124 2026] [:error] [pid 13189:tid 13207] [client 20.203.232.30:41883] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adj3UJAxiJKPums3eBC1kgAAAE8"]
[Fri Apr 10 21:12:49.368988 2026] [:error] [pid 3934:tid 3963] [client 20.203.232.30:6920] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adj3UYa41m-BS8mg82fmOwAAANg"]
[Fri Apr 10 21:12:49.872651 2026] [:error] [pid 13100:tid 13105] [client 20.203.232.30:27714] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adj3UVzg-ZkZ0InWIP29MwAAAQA"]
[Fri Apr 10 21:12:50.366779 2026] [:error] [pid 13100:tid 13108] [client 20.203.232.30:56249] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adj3Ulzg-ZkZ0InWIP29NQAAAQM"]
[Fri Apr 10 21:12:50.900538 2026] [:error] [pid 62651:tid 62657] [client 20.203.232.30:33929] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adj3UjbAH0le57SIaqwhQgAAAcQ"]
[Fri Apr 10 21:12:51.477799 2026] [:error] [pid 13100:tid 13127] [client 20.203.232.30:41867] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adj3U1zg-ZkZ0InWIP29OQAAARY"]
[Fri Apr 10 21:12:52.032404 2026] [:error] [pid 13102:tid 13171] [client 20.203.232.30:51867] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adj3VP9xLvjW2guI55bEQQAAAAs"]
[Fri Apr 10 21:12:52.749793 2026] [:error] [pid 13101:tid 13148] [client 20.203.232.30:56198] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adj3VN8Ldw85818pj2rXwwAAAI8"]
[Fri Apr 10 21:12:53.356269 2026] [:error] [pid 62615:tid 62623] [client 20.203.232.30:6287] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adj3VdSLyvZ9rO5uVseU3gAAAYY"]
[Fri Apr 10 21:12:53.881285 2026] [:error] [pid 13101:tid 13146] [client 20.203.232.30:41897] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adj3Vd8Ldw85818pj2rXxwAAAI0"]
[Fri Apr 10 21:12:54.381999 2026] [:error] [pid 62651:tid 62654] [client 20.203.232.30:34605] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adj3VjbAH0le57SIaqwhUwAAAcE"]
[Fri Apr 10 21:12:54.886635 2026] [:error] [pid 62615:tid 62624] [client 20.203.232.30:56240] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj3VtSLyvZ9rO5uVseU4QAAAYc"]
[Fri Apr 10 21:12:55.532786 2026] [:error] [pid 25984:tid 25997] [client 20.203.232.30:6324] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj3V7sdbY_MC14OH14c7wAAAUg"]
[Fri Apr 10 21:12:56.197313 2026] [:error] [pid 13101:tid 13139] [client 20.203.232.30:6654] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj3WN8Ldw85818pj2rX0wAAAIY"]
[Fri Apr 10 21:12:56.717453 2026] [:error] [pid 13101:tid 13146] [client 20.203.232.30:54369] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adj3WN8Ldw85818pj2rX1QAAAI0"]
[Fri Apr 10 21:12:57.236874 2026] [:error] [pid 13189:tid 13204] [client 20.203.232.30:56956] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj3WZAxiJKPums3eBC1pwAAAEw"]
[Fri Apr 10 21:12:57.751397 2026] [:error] [pid 13101:tid 13138] [client 20.203.232.30:33925] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj3Wd8Ldw85818pj2rX1wAAAIU"]
[Fri Apr 10 21:12:58.255510 2026] [:error] [pid 62651:tid 62657] [client 20.203.232.30:34563] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj3WjbAH0le57SIaqwhZgAAAcQ"]
[Fri Apr 10 21:12:58.776797 2026] [:error] [pid 62651:tid 62667] [client 20.203.232.30:36519] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adj3WjbAH0le57SIaqwhawAAAc4"]
[Fri Apr 10 21:12:59.419686 2026] [:error] [pid 62651:tid 62675] [client 20.203.232.30:40473] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj3WzbAH0le57SIaqwhbwAAAdY"]
[Fri Apr 10 21:12:59.999378 2026] [:error] [pid 62651:tid 62661] [client 20.203.232.30:41871] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj3WzbAH0le57SIaqwhcwAAAcg"]
[Fri Apr 10 21:13:00.578628 2026] [:error] [pid 62651:tid 62665] [client 20.203.232.30:40452] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj3XDbAH0le57SIaqwheAAAAcw"]
[Fri Apr 10 21:13:01.235526 2026] [:error] [pid 3934:tid 3947] [client 20.203.232.30:27720] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adj3XYa41m-BS8mg82fmUwAAAMg"]
[Fri Apr 10 21:13:01.829409 2026] [:error] [pid 62651:tid 62666] [client 20.203.232.30:51871] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adj3XTbAH0le57SIaqwhegAAAc0"]
[Fri Apr 10 21:13:02.344532 2026] [:error] [pid 62615:tid 62628] [client 20.203.232.30:56939] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adj3XtSLyvZ9rO5uVseVAAAAAYs"]
[Fri Apr 10 21:13:02.919501 2026] [:error] [pid 62615:tid 62631] [client 20.203.232.30:27753] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adj3XtSLyvZ9rO5uVseVBAAAAY4"]
[Fri Apr 10 21:13:03.488759 2026] [:error] [pid 62651:tid 62661] [client 20.203.232.30:41875] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adj3XzbAH0le57SIaqwhggAAAcg"]
[Fri Apr 10 21:13:04.057817 2026] [:error] [pid 62651:tid 62671] [client 20.203.232.30:56930] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adj3YDbAH0le57SIaqwhhQAAAdI"]
[Fri Apr 10 21:13:04.559401 2026] [:error] [pid 62615:tid 62637] [client 20.203.232.30:34595] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adj3YNSLyvZ9rO5uVseVEgAAAZQ"]
[Fri Apr 10 21:13:05.075813 2026] [:error] [pid 62615:tid 62627] [client 20.203.232.30:51888] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adj3YdSLyvZ9rO5uVseVFAAAAYo"]
[Fri Apr 10 21:13:05.556847 2026] [:error] [pid 13101:tid 13138] [client 20.203.232.30:6948] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "adj3Yd8Ldw85818pj2rX7AAAAIU"]
[Fri Apr 10 21:13:06.063618 2026] [:error] [pid 62615:tid 62618] [client 20.203.232.30:6333] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj3YtSLyvZ9rO5uVseVHAAAAYE"]
[Fri Apr 10 21:13:06.543687 2026] [:error] [pid 13100:tid 13118] [client 20.203.232.30:36503] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj3Ylzg-ZkZ0InWIP29XQAAAQ0"]
[Fri Apr 10 21:13:07.041646 2026] [:error] [pid 13102:tid 13163] [client 20.203.232.30:6970] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj3Y_9xLvjW2guI55bEUwAAAAM"]
[Fri Apr 10 21:13:07.549366 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:6306] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adj3Y_9xLvjW2guI55bEVgAAAAU"]
[Fri Apr 10 21:13:08.129149 2026] [:error] [pid 13102:tid 13165] [client 20.203.232.30:32014] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3ZP9xLvjW2guI55bEWgAAAAU"]
[Fri Apr 10 21:13:08.636644 2026] [:error] [pid 62769:tid 62794] [client 20.203.232.30:7125] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3ZMWsSnfLoB8ifjBJagAAAlc"]
[Fri Apr 10 21:13:09.132254 2026] [:error] [pid 13189:tid 13210] [client 20.203.232.30:41910] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3ZZAxiJKPums3eBC1sAAAAFI"]
[Fri Apr 10 21:13:09.749934 2026] [:error] [pid 62651:tid 62655] [client 20.203.232.30:56215] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adj3ZTbAH0le57SIaqwhmgAAAcI"]
[Fri Apr 10 21:13:10.314364 2026] [:error] [pid 62769:tid 62780] [client 20.203.232.30:33945] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj3ZsWsSnfLoB8ifjBJbwAAAkk"]
[Fri Apr 10 21:13:10.785936 2026] [:error] [pid 25984:tid 25996] [client 20.203.232.30:54354] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj3ZrsdbY_MC14OH14dDAAAAUc"]
[Fri Apr 10 21:13:11.293080 2026] [:error] [pid 62769:tid 62783] [client 20.203.232.30:6318] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj3Z8WsSnfLoB8ifjBJcgAAAkw"]
[Fri Apr 10 21:13:11.826831 2026] [:error] [pid 3934:tid 3946] [client 20.203.232.30:6330] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adj3Z4a41m-BS8mg82fmYgAAAMc"]
[Fri Apr 10 21:13:12.343461 2026] [:error] [pid 62769:tid 62793] [client 20.203.232.30:40467] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3aMWsSnfLoB8ifjBJeQAAAlY"]
[Fri Apr 10 21:13:12.874893 2026] [:error] [pid 13100:tid 13123] [client 20.203.232.30:6953] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3aFzg-ZkZ0InWIP29awAAARI"]
[Fri Apr 10 21:13:13.440746 2026] [:error] [pid 62651:tid 62673] [client 20.203.232.30:6918] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3aTbAH0le57SIaqwhnQAAAdQ"]
[Fri Apr 10 21:13:14.045019 2026] [:error] [pid 13100:tid 13123] [client 20.203.232.30:6274] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "adj3alzg-ZkZ0InWIP29bQAAARI"]
[Fri Apr 10 21:13:14.618615 2026] [:error] [pid 62651:tid 62665] [client 20.203.232.30:41917] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adj3ajbAH0le57SIaqwhngAAAcw"]
[Fri Apr 10 21:13:15.227144 2026] [:error] [pid 62884:tid 62902] [client 20.203.232.30:36488] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adj3a-UCK1xrhnnmpo2AhwAAAss"]
[Fri Apr 10 21:13:15.750214 2026] [:error] [pid 25984:tid 26001] [client 20.203.232.30:51886] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adj3a7sdbY_MC14OH14dGQAAAUw"]
[Fri Apr 10 21:13:16.496766 2026] [:error] [pid 62950:tid 62954] [client 20.203.232.30:34606] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adj3bNCxAxfAl1KOpNPNrgAAAwA"]
[Fri Apr 10 21:13:17.029121 2026] [:error] [pid 62950:tid 62955] [client 20.203.232.30:34596] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adj3bdCxAxfAl1KOpNPNrwAAAwE"]
[Fri Apr 10 21:13:17.609188 2026] [:error] [pid 62651:tid 62671] [client 20.203.232.30:40492] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "adj3bTbAH0le57SIaqwhowAAAdI"]
[Fri Apr 10 21:13:18.128358 2026] [proxy_fcgi:error] [pid 13189:tid 13214] [client 20.203.232.30:56254] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:18.774962 2026] [proxy_fcgi:error] [pid 25984:tid 26003] [client 20.203.232.30:40487] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:19.273938 2026] [:error] [pid 25984:tid 26003] [client 20.203.232.30:40487] [client 20.203.232.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adj3b7sdbY_MC14OH14dIwAAAU4"]
[Fri Apr 10 21:13:19.826472 2026] [proxy_fcgi:error] [pid 25984:tid 26004] [client 20.203.232.30:56242] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:22.324869 2026] [proxy_fcgi:error] [pid 62884:tid 62915] [client 20.203.232.30:56910] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:22.600183 2026] [proxy_fcgi:error] [pid 62884:tid 62898] [client 20.203.232.30:56910] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:22.839370 2026] [proxy_fcgi:error] [pid 62884:tid 62909] [client 20.203.232.30:56910] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:23.078292 2026] [proxy_fcgi:error] [pid 62884:tid 62903] [client 20.203.232.30:56910] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:23.328916 2026] [proxy_fcgi:error] [pid 62884:tid 62901] [client 20.203.232.30:56910] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 21:13:23.563415 2026] [:error] [pid 62884:tid 62905] [client 20.203.232.30:56910] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adj3c-UCK1xrhnnmpo2ArQAAAs4"]
[Fri Apr 10 21:13:24.230880 2026] [:error] [pid 62769:tid 62773] [client 20.203.232.30:6596] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adj3dMWsSnfLoB8ifjBJnQAAAkI"]
[Fri Apr 10 21:13:24.805642 2026] [:error] [pid 62819:tid 62835] [client 20.203.232.30:6278] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adj3dPU20EyPf7NlsldligAAAo0"]
[Fri Apr 10 21:13:25.446196 2026] [:error] [pid 63023:tid 63029] [client 20.203.232.30:50055] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adj3daOf5IOzVN1LeZ9wfwAAA0Q"]
[Fri Apr 10 21:13:26.062867 2026] [:error] [pid 62884:tid 62901] [client 20.203.232.30:33979] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adj3duUCK1xrhnnmpo2AsgAAAso"]
[Fri Apr 10 21:13:26.641259 2026] [:error] [pid 62615:tid 62636] [client 20.203.232.30:28796] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adj3dtSLyvZ9rO5uVseVOQAAAZM"]
[Fri Apr 10 21:13:27.195066 2026] [:error] [pid 3934:tid 3952] [client 20.203.232.30:32016] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adj3d4a41m-BS8mg82fmcgAAAM0"]
[Fri Apr 10 21:13:27.711232 2026] [:error] [pid 63062:tid 63068] [client 20.203.232.30:34562] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adj3d52HtsmV85NqkMfq6gAAA4Q"]
[Fri Apr 10 21:13:28.427667 2026] [:error] [pid 62884:tid 62902] [client 20.203.232.30:27715] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adj3eOUCK1xrhnnmpo2AtgAAAss"]
[Fri Apr 10 21:13:28.935251 2026] [:error] [pid 62651:tid 62661] [client 20.203.232.30:56919] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adj3eDbAH0le57SIaqwhrAAAAcg"]
[Fri Apr 10 21:13:29.560655 2026] [:error] [pid 25984:tid 26002] [client 20.203.232.30:51853] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adj3ebsdbY_MC14OH14dNwAAAU0"]
[Fri Apr 10 21:13:30.188824 2026] [:error] [pid 63062:tid 63085] [client 20.203.232.30:51900] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adj3ep2HtsmV85NqkMfq-AAAA5U"]
[Fri Apr 10 21:13:30.805130 2026] [:error] [pid 13101:tid 13139] [client 20.203.232.30:41866] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adj3et8Ldw85818pj2rYPwAAAIY"]
[Fri Apr 10 21:13:31.346480 2026] [:error] [pid 63062:tid 63064] [client 20.203.232.30:50062] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adj3e52HtsmV85NqkMfq_AAAA4A"]
[Fri Apr 10 21:13:32.037771 2026] [:error] [pid 13100:tid 13125] [client 20.203.232.30:56924] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adj3fFzg-ZkZ0InWIP29ewAAARQ"]
[Fri Apr 10 21:13:32.584417 2026] [:error] [pid 63062:tid 63072] [client 20.203.232.30:27717] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adj3fJ2HtsmV85NqkMfq_wAAA4g"]
[Fri Apr 10 21:13:33.325809 2026] [:error] [pid 62884:tid 62909] [client 20.203.232.30:34574] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj3feUCK1xrhnnmpo2AvwAAAtI"]
[Fri Apr 10 21:13:33.928801 2026] [:error] [pid 63062:tid 63085] [client 20.203.232.30:50068] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj3fZ2HtsmV85NqkMfrBgAAA5U"]
[Fri Apr 10 21:13:34.536649 2026] [:error] [pid 63062:tid 63070] [client 20.203.232.30:40504] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj3fp2HtsmV85NqkMfrCgAAA4Y"]
[Fri Apr 10 21:13:35.714295 2026] [:error] [pid 62769:tid 62790] [client 20.203.232.30:33982] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj3f8WsSnfLoB8ifjBJsAAAAlM"]
[Fri Apr 10 21:13:36.270525 2026] [:error] [pid 63134:tid 63140] [client 20.203.232.30:6300] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adj3gNFALqPDwWi6eJKeAwAAA8M"]
[Fri Apr 10 21:13:36.932157 2026] [:error] [pid 63062:tid 63084] [client 20.203.232.30:56900] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adj3gJ2HtsmV85NqkMfrEQAAA5Q"]
[Fri Apr 10 21:13:37.590307 2026] [:error] [pid 62710:tid 62736] [client 20.203.232.30:56917] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adj3geME7qrf5xEWWJsQFwAAAhc"]
[Fri Apr 10 21:13:38.149013 2026] [:error] [pid 63062:tid 63074] [client 20.203.232.30:56201] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "adj3gp2HtsmV85NqkMfrGQAAA4o"]
[Fri Apr 10 21:13:38.629508 2026] [:error] [pid 62950:tid 62968] [client 20.203.232.30:54376] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adj3gtCxAxfAl1KOpNPN5AAAAw0"]
[Fri Apr 10 21:13:39.172981 2026] [:error] [pid 62950:tid 62955] [client 20.203.232.30:56231] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adj3g9CxAxfAl1KOpNPN6AAAAwE"]
[Fri Apr 10 21:13:39.721710 2026] [:error] [pid 62710:tid 62722] [client 20.203.232.30:56225] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adj3g-ME7qrf5xEWWJsQHAAAAgk"]
[Fri Apr 10 21:13:40.260864 2026] [:error] [pid 13189:tid 13213] [client 20.203.232.30:54385] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adj3hJAxiJKPums3eBC10AAAAFU"]
[Fri Apr 10 21:13:40.963002 2026] [:error] [pid 3934:tid 3945] [client 20.203.232.30:51855] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adj3hIa41m-BS8mg82fmfAAAAMY"]
[Fri Apr 10 21:13:41.578706 2026] [:error] [pid 25984:tid 26007] [client 20.203.232.30:51842] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adj3hbsdbY_MC14OH14dSAAAAVI"]
[Fri Apr 10 21:13:42.079740 2026] [:error] [pid 63062:tid 63088] [client 20.203.232.30:6325] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adj3hp2HtsmV85NqkMfrJQAAA5g"]
[Fri Apr 10 21:13:42.586455 2026] [:error] [pid 63062:tid 63070] [client 20.203.232.30:50110] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adj3hp2HtsmV85NqkMfrJwAAA4Y"]
[Fri Apr 10 21:13:43.129322 2026] [:error] [pid 62769:tid 62790] [client 20.203.232.30:36516] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "adj3h8WsSnfLoB8ifjBJvQAAAlM"]
[Fri Apr 10 21:13:43.619726 2026] [:error] [pid 63134:tid 63159] [client 20.203.232.30:27755] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "adj3h9FALqPDwWi6eJKeEAAAA9Y"]
[Fri Apr 10 21:13:44.142798 2026] [:error] [pid 62884:tid 62910] [client 20.203.232.30:56219] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "adj3iOUCK1xrhnnmpo2AzAAAAtM"]
[Fri Apr 10 21:13:44.685612 2026] [:error] [pid 63134:tid 63150] [client 20.203.232.30:56953] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "adj3iNFALqPDwWi6eJKeHwAAA80"]
[Fri Apr 10 21:13:45.199830 2026] [:error] [pid 13102:tid 13174] [client 20.203.232.30:6292] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "adj3if9xLvjW2guI55bEgAAAAA4"]
[Fri Apr 10 21:13:45.699978 2026] [:error] [pid 63134:tid 63149] [client 20.203.232.30:54353] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "adj3idFALqPDwWi6eJKeJwAAA8w"]
[Fri Apr 10 21:13:46.274921 2026] [:error] [pid 62769:tid 62786] [client 20.203.232.30:41899] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "adj3isWsSnfLoB8ifjBJwgAAAk8"]
[Fri Apr 10 21:13:46.887072 2026] [:error] [pid 62769:tid 62786] [client 20.203.232.30:54350] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "adj3isWsSnfLoB8ifjBJxAAAAk8"]
[Fri Apr 10 21:13:47.365083 2026] [:error] [pid 25984:tid 26011] [client 20.203.232.30:56227] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "adj3i7sdbY_MC14OH14dUQAAAVY"]
[Fri Apr 10 21:13:47.854838 2026] [:error] [pid 13189:tid 13192] [client 20.203.232.30:6602] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "adj3i5AxiJKPums3eBC11wAAAEA"]
[Fri Apr 10 21:13:48.388515 2026] [:error] [pid 62769:tid 62786] [client 20.203.232.30:6922] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "adj3jMWsSnfLoB8ifjBJxwAAAk8"]
[Fri Apr 10 21:13:48.858557 2026] [:error] [pid 13102:tid 13179] [client 20.203.232.30:32055] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "adj3jP9xLvjW2guI55bEhwAAABM"]
[Fri Apr 10 21:13:49.373625 2026] [:error] [pid 63023:tid 63039] [client 20.203.232.30:34582] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3jaOf5IOzVN1LeZ9wvAAAA04"]
[Fri Apr 10 21:13:49.853944 2026] [:error] [pid 3934:tid 3940] [client 20.203.232.30:56908] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3jYa41m-BS8mg82fmiQAAAME"]
[Fri Apr 10 21:13:50.407595 2026] [:error] [pid 62884:tid 62895] [client 20.203.232.30:40510] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3juUCK1xrhnnmpo2A0AAAAsQ"]
[Fri Apr 10 21:13:50.970958 2026] [:error] [pid 63023:tid 63035] [client 20.203.232.30:40462] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adj3jqOf5IOzVN1LeZ9wwgAAA0o"]
[Fri Apr 10 21:13:51.475106 2026] [:error] [pid 62884:tid 62910] [client 20.203.232.30:51862] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "adj3j-UCK1xrhnnmpo2A0QAAAtM"]
[Fri Apr 10 21:13:51.992780 2026] [:error] [pid 3934:tid 3945] [client 20.203.232.30:50074] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "adj3j4a41m-BS8mg82fmlAAAAMY"]
[Fri Apr 10 21:13:52.533356 2026] [:error] [pid 63062:tid 63088] [client 20.203.232.30:36518] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "adj3kJ2HtsmV85NqkMfrOgAAA5g"]
[Fri Apr 10 21:13:53.048953 2026] [:error] [pid 25984:tid 26000] [client 20.203.232.30:6284] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "adj3kbsdbY_MC14OH14dYAAAAUs"]
[Fri Apr 10 21:13:53.550706 2026] [:error] [pid 13102:tid 13169] [client 20.203.232.30:6930] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "adj3kf9xLvjW2guI55bEjQAAAAk"]
[Fri Apr 10 21:13:54.076544 2026] [:error] [pid 13102:tid 13161] [client 20.203.232.30:36500] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "adj3kv9xLvjW2guI55bEkgAAAAE"]
[Fri Apr 10 21:13:54.642091 2026] [:error] [pid 13101:tid 13149] [client 20.203.232.30:6304] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "adj3kt8Ldw85818pj2rYWwAAAJA"]
[Fri Apr 10 21:13:55.173729 2026] [:error] [pid 63023:tid 63025] [client 20.203.232.30:32033] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "adj3k6Of5IOzVN1LeZ9wyQAAA0A"]
[Fri Apr 10 21:13:55.680288 2026] [:error] [pid 62710:tid 62722] [client 20.203.232.30:6335] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "adj3k-ME7qrf5xEWWJsQIQAAAgk"]
[Fri Apr 10 21:13:56.176578 2026] [:error] [pid 25984:tid 26000] [client 20.203.232.30:27743] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "adj3lLsdbY_MC14OH14dYwAAAUs"]
[Fri Apr 10 21:13:56.700476 2026] [:error] [pid 63023:tid 63025] [client 20.203.232.30:56193] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "adj3lKOf5IOzVN1LeZ9wygAAA0A"]
[Fri Apr 10 21:13:57.281165 2026] [:error] [pid 13100:tid 13115] [client 20.203.232.30:32057] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "adj3lVzg-ZkZ0InWIP29kAAAAQo"]
[Fri Apr 10 21:13:57.787615 2026] [:error] [pid 13101:tid 13134] [client 20.203.232.30:33920] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "adj3ld8Ldw85818pj2rYZQAAAIE"]
[Fri Apr 10 21:13:58.280996 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:51895] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "adj3lrsdbY_MC14OH14dbgAAAVc"]
[Fri Apr 10 21:13:58.837678 2026] [:error] [pid 13101:tid 13147] [client 20.203.232.30:50060] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "adj3lt8Ldw85818pj2rYZwAAAI4"]
[Fri Apr 10 21:13:59.405688 2026] [:error] [pid 13189:tid 13209] [client 20.203.232.30:56935] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "adj3l5AxiJKPums3eBC1_QAAAFE"]
[Fri Apr 10 21:13:59.973252 2026] [:error] [pid 25984:tid 26012] [client 20.203.232.30:40464] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "adj3l7sdbY_MC14OH14dcgAAAVc"]
[Fri Apr 10 21:14:00.446978 2026] [:error] [pid 3934:tid 3957] [client 20.203.232.30:27744] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "adj3mIa41m-BS8mg82fmpAAAANI"]
[Fri Apr 10 21:14:00.977980 2026] [:error] [pid 3934:tid 3957] [client 20.203.232.30:36515] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "adj3mIa41m-BS8mg82fmqAAAANI"]
[Fri Apr 10 21:14:01.510014 2026] [:error] [pid 62651:tid 62670] [client 20.203.232.30:34601] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "adj3mTbAH0le57SIaqwhyQAAAdE"]
[Fri Apr 10 21:14:02.013306 2026] [:error] [pid 13102:tid 13162] [client 20.203.232.30:51896] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "adj3mv9xLvjW2guI55bEoAAAAAI"]
[Fri Apr 10 21:14:02.587016 2026] [:error] [pid 13100:tid 13115] [client 20.203.232.30:36493] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "adj3mlzg-ZkZ0InWIP29mAAAAQo"]
[Fri Apr 10 21:14:03.099125 2026] [:error] [pid 13100:tid 13116] [client 20.203.232.30:56245] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "adj3m1zg-ZkZ0InWIP29mQAAAQs"]
[Fri Apr 10 21:14:03.713795 2026] [:error] [pid 62884:tid 62902] [client 20.203.232.30:6950] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "adj3m-UCK1xrhnnmpo2A4gAAAss"]
[Fri Apr 10 21:14:04.204910 2026] [:error] [pid 63023:tid 63036] [client 20.203.232.30:6972] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adj3nKOf5IOzVN1LeZ9wzgAAA0s"]
[Fri Apr 10 21:14:04.750229 2026] [:error] [pid 63023:tid 63036] [client 20.203.232.30:56927] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adj3nKOf5IOzVN1LeZ9wzwAAA0s"]
[Fri Apr 10 21:14:05.299847 2026] [:error] [pid 63023:tid 63025] [client 20.203.232.30:6302] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adj3naOf5IOzVN1LeZ9w0gAAA0A"]
[Fri Apr 10 21:14:05.813969 2026] [:error] [pid 13101:tid 13137] [client 20.203.232.30:6610] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "adj3nd8Ldw85818pj2rYdQAAAIQ"]
[Fri Apr 10 21:14:06.354089 2026] [:error] [pid 13100:tid 13127] [client 20.203.232.30:56237] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adj3nlzg-ZkZ0InWIP29pAAAARY"]
[Fri Apr 10 21:14:06.867107 2026] [:error] [pid 13100:tid 13122] [client 20.203.232.30:56236] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adj3nlzg-ZkZ0InWIP29pwAAARE"]
[Fri Apr 10 21:14:07.376094 2026] [:error] [pid 13101:tid 13148] [client 20.203.232.30:41887] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adj3n98Ldw85818pj2rYewAAAI8"]
[Fri Apr 10 21:14:07.892701 2026] [:error] [pid 62615:tid 62626] [client 20.203.232.30:56898] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adj3n9SLyvZ9rO5uVseVYQAAAYk"]
[Fri Apr 10 21:14:08.524461 2026] [:error] [pid 13101:tid 13148] [client 20.203.232.30:27748] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adj3oN8Ldw85818pj2rYgAAAAI8"]
[Fri Apr 10 21:14:09.281285 2026] [:error] [pid 62819:tid 62825] [client 20.203.232.30:50092] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adj3ofU20EyPf7NlsldlmAAAAoM"]
[Fri Apr 10 21:14:09.960304 2026] [:error] [pid 62819:tid 62824] [client 20.203.232.30:33943] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adj3ofU20EyPf7NlsldlmwAAAoI"]
[Fri Apr 10 21:14:10.501824 2026] [:error] [pid 62615:tid 62641] [client 20.203.232.30:34579] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adj3otSLyvZ9rO5uVseVaAAAAZg"]
[Fri Apr 10 21:14:11.123858 2026] [:error] [pid 62615:tid 62628] [client 20.203.232.30:33958] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adj3o9SLyvZ9rO5uVseVcAAAAYs"]
[Fri Apr 10 21:14:11.661058 2026] [:error] [pid 62615:tid 62641] [client 20.203.232.30:54345] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adj3o9SLyvZ9rO5uVseVdgAAAZg"]
[Fri Apr 10 21:14:12.243301 2026] [:error] [pid 13101:tid 13138] [client 20.203.232.30:34570] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adj3pN8Ldw85818pj2rYiAAAAIU"]
[Fri Apr 10 21:14:12.844003 2026] [:error] [pid 62651:tid 62663] [client 20.203.232.30:56958] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adj3pDbAH0le57SIaqwh5gAAAco"]
[Fri Apr 10 21:14:13.495279 2026] [:error] [pid 13102:tid 13163] [client 20.203.232.30:6959] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adj3pf9xLvjW2guI55bEpgAAAAM"]
[Fri Apr 10 21:14:14.238041 2026] [:error] [pid 25984:tid 25994] [client 20.203.232.30:36489] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adj3prsdbY_MC14OH14dfQAAAUU"]
[Fri Apr 10 21:14:14.809698 2026] [:error] [pid 62651:tid 62654] [client 20.203.232.30:6941] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adj3pjbAH0le57SIaqwh7QAAAcE"]
[Fri Apr 10 21:14:15.439075 2026] [:error] [pid 62819:tid 62834] [client 20.203.232.30:56253] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adj3p_U20EyPf7NlsldlrAAAAow"]
[Fri Apr 10 21:14:15.980873 2026] [:error] [pid 3934:tid 3951] [client 20.203.232.30:6319] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adj3p4a41m-BS8mg82fnEQAAAMw"]
[Fri Apr 10 21:14:16.665668 2026] [:error] [pid 25984:tid 25994] [client 20.203.232.30:40469] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adj3qLsdbY_MC14OH14dgAAAAUU"]
[Fri Apr 10 21:14:17.917598 2026] [:error] [pid 13100:tid 13127] [client 20.203.232.30:51843] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adj3qVzg-ZkZ0InWIP29swAAARY"]
[Fri Apr 10 21:14:18.651575 2026] [:error] [pid 62819:tid 62827] [client 20.203.232.30:40476] [client 20.203.232.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adj3qvU20EyPf7NlsldlvgAAAoU"]
[Sat Apr 11 02:48:42.446186 2026] [proxy_fcgi:error] [pid 21569:tid 21651] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:42.688426 2026] [proxy_fcgi:error] [pid 21569:tid 21664] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:43.003472 2026] [proxy_fcgi:error] [pid 21569:tid 21654] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:43.284882 2026] [proxy_fcgi:error] [pid 21569:tid 21648] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:43.583550 2026] [proxy_fcgi:error] [pid 21569:tid 21667] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:43.875814 2026] [proxy_fcgi:error] [pid 21569:tid 21646] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:44.191795 2026] [proxy_fcgi:error] [pid 21569:tid 21649] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:44.428798 2026] [proxy_fcgi:error] [pid 21569:tid 21657] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:44.729878 2026] [proxy_fcgi:error] [pid 21569:tid 21653] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:45.111616 2026] [proxy_fcgi:error] [pid 21569:tid 21655] [client 172.213.241.33:63696] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:48:45.344464 2026] [:error] [pid 21569:tid 21664] [client 172.213.241.33:63696] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adlGDXAvQTgvXJ6vHoqzVAAAAJA"]
[Sat Apr 11 02:48:46.097305 2026] [:error] [pid 21568:tid 21576] [client 172.213.241.33:64263] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adlGDoiz5v_ljZxkpR_qOgAAAQQ"]
[Sat Apr 11 02:48:46.993461 2026] [:error] [pid 21568:tid 21592] [client 172.213.241.33:65000] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adlGDoiz5v_ljZxkpR_qQAAAARQ"]
[Sat Apr 11 02:48:47.554497 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:64368] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adlGDyGQ1M5d8fQSsLHcgwAAAA8"]
[Sat Apr 11 02:48:48.255911 2026] [:error] [pid 21569:tid 21662] [client 172.213.241.33:64273] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "adlGEHAvQTgvXJ6vHoqzWQAAAI8"]
[Sat Apr 11 02:48:49.237007 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:64357] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "adlGESGQ1M5d8fQSsLHcjQAAAA8"]
[Sat Apr 11 02:48:49.803685 2026] [:error] [pid 21570:tid 21672] [client 172.213.241.33:63699] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "adlGETKs5t9xRSNL6cnioAAAAEU"]
[Sat Apr 11 02:48:50.285569 2026] [:error] [pid 21570:tid 21687] [client 172.213.241.33:63639] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "adlGEjKs5t9xRSNL6cnipQAAAE0"]
[Sat Apr 11 02:48:50.824386 2026] [:error] [pid 21570:tid 21663] [client 172.213.241.33:63699] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "adlGEjKs5t9xRSNL6cnipwAAAEE"]
[Sat Apr 11 02:48:51.431893 2026] [:error] [pid 21570:tid 21672] [client 172.213.241.33:63683] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "adlGEzKs5t9xRSNL6cnirwAAAEU"]
[Sat Apr 11 02:48:51.947575 2026] [:error] [pid 21568:tid 21589] [client 172.213.241.33:64315] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "adlGE4iz5v_ljZxkpR_qQwAAARE"]
[Sat Apr 11 02:48:52.618827 2026] [:error] [pid 21570:tid 21670] [client 172.213.241.33:64317] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "adlGFDKs5t9xRSNL6cniuAAAAEQ"]
[Sat Apr 11 02:48:53.187415 2026] [:error] [pid 55451:tid 55476] [client 172.213.241.33:64339] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adlGFXApxuyB7yCS5Rk0ugAAANc"]
[Sat Apr 11 02:48:53.737576 2026] [:error] [pid 21570:tid 21672] [client 172.213.241.33:64942] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adlGFTKs5t9xRSNL6cnivQAAAEU"]
[Sat Apr 11 02:48:54.563833 2026] [:error] [pid 21570:tid 21685] [client 172.213.241.33:64356] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adlGFjKs5t9xRSNL6cniwAAAAEw"]
[Sat Apr 11 02:48:55.190408 2026] [:error] [pid 55451:tid 55473] [client 172.213.241.33:63701] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "adlGF3ApxuyB7yCS5Rk0vwAAANQ"]
[Sat Apr 11 02:48:55.703497 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63643] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "adlGFyGQ1M5d8fQSsLHcnwAAAAs"]
[Sat Apr 11 02:48:56.170913 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:63732] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "adlGGCGQ1M5d8fQSsLHcowAAAA0"]
[Sat Apr 11 02:48:56.655703 2026] [:error] [pid 21568:tid 21594] [client 172.213.241.33:63627] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "adlGGIiz5v_ljZxkpR_qUQAAARY"]
[Sat Apr 11 02:48:57.257512 2026] [:error] [pid 21568:tid 21576] [client 172.213.241.33:63647] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "adlGGYiz5v_ljZxkpR_qVQAAAQQ"]
[Sat Apr 11 02:48:57.721777 2026] [:error] [pid 21706:tid 21726] [client 172.213.241.33:64327] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adlGGSGQ1M5d8fQSsLHcqQAAABI"]
[Sat Apr 11 02:48:58.284949 2026] [:error] [pid 21569:tid 21660] [client 172.213.241.33:64365] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adlGGnAvQTgvXJ6vHoqzZQAAAI4"]
[Sat Apr 11 02:48:58.849017 2026] [:error] [pid 21706:tid 21728] [client 172.213.241.33:63728] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adlGGiGQ1M5d8fQSsLHcqwAAABQ"]
[Sat Apr 11 02:48:59.454182 2026] [:error] [pid 21706:tid 21711] [client 172.213.241.33:63738] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adlGGyGQ1M5d8fQSsLHcsQAAAAM"]
[Sat Apr 11 02:48:59.973890 2026] [:error] [pid 21706:tid 21731] [client 172.213.241.33:65019] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "adlGGyGQ1M5d8fQSsLHctgAAABc"]
[Sat Apr 11 02:49:00.499586 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:64348] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "adlGHHApxuyB7yCS5Rk0yQAAANg"]
[Sat Apr 11 02:49:00.984068 2026] [:error] [pid 21569:tid 21656] [client 172.213.241.33:63718] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "adlGHHAvQTgvXJ6vHoqzZgAAAIs"]
[Sat Apr 11 02:49:01.458198 2026] [:error] [pid 21568:tid 21595] [client 172.213.241.33:64354] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "adlGHYiz5v_ljZxkpR_qXwAAARc"]
[Sat Apr 11 02:49:01.985996 2026] [:error] [pid 21706:tid 21732] [client 172.213.241.33:64995] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "adlGHSGQ1M5d8fQSsLHcwgAAABg"]
[Sat Apr 11 02:49:02.454762 2026] [:error] [pid 21568:tid 21580] [client 172.213.241.33:64374] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "adlGHoiz5v_ljZxkpR_qZAAAAQg"]
[Sat Apr 11 02:49:02.976036 2026] [:error] [pid 21570:tid 21697] [client 172.213.241.33:63653] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "adlGHjKs5t9xRSNL6cnizQAAAFc"]
[Sat Apr 11 02:49:03.448187 2026] [:error] [pid 21706:tid 21726] [client 172.213.241.33:64983] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "adlGHyGQ1M5d8fQSsLHcygAAABI"]
[Sat Apr 11 02:49:03.916750 2026] [:error] [pid 21706:tid 21725] [client 172.213.241.33:64270] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adlGHyGQ1M5d8fQSsLHczwAAABE"]
[Sat Apr 11 02:49:04.403303 2026] [:error] [pid 21569:tid 21648] [client 172.213.241.33:64295] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adlGIHAvQTgvXJ6vHoqzbgAAAIM"]
[Sat Apr 11 02:49:04.880640 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:64288] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adlGICGQ1M5d8fQSsLHc1wAAAA0"]
[Sat Apr 11 02:49:05.352394 2026] [:error] [pid 21569:tid 21680] [client 172.213.241.33:63636] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adlGIXAvQTgvXJ6vHoqzbwAAAJc"]
[Sat Apr 11 02:49:05.853146 2026] [:error] [pid 21706:tid 21718] [client 172.213.241.33:64944] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "adlGISGQ1M5d8fQSsLHc3QAAAAo"]
[Sat Apr 11 02:49:06.316971 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:64978] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "adlGIiGQ1M5d8fQSsLHc4gAAABA"]
[Sat Apr 11 02:49:06.797451 2026] [:error] [pid 21706:tid 21716] [client 172.213.241.33:64919] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "adlGIiGQ1M5d8fQSsLHc5QAAAAg"]
[Sat Apr 11 02:49:07.311772 2026] [:error] [pid 21570:tid 21693] [client 172.213.241.33:64350] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/13.php"] [unique_id "adlGIzKs5t9xRSNL6cni2AAAAFM"]
[Sat Apr 11 02:49:07.833470 2026] [:error] [pid 21569:tid 21669] [client 172.213.241.33:64981] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wert.php"] [unique_id "adlGI3AvQTgvXJ6vHoqzdAAAAJI"]
[Sat Apr 11 02:49:08.367510 2026] [:error] [pid 21570:tid 21690] [client 172.213.241.33:64362] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wert.php"] [unique_id "adlGJDKs5t9xRSNL6cni2wAAAFA"]
[Sat Apr 11 02:49:08.827445 2026] [:error] [pid 21570:tid 21679] [client 172.213.241.33:64993] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wert.php"] [unique_id "adlGJDKs5t9xRSNL6cni3wAAAEk"]
[Sat Apr 11 02:49:09.325906 2026] [:error] [pid 21570:tid 21682] [client 172.213.241.33:64908] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wert.php"] [unique_id "adlGJTKs5t9xRSNL6cni4wAAAEs"]
[Sat Apr 11 02:49:09.851448 2026] [:error] [pid 21569:tid 21650] [client 172.213.241.33:62437] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/11.php"] [unique_id "adlGJXAvQTgvXJ6vHoqzegAAAIU"]
[Sat Apr 11 02:49:10.387631 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:64925] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/11.php"] [unique_id "adlGJiGQ1M5d8fQSsLHc8gAAAA4"]
[Sat Apr 11 02:49:10.878872 2026] [:error] [pid 21706:tid 21730] [client 172.213.241.33:63657] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/11.php"] [unique_id "adlGJiGQ1M5d8fQSsLHc-AAAABY"]
[Sat Apr 11 02:49:11.363344 2026] [:error] [pid 55451:tid 55466] [client 172.213.241.33:64962] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/11.php"] [unique_id "adlGJ3ApxuyB7yCS5Rk00AAAAM0"]
[Sat Apr 11 02:49:12.625179 2026] [:error] [pid 21568:tid 21587] [client 172.213.241.33:64927] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/p.php"] [unique_id "adlGKIiz5v_ljZxkpR_qdQAAAQ8"]
[Sat Apr 11 02:49:13.226861 2026] [:error] [pid 21570:tid 21694] [client 172.213.241.33:63741] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/p.php"] [unique_id "adlGKTKs5t9xRSNL6cni7QAAAFQ"]
[Sat Apr 11 02:49:13.804742 2026] [:error] [pid 21569:tid 21671] [client 172.213.241.33:64333] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/p.php"] [unique_id "adlGKXAvQTgvXJ6vHoqzgQAAAJM"]
[Sat Apr 11 02:49:14.413993 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:64277] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/p.php"] [unique_id "adlGKiGQ1M5d8fQSsLHdAwAAABA"]
[Sat Apr 11 02:49:14.938569 2026] [:error] [pid 21570:tid 21681] [client 172.213.241.33:63681] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adlGKjKs5t9xRSNL6cni9AAAAEo"]
[Sat Apr 11 02:49:15.549925 2026] [:error] [pid 21569:tid 21662] [client 172.213.241.33:64929] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adlGK3AvQTgvXJ6vHoqzhQAAAI8"]
[Sat Apr 11 02:49:16.060734 2026] [:error] [pid 21706:tid 21709] [client 172.213.241.33:63719] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adlGLCGQ1M5d8fQSsLHdDQAAAAE"]
[Sat Apr 11 02:49:16.546197 2026] [:error] [pid 21568:tid 21579] [client 172.213.241.33:63625] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "adlGLIiz5v_ljZxkpR_qfAAAAQc"]
[Sat Apr 11 02:49:17.025093 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:63637] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adlGLYiz5v_ljZxkpR_qfwAAAQY"]
[Sat Apr 11 02:49:17.907147 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:64308] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adlGLSGQ1M5d8fQSsLHdFQAAAAs"]
[Sat Apr 11 02:49:18.439460 2026] [:error] [pid 55451:tid 55455] [client 172.213.241.33:63631] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adlGLnApxuyB7yCS5Rk02gAAAMI"]
[Sat Apr 11 02:49:19.062792 2026] [:error] [pid 21706:tid 21712] [client 172.213.241.33:63733] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adlGLyGQ1M5d8fQSsLHdGgAAAAQ"]
[Sat Apr 11 02:49:19.650272 2026] [:error] [pid 21568:tid 21590] [client 172.213.241.33:63729] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adlGL4iz5v_ljZxkpR_qiAAAARI"]
[Sat Apr 11 02:49:20.124872 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:64901] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adlGMCGQ1M5d8fQSsLHdHgAAABM"]
[Sat Apr 11 02:49:20.651184 2026] [:error] [pid 55451:tid 55458] [client 172.213.241.33:63036] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adlGMHApxuyB7yCS5Rk05QAAAMU"]
[Sat Apr 11 02:49:21.334871 2026] [:error] [pid 21568:tid 21575] [client 172.213.241.33:62419] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "adlGMYiz5v_ljZxkpR_qjAAAAQM"]
[Sat Apr 11 02:49:21.812794 2026] [:error] [pid 55451:tid 55466] [client 172.213.241.33:63641] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tea.php"] [unique_id "adlGMXApxuyB7yCS5Rk07AAAAM0"]
[Sat Apr 11 02:49:22.400041 2026] [:error] [pid 21570:tid 21675] [client 172.213.241.33:64921] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tea.php"] [unique_id "adlGMjKs5t9xRSNL6cnjBAAAAEc"]
[Sat Apr 11 02:49:22.869264 2026] [:error] [pid 55451:tid 55468] [client 172.213.241.33:63634] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tea.php"] [unique_id "adlGMnApxuyB7yCS5Rk09QAAAM8"]
[Sat Apr 11 02:49:23.352498 2026] [:error] [pid 21570:tid 21692] [client 172.213.241.33:62351] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tea.php"] [unique_id "adlGMzKs5t9xRSNL6cnjBwAAAFI"]
[Sat Apr 11 02:49:23.835174 2026] [:error] [pid 55451:tid 55461] [client 172.213.241.33:64961] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/seo.php"] [unique_id "adlGM3ApxuyB7yCS5Rk0_gAAAMg"]
[Sat Apr 11 02:49:24.299401 2026] [:error] [pid 55451:tid 55456] [client 172.213.241.33:62432] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/seo.php"] [unique_id "adlGNHApxuyB7yCS5Rk1AQAAAMM"]
[Sat Apr 11 02:49:24.787401 2026] [:error] [pid 21570:tid 21693] [client 172.213.241.33:64986] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/seo.php"] [unique_id "adlGNDKs5t9xRSNL6cnjCQAAAFM"]
[Sat Apr 11 02:49:25.276406 2026] [:error] [pid 55451:tid 55457] [client 172.213.241.33:64958] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/seo.php"] [unique_id "adlGNXApxuyB7yCS5Rk1BwAAAMQ"]
[Sat Apr 11 02:49:25.743082 2026] [:error] [pid 21568:tid 21593] [client 172.213.241.33:64274] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "adlGNYiz5v_ljZxkpR_qogAAARU"]
[Sat Apr 11 02:49:26.269399 2026] [:error] [pid 21570:tid 21672] [client 172.213.241.33:62404] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "adlGNjKs5t9xRSNL6cnjDgAAAEU"]
[Sat Apr 11 02:49:26.761893 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:64334] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "adlGNiGQ1M5d8fQSsLHdOAAAABU"]
[Sat Apr 11 02:49:27.234192 2026] [:error] [pid 21706:tid 21710] [client 172.213.241.33:64938] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "adlGNyGQ1M5d8fQSsLHdPQAAAAI"]
[Sat Apr 11 02:49:27.720656 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:64956] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "adlGNyGQ1M5d8fQSsLHdQQAAAAc"]
[Sat Apr 11 02:49:28.217693 2026] [:error] [pid 21706:tid 21710] [client 172.213.241.33:64294] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "adlGOCGQ1M5d8fQSsLHdSQAAAAI"]
[Sat Apr 11 02:49:28.745533 2026] [:error] [pid 21570:tid 21685] [client 172.213.241.33:63656] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "adlGODKs5t9xRSNL6cnjGgAAAEw"]
[Sat Apr 11 02:49:29.397556 2026] [:error] [pid 21706:tid 21709] [client 172.213.241.33:63684] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "adlGOSGQ1M5d8fQSsLHdVQAAAAE"]
[Sat Apr 11 02:49:29.975508 2026] [:error] [pid 21569:tid 21662] [client 172.213.241.33:63713] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "adlGOXAvQTgvXJ6vHoqzvgAAAI8"]
[Sat Apr 11 02:49:30.544525 2026] [:error] [pid 55451:tid 55475] [client 172.213.241.33:63635] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "adlGOnApxuyB7yCS5Rk1DgAAANY"]
[Sat Apr 11 02:49:31.052000 2026] [:error] [pid 21570:tid 21675] [client 172.213.241.33:64921] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "adlGOzKs5t9xRSNL6cnjIQAAAEc"]
[Sat Apr 11 02:49:31.570533 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:64907] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "adlGO3ApxuyB7yCS5Rk1EwAAANg"]
[Sat Apr 11 02:49:32.059000 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:64998] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "adlGPCGQ1M5d8fQSsLHdYgAAABU"]
[Sat Apr 11 02:49:32.537458 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:64932] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "adlGPCGQ1M5d8fQSsLHdZQAAAAs"]
[Sat Apr 11 02:49:33.066514 2026] [:error] [pid 21570:tid 21661] [client 172.213.241.33:62463] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "adlGPTKs5t9xRSNL6cnjJgAAAEA"]
[Sat Apr 11 02:49:33.563379 2026] [:error] [pid 55451:tid 55475] [client 172.213.241.33:64990] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "adlGPXApxuyB7yCS5Rk1HAAAANY"]
[Sat Apr 11 02:49:34.726297 2026] [:error] [pid 21568:tid 21575] [client 172.213.241.33:63727] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "adlGPoiz5v_ljZxkpR_qyAAAAQM"]
[Sat Apr 11 02:49:35.343014 2026] [:error] [pid 21570:tid 21681] [client 172.213.241.33:63623] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "adlGPzKs5t9xRSNL6cnjKwAAAEo"]
[Sat Apr 11 02:49:35.958994 2026] [:error] [pid 55451:tid 55473] [client 172.213.241.33:64287] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "adlGP3ApxuyB7yCS5Rk1HgAAANQ"]
[Sat Apr 11 02:49:36.480890 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:63702] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "adlGQCGQ1M5d8fQSsLHdeAAAABM"]
[Sat Apr 11 02:49:37.005835 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:64377] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "adlGQSGQ1M5d8fQSsLHdewAAAAw"]
[Sat Apr 11 02:49:37.522089 2026] [:error] [pid 55451:tid 55468] [client 172.213.241.33:64257] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "adlGQXApxuyB7yCS5Rk1JwAAAM8"]
[Sat Apr 11 02:49:38.127502 2026] [:error] [pid 21568:tid 21594] [client 172.213.241.33:64997] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "adlGQoiz5v_ljZxkpR_q3wAAARY"]
[Sat Apr 11 02:49:38.864919 2026] [:error] [pid 21570:tid 21698] [client 172.213.241.33:64345] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "adlGQjKs5t9xRSNL6cnjLgAAAFg"]
[Sat Apr 11 02:49:39.589254 2026] [:error] [pid 21569:tid 21645] [client 172.213.241.33:64355] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "adlGQ3AvQTgvXJ6vHoqz8QAAAIA"]
[Sat Apr 11 02:49:40.145805 2026] [:error] [pid 21569:tid 21651] [client 172.213.241.33:64974] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "adlGRHAvQTgvXJ6vHoqz9QAAAIY"]
[Sat Apr 11 02:49:40.696654 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:64903] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "adlGRCGQ1M5d8fQSsLHdhAAAAAc"]
[Sat Apr 11 02:49:41.189778 2026] [:error] [pid 21706:tid 21709] [client 172.213.241.33:63004] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "adlGRSGQ1M5d8fQSsLHdiQAAAAE"]
[Sat Apr 11 02:49:41.693576 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:65001] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "adlGRSGQ1M5d8fQSsLHdjgAAAAw"]
[Sat Apr 11 02:49:42.231576 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:63646] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "adlGRiGQ1M5d8fQSsLHdkQAAAA4"]
[Sat Apr 11 02:49:42.697555 2026] [:error] [pid 55451:tid 55467] [client 172.213.241.33:63722] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "adlGRnApxuyB7yCS5Rk1OgAAAM4"]
[Sat Apr 11 02:49:43.223174 2026] [:error] [pid 21569:tid 21671] [client 172.213.241.33:64316] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "adlGR3AvQTgvXJ6vHoq0BwAAAJM"]
[Sat Apr 11 02:49:43.707834 2026] [:error] [pid 55451:tid 55460] [client 172.213.241.33:64964] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "adlGR3ApxuyB7yCS5Rk1PQAAAMc"]
[Sat Apr 11 02:49:44.284859 2026] [:error] [pid 55451:tid 55472] [client 172.213.241.33:62352] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "adlGSHApxuyB7yCS5Rk1QwAAANM"]
[Sat Apr 11 02:49:44.748276 2026] [:error] [pid 55451:tid 55466] [client 172.213.241.33:64909] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "adlGSHApxuyB7yCS5Rk1RQAAAM0"]
[Sat Apr 11 02:49:45.438769 2026] [proxy_fcgi:error] [pid 21569:tid 21648] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:45.674321 2026] [proxy_fcgi:error] [pid 21569:tid 21683] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:45.962587 2026] [proxy_fcgi:error] [pid 21569:tid 21674] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:46.199095 2026] [proxy_fcgi:error] [pid 21569:tid 21645] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:46.435907 2026] [proxy_fcgi:error] [pid 21569:tid 21678] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:46.674528 2026] [proxy_fcgi:error] [pid 21569:tid 21646] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:46.942640 2026] [proxy_fcgi:error] [pid 21569:tid 21649] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:47.176307 2026] [proxy_fcgi:error] [pid 21569:tid 21653] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:47.458677 2026] [proxy_fcgi:error] [pid 21569:tid 21654] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:47.692259 2026] [proxy_fcgi:error] [pid 21569:tid 21669] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:47.949883 2026] [proxy_fcgi:error] [pid 21569:tid 21683] [client 172.213.241.33:63671] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:49:48.182634 2026] [:error] [pid 21569:tid 21645] [client 172.213.241.33:63671] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "adlGTHAvQTgvXJ6vHoq0KwAAAIA"]
[Sat Apr 11 02:49:48.666891 2026] [:error] [pid 21568:tid 21583] [client 172.213.241.33:62984] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "adlGTIiz5v_ljZxkpR_rGAAAAQs"]
[Sat Apr 11 02:49:49.227972 2026] [:error] [pid 55451:tid 55470] [client 172.213.241.33:64343] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "adlGTXApxuyB7yCS5Rk1WQAAANE"]
[Sat Apr 11 02:49:49.746656 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:64370] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "adlGTSGQ1M5d8fQSsLHdrwAAABA"]
[Sat Apr 11 02:49:50.270612 2026] [:error] [pid 21706:tid 21732] [client 172.213.241.33:64319] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "adlGTiGQ1M5d8fQSsLHdtQAAABg"]
[Sat Apr 11 02:49:50.734491 2026] [:error] [pid 55451:tid 55469] [client 172.213.241.33:64930] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "adlGTnApxuyB7yCS5Rk1XQAAANA"]
[Sat Apr 11 02:49:51.214876 2026] [:error] [pid 21706:tid 21730] [client 172.213.241.33:63616] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "adlGTyGQ1M5d8fQSsLHduwAAABY"]
[Sat Apr 11 02:49:51.759231 2026] [:error] [pid 21706:tid 21708] [client 172.213.241.33:64900] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "adlGTyGQ1M5d8fQSsLHdwQAAAAA"]
[Sat Apr 11 02:49:52.230312 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63624] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "adlGUCGQ1M5d8fQSsLHdwwAAAAs"]
[Sat Apr 11 02:49:52.757542 2026] [:error] [pid 21568:tid 21580] [client 172.213.241.33:65022] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "adlGUIiz5v_ljZxkpR_rJAAAAQg"]
[Sat Apr 11 02:49:53.242600 2026] [:error] [pid 21706:tid 21708] [client 172.213.241.33:64347] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "adlGUSGQ1M5d8fQSsLHdzgAAAAA"]
[Sat Apr 11 02:49:53.736504 2026] [:error] [pid 21706:tid 21711] [client 172.213.241.33:62393] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "adlGUSGQ1M5d8fQSsLHd1AAAAAM"]
[Sat Apr 11 02:49:54.354743 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:62359] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "adlGUiGQ1M5d8fQSsLHd4gAAAA0"]
[Sat Apr 11 02:49:54.903994 2026] [:error] [pid 21568:tid 21593] [client 172.213.241.33:64953] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "adlGUoiz5v_ljZxkpR_rKAAAARU"]
[Sat Apr 11 02:49:55.472438 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:63705] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "adlGU4iz5v_ljZxkpR_rKQAAAQI"]
[Sat Apr 11 02:49:55.968783 2026] [:error] [pid 55451:tid 55461] [client 172.213.241.33:62445] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "adlGU3ApxuyB7yCS5Rk1bQAAAMg"]
[Sat Apr 11 02:49:56.523778 2026] [:error] [pid 55451:tid 55469] [client 172.213.241.33:64897] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "adlGVHApxuyB7yCS5Rk1cgAAANA"]
[Sat Apr 11 02:49:57.015842 2026] [:error] [pid 21568:tid 21596] [client 172.213.241.33:63682] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "adlGVYiz5v_ljZxkpR_rMwAAARg"]
[Sat Apr 11 02:49:57.538331 2026] [:error] [pid 21569:tid 21646] [client 172.213.241.33:64304] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "adlGVXAvQTgvXJ6vHoq0WQAAAIE"]
[Sat Apr 11 02:49:58.016188 2026] [:error] [pid 55451:tid 55473] [client 172.213.241.33:63617] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "adlGVnApxuyB7yCS5Rk1egAAANQ"]
[Sat Apr 11 02:49:58.513277 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63099] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "adlGViGQ1M5d8fQSsLHd-QAAAAs"]
[Sat Apr 11 02:49:59.103270 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:63067] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "adlGVyGQ1M5d8fQSsLHeAAAAAA4"]
[Sat Apr 11 02:49:59.688730 2026] [:error] [pid 21706:tid 21725] [client 172.213.241.33:63618] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "adlGVyGQ1M5d8fQSsLHeBgAAABE"]
[Sat Apr 11 02:50:00.220048 2026] [:error] [pid 55451:tid 55453] [client 172.213.241.33:62362] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "adlGWHApxuyB7yCS5Rk1hAAAAMA"]
[Sat Apr 11 02:50:00.775056 2026] [:error] [pid 55451:tid 55467] [client 172.213.241.33:63680] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adlGWHApxuyB7yCS5Rk1iQAAAM4"]
[Sat Apr 11 02:50:01.269156 2026] [:error] [pid 21568:tid 21579] [client 172.213.241.33:64992] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adlGWYiz5v_ljZxkpR_rPwAAAQc"]
[Sat Apr 11 02:50:01.739371 2026] [:error] [pid 21706:tid 21728] [client 172.213.241.33:64955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adlGWSGQ1M5d8fQSsLHeEAAAABQ"]
[Sat Apr 11 02:50:02.310752 2026] [:error] [pid 21568:tid 21575] [client 172.213.241.33:64969] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "adlGWoiz5v_ljZxkpR_rRQAAAQM"]
[Sat Apr 11 02:50:02.783255 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:63061] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "adlGWiGQ1M5d8fQSsLHeGAAAABM"]
[Sat Apr 11 02:50:03.311843 2026] [:error] [pid 21706:tid 21716] [client 172.213.241.33:62447] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "adlGWyGQ1M5d8fQSsLHeGQAAAAg"]
[Sat Apr 11 02:50:03.842787 2026] [:error] [pid 21569:tid 21653] [client 172.213.241.33:63029] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "adlGW3AvQTgvXJ6vHoq0XgAAAIg"]
[Sat Apr 11 02:50:04.426146 2026] [:error] [pid 21568:tid 21587] [client 172.213.241.33:64381] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "adlGXIiz5v_ljZxkpR_rSgAAAQ8"]
[Sat Apr 11 02:50:04.910319 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:64305] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "adlGXCGQ1M5d8fQSsLHeHQAAAAc"]
[Sat Apr 11 02:50:05.417913 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:64977] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "adlGXYiz5v_ljZxkpR_rTgAAAQY"]
[Sat Apr 11 02:50:05.888968 2026] [:error] [pid 21570:tid 21693] [client 172.213.241.33:64906] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "adlGXTKs5t9xRSNL6cnjPwAAAFM"]
[Sat Apr 11 02:50:06.789180 2026] [:error] [pid 21706:tid 21711] [client 172.213.241.33:62377] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "adlGXiGQ1M5d8fQSsLHeIAAAAAM"]
[Sat Apr 11 02:50:07.258860 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:64278] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "adlGXyGQ1M5d8fQSsLHeJQAAABM"]
[Sat Apr 11 02:50:07.732555 2026] [:error] [pid 55451:tid 55471] [client 172.213.241.33:63668] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "adlGX3ApxuyB7yCS5Rk1rAAAANI"]
[Sat Apr 11 02:50:08.272167 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:64342] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "adlGYIiz5v_ljZxkpR_rVQAAAQY"]
[Sat Apr 11 02:50:08.737251 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:64272] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "adlGYCGQ1M5d8fQSsLHeMgAAABM"]
[Sat Apr 11 02:50:09.248287 2026] [:error] [pid 21568:tid 21595] [client 172.213.241.33:62994] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGYYiz5v_ljZxkpR_rWwAAARc"]
[Sat Apr 11 02:50:09.870586 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:62358] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGYSGQ1M5d8fQSsLHeNQAAAAs"]
[Sat Apr 11 02:50:10.334556 2026] [:error] [pid 21570:tid 21694] [client 172.213.241.33:64366] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGYjKs5t9xRSNL6cnjRAAAAFQ"]
[Sat Apr 11 02:50:10.814186 2026] [:error] [pid 21569:tid 21655] [client 172.213.241.33:64289] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGYnAvQTgvXJ6vHoq0ZQAAAIo"]
[Sat Apr 11 02:50:11.388916 2026] [:error] [pid 21568:tid 21581] [client 172.213.241.33:64899] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adlGY4iz5v_ljZxkpR_rZAAAAQk"]
[Sat Apr 11 02:50:11.855392 2026] [:error] [pid 21569:tid 21678] [client 172.213.241.33:64948] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adlGY3AvQTgvXJ6vHoq0ZwAAAJY"]
[Sat Apr 11 02:50:12.431298 2026] [:error] [pid 21706:tid 21728] [client 172.213.241.33:64286] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adlGZCGQ1M5d8fQSsLHeOQAAABQ"]
[Sat Apr 11 02:50:12.913249 2026] [:error] [pid 55451:tid 55462] [client 172.213.241.33:63721] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adlGZHApxuyB7yCS5Rk1vAAAAMk"]
[Sat Apr 11 02:50:13.459384 2026] [:error] [pid 21570:tid 21668] [client 172.213.241.33:64984] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "adlGZTKs5t9xRSNL6cnjTgAAAEM"]
[Sat Apr 11 02:50:13.970279 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:64917] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "adlGZSGQ1M5d8fQSsLHePAAAAAw"]
[Sat Apr 11 02:50:15.502777 2026] [:error] [pid 55451:tid 55471] [client 172.213.241.33:64340] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "adlGZ3ApxuyB7yCS5Rk1yAAAANI"]
[Sat Apr 11 02:50:15.973719 2026] [:error] [pid 21568:tid 21586] [client 172.213.241.33:63734] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "adlGZ4iz5v_ljZxkpR_rdAAAAQ4"]
[Sat Apr 11 02:50:16.528574 2026] [:error] [pid 21570:tid 21698] [client 172.213.241.33:64949] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "adlGaDKs5t9xRSNL6cnjVAAAAFg"]
[Sat Apr 11 02:50:17.013355 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:64896] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "adlGaYiz5v_ljZxkpR_rfwAAAQY"]
[Sat Apr 11 02:50:17.789030 2026] [:error] [pid 21568:tid 21592] [client 172.213.241.33:63649] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "adlGaYiz5v_ljZxkpR_rgwAAARQ"]
[Sat Apr 11 02:50:18.363991 2026] [:error] [pid 21570:tid 21694] [client 172.213.241.33:63703] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "adlGajKs5t9xRSNL6cnjXgAAAFQ"]
[Sat Apr 11 02:50:18.826308 2026] [:error] [pid 55451:tid 55465] [client 172.213.241.33:64371] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adlGanApxuyB7yCS5Rk1zgAAAMw"]
[Sat Apr 11 02:50:19.319452 2026] [:error] [pid 21706:tid 21713] [client 172.213.241.33:65002] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adlGayGQ1M5d8fQSsLHeRAAAAAU"]
[Sat Apr 11 02:50:19.867896 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:63712] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adlGayGQ1M5d8fQSsLHeSQAAAA4"]
[Sat Apr 11 02:50:20.375939 2026] [:error] [pid 21706:tid 21731] [client 172.213.241.33:64911] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "adlGbCGQ1M5d8fQSsLHeUAAAABc"]
[Sat Apr 11 02:50:20.901711 2026] [:error] [pid 21570:tid 21692] [client 172.213.241.33:63628] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adlGbDKs5t9xRSNL6cnjXwAAAFI"]
[Sat Apr 11 02:50:21.367372 2026] [:error] [pid 21570:tid 21696] [client 172.213.241.33:63698] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adlGbTKs5t9xRSNL6cnjZAAAAFY"]
[Sat Apr 11 02:50:21.855445 2026] [:error] [pid 21570:tid 21689] [client 172.213.241.33:63724] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adlGbTKs5t9xRSNL6cnjagAAAE8"]
[Sat Apr 11 02:50:22.365996 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:63633] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "adlGboiz5v_ljZxkpR_rjwAAAQY"]
[Sat Apr 11 02:50:22.830294 2026] [:error] [pid 21568:tid 21592] [client 172.213.241.33:64962] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "adlGboiz5v_ljZxkpR_rkwAAARQ"]
[Sat Apr 11 02:50:23.383941 2026] [:error] [pid 21569:tid 21647] [client 172.213.241.33:64369] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "adlGb3AvQTgvXJ6vHoq0dQAAAII"]
[Sat Apr 11 02:50:23.846692 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:63707] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "adlGb4iz5v_ljZxkpR_rmwAAAQY"]
[Sat Apr 11 02:50:24.310758 2026] [:error] [pid 21569:tid 21653] [client 172.213.241.33:63101] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "adlGcHAvQTgvXJ6vHoq0dwAAAIg"]
[Sat Apr 11 02:50:24.789286 2026] [:error] [pid 21568:tid 21584] [client 172.213.241.33:64297] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "adlGcIiz5v_ljZxkpR_rnQAAAQw"]
[Sat Apr 11 02:50:25.258651 2026] [:error] [pid 21706:tid 21710] [client 172.213.241.33:64302] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "adlGcSGQ1M5d8fQSsLHeYgAAAAI"]
[Sat Apr 11 02:50:25.792520 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:63735] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "adlGcSGQ1M5d8fQSsLHeaAAAAA0"]
[Sat Apr 11 02:50:26.402905 2026] [:error] [pid 55451:tid 55469] [client 172.213.241.33:64987] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "adlGcnApxuyB7yCS5Rk12wAAANA"]
[Sat Apr 11 02:50:26.873911 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:63025] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adlGciGQ1M5d8fQSsLHebAAAAAc"]
[Sat Apr 11 02:50:27.427919 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:64314] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adlGcyGQ1M5d8fQSsLHecAAAABM"]
[Sat Apr 11 02:50:27.942144 2026] [:error] [pid 21569:tid 21657] [client 172.213.241.33:64367] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adlGc3AvQTgvXJ6vHoq0fAAAAIw"]
[Sat Apr 11 02:50:28.431717 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:63051] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adlGdCGQ1M5d8fQSsLHedwAAAA8"]
[Sat Apr 11 02:50:28.924317 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:62434] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGdCGQ1M5d8fQSsLHefAAAAAs"]
[Sat Apr 11 02:50:29.408302 2026] [:error] [pid 21568:tid 21586] [client 172.213.241.33:63678] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGdYiz5v_ljZxkpR_rqwAAAQ4"]
[Sat Apr 11 02:50:29.921158 2026] [:error] [pid 21706:tid 21710] [client 172.213.241.33:63023] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGdSGQ1M5d8fQSsLHefwAAAAI"]
[Sat Apr 11 02:50:30.492350 2026] [:error] [pid 21568:tid 21583] [client 172.213.241.33:63715] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGdoiz5v_ljZxkpR_rtAAAAQs"]
[Sat Apr 11 02:50:31.024479 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:63700] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "adlGd3ApxuyB7yCS5Rk13wAAANg"]
[Sat Apr 11 02:50:31.535172 2026] [:error] [pid 21570:tid 21661] [client 172.213.241.33:64325] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "adlGdzKs5t9xRSNL6cnjhAAAAEA"]
[Sat Apr 11 02:50:32.112508 2026] [:error] [pid 21570:tid 21688] [client 172.213.241.33:65007] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "adlGeDKs5t9xRSNL6cnjiAAAAE4"]
[Sat Apr 11 02:50:32.731834 2026] [:error] [pid 21706:tid 21716] [client 172.213.241.33:64341] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "adlGeCGQ1M5d8fQSsLHehQAAAAg"]
[Sat Apr 11 02:50:33.262174 2026] [:error] [pid 21706:tid 21726] [client 172.213.241.33:64320] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "adlGeSGQ1M5d8fQSsLHeigAAABI"]
[Sat Apr 11 02:50:33.750831 2026] [:error] [pid 55451:tid 55461] [client 172.213.241.33:63697] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "adlGeXApxuyB7yCS5Rk16gAAAMg"]
[Sat Apr 11 02:50:34.355315 2026] [:error] [pid 21570:tid 21665] [client 172.213.241.33:56173] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "adlGejKs5t9xRSNL6cnjlAAAAEI"]
[Sat Apr 11 02:50:34.857669 2026] [:error] [pid 21569:tid 21667] [client 172.213.241.33:63669] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5.php"] [unique_id "adlGenAvQTgvXJ6vHoq0gwAAAJE"]
[Sat Apr 11 02:50:35.504312 2026] [:error] [pid 55451:tid 55476] [client 172.213.241.33:62361] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ol.php"] [unique_id "adlGe3ApxuyB7yCS5Rk17gAAANc"]
[Sat Apr 11 02:50:35.971295 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:64276] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ol.php"] [unique_id "adlGeyGQ1M5d8fQSsLHekAAAAA8"]
[Sat Apr 11 02:50:36.476689 2026] [:error] [pid 21569:tid 21657] [client 172.213.241.33:64297] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ol.php"] [unique_id "adlGfHAvQTgvXJ6vHoq0hgAAAIw"]
[Sat Apr 11 02:50:36.947011 2026] [:error] [pid 55451:tid 55472] [client 172.213.241.33:64338] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ol.php"] [unique_id "adlGfHApxuyB7yCS5Rk19QAAANM"]
[Sat Apr 11 02:50:37.408199 2026] [:error] [pid 21706:tid 21726] [client 172.213.241.33:62336] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "adlGfSGQ1M5d8fQSsLHelgAAABI"]
[Sat Apr 11 02:50:37.881339 2026] [:error] [pid 21569:tid 21664] [client 172.213.241.33:62338] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "adlGfXAvQTgvXJ6vHoq0iwAAAJA"]
[Sat Apr 11 02:50:38.371516 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:62383] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "adlGfoiz5v_ljZxkpR_rvgAAAQI"]
[Sat Apr 11 02:50:38.997816 2026] [:error] [pid 21568:tid 21575] [client 172.213.241.33:64923] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "adlGfoiz5v_ljZxkpR_rvwAAAQM"]
[Sat Apr 11 02:50:39.606866 2026] [:error] [pid 55451:tid 55469] [client 172.213.241.33:63077] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adlGf3ApxuyB7yCS5Rk1_QAAANA"]
[Sat Apr 11 02:50:40.115284 2026] [:error] [pid 21568:tid 21596] [client 172.213.241.33:54848] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adlGgIiz5v_ljZxkpR_rwgAAARg"]
[Sat Apr 11 02:50:40.815930 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:62449] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adlGgHApxuyB7yCS5Rk2BQAAANg"]
[Sat Apr 11 02:50:41.284322 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63665] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adlGgSGQ1M5d8fQSsLHeogAAAAs"]
[Sat Apr 11 02:50:41.862812 2026] [:error] [pid 21569:tid 21678] [client 172.213.241.33:62399] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "adlGgXAvQTgvXJ6vHoq0mwAAAJY"]
[Sat Apr 11 02:50:42.387987 2026] [:error] [pid 55451:tid 55456] [client 172.213.241.33:64335] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "adlGgnApxuyB7yCS5Rk2DgAAAMM"]
[Sat Apr 11 02:50:43.017009 2026] [:error] [pid 21568:tid 21589] [client 172.213.241.33:64920] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "adlGg4iz5v_ljZxkpR_rxAAAARE"]
[Sat Apr 11 02:50:43.527245 2026] [:error] [pid 55451:tid 55453] [client 172.213.241.33:63642] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "adlGg3ApxuyB7yCS5Rk2EQAAAMA"]
[Sat Apr 11 02:50:44.024044 2026] [:error] [pid 55451:tid 55459] [client 172.213.241.33:64996] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "adlGhHApxuyB7yCS5Rk2FAAAAMY"]
[Sat Apr 11 02:50:44.569948 2026] [:error] [pid 21568:tid 21585] [client 172.213.241.33:62438] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "adlGhIiz5v_ljZxkpR_rzAAAAQ0"]
[Sat Apr 11 02:50:45.061003 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:64264] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "adlGhYiz5v_ljZxkpR_rzwAAAQI"]
[Sat Apr 11 02:50:45.628490 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63709] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "adlGhSGQ1M5d8fQSsLHerQAAAAs"]
[Sat Apr 11 02:50:46.130745 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:64281] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGhiGQ1M5d8fQSsLHesAAAAA8"]
[Sat Apr 11 02:50:46.637831 2026] [:error] [pid 21569:tid 21660] [client 172.213.241.33:63695] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGhnAvQTgvXJ6vHoq0ogAAAI4"]
[Sat Apr 11 02:50:47.173388 2026] [proxy_fcgi:error] [pid 21570:tid 21681] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:47.658687 2026] [proxy_fcgi:error] [pid 21570:tid 21661] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:47.893592 2026] [proxy_fcgi:error] [pid 21570:tid 21675] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:48.152382 2026] [proxy_fcgi:error] [pid 21570:tid 21692] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:49.544602 2026] [proxy_fcgi:error] [pid 21570:tid 21695] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:49.808697 2026] [proxy_fcgi:error] [pid 21570:tid 21682] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:50.045565 2026] [proxy_fcgi:error] [pid 21570:tid 21670] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:50.522832 2026] [proxy_fcgi:error] [pid 21570:tid 21685] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:50.757084 2026] [proxy_fcgi:error] [pid 21570:tid 21675] [client 172.213.241.33:64269] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:50:50.988870 2026] [:error] [pid 21570:tid 21679] [client 172.213.241.33:64269] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "adlGijKs5t9xRSNL6cnj3QAAAEk"]
[Sat Apr 11 02:50:51.507466 2026] [:error] [pid 21570:tid 21691] [client 172.213.241.33:62436] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "adlGizKs5t9xRSNL6cnj3wAAAFE"]
[Sat Apr 11 02:50:52.091565 2026] [:error] [pid 21570:tid 21695] [client 172.213.241.33:64280] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "adlGjDKs5t9xRSNL6cnj4AAAAFU"]
[Sat Apr 11 02:50:52.554443 2026] [:error] [pid 21569:tid 21650] [client 172.213.241.33:64324] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "adlGjHAvQTgvXJ6vHoq0rAAAAIU"]
[Sat Apr 11 02:50:53.043216 2026] [:error] [pid 21569:tid 21649] [client 172.213.241.33:64975] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adlGjXAvQTgvXJ6vHoq0rQAAAIQ"]
[Sat Apr 11 02:50:53.579555 2026] [:error] [pid 21569:tid 21660] [client 172.213.241.33:63674] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adlGjXAvQTgvXJ6vHoq0sAAAAI4"]
[Sat Apr 11 02:50:54.090726 2026] [:error] [pid 55451:tid 55464] [client 172.213.241.33:63009] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adlGjnApxuyB7yCS5Rk2MwAAAMs"]
[Sat Apr 11 02:50:54.658957 2026] [:error] [pid 21568:tid 21581] [client 172.213.241.33:64935] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "adlGjoiz5v_ljZxkpR_r3gAAAQk"]
[Sat Apr 11 02:50:55.281910 2026] [:error] [pid 21570:tid 21696] [client 172.213.241.33:63053] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adlGjzKs5t9xRSNL6cnj5AAAAFY"]
[Sat Apr 11 02:50:55.814814 2026] [:error] [pid 21570:tid 21675] [client 172.213.241.33:63075] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adlGjzKs5t9xRSNL6cnj6AAAAEc"]
[Sat Apr 11 02:50:56.330750 2026] [:error] [pid 21570:tid 21691] [client 172.213.241.33:62978] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adlGkDKs5t9xRSNL6cnj7AAAAFE"]
[Sat Apr 11 02:50:56.803751 2026] [:error] [pid 21568:tid 21586] [client 172.213.241.33:63630] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adlGkIiz5v_ljZxkpR_r6AAAAQ4"]
[Sat Apr 11 02:50:57.306797 2026] [:error] [pid 55451:tid 55459] [client 172.213.241.33:65016] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGkXApxuyB7yCS5Rk2RQAAAMY"]
[Sat Apr 11 02:50:58.145657 2026] [:error] [pid 55451:tid 55456] [client 172.213.241.33:62987] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGknApxuyB7yCS5Rk2TAAAAMM"]
[Sat Apr 11 02:50:58.706450 2026] [:error] [pid 21570:tid 21697] [client 172.213.241.33:64256] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGkjKs5t9xRSNL6cnj9wAAAFc"]
[Sat Apr 11 02:50:59.174647 2026] [:error] [pid 21706:tid 21719] [client 172.213.241.33:63629] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "adlGkyGQ1M5d8fQSsLHe3gAAAAs"]
[Sat Apr 11 02:50:59.737942 2026] [:error] [pid 55451:tid 55462] [client 172.213.241.33:65015] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGk3ApxuyB7yCS5Rk2VQAAAMk"]
[Sat Apr 11 02:51:00.670039 2026] [:error] [pid 21568:tid 21582] [client 172.213.241.33:64260] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGlIiz5v_ljZxkpR_sAwAAAQo"]
[Sat Apr 11 02:51:01.235715 2026] [:error] [pid 55451:tid 55464] [client 172.213.241.33:63047] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGlXApxuyB7yCS5Rk2WAAAAMs"]
[Sat Apr 11 02:51:01.704716 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:62372] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGlSGQ1M5d8fQSsLHe4gAAABA"]
[Sat Apr 11 02:51:02.284957 2026] [:error] [pid 21570:tid 21687] [client 172.213.241.33:64380] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adlGljKs5t9xRSNL6cnkAAAAAE0"]
[Sat Apr 11 02:51:02.795414 2026] [:error] [pid 55451:tid 55458] [client 172.213.241.33:56076] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adlGlnApxuyB7yCS5Rk2YQAAAMU"]
[Sat Apr 11 02:51:03.264267 2026] [:error] [pid 55451:tid 55471] [client 172.213.241.33:63102] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adlGl3ApxuyB7yCS5Rk2ZgAAANI"]
[Sat Apr 11 02:51:03.730660 2026] [:error] [pid 21570:tid 21695] [client 172.213.241.33:62373] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "adlGlzKs5t9xRSNL6cnkBQAAAFU"]
[Sat Apr 11 02:51:04.308689 2026] [:error] [pid 21568:tid 21576] [client 172.213.241.33:62421] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "adlGmIiz5v_ljZxkpR_sFAAAAQQ"]
[Sat Apr 11 02:51:04.816451 2026] [:error] [pid 55451:tid 55476] [client 172.213.241.33:62983] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "adlGmHApxuyB7yCS5Rk2dQAAANc"]
[Sat Apr 11 02:51:05.390763 2026] [:error] [pid 21568:tid 21588] [client 172.213.241.33:62986] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "adlGmYiz5v_ljZxkpR_sGAAAARA"]
[Sat Apr 11 02:51:05.959831 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:63739] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "adlGmYiz5v_ljZxkpR_sGwAAAQI"]
[Sat Apr 11 02:51:06.451324 2026] [:error] [pid 21569:tid 21678] [client 172.213.241.33:64291] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGmnAvQTgvXJ6vHoq0ygAAAJY"]
[Sat Apr 11 02:51:06.940107 2026] [:error] [pid 21569:tid 21657] [client 172.213.241.33:64946] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGmnAvQTgvXJ6vHoq0zgAAAIw"]
[Sat Apr 11 02:51:07.614720 2026] [:error] [pid 21569:tid 21664] [client 172.213.241.33:64331] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGm3AvQTgvXJ6vHoq01wAAAJA"]
[Sat Apr 11 02:51:08.218810 2026] [:error] [pid 21568:tid 21577] [client 172.213.241.33:62378] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adlGnIiz5v_ljZxkpR_sJgAAAQU"]
[Sat Apr 11 02:51:08.719465 2026] [:error] [pid 21568:tid 21588] [client 172.213.241.33:64968] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "adlGnIiz5v_ljZxkpR_sKQAAARA"]
[Sat Apr 11 02:51:09.266196 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:64976] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "adlGnYiz5v_ljZxkpR_sLAAAAQI"]
[Sat Apr 11 02:51:09.855385 2026] [:error] [pid 21569:tid 21671] [client 172.213.241.33:64934] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "adlGnXAvQTgvXJ6vHoq05AAAAJM"]
[Sat Apr 11 02:51:10.707148 2026] [:error] [pid 55451:tid 55460] [client 172.213.241.33:64323] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "adlGnnApxuyB7yCS5Rk2iAAAAMc"]
[Sat Apr 11 02:51:11.284713 2026] [:error] [pid 21706:tid 21731] [client 172.213.241.33:63679] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adlGnyGQ1M5d8fQSsLHe5wAAABc"]
[Sat Apr 11 02:51:11.801193 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:64988] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adlGnyGQ1M5d8fQSsLHe6wAAAAc"]
[Sat Apr 11 02:51:12.348489 2026] [:error] [pid 55451:tid 55457] [client 172.213.241.33:62410] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adlGoHApxuyB7yCS5Rk2jgAAAMQ"]
[Sat Apr 11 02:51:12.909922 2026] [:error] [pid 21706:tid 21712] [client 172.213.241.33:56132] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adlGoCGQ1M5d8fQSsLHe8wAAAAQ"]
[Sat Apr 11 02:51:13.428315 2026] [:error] [pid 21570:tid 21685] [client 172.213.241.33:64318] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "adlGoTKs5t9xRSNL6cnkHgAAAEw"]
[Sat Apr 11 02:51:14.073697 2026] [:error] [pid 21569:tid 21683] [client 172.213.241.33:55528] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "adlGonAvQTgvXJ6vHoq07QAAAJg"]
[Sat Apr 11 02:51:14.689914 2026] [:error] [pid 21569:tid 21655] [client 172.213.241.33:64952] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "adlGonAvQTgvXJ6vHoq08AAAAIo"]
[Sat Apr 11 02:51:15.296195 2026] [:error] [pid 55451:tid 55461] [client 172.213.241.33:63716] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "adlGo3ApxuyB7yCS5Rk2mQAAAMg"]
[Sat Apr 11 02:51:15.790995 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:63685] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlGoyGQ1M5d8fQSsLHe-QAAABU"]
[Sat Apr 11 02:51:16.335267 2026] [:error] [pid 21569:tid 21646] [client 172.213.241.33:62982] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlGpHAvQTgvXJ6vHoq09wAAAIE"]
[Sat Apr 11 02:51:16.804584 2026] [:error] [pid 21569:tid 21680] [client 172.213.241.33:55437] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlGpHAvQTgvXJ6vHoq0-wAAAJc"]
[Sat Apr 11 02:51:17.270971 2026] [:error] [pid 21569:tid 21657] [client 172.213.241.33:64349] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlGpXAvQTgvXJ6vHoq1AAAAAIw"]
[Sat Apr 11 02:51:17.750084 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:63005] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "adlGpSGQ1M5d8fQSsLHe_gAAAA4"]
[Sat Apr 11 02:51:18.512743 2026] [:error] [pid 21568:tid 21595] [client 172.213.241.33:63074] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "adlGpoiz5v_ljZxkpR_sUQAAARc"]
[Sat Apr 11 02:51:19.040955 2026] [:error] [pid 21569:tid 21674] [client 172.213.241.33:63644] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "adlGp3AvQTgvXJ6vHoq1DAAAAJQ"]
[Sat Apr 11 02:51:19.509403 2026] [:error] [pid 21569:tid 21655] [client 172.213.241.33:64309] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "adlGp3AvQTgvXJ6vHoq1EAAAAIo"]
[Sat Apr 11 02:51:19.973636 2026] [:error] [pid 21569:tid 21646] [client 172.213.241.33:64290] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adlGp3AvQTgvXJ6vHoq1EQAAAIE"]
[Sat Apr 11 02:51:20.456307 2026] [:error] [pid 21568:tid 21587] [client 172.213.241.33:63645] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adlGqIiz5v_ljZxkpR_sVQAAAQ8"]
[Sat Apr 11 02:51:21.018320 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:64259] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adlGqXApxuyB7yCS5Rk2qwAAANg"]
[Sat Apr 11 02:51:21.491157 2026] [:error] [pid 21568:tid 21576] [client 172.213.241.33:63064] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alpha.php"] [unique_id "adlGqYiz5v_ljZxkpR_sWgAAAQQ"]
[Sat Apr 11 02:51:21.984780 2026] [:error] [pid 21570:tid 21665] [client 172.213.241.33:63027] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adlGqTKs5t9xRSNL6cnkOgAAAEI"]
[Sat Apr 11 02:51:22.457919 2026] [:error] [pid 21706:tid 21718] [client 172.213.241.33:63726] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adlGqiGQ1M5d8fQSsLHfBwAAAAo"]
[Sat Apr 11 02:51:23.116593 2026] [:error] [pid 21569:tid 21678] [client 172.213.241.33:64904] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adlGq3AvQTgvXJ6vHoq1HwAAAJY"]
[Sat Apr 11 02:51:23.646021 2026] [:error] [pid 21706:tid 21728] [client 172.213.241.33:64915] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "adlGqyGQ1M5d8fQSsLHfFgAAABQ"]
[Sat Apr 11 02:51:24.125415 2026] [:error] [pid 21570:tid 21663] [client 172.213.241.33:64959] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adlGrDKs5t9xRSNL6cnkQQAAAEE"]
[Sat Apr 11 02:51:24.590572 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:63072] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adlGrCGQ1M5d8fQSsLHfIQAAABU"]
[Sat Apr 11 02:51:25.062165 2026] [:error] [pid 21570:tid 21695] [client 172.213.241.33:56124] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adlGrTKs5t9xRSNL6cnkRAAAAFU"]
[Sat Apr 11 02:51:25.724785 2026] [:error] [pid 21570:tid 21672] [client 172.213.241.33:64361] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "adlGrTKs5t9xRSNL6cnkSQAAAEU"]
[Sat Apr 11 02:51:27.071473 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:63020] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adlGryGQ1M5d8fQSsLHfNAAAAA0"]
[Sat Apr 11 02:51:28.740009 2026] [:error] [pid 55451:tid 55463] [client 172.213.241.33:63055] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adlGsHApxuyB7yCS5Rk2zQAAAMo"]
[Sat Apr 11 02:51:29.325912 2026] [:error] [pid 21568:tid 21581] [client 172.213.241.33:65009] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adlGsYiz5v_ljZxkpR_sawAAAQk"]
[Sat Apr 11 02:51:29.901440 2026] [:error] [pid 21706:tid 21712] [client 172.213.241.33:63742] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adlGsSGQ1M5d8fQSsLHfQQAAAAQ"]
[Sat Apr 11 02:51:30.435225 2026] [:error] [pid 21569:tid 21651] [client 172.213.241.33:63740] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adlGsnAvQTgvXJ6vHoq1LQAAAIY"]
[Sat Apr 11 02:51:30.904397 2026] [:error] [pid 21706:tid 21708] [client 172.213.241.33:64937] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adlGsiGQ1M5d8fQSsLHfRwAAAAA"]
[Sat Apr 11 02:51:31.411756 2026] [:error] [pid 55451:tid 55465] [client 172.213.241.33:62367] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adlGs3ApxuyB7yCS5Rk23AAAAMw"]
[Sat Apr 11 02:51:31.898300 2026] [:error] [pid 21570:tid 21682] [client 172.213.241.33:63012] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adlGszKs5t9xRSNL6cnkYgAAAEs"]
[Sat Apr 11 02:51:32.487890 2026] [:error] [pid 21706:tid 21727] [client 172.213.241.33:63686] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adlGtCGQ1M5d8fQSsLHfUAAAABM"]
[Sat Apr 11 02:51:33.152404 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:63688] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adlGtSGQ1M5d8fQSsLHfWQAAAA8"]
[Sat Apr 11 02:51:33.702429 2026] [:error] [pid 21706:tid 21730] [client 172.213.241.33:63664] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adlGtSGQ1M5d8fQSsLHfXgAAABY"]
[Sat Apr 11 02:51:34.397441 2026] [:error] [pid 21570:tid 21698] [client 172.213.241.33:64982] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "adlGtjKs5t9xRSNL6cnkcAAAAFg"]
[Sat Apr 11 02:51:34.867372 2026] [:error] [pid 55451:tid 55474] [client 172.213.241.33:63073] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adlGtnApxuyB7yCS5Rk26AAAANU"]
[Sat Apr 11 02:51:35.378398 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:62376] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adlGt3ApxuyB7yCS5Rk26wAAANg"]
[Sat Apr 11 02:51:35.840957 2026] [:error] [pid 55451:tid 55460] [client 172.213.241.33:63050] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adlGt3ApxuyB7yCS5Rk27gAAAMc"]
[Sat Apr 11 02:51:36.319048 2026] [:error] [pid 55451:tid 55456] [client 172.213.241.33:62409] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adlGuHApxuyB7yCS5Rk29AAAAMM"]
[Sat Apr 11 02:51:36.783483 2026] [:error] [pid 55451:tid 55466] [client 172.213.241.33:62347] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "adlGuHApxuyB7yCS5Rk2-gAAAM0"]
[Sat Apr 11 02:51:37.249807 2026] [:error] [pid 21706:tid 21718] [client 172.213.241.33:56109] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "adlGuSGQ1M5d8fQSsLHfYgAAAAo"]
[Sat Apr 11 02:51:37.719735 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:64359] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "adlGuYiz5v_ljZxkpR_sfQAAAQI"]
[Sat Apr 11 02:51:38.186426 2026] [:error] [pid 55451:tid 55460] [client 172.213.241.33:62440] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "adlGunApxuyB7yCS5Rk3CAAAAMc"]
[Sat Apr 11 02:51:38.676636 2026] [:error] [pid 55451:tid 55472] [client 172.213.241.33:64898] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "adlGunApxuyB7yCS5Rk3DAAAANM"]
[Sat Apr 11 02:51:39.189083 2026] [:error] [pid 55451:tid 55474] [client 172.213.241.33:63621] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "adlGu3ApxuyB7yCS5Rk3EQAAANU"]
[Sat Apr 11 02:51:39.698407 2026] [:error] [pid 21569:tid 21647] [client 172.213.241.33:62354] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "adlGu3AvQTgvXJ6vHoq1OQAAAII"]
[Sat Apr 11 02:51:40.201098 2026] [:error] [pid 55451:tid 55475] [client 172.213.241.33:63017] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "adlGvHApxuyB7yCS5Rk3FAAAANY"]
[Sat Apr 11 02:51:40.721257 2026] [:error] [pid 21570:tid 21694] [client 172.213.241.33:62344] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adlGvDKs5t9xRSNL6cnkggAAAFQ"]
[Sat Apr 11 02:51:41.234335 2026] [:error] [pid 21706:tid 21708] [client 172.213.241.33:56074] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adlGvSGQ1M5d8fQSsLHfcwAAAAA"]
[Sat Apr 11 02:51:41.726762 2026] [:error] [pid 21706:tid 21713] [client 172.213.241.33:63651] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adlGvSGQ1M5d8fQSsLHfdwAAAAU"]
[Sat Apr 11 02:51:42.225620 2026] [:error] [pid 21706:tid 21726] [client 172.213.241.33:64972] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adlGviGQ1M5d8fQSsLHfggAAABI"]
[Sat Apr 11 02:51:42.727000 2026] [:error] [pid 21569:tid 21648] [client 172.213.241.33:63045] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGvnAvQTgvXJ6vHoq1PgAAAIM"]
[Sat Apr 11 02:51:43.222251 2026] [:error] [pid 21706:tid 21730] [client 172.213.241.33:62417] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGvyGQ1M5d8fQSsLHfjQAAABY"]
[Sat Apr 11 02:51:43.722851 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:63024] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGv4iz5v_ljZxkpR_siQAAAQY"]
[Sat Apr 11 02:51:44.413472 2026] [:error] [pid 21706:tid 21712] [client 172.213.241.33:64299] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "adlGwCGQ1M5d8fQSsLHflQAAAAQ"]
[Sat Apr 11 02:51:44.976035 2026] [:error] [pid 55451:tid 55456] [client 172.213.241.33:63675] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adlGwHApxuyB7yCS5Rk3HwAAAMM"]
[Sat Apr 11 02:51:45.457960 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:65003] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adlGwSGQ1M5d8fQSsLHfnwAAAAc"]
[Sat Apr 11 02:51:45.983437 2026] [:error] [pid 21706:tid 21732] [client 172.213.241.33:56185] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adlGwSGQ1M5d8fQSsLHfowAAABg"]
[Sat Apr 11 02:51:46.495743 2026] [:error] [pid 55451:tid 55474] [client 172.213.241.33:63677] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adlGwnApxuyB7yCS5Rk3IwAAANU"]
[Sat Apr 11 02:51:46.962157 2026] [:error] [pid 21570:tid 21691] [client 172.213.241.33:64284] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGwjKs5t9xRSNL6cnkngAAAFE"]
[Sat Apr 11 02:51:47.557441 2026] [:error] [pid 55451:tid 55453] [client 172.213.241.33:64931] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGw3ApxuyB7yCS5Rk3JQAAAMA"]
[Sat Apr 11 02:51:48.064905 2026] [:error] [pid 55451:tid 55457] [client 172.213.241.33:63626] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGxHApxuyB7yCS5Rk3KQAAAMQ"]
[Sat Apr 11 02:51:48.521457 2026] [:error] [pid 21706:tid 21732] [client 172.213.241.33:63692] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "adlGxCGQ1M5d8fQSsLHfuAAAABg"]
[Sat Apr 11 02:51:49.108345 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:63654] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adlGxSGQ1M5d8fQSsLHfvAAAABA"]
[Sat Apr 11 02:51:49.679629 2026] [:error] [pid 21570:tid 21665] [client 172.213.241.33:62456] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adlGxTKs5t9xRSNL6cnkoAAAAEI"]
[Sat Apr 11 02:51:50.263150 2026] [proxy_fcgi:error] [pid 21569:tid 21655] [client 172.213.241.33:63068] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:50.499379 2026] [proxy_fcgi:error] [pid 21569:tid 21648] [client 172.213.241.33:63068] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:50.732750 2026] [proxy_fcgi:error] [pid 21569:tid 21649] [client 172.213.241.33:63068] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:51.201958 2026] [:error] [pid 21569:tid 21662] [client 172.213.241.33:63068] [client 172.213.241.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adlGx3AvQTgvXJ6vHoq1UQAAAI8"]
[Sat Apr 11 02:51:51.711637 2026] [proxy_fcgi:error] [pid 21706:tid 21722] [client 172.213.241.33:64924] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:52.439864 2026] [proxy_fcgi:error] [pid 21706:tid 21729] [client 172.213.241.33:64924] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:52.716309 2026] [proxy_fcgi:error] [pid 21706:tid 21717] [client 172.213.241.33:64924] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:52.952441 2026] [proxy_fcgi:error] [pid 21706:tid 21716] [client 172.213.241.33:64924] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:53.338715 2026] [proxy_fcgi:error] [pid 21706:tid 21719] [client 172.213.241.33:64924] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 02:51:53.829384 2026] [:error] [pid 21706:tid 21715] [client 172.213.241.33:64924] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/in.php"] [unique_id "adlGySGQ1M5d8fQSsLHf3wAAAAc"]
[Sat Apr 11 02:51:54.453036 2026] [:error] [pid 21569:tid 21651] [client 172.213.241.33:64913] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/in.php"] [unique_id "adlGynAvQTgvXJ6vHoq1VwAAAIY"]
[Sat Apr 11 02:51:54.916193 2026] [:error] [pid 55451:tid 55475] [client 172.213.241.33:62457] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/in.php"] [unique_id "adlGynApxuyB7yCS5Rk3OwAAANY"]
[Sat Apr 11 02:51:55.432968 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:63620] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/in.php"] [unique_id "adlGyyGQ1M5d8fQSsLHf4gAAABU"]
[Sat Apr 11 02:51:55.950282 2026] [:error] [pid 21569:tid 21656] [client 172.213.241.33:62386] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adlGy3AvQTgvXJ6vHoq1XwAAAIs"]
[Sat Apr 11 02:51:56.493982 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:63037] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adlGzCGQ1M5d8fQSsLHf6AAAABA"]
[Sat Apr 11 02:51:56.985729 2026] [:error] [pid 21706:tid 21710] [client 172.213.241.33:64372] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adlGzCGQ1M5d8fQSsLHf6gAAAAI"]
[Sat Apr 11 02:51:57.564526 2026] [:error] [pid 21568:tid 21586] [client 172.213.241.33:63014] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "adlGzYiz5v_ljZxkpR_szwAAAQ4"]
[Sat Apr 11 02:51:58.032376 2026] [:error] [pid 21570:tid 21692] [client 172.213.241.33:64940] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "adlGzjKs5t9xRSNL6cnktAAAAFI"]
[Sat Apr 11 02:51:58.506689 2026] [:error] [pid 21706:tid 21723] [client 172.213.241.33:62998] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "adlGziGQ1M5d8fQSsLHf7gAAAA8"]
[Sat Apr 11 02:51:59.077042 2026] [:error] [pid 21570:tid 21696] [client 172.213.241.33:64370] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "adlGzzKs5t9xRSNL6cnktwAAAFY"]
[Sat Apr 11 02:51:59.552119 2026] [:error] [pid 21706:tid 21724] [client 172.213.241.33:63008] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "adlGzyGQ1M5d8fQSsLHf8AAAABA"]
[Sat Apr 11 02:52:00.027526 2026] [:error] [pid 21568:tid 21588] [client 172.213.241.33:64322] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adlG0Iiz5v_ljZxkpR_s5AAAARA"]
[Sat Apr 11 02:52:00.535675 2026] [:error] [pid 21570:tid 21677] [client 172.213.241.33:63085] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adlG0DKs5t9xRSNL6cnkuAAAAEg"]
[Sat Apr 11 02:52:01.021689 2026] [:error] [pid 21570:tid 21691] [client 172.213.241.33:62459] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adlG0TKs5t9xRSNL6cnkugAAAFE"]
[Sat Apr 11 02:52:01.555966 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:55498] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bs1.php"] [unique_id "adlG0SGQ1M5d8fQSsLHf-wAAABU"]
[Sat Apr 11 02:52:02.043862 2026] [:error] [pid 21706:tid 21716] [client 172.213.241.33:64265] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adlG0iGQ1M5d8fQSsLHgAAAAAAg"]
[Sat Apr 11 02:52:02.516867 2026] [:error] [pid 21570:tid 21696] [client 172.213.241.33:64954] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adlG0jKs5t9xRSNL6cnkwAAAAFY"]
[Sat Apr 11 02:52:03.007499 2026] [:error] [pid 21706:tid 21718] [client 172.213.241.33:63093] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adlG0yGQ1M5d8fQSsLHgCAAAAAo"]
[Sat Apr 11 02:52:03.473863 2026] [:error] [pid 21706:tid 21717] [client 172.213.241.33:62345] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bengi.php"] [unique_id "adlG0yGQ1M5d8fQSsLHgDwAAAAk"]
[Sat Apr 11 02:52:04.003212 2026] [:error] [pid 21570:tid 21697] [client 172.213.241.33:62996] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adlG1DKs5t9xRSNL6cnkwgAAAFc"]
[Sat Apr 11 02:52:04.506350 2026] [:error] [pid 21570:tid 21694] [client 172.213.241.33:55518] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adlG1DKs5t9xRSNL6cnkwwAAAFQ"]
[Sat Apr 11 02:52:05.018447 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:62977] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adlG1SGQ1M5d8fQSsLHgFgAAAA0"]
[Sat Apr 11 02:52:05.499635 2026] [:error] [pid 21570:tid 21688] [client 172.213.241.33:64970] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adlG1TKs5t9xRSNL6cnkxwAAAE4"]
[Sat Apr 11 02:52:06.053954 2026] [:error] [pid 55451:tid 55475] [client 172.213.241.33:64383] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "adlG1nApxuyB7yCS5Rk3VwAAANY"]
[Sat Apr 11 02:52:06.585539 2026] [:error] [pid 55451:tid 55455] [client 172.213.241.33:63663] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "adlG1nApxuyB7yCS5Rk3XgAAAMI"]
[Sat Apr 11 02:52:07.092279 2026] [:error] [pid 21568:tid 21593] [client 172.213.241.33:64918] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "adlG14iz5v_ljZxkpR_s7wAAARU"]
[Sat Apr 11 02:52:07.597531 2026] [:error] [pid 21706:tid 21713] [client 172.213.241.33:63659] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "adlG1yGQ1M5d8fQSsLHgGgAAAAU"]
[Sat Apr 11 02:52:08.130895 2026] [:error] [pid 21568:tid 21581] [client 172.213.241.33:63041] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adlG2Iiz5v_ljZxkpR_s9wAAAQk"]
[Sat Apr 11 02:52:08.661341 2026] [:error] [pid 21706:tid 21709] [client 172.213.241.33:63693] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adlG2CGQ1M5d8fQSsLHgHQAAAAE"]
[Sat Apr 11 02:52:09.124702 2026] [:error] [pid 21706:tid 21718] [client 172.213.241.33:56165] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adlG2SGQ1M5d8fQSsLHgIgAAAAo"]
[Sat Apr 11 02:52:09.673701 2026] [:error] [pid 21706:tid 21717] [client 172.213.241.33:62388] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "adlG2SGQ1M5d8fQSsLHgJgAAAAk"]
[Sat Apr 11 02:52:10.208103 2026] [:error] [pid 21570:tid 21673] [client 172.213.241.33:65013] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adlG2jKs5t9xRSNL6cnk0QAAAEY"]
[Sat Apr 11 02:52:10.739071 2026] [:error] [pid 21568:tid 21572] [client 172.213.241.33:62426] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adlG2oiz5v_ljZxkpR_s_wAAAQA"]
[Sat Apr 11 02:52:11.377769 2026] [:error] [pid 55451:tid 55455] [client 172.213.241.33:63661] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adlG23ApxuyB7yCS5Rk3eAAAAMI"]
[Sat Apr 11 02:52:11.946655 2026] [:error] [pid 55451:tid 55472] [client 172.213.241.33:63672] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adlG23ApxuyB7yCS5Rk3egAAANM"]
[Sat Apr 11 02:52:12.419816 2026] [:error] [pid 21568:tid 21577] [client 172.213.241.33:63098] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "adlG3Iiz5v_ljZxkpR_tBgAAAQU"]
[Sat Apr 11 02:52:12.919823 2026] [:error] [pid 21569:tid 21664] [client 172.213.241.33:63086] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "adlG3HAvQTgvXJ6vHoq1eQAAAJA"]
[Sat Apr 11 02:52:13.406221 2026] [:error] [pid 21569:tid 21651] [client 172.213.241.33:64971] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "adlG3XAvQTgvXJ6vHoq1ewAAAIY"]
[Sat Apr 11 02:52:13.916764 2026] [:error] [pid 21706:tid 21721] [client 172.213.241.33:63632] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "adlG3SGQ1M5d8fQSsLHgPwAAAA0"]
[Sat Apr 11 02:52:14.457627 2026] [:error] [pid 21706:tid 21730] [client 172.213.241.33:64912] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "adlG3iGQ1M5d8fQSsLHgQwAAABY"]
[Sat Apr 11 02:52:14.961619 2026] [:error] [pid 21568:tid 21580] [client 172.213.241.33:64373] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "adlG3oiz5v_ljZxkpR_tDAAAAQg"]
[Sat Apr 11 02:52:15.492644 2026] [:error] [pid 21706:tid 21712] [client 172.213.241.33:62380] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "adlG3yGQ1M5d8fQSsLHgSQAAAAQ"]
[Sat Apr 11 02:52:16.004319 2026] [:error] [pid 21706:tid 21709] [client 172.213.241.33:62392] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "adlG4CGQ1M5d8fQSsLHgTwAAAAE"]
[Sat Apr 11 02:52:16.512029 2026] [:error] [pid 21570:tid 21689] [client 172.213.241.33:64311] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "adlG4DKs5t9xRSNL6cnk3gAAAE8"]
[Sat Apr 11 02:52:16.976718 2026] [:error] [pid 21568:tid 21589] [client 172.213.241.33:64337] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "adlG4Iiz5v_ljZxkpR_tEgAAARE"]
[Sat Apr 11 02:52:17.438894 2026] [:error] [pid 21706:tid 21728] [client 172.213.241.33:64330] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "adlG4SGQ1M5d8fQSsLHgVgAAABQ"]
[Sat Apr 11 02:52:18.022269 2026] [:error] [pid 21568:tid 21584] [client 172.213.241.33:63054] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "adlG4oiz5v_ljZxkpR_tGQAAAQw"]
[Sat Apr 11 02:52:18.485916 2026] [:error] [pid 55451:tid 55462] [client 172.213.241.33:63001] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlG4nApxuyB7yCS5Rk3hQAAAMk"]
[Sat Apr 11 02:52:18.986618 2026] [:error] [pid 21706:tid 21717] [client 172.213.241.33:65017] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlG4iGQ1M5d8fQSsLHgXAAAAAk"]
[Sat Apr 11 02:52:19.515754 2026] [:error] [pid 55451:tid 55470] [client 172.213.241.33:56145] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlG43ApxuyB7yCS5Rk3kAAAANE"]
[Sat Apr 11 02:52:20.034437 2026] [:error] [pid 21569:tid 21662] [client 172.213.241.33:62420] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "adlG5HAvQTgvXJ6vHoq1hQAAAI8"]
[Sat Apr 11 02:52:20.496308 2026] [:error] [pid 55451:tid 55454] [client 172.213.241.33:64293] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "adlG5HApxuyB7yCS5Rk3kwAAAME"]
[Sat Apr 11 02:52:21.028525 2026] [:error] [pid 55451:tid 55477] [client 172.213.241.33:62395] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "adlG5XApxuyB7yCS5Rk3mAAAANg"]
[Sat Apr 11 02:52:21.492857 2026] [:error] [pid 21570:tid 21685] [client 172.213.241.33:62357] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "adlG5TKs5t9xRSNL6cnk5wAAAEw"]
[Sat Apr 11 02:52:21.965499 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:56169] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "adlG5SGQ1M5d8fQSsLHgcQAAAAw"]
[Sat Apr 11 02:52:22.435099 2026] [:error] [pid 21568:tid 21572] [client 172.213.241.33:63069] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "adlG5oiz5v_ljZxkpR_tKwAAAQA"]
[Sat Apr 11 02:52:22.914777 2026] [:error] [pid 21570:tid 21670] [client 172.213.241.33:63011] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "adlG5jKs5t9xRSNL6cnk6wAAAEQ"]
[Sat Apr 11 02:52:23.443735 2026] [:error] [pid 55451:tid 55468] [client 172.213.241.33:63006] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "adlG53ApxuyB7yCS5Rk3mwAAAM8"]
[Sat Apr 11 02:52:23.903031 2026] [:error] [pid 21570:tid 21688] [client 172.213.241.33:63708] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "adlG5zKs5t9xRSNL6cnk7gAAAE4"]
[Sat Apr 11 02:52:24.394264 2026] [:error] [pid 21568:tid 21591] [client 172.213.241.33:62418] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "adlG6Iiz5v_ljZxkpR_tMQAAARM"]
[Sat Apr 11 02:52:24.901687 2026] [:error] [pid 21570:tid 21668] [client 172.213.241.33:63655] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "adlG6DKs5t9xRSNL6cnk9AAAAEM"]
[Sat Apr 11 02:52:25.600684 2026] [:error] [pid 21568:tid 21578] [client 172.213.241.33:63096] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "adlG6Yiz5v_ljZxkpR_tNQAAAQY"]
[Sat Apr 11 02:52:26.343972 2026] [:error] [pid 21568:tid 21574] [client 172.213.241.33:63710] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "adlG6oiz5v_ljZxkpR_tOQAAAQI"]
[Sat Apr 11 02:52:27.186089 2026] [:error] [pid 21706:tid 21716] [client 172.213.241.33:63706] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class19.php"] [unique_id "adlG6yGQ1M5d8fQSsLHggQAAAAg"]
[Sat Apr 11 02:52:27.828561 2026] [:error] [pid 21706:tid 21729] [client 172.213.241.33:63670] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class19.php"] [unique_id "adlG6yGQ1M5d8fQSsLHghgAAABU"]
[Sat Apr 11 02:52:28.489381 2026] [:error] [pid 21570:tid 21698] [client 172.213.241.33:62414] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class19.php"] [unique_id "adlG7DKs5t9xRSNL6cnlAgAAAFg"]
[Sat Apr 11 02:52:28.950879 2026] [:error] [pid 21569:tid 21646] [client 172.213.241.33:64922] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class19.php"] [unique_id "adlG7HAvQTgvXJ6vHoq1iwAAAIE"]
[Sat Apr 11 02:52:29.552741 2026] [:error] [pid 55451:tid 55457] [client 172.213.241.33:63720] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class20.php"] [unique_id "adlG7XApxuyB7yCS5Rk3sAAAAMQ"]
[Sat Apr 11 02:52:30.133944 2026] [:error] [pid 21568:tid 21579] [client 172.213.241.33:64329] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class20.php"] [unique_id "adlG7oiz5v_ljZxkpR_tSQAAAQc"]
[Sat Apr 11 02:52:30.753136 2026] [:error] [pid 21706:tid 21722] [client 172.213.241.33:63736] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class20.php"] [unique_id "adlG7iGQ1M5d8fQSsLHgjwAAAA4"]
[Sat Apr 11 02:52:31.266643 2026] [:error] [pid 55451:tid 55469] [client 172.213.241.33:62433] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class20.php"] [unique_id "adlG73ApxuyB7yCS5Rk3uAAAANA"]
[Sat Apr 11 02:52:31.863548 2026] [:error] [pid 21570:tid 21691] [client 172.213.241.33:63018] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "adlG7zKs5t9xRSNL6cnlCgAAAFE"]
[Sat Apr 11 02:52:32.381864 2026] [:error] [pid 55451:tid 55468] [client 172.213.241.33:64283] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "adlG8HApxuyB7yCS5Rk3vwAAAM8"]
[Sat Apr 11 02:52:33.053131 2026] [:error] [pid 55451:tid 55462] [client 172.213.241.33:55430] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "adlG8XApxuyB7yCS5Rk3xAAAAMk"]
[Sat Apr 11 02:52:33.683126 2026] [:error] [pid 55451:tid 55473] [client 172.213.241.33:56189] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "adlG8XApxuyB7yCS5Rk3zAAAANQ"]
[Sat Apr 11 02:52:34.165883 2026] [:error] [pid 55451:tid 55474] [client 172.213.241.33:64278] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vee.php"] [unique_id "adlG8nApxuyB7yCS5Rk30AAAANU"]
[Sat Apr 11 02:52:34.761632 2026] [:error] [pid 21570:tid 21661] [client 172.213.241.33:64275] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vee.php"] [unique_id "adlG8jKs5t9xRSNL6cnlDQAAAEA"]
[Sat Apr 11 02:52:35.251027 2026] [:error] [pid 21570:tid 21682] [client 172.213.241.33:63042] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vee.php"] [unique_id "adlG8zKs5t9xRSNL6cnlDgAAAEs"]
[Sat Apr 11 02:52:35.962281 2026] [:error] [pid 21568:tid 21575] [client 172.213.241.33:56090] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vee.php"] [unique_id "adlG84iz5v_ljZxkpR_tXAAAAQM"]
[Sat Apr 11 02:52:36.563995 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:63662] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adlG9CGQ1M5d8fQSsLHgoQAAAAw"]
[Sat Apr 11 02:52:37.155401 2026] [:error] [pid 21568:tid 21582] [client 172.213.241.33:56101] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adlG9Yiz5v_ljZxkpR_tYwAAAQo"]
[Sat Apr 11 02:52:37.652216 2026] [:error] [pid 21568:tid 21572] [client 172.213.241.33:65008] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adlG9Yiz5v_ljZxkpR_tZgAAAQA"]
[Sat Apr 11 02:52:38.113744 2026] [:error] [pid 55451:tid 55472] [client 172.213.241.33:55491] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cabs.php"] [unique_id "adlG9nApxuyB7yCS5Rk35gAAANM"]
[Sat Apr 11 02:52:38.600485 2026] [:error] [pid 55451:tid 55455] [client 172.213.241.33:63060] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adlG9nApxuyB7yCS5Rk36gAAAMI"]
[Sat Apr 11 02:52:39.070123 2026] [:error] [pid 21569:tid 21645] [client 172.213.241.33:55550] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adlG93AvQTgvXJ6vHoq1lgAAAIA"]
[Sat Apr 11 02:52:39.545653 2026] [:error] [pid 21569:tid 21667] [client 172.213.241.33:56161] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adlG93AvQTgvXJ6vHoq1lwAAAJE"]
[Sat Apr 11 02:52:40.060911 2026] [:error] [pid 21570:tid 21681] [client 172.213.241.33:63622] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adlG-DKs5t9xRSNL6cnlFQAAAEo"]
[Sat Apr 11 02:52:40.601603 2026] [:error] [pid 21706:tid 21720] [client 172.213.241.33:55546] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adlG-CGQ1M5d8fQSsLHgrAAAAAw"]
[Sat Apr 11 02:52:41.207560 2026] [:error] [pid 21568:tid 21579] [client 172.213.241.33:62406] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adlG-Yiz5v_ljZxkpR_tcgAAAQc"]
[Sat Apr 11 02:52:41.877502 2026] [:error] [pid 21570:tid 21661] [client 172.213.241.33:63650] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adlG-TKs5t9xRSNL6cnlHAAAAEA"]
[Sat Apr 11 02:52:42.834931 2026] [:error] [pid 21568:tid 21580] [client 172.213.241.33:62405] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x1da.php"] [unique_id "adlG-oiz5v_ljZxkpR_teAAAAQg"]
[Sat Apr 11 02:52:43.739108 2026] [:error] [pid 55451:tid 55470] [client 172.213.241.33:64321] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "adlG-3ApxuyB7yCS5Rk4AgAAANE"]
[Sat Apr 11 02:52:45.278462 2026] [:error] [pid 21570:tid 21682] [client 172.213.241.33:55508] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "adlG_TKs5t9xRSNL6cnlLgAAAEs"]
[Sat Apr 11 02:52:46.230422 2026] [:error] [pid 21570:tid 21692] [client 172.213.241.33:64303] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "adlG_jKs5t9xRSNL6cnlMAAAAFI"]
[Sat Apr 11 02:52:49.176187 2026] [:error] [pid 21568:tid 21594] [client 172.213.241.33:64336] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jp.php"] [unique_id "adlHAYiz5v_ljZxkpR_tiwAAARY"]
[Sat Apr 11 02:52:50.544902 2026] [:error] [pid 55451:tid 55476] [client 172.213.241.33:64973] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adlHAnApxuyB7yCS5Rk4EwAAANc"]
[Sat Apr 11 02:52:52.967454 2026] [:error] [pid 55451:tid 55462] [client 172.213.241.33:55542] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adlHBHApxuyB7yCS5Rk4IgAAAMk"]
[Sat Apr 11 02:52:53.625658 2026] [proxy_fcgi:error] [pid 55451:tid 55461] [client 172.213.241.33:56123] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 03:51:41.047341 2026] [:error] [pid 32208:tid 32225] [client 164.68.120.90:53220] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jobs"] [unique_id "adlUzYZ4YzBUDeFI2a8augAAAM0"]
[Sat Apr 11 03:52:02.914663 2026] [:error] [pid 32208:tid 32229] [client 164.68.120.90:58000] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jobs/"] [unique_id "adlU4oZ4YzBUDeFI2a8a7QAAANE"]
[Sat Apr 11 03:54:25.813961 2026] [:error] [pid 32088:tid 32175] [client 164.68.120.90:52908] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vacancies"] [unique_id "adlVcXi-kLhF3DztplAbwQAAAIg"]
[Sat Apr 11 03:56:32.071383 2026] [:error] [pid 32208:tid 32224] [client 164.68.120.90:47596] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/positions-vacant/"] [unique_id "adlV8IZ4YzBUDeFI2a8flgAAAMw"]
[Sat Apr 11 03:56:54.056902 2026] [:error] [pid 32074:tid 32118] [client 164.68.120.90:52284] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "adlWBqceWOz2EXlfBzlqAQAAAAc"]
[Sat Apr 11 03:59:07.822250 2026] [:error] [pid 2812:tid 2838] [client 164.68.120.90:38538] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/terms-and-conditions"] [unique_id "adlWi9mkbBYp4LlMowsCggAAANc"]
[Sat Apr 11 03:59:39.106846 2026] [:error] [pid 2812:tid 2833] [client 164.68.120.90:39102] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/legal"] [unique_id "adlWq9mkbBYp4LlMowsDAgAAANI"]
[Sat Apr 11 04:24:45.147166 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:44296] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlcjTn2G0IJw5EZY9kBnAAAAFM"]
[Sat Apr 11 04:24:45.637055 2026] [:error] [pid 33171:tid 33202] [client 51.107.88.105:46324] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlcjboqTMlo30hcVw8qGgAAABA"]
[Sat Apr 11 04:24:46.159462 2026] [:error] [pid 33171:tid 33203] [client 51.107.88.105:12622] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlcjroqTMlo30hcVw8qHAAAABE"]
[Sat Apr 11 04:24:46.657129 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:12911] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adlcjjn2G0IJw5EZY9kBpAAAAEA"]
[Sat Apr 11 05:53:40.668085 2026] [proxy_fcgi:error] [pid 33173:tid 33249] [client 72.146.8.12:15021] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:22.558873 2026] [proxy_fcgi:error] [pid 33172:tid 33223] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:23.845785 2026] [proxy_fcgi:error] [pid 33172:tid 33223] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:24.123561 2026] [proxy_fcgi:error] [pid 33172:tid 33225] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:24.383276 2026] [proxy_fcgi:error] [pid 33172:tid 33220] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:24.643513 2026] [proxy_fcgi:error] [pid 33172:tid 33222] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:24.902951 2026] [proxy_fcgi:error] [pid 33172:tid 33230] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:25.190589 2026] [proxy_fcgi:error] [pid 33172:tid 33231] [client 20.100.191.67:54124] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:48:25.446475 2026] [:error] [pid 33172:tid 33240] [client 20.100.191.67:54124] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mariju.php"] [unique_id "adl-OTn2G0IJw5EZY9lU1gAAAFY"]
[Sat Apr 11 06:48:25.959200 2026] [:error] [pid 15244:tid 15253] [client 20.100.191.67:55748] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mariju.php"] [unique_id "adl-OYkdEsz5NeAq8w1NqgAAAQc"]
[Sat Apr 11 06:48:26.472249 2026] [:error] [pid 33172:tid 33239] [client 20.100.191.67:59821] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mariju.php"] [unique_id "adl-Ojn2G0IJw5EZY9lU2gAAAFU"]
[Sat Apr 11 06:48:26.985006 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:54478] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mariju.php"] [unique_id "adl-OokdEsz5NeAq8w1NrgAAAQ4"]
[Sat Apr 11 06:48:27.499101 2026] [:error] [pid 15244:tid 15261] [client 20.100.191.67:59862] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wXPBaHfi2do.php"] [unique_id "adl-O4kdEsz5NeAq8w1NsgAAAQ8"]
[Sat Apr 11 06:48:28.017814 2026] [:error] [pid 15244:tid 15258] [client 20.100.191.67:57154] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wXPBaHfi2do.php"] [unique_id "adl-PIkdEsz5NeAq8w1NuAAAAQw"]
[Sat Apr 11 06:48:28.529947 2026] [:error] [pid 33172:tid 33238] [client 20.100.191.67:58635] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wXPBaHfi2do.php"] [unique_id "adl-PDn2G0IJw5EZY9lU3wAAAFQ"]
[Sat Apr 11 06:48:29.044680 2026] [:error] [pid 33173:tid 33264] [client 20.100.191.67:55858] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wXPBaHfi2do.php"] [unique_id "adl-Pa8109xRDP2izWj3uQAAAJM"]
[Sat Apr 11 06:48:29.555538 2026] [:error] [pid 33288:tid 33293] [client 20.100.191.67:59793] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ropyx.php"] [unique_id "adl-PWJmwJFFPEgRHfFnfAAAAMM"]
[Sat Apr 11 06:48:30.072566 2026] [:error] [pid 33173:tid 33261] [client 20.100.191.67:58437] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ropyx.php"] [unique_id "adl-Pq8109xRDP2izWj3vQAAAJA"]
[Sat Apr 11 06:48:30.621529 2026] [:error] [pid 15244:tid 15255] [client 20.100.191.67:59868] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ropyx.php"] [unique_id "adl-PokdEsz5NeAq8w1NxgAAAQk"]
[Sat Apr 11 06:48:31.134348 2026] [:error] [pid 15244:tid 15266] [client 20.100.191.67:31394] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ropyx.php"] [unique_id "adl-P4kdEsz5NeAq8w1NzAAAARQ"]
[Sat Apr 11 06:48:31.646093 2026] [:error] [pid 15244:tid 15246] [client 20.100.191.67:57194] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/option.php"] [unique_id "adl-P4kdEsz5NeAq8w1N0AAAAQA"]
[Sat Apr 11 06:48:32.163087 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:31366] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/option.php"] [unique_id "adl-QIkdEsz5NeAq8w1N0QAAAQ4"]
[Sat Apr 11 06:48:32.684928 2026] [:error] [pid 33173:tid 33250] [client 20.100.191.67:55789] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/option.php"] [unique_id "adl-QK8109xRDP2izWj3wQAAAIU"]
[Sat Apr 11 06:48:33.225775 2026] [:error] [pid 33172:tid 33239] [client 20.100.191.67:55779] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/option.php"] [unique_id "adl-QTn2G0IJw5EZY9lU9gAAAFU"]
[Sat Apr 11 06:48:33.756658 2026] [:error] [pid 15244:tid 15263] [client 20.100.191.67:58643] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OK.php"] [unique_id "adl-QYkdEsz5NeAq8w1N3QAAARE"]
[Sat Apr 11 06:48:34.279745 2026] [:error] [pid 33172:tid 33241] [client 20.100.191.67:54520] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OK.php"] [unique_id "adl-Qjn2G0IJw5EZY9lU-QAAAFc"]
[Sat Apr 11 06:48:34.799099 2026] [:error] [pid 33288:tid 33314] [client 20.100.191.67:57198] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OK.php"] [unique_id "adl-QmJmwJFFPEgRHfFnngAAANg"]
[Sat Apr 11 06:48:35.320356 2026] [:error] [pid 33172:tid 33229] [client 20.100.191.67:48103] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/OK.php"] [unique_id "adl-Qzn2G0IJw5EZY9lVAAAAAEs"]
[Sat Apr 11 06:48:35.834998 2026] [:error] [pid 33172:tid 33236] [client 20.100.191.67:57127] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adl-Qzn2G0IJw5EZY9lVBAAAAFI"]
[Sat Apr 11 06:48:36.352642 2026] [:error] [pid 33171:tid 33205] [client 20.100.191.67:59856] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adl-RLoqTMlo30hcVw91JQAAABM"]
[Sat Apr 11 06:48:36.880093 2026] [:error] [pid 15244:tid 15267] [client 20.100.191.67:31390] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adl-RIkdEsz5NeAq8w1N7QAAARU"]
[Sat Apr 11 06:48:37.392401 2026] [:error] [pid 33288:tid 33292] [client 20.100.191.67:59781] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "adl-RWJmwJFFPEgRHfFnrwAAAMI"]
[Sat Apr 11 06:48:37.993604 2026] [:error] [pid 33173:tid 33265] [client 20.100.191.67:31367] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adl-Ra8109xRDP2izWj30gAAAJQ"]
[Sat Apr 11 06:48:38.532136 2026] [:error] [pid 33172:tid 33219] [client 20.100.191.67:31415] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adl-Rjn2G0IJw5EZY9lVFgAAAEE"]
[Sat Apr 11 06:48:39.059556 2026] [:error] [pid 33172:tid 33226] [client 20.100.191.67:58483] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adl-Rzn2G0IJw5EZY9lVGgAAAEg"]
[Sat Apr 11 06:48:39.591692 2026] [:error] [pid 15244:tid 15248] [client 20.100.191.67:58464] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adl-R4kdEsz5NeAq8w1N-AAAAQI"]
[Sat Apr 11 06:48:40.108190 2026] [:error] [pid 33173:tid 33249] [client 20.100.191.67:57113] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adl-SK8109xRDP2izWj31gAAAIQ"]
[Sat Apr 11 06:48:40.631187 2026] [:error] [pid 33173:tid 33263] [client 20.100.191.67:59777] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adl-SK8109xRDP2izWj32gAAAJI"]
[Sat Apr 11 06:48:41.168450 2026] [:error] [pid 33173:tid 33246] [client 20.100.191.67:31416] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adl-Sa8109xRDP2izWj34QAAAIE"]
[Sat Apr 11 06:48:41.708168 2026] [:error] [pid 33173:tid 33264] [client 20.100.191.67:31389] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adl-Sa8109xRDP2izWj37AAAAJM"]
[Sat Apr 11 06:48:42.231232 2026] [:error] [pid 33172:tid 33227] [client 20.100.191.67:54491] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/NexusLeads.php"] [unique_id "adl-Sjn2G0IJw5EZY9lVHQAAAEk"]
[Sat Apr 11 06:48:42.762849 2026] [:error] [pid 33288:tid 33306] [client 20.100.191.67:55825] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/NexusLeads.php"] [unique_id "adl-SmJmwJFFPEgRHfFn1wAAANA"]
[Sat Apr 11 06:48:43.295403 2026] [:error] [pid 33288:tid 33299] [client 20.100.191.67:58457] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/NexusLeads.php"] [unique_id "adl-S2JmwJFFPEgRHfFn3AAAAMk"]
[Sat Apr 11 06:48:43.844567 2026] [:error] [pid 15244:tid 15247] [client 20.100.191.67:55767] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/NexusLeads.php"] [unique_id "adl-S4kdEsz5NeAq8w1OCwAAAQE"]
[Sat Apr 11 06:48:44.379754 2026] [:error] [pid 15244:tid 15265] [client 20.100.191.67:58465] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rfzhh.php"] [unique_id "adl-TIkdEsz5NeAq8w1OEwAAARM"]
[Sat Apr 11 06:48:44.906005 2026] [:error] [pid 33288:tid 33294] [client 20.100.191.67:22265] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rfzhh.php"] [unique_id "adl-TGJmwJFFPEgRHfFn5AAAAMQ"]
[Sat Apr 11 06:48:45.425956 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:55761] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rfzhh.php"] [unique_id "adl-TYkdEsz5NeAq8w1OFwAAAQ4"]
[Sat Apr 11 06:48:45.942141 2026] [:error] [pid 33173:tid 33258] [client 20.100.191.67:57133] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rfzhh.php"] [unique_id "adl-Ta8109xRDP2izWj3_AAAAI0"]
[Sat Apr 11 06:48:46.465092 2026] [:error] [pid 15244:tid 15265] [client 20.100.191.67:54472] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-wp.php"] [unique_id "adl-TokdEsz5NeAq8w1OJAAAARM"]
[Sat Apr 11 06:48:46.992957 2026] [:error] [pid 33173:tid 33266] [client 20.100.191.67:58629] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-wp.php"] [unique_id "adl-Tq8109xRDP2izWj4AgAAAJU"]
[Sat Apr 11 06:48:47.514279 2026] [:error] [pid 33288:tid 33303] [client 20.100.191.67:58675] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-wp.php"] [unique_id "adl-T2JmwJFFPEgRHfFn-QAAAM0"]
[Sat Apr 11 06:48:48.026636 2026] [:error] [pid 33171:tid 33207] [client 20.100.191.67:57195] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-wp.php"] [unique_id "adl-ULoqTMlo30hcVw91QwAAABU"]
[Sat Apr 11 06:48:48.543185 2026] [:error] [pid 33172:tid 33225] [client 20.100.191.67:58672] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uplozyu.php"] [unique_id "adl-UDn2G0IJw5EZY9lVJgAAAEc"]
[Sat Apr 11 06:48:49.074790 2026] [:error] [pid 33171:tid 33200] [client 20.100.191.67:58442] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uplozyu.php"] [unique_id "adl-UboqTMlo30hcVw91SQAAAA4"]
[Sat Apr 11 06:48:49.588673 2026] [:error] [pid 33288:tid 33304] [client 20.100.191.67:57110] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uplozyu.php"] [unique_id "adl-UWJmwJFFPEgRHfFoBgAAAM4"]
[Sat Apr 11 06:48:50.120591 2026] [:error] [pid 15244:tid 15268] [client 20.100.191.67:58488] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uplozyu.php"] [unique_id "adl-UokdEsz5NeAq8w1OOQAAARY"]
[Sat Apr 11 06:48:50.647489 2026] [:error] [pid 33288:tid 33313] [client 20.100.191.67:59783] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adl-UmJmwJFFPEgRHfFoEQAAANc"]
[Sat Apr 11 06:48:51.176806 2026] [:error] [pid 33171:tid 33207] [client 20.100.191.67:58460] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adl-U7oqTMlo30hcVw91UgAAABU"]
[Sat Apr 11 06:48:51.735955 2026] [:error] [pid 33173:tid 33253] [client 20.100.191.67:57149] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adl-U68109xRDP2izWj4CQAAAIg"]
[Sat Apr 11 06:48:52.289517 2026] [:error] [pid 33288:tid 33307] [client 20.100.191.67:55827] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adl-VGJmwJFFPEgRHfFoIwAAANE"]
[Sat Apr 11 06:48:52.820083 2026] [:error] [pid 33172:tid 33234] [client 20.100.191.67:55744] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lpktuneq.php"] [unique_id "adl-VDn2G0IJw5EZY9lVMwAAAFA"]
[Sat Apr 11 06:48:53.345904 2026] [:error] [pid 33172:tid 33228] [client 20.100.191.67:59879] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lpktuneq.php"] [unique_id "adl-VTn2G0IJw5EZY9lVNgAAAEo"]
[Sat Apr 11 06:48:53.862387 2026] [:error] [pid 33171:tid 33198] [client 20.100.191.67:54086] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lpktuneq.php"] [unique_id "adl-VboqTMlo30hcVw91WwAAAAw"]
[Sat Apr 11 06:48:54.390336 2026] [:error] [pid 15244:tid 15268] [client 20.100.191.67:54098] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lpktuneq.php"] [unique_id "adl-VokdEsz5NeAq8w1ORgAAARY"]
[Sat Apr 11 06:48:54.919900 2026] [:error] [pid 33288:tid 33307] [client 20.100.191.67:54495] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adl-VmJmwJFFPEgRHfFoLgAAANE"]
[Sat Apr 11 06:48:55.442095 2026] [:error] [pid 33171:tid 33190] [client 20.100.191.67:55826] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adl-V7oqTMlo30hcVw91XwAAAAQ"]
[Sat Apr 11 06:48:55.957422 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:58686] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adl-V4kdEsz5NeAq8w1OTgAAAQ4"]
[Sat Apr 11 06:48:56.476090 2026] [:error] [pid 15244:tid 15248] [client 20.100.191.67:59891] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adl-WIkdEsz5NeAq8w1OVgAAAQI"]
[Sat Apr 11 06:48:56.999670 2026] [:error] [pid 33171:tid 33207] [client 20.100.191.67:54123] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-widgets.php"] [unique_id "adl-WLoqTMlo30hcVw91ZQAAABU"]
[Sat Apr 11 06:48:57.529454 2026] [:error] [pid 15244:tid 15258] [client 20.100.191.67:54093] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-widgets.php"] [unique_id "adl-WYkdEsz5NeAq8w1OYwAAAQw"]
[Sat Apr 11 06:48:58.049212 2026] [:error] [pid 33288:tid 33313] [client 20.100.191.67:58480] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-widgets.php"] [unique_id "adl-WmJmwJFFPEgRHfFoNAAAANc"]
[Sat Apr 11 06:48:58.572386 2026] [:error] [pid 33171:tid 33205] [client 20.100.191.67:57130] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-widgets.php"] [unique_id "adl-WroqTMlo30hcVw91ZwAAABM"]
[Sat Apr 11 06:48:59.089552 2026] [:error] [pid 33288:tid 33306] [client 20.100.191.67:57101] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tsconfig.php"] [unique_id "adl-W2JmwJFFPEgRHfFoOwAAANA"]
[Sat Apr 11 06:48:59.618858 2026] [:error] [pid 15244:tid 15247] [client 20.100.191.67:58446] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tsconfig.php"] [unique_id "adl-W4kdEsz5NeAq8w1OdwAAAQE"]
[Sat Apr 11 06:49:00.147296 2026] [:error] [pid 33171:tid 33199] [client 20.100.191.67:59804] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tsconfig.php"] [unique_id "adl-XLoqTMlo30hcVw91bAAAAA0"]
[Sat Apr 11 06:49:00.661629 2026] [:error] [pid 33288:tid 33291] [client 20.100.191.67:57123] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tsconfig.php"] [unique_id "adl-XGJmwJFFPEgRHfFoQQAAAME"]
[Sat Apr 11 06:49:01.189670 2026] [:error] [pid 33171:tid 33192] [client 20.100.191.67:54465] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adl-XboqTMlo30hcVw91bgAAAAY"]
[Sat Apr 11 06:49:01.708139 2026] [:error] [pid 33171:tid 33195] [client 20.100.191.67:58677] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adl-XboqTMlo30hcVw91cAAAAAk"]
[Sat Apr 11 06:49:02.236611 2026] [:error] [pid 15244:tid 15263] [client 20.100.191.67:57212] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adl-XokdEsz5NeAq8w1OkgAAARE"]
[Sat Apr 11 06:49:02.775516 2026] [:error] [pid 15244:tid 15254] [client 20.100.191.67:54127] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adl-XokdEsz5NeAq8w1OlwAAAQg"]
[Sat Apr 11 06:49:03.294985 2026] [:error] [pid 33171:tid 33203] [client 20.100.191.67:54080] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adl-X7oqTMlo30hcVw91eQAAABE"]
[Sat Apr 11 06:49:03.813478 2026] [:error] [pid 33172:tid 33231] [client 20.100.191.67:57145] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adl-Xzn2G0IJw5EZY9lVXQAAAE0"]
[Sat Apr 11 06:49:04.329697 2026] [:error] [pid 33173:tid 33247] [client 20.100.191.67:57142] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adl-YK8109xRDP2izWj4GgAAAII"]
[Sat Apr 11 06:49:04.847897 2026] [:error] [pid 33173:tid 33245] [client 20.100.191.67:55775] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adl-YK8109xRDP2izWj4IQAAAIA"]
[Sat Apr 11 06:49:05.368511 2026] [:error] [pid 33173:tid 33269] [client 20.100.191.67:58659] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turbo.php"] [unique_id "adl-Ya8109xRDP2izWj4JAAAAJg"]
[Sat Apr 11 06:49:05.881292 2026] [:error] [pid 33288:tid 33293] [client 20.100.191.67:53237] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turbo.php"] [unique_id "adl-YWJmwJFFPEgRHfFoSwAAAMM"]
[Sat Apr 11 06:49:06.403557 2026] [:error] [pid 33172:tid 33221] [client 20.100.191.67:58663] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turbo.php"] [unique_id "adl-Yjn2G0IJw5EZY9lVagAAAEM"]
[Sat Apr 11 06:49:06.933469 2026] [:error] [pid 33171:tid 33200] [client 20.100.191.67:57189] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turbo.php"] [unique_id "adl-YroqTMlo30hcVw91igAAAA4"]
[Sat Apr 11 06:49:07.462006 2026] [:error] [pid 15244:tid 15270] [client 20.100.191.67:57184] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/small.php"] [unique_id "adl-Y4kdEsz5NeAq8w1OpwAAARg"]
[Sat Apr 11 06:49:08.001481 2026] [:error] [pid 33288:tid 33304] [client 20.100.191.67:58435] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/small.php"] [unique_id "adl-Y2JmwJFFPEgRHfFoUgAAAM4"]
[Sat Apr 11 06:49:08.520818 2026] [:error] [pid 15244:tid 15257] [client 20.100.191.67:31407] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/small.php"] [unique_id "adl-ZIkdEsz5NeAq8w1OsAAAAQs"]
[Sat Apr 11 06:49:09.036651 2026] [:error] [pid 15244:tid 15247] [client 20.100.191.67:31379] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/small.php"] [unique_id "adl-ZYkdEsz5NeAq8w1OuQAAAQE"]
[Sat Apr 11 06:49:09.552132 2026] [:error] [pid 33288:tid 33311] [client 20.100.191.67:59788] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adl-ZWJmwJFFPEgRHfFoWwAAANU"]
[Sat Apr 11 06:49:10.087801 2026] [:error] [pid 33172:tid 33225] [client 20.100.191.67:55863] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adl-Zjn2G0IJw5EZY9lVdgAAAEc"]
[Sat Apr 11 06:49:10.602514 2026] [:error] [pid 15244:tid 15246] [client 20.100.191.67:50923] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adl-ZokdEsz5NeAq8w1OxAAAAQA"]
[Sat Apr 11 06:49:11.115198 2026] [:error] [pid 33173:tid 33246] [client 20.100.191.67:53207] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adl-Z68109xRDP2izWj4NQAAAIE"]
[Sat Apr 11 06:49:11.641280 2026] [:error] [pid 15244:tid 15248] [client 20.100.191.67:57191] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adl-Z4kdEsz5NeAq8w1OywAAAQI"]
[Sat Apr 11 06:49:12.158446 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:31423] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adl-aIkdEsz5NeAq8w1OzwAAAQ4"]
[Sat Apr 11 06:49:12.683657 2026] [:error] [pid 33173:tid 33260] [client 20.100.191.67:54128] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adl-aK8109xRDP2izWj4PgAAAI8"]
[Sat Apr 11 06:49:13.199473 2026] [:error] [pid 33171:tid 33205] [client 20.100.191.67:58472] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adl-aboqTMlo30hcVw91mAAAABM"]
[Sat Apr 11 06:49:13.717434 2026] [:error] [pid 33172:tid 33221] [client 20.100.191.67:54085] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/veoblmpa.php"] [unique_id "adl-aTn2G0IJw5EZY9lVhAAAAEM"]
[Sat Apr 11 06:49:14.241217 2026] [:error] [pid 33173:tid 33260] [client 20.100.191.67:54111] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/veoblmpa.php"] [unique_id "adl-aq8109xRDP2izWj4TAAAAI8"]
[Sat Apr 11 06:49:14.756845 2026] [:error] [pid 33171:tid 33189] [client 20.100.191.67:54513] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/veoblmpa.php"] [unique_id "adl-aroqTMlo30hcVw91mwAAAAM"]
[Sat Apr 11 06:49:15.275096 2026] [:error] [pid 33173:tid 33253] [client 20.100.191.67:49343] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/veoblmpa.php"] [unique_id "adl-a68109xRDP2izWj4UwAAAIg"]
[Sat Apr 11 06:49:15.789948 2026] [:error] [pid 33172:tid 33220] [client 20.100.191.67:49349] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adl-azn2G0IJw5EZY9lVhgAAAEI"]
[Sat Apr 11 06:49:16.306693 2026] [:error] [pid 15244:tid 15269] [client 20.100.191.67:59842] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adl-bIkdEsz5NeAq8w1O3QAAARc"]
[Sat Apr 11 06:49:16.840259 2026] [:error] [pid 15244:tid 15258] [client 20.100.191.67:53222] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adl-bIkdEsz5NeAq8w1O4wAAAQw"]
[Sat Apr 11 06:49:17.350113 2026] [:error] [pid 33172:tid 33236] [client 20.100.191.67:58491] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adl-bTn2G0IJw5EZY9lViwAAAFI"]
[Sat Apr 11 06:49:17.872046 2026] [:error] [pid 33288:tid 33314] [client 20.100.191.67:59874] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/levyzxsb.php"] [unique_id "adl-bWJmwJFFPEgRHfFocwAAANg"]
[Sat Apr 11 06:49:18.395350 2026] [:error] [pid 33171:tid 33187] [client 20.100.191.67:53185] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/levyzxsb.php"] [unique_id "adl-broqTMlo30hcVw91oAAAAAE"]
[Sat Apr 11 06:49:18.914503 2026] [:error] [pid 15244:tid 15253] [client 20.100.191.67:59780] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/levyzxsb.php"] [unique_id "adl-bokdEsz5NeAq8w1O-AAAAQc"]
[Sat Apr 11 06:49:19.450794 2026] [:error] [pid 33172:tid 33221] [client 20.100.191.67:59874] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/levyzxsb.php"] [unique_id "adl-bzn2G0IJw5EZY9lVkgAAAEM"]
[Sat Apr 11 06:49:19.971290 2026] [:error] [pid 15244:tid 15252] [client 20.100.191.67:58478] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adl-b4kdEsz5NeAq8w1PAwAAAQY"]
[Sat Apr 11 06:49:20.488177 2026] [:error] [pid 33173:tid 33258] [client 20.100.191.67:31365] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adl-cK8109xRDP2izWj4YAAAAI0"]
[Sat Apr 11 06:49:21.004360 2026] [:error] [pid 33172:tid 33231] [client 20.100.191.67:57111] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adl-cTn2G0IJw5EZY9lVlwAAAE0"]
[Sat Apr 11 06:49:21.522330 2026] [:error] [pid 33172:tid 33219] [client 20.100.191.67:59850] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HtQmJOArI4R.php"] [unique_id "adl-cTn2G0IJw5EZY9lVmQAAAEE"]
[Sat Apr 11 06:49:22.044820 2026] [:error] [pid 15244:tid 15250] [client 20.100.191.67:55850] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adl-cokdEsz5NeAq8w1PEwAAAQQ"]
[Sat Apr 11 06:49:22.557764 2026] [:error] [pid 33173:tid 33249] [client 20.100.191.67:53209] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adl-cq8109xRDP2izWj4ZwAAAIQ"]
[Sat Apr 11 06:49:23.131433 2026] [:error] [pid 15244:tid 15260] [client 20.100.191.67:58477] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adl-c4kdEsz5NeAq8w1PHwAAAQ4"]
[Sat Apr 11 06:49:23.663446 2026] [:error] [pid 33172:tid 33242] [client 20.100.191.67:59833] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "adl-czn2G0IJw5EZY9lVogAAAFg"]
[Sat Apr 11 06:49:24.186866 2026] [:error] [pid 33288:tid 33314] [client 20.100.191.67:59844] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adl-dGJmwJFFPEgRHfFogQAAANg"]
[Sat Apr 11 06:49:24.697905 2026] [:error] [pid 15244:tid 15247] [client 20.100.191.67:55808] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "adl-dIkdEsz5NeAq8w1PNwAAAQE"]
[Sat Apr 11 06:49:25.241008 2026] [proxy_fcgi:error] [pid 15244:tid 15254] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:25.499858 2026] [proxy_fcgi:error] [pid 15244:tid 15256] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:25.762325 2026] [proxy_fcgi:error] [pid 15244:tid 15249] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:26.028092 2026] [proxy_fcgi:error] [pid 15244:tid 15268] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:26.287699 2026] [proxy_fcgi:error] [pid 15244:tid 15246] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:26.548055 2026] [proxy_fcgi:error] [pid 15244:tid 15259] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:26.807681 2026] [proxy_fcgi:error] [pid 15244:tid 15249] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:27.066860 2026] [proxy_fcgi:error] [pid 15244:tid 15251] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:27.332877 2026] [proxy_fcgi:error] [pid 15244:tid 15268] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:27.600191 2026] [proxy_fcgi:error] [pid 15244:tid 15246] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:27.860097 2026] [proxy_fcgi:error] [pid 15244:tid 15257] [client 20.100.191.67:57167] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 06:49:28.115394 2026] [:error] [pid 15244:tid 15248] [client 20.100.191.67:57167] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adl-eIkdEsz5NeAq8w1PawAAAQI"]
[Sat Apr 11 06:49:28.647865 2026] [:error] [pid 15244:tid 15268] [client 20.100.191.67:59800] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adl-eIkdEsz5NeAq8w1PcQAAARY"]
[Sat Apr 11 06:49:29.189431 2026] [:error] [pid 33172:tid 33223] [client 20.100.191.67:54501] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adl-eTn2G0IJw5EZY9lVqAAAAEU"]
[Sat Apr 11 06:49:29.719800 2026] [:error] [pid 33171:tid 33187] [client 20.100.191.67:31398] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adl-eboqTMlo30hcVw91xAAAAAE"]
[Sat Apr 11 06:49:30.236716 2026] [:error] [pid 33171:tid 33197] [client 20.100.191.67:59797] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-more.php"] [unique_id "adl-eroqTMlo30hcVw91xwAAAAs"]
[Sat Apr 11 06:49:30.765083 2026] [:error] [pid 33173:tid 33263] [client 20.100.191.67:59890] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-more.php"] [unique_id "adl-eq8109xRDP2izWj4ewAAAJI"]
[Sat Apr 11 06:49:31.278804 2026] [:error] [pid 33173:tid 33261] [client 20.100.191.67:54088] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-more.php"] [unique_id "adl-e68109xRDP2izWj4gAAAAJA"]
[Sat Apr 11 06:49:31.789851 2026] [:error] [pid 33288:tid 33302] [client 20.100.191.67:55843] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-more.php"] [unique_id "adl-e2JmwJFFPEgRHfFoiQAAAMw"]
[Sat Apr 11 06:49:32.312253 2026] [:error] [pid 33171:tid 33206] [client 20.100.191.67:59857] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adl-fLoqTMlo30hcVw910QAAABQ"]
[Sat Apr 11 06:49:32.848401 2026] [:error] [pid 33173:tid 33262] [client 20.100.191.67:22238] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adl-fK8109xRDP2izWj4iwAAAJE"]
[Sat Apr 11 06:49:33.365201 2026] [:error] [pid 15244:tid 15255] [client 20.100.191.67:57192] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adl-fYkdEsz5NeAq8w1PfwAAAQk"]
[Sat Apr 11 06:49:33.878544 2026] [:error] [pid 15244:tid 15266] [client 20.100.191.67:55840] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adl-fYkdEsz5NeAq8w1PggAAARQ"]
[Sat Apr 11 06:49:34.396160 2026] [:error] [pid 33288:tid 33307] [client 20.100.191.67:48059] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adl-fmJmwJFFPEgRHfFoogAAANE"]
[Sat Apr 11 06:49:34.914815 2026] [:error] [pid 33288:tid 33304] [client 20.100.191.67:57188] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adl-fmJmwJFFPEgRHfForQAAAM4"]
[Sat Apr 11 06:49:35.426279 2026] [:error] [pid 33171:tid 33189] [client 20.100.191.67:31417] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adl-f7oqTMlo30hcVw913QAAAAM"]
[Sat Apr 11 06:49:35.941190 2026] [:error] [pid 33172:tid 33222] [client 20.100.191.67:57172] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adl-fzn2G0IJw5EZY9lVvgAAAEQ"]
[Sat Apr 11 07:30:47.860849 2026] [proxy_fcgi:error] [pid 33171:tid 33194] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:48.100226 2026] [proxy_fcgi:error] [pid 33171:tid 33208] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:48.337496 2026] [proxy_fcgi:error] [pid 33171:tid 33186] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:48.618079 2026] [proxy_fcgi:error] [pid 33171:tid 33209] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:48.934066 2026] [proxy_fcgi:error] [pid 33171:tid 33201] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:49.171788 2026] [proxy_fcgi:error] [pid 33171:tid 33189] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:49.491144 2026] [proxy_fcgi:error] [pid 33171:tid 33210] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:49.752624 2026] [proxy_fcgi:error] [pid 33171:tid 33205] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:49.997415 2026] [proxy_fcgi:error] [pid 33171:tid 33194] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:50.259597 2026] [proxy_fcgi:error] [pid 33171:tid 33191] [client 51.107.88.105:53324] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:30:50.493775 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:53324] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admIKroqTMlo30hcVw-IiAAAAAI"]
[Sat Apr 11 07:30:51.094120 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:58442] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admIK2JmwJFFPEgRHfGL7QAAAMY"]
[Sat Apr 11 07:30:51.696664 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:58476] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admIK4kdEsz5NeAq8w2ARgAAARg"]
[Sat Apr 11 07:30:52.211772 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:63232] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admILIkdEsz5NeAq8w2ASgAAARM"]
[Sat Apr 11 07:30:52.687447 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:59261] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "admILGJmwJFFPEgRHfGL8QAAAMo"]
[Sat Apr 11 07:30:56.850983 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:59258] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "admIMIkdEsz5NeAq8w2AYQAAAQs"]
[Sat Apr 11 07:31:02.338269 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:59215] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "admINokdEsz5NeAq8w2AewAAAQ8"]
[Sat Apr 11 07:31:02.901949 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:59221] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "admINokdEsz5NeAq8w2AgQAAAQs"]
[Sat Apr 11 07:31:03.409340 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:63236] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admIN2JmwJFFPEgRHfGMDwAAAMY"]
[Sat Apr 11 07:31:03.884285 2026] [:error] [pid 33172:tid 33235] [client 51.107.88.105:58440] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admINzn2G0IJw5EZY9lrAgAAAFE"]
[Sat Apr 11 07:31:04.373265 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:52704] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admIOIkdEsz5NeAq8w2AhgAAAQ8"]
[Sat Apr 11 07:31:04.841657 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:63285] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admIOIkdEsz5NeAq8w2AiAAAARI"]
[Sat Apr 11 07:31:05.314099 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:58491] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "admIOWJmwJFFPEgRHfGMHgAAAMU"]
[Sat Apr 11 07:31:05.901164 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:58436] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "admIOYkdEsz5NeAq8w2AkQAAAQw"]
[Sat Apr 11 07:31:06.411690 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:63284] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "admIOq8109xRDP2izWgSsQAAAI8"]
[Sat Apr 11 07:31:06.884693 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:59228] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "admIOokdEsz5NeAq8w2AlwAAARg"]
[Sat Apr 11 07:31:07.428539 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:53327] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "admIO2JmwJFFPEgRHfGMJQAAAME"]
[Sat Apr 11 07:31:07.920838 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:63274] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "admIOzn2G0IJw5EZY9lrDQAAAFU"]
[Sat Apr 11 07:31:08.401267 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:49594] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "admIPIkdEsz5NeAq8w2AnQAAARA"]
[Sat Apr 11 07:31:08.884476 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:63252] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "admIPK8109xRDP2izWgStwAAAII"]
[Sat Apr 11 07:31:09.389748 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:59248] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "admIPa8109xRDP2izWgSuQAAAI4"]
[Sat Apr 11 07:31:09.914331 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:58464] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "admIPa8109xRDP2izWgSvAAAAIQ"]
[Sat Apr 11 07:31:10.383718 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:58475] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "admIPq8109xRDP2izWgSxgAAAIs"]
[Sat Apr 11 07:31:10.853289 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:63272] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "admIPmJmwJFFPEgRHfGMKwAAANU"]
[Sat Apr 11 07:31:11.334742 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:53341] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "admIP2JmwJFFPEgRHfGMMQAAAMk"]
[Sat Apr 11 07:31:11.838936 2026] [:error] [pid 33172:tid 33219] [client 51.107.88.105:53312] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "admIPzn2G0IJw5EZY9lrFwAAAEE"]
[Sat Apr 11 07:31:12.322098 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:58449] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "admIQGJmwJFFPEgRHfGMOQAAANY"]
[Sat Apr 11 07:31:12.826436 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:58474] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "admIQIkdEsz5NeAq8w2AqQAAARM"]
[Sat Apr 11 07:31:13.302618 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:63292] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admIQa8109xRDP2izWgS0AAAAIE"]
[Sat Apr 11 07:31:13.784484 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:59238] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admIQYkdEsz5NeAq8w2ArgAAAQM"]
[Sat Apr 11 07:31:14.299751 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:58437] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admIQmJmwJFFPEgRHfGMQgAAANc"]
[Sat Apr 11 07:31:14.784245 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:58435] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admIQmJmwJFFPEgRHfGMRwAAAMQ"]
[Sat Apr 11 07:31:15.264405 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:63270] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "admIQ4kdEsz5NeAq8w2AswAAARI"]
[Sat Apr 11 07:31:15.753560 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:58479] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "admIQ4kdEsz5NeAq8w2AtgAAAQc"]
[Sat Apr 11 07:31:16.281515 2026] [:error] [pid 33171:tid 33197] [client 51.107.88.105:59232] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "admIRLoqTMlo30hcVw-IrwAAAAs"]
[Sat Apr 11 07:31:16.825328 2026] [:error] [pid 33171:tid 33187] [client 51.107.88.105:58486] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "admIRLoqTMlo30hcVw-IsgAAAAE"]
[Sat Apr 11 07:31:17.327306 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:59242] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admIRYkdEsz5NeAq8w2AwgAAAQU"]
[Sat Apr 11 07:31:17.853114 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:53315] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admIRa8109xRDP2izWgS4gAAAJE"]
[Sat Apr 11 07:31:18.333914 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:58484] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admIRq8109xRDP2izWgS6AAAAIw"]
[Sat Apr 11 07:31:18.832199 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:59203] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admIRq8109xRDP2izWgS7gAAAIs"]
[Sat Apr 11 07:31:19.390641 2026] [:error] [pid 33173:tid 33261] [client 51.107.88.105:59206] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "admIR68109xRDP2izWgS8gAAAJA"]
[Sat Apr 11 07:31:19.917855 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:63280] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "admIRzn2G0IJw5EZY9lrJgAAAE8"]
[Sat Apr 11 07:31:20.393463 2026] [:error] [pid 33172:tid 33241] [client 51.107.88.105:53314] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "admISDn2G0IJw5EZY9lrLAAAAFc"]
[Sat Apr 11 07:31:20.871407 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:63265] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "admISIkdEsz5NeAq8w2A0gAAAQM"]
[Sat Apr 11 07:31:21.368564 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:59235] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "admISYkdEsz5NeAq8w2A1AAAAQU"]
[Sat Apr 11 07:31:21.931245 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:58490] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "admISTn2G0IJw5EZY9lrNQAAAEg"]
[Sat Apr 11 07:31:22.401995 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:59236] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "admISmJmwJFFPEgRHfGMVgAAANg"]
[Sat Apr 11 07:31:22.993154 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:53323] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "admISq8109xRDP2izWgTAgAAAJI"]
[Sat Apr 11 07:31:23.525494 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:58439] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "admISzn2G0IJw5EZY9lrPAAAAFY"]
[Sat Apr 11 07:31:24.029049 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:58451] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "admITK8109xRDP2izWgTBgAAAIo"]
[Sat Apr 11 07:31:24.572956 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:58487] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "admITGJmwJFFPEgRHfGMXgAAANY"]
[Sat Apr 11 07:31:25.193320 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:53318] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "admITWJmwJFFPEgRHfGMYgAAANI"]
[Sat Apr 11 07:31:25.673488 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:58477] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admITboqTMlo30hcVw-IvgAAAAA"]
[Sat Apr 11 07:31:26.203214 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:63239] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admITmJmwJFFPEgRHfGMZgAAANA"]
[Sat Apr 11 07:31:26.680619 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:52693] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admITq8109xRDP2izWgTCwAAAIY"]
[Sat Apr 11 07:31:27.203642 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:58460] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admIT7oqTMlo30hcVw-IwQAAABU"]
[Sat Apr 11 07:31:27.673555 2026] [:error] [pid 33173:tid 33267] [client 51.107.88.105:59247] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admIT68109xRDP2izWgTEAAAAJY"]
[Sat Apr 11 07:31:28.168824 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:63254] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admIUGJmwJFFPEgRHfGMbQAAAM8"]
[Sat Apr 11 07:31:28.637300 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:52708] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admIUGJmwJFFPEgRHfGMcQAAAMM"]
[Sat Apr 11 07:31:29.104107 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:63262] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "admIUYkdEsz5NeAq8w2A9QAAAQE"]
[Sat Apr 11 07:31:29.689054 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:63283] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "admIUboqTMlo30hcVw-IxwAAABg"]
[Sat Apr 11 07:31:30.223405 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:58485] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "admIUq8109xRDP2izWgTFwAAAI4"]
[Sat Apr 11 07:31:30.700484 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:52687] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "admIUokdEsz5NeAq8w2A_gAAARY"]
[Sat Apr 11 07:31:31.222601 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:59230] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "admIUzn2G0IJw5EZY9lrTwAAAEI"]
[Sat Apr 11 07:31:31.732604 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:53316] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "admIU4kdEsz5NeAq8w2BCAAAARc"]
[Sat Apr 11 07:31:32.318433 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:53325] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "admIVGJmwJFFPEgRHfGMewAAAM8"]
[Sat Apr 11 07:31:32.863246 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:63291] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "admIVIkdEsz5NeAq8w2BFAAAAQ0"]
[Sat Apr 11 07:31:33.347889 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:53366] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "admIVa8109xRDP2izWgTIQAAAJQ"]
[Sat Apr 11 07:31:33.880644 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:59205] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admIVboqTMlo30hcVw-IywAAAAg"]
[Sat Apr 11 07:31:34.466081 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:63250] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admIVokdEsz5NeAq8w2BKAAAARM"]
[Sat Apr 11 07:31:35.062889 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:63295] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admIV4kdEsz5NeAq8w2BLwAAARE"]
[Sat Apr 11 07:31:35.534594 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:63253] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admIV4kdEsz5NeAq8w2BNwAAARM"]
[Sat Apr 11 07:31:36.022747 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:52672] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "admIWLoqTMlo30hcVw-I0wAAAAM"]
[Sat Apr 11 07:31:36.575309 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:59216] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "admIWGJmwJFFPEgRHfGMiQAAANc"]
[Sat Apr 11 07:31:37.159401 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:63243] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "admIWWJmwJFFPEgRHfGMkAAAAMg"]
[Sat Apr 11 07:31:37.713811 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:53372] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "admIWTn2G0IJw5EZY9lrXAAAAEg"]
[Sat Apr 11 07:31:38.237577 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:53322] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "admIWmJmwJFFPEgRHfGMnQAAAMo"]
[Sat Apr 11 07:31:38.743583 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:59251] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "admIWokdEsz5NeAq8w2BPQAAAQU"]
[Sat Apr 11 07:31:39.699957 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:49564] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "admIW4kdEsz5NeAq8w2BSgAAAQQ"]
[Sat Apr 11 07:31:40.178396 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:49576] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "admIXIkdEsz5NeAq8w2BUQAAARI"]
[Sat Apr 11 07:31:40.676376 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:58450] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "admIXIkdEsz5NeAq8w2BWAAAAQA"]
[Sat Apr 11 07:31:41.169432 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:58481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "admIXWJmwJFFPEgRHfGMogAAAM4"]
[Sat Apr 11 07:31:41.677301 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:58495] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "admIXWJmwJFFPEgRHfGMpQAAAMA"]
[Sat Apr 11 07:31:42.220023 2026] [:error] [pid 33173:tid 33269] [client 51.107.88.105:49586] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "admIXq8109xRDP2izWgTMAAAAJg"]
[Sat Apr 11 07:31:42.786393 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:59237] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "admIXokdEsz5NeAq8w2BZAAAAQw"]
[Sat Apr 11 07:31:43.616312 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:63245] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "admIX68109xRDP2izWgTPAAAAIE"]
[Sat Apr 11 07:31:44.193108 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:53342] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "admIYIkdEsz5NeAq8w2BbAAAARE"]
[Sat Apr 11 07:31:44.816280 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:49540] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "admIYIkdEsz5NeAq8w2BcwAAAQQ"]
[Sat Apr 11 07:31:45.314947 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:52716] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "admIYboqTMlo30hcVw-I4wAAABU"]
[Sat Apr 11 07:31:45.776622 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:59229] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "admIYYkdEsz5NeAq8w2BfQAAAQI"]
[Sat Apr 11 07:31:46.278929 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:53313] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "admIYmJmwJFFPEgRHfGMrQAAAM4"]
[Sat Apr 11 07:31:46.786627 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:52733] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "admIYq8109xRDP2izWgTQgAAAIY"]
[Sat Apr 11 07:31:47.504525 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:58455] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "admIY2JmwJFFPEgRHfGMsAAAAMQ"]
[Sat Apr 11 07:31:48.002355 2026] [:error] [pid 15244:tid 15267] [client 51.107.88.105:58453] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "admIZIkdEsz5NeAq8w2BnQAAARU"]
[Sat Apr 11 07:31:48.548533 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:63241] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "admIZGJmwJFFPEgRHfGMtgAAAM0"]
[Sat Apr 11 07:31:49.150891 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:59223] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "admIZa8109xRDP2izWgTTQAAAIo"]
[Sat Apr 11 07:31:49.621824 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:52688] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "admIZWJmwJFFPEgRHfGMugAAAMI"]
[Sat Apr 11 07:31:50.122894 2026] [proxy_fcgi:error] [pid 33288:tid 33294] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:50.397446 2026] [proxy_fcgi:error] [pid 33288:tid 33300] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:50.642719 2026] [proxy_fcgi:error] [pid 33288:tid 33295] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:50.880999 2026] [proxy_fcgi:error] [pid 33288:tid 33310] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:51.119362 2026] [proxy_fcgi:error] [pid 33288:tid 33292] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:51.356742 2026] [proxy_fcgi:error] [pid 33288:tid 33297] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:51.595674 2026] [proxy_fcgi:error] [pid 33288:tid 33301] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:51.835683 2026] [proxy_fcgi:error] [pid 33288:tid 33304] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:52.072292 2026] [proxy_fcgi:error] [pid 33288:tid 33305] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:52.360640 2026] [proxy_fcgi:error] [pid 33288:tid 33311] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:52.597595 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 51.107.88.105:53319] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:31:52.831262 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:53319] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "admIaGJmwJFFPEgRHfGM1gAAANM"]
[Sat Apr 11 07:31:53.326694 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:59212] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "admIaa8109xRDP2izWgTXwAAAIA"]
[Sat Apr 11 07:31:53.794176 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:58482] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "admIaWJmwJFFPEgRHfGM3gAAAMc"]
[Sat Apr 11 07:31:54.529307 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:58457] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "admIaq8109xRDP2izWgTZQAAAIo"]
[Sat Apr 11 07:31:55.722695 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:49567] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admIa68109xRDP2izWgTawAAAIQ"]
[Sat Apr 11 07:31:56.263085 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:52709] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admIbK8109xRDP2izWgTcAAAAIE"]
[Sat Apr 11 07:31:56.780476 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:63249] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admIbDn2G0IJw5EZY9lrdwAAAFQ"]
[Sat Apr 11 07:31:57.251982 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:53340] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admIba8109xRDP2izWgTdQAAAIM"]
[Sat Apr 11 07:31:57.744987 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:59219] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "admIbWJmwJFFPEgRHfGM_AAAAM4"]
[Sat Apr 11 07:31:58.281159 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:63282] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "admIbjn2G0IJw5EZY9lregAAAFI"]
[Sat Apr 11 07:31:58.766568 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:59202] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "admIbq8109xRDP2izWgTfQAAAIg"]
[Sat Apr 11 07:31:59.285222 2026] [:error] [pid 33172:tid 33241] [client 51.107.88.105:63288] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "admIbzn2G0IJw5EZY9lrggAAAFc"]
[Sat Apr 11 07:31:59.758678 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:63268] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admIb2JmwJFFPEgRHfGNAAAAAMo"]
[Sat Apr 11 07:32:00.223567 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:52700] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admIcDn2G0IJw5EZY9lrhAAAAEg"]
[Sat Apr 11 07:32:00.751454 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:59260] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admIcGJmwJFFPEgRHfGNCAAAAMQ"]
[Sat Apr 11 07:32:01.274277 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:53347] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admIcboqTMlo30hcVw-JBQAAABU"]
[Sat Apr 11 07:32:01.745272 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:52731] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "admIcWJmwJFFPEgRHfGNDgAAANE"]
[Sat Apr 11 07:32:02.211349 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:58448] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "admIcmJmwJFFPEgRHfGNEgAAANU"]
[Sat Apr 11 07:32:02.690813 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:59243] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "admIcjn2G0IJw5EZY9lriQAAAEY"]
[Sat Apr 11 07:32:03.175132 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:52692] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "admIc2JmwJFFPEgRHfGNGQAAAMk"]
[Sat Apr 11 07:32:03.821838 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:59255] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "admIc2JmwJFFPEgRHfGNGwAAANE"]
[Sat Apr 11 07:32:04.375675 2026] [:error] [pid 33171:tid 33187] [client 51.107.88.105:53321] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "admIdLoqTMlo30hcVw-JDgAAAAE"]
[Sat Apr 11 07:32:04.905496 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:63281] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "admIdIkdEsz5NeAq8w2CDwAAAQ0"]
[Sat Apr 11 07:32:05.376059 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:58465] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "admIdYkdEsz5NeAq8w2CFAAAARc"]
[Sat Apr 11 07:32:05.890010 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:58471] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admIdWJmwJFFPEgRHfGNHwAAANU"]
[Sat Apr 11 07:32:06.372629 2026] [:error] [pid 15244:tid 15267] [client 51.107.88.105:59239] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admIdokdEsz5NeAq8w2CIgAAARU"]
[Sat Apr 11 07:32:06.841194 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:58433] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admIdokdEsz5NeAq8w2CJgAAARI"]
[Sat Apr 11 07:32:07.306076 2026] [:error] [pid 33172:tid 33227] [client 51.107.88.105:59263] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admIdzn2G0IJw5EZY9lrmQAAAEk"]
[Sat Apr 11 07:32:07.777695 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:49550] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admIdzn2G0IJw5EZY9lroAAAAEQ"]
[Sat Apr 11 07:32:08.245691 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:59252] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admIeK8109xRDP2izWgTnAAAAJM"]
[Sat Apr 11 07:32:08.812597 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:59254] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admIeDn2G0IJw5EZY9lrowAAAFI"]
[Sat Apr 11 07:32:09.310717 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:59222] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admIeboqTMlo30hcVw-JGgAAABg"]
[Sat Apr 11 07:32:09.802038 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:58463] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "admIeboqTMlo30hcVw-JHQAAAAA"]
[Sat Apr 11 07:32:10.374771 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:49537] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "admIeroqTMlo30hcVw-JIgAAAAQ"]
[Sat Apr 11 07:32:10.885061 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:63278] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "admIeokdEsz5NeAq8w2CSgAAARM"]
[Sat Apr 11 07:32:11.347998 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:59210] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "admIe68109xRDP2izWgTqgAAAIg"]
[Sat Apr 11 07:32:11.838534 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:53326] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admIe4kdEsz5NeAq8w2CVgAAAQM"]
[Sat Apr 11 07:32:12.304410 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:59240] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admIfIkdEsz5NeAq8w2CYAAAARQ"]
[Sat Apr 11 07:32:12.775316 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:53317] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admIfGJmwJFFPEgRHfGNKgAAAM0"]
[Sat Apr 11 07:32:13.250858 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:52678] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "admIfWJmwJFFPEgRHfGNLQAAANc"]
[Sat Apr 11 07:32:13.716123 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:52728] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "admIfa8109xRDP2izWgTrAAAAJI"]
[Sat Apr 11 07:32:14.217002 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:53333] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "admIfq8109xRDP2izWgTrgAAAJQ"]
[Sat Apr 11 07:32:14.683077 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:49548] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "admIfq8109xRDP2izWgTswAAAIA"]
[Sat Apr 11 07:32:15.149798 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:59257] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "admIfzn2G0IJw5EZY9lrvQAAAEA"]
[Sat Apr 11 07:32:15.619043 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:53328] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admIfzn2G0IJw5EZY9lrwQAAAFA"]
[Sat Apr 11 07:32:16.086868 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:58488] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admIgDn2G0IJw5EZY9lryAAAAE0"]
[Sat Apr 11 07:32:16.602347 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:53357] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admIgIkdEsz5NeAq8w2CegAAARA"]
[Sat Apr 11 07:32:17.072850 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:52682] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "admIgTn2G0IJw5EZY9lrzgAAAFM"]
[Sat Apr 11 07:32:17.554220 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:63261] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admIgWJmwJFFPEgRHfGNRgAAAMY"]
[Sat Apr 11 07:32:18.041890 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:49545] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admIgokdEsz5NeAq8w2CfQAAAQU"]
[Sat Apr 11 07:32:18.512150 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:63290] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admIgmJmwJFFPEgRHfGNTAAAANM"]
[Sat Apr 11 07:32:19.021444 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:48850] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "admIg2JmwJFFPEgRHfGNUAAAANI"]
[Sat Apr 11 07:32:19.506126 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:53359] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admIg4kdEsz5NeAq8w2CfwAAAQY"]
[Sat Apr 11 07:32:20.012392 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:59208] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admIhGJmwJFFPEgRHfGNVwAAANE"]
[Sat Apr 11 07:32:20.485741 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:52696] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admIhGJmwJFFPEgRHfGNXwAAANM"]
[Sat Apr 11 07:32:20.960132 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:52705] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "admIhGJmwJFFPEgRHfGNZQAAAMM"]
[Sat Apr 11 07:32:21.429986 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:52725] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "admIhWJmwJFFPEgRHfGNagAAANY"]
[Sat Apr 11 07:32:21.958154 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:52711] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "admIhYkdEsz5NeAq8w2CgAAAAQ0"]
[Sat Apr 11 07:32:22.428593 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:59227] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "admIhmJmwJFFPEgRHfGNdAAAANI"]
[Sat Apr 11 07:32:22.974450 2026] [:error] [pid 15244:tid 15255] [client 51.107.88.105:49583] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "admIhokdEsz5NeAq8w2ChgAAAQk"]
[Sat Apr 11 07:32:23.554899 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:58472] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "admIhzn2G0IJw5EZY9lr5QAAAFQ"]
[Sat Apr 11 07:32:24.097748 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:52719] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "admIiGJmwJFFPEgRHfGNfwAAANM"]
[Sat Apr 11 07:32:24.759049 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:59262] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "admIiGJmwJFFPEgRHfGNhQAAANc"]
[Sat Apr 11 07:32:25.226856 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:59256] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "admIiWJmwJFFPEgRHfGNiwAAANg"]
[Sat Apr 11 07:32:25.807953 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:49573] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "admIiTn2G0IJw5EZY9lr5wAAAE8"]
[Sat Apr 11 07:32:26.318140 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:48847] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "admIiroqTMlo30hcVw-JcQAAABU"]
[Sat Apr 11 07:32:26.795323 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:63287] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "admIiokdEsz5NeAq8w2CjQAAARc"]
[Sat Apr 11 07:32:27.285185 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:58473] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "admIi4kdEsz5NeAq8w2CkAAAAQc"]
[Sat Apr 11 07:32:27.822519 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:48842] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "admIi4kdEsz5NeAq8w2CkwAAAQw"]
[Sat Apr 11 07:32:28.387548 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:63277] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "admIjDn2G0IJw5EZY9lr7wAAAEg"]
[Sat Apr 11 07:32:28.993549 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:59219] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "admIjIkdEsz5NeAq8w2CmAAAAQQ"]
[Sat Apr 11 07:32:29.647189 2026] [:error] [pid 15244:tid 15256] [client 51.107.88.105:63237] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "admIjYkdEsz5NeAq8w2CnAAAAQo"]
[Sat Apr 11 07:32:30.202175 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:58458] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admIjq8109xRDP2izWgTzwAAAIs"]
[Sat Apr 11 07:32:30.682591 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:48837] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admIjokdEsz5NeAq8w2CoQAAAQE"]
[Sat Apr 11 07:32:31.986909 2026] [:error] [pid 33171:tid 33209] [client 51.107.88.105:58494] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admIj7oqTMlo30hcVw-JggAAABc"]
[Sat Apr 11 07:32:32.511380 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:58467] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admIkGJmwJFFPEgRHfGNvAAAAMY"]
[Sat Apr 11 07:32:33.072642 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:58466] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admIka8109xRDP2izWgT2AAAAIE"]
[Sat Apr 11 07:32:33.599163 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:59217] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admIkTn2G0IJw5EZY9lr-wAAAEg"]
[Sat Apr 11 07:32:34.308418 2026] [:error] [pid 33171:tid 33205] [client 51.107.88.105:59246] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admIkroqTMlo30hcVw-JjAAAABM"]
[Sat Apr 11 07:32:34.861266 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:49599] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admIkjn2G0IJw5EZY9lsBQAAAFA"]
[Sat Apr 11 07:32:35.460416 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:58459] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "admIk2JmwJFFPEgRHfGNwQAAAMo"]
[Sat Apr 11 07:32:36.247851 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:48863] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "admIlLoqTMlo30hcVw-JlgAAABg"]
[Sat Apr 11 07:32:36.741682 2026] [:error] [pid 33172:tid 33242] [client 51.107.88.105:53349] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "admIlDn2G0IJw5EZY9lsDwAAAFg"]
[Sat Apr 11 07:32:37.237445 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:63240] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "admIlboqTMlo30hcVw-JmgAAAAA"]
[Sat Apr 11 07:32:37.717356 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:58438] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admIlYkdEsz5NeAq8w2CrAAAAQg"]
[Sat Apr 11 07:32:38.278645 2026] [:error] [pid 33171:tid 33195] [client 51.107.88.105:59244] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admIlroqTMlo30hcVw-JnAAAAAk"]
[Sat Apr 11 07:32:38.762218 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:58447] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admIlokdEsz5NeAq8w2CuAAAAQI"]
[Sat Apr 11 07:32:39.253836 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:49536] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admIl7oqTMlo30hcVw-JnQAAAAM"]
[Sat Apr 11 07:32:39.765202 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:53360] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admIl2JmwJFFPEgRHfGN6wAAANM"]
[Sat Apr 11 07:32:40.493707 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:49561] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admImIkdEsz5NeAq8w2CxAAAAQY"]
[Sat Apr 11 07:32:40.981416 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:53356] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admImK8109xRDP2izWgT4QAAAJE"]
[Sat Apr 11 07:32:41.473658 2026] [:error] [pid 33171:tid 33208] [client 51.107.88.105:53320] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admImboqTMlo30hcVw-JpAAAABY"]
[Sat Apr 11 07:32:41.959216 2026] [:error] [pid 33171:tid 33205] [client 51.107.88.105:63248] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "admImboqTMlo30hcVw-JpgAAABM"]
[Sat Apr 11 07:32:42.541879 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:59226] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "admImq8109xRDP2izWgT4gAAAIg"]
[Sat Apr 11 07:32:43.068171 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:52720] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "admIm2JmwJFFPEgRHfGN_gAAAMk"]
[Sat Apr 11 07:32:43.548568 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:59204] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "admIm4kdEsz5NeAq8w2C0AAAARc"]
[Sat Apr 11 07:32:44.027001 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:58446] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admInIkdEsz5NeAq8w2C0QAAARY"]
[Sat Apr 11 07:32:44.513782 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:41810] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admInIkdEsz5NeAq8w2C1AAAAQw"]
[Sat Apr 11 07:32:44.982614 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:52694] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admInIkdEsz5NeAq8w2C2wAAAQE"]
[Sat Apr 11 07:32:45.482305 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:59213] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admInYkdEsz5NeAq8w2C4gAAARY"]
[Sat Apr 11 07:32:45.988250 2026] [:error] [pid 33171:tid 33192] [client 51.107.88.105:59253] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admInboqTMlo30hcVw-JuQAAAAY"]
[Sat Apr 11 07:32:46.481323 2026] [:error] [pid 33171:tid 33193] [client 51.107.88.105:49574] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admInroqTMlo30hcVw-JvQAAAAc"]
[Sat Apr 11 07:32:46.969608 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:49580] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admInmJmwJFFPEgRHfGOCAAAAMk"]
[Sat Apr 11 07:32:47.553901 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:52681] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admIn4kdEsz5NeAq8w2C5wAAAQ4"]
[Sat Apr 11 07:32:48.030614 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:59211] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "admIoIkdEsz5NeAq8w2C7AAAARc"]
[Sat Apr 11 07:32:48.500507 2026] [:error] [pid 33172:tid 33235] [client 51.107.88.105:52715] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "admIoDn2G0IJw5EZY9lsJAAAAFE"]
[Sat Apr 11 07:32:49.026369 2026] [:error] [pid 33171:tid 33202] [client 51.107.88.105:58456] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "admIoboqTMlo30hcVw-JygAAABA"]
[Sat Apr 11 07:32:49.501951 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:53369] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "admIoTn2G0IJw5EZY9lsLQAAAEA"]
[Sat Apr 11 07:32:50.089580 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:49563] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "admIoq8109xRDP2izWgT8QAAAI4"]
[Sat Apr 11 07:32:50.663158 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:49577] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "admIojn2G0IJw5EZY9lsNQAAAE8"]
[Sat Apr 11 07:32:51.157010 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:53351] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "admIo4kdEsz5NeAq8w2C_QAAAQc"]
[Sat Apr 11 07:32:51.639428 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:49557] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "admIo4kdEsz5NeAq8w2DAQAAAQs"]
[Sat Apr 11 07:32:52.274332 2026] [proxy_fcgi:error] [pid 15244:tid 15267] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:52.511768 2026] [proxy_fcgi:error] [pid 15244:tid 15255] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:52.749805 2026] [proxy_fcgi:error] [pid 15244:tid 15246] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:53.042415 2026] [proxy_fcgi:error] [pid 15244:tid 15266] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:53.290712 2026] [proxy_fcgi:error] [pid 15244:tid 15259] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:53.763548 2026] [proxy_fcgi:error] [pid 15244:tid 15267] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:54.000277 2026] [proxy_fcgi:error] [pid 15244:tid 15247] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:54.238108 2026] [proxy_fcgi:error] [pid 15244:tid 15269] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:54.508100 2026] [proxy_fcgi:error] [pid 15244:tid 15253] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:56.024098 2026] [proxy_fcgi:error] [pid 15244:tid 15260] [client 51.107.88.105:52697] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:32:56.257681 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:52697] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "admIqIkdEsz5NeAq8w2DLQAAARg"]
[Sat Apr 11 07:32:56.804681 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:59249] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "admIqLoqTMlo30hcVw-J4QAAABg"]
[Sat Apr 11 07:32:57.272729 2026] [:error] [pid 33171:tid 33204] [client 51.107.88.105:59224] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "admIqboqTMlo30hcVw-J5QAAABI"]
[Sat Apr 11 07:32:57.743502 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:52719] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "admIqWJmwJFFPEgRHfGOFwAAAMg"]
[Sat Apr 11 07:32:58.312096 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:48834] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "admIqokdEsz5NeAq8w2DMAAAAQQ"]
[Sat Apr 11 07:32:58.781750 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:53332] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "admIqq8109xRDP2izWgUAQAAAJQ"]
[Sat Apr 11 07:32:59.252574 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:53338] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "admIq4kdEsz5NeAq8w2DOgAAAQs"]
[Sat Apr 11 07:32:59.720979 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:52734] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "admIq4kdEsz5NeAq8w2DPwAAARI"]
[Sat Apr 11 07:33:00.208331 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:49539] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "admIrK8109xRDP2izWgUBAAAAIA"]
[Sat Apr 11 07:33:00.813619 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:52675] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "admIrLoqTMlo30hcVw-J7AAAABQ"]
[Sat Apr 11 07:33:01.334739 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:49541] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "admIrYkdEsz5NeAq8w2DVwAAAQw"]
[Sat Apr 11 07:33:01.821488 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:49582] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "admIrWJmwJFFPEgRHfGOJAAAAME"]
[Sat Apr 11 07:33:02.443337 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:58454] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "admIrokdEsz5NeAq8w2DXwAAAQs"]
[Sat Apr 11 07:33:02.912003 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:59231] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "admIrokdEsz5NeAq8w2DYwAAARA"]
[Sat Apr 11 07:33:03.431756 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:41826] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "admIr4kdEsz5NeAq8w2DbAAAAQ4"]
[Sat Apr 11 07:33:03.902049 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:52702] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "admIr2JmwJFFPEgRHfGOKgAAANc"]
[Sat Apr 11 07:33:04.371015 2026] [:error] [pid 33171:tid 33205] [client 51.107.88.105:59201] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "admIsLoqTMlo30hcVw-J7wAAABM"]
[Sat Apr 11 07:33:04.838310 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:52677] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "admIsK8109xRDP2izWgUEwAAAIA"]
[Sat Apr 11 07:33:05.320373 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:52698] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "admIsWJmwJFFPEgRHfGOMAAAANU"]
[Sat Apr 11 07:33:05.792684 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:52706] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "admIsYkdEsz5NeAq8w2DgQAAAQE"]
[Sat Apr 11 07:33:06.294025 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:53373] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "admIsq8109xRDP2izWgUHwAAAII"]
[Sat Apr 11 07:33:06.761196 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:63294] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "admIsmJmwJFFPEgRHfGOOQAAANc"]
[Sat Apr 11 07:33:07.247632 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:52680] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "admIs4kdEsz5NeAq8w2DiQAAAQQ"]
[Sat Apr 11 07:33:07.765305 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:58444] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "admIs4kdEsz5NeAq8w2DkwAAAQ0"]
[Sat Apr 11 07:33:08.304605 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:53328] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admItIkdEsz5NeAq8w2DmgAAARQ"]
[Sat Apr 11 07:33:08.775122 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:52673] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admItDn2G0IJw5EZY9lsTQAAAEQ"]
[Sat Apr 11 07:33:09.240044 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:63233] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admItYkdEsz5NeAq8w2DpgAAARQ"]
[Sat Apr 11 07:33:09.744256 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:52726] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admItYkdEsz5NeAq8w2DrQAAAQY"]
[Sat Apr 11 07:33:10.224823 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:41741] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "admItokdEsz5NeAq8w2DtwAAARM"]
[Sat Apr 11 07:33:10.701497 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:48881] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "admItroqTMlo30hcVw-J-AAAAAQ"]
[Sat Apr 11 07:33:11.196042 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:48889] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "admIt4kdEsz5NeAq8w2DvQAAARg"]
[Sat Apr 11 07:33:11.710843 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:52689] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "admItzn2G0IJw5EZY9lsUgAAAEw"]
[Sat Apr 11 07:33:12.235748 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:59233] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "admIuIkdEsz5NeAq8w2DwAAAAQU"]
[Sat Apr 11 07:33:12.745483 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:49588] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "admIuIkdEsz5NeAq8w2DwwAAAQQ"]
[Sat Apr 11 07:33:13.212292 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:49549] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "admIuboqTMlo30hcVw-J_QAAAAo"]
[Sat Apr 11 07:33:13.679168 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:58469] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "admIua8109xRDP2izWgUPgAAAIU"]
[Sat Apr 11 07:33:14.176700 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:41735] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "admIumJmwJFFPEgRHfGOUAAAAM4"]
[Sat Apr 11 07:33:14.701802 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:52713] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "admIuq8109xRDP2izWgUQAAAAIo"]
[Sat Apr 11 07:33:15.168562 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:52695] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "admIu4kdEsz5NeAq8w2DywAAAQM"]
[Sat Apr 11 07:33:15.657441 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:52735] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "admIu68109xRDP2izWgURgAAAIk"]
[Sat Apr 11 07:33:16.183524 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:53337] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "admIvGJmwJFFPEgRHfGOXgAAAMc"]
[Sat Apr 11 07:33:16.657723 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:48861] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "admIvGJmwJFFPEgRHfGOZAAAAMM"]
[Sat Apr 11 07:33:17.124352 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:41795] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "admIvWJmwJFFPEgRHfGOaQAAAMo"]
[Sat Apr 11 07:33:17.614163 2026] [:error] [pid 33171:tid 33191] [client 51.107.88.105:48835] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "admIvboqTMlo30hcVw-KCgAAAAU"]
[Sat Apr 11 07:33:18.107055 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:49590] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "admIvroqTMlo30hcVw-KCwAAAAA"]
[Sat Apr 11 07:33:18.571284 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:48875] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "admIvmJmwJFFPEgRHfGOewAAANA"]
[Sat Apr 11 07:33:19.041931 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:48833] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "admIv68109xRDP2izWgUUQAAAJI"]
[Sat Apr 11 07:33:19.574103 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:53339] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "admIv4kdEsz5NeAq8w2D1AAAAQA"]
[Sat Apr 11 07:33:20.039596 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:48867] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admIwDn2G0IJw5EZY9lsdQAAAFM"]
[Sat Apr 11 07:33:20.509730 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:53343] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admIwIkdEsz5NeAq8w2D2gAAAQE"]
[Sat Apr 11 07:33:20.975578 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:53363] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admIwIkdEsz5NeAq8w2D4AAAARE"]
[Sat Apr 11 07:33:21.447797 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:53355] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "admIwYkdEsz5NeAq8w2D5QAAAQ8"]
[Sat Apr 11 07:33:21.928169 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:59220] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admIwYkdEsz5NeAq8w2D6AAAAQA"]
[Sat Apr 11 07:33:22.447103 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:52686] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admIwokdEsz5NeAq8w2D7QAAAQg"]
[Sat Apr 11 07:33:22.918386 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:58492] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admIwq8109xRDP2izWgUcwAAAJU"]
[Sat Apr 11 07:33:23.388568 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:41806] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admIw4kdEsz5NeAq8w2D9wAAARM"]
[Sat Apr 11 07:33:23.871199 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:58483] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "admIw2JmwJFFPEgRHfGOpwAAAMs"]
[Sat Apr 11 07:33:24.339492 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:52712] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "admIxIkdEsz5NeAq8w2D_QAAAQM"]
[Sat Apr 11 07:33:24.805673 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:49559] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "admIxIkdEsz5NeAq8w2EAQAAARA"]
[Sat Apr 11 07:33:25.281709 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:49546] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "admIxYkdEsz5NeAq8w2EBQAAARc"]
[Sat Apr 11 07:33:25.761807 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:52700] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admIxYkdEsz5NeAq8w2EBwAAARM"]
[Sat Apr 11 07:33:26.234021 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:52732] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admIxjn2G0IJw5EZY9lsigAAAEw"]
[Sat Apr 11 07:33:26.701323 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:58468] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admIxmJmwJFFPEgRHfGOvAAAAMs"]
[Sat Apr 11 07:33:27.167729 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:63266] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admIx7oqTMlo30hcVw-KFQAAAAA"]
[Sat Apr 11 07:33:27.636259 2026] [:error] [pid 33172:tid 33219] [client 51.107.88.105:53331] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "admIxzn2G0IJw5EZY9lsjAAAAEE"]
[Sat Apr 11 07:33:28.104076 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:59218] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "admIyLoqTMlo30hcVw-KFgAAABU"]
[Sat Apr 11 07:33:28.573304 2026] [:error] [pid 33171:tid 33199] [client 51.107.88.105:53368] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "admIyLoqTMlo30hcVw-KGgAAAA0"]
[Sat Apr 11 07:33:29.042046 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:53361] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "admIya8109xRDP2izWgUjQAAAIc"]
[Sat Apr 11 07:33:29.519938 2026] [:error] [pid 33172:tid 33223] [client 51.107.88.105:58452] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admIyTn2G0IJw5EZY9lskQAAAEU"]
[Sat Apr 11 07:33:29.988691 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:58443] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admIyTn2G0IJw5EZY9lskwAAAFI"]
[Sat Apr 11 07:33:30.457945 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:49581] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admIymJmwJFFPEgRHfGO1QAAANI"]
[Sat Apr 11 07:33:30.941558 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:49544] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admIyq8109xRDP2izWgUlAAAAI8"]
[Sat Apr 11 07:33:31.427178 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:58470] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "admIy2JmwJFFPEgRHfGO4wAAAMw"]
[Sat Apr 11 07:33:31.898731 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:53352] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "admIy68109xRDP2izWgUnAAAAI0"]
[Sat Apr 11 07:33:32.364552 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:49571] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "admIzIkdEsz5NeAq8w2EIgAAARQ"]
[Sat Apr 11 07:33:32.833284 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:41838] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "admIzIkdEsz5NeAq8w2EKQAAARg"]
[Sat Apr 11 07:33:33.300402 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:53346] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admIzTn2G0IJw5EZY9lslwAAAEA"]
[Sat Apr 11 07:33:33.769181 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:49562] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admIzTn2G0IJw5EZY9lsmAAAAE0"]
[Sat Apr 11 07:33:34.255155 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:49538] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admIzokdEsz5NeAq8w2EMQAAAQI"]
[Sat Apr 11 07:33:34.726548 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:49578] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admIzq8109xRDP2izWgUpAAAAIQ"]
[Sat Apr 11 07:33:35.211651 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:41807] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "admIz68109xRDP2izWgUpgAAAI0"]
[Sat Apr 11 07:33:35.707338 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:58480] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "admIz4kdEsz5NeAq8w2EPAAAARA"]
[Sat Apr 11 07:33:36.178570 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:41855] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "admI0IkdEsz5NeAq8w2EQQAAAQ8"]
[Sat Apr 11 07:33:36.644586 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:48858] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "admI0IkdEsz5NeAq8w2ESgAAAQg"]
[Sat Apr 11 07:33:37.107463 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:53350] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admI0Tn2G0IJw5EZY9lsoAAAAFM"]
[Sat Apr 11 07:33:37.605803 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:48860] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admI0WJmwJFFPEgRHfGPCAAAANI"]
[Sat Apr 11 07:33:38.091001 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:48887] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admI0jn2G0IJw5EZY9lsogAAAFY"]
[Sat Apr 11 07:33:38.597488 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:49595] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admI0okdEsz5NeAq8w2EVAAAARY"]
[Sat Apr 11 07:33:39.065351 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:41793] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "admI07oqTMlo30hcVw-KMwAAAAI"]
[Sat Apr 11 07:33:39.530040 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:49553] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "admI02JmwJFFPEgRHfGPEgAAAMs"]
[Sat Apr 11 07:33:40.002866 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:48865] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "admI1Dn2G0IJw5EZY9lspgAAAEA"]
[Sat Apr 11 07:33:40.471918 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:63263] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "admI1IkdEsz5NeAq8w2EWgAAARg"]
[Sat Apr 11 07:33:40.967466 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:41829] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "admI1K8109xRDP2izWgUvwAAAII"]
[Sat Apr 11 07:33:41.438941 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:52718] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "admI1YkdEsz5NeAq8w2EXwAAAQI"]
[Sat Apr 11 07:33:41.907648 2026] [:error] [pid 33171:tid 33193] [client 51.107.88.105:59234] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "admI1boqTMlo30hcVw-KOAAAAAc"]
[Sat Apr 11 07:33:42.439725 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:49560] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws.php"] [unique_id "admI1mJmwJFFPEgRHfGPIgAAANg"]
[Sat Apr 11 07:33:42.906146 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:49545] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "admI1jn2G0IJw5EZY9lsrAAAAEw"]
[Sat Apr 11 07:33:43.415601 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:58441] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "admI1zn2G0IJw5EZY9lsrwAAAFU"]
[Sat Apr 11 07:33:43.903013 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:41738] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "admI168109xRDP2izWgUxgAAAIo"]
[Sat Apr 11 07:33:44.482323 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:48864] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "admI2Dn2G0IJw5EZY9lstQAAAEs"]
[Sat Apr 11 07:33:45.224440 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:52699] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "admI2Tn2G0IJw5EZY9lstgAAAEo"]
[Sat Apr 11 07:33:46.121339 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:49551] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "admI2mJmwJFFPEgRHfGPMQAAAMw"]
[Sat Apr 11 07:33:46.601728 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:59245] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "admI2okdEsz5NeAq8w2EeAAAAQE"]
[Sat Apr 11 07:33:47.317815 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:48845] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "admI27oqTMlo30hcVw-KQQAAAAI"]
[Sat Apr 11 07:33:47.836620 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:58432] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "admI2zn2G0IJw5EZY9lsvwAAAEI"]
[Sat Apr 11 07:33:48.318570 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:41805] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "admI3Dn2G0IJw5EZY9lswwAAAEo"]
[Sat Apr 11 07:33:48.793477 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:52707] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "admI3GJmwJFFPEgRHfGPOQAAANU"]
[Sat Apr 11 07:33:49.334468 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:52684] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "admI3a8109xRDP2izWgU1QAAAIs"]
[Sat Apr 11 07:33:49.872374 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:48836] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "admI3Tn2G0IJw5EZY9lsxwAAAEw"]
[Sat Apr 11 07:33:50.601804 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:49558] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "admI3jn2G0IJw5EZY9lsyQAAAFU"]
[Sat Apr 11 07:33:51.100389 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:41816] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "admI368109xRDP2izWgU2wAAAIE"]
[Sat Apr 11 07:33:51.583513 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:48852] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "admI32JmwJFFPEgRHfGPTQAAAMM"]
[Sat Apr 11 07:33:52.069371 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:63258] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "admI4GJmwJFFPEgRHfGPTgAAAMA"]
[Sat Apr 11 07:33:52.569611 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:49592] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "admI4IkdEsz5NeAq8w2EkQAAARg"]
[Sat Apr 11 07:33:53.163462 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:48880] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "admI4a8109xRDP2izWgU4AAAAIY"]
[Sat Apr 11 07:33:53.818063 2026] [:error] [pid 33171:tid 33200] [client 51.107.88.105:48890] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "admI4boqTMlo30hcVw-KUAAAAA4"]
[Sat Apr 11 07:33:54.355315 2026] [:error] [pid 33171:tid 33187] [client 51.107.88.105:48892] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "admI4roqTMlo30hcVw-KVQAAAAE"]
[Sat Apr 11 07:33:54.838263 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:48872] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "admI4roqTMlo30hcVw-KXQAAABQ"]
[Sat Apr 11 07:33:55.353770 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:41792] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "admI47oqTMlo30hcVw-KZgAAABU"]
[Sat Apr 11 07:33:55.873729 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:59250] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "admI42JmwJFFPEgRHfGPVAAAAMI"]
[Sat Apr 11 07:33:56.352695 2026] [proxy_fcgi:error] [pid 33173:tid 33268] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:56.614838 2026] [proxy_fcgi:error] [pid 33173:tid 33269] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:56.850712 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:57.111543 2026] [proxy_fcgi:error] [pid 33173:tid 33257] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:57.606101 2026] [proxy_fcgi:error] [pid 33173:tid 33268] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:57.842138 2026] [proxy_fcgi:error] [pid 33173:tid 33258] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:58.105660 2026] [proxy_fcgi:error] [pid 33173:tid 33264] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:58.342310 2026] [proxy_fcgi:error] [pid 33173:tid 33259] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:58.577501 2026] [proxy_fcgi:error] [pid 33173:tid 33260] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:33:58.813667 2026] [proxy_fcgi:error] [pid 33173:tid 33249] [client 51.107.88.105:59207] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:12.185773 2026] [proxy_fcgi:error] [pid 33172:tid 33239] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:12.446210 2026] [proxy_fcgi:error] [pid 33172:tid 33218] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:12.702511 2026] [proxy_fcgi:error] [pid 33172:tid 33220] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:12.957642 2026] [proxy_fcgi:error] [pid 33172:tid 33233] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:13.213853 2026] [proxy_fcgi:error] [pid 33172:tid 33242] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:13.488135 2026] [proxy_fcgi:error] [pid 33172:tid 33223] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:13.744617 2026] [proxy_fcgi:error] [pid 33172:tid 33226] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:14.002358 2026] [proxy_fcgi:error] [pid 33172:tid 33224] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:14.259085 2026] [proxy_fcgi:error] [pid 33172:tid 33232] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:14.516389 2026] [proxy_fcgi:error] [pid 33172:tid 33230] [client 74.248.145.185:32951] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:59:14.769589 2026] [:error] [pid 33172:tid 33237] [client 74.248.145.185:32951] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "admO0jn2G0IJw5EZY9l4XwAAAFM"]
[Sat Apr 11 07:59:15.318121 2026] [:error] [pid 33173:tid 33253] [client 74.248.145.185:46956] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "admO068109xRDP2izWgjeQAAAIg"]
[Sat Apr 11 07:59:15.861261 2026] [:error] [pid 33288:tid 33303] [client 74.248.145.185:32897] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "admO02JmwJFFPEgRHfGiHQAAAM0"]
[Sat Apr 11 07:59:16.381216 2026] [:error] [pid 33172:tid 33229] [client 74.248.145.185:46331] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "admO1Dn2G0IJw5EZY9l4YgAAAEs"]
[Sat Apr 11 07:59:16.905463 2026] [:error] [pid 15244:tid 15270] [client 74.248.145.185:33000] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admO1IkdEsz5NeAq8w2ePwAAARg"]
[Sat Apr 11 07:59:17.434028 2026] [:error] [pid 33173:tid 33265] [client 74.248.145.185:32912] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admO1a8109xRDP2izWgjgQAAAJQ"]
[Sat Apr 11 07:59:17.943901 2026] [:error] [pid 33173:tid 33256] [client 74.248.145.185:28811] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admO1a8109xRDP2izWgjiwAAAIs"]
[Sat Apr 11 07:59:18.462796 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:32898] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "admO1q8109xRDP2izWgjlAAAAIY"]
[Sat Apr 11 07:59:18.983108 2026] [:error] [pid 33173:tid 33255] [client 74.248.145.185:32989] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "admO1q8109xRDP2izWgjlgAAAIo"]
[Sat Apr 11 07:59:19.491222 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:46317] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "admO14kdEsz5NeAq8w2eRgAAARQ"]
[Sat Apr 11 07:59:20.006374 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:32957] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "admO2GJmwJFFPEgRHfGiJwAAAMY"]
[Sat Apr 11 07:59:20.518749 2026] [:error] [pid 33173:tid 33246] [client 74.248.145.185:32971] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "admO2K8109xRDP2izWgjmgAAAIE"]
[Sat Apr 11 07:59:21.026664 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:32986] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "admO2YkdEsz5NeAq8w2eVgAAAQ4"]
[Sat Apr 11 07:59:21.540529 2026] [:error] [pid 33172:tid 33237] [client 74.248.145.185:46959] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "admO2Tn2G0IJw5EZY9l4bgAAAFM"]
[Sat Apr 11 07:59:22.047081 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:32988] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "admO2mJmwJFFPEgRHfGiLAAAAMk"]
[Sat Apr 11 07:59:22.559763 2026] [:error] [pid 33171:tid 33200] [client 74.248.145.185:46320] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "admO2roqTMlo30hcVw-WNAAAAA4"]
[Sat Apr 11 07:59:23.076265 2026] [:error] [pid 33171:tid 33207] [client 74.248.145.185:46304] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "admO27oqTMlo30hcVw-WNgAAABU"]
[Sat Apr 11 07:59:23.587665 2026] [:error] [pid 33172:tid 33221] [client 74.248.145.185:28820] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "admO2zn2G0IJw5EZY9l4cAAAAEM"]
[Sat Apr 11 07:59:24.104404 2026] [:error] [pid 15244:tid 15261] [client 74.248.145.185:28818] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "admO3IkdEsz5NeAq8w2eZgAAAQ8"]
[Sat Apr 11 07:59:24.611394 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:46930] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "admO3Dn2G0IJw5EZY9l4cQAAAFc"]
[Sat Apr 11 07:59:25.119550 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:46947] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admO3boqTMlo30hcVw-WRAAAAAA"]
[Sat Apr 11 07:59:25.628937 2026] [:error] [pid 33172:tid 33242] [client 74.248.145.185:32946] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admO3Tn2G0IJw5EZY9l4dgAAAFg"]
[Sat Apr 11 07:59:26.143174 2026] [:error] [pid 33171:tid 33193] [client 74.248.145.185:32925] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admO3roqTMlo30hcVw-WSwAAAAc"]
[Sat Apr 11 07:59:26.663051 2026] [:error] [pid 15244:tid 15262] [client 74.248.145.185:46968] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "admO3okdEsz5NeAq8w2ecAAAARA"]
[Sat Apr 11 07:59:27.176744 2026] [:error] [pid 33171:tid 33208] [client 74.248.145.185:32984] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "admO37oqTMlo30hcVw-WUAAAABY"]
[Sat Apr 11 07:59:27.687044 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:32975] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "admO3zn2G0IJw5EZY9l4gQAAAFc"]
[Sat Apr 11 07:59:28.207484 2026] [:error] [pid 33172:tid 33228] [client 74.248.145.185:46312] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "admO4Dn2G0IJw5EZY9l4hgAAAEo"]
[Sat Apr 11 07:59:28.725973 2026] [:error] [pid 15244:tid 15258] [client 74.248.145.185:32999] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "admO4IkdEsz5NeAq8w2eeQAAAQw"]
[Sat Apr 11 07:59:29.240425 2026] [:error] [pid 15244:tid 15248] [client 74.248.145.185:32982] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "admO4YkdEsz5NeAq8w2egAAAAQI"]
[Sat Apr 11 07:59:29.755799 2026] [:error] [pid 33288:tid 33310] [client 74.248.145.185:46311] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "admO4WJmwJFFPEgRHfGiOwAAANQ"]
[Sat Apr 11 07:59:30.264488 2026] [:error] [pid 33172:tid 33223] [client 74.248.145.185:28828] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "admO4jn2G0IJw5EZY9l4igAAAEU"]
[Sat Apr 11 07:59:30.775004 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:32910] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "admO4mJmwJFFPEgRHfGiPAAAANc"]
[Sat Apr 11 07:59:31.281643 2026] [:error] [pid 33288:tid 33301] [client 74.248.145.185:32904] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "admO42JmwJFFPEgRHfGiPgAAAMs"]
[Sat Apr 11 07:59:31.796877 2026] [:error] [pid 15244:tid 15246] [client 74.248.145.185:28802] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "admO44kdEsz5NeAq8w2ekQAAAQA"]
[Sat Apr 11 07:59:32.314333 2026] [:error] [pid 33288:tid 33300] [client 74.248.145.185:46937] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "admO5GJmwJFFPEgRHfGiQwAAAMo"]
[Sat Apr 11 07:59:32.843843 2026] [:error] [pid 33171:tid 33201] [client 74.248.145.185:46971] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "admO5LoqTMlo30hcVw-WWwAAAA8"]
[Sat Apr 11 07:59:33.347920 2026] [:error] [pid 15244:tid 15261] [client 74.248.145.185:46280] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "admO5YkdEsz5NeAq8w2engAAAQ8"]
[Sat Apr 11 07:59:33.865205 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:46924] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "admO5YkdEsz5NeAq8w2epQAAAQQ"]
[Sat Apr 11 07:59:34.373934 2026] [:error] [pid 15244:tid 15269] [client 74.248.145.185:32939] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "admO5okdEsz5NeAq8w2erAAAARc"]
[Sat Apr 11 07:59:34.881208 2026] [:error] [pid 15244:tid 15258] [client 74.248.145.185:32916] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "admO5okdEsz5NeAq8w2esgAAAQw"]
[Sat Apr 11 07:59:35.389325 2026] [:error] [pid 33173:tid 33250] [client 74.248.145.185:33015] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "admO568109xRDP2izWgjswAAAIU"]
[Sat Apr 11 07:59:35.899100 2026] [:error] [pid 15244:tid 15269] [client 74.248.145.185:28308] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "admO54kdEsz5NeAq8w2evgAAARc"]
[Sat Apr 11 07:59:36.405820 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:32909] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "admO6IkdEsz5NeAq8w2ewgAAARI"]
[Sat Apr 11 07:59:36.922551 2026] [:error] [pid 33173:tid 33248] [client 74.248.145.185:32985] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "admO6K8109xRDP2izWgjtQAAAIM"]
[Sat Apr 11 07:59:37.432984 2026] [:error] [pid 33172:tid 33233] [client 74.248.145.185:28815] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "admO6Tn2G0IJw5EZY9l4jgAAAE8"]
[Sat Apr 11 07:59:37.941617 2026] [:error] [pid 33172:tid 33235] [client 74.248.145.185:32980] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "admO6Tn2G0IJw5EZY9l4kAAAAFE"]
[Sat Apr 11 07:59:38.459266 2026] [:error] [pid 33171:tid 33202] [client 74.248.145.185:46322] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "admO6roqTMlo30hcVw-WXQAAABA"]
[Sat Apr 11 07:59:38.966574 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:28842] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "admO6roqTMlo30hcVw-WYAAAAA0"]
[Sat Apr 11 07:59:39.499389 2026] [:error] [pid 33171:tid 33198] [client 74.248.145.185:46310] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "admO67oqTMlo30hcVw-WYgAAAAw"]
[Sat Apr 11 07:59:40.007539 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:33011] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "admO7IkdEsz5NeAq8w2e3QAAAQ4"]
[Sat Apr 11 07:59:40.529148 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:28845] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "admO7IkdEsz5NeAq8w2e5AAAARE"]
[Sat Apr 11 07:59:41.054774 2026] [:error] [pid 33173:tid 33254] [client 74.248.145.185:32929] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "admO7a8109xRDP2izWgjvgAAAIk"]
[Sat Apr 11 07:59:41.569209 2026] [:error] [pid 33173:tid 33246] [client 74.248.145.185:46919] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "admO7a8109xRDP2izWgjwAAAAIE"]
[Sat Apr 11 07:59:42.087751 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:46925] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "admO7okdEsz5NeAq8w2e6gAAARE"]
[Sat Apr 11 07:59:42.601833 2026] [:error] [pid 15244:tid 15270] [client 74.248.145.185:46967] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "admO7okdEsz5NeAq8w2e7wAAARg"]
[Sat Apr 11 07:59:43.143011 2026] [:error] [pid 15244:tid 15251] [client 74.248.145.185:28810] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oij98gy.php"] [unique_id "admO74kdEsz5NeAq8w2e8gAAAQU"]
[Sat Apr 11 07:59:43.648826 2026] [:error] [pid 33173:tid 33259] [client 74.248.145.185:32940] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "admO768109xRDP2izWgj1AAAAI4"]
[Sat Apr 11 07:59:44.156721 2026] [:error] [pid 33173:tid 33256] [client 74.248.145.185:32924] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "admO8K8109xRDP2izWgj1gAAAIs"]
[Sat Apr 11 07:59:44.669049 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:23712] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "admO8GJmwJFFPEgRHfGiVwAAANc"]
[Sat Apr 11 07:59:45.185884 2026] [:error] [pid 33172:tid 33232] [client 74.248.145.185:46335] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "admO8Tn2G0IJw5EZY9l4oAAAAE4"]
[Sat Apr 11 07:59:45.694661 2026] [:error] [pid 33288:tid 33305] [client 74.248.145.185:32967] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "admO8WJmwJFFPEgRHfGiXgAAAM8"]
[Sat Apr 11 07:59:46.200561 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:32899] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "admO8mJmwJFFPEgRHfGiYQAAAMk"]
[Sat Apr 11 07:59:46.717459 2026] [:error] [pid 33172:tid 33229] [client 74.248.145.185:28817] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "admO8jn2G0IJw5EZY9l4ogAAAEs"]
[Sat Apr 11 07:59:47.243087 2026] [:error] [pid 33172:tid 33239] [client 74.248.145.185:32994] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/turkshell.php"] [unique_id "admO8zn2G0IJw5EZY9l4pgAAAFU"]
[Sat Apr 11 07:59:47.756268 2026] [:error] [pid 33171:tid 33198] [client 74.248.145.185:46302] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "admO87oqTMlo30hcVw-WcwAAAAw"]
[Sat Apr 11 07:59:48.279476 2026] [:error] [pid 33171:tid 33193] [client 74.248.145.185:32937] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "admO9LoqTMlo30hcVw-WdAAAAAc"]
[Sat Apr 11 07:59:48.786067 2026] [:error] [pid 33172:tid 33242] [client 74.248.145.185:32920] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "admO9Dn2G0IJw5EZY9l4rwAAAFg"]
[Sat Apr 11 07:59:49.303962 2026] [:error] [pid 33171:tid 33204] [client 74.248.145.185:46951] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "admO9boqTMlo30hcVw-WdwAAABI"]
[Sat Apr 11 07:59:49.823439 2026] [:error] [pid 33173:tid 33261] [client 74.248.145.185:32932] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "admO9a8109xRDP2izWgj6gAAAJA"]
[Sat Apr 11 07:59:50.330862 2026] [:error] [pid 33173:tid 33250] [client 74.248.145.185:23716] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "admO9q8109xRDP2izWgj8gAAAIU"]
[Sat Apr 11 07:59:50.842120 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:23758] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "admO9okdEsz5NeAq8w2fAQAAAQ4"]
[Sat Apr 11 07:59:51.353651 2026] [:error] [pid 33173:tid 33269] [client 74.248.145.185:46298] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "admO968109xRDP2izWgj-QAAAJg"]
[Sat Apr 11 07:59:51.874574 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:28289] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "admO92JmwJFFPEgRHfGiawAAAMk"]
[Sat Apr 11 07:59:52.402530 2026] [:error] [pid 33288:tid 33314] [client 74.248.145.185:32931] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "admO-GJmwJFFPEgRHfGibgAAANg"]
[Sat Apr 11 07:59:52.933447 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:28320] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "admO-GJmwJFFPEgRHfGidAAAAMY"]
[Sat Apr 11 07:59:53.449775 2026] [:error] [pid 33288:tid 33311] [client 74.248.145.185:46972] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "admO-WJmwJFFPEgRHfGiegAAANU"]
[Sat Apr 11 07:59:53.967229 2026] [:error] [pid 33288:tid 33290] [client 74.248.145.185:28829] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "admO-WJmwJFFPEgRHfGifgAAAMA"]
[Sat Apr 11 07:59:54.478433 2026] [:error] [pid 33171:tid 33202] [client 74.248.145.185:32950] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "admO-roqTMlo30hcVw-WfQAAABA"]
[Sat Apr 11 07:59:54.984716 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:46330] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "admO-roqTMlo30hcVw-WgAAAAA0"]
[Sat Apr 11 07:59:55.496410 2026] [:error] [pid 33288:tid 33314] [client 74.248.145.185:33006] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "admO-2JmwJFFPEgRHfGiigAAANg"]
[Sat Apr 11 07:59:56.007988 2026] [:error] [pid 33288:tid 33290] [client 74.248.145.185:32970] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "admO_GJmwJFFPEgRHfGijgAAAMA"]
[Sat Apr 11 07:59:56.520016 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:46917] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "admO_IkdEsz5NeAq8w2fDgAAAQ4"]
[Sat Apr 11 07:59:57.026608 2026] [:error] [pid 33171:tid 33192] [client 74.248.145.185:46973] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "admO_boqTMlo30hcVw-WhwAAAAY"]
[Sat Apr 11 07:59:57.531033 2026] [:error] [pid 15244:tid 15270] [client 74.248.145.185:46277] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "admO_YkdEsz5NeAq8w2fFAAAARg"]
[Sat Apr 11 07:59:58.041020 2026] [:error] [pid 15244:tid 15253] [client 74.248.145.185:33022] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "admO_okdEsz5NeAq8w2fFQAAAQc"]
[Sat Apr 11 07:59:58.547601 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:46932] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "admO_mJmwJFFPEgRHfGinAAAAMY"]
[Sat Apr 11 07:59:59.058831 2026] [:error] [pid 33288:tid 33291] [client 74.248.145.185:28863] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "admO_2JmwJFFPEgRHfGinwAAAME"]
[Sat Apr 11 07:59:59.572223 2026] [:error] [pid 33172:tid 33237] [client 74.248.145.185:46972] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "admO_zn2G0IJw5EZY9l4uQAAAFM"]
[Sat Apr 11 08:00:00.084854 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:32900] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "admPAIkdEsz5NeAq8w2fHgAAARQ"]
[Sat Apr 11 08:00:00.604841 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:23723] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "admPALoqTMlo30hcVw-WigAAAAA"]
[Sat Apr 11 08:00:01.121064 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:32930] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "admPAa8109xRDP2izWgkGAAAAJc"]
[Sat Apr 11 08:00:01.633310 2026] [:error] [pid 33288:tid 33301] [client 74.248.145.185:33013] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "admPAWJmwJFFPEgRHfGirQAAAMs"]
[Sat Apr 11 08:00:02.149891 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:46274] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "admPAokdEsz5NeAq8w2fJgAAAQQ"]
[Sat Apr 11 08:00:02.663044 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:32919] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "admPAjn2G0IJw5EZY9l4ugAAAFc"]
[Sat Apr 11 08:00:03.173589 2026] [:error] [pid 33288:tid 33293] [client 74.248.145.185:32956] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "admPA2JmwJFFPEgRHfGitAAAAMM"]
[Sat Apr 11 08:00:03.690640 2026] [:error] [pid 33288:tid 33308] [client 74.248.145.185:46926] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "admPA2JmwJFFPEgRHfGitwAAANI"]
[Sat Apr 11 08:00:04.206704 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:33008] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "admPBGJmwJFFPEgRHfGivgAAAMY"]
[Sat Apr 11 08:00:04.717571 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:28298] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "admPBIkdEsz5NeAq8w2fKQAAARU"]
[Sat Apr 11 08:00:05.229084 2026] [:error] [pid 15244:tid 15249] [client 74.248.145.185:46287] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "admPBYkdEsz5NeAq8w2fLQAAAQM"]
[Sat Apr 11 08:00:05.756830 2026] [:error] [pid 33173:tid 33262] [client 74.248.145.185:46934] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "admPBa8109xRDP2izWgkKAAAAJE"]
[Sat Apr 11 08:00:06.275908 2026] [:error] [pid 33173:tid 33248] [client 74.248.145.185:33021] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "admPBq8109xRDP2izWgkLwAAAIM"]
[Sat Apr 11 08:00:06.781074 2026] [:error] [pid 33171:tid 33201] [client 74.248.145.185:46284] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "admPBroqTMlo30hcVw-WlAAAAA8"]
[Sat Apr 11 08:00:07.297752 2026] [:error] [pid 33172:tid 33232] [client 74.248.145.185:46939] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "admPBzn2G0IJw5EZY9l4wwAAAE4"]
[Sat Apr 11 08:00:07.814556 2026] [:error] [pid 33172:tid 33231] [client 74.248.145.185:32922] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "admPBzn2G0IJw5EZY9l4xAAAAE0"]
[Sat Apr 11 08:00:08.327046 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:23743] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "admPCIkdEsz5NeAq8w2fMwAAARU"]
[Sat Apr 11 08:00:08.833095 2026] [:error] [pid 33172:tid 33220] [client 74.248.145.185:28312] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "admPCDn2G0IJw5EZY9l4ygAAAEI"]
[Sat Apr 11 08:00:09.341184 2026] [:error] [pid 15244:tid 15252] [client 74.248.145.185:28854] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "admPCYkdEsz5NeAq8w2fOAAAAQY"]
[Sat Apr 11 08:00:09.853223 2026] [:error] [pid 15244:tid 15255] [client 74.248.145.185:20393] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "admPCYkdEsz5NeAq8w2fPwAAAQk"]
[Sat Apr 11 08:00:10.362836 2026] [:error] [pid 33171:tid 33197] [client 74.248.145.185:28805] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "admPCroqTMlo30hcVw-WmQAAAAs"]
[Sat Apr 11 08:00:10.883331 2026] [:error] [pid 15244:tid 15248] [client 74.248.145.185:33019] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "admPCokdEsz5NeAq8w2fRQAAAQI"]
[Sat Apr 11 08:00:11.387680 2026] [:error] [pid 33173:tid 33261] [client 74.248.145.185:28335] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "admPC68109xRDP2izWgkOwAAAJA"]
[Sat Apr 11 08:00:11.903856 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28345] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "admPC4kdEsz5NeAq8w2fTQAAARI"]
[Sat Apr 11 08:00:12.411592 2026] [:error] [pid 33172:tid 33232] [client 74.248.145.185:32917] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "admPDDn2G0IJw5EZY9l40AAAAE4"]
[Sat Apr 11 08:00:12.932917 2026] [:error] [pid 33171:tid 33196] [client 74.248.145.185:46969] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "admPDLoqTMlo30hcVw-WnQAAAAo"]
[Sat Apr 11 08:00:13.450091 2026] [:error] [pid 33288:tid 33306] [client 74.248.145.185:32927] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "admPDWJmwJFFPEgRHfGi1AAAANA"]
[Sat Apr 11 08:00:13.965402 2026] [:error] [pid 33288:tid 33314] [client 74.248.145.185:32968] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "admPDWJmwJFFPEgRHfGi1wAAANg"]
[Sat Apr 11 08:00:14.485524 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:14.741436 2026] [proxy_fcgi:error] [pid 33288:tid 33294] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:15.018156 2026] [proxy_fcgi:error] [pid 33288:tid 33312] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:15.274363 2026] [proxy_fcgi:error] [pid 33288:tid 33304] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:15.530451 2026] [proxy_fcgi:error] [pid 33288:tid 33310] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:15.786517 2026] [proxy_fcgi:error] [pid 33288:tid 33297] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:16.043294 2026] [proxy_fcgi:error] [pid 33288:tid 33306] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:16.299341 2026] [proxy_fcgi:error] [pid 33288:tid 33291] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:16.558698 2026] [proxy_fcgi:error] [pid 33288:tid 33290] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:16.815590 2026] [proxy_fcgi:error] [pid 33288:tid 33301] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:17.073104 2026] [proxy_fcgi:error] [pid 33288:tid 33292] [client 74.248.145.185:32942] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:00:17.325455 2026] [:error] [pid 33288:tid 33294] [client 74.248.145.185:32942] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admPEWJmwJFFPEgRHfGi6wAAAMQ"]
[Sat Apr 11 08:00:17.852694 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:32926] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admPEYkdEsz5NeAq8w2fcwAAARQ"]
[Sat Apr 11 08:00:18.376365 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:46275] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admPEokdEsz5NeAq8w2feAAAAQ4"]
[Sat Apr 11 08:00:18.885169 2026] [:error] [pid 15244:tid 15246] [client 74.248.145.185:28300] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "admPEokdEsz5NeAq8w2ffAAAAQA"]
[Sat Apr 11 08:00:19.399794 2026] [:error] [pid 33173:tid 33267] [client 74.248.145.185:46293] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "admPE68109xRDP2izWgkUAAAAJY"]
[Sat Apr 11 08:00:19.906892 2026] [:error] [pid 33171:tid 33197] [client 74.248.145.185:23805] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "admPE7oqTMlo30hcVw-WpgAAAAs"]
[Sat Apr 11 08:00:20.423558 2026] [:error] [pid 33288:tid 33306] [client 74.248.145.185:28332] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "admPFGJmwJFFPEgRHfGi8gAAANA"]
[Sat Apr 11 08:00:20.932417 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28857] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "admPFIkdEsz5NeAq8w2fgAAAARI"]
[Sat Apr 11 08:00:21.443428 2026] [:error] [pid 33173:tid 33249] [client 74.248.145.185:32974] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "admPFa8109xRDP2izWgkUwAAAIQ"]
[Sat Apr 11 08:00:21.950668 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:46307] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "admPFYkdEsz5NeAq8w2fhAAAAQ4"]
[Sat Apr 11 08:00:22.458751 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:46914] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "admPFokdEsz5NeAq8w2fjAAAARQ"]
[Sat Apr 11 08:00:22.970959 2026] [:error] [pid 33171:tid 33205] [client 74.248.145.185:46294] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "admPFroqTMlo30hcVw-WrgAAABM"]
[Sat Apr 11 08:00:23.488685 2026] [:error] [pid 33172:tid 33218] [client 74.248.145.185:28831] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "admPFzn2G0IJw5EZY9l45gAAAEA"]
[Sat Apr 11 08:00:23.999333 2026] [:error] [pid 33171:tid 33190] [client 74.248.145.185:23802] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "admPF7oqTMlo30hcVw-WsQAAAAQ"]
[Sat Apr 11 08:00:24.517178 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:32896] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "admPGK8109xRDP2izWgkYgAAAIY"]
[Sat Apr 11 08:00:25.026037 2026] [:error] [pid 33288:tid 33305] [client 74.248.145.185:46944] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "admPGWJmwJFFPEgRHfGi9wAAAM8"]
[Sat Apr 11 08:00:25.554480 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:32954] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "admPGTn2G0IJw5EZY9l48AAAAFc"]
[Sat Apr 11 08:00:26.071712 2026] [:error] [pid 33172:tid 33239] [client 74.248.145.185:46955] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "admPGjn2G0IJw5EZY9l48wAAAFU"]
[Sat Apr 11 08:00:26.589600 2026] [:error] [pid 33172:tid 33235] [client 74.248.145.185:46334] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "admPGjn2G0IJw5EZY9l4-AAAAFE"]
[Sat Apr 11 08:00:27.109436 2026] [:error] [pid 15244:tid 15268] [client 74.248.145.185:20356] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "admPG4kdEsz5NeAq8w2flgAAARY"]
[Sat Apr 11 08:00:27.641765 2026] [:error] [pid 15244:tid 15257] [client 74.248.145.185:28295] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "admPG4kdEsz5NeAq8w2fmwAAAQs"]
[Sat Apr 11 08:00:28.150684 2026] [:error] [pid 15244:tid 15262] [client 74.248.145.185:23781] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "admPHIkdEsz5NeAq8w2fnAAAARA"]
[Sat Apr 11 08:00:28.660377 2026] [:error] [pid 15244:tid 15252] [client 74.248.145.185:46975] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "admPHIkdEsz5NeAq8w2fngAAAQY"]
[Sat Apr 11 08:00:29.179807 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:28825] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "admPHboqTMlo30hcVw-WwAAAAAA"]
[Sat Apr 11 08:00:29.711981 2026] [:error] [pid 33171:tid 33200] [client 74.248.145.185:32955] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "admPHboqTMlo30hcVw-WwgAAAA4"]
[Sat Apr 11 08:00:30.244395 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:46966] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "admPHq8109xRDP2izWgkdQAAAI8"]
[Sat Apr 11 08:00:30.788346 2026] [:error] [pid 33173:tid 33255] [client 74.248.145.185:32978] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "admPHq8109xRDP2izWgkewAAAIo"]
[Sat Apr 11 08:00:31.312128 2026] [:error] [pid 33288:tid 33306] [client 74.248.145.185:32966] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "admPH2JmwJFFPEgRHfGjAAAAANA"]
[Sat Apr 11 08:00:31.841653 2026] [:error] [pid 15244:tid 15257] [client 74.248.145.185:32973] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPH4kdEsz5NeAq8w2fpAAAAQs"]
[Sat Apr 11 08:00:32.357853 2026] [:error] [pid 15244:tid 15246] [client 74.248.145.185:46272] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPIIkdEsz5NeAq8w2fqAAAAQA"]
[Sat Apr 11 08:00:32.870075 2026] [:error] [pid 33173:tid 33261] [client 74.248.145.185:28824] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPIK8109xRDP2izWgkhQAAAJA"]
[Sat Apr 11 08:00:33.410719 2026] [:error] [pid 33171:tid 33209] [client 74.248.145.185:46303] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPIboqTMlo30hcVw-WzAAAABc"]
[Sat Apr 11 08:00:33.973905 2026] [:error] [pid 33288:tid 33312] [client 74.248.145.185:28813] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admPIWJmwJFFPEgRHfGjCwAAANY"]
[Sat Apr 11 08:00:34.491765 2026] [:error] [pid 33288:tid 33297] [client 74.248.145.185:32941] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admPImJmwJFFPEgRHfGjEAAAAMc"]
[Sat Apr 11 08:00:35.003093 2026] [:error] [pid 33171:tid 33209] [client 74.248.145.185:46946] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admPI7oqTMlo30hcVw-W2AAAABc"]
[Sat Apr 11 08:00:35.517107 2026] [:error] [pid 33172:tid 33219] [client 74.248.145.185:28834] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "admPIzn2G0IJw5EZY9l5FAAAAEE"]
[Sat Apr 11 08:00:36.034700 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:28816] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "admPJGJmwJFFPEgRHfGjGgAAAMY"]
[Sat Apr 11 08:00:36.601296 2026] [:error] [pid 33172:tid 33239] [client 74.248.145.185:28319] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "admPJDn2G0IJw5EZY9l5GwAAAFU"]
[Sat Apr 11 08:00:37.121364 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:33001] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "admPJTn2G0IJw5EZY9l5IAAAAFA"]
[Sat Apr 11 08:00:37.664279 2026] [:error] [pid 33172:tid 33225] [client 74.248.145.185:20391] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "admPJTn2G0IJw5EZY9l5JAAAAEc"]
[Sat Apr 11 08:00:38.185850 2026] [:error] [pid 33288:tid 33309] [client 74.248.145.185:46314] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "admPJmJmwJFFPEgRHfGjJQAAANM"]
[Sat Apr 11 08:00:38.726707 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:46941] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "admPJq8109xRDP2izWgklwAAAI8"]
[Sat Apr 11 08:00:39.251074 2026] [:error] [pid 33173:tid 33265] [client 74.248.145.185:28328] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "admPJ68109xRDP2izWgkmAAAAJQ"]
[Sat Apr 11 08:00:39.793069 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:46297] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "admPJ68109xRDP2izWgkngAAAJc"]
[Sat Apr 11 08:00:40.333688 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:46945] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "admPKIkdEsz5NeAq8w2fugAAARU"]
[Sat Apr 11 08:00:40.870137 2026] [:error] [pid 33171:tid 33203] [client 74.248.145.185:32903] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "admPKLoqTMlo30hcVw-W2gAAABE"]
[Sat Apr 11 08:00:41.405334 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:20042] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "admPKWJmwJFFPEgRHfGjNAAAAM4"]
[Sat Apr 11 08:00:41.922907 2026] [:error] [pid 15244:tid 15262] [client 74.248.145.185:46331] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "admPKYkdEsz5NeAq8w2fwQAAARA"]
[Sat Apr 11 08:00:42.434987 2026] [:error] [pid 33172:tid 33237] [client 74.248.145.185:46308] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "admPKjn2G0IJw5EZY9l5MAAAAFM"]
[Sat Apr 11 08:00:42.948653 2026] [:error] [pid 33288:tid 33294] [client 74.248.145.185:20057] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "admPKmJmwJFFPEgRHfGjPQAAAMQ"]
[Sat Apr 11 08:00:43.468539 2026] [:error] [pid 33288:tid 33292] [client 74.248.145.185:23715] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "admPK2JmwJFFPEgRHfGjPgAAAMI"]
[Sat Apr 11 08:00:44.011028 2026] [:error] [pid 33171:tid 33190] [client 74.248.145.185:33016] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "admPLLoqTMlo30hcVw-W3AAAAAQ"]
[Sat Apr 11 08:00:44.517380 2026] [:error] [pid 15244:tid 15255] [client 74.248.145.185:23690] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "admPLIkdEsz5NeAq8w2f2wAAAQk"]
[Sat Apr 11 08:00:45.063578 2026] [:error] [pid 33288:tid 33295] [client 74.248.145.185:46288] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "admPLWJmwJFFPEgRHfGjQwAAAMU"]
[Sat Apr 11 08:00:45.572674 2026] [:error] [pid 33171:tid 33192] [client 74.248.145.185:33010] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "admPLboqTMlo30hcVw-W3wAAAAY"]
[Sat Apr 11 08:00:46.113823 2026] [:error] [pid 33288:tid 33306] [client 74.248.145.185:28806] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "admPLmJmwJFFPEgRHfGjRwAAANA"]
[Sat Apr 11 08:00:46.640592 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:23708] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "admPLq8109xRDP2izWgkwQAAAIY"]
[Sat Apr 11 08:00:47.181437 2026] [:error] [pid 33173:tid 33257] [client 74.248.145.185:20365] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "admPL68109xRDP2izWgkxgAAAIw"]
[Sat Apr 11 08:00:47.703705 2026] [:error] [pid 33171:tid 33204] [client 74.248.145.185:46960] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "admPL7oqTMlo30hcVw-W5AAAABI"]
[Sat Apr 11 08:00:48.216196 2026] [:error] [pid 33288:tid 33307] [client 74.248.145.185:32913] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "admPMGJmwJFFPEgRHfGjTgAAANE"]
[Sat Apr 11 08:00:48.733894 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28326] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "admPMIkdEsz5NeAq8w2f7gAAARI"]
[Sat Apr 11 08:00:49.260088 2026] [:error] [pid 33171:tid 33193] [client 74.248.145.185:46288] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "admPMboqTMlo30hcVw-W5gAAAAc"]
[Sat Apr 11 08:00:49.789481 2026] [:error] [pid 33288:tid 33301] [client 74.248.145.185:23806] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "admPMWJmwJFFPEgRHfGjWAAAAMs"]
[Sat Apr 11 08:00:50.361062 2026] [:error] [pid 33171:tid 33194] [client 74.248.145.185:28833] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "admPMroqTMlo30hcVw-W5wAAAAg"]
[Sat Apr 11 08:00:50.876769 2026] [:error] [pid 33173:tid 33255] [client 74.248.145.185:32947] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPMq8109xRDP2izWgk1AAAAIo"]
[Sat Apr 11 08:00:51.406335 2026] [:error] [pid 33173:tid 33257] [client 74.248.145.185:23732] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPM68109xRDP2izWgk1QAAAIw"]
[Sat Apr 11 08:00:51.938511 2026] [:error] [pid 33288:tid 33309] [client 74.248.145.185:28812] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPM2JmwJFFPEgRHfGjawAAANM"]
[Sat Apr 11 08:00:52.484548 2026] [:error] [pid 15244:tid 15268] [client 74.248.145.185:32933] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPNIkdEsz5NeAq8w2gBAAAARY"]
[Sat Apr 11 08:00:53.018989 2026] [:error] [pid 33173:tid 33256] [client 74.248.145.185:46305] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "admPNa8109xRDP2izWgk2QAAAIs"]
[Sat Apr 11 08:00:53.563292 2026] [:error] [pid 33171:tid 33210] [client 74.248.145.185:46938] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "admPNboqTMlo30hcVw-W7AAAABg"]
[Sat Apr 11 08:00:54.145040 2026] [:error] [pid 15244:tid 15253] [client 74.248.145.185:28841] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "admPNokdEsz5NeAq8w2gDwAAAQc"]
[Sat Apr 11 08:00:54.707580 2026] [:error] [pid 33172:tid 33222] [client 74.248.145.185:28847] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "admPNjn2G0IJw5EZY9l5OgAAAEQ"]
[Sat Apr 11 08:00:55.287137 2026] [:error] [pid 33173:tid 33254] [client 74.248.145.185:23749] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admPN68109xRDP2izWgk2gAAAIk"]
[Sat Apr 11 08:00:55.827996 2026] [:error] [pid 33288:tid 33303] [client 74.248.145.185:46936] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admPN2JmwJFFPEgRHfGjdgAAAM0"]
[Sat Apr 11 08:00:56.358680 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:28803] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admPOGJmwJFFPEgRHfGjeQAAANc"]
[Sat Apr 11 08:00:56.975750 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:46286] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "admPOK8109xRDP2izWgk3AAAAIY"]
[Sat Apr 11 08:00:57.573794 2026] [:error] [pid 33173:tid 33257] [client 74.248.145.185:32969] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "admPOa8109xRDP2izWgk3QAAAIw"]
[Sat Apr 11 08:00:58.121733 2026] [:error] [pid 33172:tid 33218] [client 74.248.145.185:23800] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "admPOjn2G0IJw5EZY9l5RgAAAEA"]
[Sat Apr 11 08:00:58.706759 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:33004] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "admPOroqTMlo30hcVw-W9AAAAAA"]
[Sat Apr 11 08:00:59.417619 2026] [:error] [pid 15244:tid 15265] [client 74.248.145.185:23776] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "admPO4kdEsz5NeAq8w2gLgAAARM"]
[Sat Apr 11 08:01:00.033102 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:28305] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "admPPGJmwJFFPEgRHfGjjwAAANc"]
[Sat Apr 11 08:01:01.240022 2026] [:error] [pid 15244:tid 15246] [client 74.248.145.185:28839] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "admPPYkdEsz5NeAq8w2gPQAAAQA"]
[Sat Apr 11 08:01:02.088908 2026] [:error] [pid 15244:tid 15249] [client 74.248.145.185:32992] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "admPPokdEsz5NeAq8w2gSAAAAQM"]
[Sat Apr 11 08:01:02.696037 2026] [:error] [pid 33173:tid 33246] [client 74.248.145.185:28814] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "admPPq8109xRDP2izWgk4AAAAIE"]
[Sat Apr 11 08:01:03.242812 2026] [:error] [pid 33288:tid 33312] [client 74.248.145.185:46943] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "admPP2JmwJFFPEgRHfGjmQAAANY"]
[Sat Apr 11 08:01:03.756825 2026] [:error] [pid 15244:tid 15253] [client 74.248.145.185:23751] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "admPP4kdEsz5NeAq8w2gUwAAAQc"]
[Sat Apr 11 08:01:04.300012 2026] [:error] [pid 33172:tid 33223] [client 74.248.145.185:32962] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "admPQDn2G0IJw5EZY9l5UQAAAEU"]
[Sat Apr 11 08:01:04.810972 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28827] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "admPQIkdEsz5NeAq8w2gVQAAARI"]
[Sat Apr 11 08:01:05.341047 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:32908] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "admPQTn2G0IJw5EZY9l5VQAAAFc"]
[Sat Apr 11 08:01:05.880565 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:23798] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "admPQYkdEsz5NeAq8w2gWgAAAQQ"]
[Sat Apr 11 08:01:06.401127 2026] [:error] [pid 33172:tid 33228] [client 74.248.145.185:32934] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "admPQjn2G0IJw5EZY9l5WAAAAEo"]
[Sat Apr 11 08:01:06.951680 2026] [:error] [pid 15244:tid 15269] [client 74.248.145.185:32902] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "admPQokdEsz5NeAq8w2gYgAAARc"]
[Sat Apr 11 08:01:07.514427 2026] [:error] [pid 33288:tid 33310] [client 74.248.145.185:46328] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "admPQ2JmwJFFPEgRHfGjogAAANQ"]
[Sat Apr 11 08:01:08.041137 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:32923] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "admPRIkdEsz5NeAq8w2gbAAAARI"]
[Sat Apr 11 08:01:08.574339 2026] [:error] [pid 33288:tid 33293] [client 74.248.145.185:32990] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "admPRGJmwJFFPEgRHfGjpAAAAMM"]
[Sat Apr 11 08:01:09.141227 2026] [:error] [pid 15244:tid 15262] [client 74.248.145.185:33003] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "admPRYkdEsz5NeAq8w2gdwAAARA"]
[Sat Apr 11 08:01:09.698192 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:28351] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPRYkdEsz5NeAq8w2gfAAAARE"]
[Sat Apr 11 08:01:10.215381 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28858] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPRokdEsz5NeAq8w2gfQAAARI"]
[Sat Apr 11 08:01:10.739271 2026] [:error] [pid 15244:tid 15259] [client 74.248.145.185:20412] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPRokdEsz5NeAq8w2ggAAAAQ0"]
[Sat Apr 11 08:01:11.251051 2026] [:error] [pid 15244:tid 15247] [client 74.248.145.185:32938] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPR4kdEsz5NeAq8w2ghgAAAQE"]
[Sat Apr 11 08:01:11.781921 2026] [:error] [pid 15244:tid 15249] [client 74.248.145.185:32943] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPR4kdEsz5NeAq8w2giwAAAQM"]
[Sat Apr 11 08:01:12.308730 2026] [:error] [pid 15244:tid 15252] [client 74.248.145.185:20396] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPSIkdEsz5NeAq8w2gkAAAAQY"]
[Sat Apr 11 08:01:12.854973 2026] [:error] [pid 15244:tid 15247] [client 74.248.145.185:28830] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPSIkdEsz5NeAq8w2glAAAAQE"]
[Sat Apr 11 08:01:13.371664 2026] [:error] [pid 15244:tid 15251] [client 74.248.145.185:28327] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPSYkdEsz5NeAq8w2gmAAAAQU"]
[Sat Apr 11 08:01:13.892876 2026] [:error] [pid 33173:tid 33259] [client 74.248.145.185:28804] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "admPSa8109xRDP2izWgk8wAAAI4"]
[Sat Apr 11 08:01:14.421419 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:23744] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "admPSmJmwJFFPEgRHfGjtgAAAMY"]
[Sat Apr 11 08:01:14.953489 2026] [:error] [pid 33173:tid 33261] [client 74.248.145.185:23782] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "admPSq8109xRDP2izWgk-AAAAJA"]
[Sat Apr 11 08:01:15.476803 2026] [:error] [pid 33173:tid 33246] [client 74.248.145.185:32952] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "admPS68109xRDP2izWgk-wAAAIE"]
[Sat Apr 11 08:01:15.985850 2026] [:error] [pid 33171:tid 33192] [client 74.248.145.185:28297] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "admPS7oqTMlo30hcVw-XCQAAAAY"]
[Sat Apr 11 08:01:16.504428 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:46282] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "admPTK8109xRDP2izWgk_gAAAJc"]
[Sat Apr 11 08:01:17.038839 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:17.308567 2026] [proxy_fcgi:error] [pid 33288:tid 33304] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:17.564996 2026] [proxy_fcgi:error] [pid 33288:tid 33313] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:17.821857 2026] [proxy_fcgi:error] [pid 33288:tid 33291] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:18.077453 2026] [proxy_fcgi:error] [pid 33288:tid 33296] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:18.588285 2026] [proxy_fcgi:error] [pid 33288:tid 33298] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:18.847811 2026] [proxy_fcgi:error] [pid 33288:tid 33312] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:19.110475 2026] [proxy_fcgi:error] [pid 33288:tid 33297] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:19.367068 2026] [proxy_fcgi:error] [pid 33288:tid 33299] [client 74.248.145.185:46958] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:01:19.876444 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:46958] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPT2JmwJFFPEgRHfGj0gAAAM4"]
[Sat Apr 11 08:01:20.384275 2026] [:error] [pid 33171:tid 33196] [client 74.248.145.185:23763] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPULoqTMlo30hcVw-XEgAAAAo"]
[Sat Apr 11 08:01:20.915322 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:23680] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPUIkdEsz5NeAq8w2gwQAAARE"]
[Sat Apr 11 08:01:21.440268 2026] [:error] [pid 33171:tid 33190] [client 74.248.145.185:46326] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "admPUboqTMlo30hcVw-XGQAAAAQ"]
[Sat Apr 11 08:01:21.963004 2026] [:error] [pid 15244:tid 15255] [client 74.248.145.185:32961] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPUYkdEsz5NeAq8w2gxQAAAQk"]
[Sat Apr 11 08:01:22.486477 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:23792] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPUokdEsz5NeAq8w2gyQAAARI"]
[Sat Apr 11 08:01:23.016145 2026] [:error] [pid 15244:tid 15252] [client 74.248.145.185:46327] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPU4kdEsz5NeAq8w2gzgAAAQY"]
[Sat Apr 11 08:01:23.533984 2026] [:error] [pid 33172:tid 33232] [client 74.248.145.185:46952] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPUzn2G0IJw5EZY9l5bQAAAE4"]
[Sat Apr 11 08:01:24.048480 2026] [:error] [pid 15244:tid 15258] [client 74.248.145.185:33002] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "admPVIkdEsz5NeAq8w2g2AAAAQw"]
[Sat Apr 11 08:01:24.564372 2026] [:error] [pid 33173:tid 33267] [client 74.248.145.185:28288] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "admPVK8109xRDP2izWglDAAAAJY"]
[Sat Apr 11 08:01:25.083170 2026] [:error] [pid 33173:tid 33248] [client 74.248.145.185:23747] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "admPVa8109xRDP2izWglDgAAAIM"]
[Sat Apr 11 08:01:25.589173 2026] [:error] [pid 15244:tid 15261] [client 74.248.145.185:28339] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "admPVYkdEsz5NeAq8w2g5QAAAQ8"]
[Sat Apr 11 08:01:26.100865 2026] [:error] [pid 15244:tid 15265] [client 74.248.145.185:57993] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "admPVokdEsz5NeAq8w2g6QAAARM"]
[Sat Apr 11 08:01:26.609516 2026] [:error] [pid 33288:tid 33295] [client 74.248.145.185:58008] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "admPVmJmwJFFPEgRHfGj4AAAAMU"]
[Sat Apr 11 08:01:27.120878 2026] [:error] [pid 33171:tid 33203] [client 74.248.145.185:32948] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "admPV7oqTMlo30hcVw-XHQAAABE"]
[Sat Apr 11 08:01:27.629238 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:32977] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "admPV7oqTMlo30hcVw-XIQAAAA0"]
[Sat Apr 11 08:01:28.140726 2026] [:error] [pid 33171:tid 33200] [client 74.248.145.185:28336] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPWLoqTMlo30hcVw-XJAAAAA4"]
[Sat Apr 11 08:01:28.652892 2026] [:error] [pid 33288:tid 33309] [client 74.248.145.185:46970] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPWGJmwJFFPEgRHfGj6wAAANM"]
[Sat Apr 11 08:01:29.161017 2026] [:error] [pid 33173:tid 33262] [client 74.248.145.185:32953] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPWa8109xRDP2izWglGQAAAJE"]
[Sat Apr 11 08:01:29.667979 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:46301] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "admPWTn2G0IJw5EZY9l5cwAAAFc"]
[Sat Apr 11 08:01:30.183383 2026] [:error] [pid 33288:tid 33301] [client 74.248.145.185:28837] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "admPWmJmwJFFPEgRHfGj9AAAAMs"]
[Sat Apr 11 08:01:30.692681 2026] [:error] [pid 33173:tid 33264] [client 74.248.145.185:28838] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "admPWq8109xRDP2izWglHAAAAJM"]
[Sat Apr 11 08:01:31.201943 2026] [:error] [pid 33173:tid 33266] [client 74.248.145.185:23700] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "admPW68109xRDP2izWglHQAAAJU"]
[Sat Apr 11 08:01:31.714983 2026] [:error] [pid 33173:tid 33252] [client 74.248.145.185:28294] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "admPW68109xRDP2izWglIAAAAIc"]
[Sat Apr 11 08:01:32.240368 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:32905] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admPXLoqTMlo30hcVw-XLQAAAAA"]
[Sat Apr 11 08:01:32.749327 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:28306] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admPXLoqTMlo30hcVw-XMAAAAA0"]
[Sat Apr 11 08:01:33.266902 2026] [:error] [pid 33171:tid 33190] [client 74.248.145.185:23787] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admPXboqTMlo30hcVw-XNQAAAAQ"]
[Sat Apr 11 08:01:33.775811 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:20367] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admPXboqTMlo30hcVw-XPAAAAAA"]
[Sat Apr 11 08:01:34.284328 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:33020] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "admPXq8109xRDP2izWglKAAAAIY"]
[Sat Apr 11 08:01:34.794918 2026] [:error] [pid 33171:tid 33194] [client 74.248.145.185:23702] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "admPXroqTMlo30hcVw-XRwAAAAg"]
[Sat Apr 11 08:01:35.305318 2026] [:error] [pid 33288:tid 33294] [client 74.248.145.185:32936] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "admPX2JmwJFFPEgRHfGkBAAAAMQ"]
[Sat Apr 11 08:01:35.819748 2026] [:error] [pid 33171:tid 33195] [client 74.248.145.185:46283] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "admPX7oqTMlo30hcVw-XTgAAAAk"]
[Sat Apr 11 08:01:36.328356 2026] [:error] [pid 33171:tid 33204] [client 74.248.145.185:23685] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPYLoqTMlo30hcVw-XUgAAABI"]
[Sat Apr 11 08:01:36.847567 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:28843] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPYK8109xRDP2izWglMQAAAI8"]
[Sat Apr 11 08:01:37.364569 2026] [:error] [pid 33172:tid 33227] [client 74.248.145.185:33018] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPYTn2G0IJw5EZY9l5dwAAAEk"]
[Sat Apr 11 08:01:37.884641 2026] [:error] [pid 33171:tid 33193] [client 74.248.145.185:46316] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPYboqTMlo30hcVw-XVwAAAAc"]
[Sat Apr 11 08:01:38.388771 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:28340] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "admPYq8109xRDP2izWglNwAAAJc"]
[Sat Apr 11 08:01:38.897805 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:20366] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "admPYjn2G0IJw5EZY9l5fwAAAFA"]
[Sat Apr 11 08:01:39.407385 2026] [:error] [pid 33173:tid 33254] [client 74.248.145.185:23688] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "admPY68109xRDP2izWglPQAAAIk"]
[Sat Apr 11 08:01:39.912933 2026] [:error] [pid 33288:tid 33314] [client 74.248.145.185:46949] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "admPY2JmwJFFPEgRHfGkFwAAANg"]
[Sat Apr 11 08:01:40.423472 2026] [:error] [pid 15244:tid 15256] [client 74.248.145.185:28310] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "admPZIkdEsz5NeAq8w2g-gAAAQo"]
[Sat Apr 11 08:01:40.929761 2026] [:error] [pid 33288:tid 33292] [client 74.248.145.185:23762] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "admPZGJmwJFFPEgRHfGkHQAAAMI"]
[Sat Apr 11 08:01:41.439322 2026] [:error] [pid 33173:tid 33265] [client 74.248.145.185:20385] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "admPZa8109xRDP2izWglRgAAAJQ"]
[Sat Apr 11 08:01:41.948258 2026] [:error] [pid 33171:tid 33207] [client 74.248.145.185:28800] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "admPZboqTMlo30hcVw-XXwAAABU"]
[Sat Apr 11 08:01:42.455320 2026] [:error] [pid 33172:tid 33231] [client 74.248.145.185:33023] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "admPZjn2G0IJw5EZY9l5hgAAAE0"]
[Sat Apr 11 08:01:42.965294 2026] [:error] [pid 33172:tid 33220] [client 74.248.145.185:28349] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "admPZjn2G0IJw5EZY9l5iQAAAEI"]
[Sat Apr 11 08:01:43.479291 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:28808] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "admPZ7oqTMlo30hcVw-XaAAAAAA"]
[Sat Apr 11 08:01:43.994272 2026] [:error] [pid 33288:tid 33298] [client 74.248.145.185:23687] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "admPZ2JmwJFFPEgRHfGkLQAAAMg"]
[Sat Apr 11 08:01:44.507083 2026] [:error] [pid 33173:tid 33255] [client 74.248.145.185:46290] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "admPaK8109xRDP2izWglWAAAAIo"]
[Sat Apr 11 08:01:45.018237 2026] [:error] [pid 33173:tid 33269] [client 74.248.145.185:20361] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "admPaa8109xRDP2izWglXQAAAJg"]
[Sat Apr 11 08:01:45.545270 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:28296] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "admPaYkdEsz5NeAq8w2hAQAAAQQ"]
[Sat Apr 11 08:01:46.067753 2026] [:error] [pid 33173:tid 33247] [client 74.248.145.185:46913] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "admPaq8109xRDP2izWglZAAAAII"]
[Sat Apr 11 08:01:46.574464 2026] [:error] [pid 33173:tid 33258] [client 74.248.145.185:32921] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "admPaq8109xRDP2izWglagAAAI0"]
[Sat Apr 11 08:01:47.088153 2026] [:error] [pid 33173:tid 33261] [client 74.248.145.185:23703] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "admPa68109xRDP2izWglbgAAAJA"]
[Sat Apr 11 08:01:47.592419 2026] [:error] [pid 33288:tid 33298] [client 74.248.145.185:46324] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "admPa2JmwJFFPEgRHfGkRQAAAMg"]
[Sat Apr 11 08:01:48.113514 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:23791] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "admPbK8109xRDP2izWgldAAAAJc"]
[Sat Apr 11 08:01:48.628733 2026] [:error] [pid 33171:tid 33210] [client 74.248.145.185:23763] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admPbLoqTMlo30hcVw-XegAAABg"]
[Sat Apr 11 08:01:49.142096 2026] [:error] [pid 15244:tid 15255] [client 74.248.145.185:28859] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admPbYkdEsz5NeAq8w2hCgAAAQk"]
[Sat Apr 11 08:01:49.647427 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:20358] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admPbYkdEsz5NeAq8w2hDgAAARQ"]
[Sat Apr 11 08:01:50.163657 2026] [:error] [pid 33171:tid 33191] [client 74.248.145.185:28292] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admPbroqTMlo30hcVw-XhAAAAAU"]
[Sat Apr 11 08:01:50.677699 2026] [:error] [pid 15244:tid 15247] [client 74.248.145.185:32959] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "admPbokdEsz5NeAq8w2hFgAAAQE"]
[Sat Apr 11 08:01:51.192118 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:23739] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "admPb7oqTMlo30hcVw-XjAAAAA0"]
[Sat Apr 11 08:01:51.716914 2026] [:error] [pid 15244:tid 15270] [client 74.248.145.185:28819] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "admPb4kdEsz5NeAq8w2hHwAAARg"]
[Sat Apr 11 08:01:52.233909 2026] [:error] [pid 33171:tid 33195] [client 74.248.145.185:40131] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "admPcLoqTMlo30hcVw-XkQAAAAk"]
[Sat Apr 11 08:01:52.744943 2026] [:error] [pid 33171:tid 33201] [client 74.248.145.185:46323] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admPcLoqTMlo30hcVw-XmgAAAA8"]
[Sat Apr 11 08:01:53.260847 2026] [:error] [pid 33173:tid 33269] [client 74.248.145.185:32918] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admPca8109xRDP2izWglgAAAAJg"]
[Sat Apr 11 08:01:53.792246 2026] [:error] [pid 33173:tid 33251] [client 74.248.145.185:23760] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admPca8109xRDP2izWglhAAAAIY"]
[Sat Apr 11 08:01:54.304978 2026] [:error] [pid 33173:tid 33253] [client 74.248.145.185:46292] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admPcq8109xRDP2izWgliAAAAIg"]
[Sat Apr 11 08:01:54.816242 2026] [:error] [pid 33173:tid 33262] [client 74.248.145.185:28826] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "admPcq8109xRDP2izWgljQAAAJE"]
[Sat Apr 11 08:01:55.336154 2026] [:error] [pid 33288:tid 33300] [client 74.248.145.185:32945] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "admPc2JmwJFFPEgRHfGkXgAAAMo"]
[Sat Apr 11 08:01:55.856651 2026] [:error] [pid 33171:tid 33194] [client 74.248.145.185:32935] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "admPc7oqTMlo30hcVw-XpwAAAAg"]
[Sat Apr 11 08:01:56.377472 2026] [:error] [pid 15244:tid 15246] [client 74.248.145.185:23681] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "admPdIkdEsz5NeAq8w2hSgAAAQA"]
[Sat Apr 11 08:01:56.884977 2026] [:error] [pid 15244:tid 15254] [client 74.248.145.185:46319] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admPdIkdEsz5NeAq8w2hUQAAAQg"]
[Sat Apr 11 08:01:57.397673 2026] [:error] [pid 15244:tid 15261] [client 74.248.145.185:20404] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admPdYkdEsz5NeAq8w2hVgAAAQ8"]
[Sat Apr 11 08:01:57.923518 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:20370] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admPdWJmwJFFPEgRHfGkaAAAAM4"]
[Sat Apr 11 08:01:58.432105 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:46915] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "admPdokdEsz5NeAq8w2hYQAAAQ4"]
[Sat Apr 11 08:01:58.945266 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:28334] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admPdmJmwJFFPEgRHfGkbwAAAMk"]
[Sat Apr 11 08:01:59.462175 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:28322] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admPd68109xRDP2izWgloAAAAI8"]
[Sat Apr 11 08:01:59.972854 2026] [:error] [pid 33288:tid 33298] [client 74.248.145.185:23795] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admPd2JmwJFFPEgRHfGkcwAAAMg"]
[Sat Apr 11 08:02:00.479813 2026] [:error] [pid 33171:tid 33206] [client 74.248.145.185:32997] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admPeLoqTMlo30hcVw-XrQAAABQ"]
[Sat Apr 11 08:02:00.992968 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:23730] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPeGJmwJFFPEgRHfGkegAAANc"]
[Sat Apr 11 08:02:01.501811 2026] [:error] [pid 33173:tid 33266] [client 74.248.145.185:23807] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPea8109xRDP2izWglrQAAAJU"]
[Sat Apr 11 08:02:02.009166 2026] [:error] [pid 15244:tid 15254] [client 74.248.145.185:20375] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPeokdEsz5NeAq8w2heAAAAQg"]
[Sat Apr 11 08:02:02.517528 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:32983] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "admPeokdEsz5NeAq8w2hfwAAARE"]
[Sat Apr 11 08:02:03.030356 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:23697] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admPe2JmwJFFPEgRHfGkfQAAAMk"]
[Sat Apr 11 08:02:03.547676 2026] [:error] [pid 33288:tid 33308] [client 74.248.145.185:28849] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admPe2JmwJFFPEgRHfGkfwAAANI"]
[Sat Apr 11 08:02:04.056453 2026] [:error] [pid 33173:tid 33250] [client 74.248.145.185:28350] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admPfK8109xRDP2izWgluwAAAIU"]
[Sat Apr 11 08:02:04.563443 2026] [:error] [pid 33288:tid 33290] [client 74.248.145.185:23740] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admPfGJmwJFFPEgRHfGkhQAAAMA"]
[Sat Apr 11 08:02:05.073372 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:28311] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPfboqTMlo30hcVw-XtQAAAA0"]
[Sat Apr 11 08:02:05.588330 2026] [:error] [pid 33171:tid 33205] [client 74.248.145.185:20072] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPfboqTMlo30hcVw-XtgAAABM"]
[Sat Apr 11 08:02:06.093691 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:46948] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPfmJmwJFFPEgRHfGkhwAAAM4"]
[Sat Apr 11 08:02:06.615076 2026] [:error] [pid 15244:tid 15265] [client 74.248.145.185:23759] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "admPfokdEsz5NeAq8w2hngAAARM"]
[Sat Apr 11 08:02:07.128470 2026] [:error] [pid 33173:tid 33255] [client 74.248.145.185:28801] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "admPf68109xRDP2izWgl2AAAAIo"]
[Sat Apr 11 08:02:07.636473 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:20381] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "admPf4kdEsz5NeAq8w2hqAAAARI"]
[Sat Apr 11 08:02:08.150617 2026] [:error] [pid 33172:tid 33218] [client 74.248.145.185:20065] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "admPgDn2G0IJw5EZY9l55wAAAEA"]
[Sat Apr 11 08:02:08.663961 2026] [:error] [pid 33171:tid 33206] [client 74.248.145.185:23741] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "admPgLoqTMlo30hcVw-XuwAAABQ"]
[Sat Apr 11 08:02:09.170721 2026] [:error] [pid 33171:tid 33209] [client 74.248.145.185:32914] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "admPgboqTMlo30hcVw-XvQAAABc"]
[Sat Apr 11 08:02:09.682497 2026] [:error] [pid 33172:tid 33236] [client 74.248.145.185:33005] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "admPgTn2G0IJw5EZY9l57wAAAFI"]
[Sat Apr 11 08:02:10.195402 2026] [:error] [pid 33172:tid 33239] [client 74.248.145.185:32979] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "admPgjn2G0IJw5EZY9l58AAAAFU"]
[Sat Apr 11 08:02:10.713165 2026] [:error] [pid 33288:tid 33302] [client 74.248.145.185:32906] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "admPgmJmwJFFPEgRHfGkjAAAAMw"]
[Sat Apr 11 08:02:11.224327 2026] [:error] [pid 15244:tid 15266] [client 74.248.145.185:28313] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "admPg4kdEsz5NeAq8w2hugAAARQ"]
[Sat Apr 11 08:02:11.729072 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:46278] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "admPg7oqTMlo30hcVw-XwgAAAAA"]
[Sat Apr 11 08:02:12.242602 2026] [:error] [pid 33288:tid 33295] [client 74.248.145.185:23696] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "admPhGJmwJFFPEgRHfGkkQAAAMU"]
[Sat Apr 11 08:02:12.760698 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:46281] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "admPhGJmwJFFPEgRHfGkkwAAAM4"]
[Sat Apr 11 08:02:13.272385 2026] [:error] [pid 15244:tid 15248] [client 74.248.145.185:46940] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "admPhYkdEsz5NeAq8w2hywAAAQI"]
[Sat Apr 11 08:02:13.796714 2026] [:error] [pid 33171:tid 33194] [client 74.248.145.185:28316] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "admPhboqTMlo30hcVw-XxQAAAAg"]
[Sat Apr 11 08:02:14.310803 2026] [:error] [pid 33171:tid 33205] [client 74.248.145.185:23772] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "admPhroqTMlo30hcVw-XxwAAABM"]
[Sat Apr 11 08:02:14.821868 2026] [:error] [pid 33172:tid 33226] [client 74.248.145.185:20081] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "admPhjn2G0IJw5EZY9l59AAAAEg"]
[Sat Apr 11 08:02:15.343588 2026] [:error] [pid 33172:tid 33233] [client 74.248.145.185:20376] [client 74.248.145.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "admPhzn2G0IJw5EZY9l59wAAAE8"]
[Sat Apr 11 08:02:15.856089 2026] [:error] [pid 33171:tid 33187] [client 74.248.145.185:20359] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "admPh7oqTMlo30hcVw-X0AAAAAE"]
[Sat Apr 11 08:02:16.371613 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:28809] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "admPiDn2G0IJw5EZY9l5-wAAAFA"]
[Sat Apr 11 08:02:16.895954 2026] [:error] [pid 33288:tid 33294] [client 74.248.145.185:20090] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "admPiGJmwJFFPEgRHfGkmwAAAMQ"]
[Sat Apr 11 08:02:17.430916 2026] [:error] [pid 15244:tid 15256] [client 74.248.145.185:28862] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admPiYkdEsz5NeAq8w2h1QAAAQo"]
[Sat Apr 11 08:02:17.951187 2026] [:error] [pid 15244:tid 15257] [client 74.248.145.185:20403] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admPiYkdEsz5NeAq8w2h2QAAAQs"]
[Sat Apr 11 08:02:18.476811 2026] [:error] [pid 33171:tid 33194] [client 74.248.145.185:46289] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admPiroqTMlo30hcVw-X1QAAAAg"]
[Sat Apr 11 08:02:19.525830 2026] [proxy_fcgi:error] [pid 33172:tid 33219] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:19.780827 2026] [proxy_fcgi:error] [pid 33172:tid 33231] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:20.045547 2026] [proxy_fcgi:error] [pid 33172:tid 33240] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:20.304396 2026] [proxy_fcgi:error] [pid 33172:tid 33232] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:20.559464 2026] [proxy_fcgi:error] [pid 33172:tid 33226] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:20.814381 2026] [proxy_fcgi:error] [pid 33172:tid 33241] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:21.087755 2026] [proxy_fcgi:error] [pid 33172:tid 33237] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:21.350190 2026] [proxy_fcgi:error] [pid 33172:tid 33220] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:21.605127 2026] [proxy_fcgi:error] [pid 33172:tid 33218] [client 74.248.145.185:46935] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 08:02:21.861678 2026] [:error] [pid 33172:tid 33228] [client 74.248.145.185:46935] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "admPjTn2G0IJw5EZY9l6CwAAAEo"]
[Sat Apr 11 08:02:22.397824 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:33007] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "admPjjn2G0IJw5EZY9l6DQAAAFA"]
[Sat Apr 11 08:02:22.916461 2026] [:error] [pid 33173:tid 33264] [client 74.248.145.185:20357] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "admPjq8109xRDP2izWgmAwAAAJM"]
[Sat Apr 11 08:02:23.429304 2026] [:error] [pid 33172:tid 33229] [client 74.248.145.185:23699] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "admPjzn2G0IJw5EZY9l6EwAAAEs"]
[Sat Apr 11 08:02:23.950557 2026] [:error] [pid 33171:tid 33193] [client 74.248.145.185:23785] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "admPj7oqTMlo30hcVw-X3wAAAAc"]
[Sat Apr 11 08:02:24.459330 2026] [:error] [pid 15244:tid 15252] [client 74.248.145.185:28329] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "admPkIkdEsz5NeAq8w2h-AAAAQY"]
[Sat Apr 11 08:02:24.971983 2026] [:error] [pid 15244:tid 15260] [client 74.248.145.185:46918] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "admPkIkdEsz5NeAq8w2h_AAAAQ4"]
[Sat Apr 11 08:02:25.479693 2026] [:error] [pid 33172:tid 33231] [client 74.248.145.185:46931] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "admPkTn2G0IJw5EZY9l6FAAAAE0"]
[Sat Apr 11 08:02:26.000216 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:28333] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "admPkYkdEsz5NeAq8w2iAQAAAQQ"]
[Sat Apr 11 08:02:26.509841 2026] [:error] [pid 33173:tid 33263] [client 74.248.145.185:28318] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "admPkq8109xRDP2izWgmCwAAAJI"]
[Sat Apr 11 08:02:27.025375 2026] [:error] [pid 33171:tid 33208] [client 74.248.145.185:23777] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "admPk7oqTMlo30hcVw-X6AAAABY"]
[Sat Apr 11 08:02:27.532369 2026] [:error] [pid 33173:tid 33253] [client 74.248.145.185:32944] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "admPk68109xRDP2izWgmDQAAAIg"]
[Sat Apr 11 08:02:28.048736 2026] [:error] [pid 33173:tid 33266] [client 74.248.145.185:28314] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "admPlK8109xRDP2izWgmDgAAAJU"]
[Sat Apr 11 08:02:28.574322 2026] [:error] [pid 33173:tid 33252] [client 74.248.145.185:58004] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "admPlK8109xRDP2izWgmEgAAAIc"]
[Sat Apr 11 08:02:29.086504 2026] [:error] [pid 33288:tid 33309] [client 74.248.145.185:28346] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "admPlWJmwJFFPEgRHfGkxAAAANM"]
[Sat Apr 11 08:02:29.612470 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:20055] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "admPlYkdEsz5NeAq8w2iFwAAARU"]
[Sat Apr 11 08:02:30.125708 2026] [:error] [pid 33173:tid 33248] [client 74.248.145.185:46921] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "admPlq8109xRDP2izWgmGgAAAIM"]
[Sat Apr 11 08:02:30.664506 2026] [:error] [pid 33173:tid 33262] [client 74.248.145.185:46333] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "admPlq8109xRDP2izWgmHgAAAJE"]
[Sat Apr 11 08:02:31.174503 2026] [:error] [pid 33288:tid 33300] [client 74.248.145.185:28850] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "admPl2JmwJFFPEgRHfGkzwAAAMo"]
[Sat Apr 11 08:02:31.691319 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:46296] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "admPl68109xRDP2izWgmJAAAAI8"]
[Sat Apr 11 08:02:32.222650 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:23727] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "admPmLoqTMlo30hcVw-X8AAAAAA"]
[Sat Apr 11 08:02:32.739841 2026] [:error] [pid 15244:tid 15270] [client 74.248.145.185:46321] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "admPmIkdEsz5NeAq8w2iKAAAARg"]
[Sat Apr 11 08:02:33.253466 2026] [:error] [pid 33288:tid 33296] [client 74.248.145.185:33012] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "admPmWJmwJFFPEgRHfGk2QAAAMY"]
[Sat Apr 11 08:02:33.759359 2026] [:error] [pid 33171:tid 33201] [client 74.248.145.185:28852] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "admPmboqTMlo30hcVw-X8wAAAA8"]
[Sat Apr 11 08:02:34.273333 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:28342] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "admPmokdEsz5NeAq8w2iLAAAARU"]
[Sat Apr 11 08:02:34.789721 2026] [:error] [pid 33288:tid 33295] [client 74.248.145.185:23771] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "admPmmJmwJFFPEgRHfGk5AAAAMU"]
[Sat Apr 11 08:02:35.300297 2026] [:error] [pid 33171:tid 33199] [client 74.248.145.185:20410] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "admPm7oqTMlo30hcVw-X9QAAAA0"]
[Sat Apr 11 08:02:35.808316 2026] [:error] [pid 33171:tid 33195] [client 74.248.145.185:46306] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "admPm7oqTMlo30hcVw-X9wAAAAk"]
[Sat Apr 11 08:02:36.321647 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:23772] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPnDn2G0IJw5EZY9l6GwAAAFA"]
[Sat Apr 11 08:02:36.842515 2026] [:error] [pid 33288:tid 33312] [client 74.248.145.185:28299] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPnGJmwJFFPEgRHfGk6AAAANY"]
[Sat Apr 11 08:02:37.359456 2026] [:error] [pid 33173:tid 33263] [client 74.248.145.185:23733] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPna8109xRDP2izWgmOAAAAJI"]
[Sat Apr 11 08:02:37.879422 2026] [:error] [pid 33288:tid 33310] [client 74.248.145.185:28308] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "admPnWJmwJFFPEgRHfGk7wAAANQ"]
[Sat Apr 11 08:02:38.396184 2026] [:error] [pid 33172:tid 33223] [client 74.248.145.185:20369] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "admPnjn2G0IJw5EZY9l6IQAAAEU"]
[Sat Apr 11 08:02:38.914756 2026] [:error] [pid 33172:tid 33240] [client 74.248.145.185:20073] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "admPnjn2G0IJw5EZY9l6IwAAAFY"]
[Sat Apr 11 08:02:39.428671 2026] [:error] [pid 33288:tid 33313] [client 74.248.145.185:32991] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "admPn2JmwJFFPEgRHfGk8wAAANc"]
[Sat Apr 11 08:02:39.938576 2026] [:error] [pid 33172:tid 33230] [client 74.248.145.185:20051] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "admPnzn2G0IJw5EZY9l6JgAAAEw"]
[Sat Apr 11 08:02:40.447570 2026] [:error] [pid 33288:tid 33295] [client 74.248.145.185:20049] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "admPoGJmwJFFPEgRHfGk-AAAAMU"]
[Sat Apr 11 08:02:40.967319 2026] [:error] [pid 33172:tid 33237] [client 74.248.145.185:20063] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "admPoDn2G0IJw5EZY9l6KQAAAFM"]
[Sat Apr 11 08:02:41.473351 2026] [:error] [pid 33288:tid 33305] [client 74.248.145.185:46285] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "admPoWJmwJFFPEgRHfGk_wAAAM8"]
[Sat Apr 11 08:02:41.993063 2026] [:error] [pid 33173:tid 33256] [client 74.248.145.185:40128] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "admPoa8109xRDP2izWgmRAAAAIs"]
[Sat Apr 11 08:02:42.522035 2026] [:error] [pid 33172:tid 33238] [client 74.248.145.185:23803] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "admPojn2G0IJw5EZY9l6LQAAAFQ"]
[Sat Apr 11 08:02:43.056437 2026] [:error] [pid 33171:tid 33186] [client 74.248.145.185:33009] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "admPo7oqTMlo30hcVw-YEwAAAAA"]
[Sat Apr 11 08:02:43.577402 2026] [:error] [pid 33173:tid 33248] [client 74.248.145.185:23770] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "admPo68109xRDP2izWgmSAAAAIM"]
[Sat Apr 11 08:02:44.086776 2026] [:error] [pid 33172:tid 33234] [client 74.248.145.185:46295] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "admPpDn2G0IJw5EZY9l6NgAAAFA"]
[Sat Apr 11 08:02:44.600757 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:32901] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "admPpGJmwJFFPEgRHfGlEAAAAM4"]
[Sat Apr 11 08:02:45.117404 2026] [:error] [pid 15244:tid 15250] [client 74.248.145.185:23692] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "admPpYkdEsz5NeAq8w2iTQAAAQQ"]
[Sat Apr 11 08:02:45.633366 2026] [:error] [pid 15244:tid 15255] [client 74.248.145.185:32981] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "admPpYkdEsz5NeAq8w2iUQAAAQk"]
[Sat Apr 11 08:02:46.158323 2026] [:error] [pid 15244:tid 15259] [client 74.248.145.185:46957] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "admPpokdEsz5NeAq8w2iVAAAAQ0"]
[Sat Apr 11 08:02:46.668027 2026] [:error] [pid 15244:tid 15248] [client 74.248.145.185:32949] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "admPpokdEsz5NeAq8w2iVgAAAQI"]
[Sat Apr 11 08:02:47.186446 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28846] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "admPp4kdEsz5NeAq8w2iWQAAARI"]
[Sat Apr 11 08:02:47.724128 2026] [:error] [pid 15244:tid 15269] [client 74.248.145.185:32958] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "admPp4kdEsz5NeAq8w2iXAAAARc"]
[Sat Apr 11 08:02:48.246593 2026] [:error] [pid 33173:tid 33262] [client 74.248.145.185:23701] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "admPqK8109xRDP2izWgmYgAAAJE"]
[Sat Apr 11 08:02:48.768346 2026] [:error] [pid 33172:tid 33241] [client 74.248.145.185:28861] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "admPqDn2G0IJw5EZY9l6QQAAAFc"]
[Sat Apr 11 08:02:49.277392 2026] [:error] [pid 33173:tid 33258] [client 74.248.145.185:20037] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "admPqa8109xRDP2izWgmZwAAAI0"]
[Sat Apr 11 08:02:49.786233 2026] [:error] [pid 33173:tid 33268] [client 74.248.145.185:32998] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "admPqa8109xRDP2izWgmagAAAJc"]
[Sat Apr 11 08:02:50.309191 2026] [:error] [pid 33288:tid 33307] [client 74.248.145.185:23689] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "admPqmJmwJFFPEgRHfGlFQAAANE"]
[Sat Apr 11 08:02:50.825397 2026] [:error] [pid 15244:tid 15267] [client 74.248.145.185:40154] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "admPqokdEsz5NeAq8w2iZwAAARU"]
[Sat Apr 11 08:02:51.340463 2026] [:error] [pid 15244:tid 15259] [client 74.248.145.185:57410] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "admPq4kdEsz5NeAq8w2iaQAAAQ0"]
[Sat Apr 11 08:02:51.871985 2026] [:error] [pid 15244:tid 15247] [client 74.248.145.185:20089] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "admPq4kdEsz5NeAq8w2iawAAAQE"]
[Sat Apr 11 08:02:52.384978 2026] [:error] [pid 33288:tid 33302] [client 74.248.145.185:46950] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "admPrGJmwJFFPEgRHfGlJgAAAMw"]
[Sat Apr 11 08:02:52.903480 2026] [:error] [pid 15244:tid 15253] [client 74.248.145.185:46964] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "admPrIkdEsz5NeAq8w2icQAAAQc"]
[Sat Apr 11 08:02:53.412299 2026] [:error] [pid 33288:tid 33299] [client 74.248.145.185:57447] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admPrWJmwJFFPEgRHfGlLQAAAMk"]
[Sat Apr 11 08:02:53.926639 2026] [:error] [pid 33171:tid 33201] [client 74.248.145.185:46954] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admPrboqTMlo30hcVw-YJQAAAA8"]
[Sat Apr 11 08:02:54.431963 2026] [:error] [pid 33288:tid 33312] [client 74.248.145.185:23797] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admPrmJmwJFFPEgRHfGlMAAAANY"]
[Sat Apr 11 08:02:54.957704 2026] [:error] [pid 33288:tid 33300] [client 74.248.145.185:46923] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "admPrmJmwJFFPEgRHfGlNwAAAMo"]
[Sat Apr 11 08:02:55.465455 2026] [:error] [pid 33171:tid 33196] [client 74.248.145.185:23768] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "admPr7oqTMlo30hcVw-YKgAAAAo"]
[Sat Apr 11 08:02:56.013369 2026] [:error] [pid 33173:tid 33259] [client 74.248.145.185:28303] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "admPsK8109xRDP2izWgmcgAAAI4"]
[Sat Apr 11 08:02:56.529604 2026] [:error] [pid 33173:tid 33260] [client 74.248.145.185:46299] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "admPsK8109xRDP2izWgmdQAAAI8"]
[Sat Apr 11 08:02:57.043844 2026] [:error] [pid 15244:tid 15264] [client 74.248.145.185:28807] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "admPsYkdEsz5NeAq8w2iiQAAARI"]
[Sat Apr 11 08:02:57.556448 2026] [:error] [pid 33288:tid 33304] [client 74.248.145.185:23707] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "admPsWJmwJFFPEgRHfGlQQAAAM4"]
[Sat Apr 11 08:02:58.090857 2026] [:error] [pid 33173:tid 33250] [client 74.248.145.185:58033] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "admPsq8109xRDP2izWgmewAAAIU"]
[Sat Apr 11 08:02:58.601731 2026] [:error] [pid 33288:tid 33297] [client 74.248.145.185:28341] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "admPsmJmwJFFPEgRHfGlRgAAAMc"]
[Sat Apr 11 08:02:59.120746 2026] [:error] [pid 33173:tid 33249] [client 74.248.145.185:28311] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "admPs68109xRDP2izWgmfwAAAIQ"]
[Sat Apr 11 08:02:59.626282 2026] [:error] [pid 33288:tid 33305] [client 74.248.145.185:20061] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "admPs2JmwJFFPEgRHfGlTQAAAM8"]
[Sat Apr 11 08:03:00.162449 2026] [:error] [pid 15244:tid 15263] [client 74.248.145.185:20068] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "admPtIkdEsz5NeAq8w2imAAAARE"]
[Sat Apr 11 08:03:00.675571 2026] [:error] [pid 15244:tid 15268] [client 74.248.145.185:23704] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "admPtIkdEsz5NeAq8w2imwAAARY"]
[Sat Apr 11 08:03:01.182659 2026] [:error] [pid 15244:tid 15251] [client 74.248.145.185:28823] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "admPtYkdEsz5NeAq8w2inwAAAQU"]
[Sat Apr 11 09:42:42.832518 2026] [:error] [pid 34822:tid 34839] [client 157.15.40.61:60050] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnEtoScBMkNZUKMZ3ZtAAAAQw"]
[Sat Apr 11 14:11:37.308972 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:56164] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adnmGcW3w7N67R04YCKQbwAAAEA"]
[Sat Apr 11 14:11:37.572853 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:56262] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGbXJS-Jji11jZk3Y_wAAARY"]
[Sat Apr 11 14:11:37.823009 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:56367] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGcW3w7N67R04YCKQqQAAAEY"]
[Sat Apr 11 14:11:38.083466 2026] [:error] [pid 2297:tid 2315] [client 157.15.40.61:56482] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGrXJS-Jji11jZk3ZMwAAAQ4"]
[Sat Apr 11 14:11:39.409380 2026] [:error] [pid 2186:tid 2207] [client 157.15.40.61:56681] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmG8ibnOEEvcO8wPL9ggAAAJE"]
[Sat Apr 11 14:11:40.689540 2026] [:error] [pid 11067:tid 11071] [client 157.15.40.61:56755] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "adnmHMW3w7N67R04YCKQ7AAAAEI"]
[Sat Apr 11 14:11:42.080705 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:57200] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "adnmHsW3w7N67R04YCKRYgAAAEM"]
[Sat Apr 11 14:11:42.342556 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:57245] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "adnmHsW3w7N67R04YCKRiwAAAEs"]
[Sat Apr 11 14:11:42.613204 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:57301] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adnmHoDhDA-Xtn2nRScJ5gAAANU"]
[Sat Apr 11 14:11:43.672895 2026] [:error] [pid 2297:tid 2306] [client 157.15.40.61:57492] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "adnmH7XJS-Jji11jZk3aBwAAAQU"]
[Sat Apr 11 14:11:44.444879 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:57651] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "adnmIMW3w7N67R04YCKR2gAAAFM"]
[Sat Apr 11 14:11:48.139056 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:58232] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/blurbs.php"] [unique_id "adnmJMW3w7N67R04YCKSdAAAAE8"]
[Sat Apr 11 14:11:48.413762 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:58262] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/akcc.php"] [unique_id "adnmJLXJS-Jji11jZk3ayQAAAQQ"]
[Sat Apr 11 14:11:48.672303 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:58324] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "adnmJLXJS-Jji11jZk3azgAAAQE"]
[Sat Apr 11 14:11:48.934144 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:58381] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/shelp.php"] [unique_id "adnmJLXJS-Jji11jZk3a3AAAAQg"]
[Sat Apr 11 14:11:49.965860 2026] [:error] [pid 2297:tid 2308] [client 157.15.40.61:58581] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/cord.php"] [unique_id "adnmJbXJS-Jji11jZk3bCwAAAQc"]
[Sat Apr 11 14:11:51.221578 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:58659] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/dex.php"] [unique_id "adnmJ8W3w7N67R04YCKTCAAAAEA"]
[Sat Apr 11 14:11:51.469508 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:58943] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmJ8W3w7N67R04YCKTFgAAAFE"]
[Sat Apr 11 14:11:51.725488 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:59011] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/file2.php"] [unique_id "adnmJ7XJS-Jji11jZk3baAAAAQg"]
[Sat Apr 11 14:11:51.991765 2026] [:error] [pid 2187:tid 2244] [client 157.15.40.61:59058] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "adnmJw4J29_qQi0FkjiI5QAAABA"]
[Sat Apr 11 14:11:53.264315 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:59104] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmKcW3w7N67R04YCKTiwAAAFg"]
[Sat Apr 11 14:11:56.540584 2026] [:error] [pid 2297:tid 2318] [client 157.15.40.61:60002] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmLLXJS-Jji11jZk3b9AAAARE"]
[Sat Apr 11 14:11:56.802149 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:60060] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adnmLMW3w7N67R04YCKVCgAAAEg"]
[Sat Apr 11 14:11:57.050935 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:60091] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "adnmLcW3w7N67R04YCKVIAAAAFU"]
[Sat Apr 11 14:11:57.309947 2026] [:error] [pid 2187:tid 2227] [client 157.15.40.61:60148] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "adnmLQ4J29_qQi0FkjiJegAAAAE"]
[Sat Apr 11 14:12:01.162286 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:60522] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "adnmMcW3w7N67R04YCKWcwAAAFM"]
[Sat Apr 11 14:12:04.178594 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:62068] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/php8.php"] [unique_id "adnmNIDhDA-Xtn2nRScMMwAAANU"]
[Sat Apr 11 14:12:04.448367 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:62491] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/lufix1.php"] [unique_id "adnmNLXJS-Jji11jZk3cggAAARg"]
[Sat Apr 11 14:12:05.723886 2026] [:error] [pid 2188:tid 2272] [client 157.15.40.61:62830] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/witmm.php"] [unique_id "adnmNYDhDA-Xtn2nRScMUgAAANA"]
[Sat Apr 11 14:12:09.005625 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:50097] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmOcW3w7N67R04YCKXOwAAAFg"]
[Sat Apr 11 14:12:12.560654 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:50290] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmPMW3w7N67R04YCKXfwAAAFI"]
[Sat Apr 11 14:12:14.995335 2026] [:error] [pid 2188:tid 2278] [client 157.15.40.61:50942] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmPoDhDA-Xtn2nRScMpAAAANY"]
[Sat Apr 11 14:12:17.382633 2026] [:error] [pid 11067:tid 11092] [client 157.15.40.61:51248] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmQcW3w7N67R04YCKXqgAAAFc"]
[Sat Apr 11 14:12:17.638868 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:51378] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "adnmQcW3w7N67R04YCKXrgAAAFE"]
[Sat Apr 11 14:12:18.572944 2026] [:error] [pid 2188:tid 2259] [client 157.15.40.61:51569] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/files.php"] [unique_id "adnmQoDhDA-Xtn2nRScM1AAAAMM"]
[Sat Apr 11 14:12:18.845609 2026] [:error] [pid 2186:tid 2207] [client 157.15.40.61:51592] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-editor.php"] [unique_id "adnmQsibnOEEvcO8wPL_yQAAAJE"]
[Sat Apr 11 22:36:32.834565 2026] [proxy_fcgi:error] [pid 42220:tid 42259] [client 20.220.11.224:22521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:36:33.056180 2026] [proxy_fcgi:error] [pid 42220:tid 42256] [client 20.220.11.224:22521] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:36:33.759028 2026] [:error] [pid 42220:tid 42266] [client 20.220.11.224:22521] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adpccUz5c3Cs6a8B5QuQ7gAAAM8"]
[Sat Apr 11 22:36:35.659516 2026] [:error] [pid 42313:tid 42330] [client 20.220.11.224:22466] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adpcc12P8TxdbaN018JLCQAAAA4"]
[Sat Apr 11 22:36:37.168031 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22522] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adpcdV2P8TxdbaN018JLCgAAAAk"]
[Sat Apr 11 22:36:39.351041 2026] [:error] [pid 42220:tid 42270] [client 20.220.11.224:22477] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "adpcd0z5c3Cs6a8B5QuQ9gAAANM"]
[Sat Apr 11 22:36:41.357322 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22410] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adpceV2P8TxdbaN018JLEgAAAAc"]
[Sat Apr 11 22:36:43.746416 2026] [:error] [pid 52608:tid 52613] [client 20.220.11.224:22526] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adpceyY5wH-BLt5QEKhU-wAAAQI"]
[Sat Apr 11 22:36:45.566611 2026] [:error] [pid 42220:tid 42255] [client 20.220.11.224:22516] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adpcfUz5c3Cs6a8B5QuQ-gAAAMQ"]
[Sat Apr 11 22:36:47.681370 2026] [:error] [pid 42220:tid 42272] [client 20.220.11.224:22404] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adpcf0z5c3Cs6a8B5QuQ_gAAANU"]
[Sat Apr 11 22:36:49.182613 2026] [:error] [pid 42219:tid 42231] [client 20.220.11.224:22419] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adpcgQ-4IkVbTQx_J-2TmQAAAIg"]
[Sat Apr 11 22:36:50.819511 2026] [:error] [pid 42220:tid 42253] [client 20.220.11.224:22486] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adpcgkz5c3Cs6a8B5QuQ_wAAAMI"]
[Sat Apr 11 22:36:53.734817 2026] [:error] [pid 52608:tid 52631] [client 20.220.11.224:22491] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adpchSY5wH-BLt5QEKhVCAAAARQ"]
[Sat Apr 11 22:36:55.051324 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22467] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adpch12P8TxdbaN018JLIgAAAAc"]
[Sat Apr 11 22:36:56.407865 2026] [:error] [pid 52608:tid 52624] [client 20.220.11.224:22481] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adpciCY5wH-BLt5QEKhVDAAAAQ0"]
[Sat Apr 11 22:36:58.090367 2026] [:error] [pid 42220:tid 42251] [client 20.220.11.224:22513] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adpcikz5c3Cs6a8B5QuRDAAAAMA"]
[Sat Apr 11 22:36:59.253809 2026] [:error] [pid 42221:tid 42290] [client 20.220.11.224:22525] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adpci02gt0pb_0-cc6mYFwAAAEw"]
[Sat Apr 11 22:37:00.385284 2026] [:error] [pid 42219:tid 42226] [client 20.220.11.224:22492] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adpcjA-4IkVbTQx_J-2TpQAAAIM"]
[Sat Apr 11 22:37:00.954316 2026] [:error] [pid 52608:tid 52628] [client 20.220.11.224:22488] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adpcjCY5wH-BLt5QEKhVFAAAARE"]
[Sat Apr 11 22:37:03.010250 2026] [:error] [pid 42221:tid 42287] [client 20.220.11.224:22500] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adpcj02gt0pb_0-cc6mYHQAAAEk"]
[Sat Apr 11 22:37:04.280081 2026] [:error] [pid 52608:tid 52635] [client 20.220.11.224:22488] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adpckCY5wH-BLt5QEKhVHgAAARg"]
[Sat Apr 11 22:37:07.275495 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22432] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adpckyY5wH-BLt5QEKhVKQAAARc"]
[Sat Apr 11 22:37:08.523009 2026] [:error] [pid 42313:tid 42333] [client 20.220.11.224:22424] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adpclF2P8TxdbaN018JLOwAAABE"]
[Sat Apr 11 22:37:10.281519 2026] [:error] [pid 42219:tid 42237] [client 20.220.11.224:22414] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adpclg-4IkVbTQx_J-2TqwAAAI4"]
[Sat Apr 11 22:37:11.159450 2026] [:error] [pid 52608:tid 52615] [client 20.220.11.224:22417] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adpclyY5wH-BLt5QEKhVLwAAAQQ"]
[Sat Apr 11 22:37:12.089401 2026] [:error] [pid 42219:tid 42231] [client 20.220.11.224:22474] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adpcmA-4IkVbTQx_J-2TsQAAAIg"]
[Sat Apr 11 22:37:13.323634 2026] [:error] [pid 42221:tid 42292] [client 20.220.11.224:22411] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adpcmU2gt0pb_0-cc6mYJgAAAE4"]
[Sat Apr 11 22:37:14.433383 2026] [:error] [pid 42220:tid 42263] [client 20.220.11.224:22470] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adpcmkz5c3Cs6a8B5QuRFwAAAMw"]
[Sat Apr 11 22:37:15.586905 2026] [:error] [pid 42221:tid 42300] [client 20.220.11.224:22450] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adpcm02gt0pb_0-cc6mYLAAAAFY"]
[Sat Apr 11 22:37:16.186450 2026] [:error] [pid 42220:tid 42261] [client 20.220.11.224:22428] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adpcnEz5c3Cs6a8B5QuRGQAAAMo"]
[Sat Apr 11 22:37:17.185973 2026] [:error] [pid 42219:tid 42227] [client 20.220.11.224:22484] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adpcnQ-4IkVbTQx_J-2TtwAAAIQ"]
[Sat Apr 11 22:37:18.108545 2026] [:error] [pid 42313:tid 42322] [client 20.220.11.224:22523] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adpcnl2P8TxdbaN018JLRwAAAAY"]
[Sat Apr 11 22:37:20.112623 2026] [:error] [pid 42221:tid 42282] [client 20.220.11.224:22524] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adpcoE2gt0pb_0-cc6mYMwAAAEQ"]
[Sat Apr 11 22:37:20.666275 2026] [:error] [pid 52608:tid 52629] [client 20.220.11.224:22400] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adpcoCY5wH-BLt5QEKhVPAAAARI"]
[Sat Apr 11 22:37:21.662185 2026] [:error] [pid 42219:tid 42226] [client 20.220.11.224:22416] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adpcoQ-4IkVbTQx_J-2TvwAAAIM"]
[Sat Apr 11 22:37:22.302554 2026] [:error] [pid 42219:tid 42241] [client 20.220.11.224:22403] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adpcog-4IkVbTQx_J-2TwAAAAJI"]
[Sat Apr 11 22:37:22.919044 2026] [:error] [pid 42219:tid 42232] [client 20.220.11.224:22490] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adpcog-4IkVbTQx_J-2TwgAAAIk"]
[Sat Apr 11 22:37:25.648909 2026] [:error] [pid 42313:tid 42324] [client 20.220.11.224:22363] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adpcpV2P8TxdbaN018JLTAAAAAg"]
[Sat Apr 11 22:37:27.706888 2026] [:error] [pid 42220:tid 42253] [client 20.220.11.224:22471] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adpcp0z5c3Cs6a8B5QuRJgAAAMI"]
[Sat Apr 11 22:37:30.140195 2026] [:error] [pid 42221:tid 42282] [client 20.220.11.224:22342] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adpcqk2gt0pb_0-cc6mYQAAAAEQ"]
[Sat Apr 11 22:37:31.469070 2026] [:error] [pid 52608:tid 52614] [client 20.220.11.224:22355] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adpcqyY5wH-BLt5QEKhVUQAAAQM"]
[Sat Apr 11 22:37:32.888968 2026] [:error] [pid 42220:tid 42275] [client 20.220.11.224:22463] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mailer.php"] [unique_id "adpcrEz5c3Cs6a8B5QuRKQAAANg"]
[Sat Apr 11 22:37:34.863934 2026] [proxy_fcgi:error] [pid 42313:tid 42326] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:35.191829 2026] [proxy_fcgi:error] [pid 42313:tid 42339] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:35.417167 2026] [proxy_fcgi:error] [pid 42313:tid 42337] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:35.634908 2026] [proxy_fcgi:error] [pid 42313:tid 42320] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:35.886963 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:36.264951 2026] [proxy_fcgi:error] [pid 42313:tid 42323] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:36.474408 2026] [proxy_fcgi:error] [pid 42313:tid 42335] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:36.684814 2026] [proxy_fcgi:error] [pid 42313:tid 42334] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:37.139997 2026] [proxy_fcgi:error] [pid 42313:tid 42316] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:37.358399 2026] [proxy_fcgi:error] [pid 42313:tid 42333] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:37.594748 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.220.11.224:22433] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:37:37.802663 2026] [:error] [pid 42313:tid 42328] [client 20.220.11.224:22433] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adpcsV2P8TxdbaN018JLagAAAAw"]
[Sat Apr 11 22:37:38.895286 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22518] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adpcsiY5wH-BLt5QEKhVYQAAAQ8"]
[Sat Apr 11 22:37:39.820510 2026] [:error] [pid 42221:tid 42296] [client 20.220.11.224:22401] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adpcs02gt0pb_0-cc6mYTAAAAFI"]
[Sat Apr 11 22:37:41.466662 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22406] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adpctSY5wH-BLt5QEKhVbAAAAQg"]
[Sat Apr 11 22:37:42.286432 2026] [:error] [pid 52608:tid 52631] [client 20.220.11.224:22418] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adpctiY5wH-BLt5QEKhVcQAAARQ"]
[Sat Apr 11 22:37:43.370243 2026] [:error] [pid 42313:tid 42329] [client 20.220.11.224:22527] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adpct12P8TxdbaN018JLbQAAAA0"]
[Sat Apr 11 22:37:44.370765 2026] [:error] [pid 42220:tid 42259] [client 20.220.11.224:22365] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adpcuEz5c3Cs6a8B5QuRNQAAAMg"]
[Sat Apr 11 22:37:46.488399 2026] [:error] [pid 52608:tid 52616] [client 20.220.11.224:22520] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adpcuiY5wH-BLt5QEKhVeAAAAQU"]
[Sat Apr 11 22:37:52.105591 2026] [:error] [pid 52608:tid 52613] [client 20.220.11.224:22515] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alex.php"] [unique_id "adpcwCY5wH-BLt5QEKhVjAAAAQI"]
[Sat Apr 11 22:38:13.332099 2026] [:error] [pid 42219:tid 42229] [client 20.220.11.224:22402] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adpc1Q-4IkVbTQx_J-2T6gAAAIY"]
[Sat Apr 11 22:38:15.930651 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22413] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adpc1yY5wH-BLt5QEKhV0QAAAQg"]
[Sat Apr 11 22:38:42.211971 2026] [proxy_fcgi:error] [pid 42221:tid 42288] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:42.422849 2026] [proxy_fcgi:error] [pid 42221:tid 42296] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:42.643925 2026] [proxy_fcgi:error] [pid 42221:tid 42297] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:42.903532 2026] [proxy_fcgi:error] [pid 42221:tid 42287] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:43.112292 2026] [proxy_fcgi:error] [pid 42221:tid 42292] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:43.395766 2026] [proxy_fcgi:error] [pid 42221:tid 42279] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:43.716023 2026] [proxy_fcgi:error] [pid 42221:tid 42295] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:43.926611 2026] [proxy_fcgi:error] [pid 42221:tid 42285] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:44.148227 2026] [proxy_fcgi:error] [pid 42221:tid 42286] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:44.358501 2026] [proxy_fcgi:error] [pid 42221:tid 42290] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:44.570741 2026] [proxy_fcgi:error] [pid 42221:tid 42283] [client 20.220.11.224:22487] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:38:45.128916 2026] [:error] [pid 42221:tid 42298] [client 20.220.11.224:22487] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel.php"] [unique_id "adpc9U2gt0pb_0-cc6mYtAAAAFQ"]
[Sat Apr 11 22:38:46.500644 2026] [:error] [pid 42220:tid 42270] [client 20.220.11.224:22407] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel.php"] [unique_id "adpc9kz5c3Cs6a8B5QuRfwAAANM"]
[Sat Apr 11 22:38:47.104776 2026] [:error] [pid 42220:tid 42269] [client 20.220.11.224:22449] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel.php"] [unique_id "adpc90z5c3Cs6a8B5QuRhAAAANI"]
[Sat Apr 11 22:38:47.738141 2026] [:error] [pid 42220:tid 42271] [client 20.220.11.224:22412] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gel.php"] [unique_id "adpc90z5c3Cs6a8B5QuRhgAAANQ"]
[Sat Apr 11 22:38:48.279221 2026] [:error] [pid 42220:tid 42258] [client 20.220.11.224:22498] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adpc-Ez5c3Cs6a8B5QuRiAAAAMc"]
[Sat Apr 11 22:38:49.101406 2026] [:error] [pid 42313:tid 42334] [client 20.220.11.224:22367] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adpc-V2P8TxdbaN018JLugAAABI"]
[Sat Apr 11 22:38:50.432624 2026] [:error] [pid 42313:tid 42339] [client 20.220.11.224:22437] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adpc-l2P8TxdbaN018JLvwAAABc"]
[Sat Apr 11 22:38:50.960542 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22353] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Gel.php"] [unique_id "adpc-l2P8TxdbaN018JLwgAAAAk"]
[Sat Apr 11 22:38:51.444412 2026] [:error] [pid 42219:tid 42223] [client 20.220.11.224:22475] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adpc-w-4IkVbTQx_J-2UNgAAAIA"]
[Sat Apr 11 22:38:52.036427 2026] [:error] [pid 42313:tid 42322] [client 20.220.11.224:22514] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adpc_F2P8TxdbaN018JLyQAAAAY"]
[Sat Apr 11 22:38:52.676898 2026] [:error] [pid 42219:tid 42230] [client 20.220.11.224:22459] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adpc_A-4IkVbTQx_J-2UOQAAAIc"]
[Sat Apr 11 22:38:53.684176 2026] [:error] [pid 42220:tid 42252] [client 20.220.11.224:22439] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olux.php"] [unique_id "adpc_Uz5c3Cs6a8B5QuRkQAAAME"]
[Sat Apr 11 22:38:54.977750 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22509] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olu.php"] [unique_id "adpc_iY5wH-BLt5QEKhWAQAAAQg"]
[Sat Apr 11 22:38:55.617531 2026] [:error] [pid 42220:tid 42255] [client 20.220.11.224:22338] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olu.php"] [unique_id "adpc_0z5c3Cs6a8B5QuRlAAAAMQ"]
[Sat Apr 11 22:38:56.337379 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22501] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olu.php"] [unique_id "adpdACY5wH-BLt5QEKhWAwAAAQA"]
[Sat Apr 11 22:38:57.582999 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22399] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/olu.php"] [unique_id "adpdAQ-4IkVbTQx_J-2UQgAAAIE"]
[Sat Apr 11 22:38:59.417742 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22348] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adpdAyY5wH-BLt5QEKhWDQAAAQg"]
[Sat Apr 11 22:39:00.541301 2026] [:error] [pid 42313:tid 42329] [client 20.220.11.224:22502] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adpdBF2P8TxdbaN018JL2QAAAA0"]
[Sat Apr 11 22:39:01.235493 2026] [:error] [pid 52608:tid 52625] [client 20.220.11.224:22451] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adpdBSY5wH-BLt5QEKhWEwAAAQ4"]
[Sat Apr 11 22:39:02.359980 2026] [:error] [pid 42221:tid 42302] [client 20.220.11.224:22340] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adpdBk2gt0pb_0-cc6mYuwAAAFg"]
[Sat Apr 11 22:39:03.110085 2026] [:error] [pid 42221:tid 42301] [client 20.220.11.224:22508] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adpdB02gt0pb_0-cc6mYvAAAAFc"]
[Sat Apr 11 22:39:04.430080 2026] [:error] [pid 52608:tid 52620] [client 20.220.11.224:22479] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adpdCCY5wH-BLt5QEKhWIwAAAQk"]
[Sat Apr 11 22:39:06.011687 2026] [:error] [pid 42313:tid 42333] [client 20.220.11.224:22464] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adpdCl2P8TxdbaN018JL5gAAABE"]
[Sat Apr 11 22:39:07.473203 2026] [:error] [pid 52608:tid 52616] [client 20.220.11.224:22496] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nasgor.php"] [unique_id "adpdCyY5wH-BLt5QEKhWKwAAAQU"]
[Sat Apr 11 22:39:10.185524 2026] [:error] [pid 42219:tid 42227] [client 20.220.11.224:22343] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adpdDg-4IkVbTQx_J-2UVQAAAIQ"]
[Sat Apr 11 22:39:11.226650 2026] [:error] [pid 52608:tid 52615] [client 20.220.11.224:22506] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adpdDyY5wH-BLt5QEKhWOgAAAQQ"]
[Sat Apr 11 22:39:11.970040 2026] [:error] [pid 42313:tid 42329] [client 20.220.11.224:22503] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adpdD12P8TxdbaN018JL8AAAAA0"]
[Sat Apr 11 22:39:12.639227 2026] [:error] [pid 52608:tid 52614] [client 20.220.11.224:22499] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rahma.php"] [unique_id "adpdECY5wH-BLt5QEKhWQQAAAQM"]
[Sat Apr 11 22:39:13.669473 2026] [:error] [pid 42219:tid 42238] [client 20.220.11.224:22447] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mrjn.php"] [unique_id "adpdEQ-4IkVbTQx_J-2UWwAAAI8"]
[Sat Apr 11 22:39:14.739954 2026] [:error] [pid 52608:tid 52624] [client 20.220.11.224:22482] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mrjn.php"] [unique_id "adpdEiY5wH-BLt5QEKhWRAAAAQ0"]
[Sat Apr 11 22:39:15.628369 2026] [:error] [pid 52608:tid 52632] [client 20.220.11.224:22483] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mrjn.php"] [unique_id "adpdEyY5wH-BLt5QEKhWTAAAARU"]
[Sat Apr 11 22:39:16.568169 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22505] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mrjn.php"] [unique_id "adpdFCY5wH-BLt5QEKhWUgAAAQA"]
[Sat Apr 11 22:39:18.426933 2026] [:error] [pid 42313:tid 42329] [client 20.220.11.224:22427] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adpdFl2P8TxdbaN018JL-gAAAA0"]
[Sat Apr 11 22:39:19.587132 2026] [:error] [pid 42219:tid 42234] [client 20.220.11.224:22409] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adpdFw-4IkVbTQx_J-2UYQAAAIs"]
[Sat Apr 11 22:39:20.335631 2026] [:error] [pid 42220:tid 42262] [client 20.220.11.224:22429] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adpdGEz5c3Cs6a8B5QuRpQAAAMs"]
[Sat Apr 11 22:39:21.462093 2026] [:error] [pid 42219:tid 42231] [client 20.220.11.224:22354] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adpdGQ-4IkVbTQx_J-2UZAAAAIg"]
[Sat Apr 11 22:39:22.028754 2026] [:error] [pid 42220:tid 42259] [client 20.220.11.224:22476] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adpdGkz5c3Cs6a8B5QuRqgAAAMg"]
[Sat Apr 11 22:39:22.629328 2026] [:error] [pid 42313:tid 42331] [client 20.220.11.224:22472] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adpdGl2P8TxdbaN018JMAgAAAA8"]
[Sat Apr 11 22:39:23.328924 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22461] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adpdGyY5wH-BLt5QEKhWXAAAARc"]
[Sat Apr 11 22:39:24.074994 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22438] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conffg.php"] [unique_id "adpdHA-4IkVbTQx_J-2UawAAAIE"]
[Sat Apr 11 22:39:24.725692 2026] [:error] [pid 52608:tid 52618] [client 20.220.11.224:22341] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adpdHCY5wH-BLt5QEKhWYwAAAQc"]
[Sat Apr 11 22:39:25.206878 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22337] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adpdHSY5wH-BLt5QEKhWaQAAAQA"]
[Sat Apr 11 22:39:26.018148 2026] [:error] [pid 42313:tid 42321] [client 20.220.11.224:22480] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adpdHl2P8TxdbaN018JMBwAAAAU"]
[Sat Apr 11 22:39:27.777474 2026] [:error] [pid 42221:tid 42283] [client 20.220.11.224:22275] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confiig.php"] [unique_id "adpdH02gt0pb_0-cc6mY1AAAAEU"]
[Sat Apr 11 22:39:28.893765 2026] [:error] [pid 52608:tid 52617] [client 20.220.11.224:22350] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adpdICY5wH-BLt5QEKhWeAAAAQY"]
[Sat Apr 11 22:39:30.713693 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22448] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adpdIl2P8TxdbaN018JMEAAAAAc"]
[Sat Apr 11 22:39:34.172294 2026] [:error] [pid 42221:tid 42297] [client 20.220.11.224:22454] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adpdJk2gt0pb_0-cc6mY2gAAAFM"]
[Sat Apr 11 22:39:34.733548 2026] [:error] [pid 42219:tid 42236] [client 20.220.11.224:22442] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-settings.php"] [unique_id "adpdJg-4IkVbTQx_J-2UegAAAI0"]
[Sat Apr 11 22:39:35.229394 2026] [:error] [pid 42221:tid 42299] [client 20.220.11.224:22458] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adpdJ02gt0pb_0-cc6mY2wAAAFU"]
[Sat Apr 11 22:39:37.808392 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22420] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adpdKQ-4IkVbTQx_J-2UgAAAAIE"]
[Sat Apr 11 22:39:40.035500 2026] [:error] [pid 52608:tid 52612] [client 20.220.11.224:22468] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adpdLCY5wH-BLt5QEKhWgQAAAQE"]
[Sat Apr 11 22:39:40.868000 2026] [:error] [pid 52608:tid 52631] [client 20.220.11.224:22519] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-confirm.php"] [unique_id "adpdLCY5wH-BLt5QEKhWhQAAARQ"]
[Sat Apr 11 22:39:42.678322 2026] [:error] [pid 42219:tid 42237] [client 20.220.11.224:22510] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adpdLg-4IkVbTQx_J-2UiwAAAI4"]
[Sat Apr 11 22:39:43.898801 2026] [:error] [pid 42313:tid 42331] [client 20.220.11.224:22462] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-one.php"] [unique_id "adpdL12P8TxdbaN018JMJwAAAA8"]
[Sat Apr 11 22:39:46.176876 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:46.386152 2026] [proxy_fcgi:error] [pid 42219:tid 42225] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:46.603667 2026] [proxy_fcgi:error] [pid 42219:tid 42224] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:47.164527 2026] [proxy_fcgi:error] [pid 42219:tid 42242] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:47.570617 2026] [proxy_fcgi:error] [pid 42219:tid 42247] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:48.515657 2026] [proxy_fcgi:error] [pid 42219:tid 42239] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:48.755793 2026] [proxy_fcgi:error] [pid 42219:tid 42223] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:49.385259 2026] [proxy_fcgi:error] [pid 42219:tid 42232] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:49.593910 2026] [proxy_fcgi:error] [pid 42219:tid 42233] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:49.802411 2026] [proxy_fcgi:error] [pid 42219:tid 42228] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:50.011647 2026] [proxy_fcgi:error] [pid 42219:tid 42244] [client 20.220.11.224:22290] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:39:50.217630 2026] [:error] [pid 42219:tid 42246] [client 20.220.11.224:22290] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kk.php"] [unique_id "adpdNg-4IkVbTQx_J-2UqwAAAJc"]
[Sat Apr 11 22:39:51.210061 2026] [:error] [pid 42313:tid 42329] [client 20.220.11.224:22351] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kk.php"] [unique_id "adpdN12P8TxdbaN018JMNgAAAA0"]
[Sat Apr 11 22:39:51.747118 2026] [:error] [pid 52608:tid 52624] [client 20.220.11.224:22441] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kk.php"] [unique_id "adpdNyY5wH-BLt5QEKhWmwAAAQ0"]
[Sat Apr 11 22:39:52.667389 2026] [:error] [pid 52608:tid 52620] [client 20.220.11.224:22494] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kk.php"] [unique_id "adpdOCY5wH-BLt5QEKhWowAAAQk"]
[Sat Apr 11 22:39:54.743288 2026] [:error] [pid 42313:tid 42319] [client 20.220.11.224:22440] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kn.php"] [unique_id "adpdOl2P8TxdbaN018JMOwAAAAM"]
[Sat Apr 11 22:39:55.900486 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22446] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kn.php"] [unique_id "adpdOyY5wH-BLt5QEKhWqwAAAQ8"]
[Sat Apr 11 22:39:56.889623 2026] [:error] [pid 52608:tid 52615] [client 20.220.11.224:22358] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kn.php"] [unique_id "adpdPCY5wH-BLt5QEKhWsgAAAQQ"]
[Sat Apr 11 22:39:58.240204 2026] [:error] [pid 42313:tid 42318] [client 20.220.11.224:22385] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kn.php"] [unique_id "adpdPl2P8TxdbaN018JMPgAAAAI"]
[Sat Apr 11 22:39:59.312233 2026] [:error] [pid 42220:tid 42252] [client 20.220.11.224:22379] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3301.php"] [unique_id "adpdP0z5c3Cs6a8B5QuRvQAAAME"]
[Sat Apr 11 22:40:00.653880 2026] [:error] [pid 42220:tid 42265] [client 20.220.11.224:22356] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3301.php"] [unique_id "adpdQEz5c3Cs6a8B5QuRwAAAAM4"]
[Sat Apr 11 22:40:01.409768 2026] [:error] [pid 42219:tid 42238] [client 20.220.11.224:22375] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3301.php"] [unique_id "adpdQQ-4IkVbTQx_J-2UtAAAAI8"]
[Sat Apr 11 22:40:01.974978 2026] [:error] [pid 42221:tid 42295] [client 20.220.11.224:22300] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3301.php"] [unique_id "adpdQU2gt0pb_0-cc6mY6AAAAFE"]
[Sat Apr 11 22:40:02.655595 2026] [:error] [pid 42219:tid 42247] [client 20.220.11.224:22349] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adpdQg-4IkVbTQx_J-2UuQAAAJg"]
[Sat Apr 11 22:40:03.618231 2026] [:error] [pid 42219:tid 42239] [client 20.220.11.224:22346] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adpdQw-4IkVbTQx_J-2UvQAAAJA"]
[Sat Apr 11 22:40:04.836671 2026] [:error] [pid 42221:tid 42293] [client 20.220.11.224:22370] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adpdRE2gt0pb_0-cc6mY6gAAAE8"]
[Sat Apr 11 22:40:05.436278 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22308] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "adpdRSY5wH-BLt5QEKhWwgAAAQ8"]
[Sat Apr 11 22:40:05.979945 2026] [:error] [pid 42219:tid 42238] [client 20.220.11.224:22364] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adpdRQ-4IkVbTQx_J-2UwgAAAI8"]
[Sat Apr 11 22:40:06.919309 2026] [:error] [pid 42219:tid 42237] [client 20.220.11.224:22422] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adpdRg-4IkVbTQx_J-2UwwAAAI4"]
[Sat Apr 11 22:40:07.537587 2026] [:error] [pid 42219:tid 42245] [client 20.220.11.224:22430] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adpdRw-4IkVbTQx_J-2UxgAAAJY"]
[Sat Apr 11 22:40:08.194605 2026] [:error] [pid 42221:tid 42279] [client 20.220.11.224:22465] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.wp-cache.php"] [unique_id "adpdSE2gt0pb_0-cc6mY9AAAAEE"]
[Sat Apr 11 22:40:08.693090 2026] [:error] [pid 52608:tid 52625] [client 20.220.11.224:22457] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adpdSCY5wH-BLt5QEKhWxQAAAQ4"]
[Sat Apr 11 22:40:09.214834 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22392] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adpdSV2P8TxdbaN018JMVQAAAAk"]
[Sat Apr 11 22:40:10.011125 2026] [:error] [pid 42313:tid 42317] [client 20.220.11.224:22380] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "adpdSl2P8TxdbaN018JMWgAAAAE"]
[Sat Apr 11 22:40:11.114669 2026] [:error] [pid 42221:tid 42288] [client 20.220.11.224:22432] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "adpdS02gt0pb_0-cc6mY-QAAAEo"]
[Sat Apr 11 22:40:12.508301 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22434] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "adpdTF2P8TxdbaN018JMXQAAAAk"]
[Sat Apr 11 22:40:14.626170 2026] [:error] [pid 42221:tid 42296] [client 20.220.11.224:22390] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "adpdTk2gt0pb_0-cc6mZBQAAAFI"]
[Sat Apr 11 22:40:16.026608 2026] [:error] [pid 42220:tid 42268] [client 20.220.11.224:22393] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ohayo.php"] [unique_id "adpdUEz5c3Cs6a8B5QuRzQAAANE"]
[Sat Apr 11 22:40:17.221651 2026] [:error] [pid 42220:tid 42264] [client 20.220.11.224:22405] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ohayo.php"] [unique_id "adpdUUz5c3Cs6a8B5QuRzgAAAM0"]
[Sat Apr 11 22:40:20.791450 2026] [:error] [pid 42221:tid 42297] [client 20.220.11.224:22455] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ohayo.php"] [unique_id "adpdVE2gt0pb_0-cc6mZDwAAAFM"]
[Sat Apr 11 22:40:21.749468 2026] [:error] [pid 42220:tid 42266] [client 20.220.11.224:22317] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ohayo.php"] [unique_id "adpdVUz5c3Cs6a8B5QuR2QAAAM8"]
[Sat Apr 11 22:40:22.286104 2026] [:error] [pid 42221:tid 42295] [client 20.220.11.224:22347] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adpdVk2gt0pb_0-cc6mZFAAAAFE"]
[Sat Apr 11 22:40:23.040119 2026] [:error] [pid 42221:tid 42287] [client 20.220.11.224:22342] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adpdV02gt0pb_0-cc6mZFwAAAEk"]
[Sat Apr 11 22:40:23.883211 2026] [:error] [pid 42220:tid 42270] [client 20.220.11.224:22478] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adpdV0z5c3Cs6a8B5QuR4QAAANM"]
[Sat Apr 11 22:40:24.583434 2026] [:error] [pid 42219:tid 42233] [client 20.220.11.224:22273] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms.php"] [unique_id "adpdWA-4IkVbTQx_J-2U2gAAAIo"]
[Sat Apr 11 22:40:25.218754 2026] [:error] [pid 42220:tid 42258] [client 20.220.11.224:22366] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adpdWUz5c3Cs6a8B5QuR6AAAAMc"]
[Sat Apr 11 22:40:26.428080 2026] [:error] [pid 42220:tid 42275] [client 20.220.11.224:22381] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adpdWkz5c3Cs6a8B5QuR7AAAANg"]
[Sat Apr 11 22:40:27.792313 2026] [:error] [pid 42219:tid 42226] [client 20.220.11.224:22387] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adpdWw-4IkVbTQx_J-2U4QAAAIM"]
[Sat Apr 11 22:40:28.998905 2026] [:error] [pid 42313:tid 42319] [client 20.220.11.224:22362] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "adpdXF2P8TxdbaN018JMbAAAAAM"]
[Sat Apr 11 22:40:30.206862 2026] [:error] [pid 42313:tid 42318] [client 20.220.11.224:22415] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adpdXl2P8TxdbaN018JMcAAAAAI"]
[Sat Apr 11 22:40:32.241031 2026] [:error] [pid 42219:tid 42224] [client 20.220.11.224:22489] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adpdYA-4IkVbTQx_J-2U7wAAAIE"]
[Sat Apr 11 22:40:34.231378 2026] [:error] [pid 52608:tid 52633] [client 20.220.11.224:22517] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adpdYiY5wH-BLt5QEKhW2AAAARY"]
[Sat Apr 11 22:40:37.385088 2026] [:error] [pid 52608:tid 52631] [client 20.220.11.224:22436] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4price.php"] [unique_id "adpdZSY5wH-BLt5QEKhW6AAAARQ"]
[Sat Apr 11 22:40:41.840338 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22445] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adpdaV2P8TxdbaN018JMhQAAAAc"]
[Sat Apr 11 22:40:42.643484 2026] [:error] [pid 52608:tid 52623] [client 20.220.11.224:22321] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adpdaiY5wH-BLt5QEKhW9wAAAQw"]
[Sat Apr 11 22:40:43.823012 2026] [:error] [pid 52608:tid 52622] [client 20.220.11.224:22473] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adpdayY5wH-BLt5QEKhW_wAAAQs"]
[Sat Apr 11 22:40:48.226471 2026] [:error] [pid 42220:tid 42268] [client 20.220.11.224:22431] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/MARIJUANA.php"] [unique_id "adpdcEz5c3Cs6a8B5QuR-AAAANE"]
[Sat Apr 11 22:40:51.798649 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:52.025657 2026] [proxy_fcgi:error] [pid 42313:tid 42317] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:52.236396 2026] [proxy_fcgi:error] [pid 42313:tid 42331] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:53.023582 2026] [proxy_fcgi:error] [pid 42313:tid 42319] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:53.464487 2026] [proxy_fcgi:error] [pid 42313:tid 42325] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:54.106591 2026] [proxy_fcgi:error] [pid 42313:tid 42324] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:54.318504 2026] [proxy_fcgi:error] [pid 42313:tid 42318] [client 20.220.11.224:22423] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:40:55.271866 2026] [:error] [pid 42313:tid 42330] [client 20.220.11.224:22423] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adpdd12P8TxdbaN018JMqAAAAA4"]
[Sat Apr 11 22:40:56.150596 2026] [:error] [pid 42220:tid 42266] [client 20.220.11.224:22516] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adpdeEz5c3Cs6a8B5QuSDQAAAM8"]
[Sat Apr 11 22:40:57.487417 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22372] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adpdeSY5wH-BLt5QEKhXOQAAAQA"]
[Sat Apr 11 22:40:59.458475 2026] [:error] [pid 42220:tid 42260] [client 20.220.11.224:22221] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adpde0z5c3Cs6a8B5QuSFAAAAMk"]
[Sat Apr 11 22:41:01.425100 2026] [:error] [pid 42313:tid 42323] [client 20.220.11.224:22419] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adpdfV2P8TxdbaN018JMrwAAAAc"]
[Sat Apr 11 22:41:04.467795 2026] [:error] [pid 42220:tid 42264] [client 20.220.11.224:22209] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adpdgEz5c3Cs6a8B5QuSHAAAAM0"]
[Sat Apr 11 22:41:06.224010 2026] [:error] [pid 52608:tid 52613] [client 20.220.11.224:22493] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adpdgiY5wH-BLt5QEKhXTgAAAQI"]
[Sat Apr 11 22:41:07.584686 2026] [:error] [pid 42219:tid 42227] [client 20.220.11.224:22345] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adpdgw-4IkVbTQx_J-2VLgAAAIQ"]
[Sat Apr 11 22:41:09.234820 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22361] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adpdhSY5wH-BLt5QEKhXWgAAARc"]
[Sat Apr 11 22:41:10.429530 2026] [:error] [pid 52608:tid 52617] [client 20.220.11.224:22396] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adpdhiY5wH-BLt5QEKhXXgAAAQY"]
[Sat Apr 11 22:41:12.376324 2026] [:error] [pid 52608:tid 52635] [client 20.220.11.224:22325] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adpdiCY5wH-BLt5QEKhXZAAAARg"]
[Sat Apr 11 22:41:14.183561 2026] [:error] [pid 52608:tid 52614] [client 20.220.11.224:22319] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adpdiiY5wH-BLt5QEKhXbQAAAQM"]
[Sat Apr 11 22:41:15.960056 2026] [:error] [pid 42221:tid 42286] [client 20.220.11.224:22522] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adpdi02gt0pb_0-cc6mZRwAAAEg"]
[Sat Apr 11 22:41:19.890525 2026] [:error] [pid 42221:tid 42280] [client 20.220.11.224:22491] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adpdj02gt0pb_0-cc6mZTQAAAEI"]
[Sat Apr 11 22:41:24.622435 2026] [:error] [pid 42313:tid 42324] [client 20.220.11.224:22507] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adpdlF2P8TxdbaN018JMxAAAAAg"]
[Sat Apr 11 22:41:25.667646 2026] [:error] [pid 42313:tid 42320] [client 20.220.11.224:22289] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adpdlV2P8TxdbaN018JMygAAAAQ"]
[Sat Apr 11 22:41:28.268705 2026] [:error] [pid 42219:tid 42229] [client 20.220.11.224:22404] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adpdmA-4IkVbTQx_J-2VWAAAAIY"]
[Sat Apr 11 22:41:32.086982 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22421] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adpdnCY5wH-BLt5QEKhXjQAAARc"]
[Sat Apr 11 22:41:33.047805 2026] [:error] [pid 52608:tid 52614] [client 20.220.11.224:22490] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adpdnSY5wH-BLt5QEKhXkgAAAQM"]
[Sat Apr 11 22:41:33.819560 2026] [:error] [pid 42313:tid 42325] [client 20.220.11.224:22456] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adpdnV2P8TxdbaN018JM2AAAAAk"]
[Sat Apr 11 22:41:35.298613 2026] [:error] [pid 42219:tid 42231] [client 20.220.11.224:22400] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdnw-4IkVbTQx_J-2VXwAAAIg"]
[Sat Apr 11 22:41:37.241748 2026] [:error] [pid 42220:tid 42263] [client 20.220.11.224:22408] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdoUz5c3Cs6a8B5QuSNAAAAMw"]
[Sat Apr 11 22:41:42.166071 2026] [:error] [pid 42219:tid 42240] [client 20.220.11.224:22384] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdpg-4IkVbTQx_J-2VbgAAAJE"]
[Sat Apr 11 22:41:44.184885 2026] [:error] [pid 52608:tid 52630] [client 20.220.11.224:22452] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdqCY5wH-BLt5QEKhXogAAARM"]
[Sat Apr 11 22:41:45.379755 2026] [:error] [pid 52608:tid 52625] [client 20.220.11.224:22374] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdqSY5wH-BLt5QEKhXqQAAAQ4"]
[Sat Apr 11 22:41:46.392808 2026] [:error] [pid 52608:tid 52626] [client 20.220.11.224:22382] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdqiY5wH-BLt5QEKhXsQAAAQ8"]
[Sat Apr 11 22:41:47.263521 2026] [:error] [pid 52608:tid 52615] [client 20.220.11.224:22276] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdqyY5wH-BLt5QEKhXtAAAAQQ"]
[Sat Apr 11 22:41:47.993452 2026] [:error] [pid 52608:tid 52611] [client 20.220.11.224:22359] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdqyY5wH-BLt5QEKhXtwAAAQA"]
[Sat Apr 11 22:41:48.583994 2026] [:error] [pid 52608:tid 52624] [client 20.220.11.224:22406] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdrCY5wH-BLt5QEKhXugAAAQ0"]
[Sat Apr 11 22:41:49.735392 2026] [:error] [pid 42313:tid 42320] [client 20.220.11.224:22279] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdrV2P8TxdbaN018JM3wAAAAQ"]
[Sat Apr 11 22:41:50.801171 2026] [:error] [pid 42313:tid 42322] [client 20.220.11.224:22521] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdrl2P8TxdbaN018JM5AAAAAY"]
[Sat Apr 11 22:41:51.606757 2026] [:error] [pid 42221:tid 42297] [client 20.220.11.224:22450] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adpdr02gt0pb_0-cc6mZdQAAAFM"]
[Sat Apr 11 22:41:52.572273 2026] [:error] [pid 52608:tid 52619] [client 20.220.11.224:22368] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adpdsCY5wH-BLt5QEKhXxwAAAQg"]
[Sat Apr 11 22:41:53.688410 2026] [:error] [pid 42220:tid 42257] [client 20.220.11.224:22520] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adpdsUz5c3Cs6a8B5QuSRwAAAMY"]
[Sat Apr 11 22:41:55.188470 2026] [proxy_fcgi:error] [pid 52608:tid 52626] [client 20.220.11.224:22291] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:41:55.406032 2026] [proxy_fcgi:error] [pid 52608:tid 52633] [client 20.220.11.224:22291] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:41:55.641749 2026] [proxy_fcgi:error] [pid 52608:tid 52623] [client 20.220.11.224:22291] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 22:41:57.202665 2026] [:error] [pid 52608:tid 52634] [client 20.220.11.224:22291] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adpdtSY5wH-BLt5QEKhX2wAAARc"]
[Sat Apr 11 22:41:57.740566 2026] [:error] [pid 42220:tid 42271] [client 20.220.11.224:22417] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adpdtUz5c3Cs6a8B5QuSTAAAANQ"]
[Sat Apr 11 22:41:58.290093 2026] [:error] [pid 52608:tid 52620] [client 20.220.11.224:22526] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adpdtiY5wH-BLt5QEKhX3AAAAQk"]
[Sat Apr 11 22:41:58.875807 2026] [:error] [pid 42220:tid 42251] [client 20.220.11.224:22401] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adpdtkz5c3Cs6a8B5QuSTgAAAMA"]
[Sat Apr 11 22:42:00.668551 2026] [:error] [pid 42313:tid 42322] [client 20.220.11.224:22426] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adpduF2P8TxdbaN018JM8AAAAAY"]
[Sun Apr 12 05:17:35.750828 2026] [proxy_fcgi:error] [pid 26599:tid 26609] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:35.991725 2026] [proxy_fcgi:error] [pid 26599:tid 26620] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:36.232453 2026] [proxy_fcgi:error] [pid 26599:tid 26602] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:36.727167 2026] [proxy_fcgi:error] [pid 26599:tid 26615] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:37.094360 2026] [proxy_fcgi:error] [pid 26599:tid 26603] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:37.333878 2026] [proxy_fcgi:error] [pid 26599:tid 26617] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:37.574140 2026] [proxy_fcgi:error] [pid 26599:tid 26626] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:37.814169 2026] [proxy_fcgi:error] [pid 26599:tid 26616] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:38.061859 2026] [proxy_fcgi:error] [pid 26599:tid 26606] [client 68.221.68.131:24198] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 05:17:38.302048 2026] [:error] [pid 26599:tid 26619] [client 68.221.68.131:24198] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a.php"] [unique_id "adq6cnG89LXoQbk_rwA0_wAAAVE"]
[Sun Apr 12 05:17:38.973892 2026] [:error] [pid 25328:tid 25364] [client 68.221.68.131:57271] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a.php"] [unique_id "adq6csxUaQZxT-e0YsDTYQAAAEA"]
[Sun Apr 12 05:17:39.549406 2026] [:error] [pid 25328:tid 25369] [client 68.221.68.131:36772] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a.php"] [unique_id "adq6c8xUaQZxT-e0YsDTawAAAEU"]
[Sun Apr 12 05:17:40.157213 2026] [:error] [pid 25328:tid 25389] [client 68.221.68.131:36175] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a.php"] [unique_id "adq6dMxUaQZxT-e0YsDTbwAAAFA"]
[Sun Apr 12 05:17:40.720001 2026] [:error] [pid 25437:tid 25439] [client 68.221.68.131:54491] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adq6dHf97wYZje1ep_NNfQAAAMA"]
[Sun Apr 12 05:17:41.513773 2026] [:error] [pid 25328:tid 25391] [client 68.221.68.131:36802] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adq6dcxUaQZxT-e0YsDTdwAAAFE"]
[Sun Apr 12 05:17:41.997744 2026] [:error] [pid 25327:tid 25337] [client 68.221.68.131:26187] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adq6dS6h2tZEVJo9JFI-ZgAAAAE"]
[Sun Apr 12 05:17:42.900146 2026] [:error] [pid 26600:tid 26630] [client 68.221.68.131:38844] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adq6du1YwAZiXhQKLYpw_gAAAYE"]
[Sun Apr 12 05:17:43.541944 2026] [:error] [pid 25328:tid 25379] [client 68.221.68.131:43523] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "adq6d8xUaQZxT-e0YsDThAAAAEs"]
[Sun Apr 12 05:17:44.169711 2026] [:error] [pid 25328:tid 25387] [client 68.221.68.131:27392] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "adq6eMxUaQZxT-e0YsDThgAAAE8"]
[Sun Apr 12 05:17:44.817892 2026] [:error] [pid 25329:tid 25409] [client 68.221.68.131:38827] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "adq6eGdcIYsS8Iyaj10q2gAAAJM"]
[Sun Apr 12 05:17:45.522587 2026] [:error] [pid 25327:tid 25344] [client 68.221.68.131:47449] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "adq6eS6h2tZEVJo9JFI-ZwAAAAg"]
[Sun Apr 12 05:17:46.286732 2026] [:error] [pid 25328:tid 25394] [client 68.221.68.131:54494] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jquery.php"] [unique_id "adq6esxUaQZxT-e0YsDTlQAAAFI"]
[Sun Apr 12 05:17:46.853899 2026] [:error] [pid 25328:tid 25387] [client 68.221.68.131:16478] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jquery.php"] [unique_id "adq6esxUaQZxT-e0YsDTmAAAAE8"]
[Sun Apr 12 05:17:47.344567 2026] [:error] [pid 25327:tid 25338] [client 68.221.68.131:26212] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jquery.php"] [unique_id "adq6ey6h2tZEVJo9JFI-aAAAAAI"]
[Sun Apr 12 05:17:47.829556 2026] [:error] [pid 25328:tid 25398] [client 68.221.68.131:57200] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jquery.php"] [unique_id "adq6e8xUaQZxT-e0YsDToQAAAFQ"]
[Sun Apr 12 05:17:48.340560 2026] [:error] [pid 25327:tid 25354] [client 68.221.68.131:36179] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adq6fC6h2tZEVJo9JFI-agAAABI"]
[Sun Apr 12 05:17:48.850073 2026] [:error] [pid 26599:tid 26607] [client 68.221.68.131:43574] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adq6fHG89LXoQbk_rwA1AQAAAUU"]
[Sun Apr 12 05:17:49.517295 2026] [:error] [pid 26599:tid 26612] [client 68.221.68.131:36163] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adq6fXG89LXoQbk_rwA1AwAAAUo"]
[Sun Apr 12 05:17:50.013088 2026] [:error] [pid 25329:tid 25414] [client 68.221.68.131:63446] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "adq6fmdcIYsS8Iyaj10q4AAAAJc"]
[Sun Apr 12 05:17:50.699675 2026] [:error] [pid 26599:tid 26610] [client 68.221.68.131:47433] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adq6fnG89LXoQbk_rwA1BgAAAUg"]
[Sun Apr 12 05:17:51.231230 2026] [:error] [pid 25328:tid 25396] [client 68.221.68.131:31959] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adq6f8xUaQZxT-e0YsDT3gAAAFM"]
[Sun Apr 12 05:17:51.738770 2026] [:error] [pid 26599:tid 26620] [client 68.221.68.131:41065] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adq6f3G89LXoQbk_rwA1CAAAAVI"]
[Sun Apr 12 05:17:52.393888 2026] [:error] [pid 25327:tid 25355] [client 68.221.68.131:29989] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adq6gC6h2tZEVJo9JFI-bgAAABM"]
[Sun Apr 12 05:17:52.905780 2026] [:error] [pid 26600:tid 26631] [client 68.221.68.131:37395] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adq6gO1YwAZiXhQKLYpxAgAAAYI"]
[Sun Apr 12 05:17:53.500104 2026] [:error] [pid 25437:tid 25459] [client 68.221.68.131:29996] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adq6gXf97wYZje1ep_NNiQAAANQ"]
[Sun Apr 12 05:17:54.085166 2026] [:error] [pid 26567:tid 26570] [client 68.221.68.131:23266] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adq6gnhRpg6ptWFyFx322wAAAQE"]
[Sun Apr 12 05:17:54.771827 2026] [:error] [pid 26600:tid 26637] [client 68.221.68.131:30610] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "adq6gu1YwAZiXhQKLYpxBAAAAYg"]
[Sun Apr 12 05:17:55.270651 2026] [:error] [pid 26599:tid 26603] [client 68.221.68.131:35802] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adq6g3G89LXoQbk_rwA1CgAAAUE"]
[Sun Apr 12 05:17:55.803844 2026] [:error] [pid 25328:tid 25391] [client 68.221.68.131:53413] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adq6g8xUaQZxT-e0YsDUAQAAAFE"]
[Sun Apr 12 05:17:56.420555 2026] [:error] [pid 26567:tid 26574] [client 68.221.68.131:29362] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adq6hHhRpg6ptWFyFx323gAAAQU"]
[Sun Apr 12 05:17:57.129473 2026] [:error] [pid 25328:tid 25385] [client 68.221.68.131:53433] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "adq6hcxUaQZxT-e0YsDUCgAAAE4"]
[Sun Apr 12 05:17:57.672281 2026] [:error] [pid 25328:tid 25405] [client 68.221.68.131:44257] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adq6hcxUaQZxT-e0YsDUDwAAAFc"]
[Sun Apr 12 05:17:58.231085 2026] [:error] [pid 26567:tid 26582] [client 68.221.68.131:30634] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adq6hnhRpg6ptWFyFx325AAAAQ0"]
[Sun Apr 12 05:17:59.394306 2026] [:error] [pid 26599:tid 26604] [client 68.221.68.131:57245] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adq6h3G89LXoQbk_rwA1DwAAAUI"]
[Sun Apr 12 05:18:00.068820 2026] [:error] [pid 26567:tid 26570] [client 68.221.68.131:4864] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-info.php"] [unique_id "adq6iHhRpg6ptWFyFx326QAAAQE"]
[Sun Apr 12 05:18:00.701364 2026] [:error] [pid 26567:tid 26575] [client 68.221.68.131:44258] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "adq6iHhRpg6ptWFyFx326wAAAQY"]
[Sun Apr 12 05:18:01.342350 2026] [:error] [pid 26599:tid 26611] [client 68.221.68.131:17277] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "adq6iXG89LXoQbk_rwA1EQAAAUk"]
[Sun Apr 12 05:18:01.924551 2026] [:error] [pid 25327:tid 25346] [client 68.221.68.131:17212] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "adq6iS6h2tZEVJo9JFI-cwAAAAo"]
[Sun Apr 12 05:18:02.527759 2026] [:error] [pid 25327:tid 25347] [client 68.221.68.131:4221] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "adq6ii6h2tZEVJo9JFI-dQAAAAs"]
[Sun Apr 12 05:18:03.160402 2026] [:error] [pid 26567:tid 26580] [client 68.221.68.131:64476] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq6i3hRpg6ptWFyFx329AAAAQs"]
[Sun Apr 12 05:18:03.679877 2026] [:error] [pid 26599:tid 26618] [client 68.221.68.131:64461] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq6i3G89LXoQbk_rwA1FQAAAVA"]
[Sun Apr 12 05:18:04.487791 2026] [:error] [pid 26567:tid 26575] [client 68.221.68.131:62164] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq6jHhRpg6ptWFyFx32_AAAAQY"]
[Sun Apr 12 05:18:05.246979 2026] [:error] [pid 26599:tid 26606] [client 68.221.68.131:36110] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq6jXG89LXoQbk_rwA1IwAAAUQ"]
[Sun Apr 12 05:18:05.867805 2026] [:error] [pid 26599:tid 26615] [client 68.221.68.131:62166] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adq6jXG89LXoQbk_rwA1LAAAAU0"]
[Sun Apr 12 05:18:06.623962 2026] [:error] [pid 25328:tid 25394] [client 68.221.68.131:35692] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adq6jsxUaQZxT-e0YsDUHgAAAFI"]
[Sun Apr 12 05:18:07.316306 2026] [:error] [pid 26599:tid 26622] [client 68.221.68.131:23560] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adq6j3G89LXoQbk_rwA1NQAAAVQ"]
[Sun Apr 12 05:18:07.970351 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.131:36123] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adq6j3BlLnDOYuIykkjVhgAAAco"]
[Sun Apr 12 05:18:08.642516 2026] [:error] [pid 26600:tid 26642] [client 68.221.68.131:58435] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "adq6kO1YwAZiXhQKLYpxDAAAAY0"]
[Sun Apr 12 05:18:09.362199 2026] [:error] [pid 60280:tid 60286] [client 68.221.68.131:35680] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "adq6kXBlLnDOYuIykkjVhwAAAcQ"]
[Sun Apr 12 05:18:09.857574 2026] [:error] [pid 26600:tid 26634] [client 68.221.68.131:36106] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "adq6ke1YwAZiXhQKLYpxDwAAAYU"]
[Sun Apr 12 05:18:10.738861 2026] [:error] [pid 26600:tid 26631] [client 68.221.68.131:62976] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "adq6ku1YwAZiXhQKLYpxEwAAAYI"]
[Sun Apr 12 05:18:11.785674 2026] [:error] [pid 25329:tid 25395] [client 68.221.68.131:37488] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "adq6k2dcIYsS8Iyaj10rAgAAAIs"]
[Sun Apr 12 05:18:12.358348 2026] [:error] [pid 60280:tid 60299] [client 68.221.68.131:24252] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "adq6lHBlLnDOYuIykkjVjQAAAdE"]
[Sun Apr 12 05:18:13.058984 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.131:17175] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "adq6lcxUaQZxT-e0YsDUKwAAAFg"]
[Sun Apr 12 05:18:14.124070 2026] [:error] [pid 60280:tid 60297] [client 68.221.68.131:24200] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "adq6lnBlLnDOYuIykkjVkAAAAc8"]
[Sun Apr 12 05:18:15.005310 2026] [:error] [pid 60280:tid 60293] [client 68.221.68.131:47963] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adq6l3BlLnDOYuIykkjVkQAAAcs"]
[Sun Apr 12 05:18:15.814873 2026] [:error] [pid 26600:tid 26635] [client 68.221.68.131:37481] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adq6l-1YwAZiXhQKLYpxGQAAAYY"]
[Sun Apr 12 05:18:16.472345 2026] [:error] [pid 25328:tid 25364] [client 68.221.68.131:55104] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adq6mMxUaQZxT-e0YsDUNgAAAEA"]
[Sun Apr 12 05:18:17.017344 2026] [:error] [pid 26600:tid 26647] [client 68.221.68.131:59242] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adq6me1YwAZiXhQKLYpxGgAAAZI"]
[Sun Apr 12 05:18:17.501118 2026] [:error] [pid 25329:tid 25382] [client 68.221.68.131:23554] [client 68.221.68.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/index.php"] [unique_id "adq6mWdcIYsS8Iyaj10rBQAAAIQ"]
[Sun Apr 12 07:06:07.753617 2026] [proxy_fcgi:error] [pid 25328:tid 25373] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:07.987736 2026] [proxy_fcgi:error] [pid 25328:tid 25383] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:08.223375 2026] [proxy_fcgi:error] [pid 25328:tid 25368] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:08.471346 2026] [proxy_fcgi:error] [pid 25328:tid 25405] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:08.704771 2026] [proxy_fcgi:error] [pid 25328:tid 25375] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:09.038717 2026] [proxy_fcgi:error] [pid 25328:tid 25387] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:09.355487 2026] [proxy_fcgi:error] [pid 25328:tid 25408] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:09.594715 2026] [proxy_fcgi:error] [pid 25328:tid 25396] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:09.827983 2026] [proxy_fcgi:error] [pid 25328:tid 25383] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:10.096418 2026] [proxy_fcgi:error] [pid 25328:tid 25380] [client 172.213.233.8:40470] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:06:10.327372 2026] [:error] [pid 25328:tid 25394] [client 172.213.233.8:40470] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adrT4sxUaQZxT-e0YsAGCAAAAFI"]
[Sun Apr 12 07:06:11.611433 2026] [:error] [pid 25329:tid 25414] [client 172.213.233.8:38805] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adrT42dcIYsS8Iyaj11IYQAAAJc"]
[Sun Apr 12 07:06:12.876434 2026] [:error] [pid 25329:tid 25406] [client 172.213.233.8:5169] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adrT5GdcIYsS8Iyaj11IZQAAAJE"]
[Sun Apr 12 07:06:13.915929 2026] [:error] [pid 25328:tid 25364] [client 172.213.233.8:32629] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "adrT5cxUaQZxT-e0YsAGFQAAAEA"]
[Sun Apr 12 07:06:14.881511 2026] [:error] [pid 26600:tid 26644] [client 172.213.233.8:51999] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "adrT5u1YwAZiXhQKLYqNPgAAAY8"]
[Sun Apr 12 07:06:15.679067 2026] [:error] [pid 26600:tid 26649] [client 172.213.233.8:44417] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "adrT5-1YwAZiXhQKLYqNRQAAAZQ"]
[Sun Apr 12 07:06:16.550082 2026] [:error] [pid 25328:tid 25387] [client 172.213.233.8:53926] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "adrT6MxUaQZxT-e0YsAGGAAAAE8"]
[Sun Apr 12 07:06:17.094867 2026] [:error] [pid 60280:tid 60291] [client 172.213.233.8:53890] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "adrT6XBlLnDOYuIykkgB8gAAAck"]
[Sun Apr 12 07:06:17.993286 2026] [:error] [pid 25329:tid 25397] [client 172.213.233.8:53892] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adrT6WdcIYsS8Iyaj11IZwAAAIw"]
[Sun Apr 12 07:06:18.992599 2026] [:error] [pid 25328:tid 25365] [client 172.213.233.8:38801] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "adrT6sxUaQZxT-e0YsAGGgAAAEE"]
[Sun Apr 12 07:06:19.782534 2026] [:error] [pid 25437:tid 25463] [client 172.213.233.8:5391] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "adrT63f97wYZje1ep_Nx-AAAANg"]
[Sun Apr 12 07:06:20.868421 2026] [:error] [pid 25329:tid 25374] [client 172.213.233.8:44470] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "adrT7GdcIYsS8Iyaj11IagAAAIA"]
[Sun Apr 12 07:06:21.656205 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:47251] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "adrT7e1YwAZiXhQKLYqNUAAAAYc"]
[Sun Apr 12 07:06:22.515014 2026] [:error] [pid 25329:tid 25415] [client 172.213.233.8:53459] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "adrT7mdcIYsS8Iyaj11IcgAAAJg"]
[Sun Apr 12 07:06:24.504860 2026] [:error] [pid 25437:tid 25458] [client 172.213.233.8:47257] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "adrT8Hf97wYZje1ep_Nx_gAAANM"]
[Sun Apr 12 07:06:26.603695 2026] [:error] [pid 25327:tid 25337] [client 172.213.233.8:53436] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "adrT8i6h2tZEVJo9JFJOOAAAAAE"]
[Sun Apr 12 07:06:28.850042 2026] [:error] [pid 60280:tid 60286] [client 172.213.233.8:5403] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "adrT9HBlLnDOYuIykkgB9AAAAcQ"]
[Sun Apr 12 07:06:29.640624 2026] [:error] [pid 25329:tid 25374] [client 172.213.233.8:43629] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "adrT9WdcIYsS8Iyaj11ImAAAAIA"]
[Sun Apr 12 07:06:31.888086 2026] [:error] [pid 26599:tid 26620] [client 172.213.233.8:5764] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "adrT93G89LXoQbk_rwBR-gAAAVI"]
[Sun Apr 12 07:06:32.825474 2026] [:error] [pid 25329:tid 25402] [client 172.213.233.8:38745] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "adrT-GdcIYsS8Iyaj11IowAAAI8"]
[Sun Apr 12 07:06:33.597083 2026] [:error] [pid 25328:tid 25379] [client 172.213.233.8:58417] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "adrT-cxUaQZxT-e0YsAGLAAAAEs"]
[Sun Apr 12 07:06:34.266167 2026] [:error] [pid 60280:tid 60287] [client 172.213.233.8:49080] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adrT-nBlLnDOYuIykkgB9QAAAcU"]
[Sun Apr 12 07:06:35.321453 2026] [:error] [pid 25328:tid 25385] [client 172.213.233.8:36893] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adrT-8xUaQZxT-e0YsAGOgAAAE4"]
[Sun Apr 12 07:06:36.145154 2026] [:error] [pid 25329:tid 25376] [client 172.213.233.8:44357] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adrT_GdcIYsS8Iyaj11IqAAAAIE"]
[Sun Apr 12 07:06:37.089626 2026] [:error] [pid 26600:tid 26644] [client 172.213.233.8:45706] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "adrT_e1YwAZiXhQKLYqNawAAAY8"]
[Sun Apr 12 07:06:37.905578 2026] [:error] [pid 25327:tid 25352] [client 172.213.233.8:52058] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/97.php"] [unique_id "adrT_S6h2tZEVJo9JFJOOQAAABA"]
[Sun Apr 12 07:06:38.543504 2026] [:error] [pid 25328:tid 25368] [client 172.213.233.8:63503] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/97.php"] [unique_id "adrT_sxUaQZxT-e0YsAGQgAAAEQ"]
[Sun Apr 12 07:06:40.247680 2026] [:error] [pid 25329:tid 25384] [client 172.213.233.8:61540] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/97.php"] [unique_id "adrUAGdcIYsS8Iyaj11IqwAAAIU"]
[Sun Apr 12 07:06:41.262434 2026] [:error] [pid 26600:tid 26629] [client 172.213.233.8:44133] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/97.php"] [unique_id "adrUAe1YwAZiXhQKLYqNdAAAAYA"]
[Sun Apr 12 07:06:42.322431 2026] [:error] [pid 25329:tid 25406] [client 172.213.233.8:42860] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrUAmdcIYsS8Iyaj11IsQAAAJE"]
[Sun Apr 12 07:06:43.675774 2026] [:error] [pid 25328:tid 25398] [client 172.213.233.8:33512] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrUA8xUaQZxT-e0YsAGTwAAAFQ"]
[Sun Apr 12 07:06:45.080029 2026] [:error] [pid 26599:tid 26604] [client 172.213.233.8:42441] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrUBXG89LXoQbk_rwBR_QAAAUI"]
[Sun Apr 12 07:06:46.028821 2026] [:error] [pid 26567:tid 26569] [client 172.213.233.8:42458] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrUBnhRpg6ptWFyFx0bUgAAAQA"]
[Sun Apr 12 07:06:47.632713 2026] [:error] [pid 26600:tid 26633] [client 172.213.233.8:56654] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adrUB-1YwAZiXhQKLYqNfQAAAYQ"]
[Sun Apr 12 07:06:48.955900 2026] [:error] [pid 25328:tid 25396] [client 172.213.233.8:52789] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adrUCMxUaQZxT-e0YsAGWAAAAFM"]
[Sun Apr 12 07:06:50.301428 2026] [:error] [pid 25329:tid 25409] [client 172.213.233.8:6122] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adrUCmdcIYsS8Iyaj11IuAAAAJM"]
[Sun Apr 12 07:06:51.765407 2026] [:error] [pid 25328:tid 25405] [client 172.213.233.8:56034] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "adrUC8xUaQZxT-e0YsAGXQAAAFc"]
[Sun Apr 12 07:06:53.058907 2026] [:error] [pid 25328:tid 25377] [client 172.213.233.8:50285] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adrUDcxUaQZxT-e0YsAGZQAAAEo"]
[Sun Apr 12 07:06:54.136290 2026] [:error] [pid 25327:tid 25344] [client 172.213.233.8:50255] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adrUDi6h2tZEVJo9JFJOQAAAAAg"]
[Sun Apr 12 07:06:55.133368 2026] [:error] [pid 25328:tid 25401] [client 172.213.233.8:45141] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adrUD8xUaQZxT-e0YsAGdQAAAFU"]
[Sun Apr 12 07:06:56.405601 2026] [:error] [pid 25328:tid 25403] [client 172.213.233.8:46571] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "adrUEMxUaQZxT-e0YsAGfAAAAFY"]
[Sun Apr 12 07:06:57.251951 2026] [:error] [pid 25328:tid 25383] [client 172.213.233.8:6105] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adrUEcxUaQZxT-e0YsAGhQAAAE0"]
[Sun Apr 12 07:06:58.281121 2026] [:error] [pid 25328:tid 25403] [client 172.213.233.8:53226] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adrUEsxUaQZxT-e0YsAGiQAAAFY"]
[Sun Apr 12 07:06:59.070466 2026] [:error] [pid 25328:tid 25385] [client 172.213.233.8:6087] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adrUE8xUaQZxT-e0YsAGkwAAAE4"]
[Sun Apr 12 07:06:59.804415 2026] [:error] [pid 26600:tid 26631] [client 172.213.233.8:53225] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adrUE-1YwAZiXhQKLYqNiAAAAYI"]
[Sun Apr 12 07:07:00.564162 2026] [:error] [pid 25329:tid 25402] [client 172.213.233.8:46570] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adrUFGdcIYsS8Iyaj11IwQAAAI8"]
[Sun Apr 12 07:07:01.353285 2026] [:error] [pid 60280:tid 60290] [client 172.213.233.8:58777] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adrUFXBlLnDOYuIykkgB_gAAAcg"]
[Sun Apr 12 07:07:01.889254 2026] [:error] [pid 26599:tid 26621] [client 172.213.233.8:46530] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adrUFXG89LXoQbk_rwBSBAAAAVM"]
[Sun Apr 12 07:07:02.661477 2026] [:error] [pid 26600:tid 26647] [client 172.213.233.8:58763] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adrUFu1YwAZiXhQKLYqNigAAAZI"]
[Sun Apr 12 07:07:03.325745 2026] [:error] [pid 25329:tid 25376] [client 172.213.233.8:6117] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adrUF2dcIYsS8Iyaj11IxQAAAIE"]
[Sun Apr 12 07:07:03.878432 2026] [:error] [pid 25329:tid 25374] [client 172.213.233.8:50284] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adrUF2dcIYsS8Iyaj11IyAAAAIA"]
[Sun Apr 12 07:07:04.518122 2026] [:error] [pid 26600:tid 26637] [client 172.213.233.8:46857] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adrUGO1YwAZiXhQKLYqNkAAAAYg"]
[Sun Apr 12 07:07:05.294720 2026] [:error] [pid 25328:tid 25379] [client 172.213.233.8:46579] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "adrUGcxUaQZxT-e0YsAGngAAAEs"]
[Sun Apr 12 07:07:06.029567 2026] [:error] [pid 25437:tid 25445] [client 172.213.233.8:6138] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adrUGnf97wYZje1ep_NyYgAAAMY"]
[Sun Apr 12 07:07:06.549131 2026] [:error] [pid 25328:tid 25389] [client 172.213.233.8:53196] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adrUGsxUaQZxT-e0YsAGowAAAFA"]
[Sun Apr 12 07:07:07.300440 2026] [:error] [pid 25329:tid 25415] [client 172.213.233.8:33030] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adrUG2dcIYsS8Iyaj11IzAAAAJg"]
[Sun Apr 12 07:07:08.026874 2026] [:error] [pid 25328:tid 25373] [client 172.213.233.8:56678] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "adrUHMxUaQZxT-e0YsAGqAAAAEg"]
[Sun Apr 12 07:07:08.558077 2026] [:error] [pid 25328:tid 25364] [client 172.213.233.8:46899] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adrUHMxUaQZxT-e0YsAGqQAAAEA"]
[Sun Apr 12 07:07:09.120008 2026] [:error] [pid 26600:tid 26643] [client 172.213.233.8:33054] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adrUHe1YwAZiXhQKLYqNmAAAAY4"]
[Sun Apr 12 07:07:09.718795 2026] [:error] [pid 26567:tid 26574] [client 172.213.233.8:33076] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adrUHXhRpg6ptWFyFx0bXAAAAQU"]
[Sun Apr 12 07:07:10.445757 2026] [proxy_fcgi:error] [pid 25329:tid 25392] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:11.664616 2026] [proxy_fcgi:error] [pid 25329:tid 25413] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:11.907660 2026] [proxy_fcgi:error] [pid 25329:tid 25415] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:12.140971 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:12.372995 2026] [proxy_fcgi:error] [pid 25329:tid 25388] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:12.611358 2026] [proxy_fcgi:error] [pid 25329:tid 25397] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:12.842754 2026] [proxy_fcgi:error] [pid 25329:tid 25409] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:13.242846 2026] [proxy_fcgi:error] [pid 25329:tid 25395] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:13.574515 2026] [proxy_fcgi:error] [pid 25329:tid 25404] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:13.819935 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:14.067056 2026] [proxy_fcgi:error] [pid 25329:tid 25374] [client 172.213.233.8:46532] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:07:14.340019 2026] [:error] [pid 25329:tid 25407] [client 172.213.233.8:46532] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adrUImdcIYsS8Iyaj11I4QAAAJI"]
[Sun Apr 12 07:07:14.983985 2026] [:error] [pid 25328:tid 25375] [client 172.213.233.8:50270] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adrUIsxUaQZxT-e0YsAGvQAAAEk"]
[Sun Apr 12 07:07:15.654792 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:56660] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adrUI-1YwAZiXhQKLYqNqwAAAYo"]
[Sun Apr 12 07:07:16.267297 2026] [:error] [pid 26600:tid 26632] [client 172.213.233.8:52749] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "adrUJO1YwAZiXhQKLYqNrgAAAYM"]
[Sun Apr 12 07:07:16.793834 2026] [:error] [pid 26600:tid 26637] [client 172.213.233.8:50274] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adrUJO1YwAZiXhQKLYqNrwAAAYg"]
[Sun Apr 12 07:07:17.424991 2026] [:error] [pid 26600:tid 26641] [client 172.213.233.8:53217] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adrUJe1YwAZiXhQKLYqNtQAAAYw"]
[Sun Apr 12 07:07:18.237308 2026] [:error] [pid 25328:tid 25383] [client 172.213.233.8:46881] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adrUJsxUaQZxT-e0YsAGxAAAAE0"]
[Sun Apr 12 07:07:19.901294 2026] [:error] [pid 26600:tid 26649] [client 172.213.233.8:46554] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "adrUJ-1YwAZiXhQKLYqNxwAAAZQ"]
[Sun Apr 12 07:07:21.030515 2026] [:error] [pid 25437:tid 25452] [client 172.213.233.8:52784] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adrUKXf97wYZje1ep_NycAAAAM0"]
[Sun Apr 12 07:07:22.316924 2026] [:error] [pid 25437:tid 25439] [client 172.213.233.8:53211] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adrUKnf97wYZje1ep_NycgAAAMA"]
[Sun Apr 12 07:07:22.947324 2026] [:error] [pid 25437:tid 25441] [client 172.213.233.8:43327] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adrUKnf97wYZje1ep_NydwAAAMI"]
[Sun Apr 12 07:07:23.546437 2026] [:error] [pid 25437:tid 25459] [client 172.213.233.8:6143] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "adrUK3f97wYZje1ep_NyeAAAANQ"]
[Sun Apr 12 07:07:24.417124 2026] [:error] [pid 25328:tid 25380] [client 172.213.233.8:45147] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adrULMxUaQZxT-e0YsAGzwAAAEw"]
[Sun Apr 12 07:07:25.436654 2026] [:error] [pid 25329:tid 25376] [client 172.213.233.8:46889] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adrULWdcIYsS8Iyaj11I8gAAAIE"]
[Sun Apr 12 07:07:27.069651 2026] [:error] [pid 26567:tid 26593] [client 172.213.233.8:56696] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adrUL3hRpg6ptWFyFx0bYAAAARg"]
[Sun Apr 12 07:07:28.186400 2026] [:error] [pid 25329:tid 25402] [client 172.213.233.8:56684] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "adrUMGdcIYsS8Iyaj11I-wAAAI8"]
[Sun Apr 12 07:07:28.740391 2026] [:error] [pid 25329:tid 25395] [client 172.213.233.8:45142] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adrUMGdcIYsS8Iyaj11I_AAAAIs"]
[Sun Apr 12 07:07:29.342761 2026] [:error] [pid 25327:tid 25343] [client 172.213.233.8:58807] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adrUMS6h2tZEVJo9JFJOTgAAAAc"]
[Sun Apr 12 07:07:30.093118 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:41786] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adrUMu1YwAZiXhQKLYqN4AAAAYo"]
[Sun Apr 12 07:07:30.756385 2026] [:error] [pid 60280:tid 60283] [client 172.213.233.8:56699] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myy.php"] [unique_id "adrUMnBlLnDOYuIykkgCFQAAAcE"]
[Sun Apr 12 07:07:31.452563 2026] [:error] [pid 25329:tid 25382] [client 172.213.233.8:46901] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "adrUM2dcIYsS8Iyaj11I_gAAAIQ"]
[Sun Apr 12 07:07:32.104199 2026] [:error] [pid 25437:tid 25453] [client 172.213.233.8:6067] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adrUNHf97wYZje1ep_NyggAAAM4"]
[Sun Apr 12 07:07:32.872416 2026] [:error] [pid 26600:tid 26637] [client 172.213.233.8:56849] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adrUNO1YwAZiXhQKLYqN5wAAAYg"]
[Sun Apr 12 07:07:33.693568 2026] [:error] [pid 25328:tid 25372] [client 172.213.233.8:5919] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "adrUNcxUaQZxT-e0YsAG8AAAAEc"]
[Sun Apr 12 07:07:34.437762 2026] [:error] [pid 26599:tid 26625] [client 172.213.233.8:56932] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adrUNnG89LXoQbk_rwBSGwAAAVc"]
[Sun Apr 12 07:07:35.353846 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:46882] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adrUN8xUaQZxT-e0YsAG9wAAAEY"]
[Sun Apr 12 07:07:36.195580 2026] [:error] [pid 25328:tid 25389] [client 172.213.233.8:41759] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adrUOMxUaQZxT-e0YsAG_QAAAFA"]
[Sun Apr 12 07:07:36.928037 2026] [:error] [pid 25437:tid 25440] [client 172.213.233.8:61843] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "adrUOHf97wYZje1ep_NyhQAAAME"]
[Sun Apr 12 07:07:37.465828 2026] [:error] [pid 25329:tid 25415] [client 172.213.233.8:54812] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adrUOWdcIYsS8Iyaj11JBgAAAJg"]
[Sun Apr 12 07:07:38.106575 2026] [:error] [pid 25328:tid 25398] [client 172.213.233.8:35069] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adrUOsxUaQZxT-e0YsAHAwAAAFQ"]
[Sun Apr 12 07:07:38.693787 2026] [:error] [pid 26567:tid 26570] [client 172.213.233.8:36395] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adrUOnhRpg6ptWFyFx0bbgAAAQE"]
[Sun Apr 12 07:07:39.241295 2026] [:error] [pid 25328:tid 25385] [client 172.213.233.8:42778] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsheet1.php"] [unique_id "adrUO8xUaQZxT-e0YsAHCQAAAE4"]
[Sun Apr 12 07:07:39.805214 2026] [:error] [pid 25328:tid 25401] [client 172.213.233.8:42808] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adrUO8xUaQZxT-e0YsAHEAAAAFU"]
[Sun Apr 12 07:07:40.311630 2026] [:error] [pid 25328:tid 25379] [client 172.213.233.8:51620] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adrUPMxUaQZxT-e0YsAHGQAAAEs"]
[Sun Apr 12 07:07:40.783499 2026] [:error] [pid 26600:tid 26642] [client 172.213.233.8:51675] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adrUPO1YwAZiXhQKLYqN7gAAAY0"]
[Sun Apr 12 07:07:41.307382 2026] [:error] [pid 25329:tid 25404] [client 172.213.233.8:44871] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "adrUPWdcIYsS8Iyaj11JDAAAAJA"]
[Sun Apr 12 07:07:41.834652 2026] [:error] [pid 26600:tid 26629] [client 172.213.233.8:51123] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adrUPe1YwAZiXhQKLYqN9wAAAYA"]
[Sun Apr 12 07:07:42.448437 2026] [:error] [pid 25437:tid 25458] [client 172.213.233.8:44920] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adrUPnf97wYZje1ep_NyigAAANM"]
[Sun Apr 12 07:07:43.030053 2026] [:error] [pid 26600:tid 26649] [client 172.213.233.8:44910] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adrUP-1YwAZiXhQKLYqOAgAAAZQ"]
[Sun Apr 12 07:07:43.563550 2026] [:error] [pid 25437:tid 25461] [client 172.213.233.8:51135] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ava.php"] [unique_id "adrUP3f97wYZje1ep_NyjgAAANY"]
[Sun Apr 12 07:07:44.046080 2026] [:error] [pid 26599:tid 26616] [client 172.213.233.8:42554] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adrUQHG89LXoQbk_rwBSKwAAAU4"]
[Sun Apr 12 07:07:44.655899 2026] [:error] [pid 26599:tid 26605] [client 172.213.233.8:42505] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adrUQHG89LXoQbk_rwBSLQAAAUM"]
[Sun Apr 12 07:07:45.280671 2026] [:error] [pid 60280:tid 60305] [client 172.213.233.8:34566] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adrUQXBlLnDOYuIykkgCKQAAAdc"]
[Sun Apr 12 07:07:45.877121 2026] [:error] [pid 25437:tid 25450] [client 172.213.233.8:34564] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awh.php"] [unique_id "adrUQXf97wYZje1ep_NykgAAAMs"]
[Sun Apr 12 07:07:46.497016 2026] [:error] [pid 25437:tid 25444] [client 172.213.233.8:44873] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adrUQnf97wYZje1ep_NylwAAAMU"]
[Sun Apr 12 07:07:46.990428 2026] [:error] [pid 25329:tid 25411] [client 172.213.233.8:54436] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adrUQmdcIYsS8Iyaj11JEgAAAJQ"]
[Sun Apr 12 07:07:47.512342 2026] [:error] [pid 25328:tid 25387] [client 172.213.233.8:32183] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adrUQ8xUaQZxT-e0YsAHOQAAAE8"]
[Sun Apr 12 07:07:48.054897 2026] [:error] [pid 26600:tid 26646] [client 172.213.233.8:33961] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "adrURO1YwAZiXhQKLYqOBwAAAZE"]
[Sun Apr 12 07:07:48.601160 2026] [:error] [pid 25329:tid 25412] [client 172.213.233.8:50773] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adrURGdcIYsS8Iyaj11JFAAAAJU"]
[Sun Apr 12 07:07:49.209505 2026] [:error] [pid 26567:tid 26593] [client 172.213.233.8:50793] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adrURXhRpg6ptWFyFx0bcgAAARg"]
[Sun Apr 12 07:07:49.848786 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:51151] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adrURe1YwAZiXhQKLYqOFAAAAYo"]
[Sun Apr 12 07:07:50.446321 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:44815] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "adrURu1YwAZiXhQKLYqOFwAAAYc"]
[Sun Apr 12 07:07:50.979179 2026] [:error] [pid 25328:tid 25396] [client 172.213.233.8:50811] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "adrURsxUaQZxT-e0YsAHQAAAAFM"]
[Sun Apr 12 07:07:51.634090 2026] [:error] [pid 26600:tid 26630] [client 172.213.233.8:52442] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "adrUR-1YwAZiXhQKLYqOIQAAAYE"]
[Sun Apr 12 07:07:52.557690 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:52473] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "adrUSO1YwAZiXhQKLYqOKAAAAYo"]
[Sun Apr 12 07:07:53.239327 2026] [:error] [pid 26600:tid 26634] [client 172.213.233.8:50784] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "adrUSe1YwAZiXhQKLYqOKwAAAYU"]
[Sun Apr 12 07:07:53.800503 2026] [:error] [pid 26600:tid 26652] [client 172.213.233.8:34584] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "adrUSe1YwAZiXhQKLYqOLwAAAZc"]
[Sun Apr 12 07:07:54.305610 2026] [:error] [pid 25328:tid 25387] [client 172.213.233.8:32139] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "adrUSsxUaQZxT-e0YsAHRQAAAE8"]
[Sun Apr 12 07:07:55.000103 2026] [:error] [pid 26600:tid 26651] [client 172.213.233.8:32141] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "adrUSu1YwAZiXhQKLYqOOAAAAZY"]
[Sun Apr 12 07:07:55.552496 2026] [:error] [pid 26599:tid 26603] [client 172.213.233.8:47209] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "adrUS3G89LXoQbk_rwBSOwAAAUE"]
[Sun Apr 12 07:07:56.113791 2026] [:error] [pid 25437:tid 25455] [client 172.213.233.8:32163] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adrUTHf97wYZje1ep_NymwAAANA"]
[Sun Apr 12 07:07:56.670364 2026] [:error] [pid 25327:tid 25348] [client 172.213.233.8:47345] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adrUTC6h2tZEVJo9JFJOagAAAAw"]
[Sun Apr 12 07:07:57.340491 2026] [:error] [pid 26600:tid 26650] [client 172.213.233.8:47325] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adrUTe1YwAZiXhQKLYqOQwAAAZU"]
[Sun Apr 12 07:07:58.105728 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:52416] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/riz.php"] [unique_id "adrUTsxUaQZxT-e0YsAHSAAAAEY"]
[Sun Apr 12 07:07:58.840159 2026] [:error] [pid 60280:tid 60284] [client 172.213.233.8:37997] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adrUTnBlLnDOYuIykkgCLgAAAcI"]
[Sun Apr 12 07:07:59.558968 2026] [:error] [pid 26600:tid 26639] [client 172.213.233.8:54827] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adrUT-1YwAZiXhQKLYqOSAAAAYo"]
[Sun Apr 12 07:08:00.147603 2026] [:error] [pid 26567:tid 26587] [client 172.213.233.8:40985] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adrUUHhRpg6ptWFyFx0begAAARI"]
[Sun Apr 12 07:08:01.164346 2026] [:error] [pid 26600:tid 26634] [client 172.213.233.8:44818] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "adrUUe1YwAZiXhQKLYqOTgAAAYU"]
[Sun Apr 12 07:08:02.493831 2026] [:error] [pid 26599:tid 26626] [client 172.213.233.8:47923] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/om.php"] [unique_id "adrUUnG89LXoQbk_rwBSRQAAAVg"]
[Sun Apr 12 07:08:03.287658 2026] [:error] [pid 25329:tid 25415] [client 172.213.233.8:40968] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/om.php"] [unique_id "adrUU2dcIYsS8Iyaj11JMwAAAJg"]
[Sun Apr 12 07:08:04.103141 2026] [:error] [pid 25327:tid 25350] [client 172.213.233.8:47916] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/om.php"] [unique_id "adrUVC6h2tZEVJo9JFJOcgAAAA4"]
[Sun Apr 12 07:08:04.917282 2026] [:error] [pid 60280:tid 60301] [client 172.213.233.8:38013] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/om.php"] [unique_id "adrUVHBlLnDOYuIykkgCNAAAAdM"]
[Sun Apr 12 07:08:05.758261 2026] [:error] [pid 25327:tid 25353] [client 172.213.233.8:47933] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "adrUVS6h2tZEVJo9JFJOdQAAABE"]
[Sun Apr 12 07:08:06.893247 2026] [:error] [pid 25437:tid 25441] [client 172.213.233.8:47910] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "adrUVnf97wYZje1ep_NypQAAAMI"]
[Sun Apr 12 07:08:07.636106 2026] [:error] [pid 25329:tid 25406] [client 172.213.233.8:37990] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "adrUV2dcIYsS8Iyaj11JTAAAAJE"]
[Sun Apr 12 07:08:09.273537 2026] [:error] [pid 26600:tid 26635] [client 172.213.233.8:63171] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "adrUWe1YwAZiXhQKLYqOcAAAAYY"]
[Sun Apr 12 07:08:10.069446 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:49805] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adrUWsxUaQZxT-e0YsAHeAAAAEY"]
[Sun Apr 12 07:08:10.918968 2026] [:error] [pid 25437:tid 25444] [client 172.213.233.8:41338] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adrUWnf97wYZje1ep_Ny0QAAAMU"]
[Sun Apr 12 07:08:11.767667 2026] [:error] [pid 25327:tid 25354] [client 172.213.233.8:63904] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adrUWy6h2tZEVJo9JFJO7gAAABI"]
[Sun Apr 12 07:08:12.405251 2026] [:error] [pid 26567:tid 26591] [client 172.213.233.8:37960] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "adrUXHhRpg6ptWFyFx0bmgAAARY"]
[Sun Apr 12 07:08:13.047930 2026] [:error] [pid 25327:tid 25339] [client 172.213.233.8:40962] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "adrUXS6h2tZEVJo9JFJO9gAAAAM"]
[Sun Apr 12 07:08:14.484126 2026] [proxy_fcgi:error] [pid 25328:tid 25385] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:08:14.726445 2026] [proxy_fcgi:error] [pid 25328:tid 25403] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:08:14.960291 2026] [proxy_fcgi:error] [pid 25328:tid 25398] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:08:15.427317 2026] [proxy_fcgi:error] [pid 25328:tid 25394] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:08:17.667403 2026] [proxy_fcgi:error] [pid 25328:tid 25370] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:08:17.902579 2026] [proxy_fcgi:error] [pid 25328:tid 25408] [client 172.213.233.8:41018] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 07:26:17.107167 2026] [:error] [pid 60280:tid 60296] [client 20.104.18.4:32747] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrYmXBlLnDOYuIykkgHogAAAc4"]
[Sun Apr 12 07:26:20.389756 2026] [:error] [pid 60280:tid 60290] [client 20.104.18.4:32758] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrYnHBlLnDOYuIykkgHqQAAAcg"]
[Sun Apr 12 07:26:23.115311 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:32766] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adrYn8xUaQZxT-e0YsAMRAAAAEs"]
[Sun Apr 12 13:31:06.147011 2026] [:error] [pid 26599:tid 26603] [client 20.220.11.224:2021] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adsuGnG89LXoQbk_rwCfTgAAAUE"]
[Sun Apr 12 13:31:14.777309 2026] [:error] [pid 26599:tid 26612] [client 20.220.11.224:1994] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen/chosen.php"] [unique_id "adsuInG89LXoQbk_rwCfVQAAAUo"]
[Sun Apr 12 13:31:33.284732 2026] [:error] [pid 25328:tid 25398] [client 20.220.11.224:1936] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adsuNcxUaQZxT-e0YsCfIAAAAFQ"]
[Sun Apr 12 13:31:38.964747 2026] [:error] [pid 25437:tid 25459] [client 20.220.11.224:2017] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/chosen.php"] [unique_id "adsuOnf97wYZje1ep_PdQgAAANQ"]
[Sun Apr 12 13:31:48.928318 2026] [:error] [pid 60280:tid 60294] [client 20.220.11.224:2043] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adsuRHBlLnDOYuIykkjLTQAAAcw"]
[Sun Apr 12 13:31:51.873592 2026] [:error] [pid 60280:tid 60295] [client 20.220.11.224:2009] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adsuR3BlLnDOYuIykkjLVwAAAc0"]
[Sun Apr 12 13:31:59.806270 2026] [:error] [pid 25327:tid 25344] [client 20.220.11.224:1995] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa.php"] [unique_id "adsuTy6h2tZEVJo9JFKfFwAAAAg"]
[Sun Apr 12 13:32:03.529295 2026] [:error] [pid 25328:tid 25375] [client 20.220.11.224:1940] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "adsuU8xUaQZxT-e0YsCfVAAAAEk"]
[Sun Apr 12 13:32:16.497669 2026] [proxy_fcgi:error] [pid 25327:tid 25350] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:16.739687 2026] [proxy_fcgi:error] [pid 25327:tid 25343] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:17.148710 2026] [proxy_fcgi:error] [pid 25327:tid 25345] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:17.393586 2026] [proxy_fcgi:error] [pid 25327:tid 25338] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:17.615233 2026] [proxy_fcgi:error] [pid 25327:tid 25336] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:18.055438 2026] [proxy_fcgi:error] [pid 25327:tid 25341] [client 20.220.11.224:2040] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:32:18.379318 2026] [:error] [pid 25327:tid 25352] [client 20.220.11.224:2040] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "adsuYi6h2tZEVJo9JFKfKAAAABA"]
[Sun Apr 12 13:32:20.195834 2026] [:error] [pid 26600:tid 26651] [client 20.220.11.224:1988] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "adsuZO1YwAZiXhQKLYrp2gAAAZY"]
[Sun Apr 12 13:32:21.575290 2026] [:error] [pid 25327:tid 25344] [client 20.220.11.224:2020] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "adsuZS6h2tZEVJo9JFKfKQAAAAg"]
[Sun Apr 12 13:32:26.991809 2026] [:error] [pid 25437:tid 25462] [client 20.220.11.224:2034] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "adsuanf97wYZje1ep_PddgAAANc"]
[Sun Apr 12 13:32:30.434330 2026] [:error] [pid 26600:tid 26640] [client 20.220.11.224:2033] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config-backup.php"] [unique_id "adsubu1YwAZiXhQKLYrp7wAAAYs"]
[Sun Apr 12 13:32:41.064812 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:1938] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config-backup.php"] [unique_id "adsuee1YwAZiXhQKLYrp_AAAAYc"]
[Sun Apr 12 13:33:05.333771 2026] [:error] [pid 25437:tid 25450] [client 20.220.11.224:1933] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "adsukXf97wYZje1ep_PdnwAAAMs"]
[Sun Apr 12 13:33:16.170984 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:1922] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index/function.php"] [unique_id "adsunHf97wYZje1ep_PdvAAAAMQ"]
[Sun Apr 12 13:33:24.203599 2026] [proxy_fcgi:error] [pid 26600:tid 26650] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:24.419158 2026] [proxy_fcgi:error] [pid 26600:tid 26649] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:25.101757 2026] [proxy_fcgi:error] [pid 26600:tid 26645] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:25.332102 2026] [proxy_fcgi:error] [pid 26600:tid 26630] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:25.551705 2026] [proxy_fcgi:error] [pid 26600:tid 26647] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:25.772679 2026] [proxy_fcgi:error] [pid 26600:tid 26642] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:25.993571 2026] [proxy_fcgi:error] [pid 26600:tid 26643] [client 20.220.11.224:2022] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:33:26.219753 2026] [:error] [pid 26600:tid 26631] [client 20.220.11.224:2022] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adsupu1YwAZiXhQKLYrqPgAAAYI"]
[Sun Apr 12 13:33:30.714895 2026] [:error] [pid 25437:tid 25449] [client 20.220.11.224:2008] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adsuqnf97wYZje1ep_PdxgAAAMo"]
[Sun Apr 12 13:33:35.520362 2026] [:error] [pid 25437:tid 25458] [client 20.220.11.224:1930] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lf.php"] [unique_id "adsur3f97wYZje1ep_PdzgAAANM"]
[Sun Apr 12 13:33:51.987133 2026] [:error] [pid 60280:tid 60306] [client 20.220.11.224:2026] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adsuv3BlLnDOYuIykkjMVAAAAdg"]
[Sun Apr 12 13:33:57.376863 2026] [:error] [pid 26567:tid 26572] [client 20.220.11.224:2003] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adsuxXhRpg6ptWFyFx1qeQAAAQM"]
[Sun Apr 12 13:34:07.758629 2026] [:error] [pid 25328:tid 25365] [client 20.220.11.224:1942] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adsuz8xUaQZxT-e0YsCgMQAAAEE"]
[Sun Apr 12 13:34:31.201826 2026] [proxy_fcgi:error] [pid 26567:tid 26580] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:31.421492 2026] [proxy_fcgi:error] [pid 26567:tid 26574] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:31.631535 2026] [proxy_fcgi:error] [pid 26567:tid 26577] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:31.868280 2026] [proxy_fcgi:error] [pid 26567:tid 26579] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:32.078916 2026] [proxy_fcgi:error] [pid 26567:tid 26582] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:32.306399 2026] [proxy_fcgi:error] [pid 26567:tid 26589] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:32.536214 2026] [proxy_fcgi:error] [pid 26567:tid 26572] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:32.773891 2026] [proxy_fcgi:error] [pid 26567:tid 26587] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:33.006805 2026] [proxy_fcgi:error] [pid 26567:tid 26569] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:33.217730 2026] [proxy_fcgi:error] [pid 26567:tid 26590] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:33.433018 2026] [proxy_fcgi:error] [pid 26567:tid 26588] [client 20.220.11.224:1985] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:34:33.645105 2026] [:error] [pid 26567:tid 26591] [client 20.220.11.224:1985] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adsu6XhRpg6ptWFyFx1qqAAAARY"]
[Sun Apr 12 13:34:41.413584 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:1989] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anone.php"] [unique_id "adsu8S6h2tZEVJo9JFKfgAAAAA4"]
[Sun Apr 12 13:34:55.722161 2026] [:error] [pid 25437:tid 25442] [client 20.220.11.224:1920] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adsu_3f97wYZje1ep_PeYwAAAMM"]
[Sun Apr 12 13:35:01.117084 2026] [:error] [pid 26600:tid 26641] [client 20.220.11.224:1996] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-configer.php"] [unique_id "adsvBe1YwAZiXhQKLYrqhgAAAYw"]
[Sun Apr 12 13:35:16.613622 2026] [:error] [pid 26567:tid 26578] [client 20.220.11.224:2001] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ad.php"] [unique_id "adsvFHhRpg6ptWFyFx1rNAAAAQk"]
[Sun Apr 12 13:35:37.261209 2026] [proxy_fcgi:error] [pid 25329:tid 25399] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:37.469698 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:37.720768 2026] [proxy_fcgi:error] [pid 25329:tid 25392] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:37.952750 2026] [proxy_fcgi:error] [pid 25329:tid 25386] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:38.177150 2026] [proxy_fcgi:error] [pid 25329:tid 25414] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:38.396262 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:38.721538 2026] [proxy_fcgi:error] [pid 25329:tid 25404] [client 20.220.11.224:2013] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:35:38.969114 2026] [:error] [pid 25329:tid 25415] [client 20.220.11.224:2013] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adsvKmdcIYsS8Iyaj12FwQAAAJg"]
[Sun Apr 12 13:35:43.548930 2026] [:error] [pid 26600:tid 26644] [client 20.220.11.224:1934] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa123.php"] [unique_id "adsvL-1YwAZiXhQKLYrqmAAAAY8"]
[Sun Apr 12 13:36:04.962526 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:1929] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload.php"] [unique_id "adsvRMxUaQZxT-e0YsChTQAAAEM"]
[Sun Apr 12 13:36:24.739903 2026] [:error] [pid 25328:tid 25401] [client 20.220.11.224:1982] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adsvWMxUaQZxT-e0YsCheQAAAFU"]
[Sun Apr 12 13:36:26.293396 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:1927] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bypass.php"] [unique_id "adsvWnf97wYZje1ep_PepAAAANE"]
[Sun Apr 12 13:36:52.707810 2026] [:error] [pid 26599:tid 26602] [client 20.220.11.224:2024] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexus.php"] [unique_id "adsvdHG89LXoQbk_rwCgUQAAAUA"]
[Sun Apr 12 13:37:10.474331 2026] [:error] [pid 25437:tid 25441] [client 20.220.11.224:1998] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1337.php"] [unique_id "adsvhnf97wYZje1ep_Pe1QAAAMI"]
[Sun Apr 12 13:37:16.962360 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:1939] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1337.php"] [unique_id "adsvjHBlLnDOYuIykkjNGAAAAdY"]
[Sun Apr 12 13:37:24.905364 2026] [:error] [pid 26600:tid 26642] [client 20.220.11.224:2035] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog.php"] [unique_id "adsvlO1YwAZiXhQKLYrq1gAAAY0"]
[Sun Apr 12 13:37:39.539107 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:1946] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog.php"] [unique_id "adsvo-1YwAZiXhQKLYrq2gAAAYc"]
[Sun Apr 12 13:38:13.286750 2026] [:error] [pid 25437:tid 25439] [client 20.220.11.224:2016] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adsvxXf97wYZje1ep_PfEQAAAMA"]
[Sun Apr 12 13:38:33.330364 2026] [:error] [pid 26599:tid 26611] [client 20.220.11.224:2011] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kiss.php"] [unique_id "adsv2XG89LXoQbk_rwCggwAAAUk"]
[Sun Apr 12 13:38:48.871230 2026] [:error] [pid 60280:tid 60282] [client 20.220.11.224:1933] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0.php"] [unique_id "adsv6HBlLnDOYuIykkjOKAAAAcA"]
[Sun Apr 12 13:39:06.277822 2026] [proxy_fcgi:error] [pid 25328:tid 25401] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:06.487517 2026] [proxy_fcgi:error] [pid 25328:tid 25391] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:06.696669 2026] [proxy_fcgi:error] [pid 25328:tid 25396] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:06.904139 2026] [proxy_fcgi:error] [pid 25328:tid 25394] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:07.137142 2026] [proxy_fcgi:error] [pid 25328:tid 25389] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:07.379122 2026] [proxy_fcgi:error] [pid 25328:tid 25403] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:07.628276 2026] [proxy_fcgi:error] [pid 25328:tid 25368] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:07.857381 2026] [proxy_fcgi:error] [pid 25328:tid 25365] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:08.066634 2026] [proxy_fcgi:error] [pid 25328:tid 25387] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:08.286356 2026] [proxy_fcgi:error] [pid 25328:tid 25369] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:08.524769 2026] [proxy_fcgi:error] [pid 25328:tid 25375] [client 20.220.11.224:1924] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:39:08.734859 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:1924] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adsv_MxUaQZxT-e0YsCiYQAAAEM"]
[Sun Apr 12 13:39:22.021401 2026] [:error] [pid 25437:tid 25451] [client 20.220.11.224:1937] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XxX.php"] [unique_id "adswCnf97wYZje1ep_PfTgAAAMw"]
[Sun Apr 12 13:39:29.896954 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:1991] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adswEe1YwAZiXhQKLYrrGwAAAYc"]
[Sun Apr 12 13:39:31.769900 2026] [:error] [pid 26600:tid 26629] [client 20.220.11.224:1987] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adswE-1YwAZiXhQKLYrrHQAAAYA"]
[Sun Apr 12 13:39:32.468785 2026] [:error] [pid 60280:tid 60283] [client 20.220.11.224:1925] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adswFHBlLnDOYuIykkjOpwAAAcE"]
[Sun Apr 12 13:39:36.852295 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:2044] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alexuse.php"] [unique_id "adswGHBlLnDOYuIykkjOqAAAAdY"]
[Sun Apr 12 13:40:00.464562 2026] [:error] [pid 26599:tid 26604] [client 20.220.11.224:1997] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/content.php"] [unique_id "adswMHG89LXoQbk_rwCgrgAAAUI"]
[Sun Apr 12 13:40:05.725084 2026] [:error] [pid 25328:tid 25364] [client 20.220.11.224:2025] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/content.php"] [unique_id "adswNcxUaQZxT-e0YsCiuAAAAEA"]
[Sun Apr 12 13:40:09.733101 2026] [proxy_fcgi:error] [pid 25327:tid 25346] [client 20.220.11.224:1999] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:40:10.690444 2026] [proxy_fcgi:error] [pid 25327:tid 25347] [client 20.220.11.224:1999] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:40:12.060809 2026] [proxy_fcgi:error] [pid 25327:tid 25356] [client 20.220.11.224:1999] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:40:12.933959 2026] [proxy_fcgi:error] [pid 25327:tid 25357] [client 20.220.11.224:1999] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:40:13.144434 2026] [proxy_fcgi:error] [pid 25327:tid 25342] [client 20.220.11.224:1999] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:40:13.356834 2026] [:error] [pid 25327:tid 25343] [client 20.220.11.224:1999] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rss.php"] [unique_id "adswPS6h2tZEVJo9JFKgygAAAAc"]
[Sun Apr 12 13:40:14.478904 2026] [:error] [pid 25327:tid 25354] [client 20.220.11.224:1936] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rss.php"] [unique_id "adswPi6h2tZEVJo9JFKgzAAAABI"]
[Sun Apr 12 13:40:16.234204 2026] [:error] [pid 60280:tid 60290] [client 20.220.11.224:2030] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rss.php"] [unique_id "adswQHBlLnDOYuIykkjPFAAAAcg"]
[Sun Apr 12 13:40:19.653183 2026] [:error] [pid 25329:tid 25414] [client 20.220.11.224:1973] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rss.php"] [unique_id "adswQ2dcIYsS8Iyaj12GHAAAAJc"]
[Sun Apr 12 13:40:38.889984 2026] [:error] [pid 25327:tid 25342] [client 20.220.11.224:2009] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adswVi6h2tZEVJo9JFKg2QAAAAY"]
[Sun Apr 12 13:40:41.492976 2026] [:error] [pid 26600:tid 26653] [client 20.220.11.224:2041] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso2.php"] [unique_id "adswWe1YwAZiXhQKLYrrWwAAAZg"]
[Sun Apr 12 13:40:59.627996 2026] [:error] [pid 60280:tid 60297] [client 20.220.11.224:2039] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wso1.php"] [unique_id "adswa3BlLnDOYuIykkjPXwAAAc8"]
[Sun Apr 12 13:41:38.714251 2026] [proxy_fcgi:error] [pid 25327:tid 25354] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:38.925094 2026] [proxy_fcgi:error] [pid 25327:tid 25338] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:39.135303 2026] [proxy_fcgi:error] [pid 25327:tid 25348] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:39.344216 2026] [proxy_fcgi:error] [pid 25327:tid 25336] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:39.563447 2026] [proxy_fcgi:error] [pid 25327:tid 25344] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:39.790078 2026] [proxy_fcgi:error] [pid 25327:tid 25345] [client 20.220.11.224:2038] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:41:41.075261 2026] [:error] [pid 25327:tid 25337] [client 20.220.11.224:2038] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adswlS6h2tZEVJo9JFKhBQAAAAE"]
[Sun Apr 12 13:41:47.532079 2026] [:error] [pid 25437:tid 25458] [client 20.220.11.224:1985] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adswm3f97wYZje1ep_Pf8AAAANM"]
[Sun Apr 12 13:41:55.655004 2026] [:error] [pid 60280:tid 60289] [client 20.220.11.224:2007] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adswo3BlLnDOYuIykkjP1gAAAcc"]
[Sun Apr 12 13:42:03.540037 2026] [:error] [pid 60280:tid 60285] [client 20.220.11.224:2022] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adswq3BlLnDOYuIykkjP7wAAAcM"]
[Sun Apr 12 13:42:04.225604 2026] [:error] [pid 26599:tid 26616] [client 20.220.11.224:2023] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adswrHG89LXoQbk_rwCg2QAAAU4"]
[Sun Apr 12 13:42:09.935336 2026] [:error] [pid 60280:tid 60300] [client 20.220.11.224:1927] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adswsXBlLnDOYuIykkjQCQAAAdI"]
[Sun Apr 12 13:42:33.154915 2026] [:error] [pid 25437:tid 25455] [client 20.220.11.224:1870] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adswyXf97wYZje1ep_PgJwAAANA"]
[Sun Apr 12 13:42:50.375365 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:2020] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsw2i6h2tZEVJo9JFKhIAAAAA4"]
[Sun Apr 12 13:42:52.966799 2026] [:error] [pid 60280:tid 60295] [client 20.220.11.224:2032] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsw3HBlLnDOYuIykkjQrQAAAc0"]
[Sun Apr 12 13:42:56.695498 2026] [:error] [pid 25328:tid 25370] [client 20.220.11.224:2027] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adsw4MxUaQZxT-e0YsCjmwAAAEY"]
[Sun Apr 12 13:43:31.825907 2026] [:error] [pid 26567:tid 26578] [client 20.220.11.224:2004] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adsxA3hRpg6ptWFyFx1smAAAAQk"]
[Sun Apr 12 13:43:39.517681 2026] [:error] [pid 26600:tid 26647] [client 20.220.11.224:1920] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adsxC-1YwAZiXhQKLYrsHQAAAZI"]
[Sun Apr 12 13:43:43.136670 2026] [:error] [pid 25437:tid 25456] [client 20.220.11.224:1951] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adsxD3f97wYZje1ep_PgeAAAANE"]
[Sun Apr 12 13:43:57.785931 2026] [proxy_fcgi:error] [pid 25329:tid 25415] [client 20.220.11.224:2043] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 13:43:58.860521 2026] [:error] [pid 25329:tid 25378] [client 20.220.11.224:2043] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adsxHmdcIYsS8Iyaj12GqQAAAII"]
[Sun Apr 12 13:44:08.892519 2026] [:error] [pid 25437:tid 25462] [client 20.220.11.224:2045] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adsxKHf97wYZje1ep_PglQAAANc"]
[Sun Apr 12 13:44:31.023742 2026] [:error] [pid 60280:tid 60305] [client 20.220.11.224:2002] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adsxP3BlLnDOYuIykkjRyAAAAdc"]
[Sun Apr 12 13:44:37.601806 2026] [:error] [pid 25327:tid 25360] [client 20.220.11.224:2016] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adsxRS6h2tZEVJo9JFKhXAAAABg"]
[Sun Apr 12 13:44:43.762372 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:2006] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adsxS3BlLnDOYuIykkjR4wAAAc4"]
[Sun Apr 12 13:45:21.014710 2026] [:error] [pid 25329:tid 25409] [client 20.220.11.224:2000] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adsxcWdcIYsS8Iyaj12G0gAAAJM"]
[Sun Apr 12 22:19:53.431642 2026] [:error] [pid 25437:tid 25460] [client 136.107.129.132:53841] [client 136.107.129.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.129.132, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aduqCXf97wYZje1ep_OBRQAAANU"]
[Sun Apr 12 22:19:53.442829 2026] [proxy_fcgi:error] [pid 25437:tid 25460] [client 136.107.129.132:53841] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:19:56.731599 2026] [:error] [pid 25437:tid 25459] [client 136.107.129.132:53841] [client 136.107.129.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aduqDHf97wYZje1ep_OBXQAAANQ"]
[Sun Apr 12 22:19:57.385219 2026] [:error] [pid 26600:tid 26629] [client 136.107.129.132:53205] [client 136.107.129.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aduqDe1YwAZiXhQKLYpnSwAAAYA"]
[Sun Apr 12 22:53:45.196126 2026] [proxy_fcgi:error] [pid 26600:tid 26629] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:46.267659 2026] [proxy_fcgi:error] [pid 26600:tid 26632] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:46.541171 2026] [proxy_fcgi:error] [pid 26600:tid 26650] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:46.802587 2026] [proxy_fcgi:error] [pid 26600:tid 26638] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:47.069739 2026] [proxy_fcgi:error] [pid 26600:tid 26643] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:47.331489 2026] [proxy_fcgi:error] [pid 26600:tid 26652] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:47.604939 2026] [proxy_fcgi:error] [pid 26600:tid 26651] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:47.867896 2026] [proxy_fcgi:error] [pid 26600:tid 26647] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:48.219980 2026] [proxy_fcgi:error] [pid 26600:tid 26645] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:48.497198 2026] [proxy_fcgi:error] [pid 26600:tid 26633] [client 4.223.67.199:46935] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:53:48.769074 2026] [:error] [pid 26600:tid 26630] [client 4.223.67.199:46935] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adux_O1YwAZiXhQKLYpt4AAAAYE"]
[Sun Apr 12 22:53:51.875865 2026] [:error] [pid 26600:tid 26642] [client 4.223.67.199:32729] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "adux_-1YwAZiXhQKLYpt4wAAAY0"]
[Sun Apr 12 22:53:54.543702 2026] [:error] [pid 26600:tid 26653] [client 4.223.67.199:28517] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aduyAu1YwAZiXhQKLYpt6QAAAZg"]
[Sun Apr 12 22:53:55.582345 2026] [:error] [pid 26567:tid 26592] [client 4.223.67.199:32184] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aduyA3hRpg6ptWFyFx3ZxQAAARc"]
[Sun Apr 12 22:53:56.596257 2026] [:error] [pid 25437:tid 25440] [client 4.223.67.199:6691] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aduyBHf97wYZje1ep_OKBAAAAME"]
[Sun Apr 12 22:53:58.411920 2026] [:error] [pid 25327:tid 25348] [client 4.223.67.199:34623] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aduyBi6h2tZEVJo9JFIOmgAAAAw"]
[Sun Apr 12 22:54:02.196849 2026] [:error] [pid 60280:tid 60292] [client 4.223.67.199:28155] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aduyCnBlLnDOYuIykkgLEgAAAco"]
[Sun Apr 12 22:54:04.175246 2026] [:error] [pid 26599:tid 26622] [client 4.223.67.199:23569] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aduyDHG89LXoQbk_rwDv6AAAAVQ"]
[Sun Apr 12 22:54:06.675624 2026] [:error] [pid 25327:tid 25353] [client 4.223.67.199:51742] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "aduyDi6h2tZEVJo9JFIOrgAAABE"]
[Sun Apr 12 22:54:08.717500 2026] [:error] [pid 25327:tid 25346] [client 4.223.67.199:61302] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "aduyEC6h2tZEVJo9JFIOuAAAAAo"]
[Sun Apr 12 22:54:21.548328 2026] [:error] [pid 25329:tid 25413] [client 4.223.67.199:6960] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aduyHWdcIYsS8Iyaj13ZWQAAAJY"]
[Sun Apr 12 22:54:22.957841 2026] [:error] [pid 25329:tid 25382] [client 4.223.67.199:26925] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aduyHmdcIYsS8Iyaj13ZYQAAAIQ"]
[Sun Apr 12 22:54:24.006094 2026] [:error] [pid 25327:tid 25352] [client 4.223.67.199:19516] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aduyIC6h2tZEVJo9JFIO2gAAABA"]
[Sun Apr 12 22:54:25.276401 2026] [:error] [pid 25327:tid 25351] [client 4.223.67.199:34572] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aduyIS6h2tZEVJo9JFIO4gAAAA8"]
[Sun Apr 12 22:54:26.143810 2026] [:error] [pid 60280:tid 60285] [client 4.223.67.199:43636] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "aduyInBlLnDOYuIykkgLQgAAAcM"]
[Sun Apr 12 22:54:26.854969 2026] [:error] [pid 25327:tid 25350] [client 4.223.67.199:56659] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "aduyIi6h2tZEVJo9JFIO5AAAAA4"]
[Sun Apr 12 22:54:27.923335 2026] [:error] [pid 25327:tid 25354] [client 4.223.67.199:44323] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "aduyIy6h2tZEVJo9JFIO5wAAABI"]
[Sun Apr 12 22:54:28.640436 2026] [:error] [pid 25327:tid 25355] [client 4.223.67.199:23231] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "aduyJC6h2tZEVJo9JFIO7AAAABM"]
[Sun Apr 12 22:54:29.685116 2026] [:error] [pid 25328:tid 25372] [client 4.223.67.199:60333] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "aduyJcxUaQZxT-e0YsB8twAAAEc"]
[Sun Apr 12 22:54:30.802932 2026] [:error] [pid 25328:tid 25367] [client 4.223.67.199:23173] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "aduyJsxUaQZxT-e0YsB8ugAAAEM"]
[Sun Apr 12 22:54:31.797005 2026] [:error] [pid 25327:tid 25354] [client 4.223.67.199:60349] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "aduyJy6h2tZEVJo9JFIO8wAAABI"]
[Sun Apr 12 22:54:32.997642 2026] [:error] [pid 25329:tid 25413] [client 4.223.67.199:35260] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "aduyKGdcIYsS8Iyaj13ZeQAAAJY"]
[Sun Apr 12 22:54:33.960872 2026] [:error] [pid 25327:tid 25337] [client 4.223.67.199:59016] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "aduyKS6h2tZEVJo9JFIO-wAAAAE"]
[Sun Apr 12 22:54:34.702931 2026] [:error] [pid 25327:tid 25346] [client 4.223.67.199:6255] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "aduyKi6h2tZEVJo9JFIO_wAAAAo"]
[Sun Apr 12 22:54:35.514598 2026] [:error] [pid 25328:tid 25405] [client 4.223.67.199:21303] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "aduyK8xUaQZxT-e0YsB8vQAAAFc"]
[Sun Apr 12 22:54:36.242475 2026] [:error] [pid 25437:tid 25462] [client 4.223.67.199:43547] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/water.php"] [unique_id "aduyLHf97wYZje1ep_OKLQAAANc"]
[Sun Apr 12 22:54:37.172669 2026] [:error] [pid 26567:tid 26588] [client 4.223.67.199:6253] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aduyLXhRpg6ptWFyFx3Z4wAAARM"]
[Sun Apr 12 22:54:38.268508 2026] [:error] [pid 60280:tid 60301] [client 4.223.67.199:59015] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aduyLnBlLnDOYuIykkgLUQAAAdM"]
[Sun Apr 12 22:54:39.612626 2026] [:error] [pid 25327:tid 25339] [client 4.223.67.199:44019] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aduyLy6h2tZEVJo9JFIPCAAAAAM"]
[Sun Apr 12 22:54:45.507733 2026] [:error] [pid 25328:tid 25369] [client 4.223.67.199:39469] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aduyNcxUaQZxT-e0YsB82gAAAEU"]
[Sun Apr 12 22:54:50.357310 2026] [proxy_fcgi:error] [pid 26600:tid 26640] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:50.622373 2026] [proxy_fcgi:error] [pid 26600:tid 26641] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:51.006142 2026] [proxy_fcgi:error] [pid 26600:tid 26652] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:52.408620 2026] [proxy_fcgi:error] [pid 26600:tid 26631] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:52.921996 2026] [proxy_fcgi:error] [pid 26600:tid 26643] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:53.191691 2026] [proxy_fcgi:error] [pid 26600:tid 26638] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:53.528832 2026] [proxy_fcgi:error] [pid 26600:tid 26651] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:53.794770 2026] [proxy_fcgi:error] [pid 26600:tid 26645] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:54.058747 2026] [proxy_fcgi:error] [pid 26600:tid 26633] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:54.323929 2026] [proxy_fcgi:error] [pid 26600:tid 26653] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:54.589634 2026] [proxy_fcgi:error] [pid 26600:tid 26647] [client 4.223.67.199:26398] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:54:54.907842 2026] [:error] [pid 26600:tid 26636] [client 4.223.67.199:26398] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aduyPu1YwAZiXhQKLYpuGAAAAYc"]
[Sun Apr 12 22:54:56.602308 2026] [:error] [pid 26599:tid 26616] [client 4.223.67.199:6518] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aduyQHG89LXoQbk_rwDwAQAAAU4"]
[Sun Apr 12 22:54:58.048067 2026] [:error] [pid 25328:tid 25366] [client 4.223.67.199:21715] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aduyQsxUaQZxT-e0YsB88AAAAEI"]
[Sun Apr 12 22:54:59.700154 2026] [:error] [pid 25329:tid 25381] [client 4.223.67.199:52332] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aduyQ2dcIYsS8Iyaj13ZiwAAAIM"]
[Sun Apr 12 22:55:02.682953 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:36502] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aduyRi6h2tZEVJo9JFIPNgAAABY"]
[Sun Apr 12 22:55:03.630011 2026] [:error] [pid 25327:tid 25341] [client 4.223.67.199:29162] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aduyRy6h2tZEVJo9JFIPOQAAAAU"]
[Sun Apr 12 22:55:04.686856 2026] [:error] [pid 26567:tid 26580] [client 4.223.67.199:57116] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aduySHhRpg6ptWFyFx3Z8AAAAQs"]
[Sun Apr 12 22:55:05.904840 2026] [:error] [pid 60280:tid 60287] [client 4.223.67.199:19164] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aduySXBlLnDOYuIykkgLdAAAAcU"]
[Sun Apr 12 22:55:14.437656 2026] [:error] [pid 25329:tid 25374] [client 4.223.67.199:40234] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "aduyUmdcIYsS8Iyaj13ZnQAAAIA"]
[Sun Apr 12 22:55:15.046760 2026] [:error] [pid 25328:tid 25372] [client 4.223.67.199:41852] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "aduyU8xUaQZxT-e0YsB9AAAAAEc"]
[Sun Apr 12 22:55:17.517111 2026] [:error] [pid 25329:tid 25386] [client 4.223.67.199:23639] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "aduyVWdcIYsS8Iyaj13ZogAAAIY"]
[Sun Apr 12 22:55:19.102645 2026] [:error] [pid 60280:tid 60291] [client 4.223.67.199:38390] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "aduyV3BlLnDOYuIykkgLjwAAAck"]
[Sun Apr 12 22:55:20.001766 2026] [:error] [pid 60280:tid 60295] [client 4.223.67.199:30458] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "aduyWHBlLnDOYuIykkgLkQAAAc0"]
[Sun Apr 12 22:55:21.686343 2026] [:error] [pid 25329:tid 25406] [client 4.223.67.199:40224] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "aduyWWdcIYsS8Iyaj13ZpAAAAJE"]
[Sun Apr 12 22:55:23.193872 2026] [:error] [pid 25327:tid 25340] [client 4.223.67.199:22138] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "aduyWy6h2tZEVJo9JFIPXQAAAAQ"]
[Sun Apr 12 22:55:23.878321 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:57839] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "aduyWy6h2tZEVJo9JFIPZAAAABY"]
[Sun Apr 12 22:55:24.495860 2026] [:error] [pid 25327:tid 25340] [client 4.223.67.199:18807] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "aduyXC6h2tZEVJo9JFIPZQAAAAQ"]
[Sun Apr 12 22:55:25.967962 2026] [:error] [pid 26567:tid 26590] [client 4.223.67.199:62712] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "aduyXXhRpg6ptWFyFx3aAAAAARU"]
[Sun Apr 12 22:55:27.486449 2026] [:error] [pid 25328:tid 25377] [client 4.223.67.199:42486] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "aduyX8xUaQZxT-e0YsB9EAAAAEo"]
[Sun Apr 12 22:55:28.735216 2026] [:error] [pid 25328:tid 25387] [client 4.223.67.199:19950] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "aduyYMxUaQZxT-e0YsB9FgAAAE8"]
[Sun Apr 12 22:55:29.987295 2026] [:error] [pid 26600:tid 26632] [client 4.223.67.199:62017] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "aduyYe1YwAZiXhQKLYpuRAAAAYM"]
[Sun Apr 12 22:55:31.316054 2026] [:error] [pid 25329:tid 25374] [client 4.223.67.199:19966] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "aduyY2dcIYsS8Iyaj13ZrQAAAIA"]
[Sun Apr 12 22:55:32.921985 2026] [:error] [pid 60280:tid 60282] [client 4.223.67.199:25524] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "aduyZHBlLnDOYuIykkgLmAAAAcA"]
[Sun Apr 12 22:55:34.002984 2026] [:error] [pid 60280:tid 60294] [client 4.223.67.199:6307] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "aduyZnBlLnDOYuIykkgLnQAAAcw"]
[Sun Apr 12 22:55:36.492559 2026] [:error] [pid 60280:tid 60290] [client 4.223.67.199:6288] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "aduyaHBlLnDOYuIykkgLpAAAAcg"]
[Sun Apr 12 22:55:37.658882 2026] [:error] [pid 25329:tid 25411] [client 4.223.67.199:25868] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "aduyaWdcIYsS8Iyaj13ZtwAAAJQ"]
[Sun Apr 12 22:55:38.693165 2026] [:error] [pid 25437:tid 25462] [client 4.223.67.199:19934] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "aduyanf97wYZje1ep_OKVwAAANc"]
[Sun Apr 12 22:55:39.882008 2026] [:error] [pid 60280:tid 60295] [client 4.223.67.199:25901] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "aduya3BlLnDOYuIykkgLrAAAAc0"]
[Sun Apr 12 22:55:41.098489 2026] [:error] [pid 60280:tid 60300] [client 4.223.67.199:62049] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "aduybXBlLnDOYuIykkgLsQAAAdI"]
[Sun Apr 12 22:55:42.355504 2026] [:error] [pid 60280:tid 60306] [client 4.223.67.199:54061] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "aduybnBlLnDOYuIykkgLuwAAAdg"]
[Sun Apr 12 22:55:44.807886 2026] [:error] [pid 25327:tid 25344] [client 4.223.67.199:25479] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "aduycC6h2tZEVJo9JFIPjAAAAAg"]
[Sun Apr 12 22:55:47.183456 2026] [:error] [pid 25437:tid 25448] [client 4.223.67.199:62018] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "aduyc3f97wYZje1ep_OKXwAAAMk"]
[Sun Apr 12 22:55:48.284824 2026] [:error] [pid 60280:tid 60292] [client 4.223.67.199:47522] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aduydHBlLnDOYuIykkgL5AAAAco"]
[Sun Apr 12 22:55:49.133465 2026] [:error] [pid 60280:tid 60285] [client 4.223.67.199:41075] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aduydXBlLnDOYuIykkgL7gAAAcM"]
[Sun Apr 12 22:55:50.452349 2026] [:error] [pid 26567:tid 26574] [client 4.223.67.199:42489] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aduydnhRpg6ptWFyFx3aCwAAAQU"]
[Sun Apr 12 22:55:51.300666 2026] [:error] [pid 25329:tid 25402] [client 4.223.67.199:20505] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aduyd2dcIYsS8Iyaj13ZywAAAI8"]
[Sun Apr 12 22:55:53.234463 2026] [:error] [pid 60280:tid 60289] [client 4.223.67.199:54022] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "aduyeXBlLnDOYuIykkgMGAAAAcc"]
[Sun Apr 12 22:55:53.987169 2026] [:error] [pid 25328:tid 25396] [client 4.223.67.199:41051] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "aduyecxUaQZxT-e0YsB9KAAAAFM"]
[Sun Apr 12 22:55:55.150822 2026] [proxy_fcgi:error] [pid 60280:tid 60299] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:55.414126 2026] [proxy_fcgi:error] [pid 60280:tid 60304] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:55.686009 2026] [proxy_fcgi:error] [pid 60280:tid 60297] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:55.964292 2026] [proxy_fcgi:error] [pid 60280:tid 60289] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:56.249150 2026] [proxy_fcgi:error] [pid 60280:tid 60299] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:56.512480 2026] [proxy_fcgi:error] [pid 60280:tid 60296] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:56.781529 2026] [proxy_fcgi:error] [pid 60280:tid 60284] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:57.056131 2026] [proxy_fcgi:error] [pid 60280:tid 60282] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:57.319687 2026] [proxy_fcgi:error] [pid 60280:tid 60300] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:57.588732 2026] [proxy_fcgi:error] [pid 60280:tid 60299] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:57.853088 2026] [proxy_fcgi:error] [pid 60280:tid 60292] [client 4.223.67.199:25534] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:55:58.166835 2026] [:error] [pid 60280:tid 60291] [client 4.223.67.199:25534] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "aduyfnBlLnDOYuIykkgMWgAAAck"]
[Sun Apr 12 22:55:59.164485 2026] [:error] [pid 26599:tid 26606] [client 4.223.67.199:41019] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "aduyf3G89LXoQbk_rwDwGQAAAUQ"]
[Sun Apr 12 22:56:00.379185 2026] [:error] [pid 25327:tid 25339] [client 4.223.67.199:19965] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "aduygC6h2tZEVJo9JFIPowAAAAM"]
[Sun Apr 12 22:56:01.034903 2026] [:error] [pid 25437:tid 25450] [client 4.223.67.199:47581] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "aduygXf97wYZje1ep_OKbAAAAMs"]
[Sun Apr 12 22:56:01.956085 2026] [:error] [pid 25329:tid 25374] [client 4.223.67.199:21658] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "aduygWdcIYsS8Iyaj13Z1QAAAIA"]
[Sun Apr 12 22:56:02.832004 2026] [:error] [pid 60280:tid 60290] [client 4.223.67.199:29614] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "aduygnBlLnDOYuIykkgMbgAAAcg"]
[Sun Apr 12 22:56:04.806631 2026] [:error] [pid 26567:tid 26592] [client 4.223.67.199:54020] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "aduyhHhRpg6ptWFyFx3aEwAAARc"]
[Sun Apr 12 22:56:06.685146 2026] [:error] [pid 25327:tid 25359] [client 4.223.67.199:21642] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "aduyhi6h2tZEVJo9JFIP0wAAABc"]
[Sun Apr 12 22:56:08.872381 2026] [:error] [pid 60280:tid 60302] [client 4.223.67.199:29623] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "aduyiHBlLnDOYuIykkgMdQAAAdQ"]
[Sun Apr 12 22:56:09.678364 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:6791] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "aduyiS6h2tZEVJo9JFIP8QAAABY"]
[Sun Apr 12 22:56:12.793950 2026] [:error] [pid 25329:tid 25374] [client 4.223.67.199:53621] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "aduyjGdcIYsS8Iyaj13Z3gAAAIA"]
[Sun Apr 12 22:56:14.624929 2026] [:error] [pid 60280:tid 60288] [client 4.223.67.199:21673] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zample.php"] [unique_id "aduyjnBlLnDOYuIykkgMfgAAAcY"]
[Sun Apr 12 22:56:16.252592 2026] [:error] [pid 25328:tid 25372] [client 4.223.67.199:57753] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aduykMxUaQZxT-e0YsB9PwAAAEc"]
[Sun Apr 12 22:56:18.248453 2026] [:error] [pid 25329:tid 25402] [client 4.223.67.199:29613] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aduykmdcIYsS8Iyaj13Z6QAAAI8"]
[Sun Apr 12 22:56:18.842828 2026] [:error] [pid 60280:tid 60282] [client 4.223.67.199:20508] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aduyknBlLnDOYuIykkgMggAAAcA"]
[Sun Apr 12 22:56:19.794978 2026] [:error] [pid 25329:tid 25388] [client 4.223.67.199:41054] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aduyk2dcIYsS8Iyaj13Z7QAAAIc"]
[Sun Apr 12 22:56:20.667483 2026] [:error] [pid 60280:tid 60292] [client 4.223.67.199:35272] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "aduylHBlLnDOYuIykkgMigAAAco"]
[Sun Apr 12 22:56:21.477295 2026] [:error] [pid 25327:tid 25348] [client 4.223.67.199:35317] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "aduylS6h2tZEVJo9JFIQQQAAAAw"]
[Sun Apr 12 22:56:22.178935 2026] [:error] [pid 25328:tid 25389] [client 4.223.67.199:6827] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "aduylsxUaQZxT-e0YsB9SQAAAFA"]
[Sun Apr 12 22:56:22.809243 2026] [:error] [pid 60280:tid 60287] [client 4.223.67.199:20525] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "aduylnBlLnDOYuIykkgMlgAAAcU"]
[Sun Apr 12 22:56:23.622964 2026] [:error] [pid 60280:tid 60298] [client 4.223.67.199:21350] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "aduyl3BlLnDOYuIykkgMmgAAAdA"]
[Sun Apr 12 22:56:24.610938 2026] [:error] [pid 25327:tid 25352] [client 4.223.67.199:6837] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "aduymC6h2tZEVJo9JFIQQwAAABA"]
[Sun Apr 12 22:56:26.651541 2026] [:error] [pid 60280:tid 60305] [client 4.223.67.199:33378] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "aduymnBlLnDOYuIykkgMrAAAAdc"]
[Sun Apr 12 22:56:27.838961 2026] [:error] [pid 25327:tid 25341] [client 4.223.67.199:33357] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "aduymy6h2tZEVJo9JFIQRgAAAAU"]
[Sun Apr 12 22:56:29.028176 2026] [:error] [pid 25329:tid 25412] [client 4.223.67.199:46854] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "aduynWdcIYsS8Iyaj13Z-wAAAJU"]
[Sun Apr 12 22:56:30.622659 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:29576] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "aduyni6h2tZEVJo9JFIQTQAAABY"]
[Sun Apr 12 22:56:31.394552 2026] [:error] [pid 25327:tid 25336] [client 4.223.67.199:53593] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "aduyny6h2tZEVJo9JFIQUQAAAAA"]
[Sun Apr 12 22:56:32.592027 2026] [:error] [pid 25437:tid 25457] [client 4.223.67.199:6829] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "aduyoHf97wYZje1ep_OKewAAANI"]
[Sun Apr 12 22:56:34.299749 2026] [:error] [pid 25437:tid 25453] [client 4.223.67.199:53568] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduyonf97wYZje1ep_OKfgAAAM4"]
[Sun Apr 12 22:56:35.155799 2026] [:error] [pid 25329:tid 25376] [client 4.223.67.199:22045] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduyo2dcIYsS8Iyaj13Z_wAAAIE"]
[Sun Apr 12 22:56:38.445034 2026] [:error] [pid 25327:tid 25360] [client 4.223.67.199:38767] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduypi6h2tZEVJo9JFIQZAAAABg"]
[Sun Apr 12 22:56:40.143864 2026] [:error] [pid 25328:tid 25389] [client 4.223.67.199:37239] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduyqMxUaQZxT-e0YsB9XgAAAFA"]
[Sun Apr 12 22:56:41.278249 2026] [:error] [pid 60280:tid 60303] [client 4.223.67.199:21689] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aduyqXBlLnDOYuIykkgMvQAAAdU"]
[Sun Apr 12 22:56:43.686343 2026] [:error] [pid 25327:tid 25356] [client 4.223.67.199:53571] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aduyqy6h2tZEVJo9JFIQcQAAABQ"]
[Sun Apr 12 22:56:47.531634 2026] [:error] [pid 25328:tid 25370] [client 4.223.67.199:38752] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aduyr8xUaQZxT-e0YsB9aQAAAEY"]
[Sun Apr 12 22:56:48.765491 2026] [:error] [pid 25327:tid 25359] [client 4.223.67.199:35307] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aduysC6h2tZEVJo9JFIQgwAAABc"]
[Sun Apr 12 22:56:49.958946 2026] [:error] [pid 25327:tid 25340] [client 4.223.67.199:21371] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "aduysS6h2tZEVJo9JFIQjQAAAAQ"]
[Sun Apr 12 22:56:52.520644 2026] [:error] [pid 25328:tid 25408] [client 4.223.67.199:37223] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "aduytMxUaQZxT-e0YsB9bAAAAFg"]
[Sun Apr 12 22:56:55.964315 2026] [:error] [pid 25437:tid 25449] [client 4.223.67.199:33385] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sf.php"] [unique_id "aduyt3f97wYZje1ep_OKkgAAAMo"]
[Sun Apr 12 22:56:57.992330 2026] [proxy_fcgi:error] [pid 25329:tid 25374] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:58.279250 2026] [proxy_fcgi:error] [pid 25329:tid 25395] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:58.548524 2026] [proxy_fcgi:error] [pid 25329:tid 25415] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:58.828560 2026] [proxy_fcgi:error] [pid 25329:tid 25388] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:59.097369 2026] [proxy_fcgi:error] [pid 25329:tid 25397] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:59.559271 2026] [proxy_fcgi:error] [pid 25329:tid 25378] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:56:59.821755 2026] [proxy_fcgi:error] [pid 25329:tid 25412] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:57:00.371857 2026] [proxy_fcgi:error] [pid 25329:tid 25400] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:57:00.648711 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:57:00.915202 2026] [proxy_fcgi:error] [pid 25329:tid 25414] [client 4.223.67.199:24824] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:57:01.175214 2026] [:error] [pid 25329:tid 25404] [client 4.223.67.199:24824] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "aduyvWdcIYsS8Iyaj13aIgAAAJA"]
[Sun Apr 12 22:57:02.888793 2026] [:error] [pid 25329:tid 25412] [client 4.223.67.199:24810] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "aduyvmdcIYsS8Iyaj13aKwAAAJU"]
[Sun Apr 12 22:57:03.791101 2026] [:error] [pid 25329:tid 25407] [client 4.223.67.199:59503] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "aduyv2dcIYsS8Iyaj13aMAAAAJI"]
[Sun Apr 12 22:57:05.213545 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:42400] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f6.php"] [unique_id "aduywS6h2tZEVJo9JFIQqwAAABY"]
[Sun Apr 12 22:57:05.803829 2026] [:error] [pid 25327:tid 25338] [client 4.223.67.199:38721] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aduywS6h2tZEVJo9JFIQrAAAAAI"]
[Sun Apr 12 22:57:06.772025 2026] [:error] [pid 25437:tid 25446] [client 4.223.67.199:27003] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aduywnf97wYZje1ep_OKnAAAAMc"]
[Sun Apr 12 22:57:07.680355 2026] [:error] [pid 25329:tid 25402] [client 4.223.67.199:24795] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aduyw2dcIYsS8Iyaj13aNgAAAI8"]
[Sun Apr 12 22:57:09.109774 2026] [:error] [pid 25327:tid 25357] [client 4.223.67.199:34628] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aduyxS6h2tZEVJo9JFIQtAAAABU"]
[Sun Apr 12 22:57:09.965487 2026] [:error] [pid 25327:tid 25337] [client 4.223.67.199:24336] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "aduyxS6h2tZEVJo9JFIQuQAAAAE"]
[Sun Apr 12 22:57:11.445128 2026] [:error] [pid 60280:tid 60290] [client 4.223.67.199:27504] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "aduyx3BlLnDOYuIykkgM6QAAAcg"]
[Sun Apr 12 22:57:14.080390 2026] [:error] [pid 60280:tid 60295] [client 4.223.67.199:26975] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "aduyynBlLnDOYuIykkgM7AAAAc0"]
[Sun Apr 12 22:57:15.545812 2026] [:error] [pid 25329:tid 25400] [client 4.223.67.199:59514] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/style.php"] [unique_id "aduyy2dcIYsS8Iyaj13aQAAAAI4"]
[Sun Apr 12 22:57:16.354067 2026] [:error] [pid 26567:tid 26588] [client 4.223.67.199:6723] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aduyzHhRpg6ptWFyFx3aWwAAARM"]
[Sun Apr 12 22:57:17.164027 2026] [:error] [pid 25328:tid 25403] [client 4.223.67.199:26973] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aduyzcxUaQZxT-e0YsB9ewAAAFY"]
[Sun Apr 12 22:57:18.706292 2026] [:error] [pid 25437:tid 25441] [client 4.223.67.199:24806] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aduyznf97wYZje1ep_OKnwAAAMI"]
[Sun Apr 12 22:57:19.730997 2026] [:error] [pid 25329:tid 25406] [client 4.223.67.199:22058] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aduyz2dcIYsS8Iyaj13aRQAAAJE"]
[Sun Apr 12 22:57:22.444830 2026] [:error] [pid 60280:tid 60300] [client 4.223.67.199:34662] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduy0nBlLnDOYuIykkgNDwAAAdI"]
[Sun Apr 12 22:57:23.533108 2026] [:error] [pid 25327:tid 25347] [client 4.223.67.199:59287] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduy0y6h2tZEVJo9JFIQ0QAAAAs"]
[Sun Apr 12 22:57:24.277867 2026] [:error] [pid 26599:tid 26619] [client 4.223.67.199:34625] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduy1HG89LXoQbk_rwDwOQAAAVE"]
[Sun Apr 12 22:57:26.050413 2026] [:error] [pid 26599:tid 26610] [client 4.223.67.199:29077] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduy1nG89LXoQbk_rwDwQQAAAUg"]
[Sun Apr 12 22:57:29.417601 2026] [:error] [pid 60280:tid 60294] [client 4.223.67.199:44369] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aduy2XBlLnDOYuIykkgNMAAAAcw"]
[Sun Apr 12 22:57:30.648895 2026] [:error] [pid 25328:tid 25379] [client 4.223.67.199:27433] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aduy2sxUaQZxT-e0YsB9kAAAAEs"]
[Sun Apr 12 22:57:32.200199 2026] [:error] [pid 25328:tid 25403] [client 4.223.67.199:37147] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aduy3MxUaQZxT-e0YsB9kwAAAFY"]
[Sun Apr 12 22:57:34.677558 2026] [:error] [pid 26600:tid 26644] [client 4.223.67.199:7131] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aduy3u1YwAZiXhQKLYpujAAAAY8"]
[Sun Apr 12 22:57:37.070307 2026] [:error] [pid 25329:tid 25409] [client 4.223.67.199:44414] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aduy4WdcIYsS8Iyaj13aVgAAAJM"]
[Sun Apr 12 22:57:40.545765 2026] [:error] [pid 25327:tid 25337] [client 4.223.67.199:23940] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aduy5C6h2tZEVJo9JFIQ5QAAAAE"]
[Sun Apr 12 22:57:42.371806 2026] [:error] [pid 25328:tid 25396] [client 4.223.67.199:6357] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aduy5sxUaQZxT-e0YsB9qAAAAFM"]
[Sun Apr 12 22:57:43.886978 2026] [:error] [pid 26567:tid 26586] [client 4.223.67.199:54081] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aduy53hRpg6ptWFyFx3aZAAAARE"]
[Sun Apr 12 22:57:45.827995 2026] [:error] [pid 26567:tid 26582] [client 4.223.67.199:57171] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aduy6XhRpg6ptWFyFx3aZQAAAQ0"]
[Sun Apr 12 22:57:47.201071 2026] [:error] [pid 25328:tid 25403] [client 4.223.67.199:20872] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aduy68xUaQZxT-e0YsB9sQAAAFY"]
[Sun Apr 12 22:57:47.980331 2026] [:error] [pid 26599:tid 26608] [client 4.223.67.199:7085] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aduy63G89LXoQbk_rwDwTwAAAUY"]
[Sun Apr 12 22:57:51.001019 2026] [:error] [pid 25328:tid 25385] [client 4.223.67.199:37806] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aduy78xUaQZxT-e0YsB9tgAAAE4"]
[Sun Apr 12 22:57:52.203672 2026] [:error] [pid 60280:tid 60291] [client 4.223.67.199:57161] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aduy8HBlLnDOYuIykkgNXQAAAck"]
[Sun Apr 12 22:57:53.742915 2026] [:error] [pid 60280:tid 60294] [client 4.223.67.199:57164] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aduy8XBlLnDOYuIykkgNXgAAAcw"]
[Sun Apr 12 22:57:54.855000 2026] [:error] [pid 25328:tid 25372] [client 4.223.67.199:24706] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aduy8sxUaQZxT-e0YsB9vAAAAEc"]
[Sun Apr 12 22:57:59.101083 2026] [:error] [pid 25327:tid 25351] [client 4.223.67.199:54085] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aduy9y6h2tZEVJo9JFIRAAAAAA8"]
[Sun Apr 12 22:57:59.815545 2026] [:error] [pid 25437:tid 25443] [client 4.223.67.199:44997] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plss3.php"] [unique_id "aduy93f97wYZje1ep_OKwgAAAMQ"]
[Sun Apr 12 22:58:00.849518 2026] [proxy_fcgi:error] [pid 60280:tid 60287] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:01.219316 2026] [proxy_fcgi:error] [pid 60280:tid 60295] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:01.486459 2026] [proxy_fcgi:error] [pid 60280:tid 60294] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:02.028096 2026] [proxy_fcgi:error] [pid 60280:tid 60283] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:02.293281 2026] [proxy_fcgi:error] [pid 60280:tid 60284] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:02.557562 2026] [proxy_fcgi:error] [pid 60280:tid 60297] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:02.822538 2026] [proxy_fcgi:error] [pid 60280:tid 60303] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:03.624554 2026] [proxy_fcgi:error] [pid 60280:tid 60306] [client 4.223.67.199:37787] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:58:03.891885 2026] [:error] [pid 60280:tid 60292] [client 4.223.67.199:37787] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aduy-3BlLnDOYuIykkgNcwAAAco"]
[Sun Apr 12 22:58:05.589517 2026] [:error] [pid 25437:tid 25441] [client 4.223.67.199:46328] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aduy_Xf97wYZje1ep_OKzAAAAMI"]
[Sun Apr 12 22:58:07.277720 2026] [:error] [pid 25327:tid 25346] [client 4.223.67.199:37821] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aduy_y6h2tZEVJo9JFIREgAAAAo"]
[Sun Apr 12 22:58:08.627202 2026] [:error] [pid 25327:tid 25336] [client 4.223.67.199:31398] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aduzAC6h2tZEVJo9JFIRGQAAAAA"]
[Sun Apr 12 22:58:10.346820 2026] [:error] [pid 26567:tid 26581] [client 4.223.67.199:57181] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "aduzAnhRpg6ptWFyFx3aeAAAAQw"]
[Sun Apr 12 22:58:11.382361 2026] [:error] [pid 25328:tid 25373] [client 4.223.67.199:45021] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "aduzA8xUaQZxT-e0YsB9xAAAAEg"]
[Sun Apr 12 22:58:19.163861 2026] [:error] [pid 25437:tid 25455] [client 4.223.67.199:29667] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "aduzC3f97wYZje1ep_OK2wAAANA"]
[Sun Apr 12 22:58:22.779266 2026] [:error] [pid 26600:tid 26652] [client 4.223.67.199:58874] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods.php"] [unique_id "aduzDu1YwAZiXhQKLYpuugAAAZc"]
[Sun Apr 12 22:58:24.102036 2026] [:error] [pid 25328:tid 25365] [client 4.223.67.199:32153] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aduzEMxUaQZxT-e0YsB93AAAAEE"]
[Sun Apr 12 22:58:26.589140 2026] [:error] [pid 25328:tid 25396] [client 4.223.67.199:46968] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aduzEsxUaQZxT-e0YsB95QAAAFM"]
[Sun Apr 12 22:58:27.602333 2026] [:error] [pid 25327:tid 25342] [client 4.223.67.199:32722] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aduzEy6h2tZEVJo9JFIRLQAAAAY"]
[Sun Apr 12 22:58:31.631659 2026] [:error] [pid 25328:tid 25373] [client 4.223.67.199:51778] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aduzF8xUaQZxT-e0YsB96gAAAEg"]
[Sun Apr 12 22:58:35.290940 2026] [:error] [pid 25327:tid 25337] [client 4.223.67.199:6661] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "aduzGy6h2tZEVJo9JFIROgAAAAE"]
[Sun Apr 12 22:58:37.348788 2026] [:error] [pid 60280:tid 60299] [client 4.223.67.199:51738] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "aduzHXBlLnDOYuIykkgNtQAAAdE"]
[Sun Apr 12 22:58:39.768653 2026] [:error] [pid 25437:tid 25459] [client 4.223.67.199:28124] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "aduzH3f97wYZje1ep_OK6wAAANQ"]
[Sun Apr 12 22:58:40.785473 2026] [:error] [pid 25328:tid 25366] [client 4.223.67.199:56649] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "aduzIMxUaQZxT-e0YsB9-AAAAEI"]
[Sun Apr 12 22:58:42.329895 2026] [:error] [pid 26599:tid 26609] [client 4.223.67.199:23209] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aduzInG89LXoQbk_rwDwYgAAAUc"]
[Sun Apr 12 22:58:43.636805 2026] [:error] [pid 60280:tid 60292] [client 4.223.67.199:58812] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aduzI3BlLnDOYuIykkgNxwAAAco"]
[Sun Apr 12 22:58:44.405087 2026] [:error] [pid 60280:tid 60304] [client 4.223.67.199:56658] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aduzJHBlLnDOYuIykkgNygAAAdY"]
[Sun Apr 12 22:58:45.438736 2026] [:error] [pid 60280:tid 60305] [client 4.223.67.199:35887] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aduzJXBlLnDOYuIykkgN0wAAAdc"]
[Sun Apr 12 22:58:46.243361 2026] [:error] [pid 60280:tid 60304] [client 4.223.67.199:35223] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "aduzJnBlLnDOYuIykkgN2wAAAdY"]
[Sun Apr 12 22:58:47.786119 2026] [:error] [pid 25329:tid 25406] [client 4.223.67.199:46271] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "aduzJ2dcIYsS8Iyaj13aoAAAAJE"]
[Sun Apr 12 22:58:49.006353 2026] [:error] [pid 25328:tid 25385] [client 4.223.67.199:21289] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "aduzKcxUaQZxT-e0YsB-BwAAAE4"]
[Sun Apr 12 22:58:50.356562 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:21294] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "aduzKi6h2tZEVJo9JFIRaQAAABY"]
[Sun Apr 12 22:58:51.656937 2026] [:error] [pid 26599:tid 26620] [client 4.223.67.199:39443] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzK3G89LXoQbk_rwDwagAAAVI"]
[Sun Apr 12 22:58:52.722644 2026] [:error] [pid 25327:tid 25341] [client 4.223.67.199:32658] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzLC6h2tZEVJo9JFIRbgAAAAU"]
[Sun Apr 12 22:58:53.875869 2026] [:error] [pid 26567:tid 26586] [client 4.223.67.199:6545] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzLXhRpg6ptWFyFx3alQAAARE"]
[Sun Apr 12 22:58:54.551010 2026] [:error] [pid 25329:tid 25400] [client 4.223.67.199:32690] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzLmdcIYsS8Iyaj13aqAAAAI4"]
[Sun Apr 12 22:58:56.326038 2026] [:error] [pid 60280:tid 60300] [client 4.223.67.199:59035] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aduzMHBlLnDOYuIykkgN-wAAAdI"]
[Sun Apr 12 22:59:01.059317 2026] [:error] [pid 25327:tid 25355] [client 4.223.67.199:39466] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aduzNS6h2tZEVJo9JFIReQAAABM"]
[Sun Apr 12 22:59:02.996338 2026] [:error] [pid 26567:tid 26580] [client 4.223.67.199:22444] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "aduzNnhRpg6ptWFyFx3anwAAAQs"]
[Sun Apr 12 22:59:05.542865 2026] [proxy_fcgi:error] [pid 26600:tid 26632] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:05.806125 2026] [proxy_fcgi:error] [pid 26600:tid 26644] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:06.070789 2026] [proxy_fcgi:error] [pid 26600:tid 26631] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:06.336476 2026] [proxy_fcgi:error] [pid 26600:tid 26650] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:06.600032 2026] [proxy_fcgi:error] [pid 26600:tid 26641] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:07.134882 2026] [proxy_fcgi:error] [pid 26600:tid 26633] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:07.675779 2026] [proxy_fcgi:error] [pid 26600:tid 26642] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:07.941043 2026] [proxy_fcgi:error] [pid 26600:tid 26638] [client 4.223.67.199:22807] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 22:59:09.748965 2026] [:error] [pid 26600:tid 26652] [client 4.223.67.199:22807] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduzPe1YwAZiXhQKLYpvAwAAAZc"]
[Sun Apr 12 22:59:12.227010 2026] [:error] [pid 60280:tid 60286] [client 4.223.67.199:22804] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduzQHBlLnDOYuIykkgOKAAAAcQ"]
[Sun Apr 12 22:59:13.102426 2026] [:error] [pid 25329:tid 25381] [client 4.223.67.199:19889] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduzQWdcIYsS8Iyaj13awwAAAIM"]
[Sun Apr 12 22:59:16.670978 2026] [:error] [pid 26600:tid 26631] [client 4.223.67.199:25111] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aduzRO1YwAZiXhQKLYpvCAAAAYI"]
[Sun Apr 12 22:59:18.189300 2026] [:error] [pid 25327:tid 25358] [client 4.223.67.199:19536] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduzRi6h2tZEVJo9JFIRhAAAABY"]
[Sun Apr 12 22:59:20.293650 2026] [:error] [pid 60280:tid 60288] [client 4.223.67.199:62243] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduzSHBlLnDOYuIykkgOPgAAAcY"]
[Sun Apr 12 22:59:22.697942 2026] [:error] [pid 60280:tid 60298] [client 4.223.67.199:6532] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduzSnBlLnDOYuIykkgORgAAAdA"]
[Sun Apr 12 22:59:25.184070 2026] [:error] [pid 26599:tid 26608] [client 4.223.67.199:44028] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduzTXG89LXoQbk_rwDwfgAAAUY"]
[Sun Apr 12 22:59:25.806137 2026] [:error] [pid 26567:tid 26591] [client 4.223.67.199:20988] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduzTXhRpg6ptWFyFx3asQAAARY"]
[Sun Apr 12 22:59:27.192867 2026] [:error] [pid 25327:tid 25345] [client 4.223.67.199:20555] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduzTy6h2tZEVJo9JFIRnAAAAAk"]
[Sun Apr 12 22:59:28.602361 2026] [:error] [pid 25328:tid 25368] [client 4.223.67.199:26449] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduzUMxUaQZxT-e0YsB-NwAAAEQ"]
[Sun Apr 12 22:59:29.603498 2026] [:error] [pid 25327:tid 25337] [client 4.223.67.199:59795] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "aduzUS6h2tZEVJo9JFIRoAAAAAE"]
[Sun Apr 12 22:59:30.866139 2026] [:error] [pid 60280:tid 60303] [client 4.223.67.199:6580] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aduzUnBlLnDOYuIykkgOSQAAAdU"]
[Sun Apr 12 22:59:32.174059 2026] [:error] [pid 25327:tid 25352] [client 4.223.67.199:39469] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aduzVC6h2tZEVJo9JFIRpAAAABA"]
[Sun Apr 12 22:59:33.614049 2026] [:error] [pid 25327:tid 25343] [client 4.223.67.199:35900] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aduzVS6h2tZEVJo9JFIRqAAAAAc"]
[Sun Apr 12 22:59:35.187232 2026] [:error] [pid 25328:tid 25368] [client 4.223.67.199:6260] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aduzV8xUaQZxT-e0YsB-QgAAAEQ"]
[Sun Apr 12 22:59:36.643821 2026] [:error] [pid 60280:tid 60302] [client 4.223.67.199:61300] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "aduzWHBlLnDOYuIykkgOTQAAAdQ"]
[Sun Apr 12 22:59:38.853483 2026] [:error] [pid 25327:tid 25352] [client 4.223.67.199:33920] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "aduzWi6h2tZEVJo9JFIRrAAAABA"]
[Sun Apr 12 22:59:40.457493 2026] [:error] [pid 26599:tid 26615] [client 4.223.67.199:34573] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "aduzXHG89LXoQbk_rwDwhQAAAU0"]
[Sun Apr 12 22:59:41.671420 2026] [:error] [pid 25328:tid 25379] [client 4.223.67.199:53548] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "aduzXcxUaQZxT-e0YsB-VAAAAEs"]
[Sun Apr 12 22:59:43.501868 2026] [:error] [pid 25328:tid 25396] [client 4.223.67.199:52856] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aduzX8xUaQZxT-e0YsB-XgAAAFM"]
[Sun Apr 12 22:59:44.794494 2026] [:error] [pid 25437:tid 25454] [client 4.223.67.199:29670] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aduzYHf97wYZje1ep_OLCQAAAM8"]
[Sun Apr 12 22:59:45.996305 2026] [:error] [pid 25437:tid 25456] [client 4.223.67.199:28580] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aduzYXf97wYZje1ep_OLDAAAANE"]
[Sun Apr 12 22:59:47.320038 2026] [:error] [pid 25437:tid 25459] [client 4.223.67.199:58834] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aduzY3f97wYZje1ep_OLDgAAANQ"]
[Sun Apr 12 22:59:48.083367 2026] [:error] [pid 25437:tid 25442] [client 4.223.67.199:32160] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aduzZHf97wYZje1ep_OLEQAAAMM"]
[Sun Apr 12 22:59:48.840575 2026] [:error] [pid 26567:tid 26593] [client 4.223.67.199:37783] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aduzZHhRpg6ptWFyFx3awwAAARg"]
[Sun Apr 12 22:59:50.500392 2026] [:error] [pid 25437:tid 25461] [client 4.223.67.199:24764] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aduzZnf97wYZje1ep_OLFQAAANY"]
[Sun Apr 12 22:59:51.262422 2026] [:error] [pid 25329:tid 25388] [client 4.223.67.199:32212] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aduzZ2dcIYsS8Iyaj13a6gAAAIc"]
[Sun Apr 12 22:59:52.662251 2026] [:error] [pid 25329:tid 25402] [client 4.223.67.199:7057] [client 4.223.67.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aduzaGdcIYsS8Iyaj13a6wAAAI8"]
[Sun Apr 12 22:59:53.479823 2026] [:error] [pid 25328:tid 25385] [client 4.223.67.199:58253] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aduzacxUaQZxT-e0YsB-bAAAAE4"]
[Sun Apr 12 22:59:54.416225 2026] [:error] [pid 60280:tid 60288] [client 4.223.67.199:41247] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aduzanBlLnDOYuIykkgOUgAAAcY"]
[Sun Apr 12 22:59:55.379732 2026] [:error] [pid 26600:tid 26636] [client 4.223.67.199:34643] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aduza-1YwAZiXhQKLYpvJwAAAYc"]
[Sun Apr 12 22:59:56.639622 2026] [:error] [pid 26599:tid 26616] [client 4.223.67.199:28613] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aduzbHG89LXoQbk_rwDwiwAAAU4"]
[Sun Apr 12 22:59:59.388113 2026] [:error] [pid 26599:tid 26619] [client 4.223.67.199:46898] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aduzb3G89LXoQbk_rwDwjQAAAVE"]
[Sun Apr 12 23:00:00.712327 2026] [:error] [pid 25328:tid 25394] [client 4.223.67.199:26419] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aduzcMxUaQZxT-e0YsB-eQAAAFI"]
[Sun Apr 12 23:00:02.185158 2026] [:error] [pid 60280:tid 60303] [client 4.223.67.199:61350] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aduzcnBlLnDOYuIykkgOVQAAAdU"]
[Sun Apr 12 23:00:03.429653 2026] [:error] [pid 25329:tid 25388] [client 4.223.67.199:53607] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aduzc2dcIYsS8Iyaj13a8QAAAIc"]
[Sun Apr 12 23:00:06.253598 2026] [:error] [pid 25329:tid 25382] [client 4.223.67.199:28634] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aduzdmdcIYsS8Iyaj13a-AAAAIQ"]
[Sun Apr 12 23:00:08.211826 2026] [:error] [pid 25329:tid 25378] [client 4.223.67.199:33370] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aduzeGdcIYsS8Iyaj13bAAAAAII"]
[Sun Apr 12 23:00:09.919832 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:10.194820 2026] [proxy_fcgi:error] [pid 25329:tid 25413] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:10.475875 2026] [proxy_fcgi:error] [pid 25329:tid 25402] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:10.740498 2026] [proxy_fcgi:error] [pid 25329:tid 25409] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:11.002832 2026] [proxy_fcgi:error] [pid 25329:tid 25411] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:11.269611 2026] [proxy_fcgi:error] [pid 25329:tid 25374] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:11.661294 2026] [proxy_fcgi:error] [pid 25329:tid 25404] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:11.925226 2026] [proxy_fcgi:error] [pid 25329:tid 25388] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:12.202115 2026] [proxy_fcgi:error] [pid 25329:tid 25414] [client 4.223.67.199:61352] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:00:12.724897 2026] [:error] [pid 25329:tid 25393] [client 4.223.67.199:61352] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "aduzfGdcIYsS8Iyaj13bEAAAAIo"]
[Sun Apr 12 23:00:15.000177 2026] [:error] [pid 60280:tid 60287] [client 4.223.67.199:21688] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "aduzfnBlLnDOYuIykkgOdQAAAcU"]
[Sun Apr 12 23:00:19.465382 2026] [:error] [pid 25329:tid 25402] [client 4.223.67.199:22496] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "aduzg2dcIYsS8Iyaj13bEQAAAI8"]
[Sun Apr 12 23:00:20.581642 2026] [:error] [pid 25328:tid 25394] [client 4.223.67.199:42491] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "aduzhMxUaQZxT-e0YsB-iQAAAFI"]
[Sun Apr 12 23:00:21.683643 2026] [:error] [pid 25437:tid 25441] [client 4.223.67.199:45545] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aduzhXf97wYZje1ep_OLHQAAAMI"]
[Sun Apr 12 23:00:23.503982 2026] [:error] [pid 60280:tid 60294] [client 4.223.67.199:6447] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aduzh3BlLnDOYuIykkgOjAAAAcw"]
[Sun Apr 12 23:00:24.877308 2026] [:error] [pid 26600:tid 26632] [client 4.223.67.199:23632] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aduziO1YwAZiXhQKLYpvQwAAAYM"]
[Sun Apr 12 23:00:25.846248 2026] [:error] [pid 25328:tid 25391] [client 4.223.67.199:45541] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aduzicxUaQZxT-e0YsB-lQAAAFE"]
[Sun Apr 12 23:00:27.019652 2026] [:error] [pid 26599:tid 26610] [client 4.223.67.199:23646] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aduzi3G89LXoQbk_rwDwmwAAAUg"]
[Sun Apr 12 23:00:30.834595 2026] [:error] [pid 60280:tid 60305] [client 4.223.67.199:6882] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aduzjnBlLnDOYuIykkgOnAAAAdc"]
[Sun Apr 12 23:00:31.999274 2026] [:error] [pid 60280:tid 60303] [client 4.223.67.199:21707] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aduzj3BlLnDOYuIykkgOogAAAdU"]
[Sun Apr 12 23:00:34.555718 2026] [:error] [pid 26600:tid 26640] [client 4.223.67.199:41803] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aduzku1YwAZiXhQKLYpvTAAAAYs"]
[Sun Apr 12 23:00:39.096021 2026] [:error] [pid 25327:tid 25353] [client 4.223.67.199:58351] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "aduzly6h2tZEVJo9JFIR1QAAABE"]
[Sun Apr 12 23:00:40.649722 2026] [:error] [pid 25327:tid 25351] [client 4.223.67.199:25944] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "aduzmC6h2tZEVJo9JFIR3gAAAA8"]
[Sun Apr 12 23:00:42.746161 2026] [:error] [pid 25327:tid 25349] [client 4.223.67.199:44614] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "aduzmi6h2tZEVJo9JFIR6QAAAA0"]
[Sun Apr 12 23:00:43.697577 2026] [:error] [pid 25437:tid 25441] [client 4.223.67.199:40312] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "aduzm3f97wYZje1ep_OLKQAAAMI"]
[Sun Apr 12 23:00:45.109777 2026] [:error] [pid 25327:tid 25355] [client 4.223.67.199:47566] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "aduznS6h2tZEVJo9JFIR8gAAABM"]
[Sun Apr 12 23:00:46.461966 2026] [:error] [pid 25437:tid 25445] [client 4.223.67.199:41820] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "aduznnf97wYZje1ep_OLLQAAAMY"]
[Sun Apr 12 23:00:47.787020 2026] [:error] [pid 25327:tid 25336] [client 4.223.67.199:36496] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "aduzny6h2tZEVJo9JFIR-wAAAAA"]
[Sun Apr 12 23:00:49.408591 2026] [:error] [pid 25327:tid 25357] [client 4.223.67.199:19180] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "aduzoS6h2tZEVJo9JFISCgAAABU"]
[Sun Apr 12 23:00:51.190186 2026] [:error] [pid 25327:tid 25349] [client 4.223.67.199:41832] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "aduzoy6h2tZEVJo9JFISEgAAAA0"]
[Sun Apr 12 23:00:53.825620 2026] [:error] [pid 25327:tid 25357] [client 4.223.67.199:29182] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "aduzpS6h2tZEVJo9JFISIQAAABU"]
[Sun Apr 12 23:00:56.078933 2026] [:error] [pid 60280:tid 60297] [client 4.223.67.199:29132] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "aduzqHBlLnDOYuIykkgO2AAAAc8"]
[Sun Apr 12 23:00:58.532790 2026] [:error] [pid 25327:tid 25343] [client 4.223.67.199:7021] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "aduzqi6h2tZEVJo9JFISJgAAAAc"]
[Sun Apr 12 23:00:59.800323 2026] [:error] [pid 25437:tid 25441] [client 4.223.67.199:41032] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzq3f97wYZje1ep_OLNgAAAMI"]
[Sun Apr 12 23:01:02.594585 2026] [:error] [pid 25329:tid 25397] [client 4.223.67.199:19966] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzrmdcIYsS8Iyaj13bIgAAAIw"]
[Sun Apr 12 23:01:04.066315 2026] [:error] [pid 25328:tid 25372] [client 4.223.67.199:7028] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzsMxUaQZxT-e0YsB-0wAAAEc"]
[Sun Apr 12 23:01:06.142507 2026] [:error] [pid 25437:tid 25444] [client 4.223.67.199:44971] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aduzsnf97wYZje1ep_OLPgAAAMU"]
[Sun Apr 12 23:01:07.044673 2026] [:error] [pid 26600:tid 26638] [client 4.223.67.199:29125] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "aduzs-1YwAZiXhQKLYpvaQAAAYk"]
[Sun Apr 12 23:01:08.965422 2026] [:error] [pid 26600:tid 26636] [client 4.223.67.199:7037] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "aduztO1YwAZiXhQKLYpvbgAAAYc"]
[Sun Apr 12 23:01:10.253054 2026] [:error] [pid 25327:tid 25341] [client 4.223.67.199:19914] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "aduzti6h2tZEVJo9JFISOgAAAAU"]
[Sun Apr 12 23:01:11.151951 2026] [:error] [pid 25327:tid 25353] [client 4.223.67.199:40271] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "aduzty6h2tZEVJo9JFISPgAAABE"]
[Sun Apr 12 23:01:12.043291 2026] [proxy_fcgi:error] [pid 25329:tid 25406] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:12.319415 2026] [proxy_fcgi:error] [pid 25329:tid 25378] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:12.599976 2026] [proxy_fcgi:error] [pid 25329:tid 25397] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:12.861689 2026] [proxy_fcgi:error] [pid 25329:tid 25399] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:13.123830 2026] [proxy_fcgi:error] [pid 25329:tid 25395] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:13.386514 2026] [proxy_fcgi:error] [pid 25329:tid 25384] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:13.654662 2026] [proxy_fcgi:error] [pid 25329:tid 25381] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:13.918213 2026] [proxy_fcgi:error] [pid 25329:tid 25390] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:14.178614 2026] [proxy_fcgi:error] [pid 25329:tid 25412] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:14.489903 2026] [proxy_fcgi:error] [pid 25329:tid 25413] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 23:01:14.753332 2026] [proxy_fcgi:error] [pid 25329:tid 25386] [client 4.223.67.199:21749] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:47.547386 2026] [proxy_fcgi:error] [pid 33943:tid 34017] [client 20.151.218.28:44991] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:47.764406 2026] [proxy_fcgi:error] [pid 33943:tid 34014] [client 20.151.218.28:44991] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:47.972050 2026] [proxy_fcgi:error] [pid 33943:tid 34025] [client 20.151.218.28:44991] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:48.181399 2026] [proxy_fcgi:error] [pid 33943:tid 34023] [client 20.151.218.28:44991] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:49.070378 2026] [proxy_fcgi:error] [pid 33943:tid 34020] [client 20.151.218.28:44991] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:22:49.292222 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:44991] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwNKayoXuZjocnxM5Fg6gAAAIY"]
[Mon Apr 13 05:22:50.038319 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:44881] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwNKhNHe8geO_lMeFaUgQAAAEY"]
[Mon Apr 13 05:22:51.224450 2026] [:error] [pid 33941:tid 33959] [client 20.151.218.28:44953] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwNK2_NKERAxgG-rYM0BwAAAAg"]
[Mon Apr 13 05:22:52.263635 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:44943] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mah/xBrain.php"] [unique_id "adwNLPSiQ_PJjlY5EhzwkgAAAMg"]
[Mon Apr 13 05:22:53.238678 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:44901] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pegi.PhP8"] [unique_id "adwNLeCGj3EEJtCwa0ODigAAAQs"]
[Mon Apr 13 05:22:53.745042 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:44879] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pegi.PhP8"] [unique_id "adwNLeCGj3EEJtCwa0ODjwAAAQo"]
[Mon Apr 13 05:22:54.657564 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:45002] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pegi.PhP8"] [unique_id "adwNLuCGj3EEJtCwa0ODlQAAARA"]
[Mon Apr 13 05:22:55.377181 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:44900] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pegi.PhP8"] [unique_id "adwNL6yoXuZjocnxM5Fg8gAAAIw"]
[Mon Apr 13 05:22:55.949168 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:44979] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwNL6yoXuZjocnxM5Fg9wAAAIQ"]
[Mon Apr 13 05:22:56.420904 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:45001] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwNMOCGj3EEJtCwa0ODngAAAQE"]
[Mon Apr 13 05:22:56.866510 2026] [:error] [pid 33943:tid 34024] [client 20.151.218.28:44864] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwNMKyoXuZjocnxM5Fg-gAAAJI"]
[Mon Apr 13 05:22:57.298987 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:45023] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwNMayoXuZjocnxM5Fg_QAAAIo"]
[Mon Apr 13 05:22:57.798761 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:44870] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/suck.php"] [unique_id "adwNMeCGj3EEJtCwa0ODowAAAQk"]
[Mon Apr 13 05:22:58.493948 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:45046] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/suck.php"] [unique_id "adwNMvSiQ_PJjlY5EhzwnAAAAM0"]
[Mon Apr 13 05:22:59.015656 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:44952] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/suck.php"] [unique_id "adwNMxNHe8geO_lMeFaUkQAAAFg"]
[Mon Apr 13 05:23:00.020659 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:44872] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/suck.php"] [unique_id "adwNNPSiQ_PJjlY5EhzwowAAAMU"]
[Mon Apr 13 05:23:01.040482 2026] [:error] [pid 33941:tid 33951] [client 20.151.218.28:44833] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hikudpno.php"] [unique_id "adwNNW_NKERAxgG-rYM0EwAAAAE"]
[Mon Apr 13 05:23:01.680654 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:45044] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hikudpno.php"] [unique_id "adwNNeCGj3EEJtCwa0ODrQAAAQc"]
[Mon Apr 13 05:23:02.223865 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:45008] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hikudpno.php"] [unique_id "adwNNvSiQ_PJjlY5EhzwqwAAAMg"]
[Mon Apr 13 05:23:02.870183 2026] [:error] [pid 33942:tid 33994] [client 20.151.218.28:45025] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hikudpno.php"] [unique_id "adwNNhNHe8geO_lMeFaUnAAAAE8"]
[Mon Apr 13 05:23:04.524983 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:44987] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwNOOCGj3EEJtCwa0ODsAAAAQ0"]
[Mon Apr 13 05:23:06.158749 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:44949] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwNOuCGj3EEJtCwa0ODtgAAAQc"]
[Mon Apr 13 05:23:06.874315 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:44800] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwNOqyoXuZjocnxM5FhGgAAAIc"]
[Mon Apr 13 05:23:07.715904 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:45038] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwNO_SiQ_PJjlY5EhzwtAAAAMs"]
[Mon Apr 13 05:23:08.700524 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:44976] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sure.php"] [unique_id "adwNPOCGj3EEJtCwa0ODwgAAAQE"]
[Mon Apr 13 05:23:09.447455 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:45026] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sure.php"] [unique_id "adwNPeCGj3EEJtCwa0ODxQAAAQs"]
[Mon Apr 13 05:23:09.893668 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:44977] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sure.php"] [unique_id "adwNPeCGj3EEJtCwa0ODyQAAAQY"]
[Mon Apr 13 05:23:10.519161 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:44986] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sure.php"] [unique_id "adwNPhNHe8geO_lMeFaUrAAAAEg"]
[Mon Apr 13 05:23:10.974813 2026] [:error] [pid 11325:tid 11348] [client 20.151.218.28:44982] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "adwNPuCGj3EEJtCwa0ODzAAAARU"]
[Mon Apr 13 05:23:11.494739 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:45019] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "adwNP-CGj3EEJtCwa0ODzgAAAQE"]
[Mon Apr 13 05:23:12.068829 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:44887] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "adwNQBNHe8geO_lMeFaUsQAAAEI"]
[Mon Apr 13 05:23:12.572045 2026] [:error] [pid 33942:tid 33999] [client 20.151.218.28:44801] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "adwNQBNHe8geO_lMeFaUswAAAFQ"]
[Mon Apr 13 05:23:12.990360 2026] [:error] [pid 11325:tid 11351] [client 20.151.218.28:44904] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4563.php"] [unique_id "adwNQOCGj3EEJtCwa0OD1QAAARg"]
[Mon Apr 13 05:23:13.435314 2026] [:error] [pid 33943:tid 34008] [client 20.151.218.28:45037] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4563.php"] [unique_id "adwNQayoXuZjocnxM5FhJAAAAII"]
[Mon Apr 13 05:23:13.906063 2026] [:error] [pid 33942:tid 33979] [client 20.151.218.28:45018] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4563.php"] [unique_id "adwNQRNHe8geO_lMeFaUtwAAAEA"]
[Mon Apr 13 05:23:14.392021 2026] [:error] [pid 33941:tid 33957] [client 20.151.218.28:44935] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4563.php"] [unique_id "adwNQm_NKERAxgG-rYM0KwAAAAc"]
[Mon Apr 13 05:23:14.830085 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:44809] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wunaivpl.php"] [unique_id "adwNQuCGj3EEJtCwa0OD2QAAAQ0"]
[Mon Apr 13 05:23:15.284342 2026] [:error] [pid 11325:tid 11330] [client 20.151.218.28:44805] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wunaivpl.php"] [unique_id "adwNQ-CGj3EEJtCwa0OD2wAAAQM"]
[Mon Apr 13 05:23:15.713454 2026] [:error] [pid 11325:tid 11332] [client 20.151.218.28:44825] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wunaivpl.php"] [unique_id "adwNQ-CGj3EEJtCwa0OD3QAAAQU"]
[Mon Apr 13 05:23:16.191425 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:44838] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wunaivpl.php"] [unique_id "adwNRBNHe8geO_lMeFaUvQAAAEI"]
[Mon Apr 13 05:23:16.697888 2026] [:error] [pid 34048:tid 34050] [client 20.151.218.28:44844] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reune.php"] [unique_id "adwNRPSiQ_PJjlY5EhzwyQAAAMA"]
[Mon Apr 13 05:23:17.176366 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:44921] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reune.php"] [unique_id "adwNReCGj3EEJtCwa0OD5AAAAQk"]
[Mon Apr 13 05:23:17.683020 2026] [:error] [pid 11325:tid 11329] [client 20.151.218.28:44886] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reune.php"] [unique_id "adwNReCGj3EEJtCwa0OD5wAAAQI"]
[Mon Apr 13 05:23:18.141122 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:44984] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/reune.php"] [unique_id "adwNRuCGj3EEJtCwa0OD7AAAARM"]
[Mon Apr 13 05:23:18.852094 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:44829] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dw.php"] [unique_id "adwNRuCGj3EEJtCwa0OD8gAAAQc"]
[Mon Apr 13 05:23:19.978153 2026] [:error] [pid 11325:tid 11329] [client 20.151.218.28:44966] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dw.php"] [unique_id "adwNR-CGj3EEJtCwa0OD8wAAAQI"]
[Mon Apr 13 05:23:20.495916 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44936] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dw.php"] [unique_id "adwNSOCGj3EEJtCwa0OD9QAAARc"]
[Mon Apr 13 05:23:21.025332 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:44802] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dw.php"] [unique_id "adwNSeCGj3EEJtCwa0OD9wAAARI"]
[Mon Apr 13 05:23:22.524356 2026] [:error] [pid 34048:tid 34061] [client 20.151.218.28:44884] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwNSvSiQ_PJjlY5Ehzw4AAAAMs"]
[Mon Apr 13 05:23:23.377362 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:44826] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwNS2_NKERAxgG-rYM0MwAAABE"]
[Mon Apr 13 05:23:24.158336 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:44962] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwNTKyoXuZjocnxM5FhOwAAAIU"]
[Mon Apr 13 05:23:24.676834 2026] [:error] [pid 33942:tid 33998] [client 20.151.218.28:44912] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwNTBNHe8geO_lMeFaUzgAAAFM"]
[Mon Apr 13 05:23:25.187821 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:44804] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellx.php"] [unique_id "adwNTRNHe8geO_lMeFaU0gAAAEg"]
[Mon Apr 13 05:23:25.831432 2026] [:error] [pid 33942:tid 33988] [client 20.151.218.28:45017] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellx.php"] [unique_id "adwNTRNHe8geO_lMeFaU1gAAAEk"]
[Mon Apr 13 05:23:26.583555 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:44908] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellx.php"] [unique_id "adwNTuCGj3EEJtCwa0OD_QAAAQ4"]
[Mon Apr 13 05:23:27.041449 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:44895] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shellx.php"] [unique_id "adwNT-CGj3EEJtCwa0OD_wAAARM"]
[Mon Apr 13 05:23:27.568874 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:44890] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/l.php"] [unique_id "adwNT-CGj3EEJtCwa0OEAgAAARA"]
[Mon Apr 13 05:23:28.048054 2026] [:error] [pid 34048:tid 34071] [client 20.151.218.28:44840] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/l.php"] [unique_id "adwNUPSiQ_PJjlY5Ehzw-AAAANU"]
[Mon Apr 13 05:23:28.817783 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:44767] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/l.php"] [unique_id "adwNUBNHe8geO_lMeFaU2AAAAEM"]
[Mon Apr 13 05:23:29.501111 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:44927] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/l.php"] [unique_id "adwNURNHe8geO_lMeFaU2gAAAFE"]
[Mon Apr 13 05:23:30.348551 2026] [:error] [pid 33942:tid 33993] [client 20.151.218.28:44831] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "adwNUhNHe8geO_lMeFaU3QAAAE4"]
[Mon Apr 13 05:23:31.138607 2026] [:error] [pid 11325:tid 11332] [client 20.151.218.28:44816] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "adwNU-CGj3EEJtCwa0OEDwAAAQU"]
[Mon Apr 13 05:23:31.659866 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:44837] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "adwNU-CGj3EEJtCwa0OEEwAAAQA"]
[Mon Apr 13 05:23:32.139570 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:44985] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "adwNVBNHe8geO_lMeFaU4AAAAEg"]
[Mon Apr 13 05:23:32.695376 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:44988] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lnexugel.php"] [unique_id "adwNVOCGj3EEJtCwa0OEGQAAARE"]
[Mon Apr 13 05:23:33.265087 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:44803] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lnexugel.php"] [unique_id "adwNVayoXuZjocnxM5FhSQAAAIQ"]
[Mon Apr 13 05:23:33.778858 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:44876] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lnexugel.php"] [unique_id "adwNVayoXuZjocnxM5FhSgAAAIk"]
[Mon Apr 13 05:23:34.451519 2026] [:error] [pid 33942:tid 33991] [client 20.151.218.28:44907] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lnexugel.php"] [unique_id "adwNVhNHe8geO_lMeFaU4wAAAEw"]
[Mon Apr 13 05:23:35.133640 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:44905] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/online.php"] [unique_id "adwNV6yoXuZjocnxM5FhSwAAAJM"]
[Mon Apr 13 05:23:36.087486 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:44897] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/online.php"] [unique_id "adwNWBNHe8geO_lMeFaU5QAAAEM"]
[Mon Apr 13 05:23:36.834927 2026] [:error] [pid 33943:tid 34006] [client 20.151.218.28:45040] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/online.php"] [unique_id "adwNWKyoXuZjocnxM5FhTQAAAIA"]
[Mon Apr 13 05:23:37.452610 2026] [:error] [pid 33942:tid 34002] [client 20.151.218.28:44990] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/online.php"] [unique_id "adwNWRNHe8geO_lMeFaU6QAAAFc"]
[Mon Apr 13 05:23:37.983954 2026] [:error] [pid 33941:tid 33955] [client 20.151.218.28:44741] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/up-kon.php"] [unique_id "adwNWW_NKERAxgG-rYM0QgAAAAU"]
[Mon Apr 13 05:23:38.961677 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:44993] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/up-kon.php"] [unique_id "adwNWuCGj3EEJtCwa0OELwAAAQE"]
[Mon Apr 13 05:23:39.734423 2026] [:error] [pid 11325:tid 11346] [client 20.151.218.28:44961] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/up-kon.php"] [unique_id "adwNW-CGj3EEJtCwa0OEMwAAARM"]
[Mon Apr 13 05:23:41.131645 2026] [:error] [pid 33943:tid 34010] [client 20.151.218.28:44955] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/up-kon.php"] [unique_id "adwNXayoXuZjocnxM5FhWwAAAIQ"]
[Mon Apr 13 05:23:47.611199 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:44902] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/word.php"] [unique_id "adwNYxNHe8geO_lMeFaVAwAAAFg"]
[Mon Apr 13 05:23:51.248651 2026] [proxy_fcgi:error] [pid 11325:tid 11345] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:51.683979 2026] [proxy_fcgi:error] [pid 11325:tid 11340] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:51.919242 2026] [proxy_fcgi:error] [pid 11325:tid 11332] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:52.377813 2026] [proxy_fcgi:error] [pid 11325:tid 11329] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:52.587678 2026] [proxy_fcgi:error] [pid 11325:tid 11330] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:52.798788 2026] [proxy_fcgi:error] [pid 11325:tid 11343] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:53.008833 2026] [proxy_fcgi:error] [pid 11325:tid 11350] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:53.259729 2026] [proxy_fcgi:error] [pid 11325:tid 11337] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:53.488358 2026] [proxy_fcgi:error] [pid 11325:tid 11332] [client 20.151.218.28:44865] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:23:53.730729 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:44865] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moderation.php"] [unique_id "adwNaeCGj3EEJtCwa0OEYgAAAQc"]
[Mon Apr 13 05:23:54.483560 2026] [:error] [pid 11325:tid 11335] [client 20.151.218.28:45020] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moderation.php"] [unique_id "adwNauCGj3EEJtCwa0OEagAAAQg"]
[Mon Apr 13 05:23:55.093332 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:44994] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moderation.php"] [unique_id "adwNa-CGj3EEJtCwa0OEbQAAARE"]
[Mon Apr 13 05:23:55.503841 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:44915] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moderation.php"] [unique_id "adwNa-CGj3EEJtCwa0OEcwAAAQ8"]
[Mon Apr 13 05:23:55.924027 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:45030] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple-shell.php"] [unique_id "adwNaxNHe8geO_lMeFaVEAAAAEY"]
[Mon Apr 13 05:23:56.334447 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:44909] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple-shell.php"] [unique_id "adwNbOCGj3EEJtCwa0OEegAAAQs"]
[Mon Apr 13 05:23:56.756637 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:44835] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple-shell.php"] [unique_id "adwNbKyoXuZjocnxM5FhngAAAIo"]
[Mon Apr 13 05:23:57.192683 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:44894] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple-shell.php"] [unique_id "adwNbayoXuZjocnxM5FhoQAAAIw"]
[Mon Apr 13 05:23:57.630524 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:45045] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwNbeCGj3EEJtCwa0OEggAAAQ8"]
[Mon Apr 13 05:23:58.100068 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:44945] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwNbqyoXuZjocnxM5FhqgAAAIc"]
[Mon Apr 13 05:23:58.542244 2026] [:error] [pid 11325:tid 11332] [client 20.151.218.28:44869] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwNbuCGj3EEJtCwa0OEhQAAAQU"]
[Mon Apr 13 05:23:58.993508 2026] [:error] [pid 11325:tid 11327] [client 20.151.218.28:44782] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwNbuCGj3EEJtCwa0OEiQAAAQA"]
[Mon Apr 13 05:23:59.419327 2026] [:error] [pid 33943:tid 34024] [client 20.151.218.28:44919] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwNb6yoXuZjocnxM5FhsAAAAJI"]
[Mon Apr 13 05:23:59.867577 2026] [:error] [pid 33943:tid 34007] [client 20.151.218.28:44922] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwNb6yoXuZjocnxM5FhswAAAIE"]
[Mon Apr 13 05:24:00.360666 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:44842] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwNcPSiQ_PJjlY5EhzxOQAAAM0"]
[Mon Apr 13 05:24:00.798046 2026] [:error] [pid 34048:tid 34068] [client 20.151.218.28:44874] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwNcPSiQ_PJjlY5EhzxOwAAANI"]
[Mon Apr 13 05:24:01.299273 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:44857] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bsr.php"] [unique_id "adwNceCGj3EEJtCwa0OEkgAAARI"]
[Mon Apr 13 05:24:01.872572 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:44867] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bsr.php"] [unique_id "adwNceCGj3EEJtCwa0OEkwAAAQo"]
[Mon Apr 13 05:24:02.305883 2026] [:error] [pid 33943:tid 34013] [client 20.151.218.28:44854] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bsr.php"] [unique_id "adwNcqyoXuZjocnxM5FhvwAAAIc"]
[Mon Apr 13 05:24:02.803828 2026] [:error] [pid 34048:tid 34052] [client 20.151.218.28:45033] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bsr.php"] [unique_id "adwNcvSiQ_PJjlY5EhzxPQAAAMI"]
[Mon Apr 13 05:24:03.281268 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:44807] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ans.php"] [unique_id "adwNcxNHe8geO_lMeFaVFQAAAEc"]
[Mon Apr 13 05:24:03.732142 2026] [:error] [pid 33941:tid 33952] [client 20.151.218.28:44880] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ans.php"] [unique_id "adwNc2_NKERAxgG-rYM0ZAAAAAI"]
[Mon Apr 13 05:24:04.316786 2026] [:error] [pid 33943:tid 34024] [client 20.151.218.28:44885] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ans.php"] [unique_id "adwNdKyoXuZjocnxM5FhxAAAAJI"]
[Mon Apr 13 05:24:04.758950 2026] [:error] [pid 34048:tid 34051] [client 20.151.218.28:44749] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ans.php"] [unique_id "adwNdPSiQ_PJjlY5EhzxPwAAAME"]
[Mon Apr 13 05:24:05.261488 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:44992] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "adwNdayoXuZjocnxM5FhygAAAIo"]
[Mon Apr 13 05:24:05.694280 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:44852] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "adwNdayoXuZjocnxM5FhzQAAAIw"]
[Mon Apr 13 05:24:06.184088 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:44841] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "adwNdqyoXuZjocnxM5Fh0AAAAIY"]
[Mon Apr 13 05:24:07.098497 2026] [:error] [pid 33943:tid 34025] [client 20.151.218.28:44851] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "adwNd6yoXuZjocnxM5Fh1AAAAJM"]
[Mon Apr 13 05:24:07.617186 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:44757] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Core-wp.php"] [unique_id "adwNd-CGj3EEJtCwa0OEmwAAAQ4"]
[Mon Apr 13 05:24:08.446649 2026] [:error] [pid 33941:tid 33971] [client 20.151.218.28:45035] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Core-wp.php"] [unique_id "adwNeG_NKERAxgG-rYM0agAAABQ"]
[Mon Apr 13 05:24:10.093120 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:44814] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Core-wp.php"] [unique_id "adwNeuCGj3EEJtCwa0OEpgAAAQw"]
[Mon Apr 13 05:24:11.038394 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44822] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Core-wp.php"] [unique_id "adwNe-CGj3EEJtCwa0OErAAAARc"]
[Mon Apr 13 05:24:12.044153 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:44999] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/src.php"] [unique_id "adwNfOCGj3EEJtCwa0OEswAAAQ0"]
[Mon Apr 13 05:24:13.043114 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:44981] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/src.php"] [unique_id "adwNffSiQ_PJjlY5EhzxSAAAANg"]
[Mon Apr 13 05:24:13.552504 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:44898] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/src.php"] [unique_id "adwNfRNHe8geO_lMeFaVHAAAAEY"]
[Mon Apr 13 05:24:14.022659 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:44745] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/src.php"] [unique_id "adwNfhNHe8geO_lMeFaVHQAAAEo"]
[Mon Apr 13 05:24:14.628251 2026] [:error] [pid 33942:tid 33981] [client 20.151.218.28:44821] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pomo/v2.php"] [unique_id "adwNfhNHe8geO_lMeFaVHgAAAEI"]
[Mon Apr 13 05:24:15.667917 2026] [:error] [pid 11325:tid 11328] [client 20.151.218.28:44832] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pomo/v2.php"] [unique_id "adwNf-CGj3EEJtCwa0OEzQAAAQE"]
[Mon Apr 13 05:24:16.128048 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44888] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pomo/v2.php"] [unique_id "adwNgOCGj3EEJtCwa0OE0QAAARc"]
[Mon Apr 13 05:24:16.919864 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:44737] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pomo/v2.php"] [unique_id "adwNgOCGj3EEJtCwa0OE1gAAAQw"]
[Mon Apr 13 05:24:17.655245 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:44923] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nxd.php"] [unique_id "adwNgRNHe8geO_lMeFaVIAAAAEc"]
[Mon Apr 13 05:24:19.779421 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44761] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nxd.php"] [unique_id "adwNg-CGj3EEJtCwa0OE5wAAARc"]
[Mon Apr 13 05:24:21.041432 2026] [:error] [pid 33943:tid 34023] [client 20.151.218.28:44893] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nxd.php"] [unique_id "adwNhayoXuZjocnxM5Fh3AAAAJE"]
[Mon Apr 13 05:24:22.670609 2026] [:error] [pid 33943:tid 34030] [client 20.151.218.28:44790] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nxd.php"] [unique_id "adwNhqyoXuZjocnxM5Fh4AAAAJg"]
[Mon Apr 13 05:24:23.907198 2026] [:error] [pid 33943:tid 34024] [client 20.151.218.28:44972] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/payout.php"] [unique_id "adwNh6yoXuZjocnxM5Fh4wAAAJI"]
[Mon Apr 13 05:24:24.848493 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:44748] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/payout.php"] [unique_id "adwNiOCGj3EEJtCwa0OE-wAAAQw"]
[Mon Apr 13 05:24:27.058418 2026] [:error] [pid 11325:tid 11344] [client 20.151.218.28:44917] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/payout.php"] [unique_id "adwNi-CGj3EEJtCwa0OFCAAAARE"]
[Mon Apr 13 05:24:29.781674 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:44746] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/payout.php"] [unique_id "adwNjayoXuZjocnxM5Fh6QAAAJQ"]
[Mon Apr 13 05:24:30.612683 2026] [:error] [pid 33943:tid 34030] [client 20.151.218.28:44776] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxquidwa.php"] [unique_id "adwNjqyoXuZjocnxM5Fh7AAAAJg"]
[Mon Apr 13 05:24:31.130425 2026] [:error] [pid 33941:tid 33956] [client 20.151.218.28:44971] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxquidwa.php"] [unique_id "adwNj2_NKERAxgG-rYM0dgAAAAY"]
[Mon Apr 13 05:24:31.739607 2026] [:error] [pid 33941:tid 33974] [client 20.151.218.28:44751] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxquidwa.php"] [unique_id "adwNj2_NKERAxgG-rYM0dwAAABc"]
[Mon Apr 13 05:24:32.241514 2026] [:error] [pid 33941:tid 33970] [client 20.151.218.28:44896] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uxquidwa.php"] [unique_id "adwNkG_NKERAxgG-rYM0eQAAABM"]
[Mon Apr 13 05:24:33.137111 2026] [:error] [pid 33941:tid 33967] [client 20.151.218.28:44892] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/combined.php"] [unique_id "adwNkW_NKERAxgG-rYM0ewAAABA"]
[Mon Apr 13 05:24:34.469007 2026] [:error] [pid 34048:tid 34053] [client 20.151.218.28:44775] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/combined.php"] [unique_id "adwNkvSiQ_PJjlY5EhzxWAAAAMM"]
[Mon Apr 13 05:24:35.663564 2026] [:error] [pid 34048:tid 34057] [client 20.151.218.28:44905] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/combined.php"] [unique_id "adwNk_SiQ_PJjlY5EhzxWgAAAMc"]
[Mon Apr 13 05:24:39.751703 2026] [:error] [pid 34048:tid 34073] [client 20.151.218.28:44783] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/combined.php"] [unique_id "adwNl_SiQ_PJjlY5EhzxXAAAANc"]
[Mon Apr 13 05:24:42.499087 2026] [:error] [pid 33941:tid 33965] [client 20.151.218.28:44853] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mari.php"] [unique_id "adwNmm_NKERAxgG-rYM0gQAAAA4"]
[Mon Apr 13 05:24:44.086911 2026] [:error] [pid 33941:tid 33964] [client 20.151.218.28:44964] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mari.php"] [unique_id "adwNnG_NKERAxgG-rYM0hQAAAA0"]
[Mon Apr 13 05:24:45.454476 2026] [:error] [pid 33943:tid 34029] [client 20.151.218.28:44777] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mari.php"] [unique_id "adwNnayoXuZjocnxM5FiDgAAAJc"]
[Mon Apr 13 05:24:46.450867 2026] [:error] [pid 34048:tid 34064] [client 20.151.218.28:44924] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mari.php"] [unique_id "adwNnvSiQ_PJjlY5EhzxYgAAAM4"]
[Mon Apr 13 05:24:47.246345 2026] [:error] [pid 33942:tid 33994] [client 20.151.218.28:44834] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kodox.php"] [unique_id "adwNnxNHe8geO_lMeFaVQAAAAE8"]
[Mon Apr 13 05:24:47.989890 2026] [:error] [pid 33942:tid 33997] [client 20.151.218.28:45027] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kodox.php"] [unique_id "adwNnxNHe8geO_lMeFaVQQAAAFI"]
[Mon Apr 13 05:24:48.784030 2026] [:error] [pid 33942:tid 34003] [client 20.151.218.28:44970] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kodox.php"] [unique_id "adwNoBNHe8geO_lMeFaVRQAAAFg"]
[Mon Apr 13 05:24:49.503344 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:44828] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kodox.php"] [unique_id "adwNoayoXuZjocnxM5FiGgAAAIo"]
[Mon Apr 13 05:24:50.402413 2026] [:error] [pid 34048:tid 34066] [client 20.151.218.28:44850] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ak47shell.php"] [unique_id "adwNovSiQ_PJjlY5EhzxZAAAANA"]
[Mon Apr 13 05:24:51.257517 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:44830] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ak47shell.php"] [unique_id "adwNo6yoXuZjocnxM5FiIQAAAIk"]
[Mon Apr 13 05:24:51.970041 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:44960] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ak47shell.php"] [unique_id "adwNoxNHe8geO_lMeFaVSgAAAFA"]
[Mon Apr 13 05:24:52.641481 2026] [:error] [pid 33942:tid 33998] [client 20.151.218.28:44913] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ak47shell.php"] [unique_id "adwNpBNHe8geO_lMeFaVTQAAAFM"]
[Mon Apr 13 05:24:53.092463 2026] [proxy_fcgi:error] [pid 33942:tid 33985] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:53.348099 2026] [proxy_fcgi:error] [pid 33942:tid 33997] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:53.557182 2026] [proxy_fcgi:error] [pid 33942:tid 33981] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:53.847230 2026] [proxy_fcgi:error] [pid 33942:tid 33991] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:54.110610 2026] [proxy_fcgi:error] [pid 33942:tid 33982] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:54.338948 2026] [proxy_fcgi:error] [pid 33942:tid 33992] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:54.553466 2026] [proxy_fcgi:error] [pid 33942:tid 33995] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:55.113688 2026] [proxy_fcgi:error] [pid 33942:tid 33993] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:55.530096 2026] [proxy_fcgi:error] [pid 33942:tid 33979] [client 20.151.218.28:44812] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:24:55.793225 2026] [:error] [pid 33942:tid 33994] [client 20.151.218.28:44812] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pu.php"] [unique_id "adwNpxNHe8geO_lMeFaVZAAAAE8"]
[Mon Apr 13 05:24:56.360634 2026] [:error] [pid 33942:tid 33991] [client 20.151.218.28:45041] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pu.php"] [unique_id "adwNqBNHe8geO_lMeFaVZgAAAEw"]
[Mon Apr 13 05:24:56.815460 2026] [:error] [pid 33942:tid 33992] [client 20.151.218.28:44681] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pu.php"] [unique_id "adwNqBNHe8geO_lMeFaVZwAAAE0"]
[Mon Apr 13 05:24:57.253290 2026] [:error] [pid 33942:tid 33990] [client 20.151.218.28:44910] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pu.php"] [unique_id "adwNqRNHe8geO_lMeFaVaQAAAEs"]
[Mon Apr 13 05:24:57.813441 2026] [:error] [pid 33941:tid 33960] [client 20.151.218.28:44747] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/docs.php"] [unique_id "adwNqW_NKERAxgG-rYM0kgAAAAk"]
[Mon Apr 13 05:24:58.452767 2026] [:error] [pid 33942:tid 33979] [client 20.151.218.28:45053] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/docs.php"] [unique_id "adwNqhNHe8geO_lMeFaVawAAAEA"]
[Mon Apr 13 05:24:58.970795 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:44916] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/docs.php"] [unique_id "adwNquCGj3EEJtCwa0OFOAAAAQo"]
[Mon Apr 13 05:24:59.571663 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:44808] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/docs.php"] [unique_id "adwNqxNHe8geO_lMeFaVbQAAAEo"]
[Mon Apr 13 05:25:00.000966 2026] [:error] [pid 33942:tid 33991] [client 20.151.218.28:45003] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/cache.php"] [unique_id "adwNrBNHe8geO_lMeFaVbgAAAEw"]
[Mon Apr 13 05:25:00.424083 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:44930] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/cache.php"] [unique_id "adwNrPSiQ_PJjlY5EhzxcgAAAMQ"]
[Mon Apr 13 05:25:00.892441 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:44856] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/cache.php"] [unique_id "adwNrBNHe8geO_lMeFaVcQAAAFA"]
[Mon Apr 13 05:25:01.307744 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:44817] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/js/cache.php"] [unique_id "adwNrayoXuZjocnxM5FiLgAAAIM"]
[Mon Apr 13 05:25:01.837877 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:44740] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "adwNrayoXuZjocnxM5FiMQAAAI8"]
[Mon Apr 13 05:25:02.494298 2026] [:error] [pid 33942:tid 33986] [client 20.151.218.28:44861] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "adwNrhNHe8geO_lMeFaVcwAAAEc"]
[Mon Apr 13 05:25:03.094699 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:44906] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "adwNr-CGj3EEJtCwa0OFQAAAAQ8"]
[Mon Apr 13 05:25:03.732805 2026] [:error] [pid 11325:tid 11336] [client 20.151.218.28:44942] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "adwNr-CGj3EEJtCwa0OFRAAAAQk"]
[Mon Apr 13 05:25:04.229061 2026] [:error] [pid 11325:tid 11337] [client 20.151.218.28:44810] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XX.php"] [unique_id "adwNsOCGj3EEJtCwa0OFSgAAAQo"]
[Mon Apr 13 05:25:04.702184 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:44889] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XX.php"] [unique_id "adwNsOCGj3EEJtCwa0OFTQAAARA"]
[Mon Apr 13 05:25:05.185654 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:44754] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XX.php"] [unique_id "adwNsayoXuZjocnxM5FiOAAAAIo"]
[Mon Apr 13 05:25:05.664701 2026] [:error] [pid 33943:tid 34012] [client 20.151.218.28:44827] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/XX.php"] [unique_id "adwNsayoXuZjocnxM5FiOQAAAIY"]
[Mon Apr 13 05:25:06.332297 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:44947] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwNsqyoXuZjocnxM5FiPgAAAIM"]
[Mon Apr 13 05:25:08.395851 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:44933] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwNtBNHe8geO_lMeFaVdwAAAEM"]
[Mon Apr 13 05:25:08.855080 2026] [:error] [pid 33942:tid 33987] [client 20.151.218.28:44824] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwNtBNHe8geO_lMeFaVewAAAEg"]
[Mon Apr 13 05:25:09.303454 2026] [:error] [pid 34048:tid 34058] [client 20.151.218.28:44903] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwNtfSiQ_PJjlY5EhzxfgAAAMg"]
[Mon Apr 13 05:25:09.738470 2026] [:error] [pid 34048:tid 34065] [client 20.151.218.28:45009] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNtfSiQ_PJjlY5EhzxfwAAAM8"]
[Mon Apr 13 05:25:10.157416 2026] [:error] [pid 33942:tid 33988] [client 20.151.218.28:44855] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNthNHe8geO_lMeFaVgAAAAEk"]
[Mon Apr 13 05:25:10.621528 2026] [:error] [pid 33943:tid 34006] [client 20.151.218.28:44875] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNtqyoXuZjocnxM5FiSQAAAIA"]
[Mon Apr 13 05:25:11.152148 2026] [:error] [pid 33942:tid 33989] [client 20.151.218.28:44764] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwNtxNHe8geO_lMeFaVhgAAAEo"]
[Mon Apr 13 05:25:11.833356 2026] [:error] [pid 33942:tid 33982] [client 20.151.218.28:44974] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owlmailer.php"] [unique_id "adwNtxNHe8geO_lMeFaViAAAAEM"]
[Mon Apr 13 05:25:12.465720 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:44941] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owlmailer.php"] [unique_id "adwNuKyoXuZjocnxM5FiTgAAAI8"]
[Mon Apr 13 05:25:13.079402 2026] [:error] [pid 34048:tid 34057] [client 20.151.218.28:44763] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owlmailer.php"] [unique_id "adwNufSiQ_PJjlY5EhzxhgAAAMc"]
[Mon Apr 13 05:25:14.704867 2026] [:error] [pid 34048:tid 34072] [client 20.151.218.28:44785] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owlmailer.php"] [unique_id "adwNuvSiQ_PJjlY5EhzxigAAANY"]
[Mon Apr 13 05:25:17.838280 2026] [:error] [pid 11325:tid 11342] [client 20.151.218.28:44796] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F0x.php"] [unique_id "adwNveCGj3EEJtCwa0OFVgAAAQ8"]
[Mon Apr 13 05:25:19.676540 2026] [:error] [pid 33941:tid 33964] [client 20.151.218.28:45047] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F0x.php"] [unique_id "adwNv2_NKERAxgG-rYM0lwAAAA0"]
[Mon Apr 13 05:25:23.422981 2026] [:error] [pid 34048:tid 34055] [client 20.151.218.28:44908] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F0x.php"] [unique_id "adwNw_SiQ_PJjlY5EhzxlgAAAMU"]
[Mon Apr 13 05:25:24.230553 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:44818] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/F0x.php"] [unique_id "adwNxOCGj3EEJtCwa0OFdQAAAQY"]
[Mon Apr 13 05:25:25.268419 2026] [:error] [pid 33942:tid 33985] [client 20.151.218.28:44940] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rlpc.php"] [unique_id "adwNxRNHe8geO_lMeFaVngAAAEY"]
[Mon Apr 13 05:25:25.834841 2026] [:error] [pid 11325:tid 11340] [client 20.151.218.28:45006] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rlpc.php"] [unique_id "adwNxeCGj3EEJtCwa0OFfQAAAQ0"]
[Mon Apr 13 05:25:26.275800 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:44937] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rlpc.php"] [unique_id "adwNxuCGj3EEJtCwa0OFgwAAAQs"]
[Mon Apr 13 05:25:26.757505 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:44806] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rlpc.php"] [unique_id "adwNxuCGj3EEJtCwa0OFiAAAARY"]
[Mon Apr 13 05:25:27.192698 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:44769] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adwNx6yoXuZjocnxM5FiYAAAAIo"]
[Mon Apr 13 05:25:27.660919 2026] [:error] [pid 11325:tid 11335] [client 20.151.218.28:44839] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adwNx-CGj3EEJtCwa0OFjQAAAQg"]
[Mon Apr 13 05:25:28.162804 2026] [:error] [pid 33943:tid 34023] [client 20.151.218.28:44959] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adwNyKyoXuZjocnxM5FiYgAAAJE"]
[Mon Apr 13 05:25:28.627480 2026] [:error] [pid 33943:tid 34026] [client 20.151.218.28:44823] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adwNyKyoXuZjocnxM5FiZQAAAJQ"]
[Mon Apr 13 05:25:29.106543 2026] [:error] [pid 33942:tid 33991] [client 20.151.218.28:44758] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "adwNyRNHe8geO_lMeFaVoAAAAEw"]
[Mon Apr 13 05:25:29.538970 2026] [:error] [pid 33943:tid 34028] [client 20.151.218.28:44989] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "adwNyayoXuZjocnxM5FiaAAAAJY"]
[Mon Apr 13 05:25:29.966937 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:44676] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "adwNyayoXuZjocnxM5FiagAAAJA"]
[Mon Apr 13 05:25:30.416541 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:45039] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sale.php"] [unique_id "adwNyqyoXuZjocnxM5FibQAAAI4"]
[Mon Apr 13 05:25:30.835160 2026] [:error] [pid 33943:tid 34021] [client 20.151.218.28:44843] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ran.php"] [unique_id "adwNyqyoXuZjocnxM5FibgAAAI8"]
[Mon Apr 13 05:25:31.255079 2026] [:error] [pid 33943:tid 34016] [client 20.151.218.28:45051] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ran.php"] [unique_id "adwNy6yoXuZjocnxM5FicgAAAIo"]
[Mon Apr 13 05:25:31.692446 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:45021] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ran.php"] [unique_id "adwNy6yoXuZjocnxM5FicwAAAI0"]
[Mon Apr 13 05:25:32.107292 2026] [:error] [pid 33943:tid 34023] [client 20.151.218.28:45012] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ran.php"] [unique_id "adwNzKyoXuZjocnxM5FidAAAAJE"]
[Mon Apr 13 05:25:32.524206 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:44753] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k90.php"] [unique_id "adwNzOCGj3EEJtCwa0OFpAAAAQQ"]
[Mon Apr 13 05:25:32.940474 2026] [:error] [pid 11325:tid 11345] [client 20.151.218.28:45054] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k90.php"] [unique_id "adwNzOCGj3EEJtCwa0OFpwAAARI"]
[Mon Apr 13 05:25:33.399110 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:45031] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k90.php"] [unique_id "adwNzayoXuZjocnxM5FiegAAAIM"]
[Mon Apr 13 05:25:34.086392 2026] [:error] [pid 33943:tid 34022] [client 20.151.218.28:45048] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k90.php"] [unique_id "adwNzqyoXuZjocnxM5FifAAAAJA"]
[Mon Apr 13 05:25:34.510467 2026] [:error] [pid 33942:tid 33996] [client 20.151.218.28:44699] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/taff.php"] [unique_id "adwNzhNHe8geO_lMeFaVqQAAAFE"]
[Mon Apr 13 05:25:34.995498 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:44766] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/taff.php"] [unique_id "adwNzuCGj3EEJtCwa0OFsAAAAQc"]
[Mon Apr 13 05:25:35.505806 2026] [:error] [pid 33943:tid 34018] [client 20.151.218.28:44791] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/taff.php"] [unique_id "adwNz6yoXuZjocnxM5FifQAAAIw"]
[Mon Apr 13 05:25:35.955091 2026] [:error] [pid 33943:tid 34020] [client 20.151.218.28:44848] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/taff.php"] [unique_id "adwNz6yoXuZjocnxM5FifgAAAI4"]
[Mon Apr 13 05:25:36.411965 2026] [:error] [pid 34048:tid 34054] [client 20.151.218.28:44920] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/set.php"] [unique_id "adwN0PSiQ_PJjlY5EhzxpQAAAMQ"]
[Mon Apr 13 05:25:36.963124 2026] [:error] [pid 33943:tid 34015] [client 20.151.218.28:45050] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/set.php"] [unique_id "adwN0KyoXuZjocnxM5FigQAAAIk"]
[Mon Apr 13 05:25:37.442550 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:44679] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/set.php"] [unique_id "adwN0RNHe8geO_lMeFaVtwAAAFA"]
[Mon Apr 13 05:25:37.899452 2026] [:error] [pid 11325:tid 11338] [client 20.151.218.28:44882] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/set.php"] [unique_id "adwN0eCGj3EEJtCwa0OFuwAAAQs"]
[Mon Apr 13 05:25:38.342734 2026] [:error] [pid 34048:tid 34069] [client 20.151.218.28:44996] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "adwN0vSiQ_PJjlY5EhzxqQAAANM"]
[Mon Apr 13 05:25:38.924819 2026] [:error] [pid 33941:tid 33962] [client 20.151.218.28:45050] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "adwN0m_NKERAxgG-rYM0pgAAAAs"]
[Mon Apr 13 05:25:39.485805 2026] [:error] [pid 33943:tid 34027] [client 20.151.218.28:44693] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "adwN06yoXuZjocnxM5FihwAAAJU"]
[Mon Apr 13 05:25:39.910083 2026] [:error] [pid 34048:tid 34074] [client 20.151.218.28:44774] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "adwN0_SiQ_PJjlY5EhzxrAAAANg"]
[Mon Apr 13 05:25:40.327230 2026] [:error] [pid 34048:tid 34053] [client 20.151.218.28:45036] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssxsl.php"] [unique_id "adwN1PSiQ_PJjlY5EhzxrQAAAMM"]
[Mon Apr 13 05:25:40.850891 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44744] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssxsl.php"] [unique_id "adwN1OCGj3EEJtCwa0OFwAAAARc"]
[Mon Apr 13 05:25:41.388463 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:44883] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssxsl.php"] [unique_id "adwN1ayoXuZjocnxM5FijgAAAIU"]
[Mon Apr 13 05:25:42.082354 2026] [:error] [pid 33943:tid 34019] [client 20.151.218.28:44673] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssxsl.php"] [unique_id "adwN1qyoXuZjocnxM5FikAAAAI0"]
[Mon Apr 13 05:25:42.647164 2026] [:error] [pid 33943:tid 34009] [client 20.151.218.28:44965] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AE5VAL.php"] [unique_id "adwN1qyoXuZjocnxM5FimAAAAIM"]
[Mon Apr 13 05:25:43.061941 2026] [:error] [pid 33943:tid 34008] [client 20.151.218.28:45052] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AE5VAL.php"] [unique_id "adwN16yoXuZjocnxM5FimQAAAII"]
[Mon Apr 13 05:25:43.564037 2026] [:error] [pid 11325:tid 11334] [client 20.151.218.28:44934] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AE5VAL.php"] [unique_id "adwN1-CGj3EEJtCwa0OFxQAAAQc"]
[Mon Apr 13 05:25:44.177425 2026] [:error] [pid 33941:tid 33968] [client 20.151.218.28:44793] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/AE5VAL.php"] [unique_id "adwN2G_NKERAxgG-rYM0qQAAABE"]
[Mon Apr 13 05:25:44.648751 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:44760] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "adwN2OCGj3EEJtCwa0OFxwAAAQQ"]
[Mon Apr 13 05:25:45.080459 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:45005] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "adwN2eCGj3EEJtCwa0OFyQAAARc"]
[Mon Apr 13 05:25:45.507634 2026] [:error] [pid 11325:tid 11339] [client 20.151.218.28:44750] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "adwN2eCGj3EEJtCwa0OFywAAAQw"]
[Mon Apr 13 05:25:45.922067 2026] [:error] [pid 11325:tid 11349] [client 20.151.218.28:44836] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gold.php"] [unique_id "adwN2eCGj3EEJtCwa0OFzgAAARY"]
[Mon Apr 13 05:25:46.354379 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:45022] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gely.php"] [unique_id "adwN2uCGj3EEJtCwa0OF0AAAAQ4"]
[Mon Apr 13 05:25:46.796285 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:44859] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gely.php"] [unique_id "adwN2uCGj3EEJtCwa0OF0gAAAQY"]
[Mon Apr 13 05:25:47.256866 2026] [:error] [pid 11325:tid 11350] [client 20.151.218.28:44709] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gely.php"] [unique_id "adwN2-CGj3EEJtCwa0OF1wAAARc"]
[Mon Apr 13 05:25:47.687452 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:44680] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gely.php"] [unique_id "adwN2-CGj3EEJtCwa0OF2gAAARA"]
[Mon Apr 13 05:25:48.131491 2026] [:error] [pid 33941:tid 33953] [client 20.151.218.28:45015] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xBrain.php"] [unique_id "adwN3G_NKERAxgG-rYM0rAAAAAM"]
[Mon Apr 13 05:25:48.784024 2026] [:error] [pid 11325:tid 11333] [client 20.151.218.28:44956] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xBrain.php"] [unique_id "adwN3OCGj3EEJtCwa0OF3wAAAQY"]
[Mon Apr 13 05:25:49.286350 2026] [:error] [pid 11325:tid 11335] [client 20.151.218.28:44772] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xBrain.php"] [unique_id "adwN3eCGj3EEJtCwa0OF4wAAAQg"]
[Mon Apr 13 05:25:49.772628 2026] [:error] [pid 11325:tid 11331] [client 20.151.218.28:44742] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xBrain.php"] [unique_id "adwN3eCGj3EEJtCwa0OF5QAAAQQ"]
[Mon Apr 13 05:25:50.200618 2026] [:error] [pid 33943:tid 34011] [client 20.151.218.28:44958] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sagafif.php"] [unique_id "adwN3qyoXuZjocnxM5FipwAAAIU"]
[Mon Apr 13 05:25:50.716318 2026] [:error] [pid 33942:tid 33979] [client 20.151.218.28:44854] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sagafif.php"] [unique_id "adwN3hNHe8geO_lMeFaVygAAAEA"]
[Mon Apr 13 05:25:51.135492 2026] [:error] [pid 11325:tid 11341] [client 20.151.218.28:44773] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sagafif.php"] [unique_id "adwN3-CGj3EEJtCwa0OF7QAAAQ4"]
[Mon Apr 13 05:25:51.635869 2026] [:error] [pid 33942:tid 33995] [client 20.151.218.28:44711] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sagafif.php"] [unique_id "adwN3xNHe8geO_lMeFaVzAAAAFA"]
[Mon Apr 13 05:25:52.066095 2026] [:error] [pid 34048:tid 34063] [client 20.151.218.28:44718] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trc.php"] [unique_id "adwN4PSiQ_PJjlY5EhzxtAAAAM0"]
[Mon Apr 13 05:25:52.526460 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:45055] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trc.php"] [unique_id "adwN4OCGj3EEJtCwa0OF8QAAARA"]
[Mon Apr 13 05:25:52.995901 2026] [:error] [pid 11325:tid 11329] [client 20.151.218.28:45049] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trc.php"] [unique_id "adwN4OCGj3EEJtCwa0OF8wAAAQI"]
[Mon Apr 13 05:25:53.614710 2026] [:error] [pid 34048:tid 34052] [client 20.151.218.28:44820] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trc.php"] [unique_id "adwN4fSiQ_PJjlY5EhzxugAAAMI"]
[Mon Apr 13 05:25:54.356165 2026] [:error] [pid 11325:tid 11343] [client 20.151.218.28:44847] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tesla1.php"] [unique_id "adwN4uCGj3EEJtCwa0OF_AAAARA"]
[Mon Apr 13 05:25:55.051703 2026] [proxy_fcgi:error] [pid 33942:tid 34003] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:55.260390 2026] [proxy_fcgi:error] [pid 33942:tid 33999] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:55.892218 2026] [proxy_fcgi:error] [pid 33942:tid 33991] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:56.102724 2026] [proxy_fcgi:error] [pid 33942:tid 33981] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:56.312952 2026] [proxy_fcgi:error] [pid 33942:tid 33989] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:56.523648 2026] [proxy_fcgi:error] [pid 33942:tid 33982] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:56.734545 2026] [proxy_fcgi:error] [pid 33942:tid 33987] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:57.184190 2026] [proxy_fcgi:error] [pid 33942:tid 33979] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 05:25:57.393013 2026] [proxy_fcgi:error] [pid 33942:tid 33988] [client 20.151.218.28:44738] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:04:58.670108 2026] [proxy_fcgi:error] [pid 33941:tid 33953] [client 20.104.245.70:64167] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:04:58.879703 2026] [proxy_fcgi:error] [pid 33941:tid 33974] [client 20.104.245.70:64167] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:04:59.098050 2026] [proxy_fcgi:error] [pid 33941:tid 33969] [client 20.104.245.70:64167] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:04:59.313348 2026] [proxy_fcgi:error] [pid 33941:tid 33962] [client 20.104.245.70:64167] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 06:04:59.526522 2026] [proxy_fcgi:error] [pid 33941:tid 33967] [client 20.104.245.70:64167] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:40.513960 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:40.755768 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:40.997754 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:41.240602 2026] [proxy_fcgi:error] [pid 63311:tid 63373] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:41.482925 2026] [proxy_fcgi:error] [pid 63311:tid 63374] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:41.882704 2026] [proxy_fcgi:error] [pid 63311:tid 63377] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:42.135260 2026] [proxy_fcgi:error] [pid 63311:tid 63388] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:42.703650 2026] [proxy_fcgi:error] [pid 63311:tid 63394] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:42.967949 2026] [proxy_fcgi:error] [pid 63311:tid 63376] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:43.212345 2026] [proxy_fcgi:error] [pid 63311:tid 63395] [client 158.158.73.245:45041] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:58:44.399468 2026] [:error] [pid 63311:tid 63393] [client 158.158.73.245:45041] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "adw_xKHjrGN1MqBCVFk3zAAAAJY"]
[Mon Apr 13 08:58:45.721903 2026] [:error] [pid 63406:tid 63413] [client 158.158.73.245:53997] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "adw_xbHZEIkQ0Zmgp5oaigAAAMI"]
[Mon Apr 13 08:58:51.320326 2026] [:error] [pid 63309:tid 63317] [client 158.158.73.245:8293] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "adw_y0pIKZ10weXpf0WeVQAAAAQ"]
[Mon Apr 13 08:58:52.774566 2026] [:error] [pid 63311:tid 63390] [client 158.158.73.245:45039] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws60.php"] [unique_id "adw_zKHjrGN1MqBCVFk33QAAAJM"]
[Mon Apr 13 08:58:56.441882 2026] [:error] [pid 7228:tid 7241] [client 158.158.73.245:30135] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "adw_0AEnn1dQrOSHHNUMWwAAAQs"]
[Mon Apr 13 08:58:59.634599 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:8265] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "adw_0wEnn1dQrOSHHNUMagAAAQg"]
[Mon Apr 13 08:59:04.177943 2026] [:error] [pid 7228:tid 7231] [client 158.158.73.245:24424] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "adw_2AEnn1dQrOSHHNUMfQAAAQE"]
[Mon Apr 13 08:59:06.884836 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:53989] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vanda.php"] [unique_id "adw_2gEnn1dQrOSHHNUMggAAAQM"]
[Mon Apr 13 08:59:08.653894 2026] [:error] [pid 7228:tid 7244] [client 158.158.73.245:29799] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "adw_3AEnn1dQrOSHHNUMiAAAAQ4"]
[Mon Apr 13 08:59:10.232134 2026] [:error] [pid 63310:tid 63366] [client 158.158.73.245:29803] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "adw_3noXpRU5ztmwPjK3UQAAAFY"]
[Mon Apr 13 08:59:14.257648 2026] [:error] [pid 7228:tid 7251] [client 158.158.73.245:60362] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "adw_4gEnn1dQrOSHHNUMnAAAARU"]
[Mon Apr 13 08:59:16.167577 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:41734] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "adw_5AEnn1dQrOSHHNUMowAAAQg"]
[Mon Apr 13 08:59:17.455048 2026] [:error] [pid 63309:tid 63333] [client 158.158.73.245:41752] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/144.php"] [unique_id "adw_5UpIKZ10weXpf0WefQAAABQ"]
[Mon Apr 13 08:59:19.353395 2026] [:error] [pid 63406:tid 63419] [client 158.158.73.245:27464] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/144.php"] [unique_id "adw_57HZEIkQ0Zmgp5oawwAAAMg"]
[Mon Apr 13 08:59:20.914816 2026] [:error] [pid 63406:tid 63422] [client 158.158.73.245:36331] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/144.php"] [unique_id "adw_6LHZEIkQ0Zmgp5oaxQAAAMs"]
[Mon Apr 13 08:59:24.540367 2026] [:error] [pid 63406:tid 63423] [client 158.158.73.245:35682] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/144.php"] [unique_id "adw_7LHZEIkQ0Zmgp5oayQAAAMw"]
[Mon Apr 13 08:59:26.565042 2026] [:error] [pid 63309:tid 63318] [client 158.158.73.245:47808] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "adw_7kpIKZ10weXpf0WeiAAAAAU"]
[Mon Apr 13 08:59:30.591790 2026] [:error] [pid 63311:tid 63376] [client 158.158.73.245:46797] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "adw_8qHjrGN1MqBCVFk4BwAAAIU"]
[Mon Apr 13 08:59:31.481219 2026] [:error] [pid 63406:tid 63427] [client 158.158.73.245:47836] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "adw_87HZEIkQ0Zmgp5oa0AAAANA"]
[Mon Apr 13 08:59:34.427202 2026] [:error] [pid 63406:tid 63420] [client 158.158.73.245:38171] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "adw_9rHZEIkQ0Zmgp5oa1AAAAMk"]
[Mon Apr 13 08:59:37.224051 2026] [:error] [pid 7228:tid 7236] [client 158.158.73.245:36350] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "adw_-QEnn1dQrOSHHNUM2wAAAQY"]
[Mon Apr 13 08:59:38.384296 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:52045] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "adw_-gEnn1dQrOSHHNUM4AAAAQM"]
[Mon Apr 13 08:59:41.742151 2026] [:error] [pid 63309:tid 63336] [client 158.158.73.245:47867] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "adw__UpIKZ10weXpf0WepwAAABc"]
[Mon Apr 13 08:59:49.540446 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:49.781298 2026] [proxy_fcgi:error] [pid 7228:tid 7247] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:50.168759 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:50.416836 2026] [proxy_fcgi:error] [pid 7228:tid 7253] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:50.656481 2026] [proxy_fcgi:error] [pid 7228:tid 7233] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:50.965802 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:51.207653 2026] [proxy_fcgi:error] [pid 7228:tid 7247] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:51.593538 2026] [proxy_fcgi:error] [pid 7228:tid 7253] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:52.326598 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:52.574176 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 158.158.73.245:30151] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 08:59:52.884194 2026] [:error] [pid 7228:tid 7231] [client 158.158.73.245:30151] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxACAEnn1dQrOSHHNUNHAAAAQE"]
[Mon Apr 13 08:59:54.563205 2026] [:error] [pid 63406:tid 63426] [client 158.158.73.245:38172] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxACrHZEIkQ0Zmgp5oa8wAAAM8"]
[Mon Apr 13 08:59:56.087850 2026] [:error] [pid 7228:tid 7247] [client 158.158.73.245:49124] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxADAEnn1dQrOSHHNUNJgAAARE"]
[Mon Apr 13 09:00:01.446318 2026] [:error] [pid 63309:tid 63314] [client 158.158.73.245:46191] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adxAEUpIKZ10weXpf0WewQAAAAE"]
[Mon Apr 13 09:00:03.276171 2026] [:error] [pid 7228:tid 7252] [client 158.158.73.245:45488] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "adxAEwEnn1dQrOSHHNUNSQAAARY"]
[Mon Apr 13 09:00:08.776961 2026] [:error] [pid 63406:tid 63411] [client 158.158.73.245:55183] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "adxAGLHZEIkQ0Zmgp5oa_QAAAMA"]
[Mon Apr 13 09:00:11.730914 2026] [:error] [pid 7228:tid 7250] [client 158.158.73.245:44948] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "adxAGwEnn1dQrOSHHNUNXwAAARQ"]
[Mon Apr 13 09:00:13.402472 2026] [:error] [pid 7228:tid 7248] [client 158.158.73.245:30488] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/varb.php"] [unique_id "adxAHQEnn1dQrOSHHNUNegAAARI"]
[Mon Apr 13 09:00:19.935324 2026] [:error] [pid 7228:tid 7245] [client 158.158.73.245:50215] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "adxAIwEnn1dQrOSHHNUORwAAAQ8"]
[Mon Apr 13 09:00:23.382576 2026] [:error] [pid 63406:tid 63420] [client 158.158.73.245:32032] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "adxAJ7HZEIkQ0Zmgp5obRgAAAMk"]
[Mon Apr 13 09:00:26.173778 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:8246] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "adxAKgEnn1dQrOSHHNUObQAAARc"]
[Mon Apr 13 09:00:28.814261 2026] [:error] [pid 63309:tid 63322] [client 158.158.73.245:53932] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lm15.php"] [unique_id "adxALEpIKZ10weXpf0WfDgAAAAk"]
[Mon Apr 13 09:00:38.281123 2026] [:error] [pid 63406:tid 63422] [client 158.158.73.245:54741] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "adxANrHZEIkQ0Zmgp5obbgAAAMs"]
[Mon Apr 13 09:00:39.800018 2026] [:error] [pid 63311:tid 63379] [client 158.158.73.245:26736] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "adxAN6HjrGN1MqBCVFk4rQAAAIg"]
[Mon Apr 13 09:00:42.049699 2026] [:error] [pid 63309:tid 63326] [client 158.158.73.245:45507] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clss.php"] [unique_id "adxAOkpIKZ10weXpf0WfIQAAAA0"]
[Mon Apr 13 09:00:46.451944 2026] [:error] [pid 63309:tid 63333] [client 158.158.73.245:27411] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "adxAPkpIKZ10weXpf0WfNgAAABQ"]
[Mon Apr 13 09:00:49.580245 2026] [:error] [pid 7228:tid 7247] [client 158.158.73.245:26717] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/44.php"] [unique_id "adxAQQEnn1dQrOSHHNUOsAAAARE"]
[Mon Apr 13 09:00:55.419916 2026] [proxy_fcgi:error] [pid 7228:tid 7230] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:55.942154 2026] [proxy_fcgi:error] [pid 7228:tid 7253] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:56.191366 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:56.460747 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:56.701531 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:56.951164 2026] [proxy_fcgi:error] [pid 7228:tid 7230] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:57.223973 2026] [proxy_fcgi:error] [pid 7228:tid 7251] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:57.607003 2026] [proxy_fcgi:error] [pid 7228:tid 7247] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:57.870644 2026] [proxy_fcgi:error] [pid 7228:tid 7236] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:58.229132 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:58.470469 2026] [proxy_fcgi:error] [pid 7228:tid 7252] [client 158.158.73.245:45526] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:00:58.710281 2026] [:error] [pid 7228:tid 7240] [client 158.158.73.245:45526] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxASgEnn1dQrOSHHNUO4AAAAQo"]
[Mon Apr 13 09:01:01.029267 2026] [:error] [pid 63310:tid 63361] [client 158.158.73.245:25683] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxATXoXpRU5ztmwPjK4FgAAAFE"]
[Mon Apr 13 09:01:03.366841 2026] [:error] [pid 63310:tid 63367] [client 158.158.73.245:25680] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxAT3oXpRU5ztmwPjK4GQAAAFc"]
[Mon Apr 13 09:01:05.716591 2026] [:error] [pid 63309:tid 63327] [client 158.158.73.245:43120] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "adxAUUpIKZ10weXpf0WfWgAAAA4"]
[Mon Apr 13 09:01:07.127940 2026] [:error] [pid 63311:tid 63391] [client 158.158.73.245:64150] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adxAU6HjrGN1MqBCVFk49gAAAJQ"]
[Mon Apr 13 09:01:10.484584 2026] [:error] [pid 63311:tid 63375] [client 158.158.73.245:64130] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adxAVqHjrGN1MqBCVFk5AgAAAIQ"]
[Mon Apr 13 09:01:12.018508 2026] [:error] [pid 7228:tid 7230] [client 158.158.73.245:52619] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adxAWAEnn1dQrOSHHNUO9QAAAQA"]
[Mon Apr 13 09:01:13.888742 2026] [:error] [pid 7228:tid 7245] [client 158.158.73.245:49696] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "adxAWQEnn1dQrOSHHNUO_wAAAQ8"]
[Mon Apr 13 09:01:15.706867 2026] [:error] [pid 7228:tid 7235] [client 158.158.73.245:51555] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adxAWwEnn1dQrOSHHNUPCAAAAQU"]
[Mon Apr 13 09:01:18.763556 2026] [:error] [pid 63311:tid 63372] [client 158.158.73.245:37574] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adxAXqHjrGN1MqBCVFk5EAAAAIE"]
[Mon Apr 13 09:01:21.166725 2026] [:error] [pid 63310:tid 63355] [client 158.158.73.245:29317] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adxAYXoXpRU5ztmwPjK4IwAAAEs"]
[Mon Apr 13 09:01:21.969555 2026] [:error] [pid 63309:tid 63329] [client 158.158.73.245:32481] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gfd.php"] [unique_id "adxAYUpIKZ10weXpf0WfbwAAABA"]
[Mon Apr 13 09:01:24.247464 2026] [:error] [pid 63406:tid 63431] [client 158.158.73.245:44813] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "adxAZLHZEIkQ0Zmgp5obywAAANQ"]
[Mon Apr 13 09:01:25.600892 2026] [:error] [pid 63406:tid 63413] [client 158.158.73.245:29370] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "adxAZbHZEIkQ0Zmgp5ob0wAAAMI"]
[Mon Apr 13 09:01:28.303269 2026] [:error] [pid 63406:tid 63430] [client 158.158.73.245:42375] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "adxAaLHZEIkQ0Zmgp5ob4AAAANM"]
[Mon Apr 13 09:01:30.289604 2026] [:error] [pid 63310:tid 63348] [client 158.158.73.245:39932] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "adxAanoXpRU5ztmwPjK4LwAAAEQ"]
[Mon Apr 13 09:01:31.836888 2026] [:error] [pid 63406:tid 63421] [client 158.158.73.245:44863] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "adxAa7HZEIkQ0Zmgp5ob6gAAAMo"]
[Mon Apr 13 09:01:33.491351 2026] [:error] [pid 63311:tid 63391] [client 158.158.73.245:39919] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "adxAbaHjrGN1MqBCVFk5IAAAAJQ"]
[Mon Apr 13 09:01:35.320977 2026] [:error] [pid 7228:tid 7235] [client 158.158.73.245:32454] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "adxAbwEnn1dQrOSHHNUPWwAAAQU"]
[Mon Apr 13 09:01:36.244679 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:26249] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "adxAcAEnn1dQrOSHHNUPYAAAAQg"]
[Mon Apr 13 09:01:38.602499 2026] [:error] [pid 63309:tid 63330] [client 158.158.73.245:37588] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adxAckpIKZ10weXpf0WfkAAAABE"]
[Mon Apr 13 09:01:42.231388 2026] [:error] [pid 63311:tid 63386] [client 158.158.73.245:39883] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adxAdqHjrGN1MqBCVFk5KgAAAI8"]
[Mon Apr 13 09:01:47.283468 2026] [:error] [pid 63406:tid 63414] [client 158.158.73.245:32769] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adxAe7HZEIkQ0Zmgp5ocBAAAAMM"]
[Mon Apr 13 09:01:49.899388 2026] [:error] [pid 7228:tid 7242] [client 158.158.73.245:44813] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adxAfQEnn1dQrOSHHNUPbAAAAQw"]
[Mon Apr 13 09:01:51.623818 2026] [:error] [pid 63406:tid 63411] [client 158.158.73.245:8904] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "adxAf7HZEIkQ0Zmgp5ocFQAAAMA"]
[Mon Apr 13 09:01:55.741584 2026] [:error] [pid 63310:tid 63347] [client 158.158.73.245:60921] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "adxAg3oXpRU5ztmwPjK4ZgAAAEM"]
[Mon Apr 13 09:01:56.778098 2026] [:error] [pid 7228:tid 7247] [client 158.158.73.245:28545] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "adxAhAEnn1dQrOSHHNUPrQAAARE"]
[Mon Apr 13 09:01:59.157867 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:01:59.458822 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:01:59.714855 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:01:59.958166 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:00.443494 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:01.072996 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:01.801088 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:02.042783 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:02.308110 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:02.548405 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 158.158.73.245:59778] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:02:02.784828 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:59778] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "adxAirHZEIkQ0Zmgp5ocYQAAAME"]
[Mon Apr 13 09:02:04.829506 2026] [:error] [pid 7228:tid 7250] [client 158.158.73.245:9152] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "adxAjAEnn1dQrOSHHNUPwgAAARQ"]
[Mon Apr 13 09:02:05.925957 2026] [:error] [pid 63406:tid 63431] [client 158.158.73.245:8635] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "adxAjbHZEIkQ0Zmgp5ocbQAAANQ"]
[Mon Apr 13 09:02:12.937634 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:26659] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "adxAlKHjrGN1MqBCVFk5TwAAAII"]
[Mon Apr 13 09:02:16.162355 2026] [:error] [pid 7228:tid 7232] [client 158.158.73.245:27012] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "adxAmAEnn1dQrOSHHNUP5gAAAQI"]
[Mon Apr 13 09:02:18.593469 2026] [:error] [pid 63406:tid 63427] [client 158.158.73.245:60897] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "adxAmrHZEIkQ0Zmgp5ochwAAANA"]
[Mon Apr 13 09:02:20.960515 2026] [:error] [pid 63311:tid 63375] [client 158.158.73.245:27060] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "adxAnKHjrGN1MqBCVFk5XgAAAIQ"]
[Mon Apr 13 09:02:23.011295 2026] [:error] [pid 7228:tid 7232] [client 158.158.73.245:40469] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "adxAnwEnn1dQrOSHHNUP8AAAAQI"]
[Mon Apr 13 09:02:26.577956 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:28240] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/redixsx.php"] [unique_id "adxAogEnn1dQrOSHHNUP-QAAAQM"]
[Mon Apr 13 09:02:28.000748 2026] [:error] [pid 63406:tid 63434] [client 158.158.73.245:48510] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/redixsx.php"] [unique_id "adxAo7HZEIkQ0Zmgp5ocmAAAANc"]
[Mon Apr 13 09:02:29.048143 2026] [:error] [pid 63310:tid 63352] [client 158.158.73.245:48502] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/redixsx.php"] [unique_id "adxApXoXpRU5ztmwPjK4dwAAAEg"]
[Mon Apr 13 09:02:30.910230 2026] [:error] [pid 7228:tid 7248] [client 158.158.73.245:28565] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/redixsx.php"] [unique_id "adxApgEnn1dQrOSHHNUQAwAAARI"]
[Mon Apr 13 09:02:31.854884 2026] [:error] [pid 63311:tid 63372] [client 158.158.73.245:8918] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cpp2.php"] [unique_id "adxAp6HjrGN1MqBCVFk5cwAAAIE"]
[Mon Apr 13 09:02:38.295554 2026] [:error] [pid 63406:tid 63430] [client 158.158.73.245:37618] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cpp2.php"] [unique_id "adxArrHZEIkQ0Zmgp5octAAAANM"]
[Mon Apr 13 09:02:44.425944 2026] [:error] [pid 63309:tid 63321] [client 158.158.73.245:49053] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cpp2.php"] [unique_id "adxAtEpIKZ10weXpf0WgGwAAAAg"]
[Mon Apr 13 09:02:49.758945 2026] [:error] [pid 63406:tid 63426] [client 158.158.73.245:36281] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "adxAubHZEIkQ0Zmgp5oc1AAAAM8"]
[Mon Apr 13 09:02:55.837268 2026] [:error] [pid 63406:tid 63425] [client 158.158.73.245:52676] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "adxAv7HZEIkQ0Zmgp5oc5AAAAM4"]
[Mon Apr 13 09:03:03.812308 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:04.083345 2026] [proxy_fcgi:error] [pid 63406:tid 63435] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:04.325250 2026] [proxy_fcgi:error] [pid 63406:tid 63434] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:04.563173 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:06.178216 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:06.648694 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:06.905700 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:07.290416 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:07.534540 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:07.774695 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:08.027786 2026] [proxy_fcgi:error] [pid 63406:tid 63422] [client 158.158.73.245:52733] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:03:08.331482 2026] [:error] [pid 63406:tid 63427] [client 158.158.73.245:52733] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adxAzLHZEIkQ0Zmgp5odDgAAANA"]
[Mon Apr 13 09:03:09.186359 2026] [:error] [pid 63309:tid 63322] [client 158.158.73.245:52710] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adxAzUpIKZ10weXpf0WgQwAAAAk"]
[Mon Apr 13 09:03:11.627406 2026] [:error] [pid 7228:tid 7231] [client 158.158.73.245:19983] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adxAzwEnn1dQrOSHHNUQqQAAAQE"]
[Mon Apr 13 09:03:12.994186 2026] [:error] [pid 63311:tid 63386] [client 158.158.73.245:36911] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adxA0KHjrGN1MqBCVFk53wAAAI8"]
[Mon Apr 13 09:03:14.198768 2026] [:error] [pid 7228:tid 7232] [client 158.158.73.245:43653] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "adxA0gEnn1dQrOSHHNUQrgAAAQI"]
[Mon Apr 13 09:03:15.274381 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:36918] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "adxA06HjrGN1MqBCVFk58QAAAII"]
[Mon Apr 13 09:03:16.545931 2026] [:error] [pid 63406:tid 63429] [client 158.158.73.245:9116] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "adxA1LHZEIkQ0Zmgp5odFwAAANI"]
[Mon Apr 13 09:03:18.631539 2026] [:error] [pid 63309:tid 63329] [client 158.158.73.245:31628] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "adxA1kpIKZ10weXpf0WgXQAAABA"]
[Mon Apr 13 09:03:22.722550 2026] [:error] [pid 63310:tid 63354] [client 158.158.73.245:36893] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoxxi.php"] [unique_id "adxA2noXpRU5ztmwPjK4zgAAAEo"]
[Mon Apr 13 09:03:25.330582 2026] [:error] [pid 7228:tid 7251] [client 158.158.73.245:43690] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoxxi.php"] [unique_id "adxA3QEnn1dQrOSHHNUQxgAAARU"]
[Mon Apr 13 09:03:29.165335 2026] [:error] [pid 63310:tid 63355] [client 158.158.73.245:41142] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoxxi.php"] [unique_id "adxA4XoXpRU5ztmwPjK40wAAAEs"]
[Mon Apr 13 09:03:32.766138 2026] [:error] [pid 7228:tid 7236] [client 158.158.73.245:26364] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoxxi.php"] [unique_id "adxA5AEnn1dQrOSHHNUQ4AAAAQY"]
[Mon Apr 13 09:03:33.673039 2026] [:error] [pid 7228:tid 7231] [client 158.158.73.245:45038] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxA5QEnn1dQrOSHHNUQ4QAAAQE"]
[Mon Apr 13 09:03:35.025968 2026] [:error] [pid 7228:tid 7230] [client 158.158.73.245:34983] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxA5wEnn1dQrOSHHNUQ5wAAAQA"]
[Mon Apr 13 09:03:36.823757 2026] [:error] [pid 7228:tid 7235] [client 158.158.73.245:30582] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxA6AEnn1dQrOSHHNUQ6gAAAQU"]
[Mon Apr 13 09:03:39.285938 2026] [:error] [pid 63310:tid 63347] [client 158.158.73.245:34944] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adxA63oXpRU5ztmwPjK46AAAAEM"]
[Mon Apr 13 09:03:41.082337 2026] [:error] [pid 63406:tid 63414] [client 158.158.73.245:53893] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "adxA7bHZEIkQ0Zmgp5odRQAAAMM"]
[Mon Apr 13 09:03:42.693130 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:34995] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "adxA7gEnn1dQrOSHHNUQ9AAAAQg"]
[Mon Apr 13 09:03:45.515469 2026] [:error] [pid 63309:tid 63332] [client 158.158.73.245:8839] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "adxA8UpIKZ10weXpf0WgewAAABM"]
[Mon Apr 13 09:03:47.235233 2026] [:error] [pid 63406:tid 63418] [client 158.158.73.245:39191] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "adxA87HZEIkQ0Zmgp5odUAAAAMc"]
[Mon Apr 13 09:03:49.933826 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:59748] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxA9QEnn1dQrOSHHNURHQAAAQg"]
[Mon Apr 13 09:03:50.584336 2026] [:error] [pid 7228:tid 7230] [client 158.158.73.245:27894] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxA9gEnn1dQrOSHHNURIQAAAQA"]
[Mon Apr 13 09:03:53.591364 2026] [:error] [pid 7228:tid 7249] [client 158.158.73.245:62584] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxA-QEnn1dQrOSHHNURLgAAARM"]
[Mon Apr 13 09:03:56.402889 2026] [:error] [pid 63311:tid 63389] [client 158.158.73.245:55897] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adxA_KHjrGN1MqBCVFk6NQAAAJI"]
[Mon Apr 13 09:03:58.850457 2026] [:error] [pid 7228:tid 7246] [client 158.158.73.245:47389] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schallfuns.php"] [unique_id "adxA_gEnn1dQrOSHHNURTQAAARA"]
[Mon Apr 13 09:04:01.617164 2026] [:error] [pid 63309:tid 63335] [client 158.158.73.245:47765] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schallfuns.php"] [unique_id "adxBAUpIKZ10weXpf0WglAAAABY"]
[Mon Apr 13 09:04:02.659005 2026] [:error] [pid 63406:tid 63435] [client 158.158.73.245:45496] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schallfuns.php"] [unique_id "adxBArHZEIkQ0Zmgp5odhAAAANg"]
[Mon Apr 13 09:04:06.117927 2026] [:error] [pid 63406:tid 63433] [client 158.158.73.245:33742] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/schallfuns.php"] [unique_id "adxBBrHZEIkQ0Zmgp5odkgAAANY"]
[Mon Apr 13 09:04:07.894069 2026] [:error] [pid 63310:tid 63344] [client 158.158.73.245:24576] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adxBB3oXpRU5ztmwPjK5AwAAAEA"]
[Mon Apr 13 09:04:09.167857 2026] [proxy_fcgi:error] [pid 63310:tid 63351] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:09.410068 2026] [proxy_fcgi:error] [pid 63310:tid 63360] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:09.651069 2026] [proxy_fcgi:error] [pid 63310:tid 63359] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:09.893852 2026] [proxy_fcgi:error] [pid 63310:tid 63363] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:10.137796 2026] [proxy_fcgi:error] [pid 63310:tid 63352] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:10.431570 2026] [proxy_fcgi:error] [pid 63310:tid 63354] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:10.699185 2026] [proxy_fcgi:error] [pid 63310:tid 63348] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:10.963140 2026] [proxy_fcgi:error] [pid 63310:tid 63353] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:11.334179 2026] [proxy_fcgi:error] [pid 63310:tid 63346] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:11.574693 2026] [proxy_fcgi:error] [pid 63310:tid 63361] [client 158.158.73.245:24445] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:04:12.052542 2026] [:error] [pid 63310:tid 63352] [client 158.158.73.245:24445] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "adxBDHoXpRU5ztmwPjK5HAAAAEg"]
[Mon Apr 13 09:04:13.741311 2026] [:error] [pid 63310:tid 63359] [client 158.158.73.245:50263] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "adxBDXoXpRU5ztmwPjK5LwAAAE8"]
[Mon Apr 13 09:04:16.099281 2026] [:error] [pid 7228:tid 7245] [client 158.158.73.245:29762] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "adxBEAEnn1dQrOSHHNURoAAAAQ8"]
[Mon Apr 13 09:04:18.684468 2026] [:error] [pid 63310:tid 63350] [client 158.158.73.245:29802] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "adxBEnoXpRU5ztmwPjK5SAAAAEY"]
[Mon Apr 13 09:04:21.594356 2026] [:error] [pid 63311:tid 63389] [client 158.158.73.245:45449] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "adxBFaHjrGN1MqBCVFk6bAAAAJI"]
[Mon Apr 13 09:04:24.345914 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:31688] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "adxBGLHZEIkQ0Zmgp5oeDQAAAME"]
[Mon Apr 13 09:04:26.694269 2026] [:error] [pid 63309:tid 63333] [client 158.158.73.245:53969] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "adxBGkpIKZ10weXpf0WgvQAAABQ"]
[Mon Apr 13 09:04:29.104589 2026] [:error] [pid 63309:tid 63333] [client 158.158.73.245:55168] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "adxBHUpIKZ10weXpf0WgzgAAABQ"]
[Mon Apr 13 09:04:30.238726 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:41769] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "adxBHgEnn1dQrOSHHNURuwAAAQ0"]
[Mon Apr 13 09:04:32.696395 2026] [:error] [pid 63310:tid 63367] [client 158.158.73.245:30543] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "adxBIHoXpRU5ztmwPjK5WwAAAFc"]
[Mon Apr 13 09:04:35.052864 2026] [:error] [pid 63310:tid 63350] [client 158.158.73.245:46106] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "adxBI3oXpRU5ztmwPjK5YAAAAEY"]
[Mon Apr 13 09:04:38.419637 2026] [:error] [pid 63311:tid 63384] [client 158.158.73.245:33730] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "adxBJqHjrGN1MqBCVFk6iwAAAI0"]
[Mon Apr 13 09:04:44.063310 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:38810] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxBLAEnn1dQrOSHHNUR3QAAAQg"]
[Mon Apr 13 09:04:50.637651 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:28984] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxBMrHZEIkQ0Zmgp5oeTQAAAME"]
[Mon Apr 13 09:04:51.666467 2026] [:error] [pid 63406:tid 63417] [client 158.158.73.245:38897] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adxBM7HZEIkQ0Zmgp5oeUwAAAMY"]
[Mon Apr 13 09:04:54.192842 2026] [:error] [pid 63406:tid 63417] [client 158.158.73.245:31736] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxBNrHZEIkQ0Zmgp5oeYAAAAMY"]
[Mon Apr 13 09:04:56.319512 2026] [:error] [pid 63406:tid 63428] [client 158.158.73.245:62537] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxBOLHZEIkQ0Zmgp5oeaAAAANE"]
[Mon Apr 13 09:04:57.919613 2026] [:error] [pid 63311:tid 63385] [client 158.158.73.245:55231] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxBOaHjrGN1MqBCVFk6pAAAAI4"]
[Mon Apr 13 09:05:01.059459 2026] [:error] [pid 7228:tid 7244] [client 158.158.73.245:24402] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adxBPQEnn1dQrOSHHNUSDQAAAQ4"]
[Mon Apr 13 09:05:02.275120 2026] [:error] [pid 63309:tid 63319] [client 158.158.73.245:46122] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "adxBPkpIKZ10weXpf0Wg7QAAAAY"]
[Mon Apr 13 09:05:04.886325 2026] [:error] [pid 63406:tid 63435] [client 158.158.73.245:31726] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "adxBQLHZEIkQ0Zmgp5oeeQAAANg"]
[Mon Apr 13 09:05:12.736067 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:13.954972 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:14.195985 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:14.436145 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:14.690766 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:14.932005 2026] [proxy_fcgi:error] [pid 63406:tid 63419] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:15.172247 2026] [proxy_fcgi:error] [pid 63406:tid 63434] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:15.429937 2026] [proxy_fcgi:error] [pid 63406:tid 63428] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:15.816672 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:16.057837 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:17.114004 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 158.158.73.245:25188] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:05:17.350424 2026] [:error] [pid 63406:tid 63414] [client 158.158.73.245:25188] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "adxBTbHZEIkQ0Zmgp5oeqgAAAMM"]
[Mon Apr 13 09:05:19.610281 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:53977] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "adxBTwEnn1dQrOSHHNUSUAAAAQ0"]
[Mon Apr 13 09:05:22.039915 2026] [:error] [pid 7228:tid 7241] [client 158.158.73.245:40527] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "adxBUgEnn1dQrOSHHNUSVwAAAQs"]
[Mon Apr 13 09:05:23.329457 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:40531] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "adxBUwEnn1dQrOSHHNUSWgAAARc"]
[Mon Apr 13 09:05:26.039087 2026] [:error] [pid 7228:tid 7246] [client 158.158.73.245:46828] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "adxBVgEnn1dQrOSHHNUSXwAAARA"]
[Mon Apr 13 09:05:27.384252 2026] [:error] [pid 7228:tid 7241] [client 158.158.73.245:55216] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "adxBVwEnn1dQrOSHHNUSZQAAAQs"]
[Mon Apr 13 09:05:29.678314 2026] [:error] [pid 63310:tid 63352] [client 158.158.73.245:28205] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "adxBWXoXpRU5ztmwPjK5qwAAAEg"]
[Mon Apr 13 09:05:32.509295 2026] [:error] [pid 7228:tid 7244] [client 158.158.73.245:25172] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "adxBXAEnn1dQrOSHHNUScwAAAQ4"]
[Mon Apr 13 09:05:34.101363 2026] [:error] [pid 63406:tid 63419] [client 158.158.73.245:28222] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "adxBXrHZEIkQ0Zmgp5oe0QAAAMg"]
[Mon Apr 13 09:05:36.094519 2026] [:error] [pid 7228:tid 7235] [client 158.158.73.245:8376] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "adxBYAEnn1dQrOSHHNUSfAAAAQU"]
[Mon Apr 13 09:05:37.435443 2026] [:error] [pid 63406:tid 63414] [client 158.158.73.245:28186] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "adxBYbHZEIkQ0Zmgp5oe2gAAAMM"]
[Mon Apr 13 09:05:39.961563 2026] [:error] [pid 63406:tid 63425] [client 158.158.73.245:40545] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws75.php"] [unique_id "adxBY7HZEIkQ0Zmgp5oe3gAAAM4"]
[Mon Apr 13 09:05:43.495457 2026] [:error] [pid 7228:tid 7252] [client 158.158.73.245:55171] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adxBZwEnn1dQrOSHHNUSmQAAARY"]
[Mon Apr 13 09:05:44.587435 2026] [:error] [pid 63311:tid 63392] [client 158.158.73.245:47744] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adxBaKHjrGN1MqBCVFk63QAAAJU"]
[Mon Apr 13 09:05:46.076078 2026] [:error] [pid 7228:tid 7254] [client 158.158.73.245:62581] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adxBagEnn1dQrOSHHNUSpQAAARg"]
[Mon Apr 13 09:05:46.684185 2026] [:error] [pid 63406:tid 63413] [client 158.158.73.245:34320] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "adxBarHZEIkQ0Zmgp5oe9QAAAMI"]
[Mon Apr 13 09:05:47.845456 2026] [:error] [pid 7228:tid 7242] [client 158.158.73.245:47778] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "adxBawEnn1dQrOSHHNUSrAAAAQw"]
[Mon Apr 13 09:05:48.857990 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:49732] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "adxBbAEnn1dQrOSHHNUSrwAAAQM"]
[Mon Apr 13 09:05:51.224101 2026] [:error] [pid 63310:tid 63361] [client 158.158.73.245:8356] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "adxBb3oXpRU5ztmwPjK55QAAAFE"]
[Mon Apr 13 09:05:52.833551 2026] [:error] [pid 7228:tid 7245] [client 158.158.73.245:25169] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "adxBcAEnn1dQrOSHHNUSywAAAQ8"]
[Mon Apr 13 09:05:53.563023 2026] [:error] [pid 7228:tid 7236] [client 158.158.73.245:55207] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adxBcQEnn1dQrOSHHNUS0gAAAQY"]
[Mon Apr 13 09:05:55.188032 2026] [:error] [pid 63310:tid 63366] [client 158.158.73.245:34319] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adxBc3oXpRU5ztmwPjK55wAAAFY"]
[Mon Apr 13 09:05:56.367922 2026] [:error] [pid 63311:tid 63391] [client 158.158.73.245:49781] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adxBdKHjrGN1MqBCVFk67wAAAJQ"]
[Mon Apr 13 09:05:57.859996 2026] [:error] [pid 63311:tid 63386] [client 158.158.73.245:31330] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adxBdaHjrGN1MqBCVFk6_AAAAI8"]
[Mon Apr 13 09:05:58.786317 2026] [:error] [pid 63406:tid 63415] [client 158.158.73.245:47749] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adxBdrHZEIkQ0Zmgp5ofAgAAAMQ"]
[Mon Apr 13 09:06:01.051967 2026] [:error] [pid 63406:tid 63428] [client 158.158.73.245:49053] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adxBebHZEIkQ0Zmgp5ofBwAAANE"]
[Mon Apr 13 09:06:02.394055 2026] [:error] [pid 63311:tid 63372] [client 158.158.73.245:47751] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adxBeqHjrGN1MqBCVFk7DQAAAIE"]
[Mon Apr 13 09:06:04.536523 2026] [:error] [pid 63309:tid 63324] [client 158.158.73.245:46810] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "adxBfEpIKZ10weXpf0WhJgAAAAs"]
[Mon Apr 13 09:06:15.660973 2026] [:error] [pid 7228:tid 7247] [client 158.158.73.245:46792] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adxBhwEnn1dQrOSHHNUTNQAAARE"]
[Mon Apr 13 09:06:16.812092 2026] [:error] [pid 63310:tid 63367] [client 158.158.73.245:34342] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp9.php"] [unique_id "adxBiHoXpRU5ztmwPjK6BwAAAFc"]
[Mon Apr 13 09:06:17.885087 2026] [proxy_fcgi:error] [pid 63311:tid 63372] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:18.528170 2026] [proxy_fcgi:error] [pid 63311:tid 63387] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:18.768372 2026] [proxy_fcgi:error] [pid 63311:tid 63388] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:19.036958 2026] [proxy_fcgi:error] [pid 63311:tid 63376] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:19.278712 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:19.781481 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:20.263015 2026] [proxy_fcgi:error] [pid 63311:tid 63390] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:20.504743 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 158.158.73.245:34337] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:06:20.814796 2026] [:error] [pid 63311:tid 63385] [client 158.158.73.245:34337] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adxBjKHjrGN1MqBCVFk7KwAAAI4"]
[Mon Apr 13 09:06:22.870901 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:8992] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adxBjgEnn1dQrOSHHNUTSAAAAQ0"]
[Mon Apr 13 09:06:23.883345 2026] [:error] [pid 63311:tid 63389] [client 158.158.73.245:49736] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adxBj6HjrGN1MqBCVFk7LwAAAJI"]
[Mon Apr 13 09:06:24.803991 2026] [:error] [pid 63311:tid 63387] [client 158.158.73.245:51976] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "adxBkKHjrGN1MqBCVFk7MgAAAJA"]
[Mon Apr 13 09:06:25.702098 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:28192] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "adxBkaHjrGN1MqBCVFk7NwAAAII"]
[Mon Apr 13 09:06:27.184000 2026] [:error] [pid 63406:tid 63432] [client 158.158.73.245:40572] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "adxBk7HZEIkQ0Zmgp5ofcwAAANU"]
[Mon Apr 13 09:06:27.917536 2026] [:error] [pid 63309:tid 63334] [client 158.158.73.245:49752] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "adxBk0pIKZ10weXpf0WhPAAAABU"]
[Mon Apr 13 09:06:28.805571 2026] [:error] [pid 63310:tid 63350] [client 158.158.73.245:40574] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amp.php"] [unique_id "adxBlHoXpRU5ztmwPjK6FQAAAEY"]
[Mon Apr 13 09:06:32.421713 2026] [:error] [pid 7228:tid 7251] [client 158.158.73.245:49737] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "adxBmAEnn1dQrOSHHNUTWgAAARU"]
[Mon Apr 13 09:06:33.805207 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:30500] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "adxBmQEnn1dQrOSHHNUTZgAAAQ0"]
[Mon Apr 13 09:06:35.120314 2026] [:error] [pid 63311:tid 63374] [client 158.158.73.245:28216] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "adxBm6HjrGN1MqBCVFk7RgAAAIM"]
[Mon Apr 13 09:06:36.404154 2026] [:error] [pid 63310:tid 63344] [client 158.158.73.245:52653] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "adxBnHoXpRU5ztmwPjK6GAAAAEA"]
[Mon Apr 13 09:06:37.710337 2026] [:error] [pid 63406:tid 63419] [client 158.158.73.245:8963] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "adxBnbHZEIkQ0Zmgp5ofmAAAAMg"]
[Mon Apr 13 09:06:39.360104 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:54690] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "adxBnwEnn1dQrOSHHNUTewAAAQ0"]
[Mon Apr 13 09:06:40.081920 2026] [:error] [pid 63406:tid 63435] [client 158.158.73.245:8965] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "adxBoLHZEIkQ0Zmgp5ofnQAAANg"]
[Mon Apr 13 09:06:40.870906 2026] [:error] [pid 63406:tid 63418] [client 158.158.73.245:51988] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/init.php"] [unique_id "adxBoLHZEIkQ0Zmgp5ofoQAAAMc"]
[Mon Apr 13 09:06:42.873992 2026] [:error] [pid 7228:tid 7240] [client 158.158.73.245:28566] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adxBogEnn1dQrOSHHNUTiQAAAQo"]
[Mon Apr 13 09:06:43.702252 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:48477] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adxBowEnn1dQrOSHHNUTjgAAAQ0"]
[Mon Apr 13 09:06:44.998661 2026] [:error] [pid 63311:tid 63395] [client 158.158.73.245:44384] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adxBpKHjrGN1MqBCVFk7WAAAAJg"]
[Mon Apr 13 09:06:45.989701 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:29434] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "adxBpQEnn1dQrOSHHNUTmAAAAQ0"]
[Mon Apr 13 09:06:47.201345 2026] [:error] [pid 63311:tid 63393] [client 158.158.73.245:28595] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adxBp6HjrGN1MqBCVFk7WwAAAJY"]
[Mon Apr 13 09:06:48.161741 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:44396] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adxBqLHZEIkQ0Zmgp5ofqwAAAME"]
[Mon Apr 13 09:06:49.411671 2026] [:error] [pid 63310:tid 63344] [client 158.158.73.245:43755] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adxBqXoXpRU5ztmwPjK6HwAAAEA"]
[Mon Apr 13 09:06:50.215031 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:44385] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "adxBqqHjrGN1MqBCVFk7XgAAAII"]
[Mon Apr 13 09:06:51.177159 2026] [:error] [pid 63310:tid 63362] [client 158.158.73.245:8907] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adxBq3oXpRU5ztmwPjK6JgAAAFI"]
[Mon Apr 13 09:06:52.180137 2026] [:error] [pid 63311:tid 63392] [client 158.158.73.245:44368] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adxBrKHjrGN1MqBCVFk7YgAAAJU"]
[Mon Apr 13 09:06:53.543318 2026] [:error] [pid 63309:tid 63326] [client 158.158.73.245:44836] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adxBrUpIKZ10weXpf0WhRwAAAA0"]
[Mon Apr 13 09:06:54.196031 2026] [:error] [pid 63311:tid 63374] [client 158.158.73.245:49083] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adxBrqHjrGN1MqBCVFk7aQAAAIM"]
[Mon Apr 13 09:06:54.924314 2026] [:error] [pid 7228:tid 7242] [client 158.158.73.245:25647] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adxBrgEnn1dQrOSHHNUTuAAAAQw"]
[Mon Apr 13 09:06:57.420980 2026] [:error] [pid 63309:tid 63332] [client 158.158.73.245:62623] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adxBsUpIKZ10weXpf0WhlgAAABM"]
[Mon Apr 13 09:06:58.222954 2026] [:error] [pid 63309:tid 63328] [client 158.158.73.245:28233] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adxBskpIKZ10weXpf0WhlwAAAA8"]
[Mon Apr 13 09:06:59.180450 2026] [:error] [pid 7228:tid 7234] [client 158.158.73.245:26091] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adxBswEnn1dQrOSHHNUUJAAAAQQ"]
[Mon Apr 13 09:07:01.401877 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:49034] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "adxBtQEnn1dQrOSHHNUUNgAAAQM"]
[Mon Apr 13 09:07:02.917056 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:44998] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "adxBtrHZEIkQ0Zmgp5of0AAAAME"]
[Mon Apr 13 09:07:04.183434 2026] [:error] [pid 63406:tid 63417] [client 158.158.73.245:53315] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "adxBuLHZEIkQ0Zmgp5of2AAAAMY"]
[Mon Apr 13 09:07:11.510363 2026] [:error] [pid 7228:tid 7235] [client 158.158.73.245:8576] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxw.php"] [unique_id "adxBvwEnn1dQrOSHHNUUYQAAAQU"]
[Mon Apr 13 09:07:16.001463 2026] [:error] [pid 63309:tid 63322] [client 158.158.73.245:43124] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adxBxEpIKZ10weXpf0WhqgAAAAk"]
[Mon Apr 13 09:07:19.810474 2026] [:error] [pid 7228:tid 7230] [client 158.158.73.245:59801] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adxBxwEnn1dQrOSHHNUUmAAAAQA"]
[Mon Apr 13 09:07:23.861052 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:24.108838 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:24.368960 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:24.877078 2026] [proxy_fcgi:error] [pid 63406:tid 63419] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:25.121876 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:25.381077 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:25.650267 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:25.913349 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:26.440162 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 158.158.73.245:27413] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:07:26.727667 2026] [:error] [pid 63406:tid 63415] [client 158.158.73.245:27413] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "adxBzrHZEIkQ0Zmgp5ogEwAAAMQ"]
[Mon Apr 13 09:07:28.219170 2026] [:error] [pid 63309:tid 63322] [client 158.158.73.245:26734] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "adxB0EpIKZ10weXpf0WhvQAAAAk"]
[Mon Apr 13 09:07:39.470991 2026] [:error] [pid 63406:tid 63435] [client 158.158.73.245:54737] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "adxB27HZEIkQ0Zmgp5ogMAAAANg"]
[Mon Apr 13 09:07:41.576011 2026] [:error] [pid 63309:tid 63315] [client 158.158.73.245:31623] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "adxB3UpIKZ10weXpf0WhxQAAAAI"]
[Mon Apr 13 09:07:42.934573 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:59838] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "adxB3rHZEIkQ0Zmgp5ogNwAAAME"]
[Mon Apr 13 09:07:46.422410 2026] [:error] [pid 7228:tid 7240] [client 158.158.73.245:25711] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "adxB4gEnn1dQrOSHHNUU5wAAAQo"]
[Mon Apr 13 09:07:48.640808 2026] [:error] [pid 63309:tid 63313] [client 158.158.73.245:26688] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "adxB5EpIKZ10weXpf0WhyQAAAAA"]
[Mon Apr 13 09:07:50.522825 2026] [:error] [pid 63309:tid 63330] [client 158.158.73.245:53931] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "adxB5kpIKZ10weXpf0WhzQAAABE"]
[Mon Apr 13 09:07:52.932310 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:37524] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "adxB6AEnn1dQrOSHHNUU_wAAARc"]
[Mon Apr 13 09:07:56.388748 2026] [:error] [pid 63311:tid 63382] [client 158.158.73.245:36889] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "adxB7KHjrGN1MqBCVFk8HAAAAIs"]
[Mon Apr 13 09:07:57.975020 2026] [:error] [pid 63311:tid 63377] [client 158.158.73.245:39851] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "adxB7aHjrGN1MqBCVFk8IwAAAIY"]
[Mon Apr 13 09:07:59.149799 2026] [:error] [pid 63310:tid 63350] [client 158.158.73.245:39863] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "adxB73oXpRU5ztmwPjK6xgAAAEY"]
[Mon Apr 13 09:08:00.812370 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:39214] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adxB8AEnn1dQrOSHHNUVGQAAAQM"]
[Mon Apr 13 09:08:02.345456 2026] [:error] [pid 63310:tid 63368] [client 158.158.73.245:8280] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adxB8noXpRU5ztmwPjK6yQAAAFg"]
[Mon Apr 13 09:08:06.467441 2026] [:error] [pid 63311:tid 63387] [client 158.158.73.245:33676] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adxB9qHjrGN1MqBCVFk8LAAAAJA"]
[Mon Apr 13 09:08:09.147465 2026] [:error] [pid 63309:tid 63326] [client 158.158.73.245:64519] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "adxB-UpIKZ10weXpf0Wh4wAAAA0"]
[Mon Apr 13 09:08:11.536804 2026] [:error] [pid 63311:tid 63374] [client 158.158.73.245:41815] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adxB-6HjrGN1MqBCVFk8NwAAAIM"]
[Mon Apr 13 09:08:13.735118 2026] [:error] [pid 63311:tid 63377] [client 158.158.73.245:47400] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adxB_aHjrGN1MqBCVFk8PgAAAIY"]
[Mon Apr 13 09:08:14.938411 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:25150] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adxB_gEnn1dQrOSHHNUVTgAAAQ0"]
[Mon Apr 13 09:08:16.352304 2026] [:error] [pid 7228:tid 7248] [client 158.158.73.245:47382] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adxCAAEnn1dQrOSHHNUVWAAAARI"]
[Mon Apr 13 09:08:17.512003 2026] [:error] [pid 63406:tid 63413] [client 158.158.73.245:55935] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adxCAbHZEIkQ0Zmgp5ogfwAAAMI"]
[Mon Apr 13 09:08:19.774646 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:47422] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adxCA7HZEIkQ0Zmgp5oghwAAAME"]
[Mon Apr 13 09:08:21.348455 2026] [:error] [pid 63406:tid 63417] [client 158.158.73.245:36318] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adxCBbHZEIkQ0Zmgp5ogigAAAMY"]
[Mon Apr 13 09:08:22.300016 2026] [:error] [pid 7228:tid 7247] [client 158.158.73.245:47831] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "adxCBgEnn1dQrOSHHNUVdAAAARE"]
[Mon Apr 13 09:08:23.391639 2026] [:error] [pid 7228:tid 7243] [client 158.158.73.245:8860] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "adxCBwEnn1dQrOSHHNUVfQAAAQ0"]
[Mon Apr 13 09:08:24.978945 2026] [:error] [pid 7228:tid 7246] [client 158.158.73.245:8782] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "adxCCAEnn1dQrOSHHNUVjgAAARA"]
[Mon Apr 13 09:08:25.799927 2026] [:error] [pid 7228:tid 7252] [client 158.158.73.245:8887] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "adxCCQEnn1dQrOSHHNUVkAAAARY"]
[Mon Apr 13 09:08:26.719698 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:27.177485 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:27.619684 2026] [proxy_fcgi:error] [pid 63406:tid 63428] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:27.862148 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:28.108062 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:28.349517 2026] [proxy_fcgi:error] [pid 63406:tid 63419] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:28.848184 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:29.089377 2026] [proxy_fcgi:error] [pid 63406:tid 63422] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:29.383447 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:29.624252 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 158.158.73.245:44313] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 09:08:29.871551 2026] [:error] [pid 63406:tid 63430] [client 158.158.73.245:44313] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "adxCDbHZEIkQ0Zmgp5ogpQAAANM"]
[Mon Apr 13 09:08:30.955869 2026] [:error] [pid 7228:tid 7254] [client 158.158.73.245:46154] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "adxCDgEnn1dQrOSHHNUVnAAAARg"]
[Mon Apr 13 09:08:32.628331 2026] [:error] [pid 7228:tid 7237] [client 158.158.73.245:36988] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "adxCEAEnn1dQrOSHHNUVoQAAAQc"]
[Mon Apr 13 09:08:34.141776 2026] [:error] [pid 63310:tid 63352] [client 158.158.73.245:8847] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hots.php"] [unique_id "adxCEnoXpRU5ztmwPjK65wAAAEg"]
[Mon Apr 13 09:08:35.500858 2026] [:error] [pid 63310:tid 63366] [client 158.158.73.245:50940] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "adxCE3oXpRU5ztmwPjK66gAAAFY"]
[Mon Apr 13 09:08:39.843248 2026] [:error] [pid 7228:tid 7249] [client 158.158.73.245:9033] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "adxCFwEnn1dQrOSHHNUVuQAAARM"]
[Mon Apr 13 09:08:41.066829 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:36965] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "adxCGQEnn1dQrOSHHNUVvgAAARc"]
[Mon Apr 13 09:08:42.436034 2026] [:error] [pid 63311:tid 63378] [client 158.158.73.245:46146] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin-footer.php"] [unique_id "adxCGqHjrGN1MqBCVFk8YgAAAIc"]
[Mon Apr 13 09:08:44.857333 2026] [:error] [pid 63311:tid 63383] [client 158.158.73.245:36955] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "adxCHKHjrGN1MqBCVFk8ZAAAAIw"]
[Mon Apr 13 09:08:45.734881 2026] [:error] [pid 63309:tid 63317] [client 158.158.73.245:47809] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "adxCHUpIKZ10weXpf0Wh_AAAAAQ"]
[Mon Apr 13 09:08:47.265873 2026] [:error] [pid 63309:tid 63331] [client 158.158.73.245:27057] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "adxCH0pIKZ10weXpf0Wh_wAAABI"]
[Mon Apr 13 09:08:47.929662 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:50902] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "adxCH6HjrGN1MqBCVFk8cAAAAII"]
[Mon Apr 13 09:08:48.896604 2026] [:error] [pid 63311:tid 63386] [client 158.158.73.245:8870] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "adxCIKHjrGN1MqBCVFk8dAAAAI8"]
[Mon Apr 13 09:08:50.685899 2026] [:error] [pid 63309:tid 63315] [client 158.158.73.245:9143] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "adxCIkpIKZ10weXpf0WiBwAAAAI"]
[Mon Apr 13 09:08:52.473612 2026] [:error] [pid 63311:tid 63390] [client 158.158.73.245:44320] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "adxCJKHjrGN1MqBCVFk8eQAAAJM"]
[Mon Apr 13 09:08:53.210981 2026] [:error] [pid 7228:tid 7238] [client 158.158.73.245:36961] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "adxCJQEnn1dQrOSHHNUV3QAAAQg"]
[Mon Apr 13 09:08:54.179642 2026] [:error] [pid 63311:tid 63388] [client 158.158.73.245:36928] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adxCJqHjrGN1MqBCVFk8ewAAAJE"]
[Mon Apr 13 09:08:55.749920 2026] [:error] [pid 63406:tid 63422] [client 158.158.73.245:33395] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adxCJ7HZEIkQ0Zmgp5ogwQAAAMs"]
[Mon Apr 13 09:08:59.444899 2026] [:error] [pid 63310:tid 63350] [client 158.158.73.245:37620] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adxCK3oXpRU5ztmwPjK7BAAAAEY"]
[Mon Apr 13 09:09:01.574553 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:27035] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adxCLQEnn1dQrOSHHNUV-QAAARc"]
[Mon Apr 13 09:09:04.075965 2026] [:error] [pid 7228:tid 7233] [client 158.158.73.245:52075] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adxCMAEnn1dQrOSHHNUWBQAAAQM"]
[Mon Apr 13 09:09:06.289396 2026] [:error] [pid 63406:tid 63428] [client 158.158.73.245:46173] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adxCMrHZEIkQ0Zmgp5og3gAAANE"]
[Mon Apr 13 09:09:08.107460 2026] [:error] [pid 63310:tid 63363] [client 158.158.73.245:8221] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adxCNHoXpRU5ztmwPjK7DwAAAFM"]
[Mon Apr 13 09:09:09.161479 2026] [:error] [pid 63406:tid 63420] [client 158.158.73.245:33373] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "adxCNbHZEIkQ0Zmgp5og5gAAAMk"]
[Mon Apr 13 09:09:10.451863 2026] [:error] [pid 63406:tid 63412] [client 158.158.73.245:9098] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "adxCNrHZEIkQ0Zmgp5og6gAAAME"]
[Mon Apr 13 09:09:12.152765 2026] [:error] [pid 63311:tid 63373] [client 158.158.73.245:26359] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "adxCOKHjrGN1MqBCVFk8pwAAAII"]
[Mon Apr 13 09:09:13.512791 2026] [:error] [pid 7228:tid 7253] [client 158.158.73.245:33390] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "adxCOQEnn1dQrOSHHNUWFgAAARc"]
[Mon Apr 13 09:09:15.352306 2026] [:error] [pid 63406:tid 63418] [client 158.158.73.245:37621] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/file.php"] [unique_id "adxCO7HZEIkQ0Zmgp5og_gAAAMc"]
[Mon Apr 13 09:09:19.314876 2026] [:error] [pid 63311:tid 63377] [client 158.158.73.245:26349] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "adxCP6HjrGN1MqBCVFk8tAAAAIY"]
[Mon Apr 13 09:09:21.551587 2026] [:error] [pid 7228:tid 7241] [client 158.158.73.245:8193] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "adxCQQEnn1dQrOSHHNUWNwAAAQs"]
[Mon Apr 13 09:09:23.378052 2026] [:error] [pid 63406:tid 63432] [client 158.158.73.245:50909] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "adxCQ7HZEIkQ0Zmgp5ohIwAAANU"]
[Mon Apr 13 09:09:25.661595 2026] [:error] [pid 63406:tid 63432] [client 158.158.73.245:37582] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "adxCRbHZEIkQ0Zmgp5ohLgAAANU"]
[Mon Apr 13 16:23:40.272894 2026] [proxy_fcgi:error] [pid 7228:tid 7236] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:40.509907 2026] [proxy_fcgi:error] [pid 7228:tid 7239] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:40.746845 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:41.434894 2026] [proxy_fcgi:error] [pid 7228:tid 7243] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:41.707833 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:41.953170 2026] [proxy_fcgi:error] [pid 7228:tid 7250] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:42.209311 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:42.476037 2026] [proxy_fcgi:error] [pid 7228:tid 7254] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:42.713068 2026] [proxy_fcgi:error] [pid 7228:tid 7252] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:42.960557 2026] [proxy_fcgi:error] [pid 7228:tid 7245] [client 20.19.168.95:65036] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:23:43.320500 2026] [:error] [pid 7228:tid 7253] [client 20.19.168.95:65036] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyoDwEnn1dQrOSHHNVKWwAAARc"]
[Mon Apr 13 16:23:45.124235 2026] [:error] [pid 57183:tid 57206] [client 20.19.168.95:3650] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyoETDO3t8R5NaxzYS2oQAAAVU"]
[Mon Apr 13 16:23:46.300589 2026] [:error] [pid 63310:tid 63352] [client 20.19.168.95:3665] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyoEnoXpRU5ztmwPjInPwAAAEg"]
[Mon Apr 13 16:23:47.323446 2026] [:error] [pid 63406:tid 63428] [client 20.19.168.95:3467] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyoE7HZEIkQ0Zmgp5r1vgAAANE"]
[Mon Apr 13 16:23:48.896591 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:3706] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoFDDO3t8R5NaxzYS2owAAAUI"]
[Mon Apr 13 16:23:50.420191 2026] [:error] [pid 63310:tid 63349] [client 20.19.168.95:65030] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoFnoXpRU5ztmwPjInQQAAAEU"]
[Mon Apr 13 16:23:51.941624 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:3387] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoF7HZEIkQ0Zmgp5r1xQAAAMs"]
[Mon Apr 13 16:23:54.087024 2026] [:error] [pid 57183:tid 57192] [client 20.19.168.95:3686] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoGjDO3t8R5NaxzYS2rAAAAUc"]
[Mon Apr 13 16:23:56.005010 2026] [:error] [pid 7228:tid 7246] [client 20.19.168.95:3354] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyoHAEnn1dQrOSHHNVKZAAAARA"]
[Mon Apr 13 16:24:01.276302 2026] [:error] [pid 63406:tid 63424] [client 20.19.168.95:65033] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyoIbHZEIkQ0Zmgp5r12QAAAM0"]
[Mon Apr 13 16:24:02.147839 2026] [:error] [pid 63406:tid 63419] [client 20.19.168.95:65105] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyoIrHZEIkQ0Zmgp5r13QAAAMg"]
[Mon Apr 13 16:24:02.808388 2026] [:error] [pid 63406:tid 63433] [client 20.19.168.95:3513] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyoIrHZEIkQ0Zmgp5r18QAAANY"]
[Mon Apr 13 16:24:03.434564 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:3382] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyoI7HZEIkQ0Zmgp5r2BwAAANA"]
[Mon Apr 13 16:24:04.178543 2026] [:error] [pid 63311:tid 63388] [client 20.19.168.95:3508] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyoJKHjrGN1MqBCVFnEwgAAAJE"]
[Mon Apr 13 16:24:04.737243 2026] [:error] [pid 63311:tid 63374] [client 20.19.168.95:65046] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyoJKHjrGN1MqBCVFnEwwAAAIM"]
[Mon Apr 13 16:24:05.487993 2026] [:error] [pid 9314:tid 9326] [client 20.19.168.95:3197] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyoJW_r4W8fX2GWyGSzQwAAAYo"]
[Mon Apr 13 16:24:06.464607 2026] [:error] [pid 63406:tid 63424] [client 20.19.168.95:3161] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyoJrHZEIkQ0Zmgp5r2MAAAAM0"]
[Mon Apr 13 16:24:07.421113 2026] [:error] [pid 63406:tid 63429] [client 20.19.168.95:3487] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyoJ7HZEIkQ0Zmgp5r2MQAAANI"]
[Mon Apr 13 16:24:08.136451 2026] [:error] [pid 9314:tid 9340] [client 20.19.168.95:65029] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyoKG_r4W8fX2GWyGSzSgAAAZg"]
[Mon Apr 13 16:24:09.461556 2026] [:error] [pid 7228:tid 7239] [client 20.19.168.95:3387] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyoKQEnn1dQrOSHHNVKagAAAQk"]
[Mon Apr 13 16:24:10.453544 2026] [:error] [pid 57183:tid 57201] [client 20.19.168.95:65109] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyoKjDO3t8R5NaxzYS2ygAAAVA"]
[Mon Apr 13 16:24:11.030794 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:3483] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyoKzDO3t8R5NaxzYS2zwAAAUI"]
[Mon Apr 13 16:24:12.543786 2026] [:error] [pid 63406:tid 63412] [client 20.19.168.95:3671] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyoLLHZEIkQ0Zmgp5r2QAAAAME"]
[Mon Apr 13 16:24:13.481474 2026] [:error] [pid 63406:tid 63434] [client 20.19.168.95:3672] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyoLbHZEIkQ0Zmgp5r2TgAAANc"]
[Mon Apr 13 16:24:14.282220 2026] [:error] [pid 57183:tid 57198] [client 20.19.168.95:64602] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyoLjDO3t8R5NaxzYS24QAAAU0"]
[Mon Apr 13 16:24:15.571268 2026] [:error] [pid 9314:tid 9316] [client 20.19.168.95:3137] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyoL2_r4W8fX2GWyGSzmQAAAYA"]
[Mon Apr 13 16:24:16.710524 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:3697] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyoMLHZEIkQ0Zmgp5r2ZgAAAMs"]
[Mon Apr 13 16:24:17.536670 2026] [:error] [pid 63311:tid 63381] [client 20.19.168.95:3363] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyoMaHjrGN1MqBCVFnEyAAAAIo"]
[Mon Apr 13 16:24:18.381964 2026] [:error] [pid 9314:tid 9323] [client 20.19.168.95:3366] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyoMm_r4W8fX2GWyGSzqgAAAYc"]
[Mon Apr 13 16:24:19.721805 2026] [:error] [pid 63406:tid 63426] [client 20.19.168.95:3347] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyoM7HZEIkQ0Zmgp5r2hAAAAM8"]
[Mon Apr 13 16:24:20.547363 2026] [:error] [pid 63406:tid 63431] [client 20.19.168.95:3136] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyoNLHZEIkQ0Zmgp5r2jQAAANQ"]
[Mon Apr 13 16:24:21.280510 2026] [:error] [pid 63406:tid 63434] [client 20.19.168.95:3653] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyoNbHZEIkQ0Zmgp5r2kgAAANc"]
[Mon Apr 13 16:24:22.106294 2026] [:error] [pid 63311:tid 63371] [client 20.19.168.95:3380] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoNqHjrGN1MqBCVFnEygAAAIA"]
[Mon Apr 13 16:24:22.696516 2026] [:error] [pid 7228:tid 7251] [client 20.19.168.95:3472] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoNgEnn1dQrOSHHNVKbgAAARU"]
[Mon Apr 13 16:24:23.495167 2026] [:error] [pid 63406:tid 63426] [client 20.19.168.95:3390] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoN7HZEIkQ0Zmgp5r2swAAAM8"]
[Mon Apr 13 16:24:24.105793 2026] [:error] [pid 63406:tid 63414] [client 20.19.168.95:65060] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoOLHZEIkQ0Zmgp5r2tgAAAMM"]
[Mon Apr 13 16:24:24.635292 2026] [:error] [pid 7228:tid 7253] [client 20.19.168.95:64589] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoOAEnn1dQrOSHHNVKbwAAARc"]
[Mon Apr 13 16:24:25.193069 2026] [:error] [pid 7228:tid 7238] [client 20.19.168.95:65025] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoOQEnn1dQrOSHHNVKcQAAAQg"]
[Mon Apr 13 16:24:25.711413 2026] [:error] [pid 63311:tid 63376] [client 20.19.168.95:64583] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoOaHjrGN1MqBCVFnEzAAAAIU"]
[Mon Apr 13 16:24:26.299124 2026] [:error] [pid 63406:tid 63413] [client 20.19.168.95:3162] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoOrHZEIkQ0Zmgp5r2vwAAAMI"]
[Mon Apr 13 16:24:26.985576 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:3358] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoOrHZEIkQ0Zmgp5r2yAAAAMU"]
[Mon Apr 13 16:24:27.797721 2026] [:error] [pid 63406:tid 63418] [client 20.19.168.95:3358] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoO7HZEIkQ0Zmgp5r2zAAAAMc"]
[Mon Apr 13 16:24:28.308296 2026] [:error] [pid 63406:tid 63433] [client 20.19.168.95:65147] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoPLHZEIkQ0Zmgp5r20QAAANY"]
[Mon Apr 13 16:24:29.327657 2026] [:error] [pid 63406:tid 63421] [client 20.19.168.95:65040] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoPbHZEIkQ0Zmgp5r21wAAAMo"]
[Mon Apr 13 16:24:29.995047 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:3494] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyoPbHZEIkQ0Zmgp5r22wAAAMs"]
[Mon Apr 13 16:24:30.625048 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:65090] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyoPrHZEIkQ0Zmgp5r24AAAAMU"]
[Mon Apr 13 16:24:31.204018 2026] [:error] [pid 9314:tid 9316] [client 20.19.168.95:3458] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyoP2_r4W8fX2GWyGS0MwAAAYA"]
[Mon Apr 13 16:24:31.765871 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:3684] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyoP7HZEIkQ0Zmgp5r25QAAANA"]
[Mon Apr 13 16:24:32.444016 2026] [:error] [pid 57183:tid 57205] [client 20.19.168.95:3379] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyoQDDO3t8R5NaxzYS2-AAAAVQ"]
[Mon Apr 13 16:24:33.268295 2026] [:error] [pid 57183:tid 57195] [client 20.19.168.95:64606] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyoQTDO3t8R5NaxzYS2-gAAAUo"]
[Mon Apr 13 16:24:34.415737 2026] [:error] [pid 63311:tid 63393] [client 20.19.168.95:3503] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyoQqHjrGN1MqBCVFnEzwAAAJY"]
[Mon Apr 13 16:24:36.026142 2026] [:error] [pid 57183:tid 57193] [client 20.19.168.95:65093] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyoRDDO3t8R5NaxzYS3AgAAAUg"]
[Mon Apr 13 16:24:37.239915 2026] [:error] [pid 9314:tid 9316] [client 20.19.168.95:3195] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyoRW_r4W8fX2GWyGS0RAAAAYA"]
[Mon Apr 13 16:24:38.753554 2026] [:error] [pid 63311:tid 63373] [client 20.19.168.95:65051] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyoRqHjrGN1MqBCVFnE0gAAAII"]
[Mon Apr 13 16:24:39.714559 2026] [:error] [pid 57183:tid 57189] [client 20.19.168.95:3689] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyoRzDO3t8R5NaxzYS3BwAAAUQ"]
[Mon Apr 13 16:24:40.815741 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:3180] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyoSDDO3t8R5NaxzYS3CwAAAUI"]
[Mon Apr 13 16:24:41.730593 2026] [:error] [pid 57183:tid 57207] [client 20.19.168.95:3152] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyoSTDO3t8R5NaxzYS3DwAAAVY"]
[Mon Apr 13 16:24:42.276523 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:42.512469 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:42.949055 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:43.183820 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:43.472810 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:43.810032 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:44.044965 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:44.300573 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:44.536673 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:44.894269 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:45.219517 2026] [proxy_fcgi:error] [pid 63406:tid 63427] [client 20.19.168.95:3383] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:24:45.450301 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:3383] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adyoTbHZEIkQ0Zmgp5r3AQAAAMs"]
[Mon Apr 13 16:24:46.542517 2026] [:error] [pid 7228:tid 7235] [client 20.19.168.95:3188] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adyoTgEnn1dQrOSHHNVKgQAAAQU"]
[Mon Apr 13 16:24:47.763724 2026] [:error] [pid 63406:tid 63424] [client 20.19.168.95:3707] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adyoT7HZEIkQ0Zmgp5r3CAAAAM0"]
[Mon Apr 13 16:24:49.442541 2026] [:error] [pid 63406:tid 63423] [client 20.19.168.95:3367] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "adyoUbHZEIkQ0Zmgp5r3DwAAAMw"]
[Mon Apr 13 16:24:50.630303 2026] [:error] [pid 63406:tid 63420] [client 20.19.168.95:3138] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "adyoUrHZEIkQ0Zmgp5r3EwAAAMk"]
[Mon Apr 13 16:24:51.869389 2026] [:error] [pid 63406:tid 63426] [client 20.19.168.95:3670] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "adyoU7HZEIkQ0Zmgp5r3FwAAAM8"]
[Mon Apr 13 16:24:52.879862 2026] [:error] [pid 57183:tid 57188] [client 20.19.168.95:65099] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "adyoVDDO3t8R5NaxzYS3GAAAAUM"]
[Mon Apr 13 16:24:53.938539 2026] [:error] [pid 57183:tid 57203] [client 20.19.168.95:3148] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "adyoVTDO3t8R5NaxzYS3GgAAAVI"]
[Mon Apr 13 16:24:55.536357 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:3683] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "adyoV7HZEIkQ0Zmgp5r3HAAAANA"]
[Mon Apr 13 16:24:57.116287 2026] [:error] [pid 63311:tid 63394] [client 20.19.168.95:65115] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "adyoWaHjrGN1MqBCVFnE2gAAAJc"]
[Mon Apr 13 16:24:57.916060 2026] [:error] [pid 57183:tid 57201] [client 20.19.168.95:3146] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "adyoWTDO3t8R5NaxzYS3HgAAAVA"]
[Mon Apr 13 16:24:59.597894 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:64008] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "adyoW7HZEIkQ0Zmgp5r3IgAAANA"]
[Mon Apr 13 16:25:00.571010 2026] [:error] [pid 7228:tid 7234] [client 20.19.168.95:64605] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyoXAEnn1dQrOSHHNVKigAAAQQ"]
[Mon Apr 13 16:25:01.219274 2026] [:error] [pid 63406:tid 63434] [client 20.19.168.95:3676] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyoXbHZEIkQ0Zmgp5r3JAAAANc"]
[Mon Apr 13 16:25:01.768711 2026] [:error] [pid 63406:tid 63421] [client 20.19.168.95:65052] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyoXbHZEIkQ0Zmgp5r3KAAAAMo"]
[Mon Apr 13 16:25:02.240091 2026] [:error] [pid 57183:tid 57195] [client 20.19.168.95:65113] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyoXjDO3t8R5NaxzYS3LwAAAUo"]
[Mon Apr 13 16:25:02.766874 2026] [:error] [pid 57183:tid 57185] [client 20.19.168.95:3198] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyoXjDO3t8R5NaxzYS3MQAAAUA"]
[Mon Apr 13 16:25:03.256949 2026] [:error] [pid 63406:tid 63411] [client 20.19.168.95:3469] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyoX7HZEIkQ0Zmgp5r3KwAAAMA"]
[Mon Apr 13 16:25:03.861859 2026] [:error] [pid 57183:tid 57205] [client 20.19.168.95:65041] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyoXzDO3t8R5NaxzYS3NgAAAVQ"]
[Mon Apr 13 16:25:04.431503 2026] [:error] [pid 9314:tid 9335] [client 20.19.168.95:65097] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyoYG_r4W8fX2GWyGS0VwAAAZM"]
[Mon Apr 13 16:25:05.298485 2026] [:error] [pid 63406:tid 63414] [client 20.19.168.95:3145] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyoYbHZEIkQ0Zmgp5r3LAAAAMM"]
[Mon Apr 13 16:25:05.770249 2026] [:error] [pid 7228:tid 7250] [client 20.19.168.95:65053] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyoYQEnn1dQrOSHHNVKiwAAARQ"]
[Mon Apr 13 16:25:06.242580 2026] [:error] [pid 9314:tid 9327] [client 20.19.168.95:64550] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyoYm_r4W8fX2GWyGS0XQAAAYs"]
[Mon Apr 13 16:25:06.836824 2026] [:error] [pid 9314:tid 9318] [client 20.19.168.95:65130] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyoYm_r4W8fX2GWyGS0XwAAAYI"]
[Mon Apr 13 16:25:07.504211 2026] [:error] [pid 9314:tid 9329] [client 20.19.168.95:3656] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyoY2_r4W8fX2GWyGS0YQAAAY0"]
[Mon Apr 13 16:25:07.994567 2026] [:error] [pid 63406:tid 63432] [client 20.19.168.95:3711] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyoY7HZEIkQ0Zmgp5r3LwAAANU"]
[Mon Apr 13 16:25:08.507970 2026] [:error] [pid 63406:tid 63425] [client 20.19.168.95:65035] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyoZLHZEIkQ0Zmgp5r3MQAAAM4"]
[Mon Apr 13 16:25:09.120903 2026] [:error] [pid 63310:tid 63346] [client 20.19.168.95:3341] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyoZXoXpRU5ztmwPjIngQAAAEI"]
[Mon Apr 13 16:25:09.645825 2026] [:error] [pid 57183:tid 57197] [client 20.19.168.95:3470] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyoZTDO3t8R5NaxzYS3QAAAAUw"]
[Mon Apr 13 16:25:10.409270 2026] [:error] [pid 7228:tid 7240] [client 20.19.168.95:3703] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyoZgEnn1dQrOSHHNVKjQAAAQo"]
[Mon Apr 13 16:25:11.149786 2026] [:error] [pid 7228:tid 7232] [client 20.19.168.95:3681] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyoZwEnn1dQrOSHHNVKkAAAAQI"]
[Mon Apr 13 16:25:11.663575 2026] [:error] [pid 63311:tid 63384] [client 20.19.168.95:3140] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyoZ6HjrGN1MqBCVFnE4wAAAI0"]
[Mon Apr 13 16:25:12.187945 2026] [:error] [pid 7228:tid 7242] [client 20.19.168.95:3688] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyoaAEnn1dQrOSHHNVKkgAAAQw"]
[Mon Apr 13 16:25:12.704843 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:3143] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyoaLHZEIkQ0Zmgp5r3OAAAAMU"]
[Mon Apr 13 16:25:13.245229 2026] [:error] [pid 57183:tid 57208] [client 20.19.168.95:3701] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyoaTDO3t8R5NaxzYS3RQAAAVc"]
[Mon Apr 13 16:25:13.835973 2026] [:error] [pid 63311:tid 63389] [client 20.19.168.95:63376] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyoaaHjrGN1MqBCVFnE5AAAAJI"]
[Mon Apr 13 16:25:14.397215 2026] [:error] [pid 57183:tid 57191] [client 20.19.168.95:65091] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyoajDO3t8R5NaxzYS3SQAAAUY"]
[Mon Apr 13 16:25:15.016476 2026] [:error] [pid 7228:tid 7253] [client 20.19.168.95:3349] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyoawEnn1dQrOSHHNVKmAAAARc"]
[Mon Apr 13 16:25:15.613565 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:3199] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyoa7HZEIkQ0Zmgp5r3PAAAAMs"]
[Mon Apr 13 16:25:16.179411 2026] [:error] [pid 63310:tid 63349] [client 20.19.168.95:65143] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyobHoXpRU5ztmwPjIniAAAAEU"]
[Mon Apr 13 16:25:17.317029 2026] [:error] [pid 63311:tid 63382] [client 20.19.168.95:3685] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyobaHjrGN1MqBCVFnE5gAAAIs"]
[Mon Apr 13 16:25:17.953956 2026] [:error] [pid 7228:tid 7249] [client 20.19.168.95:3365] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyobQEnn1dQrOSHHNVKnAAAARM"]
[Mon Apr 13 16:25:18.511841 2026] [:error] [pid 63311:tid 63375] [client 20.19.168.95:3669] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyobqHjrGN1MqBCVFnE6gAAAIQ"]
[Mon Apr 13 16:25:19.225645 2026] [:error] [pid 63406:tid 63431] [client 20.19.168.95:3335] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyob7HZEIkQ0Zmgp5r3RAAAANQ"]
[Mon Apr 13 16:25:19.943678 2026] [:error] [pid 63311:tid 63380] [client 20.19.168.95:65149] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyob6HjrGN1MqBCVFnE6wAAAIk"]
[Mon Apr 13 16:25:20.600778 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:65055] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyocDDO3t8R5NaxzYS3TAAAAUI"]
[Mon Apr 13 16:25:21.791618 2026] [:error] [pid 7228:tid 7241] [client 20.19.168.95:3648] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyocQEnn1dQrOSHHNVKnwAAAQs"]
[Mon Apr 13 16:25:22.719041 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:64585] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyocrHZEIkQ0Zmgp5r3VAAAANA"]
[Mon Apr 13 16:25:23.423848 2026] [:error] [pid 57183:tid 57189] [client 20.19.168.95:3344] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyoczDO3t8R5NaxzYS3UwAAAUQ"]
[Mon Apr 13 16:25:24.063885 2026] [:error] [pid 63406:tid 63421] [client 20.19.168.95:64512] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyodLHZEIkQ0Zmgp5r3XAAAAMo"]
[Mon Apr 13 16:25:24.659476 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:64598] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyodLHZEIkQ0Zmgp5r3YgAAAMU"]
[Mon Apr 13 16:25:25.482903 2026] [:error] [pid 7228:tid 7252] [client 20.19.168.95:3511] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyodQEnn1dQrOSHHNVKoQAAARY"]
[Mon Apr 13 16:25:26.241974 2026] [:error] [pid 9314:tid 9333] [client 20.19.168.95:3655] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyodm_r4W8fX2GWyGS0bQAAAZE"]
[Mon Apr 13 16:25:26.800733 2026] [:error] [pid 63311:tid 63376] [client 20.19.168.95:3658] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyodqHjrGN1MqBCVFnE7QAAAIU"]
[Mon Apr 13 16:25:28.142047 2026] [:error] [pid 57183:tid 57199] [client 20.19.168.95:3343] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyoeDDO3t8R5NaxzYS3XAAAAU4"]
[Mon Apr 13 16:25:29.306492 2026] [:error] [pid 63406:tid 63429] [client 20.19.168.95:3185] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adyoebHZEIkQ0Zmgp5r3ewAAANI"]
[Mon Apr 13 16:25:30.183725 2026] [:error] [pid 63311:tid 63374] [client 20.19.168.95:64061] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adyoeqHjrGN1MqBCVFnE7wAAAIM"]
[Mon Apr 13 16:25:31.182047 2026] [:error] [pid 7228:tid 7242] [client 20.19.168.95:3661] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adyoewEnn1dQrOSHHNVKpwAAAQw"]
[Mon Apr 13 16:25:32.750062 2026] [:error] [pid 63311:tid 63373] [client 20.19.168.95:65095] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adyofKHjrGN1MqBCVFnE8wAAAII"]
[Mon Apr 13 16:25:34.491303 2026] [:error] [pid 9314:tid 9319] [client 20.19.168.95:3654] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adyofm_r4W8fX2GWyGS0dwAAAYM"]
[Mon Apr 13 16:25:35.476376 2026] [:error] [pid 63311:tid 63379] [client 20.19.168.95:65121] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adyof6HjrGN1MqBCVFnE-AAAAIg"]
[Mon Apr 13 16:25:35.966613 2026] [:error] [pid 63311:tid 63390] [client 20.19.168.95:65062] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adyof6HjrGN1MqBCVFnE-gAAAJM"]
[Mon Apr 13 16:25:36.617270 2026] [:error] [pid 9314:tid 9329] [client 20.19.168.95:65139] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adyogG_r4W8fX2GWyGS0eAAAAY0"]
[Mon Apr 13 16:25:37.433539 2026] [:error] [pid 63309:tid 63330] [client 20.19.168.95:3178] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adyogUpIKZ10weXpf0X7TQAAABE"]
[Mon Apr 13 16:25:38.163191 2026] [:error] [pid 7228:tid 7230] [client 20.19.168.95:3666] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyoggEnn1dQrOSHHNVKsAAAAQA"]
[Mon Apr 13 16:25:38.846800 2026] [:error] [pid 7228:tid 7237] [client 20.19.168.95:65043] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyoggEnn1dQrOSHHNVKtAAAAQc"]
[Mon Apr 13 16:25:40.338142 2026] [:error] [pid 7228:tid 7251] [client 20.19.168.95:63978] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyohAEnn1dQrOSHHNVKtgAAARU"]
[Mon Apr 13 16:25:41.212630 2026] [:error] [pid 57183:tid 57195] [client 20.19.168.95:3699] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adyohTDO3t8R5NaxzYS3YgAAAUo"]
[Mon Apr 13 16:25:43.882629 2026] [:error] [pid 57183:tid 57193] [client 20.19.168.95:65044] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adyohzDO3t8R5NaxzYS3ZgAAAUg"]
[Mon Apr 13 16:25:46.848770 2026] [proxy_fcgi:error] [pid 57183:tid 57197] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:47.084368 2026] [proxy_fcgi:error] [pid 57183:tid 57189] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:47.326840 2026] [proxy_fcgi:error] [pid 57183:tid 57204] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:47.594296 2026] [proxy_fcgi:error] [pid 57183:tid 57192] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:47.831424 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:48.072944 2026] [proxy_fcgi:error] [pid 57183:tid 57185] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:48.311096 2026] [proxy_fcgi:error] [pid 57183:tid 57205] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:48.682835 2026] [proxy_fcgi:error] [pid 57183:tid 57196] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:48.941982 2026] [proxy_fcgi:error] [pid 57183:tid 57199] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:49.379641 2026] [proxy_fcgi:error] [pid 57183:tid 57206] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:49.615143 2026] [proxy_fcgi:error] [pid 57183:tid 57193] [client 20.19.168.95:64627] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:25:49.848396 2026] [:error] [pid 57183:tid 57201] [client 20.19.168.95:64627] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyojTDO3t8R5NaxzYS3dAAAAVA"]
[Mon Apr 13 16:25:50.719983 2026] [:error] [pid 57183:tid 57189] [client 20.19.168.95:65088] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyojjDO3t8R5NaxzYS3eAAAAUQ"]
[Mon Apr 13 16:25:51.314638 2026] [:error] [pid 63406:tid 63418] [client 20.19.168.95:3687] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyoj7HZEIkQ0Zmgp5r35AAAAMc"]
[Mon Apr 13 16:25:51.912922 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:3457] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adyoj7HZEIkQ0Zmgp5r36QAAAMU"]
[Mon Apr 13 16:25:52.507835 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:65111] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adyokLHZEIkQ0Zmgp5r37wAAANA"]
[Mon Apr 13 16:25:53.121897 2026] [:error] [pid 63406:tid 63411] [client 20.19.168.95:64516] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adyokbHZEIkQ0Zmgp5r38QAAAMA"]
[Mon Apr 13 16:25:53.645130 2026] [:error] [pid 63406:tid 63429] [client 20.19.168.95:65064] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adyokbHZEIkQ0Zmgp5r39AAAANI"]
[Mon Apr 13 16:25:54.333681 2026] [:error] [pid 63406:tid 63420] [client 20.19.168.95:3165] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "adyokrHZEIkQ0Zmgp5r3-gAAAMk"]
[Mon Apr 13 16:25:55.025758 2026] [:error] [pid 63309:tid 63336] [client 20.19.168.95:3459] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyok0pIKZ10weXpf0X7VwAAABc"]
[Mon Apr 13 16:25:55.536520 2026] [:error] [pid 9314:tid 9339] [client 20.19.168.95:3678] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyok2_r4W8fX2GWyGS0hgAAAZc"]
[Mon Apr 13 16:25:56.258695 2026] [:error] [pid 63310:tid 63368] [client 20.19.168.95:65140] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyolHoXpRU5ztmwPjInlAAAAFg"]
[Mon Apr 13 16:25:56.874638 2026] [:error] [pid 7228:tid 7235] [client 20.19.168.95:63375] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adyolAEnn1dQrOSHHNVKwAAAAQU"]
[Mon Apr 13 16:25:58.030513 2026] [:error] [pid 63311:tid 63393] [client 20.19.168.95:3698] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyolqHjrGN1MqBCVFnFFQAAAJY"]
[Mon Apr 13 16:25:59.405741 2026] [:error] [pid 9314:tid 9333] [client 20.19.168.95:65031] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyol2_r4W8fX2GWyGS0jwAAAZE"]
[Mon Apr 13 16:25:59.903054 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:65151] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyol7HZEIkQ0Zmgp5r4EwAAAMU"]
[Mon Apr 13 16:26:00.398491 2026] [:error] [pid 63406:tid 63431] [client 20.19.168.95:3360] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adyomLHZEIkQ0Zmgp5r4FQAAANQ"]
[Mon Apr 13 16:26:01.034983 2026] [:error] [pid 63309:tid 63332] [client 20.19.168.95:65119] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adyomUpIKZ10weXpf0X7WwAAABM"]
[Mon Apr 13 16:26:01.737579 2026] [:error] [pid 9314:tid 9335] [client 20.19.168.95:3490] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adyomW_r4W8fX2GWyGS0kwAAAZM"]
[Mon Apr 13 16:26:03.626686 2026] [:error] [pid 63310:tid 63347] [client 20.19.168.95:64552] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adyom3oXpRU5ztmwPjInngAAAEM"]
[Mon Apr 13 16:26:04.528074 2026] [:error] [pid 63310:tid 63365] [client 20.19.168.95:3139] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "adyonHoXpRU5ztmwPjInoAAAAFU"]
[Mon Apr 13 16:26:05.175346 2026] [:error] [pid 7228:tid 7249] [client 20.19.168.95:3501] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyonQEnn1dQrOSHHNVKxwAAARM"]
[Mon Apr 13 16:26:05.794282 2026] [:error] [pid 63311:tid 63394] [client 20.19.168.95:63364] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyonaHjrGN1MqBCVFnFGQAAAJc"]
[Mon Apr 13 16:26:06.871118 2026] [:error] [pid 7228:tid 7232] [client 20.19.168.95:65126] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyongEnn1dQrOSHHNVKywAAAQI"]
[Mon Apr 13 16:26:07.928567 2026] [:error] [pid 63406:tid 63428] [client 20.19.168.95:3691] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyon7HZEIkQ0Zmgp5r4KAAAANE"]
[Mon Apr 13 16:26:08.693966 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:3489] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adyooLHZEIkQ0Zmgp5r4LQAAANA"]
[Mon Apr 13 16:26:09.323513 2026] [:error] [pid 57183:tid 57195] [client 20.19.168.95:3151] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adyooTDO3t8R5NaxzYS3jQAAAUo"]
[Mon Apr 13 16:26:10.002405 2026] [:error] [pid 63406:tid 63413] [client 20.19.168.95:64604] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adyoorHZEIkQ0Zmgp5r4MwAAAMI"]
[Mon Apr 13 16:26:10.636874 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:3461] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adyoorHZEIkQ0Zmgp5r4NQAAAMU"]
[Mon Apr 13 16:26:11.057721 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:11.317363 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:11.826881 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:11.842898 2026] [:error] [pid 9314:tid 9327] [client 20.19.168.95:64619] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adyoo2_r4W8fX2GWyGS0nwAAAYs"]
[Mon Apr 13 16:26:12.085602 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:12.359748 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:12.513629 2026] [:error] [pid 57183:tid 57201] [client 20.19.168.95:3506] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adyopDDO3t8R5NaxzYS3kQAAAVA"]
[Mon Apr 13 16:26:12.619251 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:12.899611 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:13.059812 2026] [:error] [pid 9314:tid 9334] [client 20.19.168.95:3704] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adyopW_r4W8fX2GWyGS0oAAAAZI"]
[Mon Apr 13 16:26:13.159173 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:13.459866 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:13.726320 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.100.201.121:65100] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:13.988652 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:65100] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyopbHZEIkQ0Zmgp5r4VAAAAM8"]
[Mon Apr 13 16:26:13.988682 2026] [:error] [pid 63406:tid 63427] [client 20.19.168.95:3493] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adyopbHZEIkQ0Zmgp5r4VQAAANA"]
[Mon Apr 13 16:26:14.705167 2026] [:error] [pid 57183:tid 57200] [client 20.19.168.95:65107] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adyopjDO3t8R5NaxzYS3lgAAAU8"]
[Mon Apr 13 16:26:14.887084 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyopjDO3t8R5NaxzYS3mAAAAUM"]
[Mon Apr 13 16:26:15.521923 2026] [:error] [pid 63310:tid 63364] [client 20.19.168.95:65107] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adyop3oXpRU5ztmwPjInpQAAAFQ"]
[Mon Apr 13 16:26:15.974059 2026] [:error] [pid 63310:tid 63362] [client 20.100.201.121:65198] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyop3oXpRU5ztmwPjInpgAAAFI"]
[Mon Apr 13 16:26:16.059131 2026] [:error] [pid 63311:tid 63393] [client 20.19.168.95:64017] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adyoqKHjrGN1MqBCVFnFHgAAAJY"]
[Mon Apr 13 16:26:16.645778 2026] [:error] [pid 7228:tid 7250] [client 20.19.168.95:3172] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adyoqAEnn1dQrOSHHNVKzQAAARQ"]
[Mon Apr 13 16:26:16.897774 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:65129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adyoqAEnn1dQrOSHHNVKzgAAAQs"]
[Mon Apr 13 16:26:17.132322 2026] [:error] [pid 63311:tid 63382] [client 20.19.168.95:64040] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adyoqaHjrGN1MqBCVFnFHwAAAIs"]
[Mon Apr 13 16:26:17.482214 2026] [:error] [pid 63311:tid 63386] [client 20.100.201.121:64584] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoqaHjrGN1MqBCVFnFIAAAAI8"]
[Mon Apr 13 16:26:17.649376 2026] [:error] [pid 63310:tid 63352] [client 20.19.168.95:64579] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adyoqXoXpRU5ztmwPjInqAAAAEg"]
[Mon Apr 13 16:26:18.194834 2026] [:error] [pid 63311:tid 63391] [client 20.19.168.95:3163] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adyoqqHjrGN1MqBCVFnFIQAAAJQ"]
[Mon Apr 13 16:26:18.200015 2026] [:error] [pid 7228:tid 7239] [client 20.100.201.121:64660] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoqgEnn1dQrOSHHNVKzwAAAQk"]
[Mon Apr 13 16:26:18.728625 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:64700] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoqqHjrGN1MqBCVFnFIwAAAJc"]
[Mon Apr 13 16:26:18.786893 2026] [:error] [pid 63309:tid 63321] [client 20.19.168.95:3516] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adyoqkpIKZ10weXpf0X7YwAAAAg"]
[Mon Apr 13 16:26:19.284438 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64647] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "adyoqzDO3t8R5NaxzYS3nAAAAUw"]
[Mon Apr 13 16:26:19.353205 2026] [:error] [pid 9314:tid 9325] [client 20.19.168.95:64513] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adyoq2_r4W8fX2GWyGS0pAAAAYk"]
[Mon Apr 13 16:26:19.929517 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:64605] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyoq0pIKZ10weXpf0X7ZAAAAAk"]
[Mon Apr 13 16:26:20.144764 2026] [:error] [pid 63406:tid 63411] [client 20.19.168.95:65123] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adyorLHZEIkQ0Zmgp5r4WAAAAMA"]
[Mon Apr 13 16:26:20.627454 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:64143] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyorG_r4W8fX2GWyGS0qAAAAYU"]
[Mon Apr 13 16:26:21.019217 2026] [:error] [pid 9314:tid 9333] [client 20.19.168.95:65061] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adyorW_r4W8fX2GWyGS0qQAAAZE"]
[Mon Apr 13 16:26:21.867886 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:65188] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyorW_r4W8fX2GWyGS0qwAAAYI"]
[Mon Apr 13 16:26:21.894844 2026] [:error] [pid 9314:tid 9336] [client 20.19.168.95:3372] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adyorW_r4W8fX2GWyGS0rAAAAZQ"]
[Mon Apr 13 16:26:22.405070 2026] [:error] [pid 63406:tid 63425] [client 20.19.168.95:65129] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adyorrHZEIkQ0Zmgp5r4XgAAAM4"]
[Mon Apr 13 16:26:22.898383 2026] [:error] [pid 63406:tid 63413] [client 20.100.201.121:64648] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adyorrHZEIkQ0Zmgp5r4YAAAAMI"]
[Mon Apr 13 16:26:22.927731 2026] [:error] [pid 63406:tid 63416] [client 20.19.168.95:63403] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adyorrHZEIkQ0Zmgp5r4YQAAAMU"]
[Mon Apr 13 16:26:23.542959 2026] [:error] [pid 63311:tid 63392] [client 20.19.168.95:3667] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adyor6HjrGN1MqBCVFnFJQAAAJU"]
[Mon Apr 13 16:26:23.650683 2026] [:error] [pid 7228:tid 7242] [client 20.100.201.121:64676] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyorwEnn1dQrOSHHNVK1QAAAQw"]
[Mon Apr 13 16:26:24.336754 2026] [:error] [pid 9314:tid 9332] [client 20.19.168.95:64025] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adyosG_r4W8fX2GWyGS0rgAAAZA"]
[Mon Apr 13 16:26:24.455401 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65161] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyosG_r4W8fX2GWyGS0rwAAAYM"]
[Mon Apr 13 16:26:24.881008 2026] [:error] [pid 7228:tid 7231] [client 20.19.168.95:3371] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adyosAEnn1dQrOSHHNVK1gAAAQE"]
[Mon Apr 13 16:26:25.441981 2026] [:error] [pid 63311:tid 63383] [client 20.100.201.121:65162] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyosaHjrGN1MqBCVFnFKgAAAIw"]
[Mon Apr 13 16:26:25.463110 2026] [:error] [pid 63311:tid 63384] [client 20.19.168.95:64559] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adyosaHjrGN1MqBCVFnFKwAAAI0"]
[Mon Apr 13 16:26:26.422296 2026] [:error] [pid 9314:tid 9331] [client 20.19.168.95:3389] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adyosm_r4W8fX2GWyGS0sAAAAY8"]
[Mon Apr 13 16:26:26.612143 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:65142] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beerd.php"] [unique_id "adyosm_r4W8fX2GWyGS0sgAAAYg"]
[Mon Apr 13 16:26:27.005699 2026] [:error] [pid 57183:tid 57199] [client 20.19.168.95:3342] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adyoszDO3t8R5NaxzYS3nwAAAU4"]
[Mon Apr 13 16:26:27.497047 2026] [:error] [pid 63309:tid 63331] [client 20.100.201.121:64649] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyos0pIKZ10weXpf0X7aQAAABI"]
[Mon Apr 13 16:26:27.692616 2026] [:error] [pid 63309:tid 63329] [client 20.19.168.95:3502] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adyos0pIKZ10weXpf0X7agAAABA"]
[Mon Apr 13 16:26:28.192366 2026] [:error] [pid 57183:tid 57185] [client 20.19.168.95:65045] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adyotDDO3t8R5NaxzYS3ogAAAUA"]
[Mon Apr 13 16:26:28.502996 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64678] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyotDDO3t8R5NaxzYS3pgAAAUg"]
[Mon Apr 13 16:26:28.994596 2026] [:error] [pid 9314:tid 9333] [client 20.19.168.95:63945] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adyotG_r4W8fX2GWyGS0twAAAZE"]
[Mon Apr 13 16:26:29.865040 2026] [:error] [pid 9314:tid 9332] [client 20.19.168.95:3169] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adyotW_r4W8fX2GWyGS0uQAAAZA"]
[Mon Apr 13 16:26:30.202263 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65120] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyotm_r4W8fX2GWyGS0uwAAAYM"]
[Mon Apr 13 16:26:30.369086 2026] [:error] [pid 63310:tid 63349] [client 20.19.168.95:65096] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyotnoXpRU5ztmwPjInrwAAAEU"]
[Mon Apr 13 16:26:30.540019 2026] [:error] [pid 57183:tid 57185] [client 20.19.168.95:65045] [client 20.19.168.95] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.130.202.55_64f59efb87dbdb06a869cf4460d83cf1b25c83f5"): Internal error (specific information not available) [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adyotDDO3t8R5NaxzYS3ogAAAUA"]
[Mon Apr 13 16:26:31.049078 2026] [:error] [pid 9314:tid 9324] [client 20.19.168.95:3334] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyot2_r4W8fX2GWyGS0vQAAAYg"]
[Mon Apr 13 16:26:31.166251 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64701] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "adyot7HZEIkQ0Zmgp5r4ZwAAAMQ"]
[Mon Apr 13 16:26:31.844407 2026] [:error] [pid 9314:tid 9320] [client 20.19.168.95:64565] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyot2_r4W8fX2GWyGS0wQAAAYQ"]
[Mon Apr 13 16:26:32.173731 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:65092] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyouG_r4W8fX2GWyGS0wgAAAYc"]
[Mon Apr 13 16:26:32.362364 2026] [:error] [pid 63310:tid 63352] [client 20.19.168.95:64568] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyouHoXpRU5ztmwPjInsgAAAEg"]
[Mon Apr 13 16:26:32.973383 2026] [:error] [pid 63311:tid 63392] [client 20.100.201.121:65159] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyouKHjrGN1MqBCVFnFLwAAAJU"]
[Mon Apr 13 16:26:32.985727 2026] [:error] [pid 63311:tid 63371] [client 20.19.168.95:63985] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adyouKHjrGN1MqBCVFnFMAAAAIA"]
[Mon Apr 13 16:26:33.590386 2026] [:error] [pid 7228:tid 7238] [client 20.19.168.95:3189] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adyouQEnn1dQrOSHHNVK3wAAAQg"]
[Mon Apr 13 16:26:34.038319 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyoukpIKZ10weXpf0X7bQAAAAk"]
[Mon Apr 13 16:26:34.246827 2026] [:error] [pid 7228:tid 7231] [client 20.19.168.95:64597] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adyougEnn1dQrOSHHNVK4QAAAQE"]
[Mon Apr 13 16:26:34.722679 2026] [:error] [pid 63406:tid 63426] [client 20.19.168.95:63947] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adyourHZEIkQ0Zmgp5r4bQAAAM8"]
[Mon Apr 13 16:26:34.912434 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:65208] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "adyougEnn1dQrOSHHNVK4wAAARE"]
[Mon Apr 13 16:26:35.256995 2026] [:error] [pid 63309:tid 63336] [client 20.19.168.95:65057] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adyou0pIKZ10weXpf0X7cAAAABc"]
[Mon Apr 13 16:26:35.773143 2026] [:error] [pid 57183:tid 57205] [client 20.19.168.95:3464] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adyouzDO3t8R5NaxzYS3sQAAAVQ"]
[Mon Apr 13 16:26:35.975424 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64586] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyou2_r4W8fX2GWyGS0xQAAAYI"]
[Mon Apr 13 16:26:36.247398 2026] [:error] [pid 7228:tid 7245] [client 20.19.168.95:3474] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adyovAEnn1dQrOSHHNVK5AAAAQ8"]
[Mon Apr 13 16:26:36.739438 2026] [:error] [pid 57183:tid 57189] [client 20.19.168.95:65094] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adyovDDO3t8R5NaxzYS3tAAAAUQ"]
[Mon Apr 13 16:26:36.944917 2026] [:error] [pid 57183:tid 57206] [client 20.100.201.121:64593] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyovDDO3t8R5NaxzYS3tQAAAVU"]
[Mon Apr 13 16:26:37.322135 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:65042] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adyovbHZEIkQ0Zmgp5r4cQAAAMs"]
[Mon Apr 13 16:26:37.873498 2026] [:error] [pid 63406:tid 63412] [client 20.19.168.95:3708] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adyovbHZEIkQ0Zmgp5r4cwAAAME"]
[Mon Apr 13 16:26:37.991833 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64662] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyovbHZEIkQ0Zmgp5r4dAAAAMw"]
[Mon Apr 13 16:26:39.010381 2026] [:error] [pid 7228:tid 7252] [client 20.19.168.95:64560] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adyovwEnn1dQrOSHHNVK5gAAARY"]
[Mon Apr 13 16:26:39.334601 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:63703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "adyov7HZEIkQ0Zmgp5r4dwAAAMQ"]
[Mon Apr 13 16:26:40.253910 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64581] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyowLHZEIkQ0Zmgp5r4ewAAANM"]
[Mon Apr 13 16:26:40.354754 2026] [:error] [pid 63406:tid 63411] [client 20.19.168.95:65087] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adyowLHZEIkQ0Zmgp5r4fAAAAMA"]
[Mon Apr 13 16:26:40.883171 2026] [:error] [pid 57183:tid 57204] [client 20.19.168.95:65102] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adyowDDO3t8R5NaxzYS3ugAAAVM"]
[Mon Apr 13 16:26:41.246599 2026] [:error] [pid 63309:tid 63335] [client 20.100.201.121:64631] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyowUpIKZ10weXpf0X7cQAAABY"]
[Mon Apr 13 16:26:41.412523 2026] [:error] [pid 63310:tid 63350] [client 20.19.168.95:63382] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adyowXoXpRU5ztmwPjIntAAAAEY"]
[Mon Apr 13 16:26:42.109416 2026] [:error] [pid 63406:tid 63428] [client 20.19.168.95:65092] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adyowrHZEIkQ0Zmgp5r4gAAAANE"]
[Mon Apr 13 16:26:42.411970 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64639] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyowrHZEIkQ0Zmgp5r4ggAAAMw"]
[Mon Apr 13 16:26:42.905995 2026] [:error] [pid 63311:tid 63389] [client 20.19.168.95:65128] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adyowqHjrGN1MqBCVFnFOQAAAJI"]
[Mon Apr 13 16:26:43.382148 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:65118] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adyow7HZEIkQ0Zmgp5r4hAAAAMQ"]
[Mon Apr 13 16:26:44.159462 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:65185] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoxLHZEIkQ0Zmgp5r4hgAAAM8"]
[Mon Apr 13 16:26:44.447776 2026] [:error] [pid 63406:tid 63432] [client 20.19.168.95:64554] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adyoxLHZEIkQ0Zmgp5r4hwAAANU"]
[Mon Apr 13 16:26:44.957502 2026] [:error] [pid 63309:tid 63314] [client 20.100.201.121:64633] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoxEpIKZ10weXpf0X7cwAAAAE"]
[Mon Apr 13 16:26:45.573325 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:64136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoxTDO3t8R5NaxzYS3wQAAAU8"]
[Mon Apr 13 16:26:46.021525 2026] [:error] [pid 57183:tid 57191] [client 20.19.168.95:64580] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adyoxjDO3t8R5NaxzYS3xgAAAUY"]
[Mon Apr 13 16:26:46.367004 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65109] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "adyoxjDO3t8R5NaxzYS3ygAAAUM"]
[Mon Apr 13 16:26:46.915736 2026] [:error] [pid 63406:tid 63431] [client 20.19.168.95:3337] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adyoxrHZEIkQ0Zmgp5r4jQAAANQ"]
[Mon Apr 13 16:26:47.019543 2026] [:error] [pid 63309:tid 63320] [client 20.100.201.121:64679] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyox0pIKZ10weXpf0X7dAAAAAc"]
[Mon Apr 13 16:26:47.613278 2026] [:error] [pid 63406:tid 63418] [client 20.100.201.121:65108] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyox7HZEIkQ0Zmgp5r4kwAAAMc"]
[Mon Apr 13 16:26:47.980566 2026] [:error] [pid 63406:tid 63420] [client 20.19.168.95:65037] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adyox7HZEIkQ0Zmgp5r4lwAAAMk"]
[Mon Apr 13 16:26:48.224022 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:65196] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoyDDO3t8R5NaxzYS3zgAAAUg"]
[Mon Apr 13 16:26:48.828424 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64612] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "adyoyLHZEIkQ0Zmgp5r4nAAAAMw"]
[Mon Apr 13 16:26:49.391212 2026] [:error] [pid 7228:tid 7231] [client 20.100.201.121:64675] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoyQEnn1dQrOSHHNVK6gAAAQE"]
[Mon Apr 13 16:26:49.894742 2026] [proxy_fcgi:error] [pid 57183:tid 57208] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:50.193441 2026] [:error] [pid 7228:tid 7232] [client 20.100.201.121:64604] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoygEnn1dQrOSHHNVK7AAAAQI"]
[Mon Apr 13 16:26:50.396401 2026] [proxy_fcgi:error] [pid 57183:tid 57204] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:50.780521 2026] [proxy_fcgi:error] [pid 57183:tid 57206] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:50.929661 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64694] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoym_r4W8fX2GWyGS0ygAAAYI"]
[Mon Apr 13 16:26:51.077349 2026] [proxy_fcgi:error] [pid 57183:tid 57199] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:51.448936 2026] [proxy_fcgi:error] [pid 57183:tid 57205] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:51.592561 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:65173] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "adyoy2_r4W8fX2GWyGS0zAAAAYg"]
[Mon Apr 13 16:26:51.700686 2026] [proxy_fcgi:error] [pid 57183:tid 57209] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:51.937714 2026] [proxy_fcgi:error] [pid 57183:tid 57193] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:52.182731 2026] [proxy_fcgi:error] [pid 57183:tid 57190] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:52.244947 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:65192] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyozDDO3t8R5NaxzYS32wAAAU8"]
[Mon Apr 13 16:26:52.419842 2026] [proxy_fcgi:error] [pid 57183:tid 57208] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:52.678154 2026] [proxy_fcgi:error] [pid 57183:tid 57189] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:52.887408 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:64595] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyozKHjrGN1MqBCVFnFPwAAAIQ"]
[Mon Apr 13 16:26:52.946646 2026] [proxy_fcgi:error] [pid 57183:tid 57194] [client 20.19.168.95:3338] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:26:53.182960 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:3338] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adyozTDO3t8R5NaxzYS33wAAAUI"]
[Mon Apr 13 16:26:53.512563 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64677] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyozaHjrGN1MqBCVFnFQQAAAJY"]
[Mon Apr 13 16:26:54.212575 2026] [:error] [pid 7228:tid 7241] [client 20.19.168.95:3368] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adyozgEnn1dQrOSHHNVK9wAAAQs"]
[Mon Apr 13 16:26:54.242278 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:64147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "adyozgEnn1dQrOSHHNVK-AAAARQ"]
[Mon Apr 13 16:26:54.958320 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:65172] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyozqHjrGN1MqBCVFnFQwAAAJc"]
[Mon Apr 13 16:26:55.446456 2026] [:error] [pid 63406:tid 63411] [client 20.19.168.95:64587] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adyoz7HZEIkQ0Zmgp5r4pgAAAMA"]
[Mon Apr 13 16:26:55.811853 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyoz2_r4W8fX2GWyGS08wAAAZE"]
[Mon Apr 13 16:26:56.098744 2026] [:error] [pid 63311:tid 63395] [client 20.19.168.95:65049] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "adyo0KHjrGN1MqBCVFnFRAAAAJg"]
[Mon Apr 13 16:26:56.606275 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64628] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyo0DDO3t8R5NaxzYS34QAAAUc"]
[Mon Apr 13 16:26:56.770248 2026] [:error] [pid 63311:tid 63372] [client 20.19.168.95:64038] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyo0KHjrGN1MqBCVFnFRgAAAIE"]
[Mon Apr 13 16:26:57.502948 2026] [:error] [pid 57183:tid 57208] [client 20.19.168.95:65108] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyo0TDO3t8R5NaxzYS35AAAAVc"]
[Mon Apr 13 16:26:57.641753 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:65136] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fetch.php"] [unique_id "adyo0W_r4W8fX2GWyGS0-gAAAZM"]
[Mon Apr 13 16:26:58.403729 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65116] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyo0jDO3t8R5NaxzYS36gAAAUM"]
[Mon Apr 13 16:26:58.434298 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:64578] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyo0jDO3t8R5NaxzYS36wAAAUI"]
[Mon Apr 13 16:26:58.992906 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64654] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyo0rHZEIkQ0Zmgp5r4qgAAAMw"]
[Mon Apr 13 16:26:59.367342 2026] [:error] [pid 63406:tid 63424] [client 20.19.168.95:65050] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adyo07HZEIkQ0Zmgp5r4qwAAAM0"]
[Mon Apr 13 16:26:59.859532 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64601] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyo07HZEIkQ0Zmgp5r4rwAAAMM"]
[Mon Apr 13 16:27:00.303598 2026] [:error] [pid 57183:tid 57203] [client 20.19.168.95:3696] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adyo1DDO3t8R5NaxzYS38AAAAVI"]
[Mon Apr 13 16:27:00.513835 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:65158] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adyo1LHZEIkQ0Zmgp5r4tAAAAMA"]
[Mon Apr 13 16:27:01.556269 2026] [:error] [pid 63406:tid 63424] [client 20.19.168.95:65080] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adyo1bHZEIkQ0Zmgp5r4vgAAAM0"]
[Mon Apr 13 16:27:01.587158 2026] [:error] [pid 57183:tid 57209] [client 20.100.201.121:64632] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyo1TDO3t8R5NaxzYS38gAAAVg"]
[Mon Apr 13 16:27:02.365658 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64125] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyo1rHZEIkQ0Zmgp5r4wAAAAMM"]
[Mon Apr 13 16:27:02.918833 2026] [:error] [pid 9314:tid 9318] [client 20.19.168.95:3183] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adyo1m_r4W8fX2GWyGS0_QAAAYI"]
[Mon Apr 13 16:27:03.984989 2026] [:error] [pid 63311:tid 63383] [client 20.19.168.95:64543] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "adyo16HjrGN1MqBCVFnFSAAAAIw"]
[Mon Apr 13 16:27:04.117130 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:64073] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyo2LHZEIkQ0Zmgp5r4ygAAAME"]
[Mon Apr 13 16:27:05.044434 2026] [:error] [pid 63311:tid 63385] [client 20.100.201.121:65178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adyo2aHjrGN1MqBCVFnFSQAAAI4"]
[Mon Apr 13 16:27:05.196941 2026] [:error] [pid 63311:tid 63376] [client 20.19.168.95:3192] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adyo2aHjrGN1MqBCVFnFSgAAAIU"]
[Mon Apr 13 16:27:06.191319 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:64703] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "adyo2jDO3t8R5NaxzYS3-AAAAUg"]
[Mon Apr 13 16:27:06.378832 2026] [:error] [pid 57183:tid 57198] [client 20.19.168.95:3693] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adyo2jDO3t8R5NaxzYS3-wAAAU0"]
[Mon Apr 13 16:27:07.233016 2026] [:error] [pid 63309:tid 63313] [client 20.19.168.95:65058] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adyo20pIKZ10weXpf0X7eQAAAAA"]
[Mon Apr 13 16:27:07.509016 2026] [:error] [pid 63311:tid 63382] [client 20.100.201.121:65213] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "adyo26HjrGN1MqBCVFnFTQAAAIs"]
[Mon Apr 13 16:27:08.053107 2026] [:error] [pid 9314:tid 9327] [client 20.19.168.95:64052] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "adyo3G_r4W8fX2GWyGS0_gAAAYs"]
[Mon Apr 13 16:27:08.335835 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64672] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "adyo3DDO3t8R5NaxzYS3_gAAAVE"]
[Mon Apr 13 16:27:08.865686 2026] [:error] [pid 63311:tid 63373] [client 20.19.168.95:3364] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyo3KHjrGN1MqBCVFnFTgAAAII"]
[Mon Apr 13 16:27:08.923842 2026] [:error] [pid 63311:tid 63378] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oircv.php"] [unique_id "adyo3KHjrGN1MqBCVFnFTwAAAIc"]
[Mon Apr 13 16:27:09.449916 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:64686] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "adyo3UpIKZ10weXpf0X7egAAABQ"]
[Mon Apr 13 16:27:09.608650 2026] [:error] [pid 63311:tid 63393] [client 20.19.168.95:3359] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyo3aHjrGN1MqBCVFnFUQAAAJY"]
[Mon Apr 13 16:27:10.043618 2026] [:error] [pid 63311:tid 63389] [client 20.100.201.121:65098] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "adyo3qHjrGN1MqBCVFnFUgAAAJI"]
[Mon Apr 13 16:27:10.101431 2026] [:error] [pid 57183:tid 57189] [client 20.19.168.95:3370] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyo3jDO3t8R5NaxzYS4AQAAAUQ"]
[Mon Apr 13 16:27:10.852056 2026] [:error] [pid 57183:tid 57203] [client 20.19.168.95:65141] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adyo3jDO3t8R5NaxzYS4AgAAAVI"]
[Mon Apr 13 16:27:10.903312 2026] [:error] [pid 63309:tid 63315] [client 20.100.201.121:64634] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "adyo3kpIKZ10weXpf0X7fQAAAAI"]
[Mon Apr 13 16:27:11.685629 2026] [:error] [pid 7228:tid 7233] [client 20.19.168.95:64573] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adyo3wEnn1dQrOSHHNVLEQAAAQM"]
[Mon Apr 13 16:27:12.132358 2026] [:error] [pid 9314:tid 9319] [client 20.100.201.121:65168] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "adyo4G_r4W8fX2GWyGS1AAAAAYM"]
[Mon Apr 13 16:27:12.174370 2026] [:error] [pid 63311:tid 63383] [client 20.19.168.95:64558] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adyo4KHjrGN1MqBCVFnFVQAAAIw"]
[Mon Apr 13 16:27:12.771819 2026] [:error] [pid 9314:tid 9325] [client 20.19.168.95:65116] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adyo4G_r4W8fX2GWyGS1AQAAAYk"]
[Mon Apr 13 16:27:12.778764 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:64645] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adyo4DDO3t8R5NaxzYS4BAAAAUo"]
[Mon Apr 13 16:27:13.664386 2026] [proxy_fcgi:error] [pid 63311:tid 63384] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:13.774887 2026] [:error] [pid 9314:tid 9332] [client 20.19.168.95:3159] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adyo4W_r4W8fX2GWyGS1AwAAAZA"]
[Mon Apr 13 16:27:13.938453 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:14.227624 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:14.479460 2026] [:error] [pid 57183:tid 57200] [client 20.19.168.95:63965] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adyo4jDO3t8R5NaxzYS4DQAAAU8"]
[Mon Apr 13 16:27:14.495415 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:14.756410 2026] [proxy_fcgi:error] [pid 63311:tid 63389] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:15.042205 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:15.302919 2026] [proxy_fcgi:error] [pid 63311:tid 63394] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:15.417350 2026] [:error] [pid 63310:tid 63360] [client 20.19.168.95:65146] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adyo43oXpRU5ztmwPjInwAAAAFA"]
[Mon Apr 13 16:27:15.585079 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:15.846935 2026] [proxy_fcgi:error] [pid 63311:tid 63395] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:16.124167 2026] [proxy_fcgi:error] [pid 63311:tid 63392] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:16.385250 2026] [proxy_fcgi:error] [pid 63311:tid 63387] [client 20.100.201.121:64606] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:16.655619 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64606] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyo5KHjrGN1MqBCVFnFZwAAAIM"]
[Mon Apr 13 16:27:17.040500 2026] [:error] [pid 57183:tid 57198] [client 20.19.168.95:63380] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adyo5TDO3t8R5NaxzYS4EAAAAU0"]
[Mon Apr 13 16:27:17.582036 2026] [:error] [pid 57183:tid 57207] [client 20.100.201.121:65102] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyo5TDO3t8R5NaxzYS4EQAAAVY"]
[Mon Apr 13 16:27:18.284807 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:63693] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyo5jDO3t8R5NaxzYS4FQAAAUs"]
[Mon Apr 13 16:27:18.536962 2026] [:error] [pid 57183:tid 57187] [client 20.19.168.95:64553] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adyo5jDO3t8R5NaxzYS4FgAAAUI"]
[Mon Apr 13 16:27:19.201930 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64622] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "adyo5zDO3t8R5NaxzYS4GQAAAUw"]
[Mon Apr 13 16:27:20.305668 2026] [:error] [pid 9314:tid 9327] [client 20.19.168.95:65125] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adyo6G_r4W8fX2GWyGS1CgAAAYs"]
[Mon Apr 13 16:27:20.545759 2026] [:error] [pid 57183:tid 57205] [client 20.100.201.121:65094] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyo6DDO3t8R5NaxzYS4GgAAAVQ"]
[Mon Apr 13 16:27:21.076435 2026] [:error] [pid 57183:tid 57191] [client 20.19.168.95:3191] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adyo6TDO3t8R5NaxzYS4HAAAAUY"]
[Mon Apr 13 16:27:21.265585 2026] [:error] [pid 63310:tid 63352] [client 20.100.201.121:64139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyo6XoXpRU5ztmwPjInwgAAAEg"]
[Mon Apr 13 16:27:21.984963 2026] [:error] [pid 7228:tid 7237] [client 20.19.168.95:3181] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adyo6QEnn1dQrOSHHNVLGwAAAQc"]
[Mon Apr 13 16:27:22.324705 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:63706] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyo6gEnn1dQrOSHHNVLHQAAAQU"]
[Mon Apr 13 16:27:22.778871 2026] [:error] [pid 63406:tid 63417] [client 20.19.168.95:3657] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adyo6rHZEIkQ0Zmgp5r42wAAAMY"]
[Mon Apr 13 16:27:23.259912 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:64619] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "adyo6zDO3t8R5NaxzYS4IQAAAUc"]
[Mon Apr 13 16:27:23.519762 2026] [:error] [pid 57183:tid 57202] [client 20.19.168.95:64581] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adyo6zDO3t8R5NaxzYS4IgAAAVE"]
[Mon Apr 13 16:27:24.227111 2026] [:error] [pid 63310:tid 63362] [client 20.100.201.121:64625] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyo7HoXpRU5ztmwPjInwwAAAFI"]
[Mon Apr 13 16:27:24.715922 2026] [:error] [pid 9314:tid 9320] [client 20.19.168.95:63980] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adyo7G_r4W8fX2GWyGS1EAAAAYQ"]
[Mon Apr 13 16:27:24.993062 2026] [:error] [pid 63311:tid 63371] [client 20.100.201.121:65160] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyo7KHjrGN1MqBCVFnFbAAAAIA"]
[Mon Apr 13 16:27:25.558174 2026] [:error] [pid 9314:tid 9321] [client 20.19.168.95:65081] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adyo7W_r4W8fX2GWyGS1EQAAAYU"]
[Mon Apr 13 16:27:25.918305 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:64598] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyo7TDO3t8R5NaxzYS4JwAAAUM"]
[Mon Apr 13 16:27:26.997348 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64641] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "adyo7m_r4W8fX2GWyGS1FwAAAYI"]
[Mon Apr 13 16:27:27.464870 2026] [:error] [pid 63311:tid 63392] [client 20.19.168.95:65066] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adyo76HjrGN1MqBCVFnFcAAAAJU"]
[Mon Apr 13 16:27:27.639228 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:64688] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyo72_r4W8fX2GWyGS1GQAAAYc"]
[Mon Apr 13 16:27:28.198061 2026] [:error] [pid 9314:tid 9326] [client 20.19.168.95:64631] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adyo8G_r4W8fX2GWyGS1IAAAAYo"]
[Mon Apr 13 16:27:28.227444 2026] [:error] [pid 9314:tid 9331] [client 20.100.201.121:64092] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyo8G_r4W8fX2GWyGS1IQAAAY8"]
[Mon Apr 13 16:27:28.887540 2026] [:error] [pid 63311:tid 63387] [client 20.19.168.95:65104] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adyo8KHjrGN1MqBCVFnFcQAAAJA"]
[Mon Apr 13 16:27:28.910909 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64669] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyo8KHjrGN1MqBCVFnFcgAAAIM"]
[Mon Apr 13 16:27:29.567479 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:65131] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adyo8W_r4W8fX2GWyGS1JAAAAYI"]
[Mon Apr 13 16:27:29.934627 2026] [:error] [pid 63311:tid 63381] [client 20.19.168.95:3702] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adyo8aHjrGN1MqBCVFnFdAAAAIo"]
[Mon Apr 13 16:27:30.274898 2026] [:error] [pid 7228:tid 7248] [client 20.100.201.121:64084] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyo8gEnn1dQrOSHHNVLJQAAARI"]
[Mon Apr 13 16:27:30.800941 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:65093] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyo8m_r4W8fX2GWyGS1KQAAAYg"]
[Mon Apr 13 16:27:30.863200 2026] [:error] [pid 63309:tid 63317] [client 20.19.168.95:63300] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adyo8kpIKZ10weXpf0X7iAAAAAQ"]
[Mon Apr 13 16:27:31.383880 2026] [:error] [pid 63309:tid 63314] [client 20.100.201.121:64130] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyo80pIKZ10weXpf0X7igAAAAE"]
[Mon Apr 13 16:27:31.664550 2026] [:error] [pid 9314:tid 9317] [client 20.19.168.95:65057] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adyo82_r4W8fX2GWyGS1KwAAAYE"]
[Mon Apr 13 16:27:32.044898 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:65187] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "adyo9G_r4W8fX2GWyGS1LAAAAZI"]
[Mon Apr 13 16:27:32.161897 2026] [:error] [pid 63311:tid 63378] [client 20.19.168.95:65112] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adyo9KHjrGN1MqBCVFnFdgAAAIc"]
[Mon Apr 13 16:27:32.563665 2026] [:error] [pid 57183:tid 57204] [client 20.100.201.121:65200] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyo9DDO3t8R5NaxzYS4KQAAAVM"]
[Mon Apr 13 16:27:32.864194 2026] [:error] [pid 9314:tid 9333] [client 20.19.168.95:63367] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adyo9G_r4W8fX2GWyGS1MQAAAZE"]
[Mon Apr 13 16:27:33.175711 2026] [:error] [pid 63309:tid 63327] [client 20.100.201.121:63668] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyo9UpIKZ10weXpf0X7jAAAAA4"]
[Mon Apr 13 16:27:33.606676 2026] [:error] [pid 63309:tid 63313] [client 20.19.168.95:3186] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adyo9UpIKZ10weXpf0X7jgAAAAA"]
[Mon Apr 13 16:27:33.929442 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:65139] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyo9W_r4W8fX2GWyGS1NQAAAYE"]
[Mon Apr 13 16:27:34.255769 2026] [:error] [pid 7228:tid 7240] [client 20.19.168.95:65034] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adyo9gEnn1dQrOSHHNVLLQAAAQo"]
[Mon Apr 13 16:27:34.568967 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:64590] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adyo9kpIKZ10weXpf0X7kQAAABQ"]
[Mon Apr 13 16:27:34.770525 2026] [:error] [pid 7228:tid 7254] [client 20.19.168.95:63982] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adyo9gEnn1dQrOSHHNVLLgAAARg"]
[Mon Apr 13 16:27:35.224021 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:64146] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyo9wEnn1dQrOSHHNVLNAAAARQ"]
[Mon Apr 13 16:27:35.855043 2026] [:error] [pid 7228:tid 7231] [client 20.19.168.95:64551] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adyo9wEnn1dQrOSHHNVLNwAAAQE"]
[Mon Apr 13 16:27:36.024876 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:64666] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyo-AEnn1dQrOSHHNVLOAAAAQY"]
[Mon Apr 13 16:27:36.615128 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:65194] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyo-AEnn1dQrOSHHNVLPAAAAQo"]
[Mon Apr 13 16:27:36.616578 2026] [:error] [pid 7228:tid 7238] [client 20.19.168.95:64634] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adyo-AEnn1dQrOSHHNVLPQAAAQg"]
[Mon Apr 13 16:27:37.575834 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64615] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "adyo-bHZEIkQ0Zmgp5r46AAAANM"]
[Mon Apr 13 16:27:37.890217 2026] [:error] [pid 63406:tid 63413] [client 20.19.168.95:64630] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adyo-bHZEIkQ0Zmgp5r46gAAAMI"]
[Mon Apr 13 16:27:38.184201 2026] [:error] [pid 63406:tid 63428] [client 20.100.201.121:64638] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyo-rHZEIkQ0Zmgp5r46wAAANE"]
[Mon Apr 13 16:27:38.875190 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64148] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyo-rHZEIkQ0Zmgp5r47wAAAMQ"]
[Mon Apr 13 16:27:39.442567 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64166] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyo-7HZEIkQ0Zmgp5r48QAAAMM"]
[Mon Apr 13 16:27:39.677115 2026] [:error] [pid 63406:tid 63435] [client 20.19.168.95:3514] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adyo-7HZEIkQ0Zmgp5r48wAAANg"]
[Mon Apr 13 16:27:39.965763 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "adyo-7HZEIkQ0Zmgp5r49QAAAMo"]
[Mon Apr 13 16:27:40.585488 2026] [:error] [pid 63310:tid 63344] [client 20.100.201.121:65144] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyo_HoXpRU5ztmwPjInygAAAEA"]
[Mon Apr 13 16:27:40.621716 2026] [:error] [pid 9314:tid 9328] [client 20.19.168.95:3477] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adyo_G_r4W8fX2GWyGS1OQAAAYw"]
[Mon Apr 13 16:27:41.123165 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:64602] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyo_TDO3t8R5NaxzYS4KwAAAVI"]
[Mon Apr 13 16:27:41.651675 2026] [:error] [pid 57183:tid 57191] [client 20.19.168.95:3340] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adyo_TDO3t8R5NaxzYS4LAAAAUY"]
[Mon Apr 13 16:27:41.659987 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:65189] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyo_TDO3t8R5NaxzYS4LQAAAUM"]
[Mon Apr 13 16:27:42.323422 2026] [:error] [pid 63310:tid 63360] [client 20.100.201.121:64576] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "adyo_noXpRU5ztmwPjInywAAAFA"]
[Mon Apr 13 16:27:42.931272 2026] [:error] [pid 63309:tid 63325] [client 20.19.168.95:64013] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adyo_kpIKZ10weXpf0X7kwAAAAw"]
[Mon Apr 13 16:27:42.937435 2026] [:error] [pid 63309:tid 63323] [client 20.100.201.121:65112] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyo_kpIKZ10weXpf0X7lAAAAAo"]
[Mon Apr 13 16:27:43.482433 2026] [:error] [pid 63311:tid 63392] [client 20.100.201.121:63635] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adyo_6HjrGN1MqBCVFnFegAAAJU"]
[Mon Apr 13 16:27:44.057783 2026] [:error] [pid 63309:tid 63317] [client 20.19.168.95:3462] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adypAEpIKZ10weXpf0X7lwAAAAQ"]
[Mon Apr 13 16:27:44.066750 2026] [:error] [pid 63309:tid 63320] [client 20.100.201.121:65207] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adypAEpIKZ10weXpf0X7mAAAAAc"]
[Mon Apr 13 16:27:44.587520 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64646] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "adypAKHjrGN1MqBCVFnFfAAAAIM"]
[Mon Apr 13 16:27:44.821143 2026] [:error] [pid 63311:tid 63390] [client 20.19.168.95:64594] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adypAKHjrGN1MqBCVFnFfQAAAJM"]
[Mon Apr 13 16:27:45.111005 2026] [:error] [pid 63311:tid 63381] [client 20.100.201.121:64661] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adypAaHjrGN1MqBCVFnFfgAAAIo"]
[Mon Apr 13 16:27:45.618503 2026] [:error] [pid 63310:tid 63345] [client 20.19.168.95:3456] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adypAXoXpRU5ztmwPjInzgAAAEE"]
[Mon Apr 13 16:27:45.644088 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:65212] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adypAUpIKZ10weXpf0X7nAAAABQ"]
[Mon Apr 13 16:27:46.177415 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:64153] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adypAjDO3t8R5NaxzYS4MwAAAUE"]
[Mon Apr 13 16:27:46.844800 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:63184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adypAkpIKZ10weXpf0X7ngAAAAk"]
[Mon Apr 13 16:27:46.903649 2026] [:error] [pid 63309:tid 63334] [client 20.19.168.95:65098] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypAkpIKZ10weXpf0X7nwAAABU"]
[Mon Apr 13 16:27:47.423687 2026] [:error] [pid 63309:tid 63331] [client 20.100.201.121:64657] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adypA0pIKZ10weXpf0X7oQAAABI"]
[Mon Apr 13 16:27:47.960316 2026] [:error] [pid 63311:tid 63384] [client 20.19.168.95:3388] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypA6HjrGN1MqBCVFnFgQAAAI0"]
[Mon Apr 13 16:27:47.973651 2026] [:error] [pid 63309:tid 63319] [client 20.100.201.121:64651] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adypA0pIKZ10weXpf0X7owAAAAY"]
[Mon Apr 13 16:27:48.738817 2026] [:error] [pid 63311:tid 63393] [client 20.19.168.95:63342] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypBKHjrGN1MqBCVFnFhAAAAJY"]
[Mon Apr 13 16:27:48.743185 2026] [:error] [pid 63311:tid 63389] [client 20.100.201.121:65124] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adypBKHjrGN1MqBCVFnFhQAAAJI"]
[Mon Apr 13 16:27:49.266121 2026] [:error] [pid 63311:tid 63375] [client 20.100.201.121:65165] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "adypBaHjrGN1MqBCVFnFiQAAAIQ"]
[Mon Apr 13 16:27:49.873522 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64180] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adypBaHjrGN1MqBCVFnFjAAAAIM"]
[Mon Apr 13 16:27:49.951636 2026] [:error] [pid 57183:tid 57191] [client 20.19.168.95:63974] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypBTDO3t8R5NaxzYS4OAAAAUY"]
[Mon Apr 13 16:27:50.511886 2026] [:error] [pid 57183:tid 57198] [client 20.100.201.121:65186] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adypBjDO3t8R5NaxzYS4OQAAAU0"]
[Mon Apr 13 16:27:51.434739 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:65169] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adypBzDO3t8R5NaxzYS4PAAAAUc"]
[Mon Apr 13 16:27:52.235221 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:65145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maintura.php"] [unique_id "adypCDDO3t8R5NaxzYS4PgAAAVA"]
[Mon Apr 13 16:27:52.261724 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:52.496997 2026] [proxy_fcgi:error] [pid 63406:tid 63412] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:52.814882 2026] [proxy_fcgi:error] [pid 63406:tid 63422] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:53.090282 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:53.256678 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:64131] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adypCTDO3t8R5NaxzYS4QwAAAUQ"]
[Mon Apr 13 16:27:53.325816 2026] [proxy_fcgi:error] [pid 63406:tid 63434] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:53.568283 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:53.812908 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:54.573562 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64150] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adypCjDO3t8R5NaxzYS4RwAAAVE"]
[Mon Apr 13 16:27:55.519774 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:55.766475 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:56.030272 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 20.19.168.95:65048] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:27:56.274780 2026] [:error] [pid 63406:tid 63422] [client 20.19.168.95:65048] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adypDLHZEIkQ0Zmgp5r5DwAAAMs"]
[Mon Apr 13 16:27:56.405789 2026] [:error] [pid 7228:tid 7252] [client 20.100.201.121:65105] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adypDAEnn1dQrOSHHNVLRQAAARY"]
[Mon Apr 13 16:27:57.659047 2026] [:error] [pid 63406:tid 63426] [client 20.100.201.121:64137] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adypDbHZEIkQ0Zmgp5r5EgAAAM8"]
[Mon Apr 13 16:27:58.168122 2026] [:error] [pid 9314:tid 9323] [client 20.19.168.95:65047] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adypDm_r4W8fX2GWyGS1PwAAAYc"]
[Mon Apr 13 16:27:59.657342 2026] [:error] [pid 63310:tid 63355] [client 20.100.201.121:64609] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adypD3oXpRU5ztmwPjIn1AAAAEs"]
[Mon Apr 13 16:27:59.991100 2026] [:error] [pid 7228:tid 7239] [client 20.19.168.95:3154] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adypDwEnn1dQrOSHHNVLRgAAAQk"]
[Mon Apr 13 16:28:00.499412 2026] [:error] [pid 7228:tid 7237] [client 20.100.201.121:65209] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adypEAEnn1dQrOSHHNVLRwAAAQc"]
[Mon Apr 13 16:28:00.826520 2026] [:error] [pid 7228:tid 7245] [client 20.19.168.95:64034] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "adypEAEnn1dQrOSHHNVLSQAAAQ8"]
[Mon Apr 13 16:28:01.171183 2026] [:error] [pid 7228:tid 7240] [client 20.100.201.121:64158] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adypEQEnn1dQrOSHHNVLTAAAAQo"]
[Mon Apr 13 16:28:01.905532 2026] [:error] [pid 7228:tid 7238] [client 20.19.168.95:3377] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypEQEnn1dQrOSHHNVLTQAAAQg"]
[Mon Apr 13 16:28:01.972251 2026] [:error] [pid 9314:tid 9340] [client 20.100.201.121:65190] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adypEW_r4W8fX2GWyGS1QwAAAZg"]
[Mon Apr 13 16:28:02.607694 2026] [:error] [pid 63406:tid 63433] [client 20.100.201.121:65119] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "adypErHZEIkQ0Zmgp5r5GgAAANY"]
[Mon Apr 13 16:28:02.802941 2026] [:error] [pid 63406:tid 63421] [client 20.19.168.95:3512] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypErHZEIkQ0Zmgp5r5GwAAAMo"]
[Mon Apr 13 16:28:03.216918 2026] [:error] [pid 63310:tid 63360] [client 20.100.201.121:65104] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "adypE3oXpRU5ztmwPjIn1wAAAFA"]
[Mon Apr 13 16:28:03.735933 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:65111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "adypEwEnn1dQrOSHHNVLUAAAARc"]
[Mon Apr 13 16:28:04.294819 2026] [:error] [pid 57183:tid 57188] [client 20.100.201.121:64685] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "adypFDDO3t8R5NaxzYS4TAAAAUM"]
[Mon Apr 13 16:28:04.381171 2026] [:error] [pid 57183:tid 57185] [client 20.19.168.95:3171] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypFDDO3t8R5NaxzYS4TQAAAUA"]
[Mon Apr 13 16:28:04.805381 2026] [:error] [pid 9314:tid 9325] [client 20.100.201.121:65182] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adypFG_r4W8fX2GWyGS1RgAAAYk"]
[Mon Apr 13 16:28:05.494278 2026] [:error] [pid 9314:tid 9324] [client 20.100.201.121:65128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adypFW_r4W8fX2GWyGS1RwAAAYg"]
[Mon Apr 13 16:28:06.213059 2026] [:error] [pid 7228:tid 7246] [client 20.100.201.121:65106] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adypFgEnn1dQrOSHHNVLUgAAARA"]
[Mon Apr 13 16:28:07.049604 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:63671] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adypF2_r4W8fX2GWyGS1SwAAAYc"]
[Mon Apr 13 16:28:07.674578 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:65205] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "adypF2_r4W8fX2GWyGS1TAAAAYw"]
[Mon Apr 13 16:28:08.217560 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:65121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "adypGKHjrGN1MqBCVFnFlQAAAIk"]
[Mon Apr 13 16:28:08.243687 2026] [:error] [pid 63406:tid 63412] [client 20.19.168.95:3329] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypGLHZEIkQ0Zmgp5r5IAAAAME"]
[Mon Apr 13 16:28:08.947888 2026] [:error] [pid 63311:tid 63384] [client 20.100.201.121:65088] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "adypGKHjrGN1MqBCVFnFlwAAAI0"]
[Mon Apr 13 16:28:10.200281 2026] [:error] [pid 63309:tid 63321] [client 20.100.201.121:65140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "adypGkpIKZ10weXpf0X7pwAAAAg"]
[Mon Apr 13 16:28:10.976115 2026] [:error] [pid 63309:tid 63324] [client 20.100.201.121:65183] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adypGkpIKZ10weXpf0X7qAAAAAs"]
[Mon Apr 13 16:28:11.457664 2026] [:error] [pid 9314:tid 9326] [client 20.19.168.95:64533] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adypG2_r4W8fX2GWyGS1TwAAAYo"]
[Mon Apr 13 16:28:12.154396 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:65089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adypHLHZEIkQ0Zmgp5r5IwAAAMo"]
[Mon Apr 13 16:28:13.441791 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:64156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adypHQEnn1dQrOSHHNVLWgAAAQs"]
[Mon Apr 13 16:28:13.507210 2026] [:error] [pid 7228:tid 7246] [client 20.19.168.95:63971] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adypHQEnn1dQrOSHHNVLWwAAARA"]
[Mon Apr 13 16:28:14.364984 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:65211] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adypHrHZEIkQ0Zmgp5r5KAAAAMk"]
[Mon Apr 13 16:28:14.881734 2026] [:error] [pid 63406:tid 63418] [client 20.100.201.121:65101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adypHrHZEIkQ0Zmgp5r5KQAAAMc"]
[Mon Apr 13 16:28:15.465096 2026] [:error] [pid 63406:tid 63429] [client 20.100.201.121:65132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adypH7HZEIkQ0Zmgp5r5KgAAANI"]
[Mon Apr 13 16:28:16.380609 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:16.669843 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:17.052718 2026] [:error] [pid 63309:tid 63337] [client 20.19.168.95:3196] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adypIUpIKZ10weXpf0X7rgAAABg"]
[Mon Apr 13 16:28:17.147632 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:17.419085 2026] [proxy_fcgi:error] [pid 63406:tid 63417] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:17.691873 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:17.962121 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:18.221075 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:18.484375 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:18.743126 2026] [proxy_fcgi:error] [pid 63406:tid 63427] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:18.981188 2026] [:error] [pid 7228:tid 7254] [client 20.19.168.95:3692] [client 20.19.168.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adypIgEnn1dQrOSHHNVLXgAAARg"]
[Mon Apr 13 16:28:19.008233 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:19.269154 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 20.100.201.121:63728] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:28:19.524571 2026] [:error] [pid 63406:tid 63412] [client 20.100.201.121:63728] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adypI7HZEIkQ0Zmgp5r5QQAAAME"]
[Mon Apr 13 16:28:20.232340 2026] [:error] [pid 9314:tid 9323] [client 20.100.201.121:64124] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adypJG_r4W8fX2GWyGS1UgAAAYc"]
[Mon Apr 13 16:28:20.806301 2026] [:error] [pid 9314:tid 9322] [client 20.100.201.121:64075] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adypJG_r4W8fX2GWyGS1UwAAAYY"]
[Mon Apr 13 16:28:21.444772 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:63210] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "adypJQEnn1dQrOSHHNVLYgAAAQA"]
[Mon Apr 13 16:28:21.968249 2026] [:error] [pid 7228:tid 7250] [client 20.100.201.121:65163] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adypJQEnn1dQrOSHHNVLYwAAARQ"]
[Mon Apr 13 16:28:22.673848 2026] [:error] [pid 63309:tid 63322] [client 20.100.201.121:65155] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adypJkpIKZ10weXpf0X7sgAAAAk"]
[Mon Apr 13 16:28:23.599533 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:64141] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adypJ3oXpRU5ztmwPjIn4AAAAE0"]
[Mon Apr 13 16:28:24.368635 2026] [:error] [pid 63311:tid 63389] [client 20.100.201.121:64627] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adypKKHjrGN1MqBCVFnFngAAAJI"]
[Mon Apr 13 16:28:25.068495 2026] [:error] [pid 9314:tid 9320] [client 20.100.201.121:65133] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adypKW_r4W8fX2GWyGS1WgAAAYQ"]
[Mon Apr 13 16:28:25.429287 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:64141] [client 20.100.201.121] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "135.125.243.229_e927dd779001199eaf2d6efd910fcf650cf2b826"): Internal error (specific information not available) [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "adypJ3oXpRU5ztmwPjIn4AAAAE0"]
[Mon Apr 13 16:28:25.656947 2026] [:error] [pid 63309:tid 63321] [client 20.100.201.121:65164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adypKUpIKZ10weXpf0X7tQAAAAg"]
[Mon Apr 13 16:28:26.216316 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:63690] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adypKqHjrGN1MqBCVFnFoAAAAIk"]
[Mon Apr 13 16:28:26.902660 2026] [:error] [pid 63309:tid 63332] [client 20.100.201.121:65090] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "adypKkpIKZ10weXpf0X7twAAABM"]
[Mon Apr 13 16:28:27.581062 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:63736] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adypKwEnn1dQrOSHHNVLZgAAAQ8"]
[Mon Apr 13 16:28:28.330033 2026] [:error] [pid 7228:tid 7237] [client 20.100.201.121:65138] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adypLAEnn1dQrOSHHNVLZwAAAQc"]
[Mon Apr 13 16:28:29.429332 2026] [:error] [pid 7228:tid 7242] [client 20.100.201.121:65148] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adypLQEnn1dQrOSHHNVLbgAAAQw"]
[Mon Apr 13 16:28:30.190497 2026] [:error] [pid 57183:tid 57191] [client 20.100.201.121:65174] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "adypLjDO3t8R5NaxzYS4UwAAAUY"]
[Mon Apr 13 16:28:30.951219 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:63709] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adypLqHjrGN1MqBCVFnFqAAAAIg"]
[Mon Apr 13 16:28:32.315820 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:64644] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adypMG_r4W8fX2GWyGS1XAAAAYw"]
[Mon Apr 13 16:28:33.688613 2026] [:error] [pid 7228:tid 7235] [client 20.100.201.121:64101] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adypMQEnn1dQrOSHHNVLdgAAAQU"]
[Mon Apr 13 16:28:34.505646 2026] [:error] [pid 7228:tid 7251] [client 20.100.201.121:63684] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "adypMgEnn1dQrOSHHNVLeQAAARU"]
[Mon Apr 13 16:28:35.514597 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:64674] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adypM7HZEIkQ0Zmgp5r5SgAAANA"]
[Mon Apr 13 16:28:36.147337 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:64617] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adypNLHZEIkQ0Zmgp5r5TgAAANM"]
[Mon Apr 13 16:28:36.790329 2026] [:error] [pid 63311:tid 63387] [client 20.100.201.121:65156] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adypNKHjrGN1MqBCVFnFrgAAAJA"]
[Mon Apr 13 16:28:37.421887 2026] [:error] [pid 9314:tid 9335] [client 20.100.201.121:65215] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtiiy.php"] [unique_id "adypNW_r4W8fX2GWyGS1YAAAAZM"]
[Mon Apr 13 16:28:38.039960 2026] [:error] [pid 7228:tid 7236] [client 20.100.201.121:65107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adypNgEnn1dQrOSHHNVLfQAAAQY"]
[Mon Apr 13 16:28:38.946781 2026] [:error] [pid 63311:tid 63393] [client 20.100.201.121:64614] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adypNqHjrGN1MqBCVFnFrwAAAJY"]
[Mon Apr 13 16:28:39.724132 2026] [:error] [pid 63311:tid 63388] [client 20.100.201.121:65103] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adypN6HjrGN1MqBCVFnFsgAAAJE"]
[Mon Apr 13 16:28:40.544294 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64668] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "adypOAEnn1dQrOSHHNVLgAAAAQg"]
[Mon Apr 13 16:28:41.315421 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64175] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypObHZEIkQ0Zmgp5r5WQAAAM0"]
[Mon Apr 13 16:28:42.125380 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:65117] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypOjDO3t8R5NaxzYS4WwAAAVc"]
[Mon Apr 13 16:28:42.686954 2026] [:error] [pid 63311:tid 63390] [client 20.100.201.121:64642] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypOqHjrGN1MqBCVFnFuAAAAJM"]
[Mon Apr 13 16:28:43.209814 2026] [:error] [pid 9314:tid 9328] [client 20.100.201.121:64670] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "adypO2_r4W8fX2GWyGS1aQAAAYw"]
[Mon Apr 13 16:28:43.871821 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:64105] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adypOzDO3t8R5NaxzYS4XQAAAVI"]
[Mon Apr 13 16:28:44.836794 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64621] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adypPLHZEIkQ0Zmgp5r5YgAAAMo"]
[Mon Apr 13 16:28:46.023601 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64111] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adypPm_r4W8fX2GWyGS1cgAAAYI"]
[Mon Apr 13 16:28:50.195659 2026] [:error] [pid 63406:tid 63422] [client 20.100.201.121:64697] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "adypQrHZEIkQ0Zmgp5r5hgAAAMs"]
[Mon Apr 13 16:28:51.180231 2026] [:error] [pid 63406:tid 63419] [client 20.100.201.121:65203] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypQ7HZEIkQ0Zmgp5r5jQAAAMg"]
[Mon Apr 13 16:28:52.000080 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64683] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypQ7HZEIkQ0Zmgp5r5kwAAANQ"]
[Mon Apr 13 16:28:53.338997 2026] [:error] [pid 63406:tid 63424] [client 20.100.201.121:64140] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypRbHZEIkQ0Zmgp5r5lgAAAM0"]
[Mon Apr 13 16:28:54.009136 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:63640] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypRm_r4W8fX2GWyGS1pQAAAYU"]
[Mon Apr 13 16:28:54.586289 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64190] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adypRrHZEIkQ0Zmgp5r5nAAAAMw"]
[Mon Apr 13 16:28:55.842265 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:64135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adypRzDO3t8R5NaxzYS4dgAAAU8"]
[Mon Apr 13 16:28:56.763394 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:63722] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adypSDDO3t8R5NaxzYS4egAAAVc"]
[Mon Apr 13 16:28:57.375798 2026] [:error] [pid 57183:tid 57203] [client 20.100.201.121:64588] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "adypSTDO3t8R5NaxzYS4fQAAAVI"]
[Mon Apr 13 16:28:57.997696 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:64663] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adypSTDO3t8R5NaxzYS4fwAAAUo"]
[Mon Apr 13 16:28:58.675964 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:64164] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adypSjDO3t8R5NaxzYS4gQAAAVE"]
[Mon Apr 13 16:28:59.249462 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64157] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adypSzDO3t8R5NaxzYS4hAAAAUw"]
[Mon Apr 13 16:28:59.841897 2026] [:error] [pid 63309:tid 63325] [client 20.100.201.121:65149] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "adypS0pIKZ10weXpf0X7wQAAAAw"]
[Mon Apr 13 16:29:00.386278 2026] [:error] [pid 57183:tid 57201] [client 20.100.201.121:64093] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adypTDDO3t8R5NaxzYS4igAAAVA"]
[Mon Apr 13 16:29:00.945112 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64082] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adypTLHZEIkQ0Zmgp5r5pAAAAMU"]
[Mon Apr 13 16:29:01.472441 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:64580] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adypTaHjrGN1MqBCVFnFvQAAAJg"]
[Mon Apr 13 16:29:01.999936 2026] [:error] [pid 7228:tid 7233] [client 20.100.201.121:65148] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "adypTQEnn1dQrOSHHNVLsAAAAQM"]
[Mon Apr 13 16:29:02.528954 2026] [:error] [pid 63310:tid 63351] [client 20.100.201.121:64583] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adypTnoXpRU5ztmwPjIn7QAAAEc"]
[Mon Apr 13 16:29:03.047921 2026] [:error] [pid 7228:tid 7241] [client 20.100.201.121:64577] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adypTwEnn1dQrOSHHNVLswAAAQs"]
[Mon Apr 13 16:29:03.558315 2026] [:error] [pid 57183:tid 57196] [client 20.100.201.121:64690] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adypTzDO3t8R5NaxzYS4kgAAAUs"]
[Mon Apr 13 16:29:04.076129 2026] [:error] [pid 9314:tid 9334] [client 20.100.201.121:63171] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "adypUG_r4W8fX2GWyGS1qAAAAZI"]
[Mon Apr 13 16:29:04.592273 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64076] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adypUAEnn1dQrOSHHNVLtgAAAQg"]
[Mon Apr 13 16:29:05.664093 2026] [:error] [pid 63311:tid 63374] [client 20.100.201.121:64680] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adypUaHjrGN1MqBCVFnFvgAAAIM"]
[Mon Apr 13 16:29:06.409070 2026] [:error] [pid 9314:tid 9338] [client 20.100.201.121:64079] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adypUm_r4W8fX2GWyGS1rQAAAZY"]
[Mon Apr 13 16:29:06.958722 2026] [:error] [pid 63309:tid 63330] [client 20.100.201.121:65115] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "adypUkpIKZ10weXpf0X7xgAAABE"]
[Mon Apr 13 16:29:07.603340 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64107] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adypU2_r4W8fX2GWyGS1tAAAAZE"]
[Mon Apr 13 16:29:08.160510 2026] [:error] [pid 57183:tid 57185] [client 20.100.201.121:64128] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adypVDDO3t8R5NaxzYS4mgAAAUA"]
[Mon Apr 13 16:29:08.710671 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:63659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adypVG_r4W8fX2GWyGS1twAAAYE"]
[Mon Apr 13 16:29:09.231008 2026] [:error] [pid 7228:tid 7238] [client 20.100.201.121:64652] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adypVQEnn1dQrOSHHNVLvQAAAQg"]
[Mon Apr 13 16:29:09.766478 2026] [:error] [pid 63311:tid 63379] [client 20.100.201.121:64687] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adypVaHjrGN1MqBCVFnFwAAAAIg"]
[Mon Apr 13 16:29:10.385115 2026] [:error] [pid 63310:tid 63367] [client 20.100.201.121:65135] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adypVnoXpRU5ztmwPjIn8QAAAFc"]
[Mon Apr 13 16:29:10.996383 2026] [:error] [pid 9314:tid 9318] [client 20.100.201.121:64178] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adypVm_r4W8fX2GWyGS1vgAAAYI"]
[Mon Apr 13 16:29:11.889704 2026] [:error] [pid 63310:tid 63345] [client 20.100.201.121:65151] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "adypV3oXpRU5ztmwPjIn8gAAAEE"]
[Mon Apr 13 16:29:12.610918 2026] [:error] [pid 63309:tid 63318] [client 20.100.201.121:64181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adypWEpIKZ10weXpf0X7yAAAAAU"]
[Mon Apr 13 16:29:13.207364 2026] [:error] [pid 7228:tid 7245] [client 20.100.201.121:64112] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adypWQEnn1dQrOSHHNVLxgAAAQ8"]
[Mon Apr 13 16:29:14.059322 2026] [:error] [pid 7228:tid 7234] [client 20.100.201.121:63694] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adypWgEnn1dQrOSHHNVLyQAAAQQ"]
[Mon Apr 13 16:29:14.950128 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64133] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "adypWrHZEIkQ0Zmgp5r5rAAAAMU"]
[Mon Apr 13 16:29:15.807838 2026] [:error] [pid 63406:tid 63434] [client 20.100.201.121:64118] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adypW7HZEIkQ0Zmgp5r5rQAAANc"]
[Mon Apr 13 16:29:16.645560 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:63715] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adypXLHZEIkQ0Zmgp5r5rwAAAMw"]
[Mon Apr 13 16:29:17.837149 2026] [:error] [pid 63406:tid 63417] [client 20.100.201.121:64115] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adypXbHZEIkQ0Zmgp5r5swAAAMY"]
[Mon Apr 13 16:29:18.411182 2026] [:error] [pid 7228:tid 7230] [client 20.100.201.121:64579] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "adypXgEnn1dQrOSHHNVLzgAAAQA"]
[Mon Apr 13 16:29:18.995080 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:63669] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "adypXgEnn1dQrOSHHNVLzwAAARE"]
[Mon Apr 13 16:29:19.586353 2026] [proxy_fcgi:error] [pid 7228:tid 7243] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:19.848107 2026] [proxy_fcgi:error] [pid 7228:tid 7240] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:20.112086 2026] [proxy_fcgi:error] [pid 7228:tid 7244] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:20.373196 2026] [proxy_fcgi:error] [pid 7228:tid 7239] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:20.635369 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:20.896466 2026] [proxy_fcgi:error] [pid 7228:tid 7245] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:21.179462 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:21.457337 2026] [proxy_fcgi:error] [pid 7228:tid 7234] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:21.718057 2026] [proxy_fcgi:error] [pid 7228:tid 7238] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:21.979110 2026] [proxy_fcgi:error] [pid 7228:tid 7230] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:22.240471 2026] [proxy_fcgi:error] [pid 7228:tid 7252] [client 20.100.201.121:63187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:29:22.498371 2026] [:error] [pid 7228:tid 7247] [client 20.100.201.121:63187] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypYgEnn1dQrOSHHNVL4QAAARE"]
[Mon Apr 13 16:29:23.113493 2026] [:error] [pid 63311:tid 63391] [client 20.100.201.121:63739] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypY6HjrGN1MqBCVFnFwgAAAJQ"]
[Mon Apr 13 16:29:23.709182 2026] [:error] [pid 63309:tid 63316] [client 20.100.201.121:65113] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypY0pIKZ10weXpf0X7zgAAAAM"]
[Mon Apr 13 16:29:24.394807 2026] [:error] [pid 57183:tid 57192] [client 20.100.201.121:63738] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adypZDDO3t8R5NaxzYS4qwAAAUc"]
[Mon Apr 13 16:29:24.926572 2026] [:error] [pid 63309:tid 63328] [client 20.100.201.121:64659] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adypZEpIKZ10weXpf0X70gAAAA8"]
[Mon Apr 13 16:29:25.707063 2026] [:error] [pid 9314:tid 9339] [client 20.100.201.121:64630] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adypZW_r4W8fX2GWyGS1ywAAAZc"]
[Mon Apr 13 16:29:26.287874 2026] [:error] [pid 63310:tid 63350] [client 20.100.201.121:64591] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adypZnoXpRU5ztmwPjIn-QAAAEY"]
[Mon Apr 13 16:29:26.843752 2026] [:error] [pid 7228:tid 7243] [client 20.100.201.121:64582] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "adypZgEnn1dQrOSHHNVL7wAAAQ0"]
[Mon Apr 13 16:29:27.472318 2026] [:error] [pid 63406:tid 63411] [client 20.100.201.121:64132] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adypZ7HZEIkQ0Zmgp5r5uQAAAMA"]
[Mon Apr 13 16:29:28.029252 2026] [:error] [pid 63311:tid 63395] [client 20.100.201.121:64070] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adypaKHjrGN1MqBCVFnFywAAAJg"]
[Mon Apr 13 16:29:28.720866 2026] [:error] [pid 63406:tid 63430] [client 20.100.201.121:63168] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adypaLHZEIkQ0Zmgp5r5vAAAANM"]
[Mon Apr 13 16:29:29.392075 2026] [:error] [pid 63309:tid 63325] [client 20.100.201.121:65147] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adypaUpIKZ10weXpf0X73QAAAAw"]
[Mon Apr 13 16:29:30.203215 2026] [:error] [pid 9314:tid 9330] [client 20.100.201.121:63104] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adypam_r4W8fX2GWyGS10QAAAY4"]
[Mon Apr 13 16:29:30.918165 2026] [:error] [pid 63309:tid 63333] [client 20.100.201.121:63743] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adypakpIKZ10weXpf0X75AAAABQ"]
[Mon Apr 13 16:29:32.290607 2026] [:error] [pid 7228:tid 7253] [client 20.100.201.121:65096] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adypbAEnn1dQrOSHHNVMDgAAARc"]
[Mon Apr 13 16:29:33.983414 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:65154] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "adypbbHZEIkQ0Zmgp5r5wQAAAMw"]
[Mon Apr 13 16:29:35.086914 2026] [:error] [pid 63406:tid 63425] [client 20.100.201.121:62788] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adypb7HZEIkQ0Zmgp5r5xAAAAM4"]
[Mon Apr 13 16:29:36.138932 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:64656] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adypcKHjrGN1MqBCVFnF1QAAAIU"]
[Mon Apr 13 16:29:37.143805 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64170] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adypcbHZEIkQ0Zmgp5r5xgAAAMQ"]
[Mon Apr 13 16:29:38.658661 2026] [:error] [pid 63310:tid 63359] [client 20.100.201.121:64069] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adypcnoXpRU5ztmwPjIoAAAAAE8"]
[Mon Apr 13 16:29:39.982658 2026] [:error] [pid 57183:tid 57208] [client 20.100.201.121:63682] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adypczDO3t8R5NaxzYS4xgAAAVc"]
[Mon Apr 13 16:29:40.787048 2026] [:error] [pid 7228:tid 7244] [client 20.100.201.121:65114] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adypdAEnn1dQrOSHHNVMFAAAAQ4"]
[Mon Apr 13 16:29:41.661794 2026] [:error] [pid 57183:tid 57195] [client 20.100.201.121:64106] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adypdTDO3t8R5NaxzYS4xwAAAUo"]
[Mon Apr 13 16:29:42.313834 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64083] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "adypdrHZEIkQ0Zmgp5r50AAAAMQ"]
[Mon Apr 13 16:29:42.976153 2026] [:error] [pid 57183:tid 57199] [client 20.100.201.121:64189] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adypdjDO3t8R5NaxzYS4yAAAAU4"]
[Mon Apr 13 16:29:43.830809 2026] [:error] [pid 57183:tid 57202] [client 20.100.201.121:63740] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adypdzDO3t8R5NaxzYS4zAAAAVE"]
[Mon Apr 13 16:29:44.486602 2026] [:error] [pid 63310:tid 63360] [client 20.100.201.121:64626] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adypeHoXpRU5ztmwPjIoBAAAAFA"]
[Mon Apr 13 16:29:45.372929 2026] [:error] [pid 63311:tid 63387] [client 20.100.201.121:63702] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "adypeaHjrGN1MqBCVFnF3AAAAJA"]
[Mon Apr 13 16:29:46.505894 2026] [:error] [pid 57183:tid 57189] [client 20.100.201.121:64095] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adypejDO3t8R5NaxzYS47AAAAUQ"]
[Mon Apr 13 16:29:47.686873 2026] [:error] [pid 57183:tid 57194] [client 20.100.201.121:63707] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adypezDO3t8R5NaxzYS5FwAAAUk"]
[Mon Apr 13 16:29:48.627331 2026] [:error] [pid 63310:tid 63357] [client 20.100.201.121:63711] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adypfHoXpRU5ztmwPjIoBgAAAE0"]
[Mon Apr 13 16:29:49.930863 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:65091] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "adypfbHZEIkQ0Zmgp5r53AAAAMQ"]
[Mon Apr 13 16:29:52.053848 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:64624] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adypgLHZEIkQ0Zmgp5r54gAAAMU"]
[Mon Apr 13 16:29:53.045333 2026] [:error] [pid 63406:tid 63420] [client 20.100.201.121:65126] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adypgbHZEIkQ0Zmgp5r55AAAAMk"]
[Mon Apr 13 16:29:54.476557 2026] [:error] [pid 63309:tid 63325] [client 20.100.201.121:64129] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adypgkpIKZ10weXpf0X75gAAAAw"]
[Mon Apr 13 16:29:55.526252 2026] [:error] [pid 63406:tid 63416] [client 20.100.201.121:63181] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "adypg7HZEIkQ0Zmgp5r58AAAAMU"]
[Mon Apr 13 16:29:56.993730 2026] [:error] [pid 9314:tid 9317] [client 20.100.201.121:64167] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adyphG_r4W8fX2GWyGS12wAAAYE"]
[Mon Apr 13 16:29:58.354114 2026] [:error] [pid 63406:tid 63414] [client 20.100.201.121:64145] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adyphrHZEIkQ0Zmgp5r6BQAAAMM"]
[Mon Apr 13 16:29:59.952009 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:65141] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adyphzDO3t8R5NaxzYS5NwAAAU8"]
[Mon Apr 13 16:30:00.658344 2026] [:error] [pid 63310:tid 63365] [client 20.100.201.121:64597] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "adypiHoXpRU5ztmwPjIoCQAAAFU"]
[Mon Apr 13 16:30:01.426611 2026] [:error] [pid 57183:tid 57193] [client 20.100.201.121:63716] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypiTDO3t8R5NaxzYS5OQAAAUg"]
[Mon Apr 13 16:30:02.561390 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:63697] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypijDO3t8R5NaxzYS5QQAAAUE"]
[Mon Apr 13 16:30:03.407001 2026] [:error] [pid 63406:tid 63423] [client 20.100.201.121:64673] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypi7HZEIkQ0Zmgp5r6IgAAAMw"]
[Mon Apr 13 16:30:04.288868 2026] [:error] [pid 63310:tid 63361] [client 20.100.201.121:63629] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "adypjHoXpRU5ztmwPjIoDAAAAFE"]
[Mon Apr 13 16:30:05.086859 2026] [:error] [pid 57183:tid 57197] [client 20.100.201.121:64684] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adypjTDO3t8R5NaxzYS5SgAAAUw"]
[Mon Apr 13 16:30:05.947648 2026] [:error] [pid 63309:tid 63331] [client 20.100.201.121:63674] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adypjUpIKZ10weXpf0X78AAAABI"]
[Mon Apr 13 16:30:06.892939 2026] [:error] [pid 63406:tid 63427] [client 20.100.201.121:64086] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adypjrHZEIkQ0Zmgp5r6KQAAANA"]
[Mon Apr 13 16:30:07.849454 2026] [:error] [pid 63406:tid 63431] [client 20.100.201.121:64077] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "adypj7HZEIkQ0Zmgp5r6LQAAANQ"]
[Mon Apr 13 16:30:08.646474 2026] [:error] [pid 63311:tid 63376] [client 20.100.201.121:64608] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adypkKHjrGN1MqBCVFnF-AAAAIU"]
[Mon Apr 13 16:30:09.957552 2026] [:error] [pid 9314:tid 9333] [client 20.100.201.121:64184] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adypkW_r4W8fX2GWyGS2IAAAAZE"]
[Mon Apr 13 16:30:11.044794 2026] [:error] [pid 9314:tid 9321] [client 20.100.201.121:63719] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adypk2_r4W8fX2GWyGS2IgAAAYU"]
[Mon Apr 13 16:30:12.869282 2026] [:error] [pid 63310:tid 63364] [client 20.100.201.121:64064] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nw.php"] [unique_id "adyplHoXpRU5ztmwPjIoDgAAAFQ"]
[Mon Apr 13 16:30:14.355069 2026] [:error] [pid 63309:tid 63325] [client 20.100.201.121:64616] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adyplkpIKZ10weXpf0X79AAAAAw"]
[Mon Apr 13 16:30:15.711851 2026] [:error] [pid 63406:tid 63415] [client 20.100.201.121:64589] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adypl7HZEIkQ0Zmgp5r6OQAAAMQ"]
[Mon Apr 13 16:30:16.774615 2026] [:error] [pid 63309:tid 63320] [client 20.100.201.121:64151] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adypmEpIKZ10weXpf0X79gAAAAc"]
[Mon Apr 13 16:30:17.690148 2026] [:error] [pid 57183:tid 57200] [client 20.100.201.121:63641] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "adypmTDO3t8R5NaxzYS5ZAAAAU8"]
[Mon Apr 13 16:30:18.648091 2026] [:error] [pid 63310:tid 63362] [client 20.100.201.121:64607] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adypmnoXpRU5ztmwPjIoEQAAAFI"]
[Mon Apr 13 16:30:19.970906 2026] [:error] [pid 63311:tid 63380] [client 20.100.201.121:64089] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adypm6HjrGN1MqBCVFnF-wAAAIk"]
[Mon Apr 13 16:30:20.589638 2026] [:error] [pid 57183:tid 57186] [client 20.100.201.121:63121] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adypnDDO3t8R5NaxzYS5aQAAAUE"]
[Mon Apr 13 16:30:21.166472 2026] [:error] [pid 63406:tid 63421] [client 20.100.201.121:64681] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "adypnbHZEIkQ0Zmgp5r6RQAAAMo"]
[Mon Apr 13 16:30:21.926448 2026] [:error] [pid 63311:tid 63394] [client 20.100.201.121:64078] [client 20.100.201.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "adypnaHjrGN1MqBCVFnF_gAAAJc"]
[Mon Apr 13 16:30:24.742310 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:25.016727 2026] [proxy_fcgi:error] [pid 7228:tid 7250] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:25.282320 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:25.809535 2026] [proxy_fcgi:error] [pid 7228:tid 7251] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:26.089456 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:27.516200 2026] [proxy_fcgi:error] [pid 7228:tid 7231] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:27.776868 2026] [proxy_fcgi:error] [pid 7228:tid 7252] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:28.036377 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:30:28.297103 2026] [proxy_fcgi:error] [pid 7228:tid 7236] [client 20.100.201.121:63180] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 18:21:06.969268 2026] [:error] [pid 7228:tid 7248] [client 34.139.79.196:65030] [client 34.139.79.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.79.196, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "adzDkgEnn1dQrOSHHNVtKgAAARI"]
[Mon Apr 13 18:21:06.980300 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 34.139.79.196:65030] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 18:21:11.116369 2026] [:error] [pid 7228:tid 7251] [client 34.139.79.196:65030] [client 34.139.79.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adzDlwEnn1dQrOSHHNVtOgAAARU"]
[Mon Apr 13 18:21:11.826405 2026] [:error] [pid 63310:tid 63359] [client 34.139.79.196:60287] [client 34.139.79.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adzDl3oXpRU5ztmwPjI8CwAAAE8"]
[Mon Apr 13 18:21:12.310512 2026] [:error] [pid 57183:tid 57187] [client 34.139.79.196:52199] [client 34.139.79.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adzDmDDO3t8R5NaxzYT2mgAAAUI"]
[Mon Apr 13 20:40:35.419876 2026] [:error] [pid 57183:tid 57207] [client 103.77.107.178:62397] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "adzkQzDO3t8R5NaxzYQ8TQAAAVY"]
[Mon Apr 13 21:34:37.057739 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 20.104.228.106:13291] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:34:37.267517 2026] [proxy_fcgi:error] [pid 63311:tid 63388] [client 20.104.228.106:13291] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:34:37.687094 2026] [proxy_fcgi:error] [pid 63311:tid 63390] [client 20.104.228.106:13291] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:34:37.919781 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 20.104.228.106:13291] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:34:38.140693 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 20.104.228.106:13291] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:34:38.347794 2026] [:error] [pid 63311:tid 63392] [client 20.104.228.106:13291] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options-reading.php"] [unique_id "adzw7qHjrGN1MqBCVFkPVAAAAJU"]
[Mon Apr 13 21:34:39.107169 2026] [:error] [pid 7228:tid 7240] [client 20.104.228.106:13196] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options-reading.php"] [unique_id "adzw7wEnn1dQrOSHHNWnMgAAAQo"]
[Mon Apr 13 21:34:39.796859 2026] [:error] [pid 63311:tid 63382] [client 20.104.228.106:13285] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options-reading.php"] [unique_id "adzw76HjrGN1MqBCVFkPWgAAAIs"]
[Mon Apr 13 21:34:40.243774 2026] [:error] [pid 9314:tid 9320] [client 20.104.228.106:13300] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options-reading.php"] [unique_id "adzw8G_r4W8fX2GWyGQwEAAAAYQ"]
[Mon Apr 13 21:34:40.741509 2026] [:error] [pid 63406:tid 63418] [client 20.104.228.106:13294] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-sites.php"] [unique_id "adzw8LHZEIkQ0Zmgp5rScAAAAMc"]
[Mon Apr 13 21:34:41.243859 2026] [:error] [pid 9314:tid 9338] [client 20.104.228.106:13286] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-sites.php"] [unique_id "adzw8W_r4W8fX2GWyGQwEQAAAZY"]
[Mon Apr 13 21:34:41.778035 2026] [:error] [pid 7228:tid 7247] [client 20.104.228.106:13278] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-sites.php"] [unique_id "adzw8QEnn1dQrOSHHNWnNAAAARE"]
[Mon Apr 13 21:34:42.221879 2026] [:error] [pid 7228:tid 7231] [client 20.104.228.106:13210] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-sites.php"] [unique_id "adzw8gEnn1dQrOSHHNWnOAAAAQE"]
[Mon Apr 13 21:34:43.030842 2026] [:error] [pid 9314:tid 9322] [client 20.104.228.106:13251] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "adzw82_r4W8fX2GWyGQwEwAAAYY"]
[Mon Apr 13 21:34:43.729573 2026] [:error] [pid 63311:tid 63392] [client 20.104.228.106:13195] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "adzw86HjrGN1MqBCVFkPXwAAAJU"]
[Mon Apr 13 21:34:44.447084 2026] [:error] [pid 63310:tid 63347] [client 20.104.228.106:13255] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "adzw9HoXpRU5ztmwPjJlhAAAAEM"]
[Mon Apr 13 21:34:44.990696 2026] [:error] [pid 63311:tid 63376] [client 20.104.228.106:13214] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "adzw9KHjrGN1MqBCVFkPZgAAAIU"]
[Mon Apr 13 21:34:45.419680 2026] [:error] [pid 57183:tid 57208] [client 20.104.228.106:13304] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/theme_app.php"] [unique_id "adzw9TDO3t8R5NaxzYRapgAAAVc"]
[Mon Apr 13 21:34:45.845025 2026] [:error] [pid 63310:tid 63344] [client 20.104.228.106:13263] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/theme_app.php"] [unique_id "adzw9XoXpRU5ztmwPjJlhwAAAEA"]
[Mon Apr 13 21:34:46.418558 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13202] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/theme_app.php"] [unique_id "adzw9jDO3t8R5NaxzYRaqQAAAVQ"]
[Mon Apr 13 21:34:47.070359 2026] [:error] [pid 57183:tid 57189] [client 20.104.228.106:13274] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assets/theme_app.php"] [unique_id "adzw9zDO3t8R5NaxzYRarwAAAUQ"]
[Mon Apr 13 21:34:47.654992 2026] [:error] [pid 57183:tid 57200] [client 20.104.228.106:13264] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova-wso.php"] [unique_id "adzw9zDO3t8R5NaxzYRasgAAAU8"]
[Mon Apr 13 21:34:48.282965 2026] [:error] [pid 57183:tid 57193] [client 20.104.228.106:13293] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova-wso.php"] [unique_id "adzw-DDO3t8R5NaxzYRatgAAAUg"]
[Mon Apr 13 21:34:48.834400 2026] [:error] [pid 63311:tid 63375] [client 20.104.228.106:13203] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova-wso.php"] [unique_id "adzw-KHjrGN1MqBCVFkPcAAAAIQ"]
[Mon Apr 13 21:34:49.289600 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:13273] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ova-wso.php"] [unique_id "adzw-bHZEIkQ0Zmgp5rSewAAAMk"]
[Mon Apr 13 21:34:49.815809 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13190] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "adzw-TDO3t8R5NaxzYRaugAAAVQ"]
[Mon Apr 13 21:34:50.244668 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13191] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "adzw-rHZEIkQ0Zmgp5rSgQAAAM4"]
[Mon Apr 13 21:34:50.751360 2026] [:error] [pid 57183:tid 57187] [client 20.104.228.106:13295] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "adzw-jDO3t8R5NaxzYRavgAAAUI"]
[Mon Apr 13 21:34:51.310735 2026] [:error] [pid 57183:tid 57185] [client 20.104.228.106:13299] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "adzw-zDO3t8R5NaxzYRawQAAAUA"]
[Mon Apr 13 21:34:51.722736 2026] [:error] [pid 63311:tid 63379] [client 20.104.228.106:13186] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gbl.php"] [unique_id "adzw-6HjrGN1MqBCVFkPdgAAAIg"]
[Mon Apr 13 21:34:52.154400 2026] [:error] [pid 7228:tid 7247] [client 20.104.228.106:13269] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gbl.php"] [unique_id "adzw_AEnn1dQrOSHHNWnPQAAARE"]
[Mon Apr 13 21:34:52.981327 2026] [:error] [pid 7228:tid 7254] [client 20.104.228.106:13218] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gbl.php"] [unique_id "adzw_AEnn1dQrOSHHNWnPgAAARg"]
[Mon Apr 13 21:34:53.670537 2026] [:error] [pid 63309:tid 63320] [client 20.104.228.106:13248] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gbl.php"] [unique_id "adzw_UpIKZ10weXpf0UyCgAAAAc"]
[Mon Apr 13 21:34:54.472932 2026] [:error] [pid 7228:tid 7248] [client 20.104.228.106:13256] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.ufc/ss.php"] [unique_id "adzw_gEnn1dQrOSHHNWnRgAAARI"]
[Mon Apr 13 21:34:55.177486 2026] [:error] [pid 7228:tid 7234] [client 20.104.228.106:13292] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.ufc/ss.php"] [unique_id "adzw_wEnn1dQrOSHHNWnSAAAAQQ"]
[Mon Apr 13 21:34:55.741727 2026] [:error] [pid 9314:tid 9327] [client 20.104.228.106:13184] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.ufc/ss.php"] [unique_id "adzw_2_r4W8fX2GWyGQwGgAAAYs"]
[Mon Apr 13 21:34:56.216998 2026] [:error] [pid 9314:tid 9329] [client 20.104.228.106:13189] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.ufc/ss.php"] [unique_id "adzxAG_r4W8fX2GWyGQwHQAAAY0"]
[Mon Apr 13 21:34:56.951516 2026] [:error] [pid 9314:tid 9320] [client 20.104.228.106:13254] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tester.php"] [unique_id "adzxAG_r4W8fX2GWyGQwJAAAAYQ"]
[Mon Apr 13 21:34:57.397502 2026] [:error] [pid 9314:tid 9338] [client 20.104.228.106:13207] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tester.php"] [unique_id "adzxAW_r4W8fX2GWyGQwJQAAAZY"]
[Mon Apr 13 21:34:57.895346 2026] [:error] [pid 63406:tid 63428] [client 20.104.228.106:13297] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tester.php"] [unique_id "adzxAbHZEIkQ0Zmgp5rSnQAAANE"]
[Mon Apr 13 21:34:58.557728 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:13272] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tester.php"] [unique_id "adzxArHZEIkQ0Zmgp5rSowAAAMk"]
[Mon Apr 13 21:34:59.256006 2026] [:error] [pid 7228:tid 7242] [client 20.104.228.106:13221] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okaay.php"] [unique_id "adzxAwEnn1dQrOSHHNWnSwAAAQw"]
[Mon Apr 13 21:34:59.764762 2026] [:error] [pid 7228:tid 7238] [client 20.104.228.106:13127] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okaay.php"] [unique_id "adzxAwEnn1dQrOSHHNWnTAAAAQg"]
[Mon Apr 13 21:35:00.214535 2026] [:error] [pid 63309:tid 63321] [client 20.104.228.106:13259] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okaay.php"] [unique_id "adzxBEpIKZ10weXpf0UyDAAAAAg"]
[Mon Apr 13 21:35:00.630601 2026] [:error] [pid 63309:tid 63331] [client 20.104.228.106:13197] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/okaay.php"] [unique_id "adzxBEpIKZ10weXpf0UyDgAAABI"]
[Mon Apr 13 21:35:01.066865 2026] [:error] [pid 9314:tid 9329] [client 20.104.228.106:13298] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/page_m.php"] [unique_id "adzxBW_r4W8fX2GWyGQwLgAAAY0"]
[Mon Apr 13 21:35:01.517245 2026] [:error] [pid 63311:tid 63379] [client 20.104.228.106:13266] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/page_m.php"] [unique_id "adzxBaHjrGN1MqBCVFkPhgAAAIg"]
[Mon Apr 13 21:35:01.971139 2026] [:error] [pid 9314:tid 9319] [client 20.104.228.106:13229] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/page_m.php"] [unique_id "adzxBW_r4W8fX2GWyGQwMgAAAYM"]
[Mon Apr 13 21:35:02.396583 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13185] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/page_m.php"] [unique_id "adzxBgEnn1dQrOSHHNWnUAAAARU"]
[Mon Apr 13 21:35:02.847002 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:13250] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adzxBrHZEIkQ0Zmgp5rSrgAAAMk"]
[Mon Apr 13 21:35:03.276391 2026] [:error] [pid 7228:tid 7253] [client 20.104.228.106:13283] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adzxBwEnn1dQrOSHHNWnUgAAARc"]
[Mon Apr 13 21:35:03.710565 2026] [:error] [pid 57183:tid 57203] [client 20.104.228.106:13241] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adzxBzDO3t8R5NaxzYRaygAAAVI"]
[Mon Apr 13 21:35:04.147392 2026] [:error] [pid 63406:tid 63434] [client 20.104.228.106:13211] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "adzxCLHZEIkQ0Zmgp5rSsQAAANc"]
[Mon Apr 13 21:35:04.651462 2026] [:error] [pid 63309:tid 63319] [client 20.104.228.106:13287] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c4.php"] [unique_id "adzxCEpIKZ10weXpf0UyFQAAAAY"]
[Mon Apr 13 21:35:05.078055 2026] [:error] [pid 63406:tid 63418] [client 20.104.228.106:13282] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c4.php"] [unique_id "adzxCbHZEIkQ0Zmgp5rSsgAAAMc"]
[Mon Apr 13 21:35:05.492742 2026] [:error] [pid 7228:tid 7230] [client 20.104.228.106:13290] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c4.php"] [unique_id "adzxCQEnn1dQrOSHHNWnVgAAAQA"]
[Mon Apr 13 21:35:06.531222 2026] [:error] [pid 7228:tid 7249] [client 20.104.228.106:13201] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/c4.php"] [unique_id "adzxCgEnn1dQrOSHHNWnVwAAARM"]
[Mon Apr 13 21:35:06.974461 2026] [:error] [pid 63311:tid 63382] [client 20.104.228.106:13194] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-themes.php7"] [unique_id "adzxCqHjrGN1MqBCVFkPjwAAAIs"]
[Mon Apr 13 21:35:07.921513 2026] [:error] [pid 63311:tid 63383] [client 20.104.228.106:13303] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-themes.php7"] [unique_id "adzxC6HjrGN1MqBCVFkPkwAAAIw"]
[Mon Apr 13 21:35:08.464529 2026] [:error] [pid 7228:tid 7245] [client 20.104.228.106:13120] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-themes.php7"] [unique_id "adzxDAEnn1dQrOSHHNWnXgAAAQ8"]
[Mon Apr 13 21:35:09.126617 2026] [:error] [pid 7228:tid 7237] [client 20.104.228.106:13130] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-themes.php7"] [unique_id "adzxDQEnn1dQrOSHHNWnYAAAAQc"]
[Mon Apr 13 21:35:09.719139 2026] [:error] [pid 57183:tid 57202] [client 20.104.228.106:13270] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wong.php"] [unique_id "adzxDTDO3t8R5NaxzYRa0wAAAVE"]
[Mon Apr 13 21:35:10.529228 2026] [:error] [pid 57183:tid 57188] [client 20.104.228.106:13132] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wong.php"] [unique_id "adzxDjDO3t8R5NaxzYRa2gAAAUM"]
[Mon Apr 13 21:35:11.063182 2026] [:error] [pid 63311:tid 63394] [client 20.104.228.106:13216] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wong.php"] [unique_id "adzxD6HjrGN1MqBCVFkPmwAAAJc"]
[Mon Apr 13 21:35:11.595891 2026] [:error] [pid 63311:tid 63374] [client 20.104.228.106:13231] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wong.php"] [unique_id "adzxD6HjrGN1MqBCVFkPnQAAAIM"]
[Mon Apr 13 21:35:12.083857 2026] [:error] [pid 7228:tid 7236] [client 20.104.228.106:13204] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "adzxEAEnn1dQrOSHHNWnZQAAAQY"]
[Mon Apr 13 21:35:12.603484 2026] [:error] [pid 57183:tid 57207] [client 20.104.228.106:13271] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "adzxEDDO3t8R5NaxzYRa4AAAAVY"]
[Mon Apr 13 21:35:13.245115 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13247] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "adzxEbHZEIkQ0Zmgp5rSuwAAAM4"]
[Mon Apr 13 21:35:14.043170 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13176] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "adzxEjDO3t8R5NaxzYRa6QAAAVQ"]
[Mon Apr 13 21:35:14.711510 2026] [:error] [pid 63309:tid 63322] [client 20.104.228.106:13148] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "adzxEkpIKZ10weXpf0UyGwAAAAk"]
[Mon Apr 13 21:35:15.281512 2026] [:error] [pid 7228:tid 7237] [client 20.104.228.106:13302] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "adzxEwEnn1dQrOSHHNWnZwAAAQc"]
[Mon Apr 13 21:35:15.800285 2026] [:error] [pid 7228:tid 7250] [client 20.104.228.106:13262] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "adzxEwEnn1dQrOSHHNWnaAAAARQ"]
[Mon Apr 13 21:35:16.384530 2026] [:error] [pid 7228:tid 7240] [client 20.104.228.106:13192] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "adzxFAEnn1dQrOSHHNWnaQAAAQo"]
[Mon Apr 13 21:35:16.858997 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:13306] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "adzxFLHZEIkQ0Zmgp5rSvwAAAMk"]
[Mon Apr 13 21:35:17.362908 2026] [:error] [pid 63309:tid 63326] [client 20.104.228.106:13246] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "adzxFUpIKZ10weXpf0UyJAAAAA0"]
[Mon Apr 13 21:35:18.217617 2026] [:error] [pid 9314:tid 9330] [client 20.104.228.106:13217] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "adzxFm_r4W8fX2GWyGQwPwAAAY4"]
[Mon Apr 13 21:35:18.668316 2026] [:error] [pid 63311:tid 63390] [client 20.104.228.106:13193] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "adzxFqHjrGN1MqBCVFkPrQAAAJM"]
[Mon Apr 13 21:35:19.115223 2026] [:error] [pid 63311:tid 63391] [client 20.104.228.106:13198] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smtp.php"] [unique_id "adzxF6HjrGN1MqBCVFkPsAAAAJQ"]
[Mon Apr 13 21:35:19.602448 2026] [:error] [pid 63309:tid 63313] [client 20.104.228.106:13215] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smtp.php"] [unique_id "adzxF0pIKZ10weXpf0UyKAAAAAA"]
[Mon Apr 13 21:35:20.018316 2026] [:error] [pid 7228:tid 7238] [client 20.104.228.106:13156] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smtp.php"] [unique_id "adzxGAEnn1dQrOSHHNWncAAAAQg"]
[Mon Apr 13 21:35:20.429171 2026] [:error] [pid 63311:tid 63380] [client 20.104.228.106:13277] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smtp.php"] [unique_id "adzxGKHjrGN1MqBCVFkPswAAAIk"]
[Mon Apr 13 21:35:20.844568 2026] [:error] [pid 63311:tid 63395] [client 20.104.228.106:13249] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-hoard.php"] [unique_id "adzxGKHjrGN1MqBCVFkPtAAAAJg"]
[Mon Apr 13 21:35:21.260662 2026] [:error] [pid 7228:tid 7254] [client 20.104.228.106:13220] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-hoard.php"] [unique_id "adzxGQEnn1dQrOSHHNWncwAAARg"]
[Mon Apr 13 21:35:21.723989 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13311] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-hoard.php"] [unique_id "adzxGQEnn1dQrOSHHNWndwAAARU"]
[Mon Apr 13 21:35:22.163323 2026] [:error] [pid 63406:tid 63434] [client 20.104.228.106:13140] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-hoard.php"] [unique_id "adzxGrHZEIkQ0Zmgp5rSwQAAANc"]
[Mon Apr 13 21:35:22.587448 2026] [:error] [pid 63406:tid 63412] [client 20.104.228.106:13213] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/users.php"] [unique_id "adzxGrHZEIkQ0Zmgp5rSwwAAAME"]
[Mon Apr 13 21:35:23.022820 2026] [:error] [pid 9314:tid 9328] [client 20.104.228.106:13308] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/users.php"] [unique_id "adzxG2_r4W8fX2GWyGQwSQAAAYw"]
[Mon Apr 13 21:35:23.457396 2026] [:error] [pid 63406:tid 63435] [client 20.104.228.106:13224] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/users.php"] [unique_id "adzxG7HZEIkQ0Zmgp5rSzAAAANg"]
[Mon Apr 13 21:35:23.940907 2026] [:error] [pid 63406:tid 63412] [client 20.104.228.106:13227] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/users.php"] [unique_id "adzxG7HZEIkQ0Zmgp5rS1AAAAME"]
[Mon Apr 13 21:35:24.370044 2026] [:error] [pid 63406:tid 63431] [client 20.104.228.106:13135] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "adzxHLHZEIkQ0Zmgp5rS2gAAANQ"]
[Mon Apr 13 21:35:25.092577 2026] [:error] [pid 63406:tid 63411] [client 20.104.228.106:13206] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "adzxHbHZEIkQ0Zmgp5rS3wAAAMA"]
[Mon Apr 13 21:35:25.573736 2026] [:error] [pid 63406:tid 63432] [client 20.104.228.106:13154] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "adzxHbHZEIkQ0Zmgp5rS4gAAANU"]
[Mon Apr 13 21:35:26.087586 2026] [:error] [pid 63311:tid 63391] [client 20.104.228.106:13219] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "adzxHqHjrGN1MqBCVFkPvAAAAJQ"]
[Mon Apr 13 21:35:26.514029 2026] [:error] [pid 7228:tid 7230] [client 20.104.228.106:13199] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsa.php"] [unique_id "adzxHgEnn1dQrOSHHNWnegAAAQA"]
[Mon Apr 13 21:35:26.967812 2026] [:error] [pid 7228:tid 7252] [client 20.104.228.106:13257] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsa.php"] [unique_id "adzxHgEnn1dQrOSHHNWnfAAAARY"]
[Mon Apr 13 21:35:27.416189 2026] [:error] [pid 63309:tid 63331] [client 20.104.228.106:13157] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsa.php"] [unique_id "adzxH0pIKZ10weXpf0UyNgAAABI"]
[Mon Apr 13 21:35:27.937386 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13238] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wsa.php"] [unique_id "adzxHzDO3t8R5NaxzYRa7wAAAVQ"]
[Mon Apr 13 21:35:28.358345 2026] [:error] [pid 63406:tid 63431] [client 20.104.228.106:13200] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-seo.php"] [unique_id "adzxILHZEIkQ0Zmgp5rS6AAAANQ"]
[Mon Apr 13 21:35:28.843442 2026] [:error] [pid 63406:tid 63411] [client 20.104.228.106:13059] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-seo.php"] [unique_id "adzxILHZEIkQ0Zmgp5rS6gAAAMA"]
[Mon Apr 13 21:35:29.294837 2026] [:error] [pid 63309:tid 63323] [client 20.104.228.106:13133] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-seo.php"] [unique_id "adzxIUpIKZ10weXpf0UyOQAAAAo"]
[Mon Apr 13 21:35:29.890539 2026] [:error] [pid 57183:tid 57204] [client 20.104.228.106:13245] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-seo.php"] [unique_id "adzxITDO3t8R5NaxzYRa9AAAAVM"]
[Mon Apr 13 21:35:30.373024 2026] [:error] [pid 63310:tid 63354] [client 20.104.228.106:13133] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-rex.php"] [unique_id "adzxInoXpRU5ztmwPjJlnwAAAEo"]
[Mon Apr 13 21:35:30.796938 2026] [:error] [pid 7228:tid 7234] [client 20.104.228.106:13144] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-rex.php"] [unique_id "adzxIgEnn1dQrOSHHNWnfgAAAQQ"]
[Mon Apr 13 21:35:31.219729 2026] [:error] [pid 7228:tid 7232] [client 20.104.228.106:13121] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-rex.php"] [unique_id "adzxIwEnn1dQrOSHHNWngQAAAQI"]
[Mon Apr 13 21:35:31.723515 2026] [:error] [pid 7228:tid 7242] [client 20.104.228.106:13152] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-rex.php"] [unique_id "adzxIwEnn1dQrOSHHNWnggAAAQw"]
[Mon Apr 13 21:35:32.272677 2026] [:error] [pid 57183:tid 57186] [client 20.104.228.106:13301] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "adzxJDDO3t8R5NaxzYRa9wAAAUE"]
[Mon Apr 13 21:35:32.742557 2026] [:error] [pid 63309:tid 63317] [client 20.104.228.106:13305] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "adzxJEpIKZ10weXpf0UyPAAAAAQ"]
[Mon Apr 13 21:35:33.178708 2026] [:error] [pid 63309:tid 63313] [client 20.104.228.106:13275] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "adzxJUpIKZ10weXpf0UyPwAAAAA"]
[Mon Apr 13 21:35:33.686415 2026] [:error] [pid 57183:tid 57202] [client 20.104.228.106:13268] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "adzxJTDO3t8R5NaxzYRa-QAAAVE"]
[Mon Apr 13 21:35:34.159362 2026] [:error] [pid 57183:tid 57203] [client 20.104.228.106:13150] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "adzxJjDO3t8R5NaxzYRa-wAAAVI"]
[Mon Apr 13 21:35:34.585338 2026] [:error] [pid 63406:tid 63415] [client 20.104.228.106:13230] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "adzxJrHZEIkQ0Zmgp5rS8AAAAMQ"]
[Mon Apr 13 21:35:35.017984 2026] [:error] [pid 7228:tid 7254] [client 20.104.228.106:13187] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "adzxJwEnn1dQrOSHHNWniAAAARg"]
[Mon Apr 13 21:35:35.505278 2026] [:error] [pid 7228:tid 7239] [client 20.104.228.106:13061] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "adzxJwEnn1dQrOSHHNWniQAAAQk"]
[Mon Apr 13 21:35:35.920365 2026] [:error] [pid 63310:tid 63346] [client 20.104.228.106:13242] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa2.php"] [unique_id "adzxJ3oXpRU5ztmwPjJlowAAAEI"]
[Mon Apr 13 21:35:36.336023 2026] [:error] [pid 63406:tid 63431] [client 20.104.228.106:13124] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa2.php"] [unique_id "adzxKLHZEIkQ0Zmgp5rS8gAAANQ"]
[Mon Apr 13 21:35:36.871496 2026] [:error] [pid 57183:tid 57190] [client 20.104.228.106:13188] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfa2.php"] [unique_id "adzxKDDO3t8R5NaxzYRbAAAAAUU"]
[Mon Apr 13 21:35:37.616470 2026] [proxy_fcgi:error] [pid 63310:tid 63355] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:37.826128 2026] [proxy_fcgi:error] [pid 63310:tid 63365] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:38.731773 2026] [proxy_fcgi:error] [pid 63310:tid 63367] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:38.941506 2026] [proxy_fcgi:error] [pid 63310:tid 63349] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:39.153801 2026] [proxy_fcgi:error] [pid 63310:tid 63363] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:39.393882 2026] [proxy_fcgi:error] [pid 63310:tid 63368] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:39.675370 2026] [proxy_fcgi:error] [pid 63310:tid 63348] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:39.885348 2026] [proxy_fcgi:error] [pid 63310:tid 63347] [client 20.104.228.106:13281] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:35:40.113366 2026] [:error] [pid 63310:tid 63350] [client 20.104.228.106:13281] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "adzxLHoXpRU5ztmwPjJlswAAAEY"]
[Mon Apr 13 21:35:41.085851 2026] [:error] [pid 9314:tid 9326] [client 20.104.228.106:13310] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "adzxLW_r4W8fX2GWyGQwYgAAAYo"]
[Mon Apr 13 21:35:41.795389 2026] [:error] [pid 63309:tid 63335] [client 20.104.228.106:13296] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "adzxLUpIKZ10weXpf0UySQAAABY"]
[Mon Apr 13 21:35:42.676531 2026] [:error] [pid 63310:tid 63361] [client 20.104.228.106:13235] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/repeater.php"] [unique_id "adzxLnoXpRU5ztmwPjJltwAAAFE"]
[Mon Apr 13 21:35:43.291789 2026] [:error] [pid 9314:tid 9329] [client 20.104.228.106:13208] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/banners/about.php"] [unique_id "adzxL2_r4W8fX2GWyGQwcAAAAY0"]
[Mon Apr 13 21:35:43.924266 2026] [:error] [pid 63406:tid 63415] [client 20.104.228.106:13158] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/banners/about.php"] [unique_id "adzxL7HZEIkQ0Zmgp5rS-wAAAMQ"]
[Mon Apr 13 21:35:44.646287 2026] [:error] [pid 63311:tid 63372] [client 20.104.228.106:13182] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/banners/about.php"] [unique_id "adzxMKHjrGN1MqBCVFkP3AAAAIE"]
[Mon Apr 13 21:35:45.119660 2026] [:error] [pid 63406:tid 63429] [client 20.104.228.106:13069] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/banners/about.php"] [unique_id "adzxMbHZEIkQ0Zmgp5rTAwAAANI"]
[Mon Apr 13 21:35:45.845820 2026] [:error] [pid 63406:tid 63421] [client 20.104.228.106:13240] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repeater.php"] [unique_id "adzxMbHZEIkQ0Zmgp5rTCQAAAMo"]
[Mon Apr 13 21:35:46.367098 2026] [:error] [pid 63310:tid 63365] [client 20.104.228.106:13260] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repeater.php"] [unique_id "adzxMnoXpRU5ztmwPjJluAAAAFU"]
[Mon Apr 13 21:35:46.870186 2026] [:error] [pid 63310:tid 63356] [client 20.104.228.106:13253] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repeater.php"] [unique_id "adzxMnoXpRU5ztmwPjJluQAAAEw"]
[Mon Apr 13 21:35:47.563637 2026] [:error] [pid 63406:tid 63417] [client 20.104.228.106:13131] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repeater.php"] [unique_id "adzxM7HZEIkQ0Zmgp5rTDwAAAMY"]
[Mon Apr 13 21:35:48.002339 2026] [:error] [pid 57183:tid 57199] [client 20.104.228.106:13123] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/avaa.php"] [unique_id "adzxNDDO3t8R5NaxzYRbDQAAAU4"]
[Mon Apr 13 21:35:48.490505 2026] [:error] [pid 7228:tid 7234] [client 20.104.228.106:13284] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/avaa.php"] [unique_id "adzxNAEnn1dQrOSHHNWnkwAAAQQ"]
[Mon Apr 13 21:35:48.943003 2026] [:error] [pid 9314:tid 9330] [client 20.104.228.106:13166] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/avaa.php"] [unique_id "adzxNG_r4W8fX2GWyGQwiAAAAY4"]
[Mon Apr 13 21:35:49.380943 2026] [:error] [pid 57183:tid 57196] [client 20.104.228.106:13065] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/avaa.php"] [unique_id "adzxNTDO3t8R5NaxzYRbFQAAAUs"]
[Mon Apr 13 21:35:49.807315 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13205] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax-actions.php"] [unique_id "adzxNTDO3t8R5NaxzYRbGQAAAVQ"]
[Mon Apr 13 21:35:50.257268 2026] [:error] [pid 63311:tid 63371] [client 20.104.228.106:13134] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax-actions.php"] [unique_id "adzxNqHjrGN1MqBCVFkP6wAAAIA"]
[Mon Apr 13 21:35:50.720729 2026] [:error] [pid 63311:tid 63388] [client 20.104.228.106:13057] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax-actions.php"] [unique_id "adzxNqHjrGN1MqBCVFkP7AAAAJE"]
[Mon Apr 13 21:35:51.140743 2026] [:error] [pid 63309:tid 63332] [client 20.104.228.106:13309] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ajax-actions.php"] [unique_id "adzxN0pIKZ10weXpf0UyTwAAABM"]
[Mon Apr 13 21:35:51.554973 2026] [:error] [pid 57183:tid 57189] [client 20.104.228.106:13128] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adzxNzDO3t8R5NaxzYRbIgAAAUQ"]
[Mon Apr 13 21:35:52.118278 2026] [:error] [pid 57183:tid 57209] [client 20.104.228.106:13279] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adzxODDO3t8R5NaxzYRbJgAAAVg"]
[Mon Apr 13 21:35:52.556368 2026] [:error] [pid 57183:tid 57200] [client 20.104.228.106:13212] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adzxODDO3t8R5NaxzYRbKgAAAU8"]
[Mon Apr 13 21:35:53.021058 2026] [:error] [pid 63406:tid 63423] [client 20.104.228.106:13280] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p.php7"] [unique_id "adzxObHZEIkQ0Zmgp5rTEgAAAMw"]
[Mon Apr 13 21:35:53.470331 2026] [:error] [pid 57183:tid 57185] [client 20.104.228.106:13139] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "adzxOTDO3t8R5NaxzYRbLgAAAUA"]
[Mon Apr 13 21:35:53.895310 2026] [:error] [pid 63310:tid 63347] [client 20.104.228.106:13243] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "adzxOXoXpRU5ztmwPjJlvgAAAEM"]
[Mon Apr 13 21:35:54.332073 2026] [:error] [pid 63309:tid 63336] [client 20.104.228.106:13168] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "adzxOkpIKZ10weXpf0UyUQAAABc"]
[Mon Apr 13 21:35:54.770416 2026] [:error] [pid 63310:tid 63350] [client 20.104.228.106:13080] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "adzxOnoXpRU5ztmwPjJlvwAAAEY"]
[Mon Apr 13 21:35:55.185818 2026] [:error] [pid 57183:tid 57191] [client 20.104.228.106:13261] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebs.php7"] [unique_id "adzxOzDO3t8R5NaxzYRbMwAAAUY"]
[Mon Apr 13 21:35:55.663621 2026] [:error] [pid 63309:tid 63320] [client 20.104.228.106:13180] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebs.php7"] [unique_id "adzxO0pIKZ10weXpf0UyVQAAAAc"]
[Mon Apr 13 21:35:56.109000 2026] [:error] [pid 7228:tid 7230] [client 20.104.228.106:13252] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebs.php7"] [unique_id "adzxPAEnn1dQrOSHHNWnmAAAAQA"]
[Mon Apr 13 21:35:56.604982 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:12993] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebs.php7"] [unique_id "adzxPLHZEIkQ0Zmgp5rTEwAAAMk"]
[Mon Apr 13 21:35:57.099658 2026] [:error] [pid 63406:tid 63435] [client 20.104.228.106:13155] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileman/php/upload.php"] [unique_id "adzxPbHZEIkQ0Zmgp5rTFAAAANg"]
[Mon Apr 13 21:35:57.576123 2026] [:error] [pid 57183:tid 57202] [client 20.104.228.106:13239] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileman/php/upload.php"] [unique_id "adzxPTDO3t8R5NaxzYRbNQAAAVE"]
[Mon Apr 13 21:35:58.245932 2026] [:error] [pid 57183:tid 57191] [client 20.104.228.106:13172] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileman/php/upload.php"] [unique_id "adzxPjDO3t8R5NaxzYRbNwAAAUY"]
[Mon Apr 13 21:35:58.718246 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13077] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileman/php/upload.php"] [unique_id "adzxPrHZEIkQ0Zmgp5rTGAAAAM4"]
[Mon Apr 13 21:35:59.266454 2026] [:error] [pid 63309:tid 63321] [client 20.104.228.106:13222] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aa.php"] [unique_id "adzxP0pIKZ10weXpf0UyWQAAAAg"]
[Mon Apr 13 21:35:59.731673 2026] [:error] [pid 7228:tid 7231] [client 20.104.228.106:13159] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aa.php"] [unique_id "adzxPwEnn1dQrOSHHNWnnwAAAQE"]
[Mon Apr 13 21:36:00.464054 2026] [:error] [pid 63310:tid 63349] [client 20.104.228.106:13056] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aa.php"] [unique_id "adzxQHoXpRU5ztmwPjJlygAAAEU"]
[Mon Apr 13 21:36:01.241093 2026] [:error] [pid 63406:tid 63418] [client 20.104.228.106:13143] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aa.php"] [unique_id "adzxQbHZEIkQ0Zmgp5rTIgAAAMc"]
[Mon Apr 13 21:36:02.081964 2026] [:error] [pid 57183:tid 57193] [client 20.104.228.106:13236] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adzxQjDO3t8R5NaxzYRbQQAAAUg"]
[Mon Apr 13 21:36:02.571064 2026] [:error] [pid 7228:tid 7230] [client 20.104.228.106:13066] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adzxQgEnn1dQrOSHHNWnpQAAAQA"]
[Mon Apr 13 21:36:03.157054 2026] [:error] [pid 7228:tid 7238] [client 20.104.228.106:13164] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adzxQwEnn1dQrOSHHNWnpgAAAQg"]
[Mon Apr 13 21:36:03.809981 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13147] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/WSO.php"] [unique_id "adzxQwEnn1dQrOSHHNWnpwAAARU"]
[Mon Apr 13 21:36:04.289491 2026] [:error] [pid 7228:tid 7231] [client 20.104.228.106:13307] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "adzxRAEnn1dQrOSHHNWnqgAAAQE"]
[Mon Apr 13 21:36:04.911565 2026] [:error] [pid 7228:tid 7234] [client 20.104.228.106:13107] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "adzxRAEnn1dQrOSHHNWnrQAAAQQ"]
[Mon Apr 13 21:36:05.380810 2026] [:error] [pid 63406:tid 63433] [client 20.104.228.106:13126] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "adzxRbHZEIkQ0Zmgp5rTJwAAANY"]
[Mon Apr 13 21:36:05.893668 2026] [:error] [pid 7228:tid 7240] [client 20.104.228.106:13078] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "adzxRQEnn1dQrOSHHNWnrwAAAQo"]
[Mon Apr 13 21:36:06.324864 2026] [:error] [pid 7228:tid 7246] [client 20.104.228.106:13087] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ab.php"] [unique_id "adzxRgEnn1dQrOSHHNWnsQAAARA"]
[Mon Apr 13 21:36:06.798319 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13258] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ab.php"] [unique_id "adzxRgEnn1dQrOSHHNWnsgAAARU"]
[Mon Apr 13 21:36:07.285744 2026] [:error] [pid 7228:tid 7244] [client 20.104.228.106:13237] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ab.php"] [unique_id "adzxRwEnn1dQrOSHHNWntAAAAQ4"]
[Mon Apr 13 21:36:07.749562 2026] [:error] [pid 9314:tid 9319] [client 20.104.228.106:13068] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ab.php"] [unique_id "adzxR2_r4W8fX2GWyGQw0QAAAYM"]
[Mon Apr 13 21:36:08.210729 2026] [:error] [pid 63406:tid 63434] [client 20.104.228.106:13149] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anonse/lock360.php"] [unique_id "adzxSLHZEIkQ0Zmgp5rTOAAAANc"]
[Mon Apr 13 21:36:08.723392 2026] [:error] [pid 63406:tid 63428] [client 20.104.228.106:13071] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anonse/lock360.php"] [unique_id "adzxSLHZEIkQ0Zmgp5rTPAAAANE"]
[Mon Apr 13 21:36:09.393132 2026] [:error] [pid 63406:tid 63412] [client 20.104.228.106:13174] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anonse/lock360.php"] [unique_id "adzxSbHZEIkQ0Zmgp5rTQQAAAME"]
[Mon Apr 13 21:36:09.902288 2026] [:error] [pid 63406:tid 63419] [client 20.104.228.106:13223] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anonse/lock360.php"] [unique_id "adzxSbHZEIkQ0Zmgp5rTRwAAAMg"]
[Mon Apr 13 21:36:10.327406 2026] [:error] [pid 63406:tid 63434] [client 20.104.228.106:13115] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "adzxSrHZEIkQ0Zmgp5rTTQAAANc"]
[Mon Apr 13 21:36:10.788511 2026] [:error] [pid 57183:tid 57209] [client 20.104.228.106:13209] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "adzxSjDO3t8R5NaxzYRbSwAAAVg"]
[Mon Apr 13 21:36:11.390775 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:12992] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "adzxS7HZEIkQ0Zmgp5rTVgAAAM4"]
[Mon Apr 13 21:36:11.823785 2026] [:error] [pid 57183:tid 57201] [client 20.104.228.106:13070] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "adzxSzDO3t8R5NaxzYRbTQAAAVA"]
[Mon Apr 13 21:36:12.287068 2026] [:error] [pid 57183:tid 57205] [client 20.104.228.106:13276] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sitemaps.php"] [unique_id "adzxTDDO3t8R5NaxzYRbTwAAAVQ"]
[Mon Apr 13 21:36:12.744601 2026] [:error] [pid 9314:tid 9323] [client 20.104.228.106:13244] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sitemaps.php"] [unique_id "adzxTG_r4W8fX2GWyGQw1QAAAYc"]
[Mon Apr 13 21:36:13.171609 2026] [:error] [pid 7228:tid 7232] [client 20.104.228.106:13098] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sitemaps.php"] [unique_id "adzxTQEnn1dQrOSHHNWntwAAAQI"]
[Mon Apr 13 21:36:13.599524 2026] [:error] [pid 9314:tid 9318] [client 20.104.228.106:13113] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sitemaps.php"] [unique_id "adzxTW_r4W8fX2GWyGQw1wAAAYI"]
[Mon Apr 13 21:36:14.059832 2026] [:error] [pid 63311:tid 63386] [client 20.104.228.106:13122] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adzxTqHjrGN1MqBCVFkQEAAAAI8"]
[Mon Apr 13 21:36:14.589633 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13023] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adzxTgEnn1dQrOSHHNWnuQAAARU"]
[Mon Apr 13 21:36:15.057102 2026] [:error] [pid 7228:tid 7241] [client 20.104.228.106:13160] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adzxTwEnn1dQrOSHHNWnuwAAAQs"]
[Mon Apr 13 21:36:15.486072 2026] [:error] [pid 9314:tid 9321] [client 20.104.228.106:13092] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "adzxT2_r4W8fX2GWyGQw3gAAAYU"]
[Mon Apr 13 21:36:15.964723 2026] [:error] [pid 63311:tid 63395] [client 20.104.228.106:13165] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/load.php"] [unique_id "adzxT6HjrGN1MqBCVFkQEQAAAJg"]
[Mon Apr 13 21:36:16.494435 2026] [:error] [pid 57183:tid 57207] [client 20.104.228.106:13099] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/load.php"] [unique_id "adzxUDDO3t8R5NaxzYRbWgAAAVY"]
[Mon Apr 13 21:36:16.934841 2026] [:error] [pid 63311:tid 63393] [client 20.104.228.106:13138] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/load.php"] [unique_id "adzxUKHjrGN1MqBCVFkQEwAAAJY"]
[Mon Apr 13 21:36:17.450493 2026] [:error] [pid 57183:tid 57201] [client 20.104.228.106:13063] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/load.php"] [unique_id "adzxUTDO3t8R5NaxzYRbWwAAAVA"]
[Mon Apr 13 21:36:18.140949 2026] [:error] [pid 63310:tid 63345] [client 20.104.228.106:13289] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "adzxUnoXpRU5ztmwPjJlzwAAAEE"]
[Mon Apr 13 21:36:18.564431 2026] [:error] [pid 57183:tid 57185] [client 20.104.228.106:13097] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "adzxUjDO3t8R5NaxzYRbXQAAAUA"]
[Mon Apr 13 21:36:18.984421 2026] [:error] [pid 7228:tid 7237] [client 20.104.228.106:13062] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "adzxUgEnn1dQrOSHHNWnwAAAAQc"]
[Mon Apr 13 21:36:19.490814 2026] [:error] [pid 9314:tid 9337] [client 20.104.228.106:13136] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "adzxU2_r4W8fX2GWyGQw5gAAAZU"]
[Mon Apr 13 21:36:19.932747 2026] [:error] [pid 7228:tid 7248] [client 20.104.228.106:13161] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "adzxUwEnn1dQrOSHHNWnxAAAARI"]
[Mon Apr 13 21:36:20.401221 2026] [:error] [pid 63310:tid 63368] [client 20.104.228.106:13151] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "adzxVHoXpRU5ztmwPjJl0QAAAFg"]
[Mon Apr 13 21:36:20.842921 2026] [:error] [pid 9314:tid 9322] [client 20.104.228.106:13072] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "adzxVG_r4W8fX2GWyGQw5wAAAYY"]
[Mon Apr 13 21:36:21.274439 2026] [:error] [pid 63309:tid 63335] [client 20.104.228.106:13142] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/flower.php"] [unique_id "adzxVUpIKZ10weXpf0UyaAAAABY"]
[Mon Apr 13 21:36:21.722817 2026] [:error] [pid 9314:tid 9325] [client 20.104.228.106:13002] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Api/api.php"] [unique_id "adzxVW_r4W8fX2GWyGQw6QAAAYk"]
[Mon Apr 13 21:36:22.147095 2026] [:error] [pid 63406:tid 63415] [client 20.104.228.106:13178] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Api/api.php"] [unique_id "adzxVrHZEIkQ0Zmgp5rTmAAAAMQ"]
[Mon Apr 13 21:36:22.692734 2026] [:error] [pid 9314:tid 9334] [client 20.104.228.106:13167] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Api/api.php"] [unique_id "adzxVm_r4W8fX2GWyGQw6wAAAZI"]
[Mon Apr 13 21:36:23.164260 2026] [:error] [pid 9314:tid 9324] [client 20.104.228.106:13129] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Api/api.php"] [unique_id "adzxV2_r4W8fX2GWyGQw7AAAAYg"]
[Mon Apr 13 21:36:23.634857 2026] [:error] [pid 63310:tid 63362] [client 20.104.228.106:13076] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "adzxV3oXpRU5ztmwPjJl0wAAAFI"]
[Mon Apr 13 21:36:24.046454 2026] [:error] [pid 9314:tid 9332] [client 20.104.228.106:13073] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "adzxWG_r4W8fX2GWyGQw8QAAAZA"]
[Mon Apr 13 21:36:24.491553 2026] [:error] [pid 57183:tid 57196] [client 20.104.228.106:13173] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "adzxWDDO3t8R5NaxzYRbYQAAAUs"]
[Mon Apr 13 21:36:24.919463 2026] [:error] [pid 9314:tid 9329] [client 20.104.228.106:13171] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "adzxWG_r4W8fX2GWyGQw8wAAAY0"]
[Mon Apr 13 21:36:25.358899 2026] [:error] [pid 63310:tid 63352] [client 20.104.228.106:13085] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Yanzmini.php"] [unique_id "adzxWXoXpRU5ztmwPjJl1AAAAEg"]
[Mon Apr 13 21:36:25.783830 2026] [:error] [pid 9314:tid 9333] [client 20.104.228.106:13179] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Yanzmini.php"] [unique_id "adzxWW_r4W8fX2GWyGQw9QAAAZE"]
[Mon Apr 13 21:36:26.234990 2026] [:error] [pid 9314:tid 9334] [client 20.104.228.106:13175] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Yanzmini.php"] [unique_id "adzxWm_r4W8fX2GWyGQw9gAAAZI"]
[Mon Apr 13 21:36:26.689607 2026] [:error] [pid 63406:tid 63423] [client 20.104.228.106:13075] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Yanzmini.php"] [unique_id "adzxWrHZEIkQ0Zmgp5rTtgAAAMw"]
[Mon Apr 13 21:36:27.123724 2026] [:error] [pid 7228:tid 7246] [client 20.104.228.106:12999] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aff.php"] [unique_id "adzxWwEnn1dQrOSHHNWnxgAAARA"]
[Mon Apr 13 21:36:27.560998 2026] [:error] [pid 57183:tid 57194] [client 20.104.228.106:13109] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aff.php"] [unique_id "adzxWzDO3t8R5NaxzYRbbwAAAUk"]
[Mon Apr 13 21:36:28.064969 2026] [:error] [pid 57183:tid 57191] [client 20.104.228.106:13295] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aff.php"] [unique_id "adzxXDDO3t8R5NaxzYRbcwAAAUY"]
[Mon Apr 13 21:36:28.511126 2026] [:error] [pid 57183:tid 57198] [client 20.104.228.106:13027] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aff.php"] [unique_id "adzxXDDO3t8R5NaxzYRbewAAAU0"]
[Mon Apr 13 21:36:28.939558 2026] [:error] [pid 57183:tid 57185] [client 20.104.228.106:13181] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adzxXDDO3t8R5NaxzYRbgAAAAUA"]
[Mon Apr 13 21:36:29.383925 2026] [:error] [pid 57183:tid 57193] [client 20.104.228.106:13060] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adzxXTDO3t8R5NaxzYRbgwAAAUg"]
[Mon Apr 13 21:36:29.795264 2026] [:error] [pid 63406:tid 63430] [client 20.104.228.106:13146] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adzxXbHZEIkQ0Zmgp5rTvwAAANM"]
[Mon Apr 13 21:36:30.274581 2026] [:error] [pid 7228:tid 7238] [client 20.104.228.106:13084] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "adzxXgEnn1dQrOSHHNWnyQAAAQg"]
[Mon Apr 13 21:36:30.760307 2026] [:error] [pid 7228:tid 7241] [client 20.104.228.106:13265] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "adzxXgEnn1dQrOSHHNWnywAAAQs"]
[Mon Apr 13 21:36:31.201032 2026] [:error] [pid 7228:tid 7231] [client 20.104.228.106:12996] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "adzxXwEnn1dQrOSHHNWnzwAAAQE"]
[Mon Apr 13 21:36:31.739000 2026] [:error] [pid 7228:tid 7247] [client 20.104.228.106:13093] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "adzxXwEnn1dQrOSHHNWn0QAAARE"]
[Mon Apr 13 21:36:32.213964 2026] [:error] [pid 57183:tid 57199] [client 20.104.228.106:13102] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "adzxYDDO3t8R5NaxzYRbjwAAAU4"]
[Mon Apr 13 21:36:32.651183 2026] [:error] [pid 9314:tid 9321] [client 20.104.228.106:13030] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup/index.php"] [unique_id "adzxYG_r4W8fX2GWyGQxCAAAAYU"]
[Mon Apr 13 21:36:33.098043 2026] [:error] [pid 7228:tid 7233] [client 20.104.228.106:13177] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup/index.php"] [unique_id "adzxYQEnn1dQrOSHHNWn0gAAAQM"]
[Mon Apr 13 21:36:33.531445 2026] [:error] [pid 9314:tid 9316] [client 20.104.228.106:13233] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup/index.php"] [unique_id "adzxYW_r4W8fX2GWyGQxCwAAAYA"]
[Mon Apr 13 21:36:33.993358 2026] [:error] [pid 63311:tid 63371] [client 20.104.228.106:13101] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup/index.php"] [unique_id "adzxYaHjrGN1MqBCVFkQIgAAAIA"]
[Mon Apr 13 21:36:34.428011 2026] [:error] [pid 63311:tid 63393] [client 20.104.228.106:13116] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "adzxYqHjrGN1MqBCVFkQIwAAAJY"]
[Mon Apr 13 21:36:34.897293 2026] [:error] [pid 63406:tid 63413] [client 20.104.228.106:13010] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "adzxYrHZEIkQ0Zmgp5rT0QAAAMI"]
[Mon Apr 13 21:36:35.321314 2026] [:error] [pid 7228:tid 7248] [client 20.104.228.106:13086] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "adzxYwEnn1dQrOSHHNWn1wAAARI"]
[Mon Apr 13 21:36:35.770769 2026] [:error] [pid 63406:tid 63412] [client 20.104.228.106:13288] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "adzxY7HZEIkQ0Zmgp5rT0wAAAME"]
[Mon Apr 13 21:36:36.236091 2026] [:error] [pid 63310:tid 63347] [client 20.104.228.106:13011] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "adzxZHoXpRU5ztmwPjJl3QAAAEM"]
[Mon Apr 13 21:36:36.749546 2026] [:error] [pid 63406:tid 63417] [client 20.104.228.106:13232] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "adzxZLHZEIkQ0Zmgp5rT2AAAAMY"]
[Mon Apr 13 21:36:37.192440 2026] [:error] [pid 9314:tid 9323] [client 20.104.228.106:13145] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "adzxZW_r4W8fX2GWyGQxEAAAAYc"]
[Mon Apr 13 21:36:37.620294 2026] [:error] [pid 9314:tid 9320] [client 20.104.228.106:13108] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "adzxZW_r4W8fX2GWyGQxFQAAAYQ"]
[Mon Apr 13 21:36:38.071991 2026] [:error] [pid 9314:tid 9337] [client 20.104.228.106:12933] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adzxZm_r4W8fX2GWyGQxGAAAAZU"]
[Mon Apr 13 21:36:38.486216 2026] [:error] [pid 9314:tid 9328] [client 20.104.228.106:13162] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adzxZm_r4W8fX2GWyGQxGwAAAYw"]
[Mon Apr 13 21:36:38.973005 2026] [:error] [pid 9314:tid 9331] [client 20.104.228.106:13163] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date.php"] [unique_id "adzxZm_r4W8fX2GWyGQxHwAAAY8"]
[Mon Apr 13 21:36:39.401571 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:39.611640 2026] [proxy_fcgi:error] [pid 63406:tid 63434] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:39.877720 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:40.095122 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:40.306444 2026] [proxy_fcgi:error] [pid 63406:tid 63421] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:40.515978 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:40.968418 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:41.204202 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:41.415451 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:41.625104 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 20.104.228.106:13226] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 21:36:41.835179 2026] [:error] [pid 63406:tid 63428] [client 20.104.228.106:13226] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "adzxabHZEIkQ0Zmgp5rT8QAAANE"]
[Mon Apr 13 21:36:42.340774 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13183] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "adzxarHZEIkQ0Zmgp5rT9QAAAM4"]
[Mon Apr 13 21:36:42.751612 2026] [:error] [pid 7228:tid 7246] [client 20.104.228.106:12997] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "adzxagEnn1dQrOSHHNWn4gAAARA"]
[Mon Apr 13 21:36:43.242813 2026] [:error] [pid 7228:tid 7251] [client 20.104.228.106:13228] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/network.php"] [unique_id "adzxawEnn1dQrOSHHNWn5QAAARU"]
[Mon Apr 13 21:36:43.694482 2026] [:error] [pid 63406:tid 63413] [client 20.104.228.106:13051] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/signup.php"] [unique_id "adzxa7HZEIkQ0Zmgp5rT-wAAAMI"]
[Mon Apr 13 21:36:44.186324 2026] [:error] [pid 57183:tid 57187] [client 20.104.228.106:13008] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/signup.php"] [unique_id "adzxbDDO3t8R5NaxzYRbpwAAAUI"]
[Mon Apr 13 21:36:44.638150 2026] [:error] [pid 57183:tid 57207] [client 20.104.228.106:13000] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/signup.php"] [unique_id "adzxbDDO3t8R5NaxzYRbqwAAAVY"]
[Mon Apr 13 21:36:45.286851 2026] [:error] [pid 9314:tid 9339] [client 20.104.228.106:13112] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/signup.php"] [unique_id "adzxbW_r4W8fX2GWyGQxIwAAAZc"]
[Mon Apr 13 21:36:45.713616 2026] [:error] [pid 63406:tid 63415] [client 20.104.228.106:12950] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solevisible.php"] [unique_id "adzxbbHZEIkQ0Zmgp5rUAAAAAMQ"]
[Mon Apr 13 21:36:46.140359 2026] [:error] [pid 57183:tid 57201] [client 20.104.228.106:13026] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solevisible.php"] [unique_id "adzxbjDO3t8R5NaxzYRbrgAAAVA"]
[Mon Apr 13 21:36:46.692563 2026] [:error] [pid 57183:tid 57204] [client 20.104.228.106:13004] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solevisible.php"] [unique_id "adzxbjDO3t8R5NaxzYRbswAAAVM"]
[Mon Apr 13 21:36:47.124777 2026] [:error] [pid 9314:tid 9335] [client 20.104.228.106:13034] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solevisible.php"] [unique_id "adzxb2_r4W8fX2GWyGQxJwAAAZM"]
[Mon Apr 13 21:36:47.560842 2026] [:error] [pid 63309:tid 63317] [client 20.104.228.106:12947] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/users.php"] [unique_id "adzxb0pIKZ10weXpf0UycgAAAAQ"]
[Mon Apr 13 21:36:47.989895 2026] [:error] [pid 63406:tid 63435] [client 20.104.228.106:13234] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/users.php"] [unique_id "adzxb7HZEIkQ0Zmgp5rUCQAAANg"]
[Mon Apr 13 21:36:48.673992 2026] [:error] [pid 63406:tid 63420] [client 20.104.228.106:13019] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/users.php"] [unique_id "adzxcLHZEIkQ0Zmgp5rUDQAAAMk"]
[Mon Apr 13 21:36:49.356206 2026] [:error] [pid 63406:tid 63432] [client 20.104.228.106:13110] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/users.php"] [unique_id "adzxcbHZEIkQ0Zmgp5rUEwAAANU"]
[Mon Apr 13 21:36:49.977653 2026] [:error] [pid 63406:tid 63413] [client 20.104.228.106:13067] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-setting.php"] [unique_id "adzxcbHZEIkQ0Zmgp5rUGwAAAMI"]
[Mon Apr 13 21:36:50.561263 2026] [:error] [pid 63311:tid 63372] [client 20.104.228.106:13079] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-setting.php"] [unique_id "adzxcqHjrGN1MqBCVFkQNwAAAIE"]
[Mon Apr 13 21:36:51.127398 2026] [:error] [pid 63310:tid 63363] [client 20.104.228.106:13091] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-setting.php"] [unique_id "adzxc3oXpRU5ztmwPjJl7gAAAFM"]
[Mon Apr 13 21:36:51.614277 2026] [:error] [pid 63310:tid 63358] [client 20.104.228.106:13009] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-setting.php"] [unique_id "adzxc3oXpRU5ztmwPjJl8AAAAE4"]
[Mon Apr 13 21:36:52.253073 2026] [:error] [pid 63310:tid 63354] [client 20.104.228.106:12995] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-comments-pos.php"] [unique_id "adzxdHoXpRU5ztmwPjJl9AAAAEo"]
[Mon Apr 13 21:36:52.769221 2026] [:error] [pid 63311:tid 63373] [client 20.104.228.106:13029] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-comments-pos.php"] [unique_id "adzxdKHjrGN1MqBCVFkQPAAAAII"]
[Mon Apr 13 21:36:53.294962 2026] [:error] [pid 63406:tid 63417] [client 20.104.228.106:13031] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-comments-pos.php"] [unique_id "adzxdbHZEIkQ0Zmgp5rUJQAAAMY"]
[Mon Apr 13 21:36:53.957578 2026] [:error] [pid 63406:tid 63424] [client 20.104.228.106:12931] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-comments-pos.php"] [unique_id "adzxdbHZEIkQ0Zmgp5rUKQAAAM0"]
[Mon Apr 13 21:36:54.424584 2026] [:error] [pid 63311:tid 63380] [client 20.104.228.106:13058] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link.php"] [unique_id "adzxdqHjrGN1MqBCVFkQPwAAAIk"]
[Mon Apr 13 21:36:54.927768 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13170] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link.php"] [unique_id "adzxdrHZEIkQ0Zmgp5rULgAAAM4"]
[Mon Apr 13 21:36:55.452972 2026] [:error] [pid 63406:tid 63422] [client 20.104.228.106:13005] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link.php"] [unique_id "adzxd7HZEIkQ0Zmgp5rUMgAAAMs"]
[Mon Apr 13 21:36:55.943778 2026] [:error] [pid 57183:tid 57185] [client 20.104.228.106:13151] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link.php"] [unique_id "adzxdzDO3t8R5NaxzYRbtgAAAUA"]
[Mon Apr 13 21:36:56.494824 2026] [:error] [pid 57183:tid 57200] [client 20.104.228.106:12998] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cro.php"] [unique_id "adzxeDDO3t8R5NaxzYRbuQAAAU8"]
[Mon Apr 13 21:36:57.134932 2026] [:error] [pid 57183:tid 57199] [client 20.104.228.106:13013] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cro.php"] [unique_id "adzxeTDO3t8R5NaxzYRbvAAAAU4"]
[Mon Apr 13 21:36:57.581156 2026] [:error] [pid 7228:tid 7230] [client 20.104.228.106:13001] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cro.php"] [unique_id "adzxeQEnn1dQrOSHHNWn8gAAAQA"]
[Mon Apr 13 21:36:57.997803 2026] [:error] [pid 63406:tid 63425] [client 20.104.228.106:13021] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cro.php"] [unique_id "adzxebHZEIkQ0Zmgp5rUOgAAAM4"]
[Mon Apr 13 21:36:58.564369 2026] [:error] [pid 63406:tid 63430] [client 20.104.228.106:13081] [client 20.104.228.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/abou.php"] [unique_id "adzxerHZEIkQ0Zmgp5rUPQAAANM"]
[Mon Apr 13 21:36:58.980659 2026] [:error] [pid 63406:tid 63424] [client 20.104.228.106:12946] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/map.php"] [unique_id "adzxerHZEIkQ0Zmgp5rUQgAAAM0"]
[Mon Apr 13 21:36:59.414920 2026] [:error] [pid 57183:tid 57191] [client 20.104.228.106:13225] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/map.php"] [unique_id "adzxezDO3t8R5NaxzYRbwgAAAUY"]
[Mon Apr 13 21:36:59.882496 2026] [:error] [pid 7228:tid 7238] [client 20.104.228.106:13103] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/map.php"] [unique_id "adzxewEnn1dQrOSHHNWn8wAAAQg"]
[Mon Apr 13 21:37:00.299265 2026] [:error] [pid 63309:tid 63321] [client 20.104.228.106:13017] [client 20.104.228.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ioxi-o.php"] [unique_id "adzxfEpIKZ10weXpf0UyfAAAAAg"]
[Mon Apr 13 21:37:00.728989 2026] [:error] [pid 7228:tid 7247] [client 20.104.228.106:13096] [client 20.104.228.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-mai.php"] [unique_id "adzxfAEnn1dQrOSHHNWn9wAAARE"]
[Tue Apr 14 00:04:00.194432 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:00.451191 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:00.707798 2026] [proxy_fcgi:error] [pid 7228:tid 7230] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:00.964335 2026] [proxy_fcgi:error] [pid 7228:tid 7241] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:01.220459 2026] [proxy_fcgi:error] [pid 7228:tid 7247] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:01.478876 2026] [proxy_fcgi:error] [pid 7228:tid 7249] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:01.738953 2026] [proxy_fcgi:error] [pid 7228:tid 7244] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:02.004747 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:02.260972 2026] [proxy_fcgi:error] [pid 7228:tid 7243] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:03.312372 2026] [proxy_fcgi:error] [pid 7228:tid 7233] [client 20.215.210.138:22180] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:04:03.565308 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:22180] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "ad0T8wEnn1dQrOSHHNXWtwAAARI"]
[Tue Apr 14 00:04:04.764068 2026] [:error] [pid 63309:tid 63315] [client 20.215.210.138:37526] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "ad0T9EpIKZ10weXpf0VMcQAAAAI"]
[Tue Apr 14 00:04:05.829773 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:50223] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "ad0T9TDO3t8R5NaxzYSr4QAAAVU"]
[Tue Apr 14 00:04:07.064727 2026] [:error] [pid 9314:tid 9339] [client 20.215.210.138:45718] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws60.php"] [unique_id "ad0T92_r4W8fX2GWyGRvngAAAZc"]
[Tue Apr 14 00:04:08.822398 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:56341] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ad0T-AEnn1dQrOSHHNXWwAAAAQU"]
[Tue Apr 14 00:04:09.874223 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:22936] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ad0T-QEnn1dQrOSHHNXWwQAAAQY"]
[Tue Apr 14 00:04:13.429589 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:45712] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ad0T_TDO3t8R5NaxzYSsBQAAAVE"]
[Tue Apr 14 00:04:14.158594 2026] [:error] [pid 63310:tid 63355] [client 20.215.210.138:17943] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vanda.php"] [unique_id "ad0T_noXpRU5ztmwPjKERAAAAEs"]
[Tue Apr 14 00:04:15.481221 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:28906] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "ad0T_zDO3t8R5NaxzYSsDgAAAUQ"]
[Tue Apr 14 00:04:17.486102 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:3791] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "ad0UATDO3t8R5NaxzYSsGgAAAVc"]
[Tue Apr 14 00:04:21.131384 2026] [:error] [pid 7228:tid 7251] [client 20.215.210.138:48386] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "ad0UBQEnn1dQrOSHHNXWywAAARU"]
[Tue Apr 14 00:04:23.250531 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:3805] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/domains.php"] [unique_id "ad0UBwEnn1dQrOSHHNXW0gAAARI"]
[Tue Apr 14 00:04:25.458396 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:37536] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/144.php"] [unique_id "ad0UCaHjrGN1MqBCVFk57wAAAIc"]
[Tue Apr 14 00:04:27.312966 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:17936] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/144.php"] [unique_id "ad0UC7HZEIkQ0Zmgp5pDsQAAAME"]
[Tue Apr 14 00:04:28.838332 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:37545] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/144.php"] [unique_id "ad0UDG_r4W8fX2GWyGRvpQAAAYc"]
[Tue Apr 14 00:04:30.534695 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:39934] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/144.php"] [unique_id "ad0UDrHZEIkQ0Zmgp5pDuwAAAM8"]
[Tue Apr 14 00:04:31.843420 2026] [:error] [pid 9314:tid 9330] [client 20.215.210.138:18641] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asd.php"] [unique_id "ad0UD2_r4W8fX2GWyGRvqgAAAY4"]
[Tue Apr 14 00:04:33.302165 2026] [:error] [pid 9314:tid 9322] [client 20.215.210.138:3788] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asd.php"] [unique_id "ad0UEW_r4W8fX2GWyGRvsAAAAYY"]
[Tue Apr 14 00:04:34.185285 2026] [:error] [pid 63311:tid 63380] [client 20.215.210.138:22938] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asd.php"] [unique_id "ad0UEqHjrGN1MqBCVFk59gAAAIk"]
[Tue Apr 14 00:04:35.782491 2026] [:error] [pid 63309:tid 63319] [client 20.215.210.138:39877] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/asd.php"] [unique_id "ad0UE0pIKZ10weXpf0VMggAAAAY"]
[Tue Apr 14 00:04:37.230373 2026] [:error] [pid 63309:tid 63316] [client 20.215.210.138:48437] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ad0UFUpIKZ10weXpf0VMhQAAAAM"]
[Tue Apr 14 00:04:41.140533 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:18669] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ad0UGbHZEIkQ0Zmgp5pDyQAAANU"]
[Tue Apr 14 00:04:42.928753 2026] [:error] [pid 7228:tid 7252] [client 20.215.210.138:45724] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ad0UGgEnn1dQrOSHHNXW3gAAARY"]
[Tue Apr 14 00:04:45.392187 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:3833] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-104.php"] [unique_id "ad0UHbHZEIkQ0Zmgp5pD0gAAANY"]
[Tue Apr 14 00:04:47.229130 2026] [:error] [pid 63310:tid 63362] [client 20.215.210.138:22212] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ad0UH3oXpRU5ztmwPjKEVQAAAFI"]
[Tue Apr 14 00:04:48.842417 2026] [:error] [pid 63311:tid 63377] [client 20.215.210.138:22245] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ad0UIKHjrGN1MqBCVFk6AgAAAIY"]
[Tue Apr 14 00:04:50.917145 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:41129] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ad0UIrHZEIkQ0Zmgp5pD3AAAANQ"]
[Tue Apr 14 00:04:53.770665 2026] [:error] [pid 9314:tid 9320] [client 20.215.210.138:41089] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/rzki.php"] [unique_id "ad0UJW_r4W8fX2GWyGRv1wAAAYQ"]
[Tue Apr 14 00:04:55.152526 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:48412] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ad0UJ7HZEIkQ0Zmgp5pD4wAAAM8"]
[Tue Apr 14 00:04:56.646113 2026] [:error] [pid 63310:tid 63363] [client 20.215.210.138:22218] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ad0UKHoXpRU5ztmwPjKEXgAAAFM"]
[Tue Apr 14 00:04:58.202620 2026] [:error] [pid 63309:tid 63320] [client 20.215.210.138:52722] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ad0UKkpIKZ10weXpf0VMlAAAAAc"]
[Tue Apr 14 00:04:59.233757 2026] [:error] [pid 63310:tid 63353] [client 20.215.210.138:52058] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xsas.php"] [unique_id "ad0UK3oXpRU5ztmwPjKEYQAAAEk"]
[Tue Apr 14 00:05:01.252108 2026] [:error] [pid 63310:tid 63357] [client 20.215.210.138:4059] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/d12.php"] [unique_id "ad0ULXoXpRU5ztmwPjKEZAAAAE0"]
[Tue Apr 14 00:05:02.725399 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:41148] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/d12.php"] [unique_id "ad0ULrHZEIkQ0Zmgp5pD_QAAAMI"]
[Tue Apr 14 00:05:04.761763 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:05.029699 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:05.564702 2026] [proxy_fcgi:error] [pid 63406:tid 63428] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:05.851178 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:06.382351 2026] [proxy_fcgi:error] [pid 63406:tid 63426] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:06.904641 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:07.364302 2026] [proxy_fcgi:error] [pid 63406:tid 63435] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:08.968288 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:09.224852 2026] [proxy_fcgi:error] [pid 63406:tid 63423] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:09.486749 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 20.215.210.138:28171] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:05:09.739303 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:28171] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/clss.php"] [unique_id "ad0UNbHZEIkQ0Zmgp5pEHwAAAM4"]
[Tue Apr 14 00:05:11.502612 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:22228] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/clss.php"] [unique_id "ad0UN6HjrGN1MqBCVFk6EAAAAIc"]
[Tue Apr 14 00:05:13.477998 2026] [:error] [pid 63310:tid 63362] [client 20.215.210.138:47086] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/clss.php"] [unique_id "ad0UOXoXpRU5ztmwPjKEdwAAAFI"]
[Tue Apr 14 00:05:16.987392 2026] [:error] [pid 63309:tid 63314] [client 20.215.210.138:41115] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/clss.php"] [unique_id "ad0UPEpIKZ10weXpf0VMogAAAAE"]
[Tue Apr 14 00:05:19.454414 2026] [:error] [pid 9314:tid 9321] [client 20.215.210.138:52674] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/44.php"] [unique_id "ad0UP2_r4W8fX2GWyGRv7gAAAYU"]
[Tue Apr 14 00:05:27.661615 2026] [:error] [pid 63311:tid 63373] [client 20.215.210.138:28843] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/44.php"] [unique_id "ad0UR6HjrGN1MqBCVFk6JAAAAII"]
[Tue Apr 14 00:05:30.344695 2026] [:error] [pid 63311:tid 63384] [client 20.215.210.138:52084] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/44.php"] [unique_id "ad0USqHjrGN1MqBCVFk6JwAAAI0"]
[Tue Apr 14 00:05:32.788991 2026] [:error] [pid 63311:tid 63390] [client 20.215.210.138:3173] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/44.php"] [unique_id "ad0UTKHjrGN1MqBCVFk6KgAAAJM"]
[Tue Apr 14 00:05:34.382930 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:3473] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "ad0UTjDO3t8R5NaxzYSsUwAAAVE"]
[Tue Apr 14 00:05:35.854138 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:36106] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "ad0UT7HZEIkQ0Zmgp5pEYgAAANY"]
[Tue Apr 14 00:05:37.730019 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:22220] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "ad0UUbHZEIkQ0Zmgp5pEaQAAANg"]
[Tue Apr 14 00:05:39.058878 2026] [:error] [pid 63309:tid 63323] [client 20.215.210.138:4051] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a5e0a.php"] [unique_id "ad0UU0pIKZ10weXpf0VMrwAAAAo"]
[Tue Apr 14 00:05:39.789497 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:56976] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "ad0UUzDO3t8R5NaxzYSsWgAAAVQ"]
[Tue Apr 14 00:05:41.225180 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:28824] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "ad0UVTDO3t8R5NaxzYSsXwAAAUY"]
[Tue Apr 14 00:05:42.722006 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:4049] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "ad0UVrHZEIkQ0Zmgp5pEcQAAAMM"]
[Tue Apr 14 00:05:44.604855 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:55742] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bo.php"] [unique_id "ad0UWLHZEIkQ0Zmgp5pEcgAAAMo"]
[Tue Apr 14 00:05:46.173830 2026] [:error] [pid 7228:tid 7253] [client 20.215.210.138:52092] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/56c53.php"] [unique_id "ad0UWgEnn1dQrOSHHNXXNgAAARc"]
[Tue Apr 14 00:05:47.392813 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:41707] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/56c53.php"] [unique_id "ad0UW7HZEIkQ0Zmgp5pEdwAAANI"]
[Tue Apr 14 00:05:48.356539 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:28174] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/56c53.php"] [unique_id "ad0UXLHZEIkQ0Zmgp5pEfQAAANc"]
[Tue Apr 14 00:05:49.306484 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:41696] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/56c53.php"] [unique_id "ad0UXbHZEIkQ0Zmgp5pEgAAAAMQ"]
[Tue Apr 14 00:05:50.404001 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:57001] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "ad0UXqHjrGN1MqBCVFk6QAAAAIw"]
[Tue Apr 14 00:05:52.308318 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:3159] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "ad0UYDDO3t8R5NaxzYSsfQAAAUY"]
[Tue Apr 14 00:05:54.002187 2026] [:error] [pid 9314:tid 9318] [client 20.215.210.138:4073] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "ad0UYm_r4W8fX2GWyGRv-gAAAYI"]
[Tue Apr 14 00:05:55.638044 2026] [:error] [pid 7228:tid 7245] [client 20.215.210.138:56960] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx78.php"] [unique_id "ad0UYwEnn1dQrOSHHNXXQwAAAQ8"]
[Tue Apr 14 00:05:59.459639 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:3176] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad0UZ7HZEIkQ0Zmgp5pEiQAAAMI"]
[Tue Apr 14 00:06:03.322818 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:52063] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad0UawEnn1dQrOSHHNXXWQAAAQU"]
[Tue Apr 14 00:06:06.058803 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:43042] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad0UbjDO3t8R5NaxzYSsiAAAAUE"]
[Tue Apr 14 00:06:07.194459 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:55724] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad0Ub6HjrGN1MqBCVFk6VQAAAJI"]
[Tue Apr 14 00:06:09.060411 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:09.318848 2026] [proxy_fcgi:error] [pid 63311:tid 63392] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:09.843269 2026] [proxy_fcgi:error] [pid 63311:tid 63374] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:10.099319 2026] [proxy_fcgi:error] [pid 63311:tid 63373] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:10.366791 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:10.623956 2026] [proxy_fcgi:error] [pid 63311:tid 63380] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:10.935580 2026] [proxy_fcgi:error] [pid 63311:tid 63392] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:11.218564 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:11.477845 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:11.734266 2026] [proxy_fcgi:error] [pid 63311:tid 63393] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:12.506220 2026] [proxy_fcgi:error] [pid 63311:tid 63389] [client 20.215.210.138:20912] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:06:12.900613 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:20912] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ad0UdKHjrGN1MqBCVFk6eAAAAIc"]
[Tue Apr 14 00:06:17.386927 2026] [:error] [pid 63309:tid 63335] [client 20.215.210.138:56978] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ad0UeUpIKZ10weXpf0VMvQAAABY"]
[Tue Apr 14 00:06:18.007971 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:36114] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ad0UeqHjrGN1MqBCVFk6hQAAAJE"]
[Tue Apr 14 00:06:18.975677 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:20890] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "ad0UejDO3t8R5NaxzYSsmQAAAUQ"]
[Tue Apr 14 00:06:20.136160 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:41703] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "ad0UfDDO3t8R5NaxzYSsnQAAAVA"]
[Tue Apr 14 00:06:21.495898 2026] [:error] [pid 63309:tid 63325] [client 20.215.210.138:43045] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "ad0UfUpIKZ10weXpf0VMwwAAAAw"]
[Tue Apr 14 00:06:23.291896 2026] [:error] [pid 57183:tid 57192] [client 20.215.210.138:45782] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "ad0UfzDO3t8R5NaxzYSspwAAAUc"]
[Tue Apr 14 00:06:25.498049 2026] [:error] [pid 57183:tid 57190] [client 20.215.210.138:3600] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zlnckdxn.php"] [unique_id "ad0UgTDO3t8R5NaxzYSssgAAAUU"]
[Tue Apr 14 00:06:26.711127 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:24789] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs6.php"] [unique_id "ad0UgrHZEIkQ0Zmgp5pEsgAAANc"]
[Tue Apr 14 00:06:28.264904 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:3606] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs6.php"] [unique_id "ad0UhDDO3t8R5NaxzYSswwAAAU4"]
[Tue Apr 14 00:06:29.720412 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:3303] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs6.php"] [unique_id "ad0UhaHjrGN1MqBCVFk6kwAAAJI"]
[Tue Apr 14 00:06:31.071174 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:38577] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs6.php"] [unique_id "ad0Uh6HjrGN1MqBCVFk6mAAAAIw"]
[Tue Apr 14 00:06:32.246486 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:42469] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwzs.php"] [unique_id "ad0UiLHZEIkQ0Zmgp5pEvgAAAM8"]
[Tue Apr 14 00:06:34.462174 2026] [:error] [pid 7228:tid 7237] [client 20.215.210.138:44583] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwzs.php"] [unique_id "ad0UigEnn1dQrOSHHNXXbwAAAQc"]
[Tue Apr 14 00:06:36.415317 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:3074] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwzs.php"] [unique_id "ad0UjLHZEIkQ0Zmgp5pExwAAANY"]
[Tue Apr 14 00:06:38.383737 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:26057] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwzs.php"] [unique_id "ad0UjjDO3t8R5NaxzYSs0QAAAUQ"]
[Tue Apr 14 00:06:40.543381 2026] [:error] [pid 63309:tid 63317] [client 20.215.210.138:51557] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad0UkEpIKZ10weXpf0VM0gAAAAQ"]
[Tue Apr 14 00:06:41.820056 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:29963] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad0UkbHZEIkQ0Zmgp5pEzgAAANE"]
[Tue Apr 14 00:06:43.265049 2026] [:error] [pid 63309:tid 63322] [client 20.215.210.138:14388] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad0Uk0pIKZ10weXpf0VM1AAAAAk"]
[Tue Apr 14 00:06:44.026042 2026] [:error] [pid 63309:tid 63313] [client 20.215.210.138:41653] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "ad0UlEpIKZ10weXpf0VM1gAAAAA"]
[Tue Apr 14 00:06:45.342821 2026] [:error] [pid 63309:tid 63335] [client 20.215.210.138:29331] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad0UlUpIKZ10weXpf0VM2wAAABY"]
[Tue Apr 14 00:06:46.941641 2026] [:error] [pid 63309:tid 63323] [client 20.215.210.138:52668] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad0UlkpIKZ10weXpf0VM4QAAAAo"]
[Tue Apr 14 00:06:47.892887 2026] [:error] [pid 63309:tid 63317] [client 20.215.210.138:42419] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad0Ul0pIKZ10weXpf0VM5QAAAAQ"]
[Tue Apr 14 00:06:49.265047 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:48974] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad0UmQEnn1dQrOSHHNXXiAAAARE"]
[Tue Apr 14 00:06:50.269831 2026] [:error] [pid 63309:tid 63315] [client 20.215.210.138:29359] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewe.php"] [unique_id "ad0UmkpIKZ10weXpf0VM5gAAAAI"]
[Tue Apr 14 00:06:51.433228 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:26835] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewe.php"] [unique_id "ad0UmzDO3t8R5NaxzYSs1AAAAVQ"]
[Tue Apr 14 00:06:52.317804 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:55801] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewe.php"] [unique_id "ad0UnLHZEIkQ0Zmgp5pE2wAAANY"]
[Tue Apr 14 00:06:53.402314 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:48995] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewe.php"] [unique_id "ad0UnbHZEIkQ0Zmgp5pE3gAAAMY"]
[Tue Apr 14 00:06:54.178585 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:24289] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad0UnrHZEIkQ0Zmgp5pE5gAAANQ"]
[Tue Apr 14 00:06:55.061022 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:24277] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad0Un7HZEIkQ0Zmgp5pE7AAAAMk"]
[Tue Apr 14 00:06:56.412568 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:48993] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad0UoLHZEIkQ0Zmgp5pE8QAAAME"]
[Tue Apr 14 00:06:57.709673 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:48917] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad0UoaHjrGN1MqBCVFk6nwAAAIc"]
[Tue Apr 14 00:06:59.727243 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:44669] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x9.php"] [unique_id "ad0UozDO3t8R5NaxzYSs2wAAAVA"]
[Tue Apr 14 00:07:01.830027 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:27596] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x9.php"] [unique_id "ad0UpbHZEIkQ0Zmgp5pE-QAAAMY"]
[Tue Apr 14 00:07:03.192360 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:24319] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x9.php"] [unique_id "ad0Up7HZEIkQ0Zmgp5pE_QAAANA"]
[Tue Apr 14 00:07:04.034092 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:27596] [client 20.215.210.138] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "65.21.113.197_10d61f5828cbf5a73a26ff957a406bd2ee22e1fb"): Internal error (specific information not available) [hostname "www.quarryspec.com.au"] [uri "/x9.php"] [unique_id "ad0UpbHZEIkQ0Zmgp5pE-QAAAMY"]
[Tue Apr 14 00:07:05.429721 2026] [:error] [pid 63311:tid 63394] [client 20.215.210.138:44618] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/x9.php"] [unique_id "ad0UqaHjrGN1MqBCVFk6oAAAAJc"]
[Tue Apr 14 00:07:07.146383 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:44608] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/an.php"] [unique_id "ad0UqwEnn1dQrOSHHNXXlgAAAQU"]
[Tue Apr 14 00:07:08.381625 2026] [:error] [pid 9314:tid 9333] [client 20.215.210.138:24294] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/an.php"] [unique_id "ad0UrG_r4W8fX2GWyGRwMgAAAZE"]
[Tue Apr 14 00:07:10.002258 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:3570] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/an.php"] [unique_id "ad0UrrHZEIkQ0Zmgp5pFIAAAANY"]
[Tue Apr 14 00:07:11.065008 2026] [:error] [pid 63311:tid 63376] [client 20.215.210.138:23547] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/an.php"] [unique_id "ad0Ur6HjrGN1MqBCVFk6pAAAAIU"]
[Tue Apr 14 00:07:11.852509 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:3999] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboutc.php"] [unique_id "ad0Ur6HjrGN1MqBCVFk6pgAAAJE"]
[Tue Apr 14 00:07:12.561689 2026] [proxy_fcgi:error] [pid 9314:tid 9319] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:13.015497 2026] [proxy_fcgi:error] [pid 9314:tid 9327] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:13.272984 2026] [proxy_fcgi:error] [pid 9314:tid 9322] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:13.558639 2026] [proxy_fcgi:error] [pid 9314:tid 9335] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:13.834799 2026] [proxy_fcgi:error] [pid 9314:tid 9318] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:14.092472 2026] [proxy_fcgi:error] [pid 9314:tid 9323] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:14.349498 2026] [proxy_fcgi:error] [pid 9314:tid 9334] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:14.613376 2026] [proxy_fcgi:error] [pid 9314:tid 9338] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:14.869704 2026] [proxy_fcgi:error] [pid 9314:tid 9336] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:15.125588 2026] [proxy_fcgi:error] [pid 9314:tid 9339] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:16.010483 2026] [proxy_fcgi:error] [pid 9314:tid 9324] [client 20.215.210.138:46374] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:07:16.267114 2026] [:error] [pid 9314:tid 9328] [client 20.215.210.138:46374] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "ad0UtG_r4W8fX2GWyGRwQwAAAYw"]
[Tue Apr 14 00:07:17.530640 2026] [:error] [pid 57183:tid 57204] [client 20.215.210.138:19309] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "ad0UtTDO3t8R5NaxzYSs7gAAAVM"]
[Tue Apr 14 00:07:19.210791 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:16729] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "ad0UtzDO3t8R5NaxzYSs8AAAAUo"]
[Tue Apr 14 00:07:20.984405 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:19286] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "ad0UuLHZEIkQ0Zmgp5pFYwAAAMg"]
[Tue Apr 14 00:07:22.995048 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:20566] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/njxjtooj.php"] [unique_id "ad0UurHZEIkQ0Zmgp5pFbwAAANY"]
[Tue Apr 14 00:07:24.017615 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:20591] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/njxjtooj.php"] [unique_id "ad0UvLHZEIkQ0Zmgp5pFcwAAAMY"]
[Tue Apr 14 00:07:25.766943 2026] [:error] [pid 63310:tid 63357] [client 20.215.210.138:3203] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/njxjtooj.php"] [unique_id "ad0UvXoXpRU5ztmwPjKExwAAAE0"]
[Tue Apr 14 00:07:26.987688 2026] [:error] [pid 63309:tid 63323] [client 20.215.210.138:3965] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/njxjtooj.php"] [unique_id "ad0UvkpIKZ10weXpf0VNBQAAAAo"]
[Tue Apr 14 00:07:28.483038 2026] [:error] [pid 63310:tid 63347] [client 20.215.210.138:46447] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad0UwHoXpRU5ztmwPjKEzAAAAEM"]
[Tue Apr 14 00:07:29.859770 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:39299] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad0UwW_r4W8fX2GWyGRwTgAAAYg"]
[Tue Apr 14 00:07:30.664001 2026] [:error] [pid 63311:tid 63386] [client 20.215.210.138:3953] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad0UwqHjrGN1MqBCVFk6uQAAAI8"]
[Tue Apr 14 00:07:31.770320 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:20581] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad0Uw7HZEIkQ0Zmgp5pFiAAAAMw"]
[Tue Apr 14 00:07:33.393345 2026] [:error] [pid 9314:tid 9321] [client 20.215.210.138:28241] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad0UxW_r4W8fX2GWyGRwVAAAAYU"]
[Tue Apr 14 00:07:35.430001 2026] [:error] [pid 63309:tid 63322] [client 20.215.210.138:28287] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad0Ux0pIKZ10weXpf0VNCQAAAAk"]
[Tue Apr 14 00:07:36.774924 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:39358] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad0UyKHjrGN1MqBCVFk6vgAAAIw"]
[Tue Apr 14 00:07:37.873429 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:3937] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad0UybHZEIkQ0Zmgp5pFkQAAAM8"]
[Tue Apr 14 00:07:38.849368 2026] [:error] [pid 63309:tid 63329] [client 20.215.210.138:46412] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/iyy.php"] [unique_id "ad0UykpIKZ10weXpf0VNDQAAABA"]
[Tue Apr 14 00:07:41.632314 2026] [:error] [pid 7228:tid 7230] [client 20.215.210.138:51552] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/iyy.php"] [unique_id "ad0UzQEnn1dQrOSHHNXXuQAAAQA"]
[Tue Apr 14 00:07:44.148312 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:39303] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/iyy.php"] [unique_id "ad0U0LHZEIkQ0Zmgp5pFnQAAANU"]
[Tue Apr 14 00:07:47.605769 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:28264] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/iyy.php"] [unique_id "ad0U0wEnn1dQrOSHHNXXwQAAAQY"]
[Tue Apr 14 00:07:49.011685 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:19320] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/900.php"] [unique_id "ad0U1W_r4W8fX2GWyGRwawAAAZA"]
[Tue Apr 14 00:07:52.338326 2026] [:error] [pid 63309:tid 63319] [client 20.215.210.138:38112] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/900.php"] [unique_id "ad0U2EpIKZ10weXpf0VNGAAAAAY"]
[Tue Apr 14 00:07:56.053539 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:28285] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/900.php"] [unique_id "ad0U3AEnn1dQrOSHHNXX4AAAAQY"]
[Tue Apr 14 00:08:01.876643 2026] [:error] [pid 7228:tid 7231] [client 20.215.210.138:38082] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/900.php"] [unique_id "ad0U4QEnn1dQrOSHHNXYAAAAAQE"]
[Tue Apr 14 00:08:05.018626 2026] [:error] [pid 57183:tid 57187] [client 20.215.210.138:38103] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0U5TDO3t8R5NaxzYStVgAAAUI"]
[Tue Apr 14 00:08:05.957711 2026] [:error] [pid 63309:tid 63335] [client 20.215.210.138:18621] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0U5UpIKZ10weXpf0VNIAAAABY"]
[Tue Apr 14 00:08:06.971755 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:28278] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0U5rHZEIkQ0Zmgp5pFyAAAANA"]
[Tue Apr 14 00:08:08.012305 2026] [:error] [pid 63309:tid 63334] [client 20.215.210.138:16251] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/blsvgeyaza.php"] [unique_id "ad0U6EpIKZ10weXpf0VNIgAAABU"]
[Tue Apr 14 00:08:09.308812 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:18610] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "ad0U6bHZEIkQ0Zmgp5pFzAAAANQ"]
[Tue Apr 14 00:08:11.529541 2026] [:error] [pid 57183:tid 57185] [client 20.215.210.138:16247] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "ad0U6zDO3t8R5NaxzYStXAAAAUA"]
[Tue Apr 14 00:08:13.548122 2026] [:error] [pid 9314:tid 9338] [client 20.215.210.138:3389] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "ad0U7W_r4W8fX2GWyGRwegAAAZY"]
[Tue Apr 14 00:08:15.842298 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:39332] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gqhyti.php"] [unique_id "ad0U7zDO3t8R5NaxzYStagAAAVA"]
[Tue Apr 14 00:08:20.799431 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:21.055839 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:21.340406 2026] [proxy_fcgi:error] [pid 63406:tid 63422] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:21.598701 2026] [proxy_fcgi:error] [pid 63406:tid 63430] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:21.855911 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:22.112052 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:22.388797 2026] [proxy_fcgi:error] [pid 63406:tid 63419] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:22.645058 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:22.914362 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:23.175042 2026] [proxy_fcgi:error] [pid 63406:tid 63414] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:23.431142 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.215.210.138:37585] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:08:23.683860 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:37585] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bmi.php"] [unique_id "ad0U97HZEIkQ0Zmgp5pF5gAAAMo"]
[Tue Apr 14 00:08:28.161605 2026] [:error] [pid 7228:tid 7243] [client 20.215.210.138:29384] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bmi.php"] [unique_id "ad0U_AEnn1dQrOSHHNXYWgAAAQ0"]
[Tue Apr 14 00:08:32.569367 2026] [:error] [pid 7228:tid 7237] [client 20.215.210.138:27583] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bmi.php"] [unique_id "ad0VAAEnn1dQrOSHHNXYaAAAAQc"]
[Tue Apr 14 00:08:39.577750 2026] [:error] [pid 63310:tid 63347] [client 20.215.210.138:19869] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VB3oXpRU5ztmwPjKFNQAAAEM"]
[Tue Apr 14 00:08:40.794649 2026] [:error] [pid 7228:tid 7232] [client 20.215.210.138:27538] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VCAEnn1dQrOSHHNXYeAAAAQI"]
[Tue Apr 14 00:08:42.058971 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:58167] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VCrHZEIkQ0Zmgp5pGIAAAAM8"]
[Tue Apr 14 00:08:42.778961 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:19864] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bypltspd.php"] [unique_id "ad0VCqHjrGN1MqBCVFk63gAAAJI"]
[Tue Apr 14 00:08:43.663333 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:3435] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad0VC7HZEIkQ0Zmgp5pGJQAAAMQ"]
[Tue Apr 14 00:08:44.425495 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:43108] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad0VDDDO3t8R5NaxzYStqQAAAUE"]
[Tue Apr 14 00:08:45.116671 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:27568] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad0VDbHZEIkQ0Zmgp5pGJwAAANg"]
[Tue Apr 14 00:08:47.121427 2026] [:error] [pid 9314:tid 9329] [client 20.215.210.138:13575] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad0VD2_r4W8fX2GWyGRwqwAAAY0"]
[Tue Apr 14 00:08:48.908128 2026] [:error] [pid 63309:tid 63317] [client 20.215.210.138:13570] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VEEpIKZ10weXpf0VNOQAAAAQ"]
[Tue Apr 14 00:08:49.874712 2026] [:error] [pid 63311:tid 63390] [client 20.215.210.138:27570] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VEaHjrGN1MqBCVFk64QAAAJM"]
[Tue Apr 14 00:08:50.800531 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:3428] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VEm_r4W8fX2GWyGRwsAAAAYg"]
[Tue Apr 14 00:08:51.774496 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:13592] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad0VEzDO3t8R5NaxzYStrwAAAVQ"]
[Tue Apr 14 00:08:52.375628 2026] [:error] [pid 57183:tid 57190] [client 20.215.210.138:21704] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0VFDDO3t8R5NaxzYStsAAAAUU"]
[Tue Apr 14 00:08:53.374271 2026] [:error] [pid 57183:tid 57209] [client 20.215.210.138:22171] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0VFTDO3t8R5NaxzYStuQAAAVg"]
[Tue Apr 14 00:08:54.597268 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:3430] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0VFrHZEIkQ0Zmgp5pGMgAAANY"]
[Tue Apr 14 00:08:56.276576 2026] [:error] [pid 9314:tid 9330] [client 20.215.210.138:27542] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ad0VGG_r4W8fX2GWyGRwsgAAAY4"]
[Tue Apr 14 00:08:57.719103 2026] [:error] [pid 63311:tid 63387] [client 20.215.210.138:57606] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ad0VGaHjrGN1MqBCVFk65gAAAJA"]
[Tue Apr 14 00:08:58.709437 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:21721] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ad0VGgEnn1dQrOSHHNXYhAAAARI"]
[Tue Apr 14 00:08:59.870516 2026] [:error] [pid 7228:tid 7254] [client 20.215.210.138:22204] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ad0VGwEnn1dQrOSHHNXYiAAAARg"]
[Tue Apr 14 00:09:01.179789 2026] [:error] [pid 63309:tid 63318] [client 20.215.210.138:57698] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "ad0VHUpIKZ10weXpf0VNPQAAAAU"]
[Tue Apr 14 00:09:02.574316 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:13586] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "ad0VHrHZEIkQ0Zmgp5pGOwAAANU"]
[Tue Apr 14 00:09:04.065479 2026] [:error] [pid 63310:tid 63365] [client 20.215.210.138:45231] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "ad0VIHoXpRU5ztmwPjKFQQAAAFU"]
[Tue Apr 14 00:09:06.106976 2026] [:error] [pid 7228:tid 7242] [client 20.215.210.138:13596] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "ad0VIgEnn1dQrOSHHNXYkgAAAQw"]
[Tue Apr 14 00:09:07.065061 2026] [:error] [pid 63309:tid 63322] [client 20.215.210.138:45190] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "ad0VI0pIKZ10weXpf0VNRgAAAAk"]
[Tue Apr 14 00:09:08.347790 2026] [:error] [pid 9314:tid 9321] [client 20.215.210.138:22948] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad0VJG_r4W8fX2GWyGRwvAAAAYU"]
[Tue Apr 14 00:09:09.557091 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:22973] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad0VJW_r4W8fX2GWyGRwwwAAAZQ"]
[Tue Apr 14 00:09:10.933068 2026] [:error] [pid 9314:tid 9322] [client 20.215.210.138:21650] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad0VJm_r4W8fX2GWyGRwygAAAYY"]
[Tue Apr 14 00:09:11.777663 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:57676] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad0VJzDO3t8R5NaxzYStxAAAAVQ"]
[Tue Apr 14 00:09:13.181631 2026] [:error] [pid 9314:tid 9327] [client 20.215.210.138:45727] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0VKW_r4W8fX2GWyGRw0AAAAYs"]
[Tue Apr 14 00:09:14.615526 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:22989] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0VKrHZEIkQ0Zmgp5pGTAAAAMU"]
[Tue Apr 14 00:09:16.608184 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:45712] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0VLKHjrGN1MqBCVFk69AAAAJE"]
[Tue Apr 14 00:09:17.963587 2026] [:error] [pid 9314:tid 9320] [client 20.215.210.138:56337] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "ad0VLW_r4W8fX2GWyGRw1AAAAYQ"]
[Tue Apr 14 00:09:19.038894 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:45721] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0VL7HZEIkQ0Zmgp5pGVQAAAME"]
[Tue Apr 14 00:09:19.997749 2026] [:error] [pid 57183:tid 57204] [client 20.215.210.138:23005] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0VLzDO3t8R5NaxzYStxwAAAVM"]
[Tue Apr 14 00:09:21.037494 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:45734] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0VMbHZEIkQ0Zmgp5pGYAAAAMU"]
[Tue Apr 14 00:09:22.200622 2026] [:error] [pid 57183:tid 57192] [client 20.215.210.138:57674] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad0VMjDO3t8R5NaxzYStzAAAAUc"]
[Tue Apr 14 00:09:23.433503 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:23.702082 2026] [proxy_fcgi:error] [pid 63311:tid 63375] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:24.039571 2026] [proxy_fcgi:error] [pid 63311:tid 63383] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:24.326557 2026] [proxy_fcgi:error] [pid 63311:tid 63391] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:24.582504 2026] [proxy_fcgi:error] [pid 63311:tid 63379] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:24.839639 2026] [proxy_fcgi:error] [pid 63311:tid 63378] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:25.146895 2026] [proxy_fcgi:error] [pid 63311:tid 63384] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:25.777701 2026] [proxy_fcgi:error] [pid 63311:tid 63386] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:26.033698 2026] [proxy_fcgi:error] [pid 63311:tid 63392] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:26.309313 2026] [proxy_fcgi:error] [pid 63311:tid 63381] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:26.565719 2026] [proxy_fcgi:error] [pid 63311:tid 63371] [client 20.215.210.138:22980] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:09:26.818365 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:22980] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "ad0VNqHjrGN1MqBCVFk7DAAAAIw"]
[Tue Apr 14 00:09:27.967580 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:58152] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "ad0VN7HZEIkQ0Zmgp5pGbgAAAMk"]
[Tue Apr 14 00:09:29.043898 2026] [:error] [pid 7228:tid 7251] [client 20.215.210.138:3850] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "ad0VOQEnn1dQrOSHHNXYpQAAARU"]
[Tue Apr 14 00:09:30.052335 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:3664] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "ad0VOjDO3t8R5NaxzYSt1wAAAUo"]
[Tue Apr 14 00:09:31.207357 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:22984] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws83.php"] [unique_id "ad0VO2_r4W8fX2GWyGRw3gAAAYc"]
[Tue Apr 14 00:09:32.022355 2026] [:error] [pid 9314:tid 9331] [client 20.215.210.138:22963] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws83.php"] [unique_id "ad0VPG_r4W8fX2GWyGRw4QAAAY8"]
[Tue Apr 14 00:09:32.756339 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:13576] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws83.php"] [unique_id "ad0VPDDO3t8R5NaxzYSt3wAAAUE"]
[Tue Apr 14 00:09:33.757568 2026] [:error] [pid 63311:tid 63381] [client 20.215.210.138:22986] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws83.php"] [unique_id "ad0VPaHjrGN1MqBCVFk7EAAAAIo"]
[Tue Apr 14 00:09:34.549433 2026] [:error] [pid 63311:tid 63377] [client 20.215.210.138:3707] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws75.php"] [unique_id "ad0VPqHjrGN1MqBCVFk7EwAAAIY"]
[Tue Apr 14 00:09:35.300007 2026] [:error] [pid 63311:tid 63371] [client 20.215.210.138:22915] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws75.php"] [unique_id "ad0VP6HjrGN1MqBCVFk7FQAAAIA"]
[Tue Apr 14 00:09:36.595848 2026] [:error] [pid 63311:tid 63375] [client 20.215.210.138:56339] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws75.php"] [unique_id "ad0VQKHjrGN1MqBCVFk7FgAAAIQ"]
[Tue Apr 14 00:09:38.238953 2026] [:error] [pid 7228:tid 7234] [client 20.215.210.138:43100] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws75.php"] [unique_id "ad0VQgEnn1dQrOSHHNXYqQAAAQQ"]
[Tue Apr 14 00:09:39.636189 2026] [:error] [pid 9314:tid 9329] [client 20.215.210.138:13615] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad0VQ2_r4W8fX2GWyGRw6AAAAY0"]
[Tue Apr 14 00:09:40.778211 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:37567] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad0VRLHZEIkQ0Zmgp5pGlgAAAM8"]
[Tue Apr 14 00:09:42.031767 2026] [:error] [pid 63310:tid 63356] [client 20.215.210.138:3902] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad0VRnoXpRU5ztmwPjKFSAAAAEw"]
[Tue Apr 14 00:09:43.747370 2026] [:error] [pid 63311:tid 63382] [client 20.215.210.138:45707] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad0VR6HjrGN1MqBCVFk7FwAAAIs"]
[Tue Apr 14 00:09:45.221697 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:3739] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "ad0VSTDO3t8R5NaxzYSt9QAAAUE"]
[Tue Apr 14 00:09:48.032303 2026] [:error] [pid 63311:tid 63372] [client 20.215.210.138:23012] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "ad0VTKHjrGN1MqBCVFk7GAAAAIE"]
[Tue Apr 14 00:09:49.349559 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:21662] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "ad0VTTDO3t8R5NaxzYSuCQAAAVc"]
[Tue Apr 14 00:09:51.336452 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:23003] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "ad0VTwEnn1dQrOSHHNXYsQAAARA"]
[Tue Apr 14 00:09:53.682501 2026] [:error] [pid 7228:tid 7230] [client 20.215.210.138:3679] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad0VUQEnn1dQrOSHHNXYtAAAAQA"]
[Tue Apr 14 00:09:56.136992 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:3852] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad0VVDDO3t8R5NaxzYSuHAAAAUs"]
[Tue Apr 14 00:09:57.330721 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:23039] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad0VVbHZEIkQ0Zmgp5pGngAAAMk"]
[Tue Apr 14 00:09:59.741100 2026] [:error] [pid 63311:tid 63386] [client 20.215.210.138:37540] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad0VV6HjrGN1MqBCVFk7GQAAAI8"]
[Tue Apr 14 00:10:02.369444 2026] [:error] [pid 63406:tid 63411] [client 20.215.210.138:37522] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ad0VWrHZEIkQ0Zmgp5pGrQAAAMA"]
[Tue Apr 14 00:10:04.410307 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:23034] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ad0VXLHZEIkQ0Zmgp5pGsAAAANQ"]
[Tue Apr 14 00:10:06.066454 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:22959] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ad0VXrHZEIkQ0Zmgp5pGuQAAAMk"]
[Tue Apr 14 00:10:07.923725 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:23013] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ad0VX7HZEIkQ0Zmgp5pGzgAAANM"]
[Tue Apr 14 00:10:10.349774 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:45697] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ad0VYrHZEIkQ0Zmgp5pG2gAAAME"]
[Tue Apr 14 00:10:12.100551 2026] [:error] [pid 7228:tid 7244] [client 20.215.210.138:56378] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ad0VZAEnn1dQrOSHHNXYwwAAAQ4"]
[Tue Apr 14 00:10:20.615778 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:3742] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ad0VbAEnn1dQrOSHHNXY2AAAAQU"]
[Tue Apr 14 00:10:23.209669 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:3680] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp9.php"] [unique_id "ad0Vb2_r4W8fX2GWyGRxHwAAAZI"]
[Tue Apr 14 00:10:28.271701 2026] [proxy_fcgi:error] [pid 7228:tid 7233] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:28.540749 2026] [proxy_fcgi:error] [pid 7228:tid 7235] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:28.803373 2026] [proxy_fcgi:error] [pid 7228:tid 7242] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:29.059521 2026] [proxy_fcgi:error] [pid 7228:tid 7246] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:29.605680 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:30.742387 2026] [proxy_fcgi:error] [pid 7228:tid 7250] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:31.451017 2026] [proxy_fcgi:error] [pid 7228:tid 7240] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:31.707379 2026] [proxy_fcgi:error] [pid 7228:tid 7237] [client 20.215.210.138:3872] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:10:31.960548 2026] [:error] [pid 7228:tid 7243] [client 20.215.210.138:3872] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amp.php"] [unique_id "ad0VdwEnn1dQrOSHHNXY_wAAAQ0"]
[Tue Apr 14 00:10:33.305697 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:3171] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amp.php"] [unique_id "ad0VebHZEIkQ0Zmgp5pHMwAAAMM"]
[Tue Apr 14 00:10:34.720359 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:47073] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amp.php"] [unique_id "ad0VerHZEIkQ0Zmgp5pHNQAAAME"]
[Tue Apr 14 00:10:35.665919 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:48411] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amp.php"] [unique_id "ad0Ve7HZEIkQ0Zmgp5pHOAAAAMg"]
[Tue Apr 14 00:10:36.876870 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:47098] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abrand.php"] [unique_id "ad0VfLHZEIkQ0Zmgp5pHPgAAAME"]
[Tue Apr 14 00:10:38.028204 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:36125] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abrand.php"] [unique_id "ad0VfrHZEIkQ0Zmgp5pHRgAAAMw"]
[Tue Apr 14 00:10:41.691304 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:41098] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abrand.php"] [unique_id "ad0VgbHZEIkQ0Zmgp5pHXgAAAMk"]
[Tue Apr 14 00:10:42.522663 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:18680] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abrand.php"] [unique_id "ad0VgrHZEIkQ0Zmgp5pHZgAAAMY"]
[Tue Apr 14 00:10:44.038181 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:17947] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/init.php"] [unique_id "ad0VhLHZEIkQ0Zmgp5pHbQAAANg"]
[Tue Apr 14 00:10:45.152981 2026] [:error] [pid 57183:tid 57209] [client 20.215.210.138:48387] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/init.php"] [unique_id "ad0VhTDO3t8R5NaxzYSueQAAAVg"]
[Tue Apr 14 00:10:46.829278 2026] [:error] [pid 63310:tid 63358] [client 20.215.210.138:15557] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/init.php"] [unique_id "ad0VhnoXpRU5ztmwPjKFaQAAAE4"]
[Tue Apr 14 00:10:48.148818 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:20931] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/init.php"] [unique_id "ad0ViAEnn1dQrOSHHNXZEAAAARA"]
[Tue Apr 14 00:10:49.619774 2026] [:error] [pid 9314:tid 9322] [client 20.215.210.138:26074] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ad0ViW_r4W8fX2GWyGRxNwAAAYY"]
[Tue Apr 14 00:10:50.988991 2026] [:error] [pid 57183:tid 57204] [client 20.215.210.138:45778] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ad0VijDO3t8R5NaxzYSugAAAAVM"]
[Tue Apr 14 00:10:52.850972 2026] [:error] [pid 57183:tid 57209] [client 20.215.210.138:44607] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ad0VjDDO3t8R5NaxzYSuhgAAAVg"]
[Tue Apr 14 00:10:54.426472 2026] [:error] [pid 63311:tid 63377] [client 20.215.210.138:24729] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ad0VjqHjrGN1MqBCVFk7QwAAAIY"]
[Tue Apr 14 00:10:55.668642 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:19209] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ad0VjwEnn1dQrOSHHNXZHgAAARE"]
[Tue Apr 14 00:10:56.865522 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:28209] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ad0VkDDO3t8R5NaxzYSujQAAAUE"]
[Tue Apr 14 00:10:57.874563 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:20522] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ad0VkXoXpRU5ztmwPjKFbwAAAFg"]
[Tue Apr 14 00:10:58.977298 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:57009] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ad0VkgEnn1dQrOSHHNXZIgAAARI"]
[Tue Apr 14 00:10:59.828187 2026] [:error] [pid 9314:tid 9331] [client 20.215.210.138:40636] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad0Vk2_r4W8fX2GWyGRxQQAAAY8"]
[Tue Apr 14 00:11:00.998642 2026] [:error] [pid 9314:tid 9319] [client 20.215.210.138:41720] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad0VlG_r4W8fX2GWyGRxSAAAAYM"]
[Tue Apr 14 00:11:02.556923 2026] [:error] [pid 63311:tid 63386] [client 20.215.210.138:40610] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad0VlqHjrGN1MqBCVFk7SAAAAI8"]
[Tue Apr 14 00:11:04.126222 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:3311] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad0VmLHZEIkQ0Zmgp5pHgQAAANg"]
[Tue Apr 14 00:11:07.088529 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:50993] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "ad0Vm7HZEIkQ0Zmgp5pHkwAAAMg"]
[Tue Apr 14 00:11:09.545081 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:27620] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "ad0VnW_r4W8fX2GWyGRxWQAAAZI"]
[Tue Apr 14 00:11:12.343892 2026] [:error] [pid 9314:tid 9316] [client 20.215.210.138:52013] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "ad0VoG_r4W8fX2GWyGRxWwAAAYA"]
[Tue Apr 14 00:11:14.197061 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:14908] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "ad0VogEnn1dQrOSHHNXZLwAAARM"]
[Tue Apr 14 00:11:16.679161 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:27599] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "ad0VpDDO3t8R5NaxzYSupAAAAVE"]
[Tue Apr 14 00:11:19.643841 2026] [:error] [pid 63311:tid 63392] [client 20.215.210.138:3435] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "ad0Vp6HjrGN1MqBCVFk7VQAAAJU"]
[Tue Apr 14 00:11:23.685545 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:14921] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "ad0VqwEnn1dQrOSHHNXZNAAAARA"]
[Tue Apr 14 00:11:26.204676 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:50258] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxw.php"] [unique_id "ad0VrjDO3t8R5NaxzYSu5gAAAVQ"]
[Tue Apr 14 00:11:28.259468 2026] [:error] [pid 63310:tid 63364] [client 20.215.210.138:18621] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "ad0VsHoXpRU5ztmwPjKFgQAAAFQ"]
[Tue Apr 14 00:11:29.887568 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:48989] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "ad0VsbHZEIkQ0Zmgp5pHtQAAAMQ"]
[Tue Apr 14 00:11:31.190551 2026] [proxy_fcgi:error] [pid 63309:tid 63323] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:31.455086 2026] [proxy_fcgi:error] [pid 63309:tid 63324] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:31.761146 2026] [proxy_fcgi:error] [pid 63309:tid 63332] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:32.304113 2026] [proxy_fcgi:error] [pid 63309:tid 63315] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:33.349390 2026] [proxy_fcgi:error] [pid 63309:tid 63336] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:33.616779 2026] [proxy_fcgi:error] [pid 63309:tid 63335] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:33.873071 2026] [proxy_fcgi:error] [pid 63309:tid 63316] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:34.141174 2026] [proxy_fcgi:error] [pid 63309:tid 63323] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:34.654493 2026] [proxy_fcgi:error] [pid 63309:tid 63328] [client 20.215.210.138:49644] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:11:34.907618 2026] [:error] [pid 63309:tid 63319] [client 20.215.210.138:49644] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "ad0VtkpIKZ10weXpf0VNpAAAAAY"]
[Tue Apr 14 00:11:37.213688 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:48452] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "ad0VuTDO3t8R5NaxzYSvHAAAAVA"]
[Tue Apr 14 00:11:39.216738 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:13651] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "ad0VuzDO3t8R5NaxzYSvKAAAAVQ"]
[Tue Apr 14 00:11:40.367889 2026] [:error] [pid 57183:tid 57188] [client 20.215.210.138:38034] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "ad0VvDDO3t8R5NaxzYSvMwAAAUM"]
[Tue Apr 14 00:11:41.161692 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:22217] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "ad0VvbHZEIkQ0Zmgp5pHwgAAAMw"]
[Tue Apr 14 00:11:42.053030 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:38021] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "ad0VvrHZEIkQ0Zmgp5pHxQAAANY"]
[Tue Apr 14 00:11:43.741131 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:55684] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "ad0Vv7HZEIkQ0Zmgp5pHzQAAAM8"]
[Tue Apr 14 00:11:44.747413 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:41180] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/drhunthq.php"] [unique_id "ad0VwDDO3t8R5NaxzYSvTAAAAU4"]
[Tue Apr 14 00:11:45.903076 2026] [:error] [pid 57183:tid 57200] [client 20.215.210.138:26844] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "ad0VwTDO3t8R5NaxzYSvVwAAAU8"]
[Tue Apr 14 00:11:48.008577 2026] [:error] [pid 57183:tid 57207] [client 20.215.210.138:41165] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "ad0VxDDO3t8R5NaxzYSvYAAAAVY"]
[Tue Apr 14 00:11:48.914072 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:38644] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "ad0VxG_r4W8fX2GWyGRxcwAAAYg"]
[Tue Apr 14 00:11:50.180771 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:26839] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/index.php"] [unique_id "ad0VxjDO3t8R5NaxzYSvawAAAVQ"]
[Tue Apr 14 00:11:51.879688 2026] [:error] [pid 9314:tid 9328] [client 20.215.210.138:38603] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0Vx2_r4W8fX2GWyGRxegAAAYw"]
[Tue Apr 14 00:11:54.079133 2026] [:error] [pid 63310:tid 63359] [client 20.215.210.138:3487] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0VynoXpRU5ztmwPjKFiAAAAE8"]
[Tue Apr 14 00:11:58.111656 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:46347] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0VzjDO3t8R5NaxzYSvdwAAAVE"]
[Tue Apr 14 00:12:00.390092 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:26816] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0V0LHZEIkQ0Zmgp5pH6AAAAMM"]
[Tue Apr 14 00:12:01.999631 2026] [:error] [pid 63311:tid 63392] [client 20.215.210.138:26878] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a4.php"] [unique_id "ad0V0aHjrGN1MqBCVFk7YAAAAJU"]
[Tue Apr 14 00:12:04.106463 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:28862] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a4.php"] [unique_id "ad0V1DDO3t8R5NaxzYSvfgAAAUY"]
[Tue Apr 14 00:12:05.326129 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:46349] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a4.php"] [unique_id "ad0V1bHZEIkQ0Zmgp5pH8QAAAMk"]
[Tue Apr 14 00:12:07.277140 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:48471] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a4.php"] [unique_id "ad0V17HZEIkQ0Zmgp5pH9QAAAMc"]
[Tue Apr 14 00:12:08.595410 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:47017] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad0V2LHZEIkQ0Zmgp5pIBwAAANI"]
[Tue Apr 14 00:12:09.861800 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:23463] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad0V2QEnn1dQrOSHHNXZegAAARE"]
[Tue Apr 14 00:12:11.035549 2026] [:error] [pid 7228:tid 7245] [client 20.215.210.138:38607] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad0V2wEnn1dQrOSHHNXZfgAAAQ8"]
[Tue Apr 14 00:12:12.168372 2026] [:error] [pid 57183:tid 57200] [client 20.215.210.138:23538] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad0V3DDO3t8R5NaxzYSviAAAAU8"]
[Tue Apr 14 00:12:13.282086 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:23491] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "ad0V3bHZEIkQ0Zmgp5pIKgAAANA"]
[Tue Apr 14 00:12:14.294512 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:23468] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "ad0V3jDO3t8R5NaxzYSviwAAAUQ"]
[Tue Apr 14 00:12:15.267760 2026] [:error] [pid 63310:tid 63351] [client 20.215.210.138:22208] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "ad0V33oXpRU5ztmwPjKFlwAAAEc"]
[Tue Apr 14 00:12:16.293768 2026] [:error] [pid 63311:tid 63394] [client 20.215.210.138:46989] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms.php"] [unique_id "ad0V4KHjrGN1MqBCVFk7ZAAAAJc"]
[Tue Apr 14 00:12:17.413733 2026] [:error] [pid 9314:tid 9329] [client 20.215.210.138:22245] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad0V4W_r4W8fX2GWyGRx9gAAAY0"]
[Tue Apr 14 00:12:18.643092 2026] [:error] [pid 7228:tid 7238] [client 20.215.210.138:23466] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad0V4gEnn1dQrOSHHNXZiAAAAQg"]
[Tue Apr 14 00:12:19.681646 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:46373] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad0V47HZEIkQ0Zmgp5pINwAAANg"]
[Tue Apr 14 00:12:21.422785 2026] [:error] [pid 63311:tid 63379] [client 20.215.210.138:29997] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad0V5aHjrGN1MqBCVFk7aAAAAIg"]
[Tue Apr 14 00:12:22.761856 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:23544] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0V5rHZEIkQ0Zmgp5pIQgAAANU"]
[Tue Apr 14 00:12:24.176749 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:46336] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0V6LHZEIkQ0Zmgp5pISgAAAM0"]
[Tue Apr 14 00:12:25.687487 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:3508] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0V6aHjrGN1MqBCVFk7dAAAAIw"]
[Tue Apr 14 00:12:26.849830 2026] [:error] [pid 7228:tid 7245] [client 20.215.210.138:46979] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tfm.php"] [unique_id "ad0V6gEnn1dQrOSHHNXZjwAAAQ8"]
[Tue Apr 14 00:12:28.645265 2026] [:error] [pid 63310:tid 63348] [client 20.215.210.138:20562] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8573.php"] [unique_id "ad0V7HoXpRU5ztmwPjKFmgAAAEQ"]
[Tue Apr 14 00:12:29.986908 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:23508] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8573.php"] [unique_id "ad0V7TDO3t8R5NaxzYSvpQAAAVE"]
[Tue Apr 14 00:12:31.880349 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:46341] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8573.php"] [unique_id "ad0V77HZEIkQ0Zmgp5pIXgAAAME"]
[Tue Apr 14 00:12:33.287411 2026] [:error] [pid 63311:tid 63375] [client 20.215.210.138:3994] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8573.php"] [unique_id "ad0V8aHjrGN1MqBCVFk7iAAAAIQ"]
[Tue Apr 14 00:12:35.137034 2026] [proxy_fcgi:error] [pid 63406:tid 63419] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:35.395589 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:35.917969 2026] [proxy_fcgi:error] [pid 63406:tid 63429] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:36.173971 2026] [proxy_fcgi:error] [pid 63406:tid 63433] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:36.431117 2026] [proxy_fcgi:error] [pid 63406:tid 63427] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:36.704730 2026] [proxy_fcgi:error] [pid 63406:tid 63413] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:36.968943 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:37.234840 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:37.865735 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:38.122321 2026] [proxy_fcgi:error] [pid 63406:tid 63420] [client 20.215.210.138:18592] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 00:12:38.403998 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:18592] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "ad0V9rHZEIkQ0Zmgp5pIdQAAAMw"]
[Tue Apr 14 00:12:40.421324 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:29995] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "ad0V-G_r4W8fX2GWyGRyHgAAAZI"]
[Tue Apr 14 00:12:42.091357 2026] [:error] [pid 63310:tid 63359] [client 20.215.210.138:30064] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "ad0V-noXpRU5ztmwPjKFngAAAE8"]
[Tue Apr 14 00:12:44.204167 2026] [:error] [pid 57183:tid 57209] [client 20.215.210.138:26028] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amax.php"] [unique_id "ad0V_DDO3t8R5NaxzYSvzQAAAVg"]
[Tue Apr 14 00:12:45.569725 2026] [:error] [pid 57183:tid 57204] [client 20.215.210.138:3990] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "ad0V_TDO3t8R5NaxzYSv0gAAAVM"]
[Tue Apr 14 00:12:47.470018 2026] [:error] [pid 57183:tid 57207] [client 20.215.210.138:18616] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "ad0V_zDO3t8R5NaxzYSv2AAAAVY"]
[Tue Apr 14 00:12:51.034582 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:18594] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "ad0WAwEnn1dQrOSHHNXZogAAARI"]
[Tue Apr 14 00:12:55.388327 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:16736] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "ad0WBzDO3t8R5NaxzYSv8QAAAU0"]
[Tue Apr 14 00:12:57.582441 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:26036] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "ad0WCTDO3t8R5NaxzYSv9gAAAUY"]
[Tue Apr 14 00:12:59.481487 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:28187] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "ad0WCwEnn1dQrOSHHNXZqgAAARA"]
[Tue Apr 14 00:13:01.856824 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:28162] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "ad0WDTDO3t8R5NaxzYSwBAAAAU4"]
[Tue Apr 14 00:13:04.204808 2026] [:error] [pid 57183:tid 57188] [client 20.215.210.138:30028] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/file.php"] [unique_id "ad0WEDDO3t8R5NaxzYSwFwAAAUM"]
[Tue Apr 14 00:13:06.417740 2026] [:error] [pid 57183:tid 57207] [client 20.215.210.138:19314] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "ad0WEjDO3t8R5NaxzYSwKwAAAVY"]
[Tue Apr 14 00:13:09.459405 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:16211] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "ad0WFbHZEIkQ0Zmgp5pIpQAAAM0"]
[Tue Apr 14 00:13:14.061316 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:3564] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "ad0WGrHZEIkQ0Zmgp5pIvQAAANI"]
[Tue Apr 14 00:13:18.027204 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:17471] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "ad0WHjDO3t8R5NaxzYSweQAAAUY"]
[Tue Apr 14 00:13:21.298941 2026] [:error] [pid 63310:tid 63354] [client 20.215.210.138:3116] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ad0WIXoXpRU5ztmwPjKFsQAAAEo"]
[Tue Apr 14 00:13:23.141689 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:16217] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ad0WI7HZEIkQ0Zmgp5pIzgAAAMI"]
[Tue Apr 14 00:13:24.580064 2026] [:error] [pid 63311:tid 63374] [client 20.215.210.138:16714] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ad0WJKHjrGN1MqBCVFk7uQAAAIM"]
[Tue Apr 14 00:13:25.811445 2026] [:error] [pid 63310:tid 63361] [client 20.215.210.138:39813] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws77.php"] [unique_id "ad0WJXoXpRU5ztmwPjKFuAAAAFE"]
[Tue Apr 14 09:10:25.756230 2026] [:error] [pid 35713:tid 35721] [client 216.73.216.216:52811] [client 216.73.216.216] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||quarryspec.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "quarryspec.com.au"] [uri "/robots.txt"] [unique_id "ad2UAa6-hhx6ZepqOSnbpwAAAMU"]
[Tue Apr 14 11:05:18.638081 2026] [:error] [pid 4902:tid 4921] [client 212.47.78.119:58832] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ad2u7ov8vJvl9lGy39hBngAAAZE"]
[Tue Apr 14 11:05:19.220061 2026] [:error] [pid 37048:tid 37066] [client 212.47.78.119:61996] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ad2u7552Bo1OyzeXo_y9OAAAARA"]
[Tue Apr 14 11:05:19.798853 2026] [:error] [pid 37226:tid 37245] [client 212.47.78.119:57300] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/media/system/js/core.js"] [unique_id "ad2u75OA5-IQ0IVmQCr6OAAAAVE"]
[Tue Apr 14 14:04:22.561820 2026] [:error] [pid 35629:tid 35677] [client 185.198.240.41:51065] [client 185.198.240.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.41, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ad3Y5jY8VahzC1YJBSj5oQAAAFI"]
[Tue Apr 14 14:04:22.571212 2026] [proxy_fcgi:error] [pid 35629:tid 35677] [client 185.198.240.41:51065] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 17:16:14.722508 2026] [:error] [pid 59985:tid 60002] [client 68.183.181.158:57550] [client 68.183.181.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.181.158, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ad4F3ugHaxkvLE6V1kkzSQAAAAk"]
[Tue Apr 14 17:16:14.731771 2026] [proxy_fcgi:error] [pid 59985:tid 60002] [client 68.183.181.158:57550] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:18.950433 2026] [proxy_fcgi:error] [pid 60074:tid 60078] [client 74.248.158.124:64433] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.075790 2026] [proxy_fcgi:error] [pid 60074:tid 60079] [client 74.248.158.124:65081] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.222271 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 74.248.158.124:64433] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.337525 2026] [proxy_fcgi:error] [pid 60074:tid 60096] [client 74.248.158.124:65081] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.480520 2026] [proxy_fcgi:error] [pid 60074:tid 60084] [client 74.248.158.124:64433] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.649380 2026] [proxy_fcgi:error] [pid 60074:tid 60093] [client 74.248.158.124:65081] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:19.767603 2026] [proxy_fcgi:error] [pid 60074:tid 60083] [client 74.248.158.124:64433] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:20.005583 2026] [proxy_fcgi:error] [pid 60074:tid 60080] [client 74.248.158.124:65081] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:20.026769 2026] [proxy_fcgi:error] [pid 60074:tid 60091] [client 74.248.158.124:64433] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:36:20.282952 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:64433] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YpOtqnEmNU9vpHClkuQAAAMU"]
[Tue Apr 14 18:36:20.362312 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:65081] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad4YpOtqnEmNU9vpHClkuwAAAMI"]
[Tue Apr 14 18:36:21.229631 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:64388] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YpZ6axKeW6bX4H7ctAQAAAFg"]
[Tue Apr 14 18:36:21.257866 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:64415] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad4YpVWpk-Tfi6_vLKr4cAAAAJg"]
[Tue Apr 14 18:36:22.234440 2026] [:error] [pid 59985:tid 60008] [client 74.248.158.124:64352] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad4YpugHaxkvLE6V1klDwAAAAA8"]
[Tue Apr 14 18:36:22.248739 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:65040] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YpoTVeJSXHDIlEDtR2QAAARI"]
[Tue Apr 14 18:36:23.032849 2026] [:error] [pid 59986:tid 60034] [client 74.248.158.124:65043] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad4Yp56axKeW6bX4H7ctBAAAAE4"]
[Tue Apr 14 18:36:23.298672 2026] [:error] [pid 59985:tid 60017] [client 74.248.158.124:64402] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4Yp-gHaxkvLE6V1klDwgAAABg"]
[Tue Apr 14 18:36:23.683952 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:64404] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4Yp1Wpk-Tfi6_vLKr4dAAAAJQ"]
[Tue Apr 14 18:36:24.069767 2026] [:error] [pid 59985:tid 60009] [client 74.248.158.124:65065] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YqOgHaxkvLE6V1klDxQAAABA"]
[Tue Apr 14 18:36:24.563992 2026] [:error] [pid 59985:tid 60015] [client 74.248.158.124:64440] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YqOgHaxkvLE6V1klDyQAAABY"]
[Tue Apr 14 18:36:24.642262 2026] [:error] [pid 59985:tid 59995] [client 74.248.158.124:65017] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YqOgHaxkvLE6V1klDygAAAAI"]
[Tue Apr 14 18:36:25.408047 2026] [:error] [pid 59987:tid 60056] [client 74.248.158.124:65051] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YqVWpk-Tfi6_vLKr4dgAAAIk"]
[Tue Apr 14 18:36:25.431833 2026] [:error] [pid 59985:tid 60007] [client 74.248.158.124:64418] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YqegHaxkvLE6V1klDzgAAAA4"]
[Tue Apr 14 18:36:26.034028 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:64397] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YqugHaxkvLE6V1klD0wAAAAQ"]
[Tue Apr 14 18:36:26.616355 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:65013] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "ad4YqutqnEmNU9vpHClk1wAAAMA"]
[Tue Apr 14 18:36:27.015325 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:65054] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4Yq-tqnEmNU9vpHClk2wAAANQ"]
[Tue Apr 14 18:36:28.130123 2026] [:error] [pid 59985:tid 60012] [client 74.248.158.124:63371] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YrOgHaxkvLE6V1klD3QAAABM"]
[Tue Apr 14 18:36:28.207474 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:64424] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YrITVeJSXHDIlEDtR5gAAARY"]
[Tue Apr 14 18:36:28.890428 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:64340] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YrOtqnEmNU9vpHClk5gAAAM8"]
[Tue Apr 14 18:36:29.264650 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:65002] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YrVWpk-Tfi6_vLKr4ewAAAIA"]
[Tue Apr 14 18:36:29.990822 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:65085] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YrVWpk-Tfi6_vLKr4fQAAAJU"]
[Tue Apr 14 18:36:30.226901 2026] [:error] [pid 22177:tid 22183] [client 74.248.158.124:64395] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4YroTVeJSXHDIlEDtR7wAAAQQ"]
[Tue Apr 14 18:36:30.767531 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:65080] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad4YrutqnEmNU9vpHClk8AAAANY"]
[Tue Apr 14 18:36:31.034980 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:64341] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "ad4Yr-tqnEmNU9vpHClk8wAAANI"]
[Tue Apr 14 18:36:31.495340 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:65005] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4Yr-tqnEmNU9vpHClk-gAAAM8"]
[Tue Apr 14 18:36:31.796614 2026] [:error] [pid 59987:tid 60051] [client 74.248.158.124:64354] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4Yr1Wpk-Tfi6_vLKr4gQAAAIQ"]
[Tue Apr 14 18:36:32.413893 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:64410] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4YsJ6axKeW6bX4H7ctCQAAAFg"]
[Tue Apr 14 18:36:32.705693 2026] [:error] [pid 22177:tid 22185] [client 74.248.158.124:65029] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YsITVeJSXHDIlEDtR9QAAAQY"]
[Tue Apr 14 18:36:33.159153 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:64377] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4YsYTVeJSXHDIlEDtR-AAAAQ4"]
[Tue Apr 14 18:36:33.873925 2026] [:error] [pid 22177:tid 22192] [client 74.248.158.124:64427] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YsYTVeJSXHDIlEDtR-wAAAQ0"]
[Tue Apr 14 18:36:34.207283 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:65049] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YslWpk-Tfi6_vLKr4hQAAAJM"]
[Tue Apr 14 18:36:34.766335 2026] [:error] [pid 22177:tid 22185] [client 74.248.158.124:64960] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "ad4YsoTVeJSXHDIlEDtSAAAAAQY"]
[Tue Apr 14 18:36:34.890748 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:65019] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YsoTVeJSXHDIlEDtSAQAAAQA"]
[Tue Apr 14 18:36:35.547405 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:64437] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4Ys-gHaxkvLE6V1klD6AAAAAU"]
[Tue Apr 14 18:36:35.737438 2026] [:error] [pid 59985:tid 60002] [client 74.248.158.124:65050] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad4Ys-gHaxkvLE6V1klD6QAAAAk"]
[Tue Apr 14 18:36:36.300391 2026] [:error] [pid 59985:tid 60005] [client 74.248.158.124:64961] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YtOgHaxkvLE6V1klD7QAAAAw"]
[Tue Apr 14 18:36:36.407048 2026] [:error] [pid 59985:tid 60017] [client 74.248.158.124:64982] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4YtOgHaxkvLE6V1klD7gAAABg"]
[Tue Apr 14 18:36:36.909919 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:63897] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YtITVeJSXHDIlEDtSBAAAAQs"]
[Tue Apr 14 18:36:37.423380 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:64368] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4YtetqnEmNU9vpHCllFAAAANI"]
[Tue Apr 14 18:36:37.650811 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:65022] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YtYTVeJSXHDIlEDtSBQAAARY"]
[Tue Apr 14 18:36:38.833499 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:65009] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4YtoTVeJSXHDIlEDtSBgAAAQc"]
[Tue Apr 14 18:36:38.874400 2026] [:error] [pid 59986:tid 60031] [client 74.248.158.124:63830] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4Ytp6axKeW6bX4H7ctEgAAAEs"]
[Tue Apr 14 18:36:39.432281 2026] [:error] [pid 59986:tid 60036] [client 74.248.158.124:65079] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "ad4Yt56axKeW6bX4H7ctEwAAAFA"]
[Tue Apr 14 18:36:40.122619 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:64391] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YuJ6axKeW6bX4H7ctFQAAAFc"]
[Tue Apr 14 18:36:40.778469 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:63881] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YuFWpk-Tfi6_vLKr4jgAAAJg"]
[Tue Apr 14 18:36:41.272137 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:64416] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YuVWpk-Tfi6_vLKr4kAAAAIM"]
[Tue Apr 14 18:36:41.808559 2026] [:error] [pid 22177:tid 22196] [client 74.248.158.124:63926] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4YuYTVeJSXHDIlEDtSDQAAARE"]
[Tue Apr 14 18:36:42.754001 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:64332] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YuoTVeJSXHDIlEDtSEAAAAQU"]
[Tue Apr 14 18:36:43.506472 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:64445] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "ad4Yu-tqnEmNU9vpHCllMQAAAMo"]
[Tue Apr 14 18:36:43.579580 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:64444] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4Yu-tqnEmNU9vpHCllMwAAANU"]
[Tue Apr 14 18:36:44.184672 2026] [:error] [pid 22177:tid 22195] [client 74.248.158.124:64411] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YvITVeJSXHDIlEDtSEgAAARA"]
[Tue Apr 14 18:36:44.455704 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:64406] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YvITVeJSXHDIlEDtSEwAAAQc"]
[Tue Apr 14 18:36:45.040984 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:64968] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YvYTVeJSXHDIlEDtSFwAAAQE"]
[Tue Apr 14 18:36:45.750335 2026] [:error] [pid 22177:tid 22196] [client 74.248.158.124:65012] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YvYTVeJSXHDIlEDtSHAAAARE"]
[Tue Apr 14 18:36:45.796030 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:65082] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YvYTVeJSXHDIlEDtSHQAAARQ"]
[Tue Apr 14 18:36:46.516496 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:64407] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YvutqnEmNU9vpHCllTgAAAMI"]
[Tue Apr 14 18:36:46.795931 2026] [:error] [pid 59987:tid 60061] [client 74.248.158.124:64977] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4YvlWpk-Tfi6_vLKr4lwAAAI4"]
[Tue Apr 14 18:36:47.233837 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:64323] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4Yv-tqnEmNU9vpHCllUwAAAMQ"]
[Tue Apr 14 18:36:47.956826 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:65042] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad4Yv-tqnEmNU9vpHCllWQAAAMk"]
[Tue Apr 14 18:36:48.009135 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:65000] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YwOtqnEmNU9vpHCllXAAAAMg"]
[Tue Apr 14 18:36:48.746753 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:63395] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YwOtqnEmNU9vpHCllbQAAAM8"]
[Tue Apr 14 18:36:49.472333 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:65052] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4YwetqnEmNU9vpHClldgAAAMs"]
[Tue Apr 14 18:36:50.805441 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:63893] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Ywp6axKeW6bX4H7ctGwAAAEI"]
[Tue Apr 14 18:36:52.426803 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:65072] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YxOtqnEmNU9vpHCllkQAAANg"]
[Tue Apr 14 18:36:54.029075 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:64370] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4YxoTVeJSXHDIlEDtSLAAAAQA"]
[Tue Apr 14 18:36:55.367268 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:63895] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Yx56axKeW6bX4H7ctIgAAAEQ"]
[Tue Apr 14 18:36:55.882349 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:64335] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4Yx-tqnEmNU9vpHCllqQAAAMk"]
[Tue Apr 14 18:36:56.368586 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64991] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4YyOtqnEmNU9vpHCllrQAAANg"]
[Tue Apr 14 18:36:56.999860 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:64408] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad4YyOtqnEmNU9vpHCllrgAAANQ"]
[Tue Apr 14 18:36:57.797497 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:64326] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4YyYTVeJSXHDIlEDtSMgAAAQM"]
[Tue Apr 14 18:36:58.302632 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:64970] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YyoTVeJSXHDIlEDtSNQAAAQI"]
[Tue Apr 14 18:36:58.474567 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:64972] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4YylWpk-Tfi6_vLKr4mwAAAJI"]
[Tue Apr 14 18:36:59.778275 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:64337] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4Yy56axKeW6bX4H7ctKAAAAFc"]
[Tue Apr 14 18:37:00.118586 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:65078] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YzOtqnEmNU9vpHClltQAAAMU"]
[Tue Apr 14 18:37:00.602724 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:65056] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4YzITVeJSXHDIlEDtSOwAAARU"]
[Tue Apr 14 18:37:01.451811 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:64401] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4YzYTVeJSXHDIlEDtSPgAAAQs"]
[Tue Apr 14 18:37:01.684050 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:64998] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4YzVWpk-Tfi6_vLKr4nAAAAJc"]
[Tue Apr 14 18:37:02.237260 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:63909] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4YzoTVeJSXHDIlEDtSRAAAARI"]
[Tue Apr 14 18:37:03.061463 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:64390] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "ad4Yz1Wpk-Tfi6_vLKr4oAAAAJY"]
[Tue Apr 14 18:37:03.288083 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:64963] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4Yz56axKeW6bX4H7ctLgAAAFI"]
[Tue Apr 14 18:37:04.020210 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:63369] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y0OgHaxkvLE6V1klEGgAAAAU"]
[Tue Apr 14 18:37:04.205172 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:63902] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Y0J6axKeW6bX4H7ctMgAAAEI"]
[Tue Apr 14 18:37:04.965324 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:64330] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y0ITVeJSXHDIlEDtSTQAAAQo"]
[Tue Apr 14 18:37:05.066328 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:64975] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Y0YTVeJSXHDIlEDtSTgAAARQ"]
[Tue Apr 14 18:37:06.020588 2026] [:error] [pid 59986:tid 60032] [client 74.248.158.124:64351] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y0p6axKeW6bX4H7ctPAAAAEw"]
[Tue Apr 14 18:37:06.908873 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:63900] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Y0lWpk-Tfi6_vLKr4ogAAAIg"]
[Tue Apr 14 18:37:07.236091 2026] [:error] [pid 59985:tid 59999] [client 74.248.158.124:64441] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y0-gHaxkvLE6V1klEIAAAAAY"]
[Tue Apr 14 18:37:07.845075 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:64362] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad4Y01Wpk-Tfi6_vLKr4pAAAAIw"]
[Tue Apr 14 18:37:08.027252 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:65015] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad4Y1FWpk-Tfi6_vLKr4pgAAAJE"]
[Tue Apr 14 18:37:08.874205 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:63875] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad4Y1FWpk-Tfi6_vLKr4qAAAAIM"]
[Tue Apr 14 18:37:09.835919 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:64327] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4Y1Z6axKeW6bX4H7ctSAAAAFg"]
[Tue Apr 14 18:37:09.853452 2026] [:error] [pid 59986:tid 60035] [client 74.248.158.124:64321] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad4Y1Z6axKeW6bX4H7ctSQAAAE8"]
[Tue Apr 14 18:37:10.737802 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:63880] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad4Y1p6axKeW6bX4H7ctTAAAAEY"]
[Tue Apr 14 18:37:11.426897 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:64348] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad4Y11Wpk-Tfi6_vLKr4rwAAAJQ"]
[Tue Apr 14 18:37:11.996023 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:64428] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4Y14TVeJSXHDIlEDtSVgAAAQE"]
[Tue Apr 14 18:37:12.091211 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:64996] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad4Y2OtqnEmNU9vpHClluwAAANM"]
[Tue Apr 14 18:37:13.366639 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:64392] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad4Y2VWpk-Tfi6_vLKr4tgAAAJE"]
[Tue Apr 14 18:37:13.491094 2026] [:error] [pid 22177:tid 22194] [client 74.248.158.124:64394] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4Y2YTVeJSXHDIlEDtSXAAAAQ8"]
[Tue Apr 14 18:37:14.146639 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:63401] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad4Y2p6axKeW6bX4H7ctVwAAAEI"]
[Tue Apr 14 18:37:14.619192 2026] [:error] [pid 59987:tid 60049] [client 74.248.158.124:64396] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad4Y2lWpk-Tfi6_vLKr4uQAAAII"]
[Tue Apr 14 18:37:15.126390 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:64382] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad4Y21Wpk-Tfi6_vLKr4ugAAAJM"]
[Tue Apr 14 18:37:15.321077 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:64429] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4Y24TVeJSXHDIlEDtSXgAAAQo"]
[Tue Apr 14 18:37:16.315306 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:64371] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad4Y3OtqnEmNU9vpHCllxgAAANE"]
[Tue Apr 14 18:37:16.861072 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:64378] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4Y3OtqnEmNU9vpHCllyAAAAMQ"]
[Tue Apr 14 18:37:17.553769 2026] [:error] [pid 59987:tid 60053] [client 74.248.158.124:63932] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4Y3VWpk-Tfi6_vLKr4vwAAAIY"]
[Tue Apr 14 18:37:17.779621 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:65064] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad4Y3YTVeJSXHDIlEDtSagAAARU"]
[Tue Apr 14 18:37:18.279538 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:64413] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad4Y3lWpk-Tfi6_vLKr4wAAAAJE"]
[Tue Apr 14 18:37:18.761590 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:64417] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad4Y3p6axKeW6bX4H7ctYgAAAEI"]
[Tue Apr 14 18:37:18.905747 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:64339] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y3oTVeJSXHDIlEDtScgAAARg"]
[Tue Apr 14 18:37:19.580339 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:63810] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad4Y34TVeJSXHDIlEDtSdAAAAQE"]
[Tue Apr 14 18:37:19.781067 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:63381] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad4Y31Wpk-Tfi6_vLKr4wwAAAIA"]
[Tue Apr 14 18:37:20.226217 2026] [proxy_fcgi:error] [pid 22177:tid 22181] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:20.495738 2026] [proxy_fcgi:error] [pid 22177:tid 22191] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:20.755130 2026] [proxy_fcgi:error] [pid 22177:tid 22186] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:21.028981 2026] [proxy_fcgi:error] [pid 22177:tid 22202] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:21.261332 2026] [proxy_fcgi:error] [pid 59986:tid 60038] [client 74.248.158.124:63858] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:21.556404 2026] [proxy_fcgi:error] [pid 22177:tid 22179] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:21.566603 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 74.248.158.124:63858] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:21.815032 2026] [proxy_fcgi:error] [pid 22177:tid 22182] [client 74.248.158.124:63885] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:37:22.072206 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:63885] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny"] [unique_id "ad4Y4oTVeJSXHDIlEDtSgAAAARg"]
[Tue Apr 14 18:37:22.085195 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:63858] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ad4Y4p6axKeW6bX4H7ctaQAAAFg"]
[Tue Apr 14 18:37:22.840571 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:64360] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y4p6axKeW6bX4H7ctagAAAEQ"]
[Tue Apr 14 18:37:23.177877 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:63423] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny"] [unique_id "ad4Y44TVeJSXHDIlEDtShAAAARU"]
[Tue Apr 14 18:37:24.091122 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:64425] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny"] [unique_id "ad4Y5ITVeJSXHDIlEDtSiQAAAQU"]
[Tue Apr 14 18:37:24.210230 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:64432] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y5ITVeJSXHDIlEDtSigAAAQs"]
[Tue Apr 14 18:37:24.788458 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:63809] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny"] [unique_id "ad4Y5ITVeJSXHDIlEDtSjQAAARU"]
[Tue Apr 14 18:37:25.059340 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:63876] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y5YTVeJSXHDIlEDtSjwAAAQw"]
[Tue Apr 14 18:37:25.484880 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:63811] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ad4Y5etqnEmNU9vpHCll2wAAAMg"]
[Tue Apr 14 18:37:26.058631 2026] [:error] [pid 59987:tid 60053] [client 74.248.158.124:65020] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y5lWpk-Tfi6_vLKr40QAAAIY"]
[Tue Apr 14 18:37:26.438317 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:65075] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y5lWpk-Tfi6_vLKr40wAAAJc"]
[Tue Apr 14 18:37:27.172139 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:64989] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y51Wpk-Tfi6_vLKr41gAAAIc"]
[Tue Apr 14 18:37:27.191401 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:63915] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y51Wpk-Tfi6_vLKr41wAAAIw"]
[Tue Apr 14 18:37:27.906672 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:64365] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y54TVeJSXHDIlEDtSlQAAARg"]
[Tue Apr 14 18:37:27.968348 2026] [:error] [pid 59985:tid 60000] [client 74.248.158.124:64389] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y5-gHaxkvLE6V1klEUQAAAAc"]
[Tue Apr 14 18:37:28.546768 2026] [:error] [pid 59985:tid 60016] [client 74.248.158.124:64993] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ad4Y6OgHaxkvLE6V1klEUgAAABc"]
[Tue Apr 14 18:37:28.855144 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:65055] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y6FWpk-Tfi6_vLKr43AAAAIA"]
[Tue Apr 14 18:37:29.172123 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:64350] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y6etqnEmNU9vpHCll7QAAANE"]
[Tue Apr 14 18:37:30.211695 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:65044] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y6oTVeJSXHDIlEDtSmQAAAQc"]
[Tue Apr 14 18:37:30.252829 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:65011] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y6oTVeJSXHDIlEDtSmgAAAQI"]
[Tue Apr 14 18:37:31.153798 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:63298] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y61Wpk-Tfi6_vLKr44AAAAIU"]
[Tue Apr 14 18:37:31.452063 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:65077] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y6-tqnEmNU9vpHCll9wAAAMg"]
[Tue Apr 14 18:37:32.099655 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:64983] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "ad4Y7ITVeJSXHDIlEDtSnwAAARI"]
[Tue Apr 14 18:37:32.985585 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63388] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y7OtqnEmNU9vpHCll_gAAANA"]
[Tue Apr 14 18:37:33.919059 2026] [:error] [pid 59986:tid 60028] [client 74.248.158.124:64439] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y7Z6axKeW6bX4H7ctdgAAAEg"]
[Tue Apr 14 18:37:34.366015 2026] [:error] [pid 59986:tid 60031] [client 74.248.158.124:63402] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y7p6axKeW6bX4H7cteQAAAEs"]
[Tue Apr 14 18:37:35.487089 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:63302] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y7-tqnEmNU9vpHClmEAAAAMI"]
[Tue Apr 14 18:37:35.487210 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:63417] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y7-tqnEmNU9vpHClmEQAAANU"]
[Tue Apr 14 18:37:36.185496 2026] [:error] [pid 59985:tid 60012] [client 74.248.158.124:63886] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y8OgHaxkvLE6V1klEXAAAABM"]
[Tue Apr 14 18:37:36.301632 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63417] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad4Y8OtqnEmNU9vpHClmFwAAANE"]
[Tue Apr 14 18:37:36.909054 2026] [:error] [pid 59985:tid 60005] [client 74.248.158.124:64353] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8OgHaxkvLE6V1klEXwAAAAw"]
[Tue Apr 14 18:37:37.345971 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:63421] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8etqnEmNU9vpHClmHQAAAM0"]
[Tue Apr 14 18:37:37.476146 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:64974] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8etqnEmNU9vpHClmHgAAANM"]
[Tue Apr 14 18:37:38.024763 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64992] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8utqnEmNU9vpHClmIQAAAMg"]
[Tue Apr 14 18:37:38.087611 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:63899] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8oTVeJSXHDIlEDtSpQAAAQc"]
[Tue Apr 14 18:37:38.787864 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:63318] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8lWpk-Tfi6_vLKr46QAAAIg"]
[Tue Apr 14 18:37:38.838858 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:63901] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8lWpk-Tfi6_vLKr46gAAAJY"]
[Tue Apr 14 18:37:39.517862 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:65008] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad4Y8-tqnEmNU9vpHClmJwAAAMc"]
[Tue Apr 14 18:37:39.614538 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:64423] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y8-gHaxkvLE6V1klEZgAAAAU"]
[Tue Apr 14 18:37:40.240085 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:64334] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9OtqnEmNU9vpHClmLAAAANQ"]
[Tue Apr 14 18:37:40.528763 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:63305] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9FWpk-Tfi6_vLKr48AAAAJM"]
[Tue Apr 14 18:37:40.917281 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:63815] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9OtqnEmNU9vpHClmMgAAANM"]
[Tue Apr 14 18:37:41.425993 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:64436] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9etqnEmNU9vpHClmNgAAAMw"]
[Tue Apr 14 18:37:41.551363 2026] [:error] [pid 22177:tid 22194] [client 74.248.158.124:63873] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9YTVeJSXHDIlEDtSpgAAAQ8"]
[Tue Apr 14 18:37:42.379098 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:63398] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9utqnEmNU9vpHClmPAAAAMc"]
[Tue Apr 14 18:37:42.668428 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:63897] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "ad4Y9utqnEmNU9vpHClmQAAAAMM"]
[Tue Apr 14 18:37:43.057439 2026] [:error] [pid 59985:tid 60009] [client 74.248.158.124:65007] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y9-gHaxkvLE6V1klEagAAABA"]
[Tue Apr 14 18:37:43.330297 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:64383] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y956axKeW6bX4H7ctlQAAAEA"]
[Tue Apr 14 18:37:43.808643 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:64372] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y9-tqnEmNU9vpHClmSAAAANM"]
[Tue Apr 14 18:37:44.248807 2026] [:error] [pid 59985:tid 60015] [client 74.248.158.124:64387] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y-OgHaxkvLE6V1klEcwAAABY"]
[Tue Apr 14 18:37:44.536840 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:65004] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y-OtqnEmNU9vpHClmSwAAAMg"]
[Tue Apr 14 18:37:45.074208 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:63891] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y-etqnEmNU9vpHClmTwAAAMk"]
[Tue Apr 14 18:37:45.185738 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:65026] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y-etqnEmNU9vpHClmUQAAAMs"]
[Tue Apr 14 18:37:45.737364 2026] [:error] [pid 59985:tid 60002] [client 74.248.158.124:61410] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "ad4Y-egHaxkvLE6V1klEewAAAAk"]
[Tue Apr 14 18:37:45.982012 2026] [:error] [pid 59985:tid 60012] [client 74.248.158.124:63338] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y-egHaxkvLE6V1klEfAAAABM"]
[Tue Apr 14 18:37:46.409640 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:64361] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y-utqnEmNU9vpHClmVwAAANU"]
[Tue Apr 14 18:37:46.939526 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:64369] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y-utqnEmNU9vpHClmWgAAAMo"]
[Tue Apr 14 18:37:46.953273 2026] [:error] [pid 59985:tid 60001] [client 74.248.158.124:63907] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y-ugHaxkvLE6V1klEfQAAAAg"]
[Tue Apr 14 18:37:47.610653 2026] [:error] [pid 59985:tid 60011] [client 74.248.158.124:63312] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y--gHaxkvLE6V1klEfwAAABI"]
[Tue Apr 14 18:37:48.406887 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:64442] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y_FWpk-Tfi6_vLKr49wAAAJI"]
[Tue Apr 14 18:37:48.420756 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:63872] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y_FWpk-Tfi6_vLKr4-AAAAJc"]
[Tue Apr 14 18:37:49.115473 2026] [:error] [pid 60074:tid 60077] [client 74.248.158.124:61409] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_etqnEmNU9vpHClmZwAAAME"]
[Tue Apr 14 18:37:49.516346 2026] [:error] [pid 59986:tid 60034] [client 74.248.158.124:64373] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "ad4Y_Z6axKeW6bX4H7ctmgAAAE4"]
[Tue Apr 14 18:37:49.838177 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:65062] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_etqnEmNU9vpHClmawAAAMM"]
[Tue Apr 14 18:37:50.768113 2026] [:error] [pid 59986:tid 60032] [client 74.248.158.124:65053] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_p6axKeW6bX4H7ctnwAAAEw"]
[Tue Apr 14 18:37:50.819315 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:65048] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_p6axKeW6bX4H7ctoAAAAFg"]
[Tue Apr 14 18:37:51.667117 2026] [:error] [pid 59987:tid 60053] [client 74.248.158.124:64431] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_1Wpk-Tfi6_vLKr5AAAAAIY"]
[Tue Apr 14 18:37:51.804745 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:65018] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4Y_56axKeW6bX4H7ctqAAAAEY"]
[Tue Apr 14 18:37:52.525334 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:64345] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4ZAFWpk-Tfi6_vLKr5AQAAAIU"]
[Tue Apr 14 18:37:53.023141 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:64443] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZAetqnEmNU9vpHClmcAAAAMA"]
[Tue Apr 14 18:37:53.368825 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:63879] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad4ZAYTVeJSXHDIlEDtSpwAAAQk"]
[Tue Apr 14 18:37:54.080173 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:63889] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZAoTVeJSXHDIlEDtSqAAAAQo"]
[Tue Apr 14 18:37:54.210658 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:64378] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZAoTVeJSXHDIlEDtSqgAAAQA"]
[Tue Apr 14 18:37:54.858538 2026] [:error] [pid 59987:tid 60056] [client 74.248.158.124:64338] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZAlWpk-Tfi6_vLKr5BAAAAIk"]
[Tue Apr 14 18:37:55.533092 2026] [:error] [pid 60074:tid 60082] [client 74.248.158.124:64393] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZA-tqnEmNU9vpHClmfgAAAMY"]
[Tue Apr 14 18:37:55.539883 2026] [:error] [pid 59986:tid 60031] [client 74.248.158.124:64414] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZA56axKeW6bX4H7ctugAAAEs"]
[Tue Apr 14 18:37:56.264383 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:63419] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZBOtqnEmNU9vpHClmgQAAANM"]
[Tue Apr 14 18:37:56.474087 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:65038] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad4ZBOgHaxkvLE6V1klEiQAAAAU"]
[Tue Apr 14 18:37:57.088160 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:63832] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZBVWpk-Tfi6_vLKr5BgAAAJE"]
[Tue Apr 14 18:37:57.171806 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:63922] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZBVWpk-Tfi6_vLKr5BwAAAIc"]
[Tue Apr 14 18:37:58.169498 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:62989] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZButqnEmNU9vpHClmiwAAAM8"]
[Tue Apr 14 18:37:58.503768 2026] [:error] [pid 60074:tid 60077] [client 74.248.158.124:63374] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZButqnEmNU9vpHClmjgAAAME"]
[Tue Apr 14 18:37:58.920698 2026] [:error] [pid 59987:tid 60060] [client 74.248.158.124:63352] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZBlWpk-Tfi6_vLKr5CQAAAI0"]
[Tue Apr 14 18:37:59.281336 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:64999] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZB1Wpk-Tfi6_vLKr5DAAAAJA"]
[Tue Apr 14 18:37:59.958052 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:63906] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZB1Wpk-Tfi6_vLKr5DgAAAJY"]
[Tue Apr 14 18:37:59.961845 2026] [:error] [pid 59985:tid 59996] [client 74.248.158.124:64400] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad4ZB-gHaxkvLE6V1klElAAAAAM"]
[Tue Apr 14 18:38:00.625574 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:63870] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCITVeJSXHDIlEDtSsQAAARg"]
[Tue Apr 14 18:38:00.693945 2026] [:error] [pid 22177:tid 22185] [client 74.248.158.124:64358] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCITVeJSXHDIlEDtSsgAAAQY"]
[Tue Apr 14 18:38:01.142875 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:65032] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCVWpk-Tfi6_vLKr5FAAAAIw"]
[Tue Apr 14 18:38:01.877015 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:64409] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCYTVeJSXHDIlEDtStQAAARM"]
[Tue Apr 14 18:38:01.937593 2026] [:error] [pid 59986:tid 60039] [client 74.248.158.124:63362] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCZ6axKeW6bX4H7ctwAAAAFM"]
[Tue Apr 14 18:38:02.538509 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64364] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCutqnEmNU9vpHClmmAAAANg"]
[Tue Apr 14 18:38:02.797470 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63903] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZCutqnEmNU9vpHClmmgAAANA"]
[Tue Apr 14 18:38:03.098405 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:64357] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZC-tqnEmNU9vpHClmngAAAMw"]
[Tue Apr 14 18:38:03.755012 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:64359] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZC-tqnEmNU9vpHClmoAAAAMQ"]
[Tue Apr 14 18:38:04.463469 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:64994] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZDOtqnEmNU9vpHClmpwAAANY"]
[Tue Apr 14 18:38:04.482065 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64335] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad4ZDOtqnEmNU9vpHClmqAAAANg"]
[Tue Apr 14 18:38:05.223107 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:64356] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZDetqnEmNU9vpHClmrQAAANM"]
[Tue Apr 14 18:38:05.243818 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:63330] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZDVWpk-Tfi6_vLKr5GQAAAJM"]
[Tue Apr 14 18:38:05.841750 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:63817] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZDetqnEmNU9vpHClmsAAAAMI"]
[Tue Apr 14 18:38:06.005474 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:65076] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZDutqnEmNU9vpHClmsgAAAMg"]
[Tue Apr 14 18:38:06.719035 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:63397] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZDlWpk-Tfi6_vLKr5HQAAAIU"]
[Tue Apr 14 18:38:06.743905 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:61431] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZDutqnEmNU9vpHClmtAAAANg"]
[Tue Apr 14 18:38:07.279447 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:61416] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZD1Wpk-Tfi6_vLKr5IQAAAIw"]
[Tue Apr 14 18:38:07.442878 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63868] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad4ZD-tqnEmNU9vpHClmtwAAANA"]
[Tue Apr 14 18:38:08.318466 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:63898] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZEITVeJSXHDIlEDtSuwAAARY"]
[Tue Apr 14 18:38:08.619673 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:64399] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZEOtqnEmNU9vpHClmvAAAAMU"]
[Tue Apr 14 18:38:09.124689 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64325] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZEetqnEmNU9vpHClmvwAAAMg"]
[Tue Apr 14 18:38:09.426997 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:64984] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZEetqnEmNU9vpHClmwgAAANY"]
[Tue Apr 14 18:38:09.902680 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:64978] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZEetqnEmNU9vpHClmxgAAANA"]
[Tue Apr 14 18:38:10.589874 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:63905] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZEutqnEmNU9vpHClmzQAAAMA"]
[Tue Apr 14 18:38:10.618839 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:64346] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZEutqnEmNU9vpHClmzgAAANY"]
[Tue Apr 14 18:38:11.323576 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63890] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZE-tqnEmNU9vpHClm0gAAANE"]
[Tue Apr 14 18:38:11.598030 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:61428] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad4ZE4TVeJSXHDIlEDtSvgAAARU"]
[Tue Apr 14 18:38:12.117502 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:64324] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZFITVeJSXHDIlEDtSwQAAARg"]
[Tue Apr 14 18:38:12.565609 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:63834] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZFOtqnEmNU9vpHClm1AAAAMI"]
[Tue Apr 14 18:38:12.791174 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64379] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZFOtqnEmNU9vpHClm1gAAAMg"]
[Tue Apr 14 18:38:13.466185 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:63825] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZFetqnEmNU9vpHClm2QAAANY"]
[Tue Apr 14 18:38:13.611965 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:63407] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZFYTVeJSXHDIlEDtSxgAAAQc"]
[Tue Apr 14 18:38:14.436980 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63300] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZFutqnEmNU9vpHClm3QAAANg"]
[Tue Apr 14 18:38:14.445448 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:63418] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZFutqnEmNU9vpHClm3gAAAMw"]
[Tue Apr 14 18:38:15.110020 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:63847] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZF56axKeW6bX4H7ct0gAAAEE"]
[Tue Apr 14 18:38:15.377030 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:64447] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad4ZF-tqnEmNU9vpHClm5wAAAM4"]
[Tue Apr 14 18:38:16.060790 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:63826] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZGOgHaxkvLE6V1klErAAAAAQ"]
[Tue Apr 14 18:38:16.729504 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:65069] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZGOtqnEmNU9vpHClm7wAAANM"]
[Tue Apr 14 18:38:16.889512 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:63319] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZGITVeJSXHDIlEDtSzAAAAQM"]
[Tue Apr 14 18:38:17.443942 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:61429] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZGetqnEmNU9vpHClm9AAAAMk"]
[Tue Apr 14 18:38:17.626221 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63299] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZGetqnEmNU9vpHClm9QAAANg"]
[Tue Apr 14 18:38:17.997051 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:65086] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ad4ZGetqnEmNU9vpHClm-AAAAMM"]
[Tue Apr 14 18:38:18.220884 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:65027] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZGoTVeJSXHDIlEDtS0QAAAQ4"]
[Tue Apr 14 18:38:18.551005 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:63306] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ad4ZGutqnEmNU9vpHClm_gAAAM4"]
[Tue Apr 14 18:38:18.837269 2026] [:error] [pid 22177:tid 22196] [client 74.248.158.124:63919] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad4ZGoTVeJSXHDIlEDtS1gAAARE"]
[Tue Apr 14 18:38:19.411013 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:63935] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZG4TVeJSXHDIlEDtS3QAAAQA"]
[Tue Apr 14 18:38:20.113484 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:64398] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZHOtqnEmNU9vpHClnAwAAAMA"]
[Tue Apr 14 18:38:20.387232 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:63812] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ad4ZHOtqnEmNU9vpHClnBAAAAMQ"]
[Tue Apr 14 18:38:20.921510 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63342] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ad4ZHOtqnEmNU9vpHClnCAAAANE"]
[Tue Apr 14 18:38:20.932304 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:65035] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ad4ZHITVeJSXHDIlEDtS7AAAAQM"]
[Tue Apr 14 18:38:21.570486 2026] [proxy_fcgi:error] [pid 60074:tid 60083] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:21.578030 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 74.248.158.124:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:21.830106 2026] [proxy_fcgi:error] [pid 60074:tid 60096] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:21.838615 2026] [proxy_fcgi:error] [pid 60074:tid 60098] [client 74.248.158.124:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.088595 2026] [proxy_fcgi:error] [pid 60074:tid 60077] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.151874 2026] [proxy_fcgi:error] [pid 60074:tid 60076] [client 74.248.158.124:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.347426 2026] [proxy_fcgi:error] [pid 60074:tid 60099] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.417483 2026] [proxy_fcgi:error] [pid 60074:tid 60100] [client 74.248.158.124:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.606327 2026] [proxy_fcgi:error] [pid 60074:tid 60092] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.684882 2026] [proxy_fcgi:error] [pid 60074:tid 60097] [client 74.248.158.124:64971] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.866836 2026] [proxy_fcgi:error] [pid 60074:tid 60078] [client 74.248.158.124:61380] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:38:22.948913 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64971] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZHutqnEmNU9vpHClnGQAAAMg"]
[Tue Apr 14 18:38:23.122448 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:61380] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad4ZH-tqnEmNU9vpHClnHAAAAMc"]
[Tue Apr 14 18:38:23.943884 2026] [:error] [pid 60074:tid 60077] [client 74.248.158.124:63324] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZH-tqnEmNU9vpHClnHgAAAME"]
[Tue Apr 14 18:38:24.294827 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:63910] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad4ZIOtqnEmNU9vpHClnIgAAAMs"]
[Tue Apr 14 18:38:24.798896 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:63867] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZIOtqnEmNU9vpHClnJQAAAM4"]
[Tue Apr 14 18:38:25.785322 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:63307] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZIetqnEmNU9vpHClnLgAAAM0"]
[Tue Apr 14 18:38:25.880513 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:64419] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad4ZIVWpk-Tfi6_vLKr5MgAAAIM"]
[Tue Apr 14 18:38:27.098025 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:63844] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZI-tqnEmNU9vpHClnMQAAANI"]
[Tue Apr 14 18:38:27.251457 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:64987] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad4ZI4TVeJSXHDIlEDtS-gAAARg"]
[Tue Apr 14 18:38:28.098450 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:65073] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZJOtqnEmNU9vpHClnMwAAANM"]
[Tue Apr 14 18:38:29.011064 2026] [:error] [pid 59987:tid 60049] [client 74.248.158.124:63376] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZJVWpk-Tfi6_vLKr5OwAAAII"]
[Tue Apr 14 18:38:29.436060 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:65071] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZJVWpk-Tfi6_vLKr5QQAAAIo"]
[Tue Apr 14 18:38:30.537534 2026] [:error] [pid 59985:tid 60006] [client 74.248.158.124:63399] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZJugHaxkvLE6V1klEuQAAAA0"]
[Tue Apr 14 18:38:30.803317 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:65041] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZJlWpk-Tfi6_vLKr5QwAAAJU"]
[Tue Apr 14 18:38:31.645580 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:64374] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZJ4TVeJSXHDIlEDtTBgAAAQw"]
[Tue Apr 14 18:38:31.818440 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:63931] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZJ1Wpk-Tfi6_vLKr5RgAAAJM"]
[Tue Apr 14 18:38:32.411081 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:65047] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad4ZKFWpk-Tfi6_vLKr5SAAAAIA"]
[Tue Apr 14 18:38:32.530445 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:63328] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZKOtqnEmNU9vpHClnPwAAAMM"]
[Tue Apr 14 18:38:33.303467 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:63343] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZKZ6axKeW6bX4H7ct5gAAAEI"]
[Tue Apr 14 18:38:33.456625 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:64363] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZKVWpk-Tfi6_vLKr5TQAAAJE"]
[Tue Apr 14 18:38:33.988266 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:63853] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZKetqnEmNU9vpHClnRAAAANU"]
[Tue Apr 14 18:38:34.197672 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:63313] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZKutqnEmNU9vpHClnRQAAAMU"]
[Tue Apr 14 18:38:34.578195 2026] [:error] [pid 59985:tid 60008] [client 74.248.158.124:63311] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZKugHaxkvLE6V1klEvwAAAA8"]
[Tue Apr 14 18:38:35.376154 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63385] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZK-tqnEmNU9vpHClnSgAAANE"]
[Tue Apr 14 18:38:35.604520 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:65010] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZK-tqnEmNU9vpHClnSwAAANM"]
[Tue Apr 14 18:38:36.028416 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:64376] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZLOtqnEmNU9vpHClnUQAAAM0"]
[Tue Apr 14 18:38:36.529432 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:63403] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad4ZLFWpk-Tfi6_vLKr5VgAAAJA"]
[Tue Apr 14 18:38:36.658735 2026] [:error] [pid 59985:tid 60011] [client 74.248.158.124:64973] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZLOgHaxkvLE6V1klEwgAAABI"]
[Tue Apr 14 18:38:37.094932 2026] [:error] [pid 59986:tid 60037] [client 74.248.158.124:64343] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZLZ6axKeW6bX4H7ct6gAAAFE"]
[Tue Apr 14 18:38:37.794598 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63836] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZLetqnEmNU9vpHClnWwAAANg"]
[Tue Apr 14 18:38:37.798048 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:63415] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZLetqnEmNU9vpHClnXAAAANQ"]
[Tue Apr 14 18:38:38.520582 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:64344] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZLlWpk-Tfi6_vLKr5XgAAAJU"]
[Tue Apr 14 18:38:38.580938 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:63813] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZLlWpk-Tfi6_vLKr5XwAAAIU"]
[Tue Apr 14 18:38:39.230941 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:65046] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad4ZL-tqnEmNU9vpHClnaQAAANE"]
[Tue Apr 14 18:38:39.387832 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:65025] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZL4TVeJSXHDIlEDtTEgAAARY"]
[Tue Apr 14 18:38:39.980518 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:61413] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZL-tqnEmNU9vpHClncAAAAMI"]
[Tue Apr 14 18:38:40.861106 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:63874] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZMOtqnEmNU9vpHClndQAAAMw"]
[Tue Apr 14 18:38:40.905685 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:61377] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZMOtqnEmNU9vpHClndwAAAM8"]
[Tue Apr 14 18:38:41.756804 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:64380] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZMetqnEmNU9vpHClnewAAAMI"]
[Tue Apr 14 18:38:42.242961 2026] [:error] [pid 59985:tid 60006] [client 74.248.158.124:63896] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZMugHaxkvLE6V1klEzAAAAA0"]
[Tue Apr 14 18:38:42.527718 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:61439] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "ad4ZMutqnEmNU9vpHClngQAAANE"]
[Tue Apr 14 18:38:43.278309 2026] [:error] [pid 59987:tid 60048] [client 74.248.158.124:63882] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZM1Wpk-Tfi6_vLKr5cAAAAIE"]
[Tue Apr 14 18:38:43.311158 2026] [:error] [pid 59987:tid 60060] [client 74.248.158.124:60516] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZM1Wpk-Tfi6_vLKr5cQAAAI0"]
[Tue Apr 14 18:38:44.023642 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63877] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZNOtqnEmNU9vpHClnhQAAANg"]
[Tue Apr 14 18:38:44.669611 2026] [:error] [pid 59985:tid 59995] [client 74.248.158.124:63840] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZNOgHaxkvLE6V1klE0QAAAAI"]
[Tue Apr 14 18:38:45.168458 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:63366] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZNetqnEmNU9vpHClniAAAANI"]
[Tue Apr 14 18:38:45.405953 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64367] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZNetqnEmNU9vpHClnigAAAMg"]
[Tue Apr 14 18:38:45.997590 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:65037] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZNetqnEmNU9vpHClnjgAAAMM"]
[Tue Apr 14 18:38:46.124161 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:64405] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "ad4ZNutqnEmNU9vpHClnkQAAAMI"]
[Tue Apr 14 18:38:46.852516 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:63887] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZNutqnEmNU9vpHClnlQAAAM4"]
[Tue Apr 14 18:38:46.873390 2026] [:error] [pid 22177:tid 22192] [client 74.248.158.124:63837] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZNoTVeJSXHDIlEDtTGQAAAQ0"]
[Tue Apr 14 18:38:47.506714 2026] [:error] [pid 59985:tid 60002] [client 74.248.158.124:60504] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZN-gHaxkvLE6V1klE2gAAAAk"]
[Tue Apr 14 18:38:47.861662 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:63323] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZN1Wpk-Tfi6_vLKr5dAAAAIA"]
[Tue Apr 14 18:38:48.214844 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:63894] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZOOgHaxkvLE6V1klE3wAAAAQ"]
[Tue Apr 14 18:38:48.629512 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:63850] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZOITVeJSXHDIlEDtTGwAAAQU"]
[Tue Apr 14 18:38:48.753443 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:63334] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ad4ZOFWpk-Tfi6_vLKr5dQAAAJI"]
[Tue Apr 14 18:38:49.439814 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:63808] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZOetqnEmNU9vpHClnmQAAAMw"]
[Tue Apr 14 18:38:49.529686 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:63863] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZOVWpk-Tfi6_vLKr5dwAAAIc"]
[Tue Apr 14 18:38:50.128606 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:65036] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZOlWpk-Tfi6_vLKr5egAAAIM"]
[Tue Apr 14 18:38:50.140324 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:64355] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZOutqnEmNU9vpHClnmwAAAMA"]
[Tue Apr 14 18:38:50.746595 2026] [:error] [pid 60074:tid 60082] [client 74.248.158.124:63851] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZOutqnEmNU9vpHClnoQAAAMY"]
[Tue Apr 14 18:38:50.890292 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:64979] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZOoTVeJSXHDIlEDtTJQAAARI"]
[Tue Apr 14 18:38:51.431430 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63386] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZO-tqnEmNU9vpHClnpQAAANA"]
[Tue Apr 14 18:38:51.573644 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:63394] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "ad4ZO-tqnEmNU9vpHClnpgAAAM8"]
[Tue Apr 14 18:38:52.131105 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:63861] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZPOtqnEmNU9vpHClnqgAAAMw"]
[Tue Apr 14 18:38:52.185668 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:61403] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZPOtqnEmNU9vpHClnqwAAAMs"]
[Tue Apr 14 18:38:52.832002 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:62698] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZPOtqnEmNU9vpHClnsgAAAMc"]
[Tue Apr 14 18:38:53.126665 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:63408] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZPetqnEmNU9vpHClntAAAAMQ"]
[Tue Apr 14 18:38:53.415676 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:64967] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZPetqnEmNU9vpHClntQAAANE"]
[Tue Apr 14 18:38:53.798519 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:61376] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZPVWpk-Tfi6_vLKr5gQAAAJQ"]
[Tue Apr 14 18:38:54.119517 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:64385] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZPoTVeJSXHDIlEDtTKQAAAQ4"]
[Tue Apr 14 18:38:54.737032 2026] [:error] [pid 22177:tid 22196] [client 74.248.158.124:63309] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "ad4ZPoTVeJSXHDIlEDtTKgAAARE"]
[Tue Apr 14 18:38:54.955109 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:64988] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZPutqnEmNU9vpHClnvgAAANU"]
[Tue Apr 14 18:38:55.299134 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:63822] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZP4TVeJSXHDIlEDtTLgAAAQw"]
[Tue Apr 14 18:38:55.691048 2026] [:error] [pid 59986:tid 60028] [client 74.248.158.124:63420] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZP56axKeW6bX4H7cuBgAAAEg"]
[Tue Apr 14 18:38:55.909201 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:63833] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZP-tqnEmNU9vpHClnwQAAAMA"]
[Tue Apr 14 18:38:56.388810 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63912] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQOtqnEmNU9vpHClnwwAAANE"]
[Tue Apr 14 18:38:56.528633 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:64965] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZQOtqnEmNU9vpHClnxAAAAM0"]
[Tue Apr 14 18:38:56.945825 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:63026] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQOtqnEmNU9vpHClnyQAAAMM"]
[Tue Apr 14 18:38:57.079087 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:65003] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "ad4ZQetqnEmNU9vpHClnywAAAMI"]
[Tue Apr 14 18:38:57.627414 2026] [:error] [pid 59986:tid 60041] [client 74.248.158.124:63356] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZQZ6axKeW6bX4H7cuCAAAAFU"]
[Tue Apr 14 18:38:57.670362 2026] [:error] [pid 59986:tid 60039] [client 74.248.158.124:63821] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQZ6axKeW6bX4H7cuCQAAAFM"]
[Tue Apr 14 18:38:58.198092 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:63884] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZQutqnEmNU9vpHCln1gAAAMs"]
[Tue Apr 14 18:38:58.415326 2026] [:error] [pid 59986:tid 60022] [client 74.248.158.124:64438] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQp6axKeW6bX4H7cuDAAAAEI"]
[Tue Apr 14 18:38:58.727533 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:63904] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZQutqnEmNU9vpHCln2QAAANY"]
[Tue Apr 14 18:38:58.954933 2026] [:error] [pid 59986:tid 60036] [client 74.248.158.124:63325] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQp6axKeW6bX4H7cuDwAAAFA"]
[Tue Apr 14 18:38:59.425097 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64403] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZQ-tqnEmNU9vpHCln3QAAANg"]
[Tue Apr 14 18:38:59.682978 2026] [:error] [pid 59985:tid 59997] [client 74.248.158.124:64430] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ad4ZQ-gHaxkvLE6V1klE6QAAAAQ"]
[Tue Apr 14 18:38:59.995453 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:65057] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZQ4TVeJSXHDIlEDtTNQAAAQU"]
[Tue Apr 14 18:39:00.446485 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:63304] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZRITVeJSXHDIlEDtTNgAAARU"]
[Tue Apr 14 18:39:00.563731 2026] [:error] [pid 59987:tid 60071] [client 74.248.158.124:64986] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZRFWpk-Tfi6_vLKr5iQAAAJg"]
[Tue Apr 14 18:39:01.127423 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:61385] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZRetqnEmNU9vpHCln5wAAAMc"]
[Tue Apr 14 18:39:01.302323 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:63848] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZRetqnEmNU9vpHCln6QAAAMo"]
[Tue Apr 14 18:39:01.686360 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:63841] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZRVWpk-Tfi6_vLKr5igAAAIg"]
[Tue Apr 14 18:39:02.209486 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:63916] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZRoTVeJSXHDIlEDtTOgAAAQc"]
[Tue Apr 14 18:39:02.297429 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:61390] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZRp6axKeW6bX4H7cuEgAAAEM"]
[Tue Apr 14 18:39:02.856446 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:64997] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZRoTVeJSXHDIlEDtTPAAAARY"]
[Tue Apr 14 18:39:02.869246 2026] [:error] [pid 22177:tid 22195] [client 74.248.158.124:63859] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "ad4ZRoTVeJSXHDIlEDtTPQAAARA"]
[Tue Apr 14 18:39:03.448854 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63846] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZR-tqnEmNU9vpHCln8AAAANA"]
[Tue Apr 14 18:39:03.844802 2026] [:error] [pid 59986:tid 60044] [client 74.248.158.124:63892] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZR56axKeW6bX4H7cuFgAAAFg"]
[Tue Apr 14 18:39:04.251676 2026] [:error] [pid 59986:tid 60037] [client 74.248.158.124:63862] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZSJ6axKeW6bX4H7cuGAAAAFE"]
[Tue Apr 14 18:39:04.766271 2026] [:error] [pid 22177:tid 22192] [client 74.248.158.124:65087] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZSITVeJSXHDIlEDtTQwAAAQ0"]
[Tue Apr 14 18:39:05.128656 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:62692] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZSYTVeJSXHDIlEDtTRQAAARQ"]
[Tue Apr 14 18:39:05.591013 2026] [:error] [pid 59985:tid 59995] [client 74.248.158.124:64422] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZSegHaxkvLE6V1klE8AAAAAI"]
[Tue Apr 14 18:39:05.794946 2026] [:error] [pid 59985:tid 60000] [client 74.248.158.124:64426] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZSegHaxkvLE6V1klE8gAAAAc"]
[Tue Apr 14 18:39:06.450458 2026] [:error] [pid 59985:tid 60007] [client 74.248.158.124:63845] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZSugHaxkvLE6V1klE9gAAAA4"]
[Tue Apr 14 18:39:06.470715 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:64347] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "ad4ZSp6axKeW6bX4H7cuHgAAAEo"]
[Tue Apr 14 18:39:07.013620 2026] [:error] [pid 59985:tid 60002] [client 74.248.158.124:65083] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZS-gHaxkvLE6V1klE-AAAAAk"]
[Tue Apr 14 18:39:07.156750 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:62678] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZS-tqnEmNU9vpHCln_AAAANY"]
[Tue Apr 14 18:39:07.772642 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:63373] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZS-tqnEmNU9vpHCloAgAAAMk"]
[Tue Apr 14 18:39:07.885736 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:63414] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZS-tqnEmNU9vpHCloAwAAAMA"]
[Tue Apr 14 18:39:08.363141 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:63392] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZTOtqnEmNU9vpHCloCgAAAMg"]
[Tue Apr 14 18:39:08.641169 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:61433] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZTITVeJSXHDIlEDtTSAAAAQo"]
[Tue Apr 14 18:39:09.106410 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:63021] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZTYTVeJSXHDIlEDtTSgAAAQE"]
[Tue Apr 14 18:39:09.398078 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:61401] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "ad4ZTYTVeJSXHDIlEDtTTAAAARI"]
[Tue Apr 14 18:39:09.683141 2026] [:error] [pid 22177:tid 22194] [client 74.248.158.124:63015] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZTYTVeJSXHDIlEDtTTgAAAQ8"]
[Tue Apr 14 18:39:10.082969 2026] [:error] [pid 59987:tid 60051] [client 74.248.158.124:64980] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZTlWpk-Tfi6_vLKr5jgAAAIQ"]
[Tue Apr 14 18:39:10.254489 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:64966] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZToTVeJSXHDIlEDtTVAAAAQ4"]
[Tue Apr 14 18:39:10.630267 2026] [:error] [pid 59987:tid 60054] [client 74.248.158.124:64990] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZTlWpk-Tfi6_vLKr5jwAAAIc"]
[Tue Apr 14 18:39:10.824875 2026] [:error] [pid 59986:tid 60029] [client 74.248.158.124:63039] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZTp6axKeW6bX4H7cuIgAAAEk"]
[Tue Apr 14 18:39:11.246662 2026] [:error] [pid 22177:tid 22183] [client 74.248.158.124:61434] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZT4TVeJSXHDIlEDtTVwAAAQQ"]
[Tue Apr 14 18:39:11.365409 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63310] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZT-tqnEmNU9vpHCloFwAAANg"]
[Tue Apr 14 18:39:11.995423 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:63321] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZT-tqnEmNU9vpHCloHQAAAMQ"]
[Tue Apr 14 18:39:12.106414 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:61386] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "ad4ZUOtqnEmNU9vpHCloHgAAAMg"]
[Tue Apr 14 18:39:12.724389 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:60495] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZUOtqnEmNU9vpHCloIwAAANU"]
[Tue Apr 14 18:39:12.842532 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63380] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZUOtqnEmNU9vpHCloJQAAANg"]
[Tue Apr 14 18:39:13.346536 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:63914] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZUetqnEmNU9vpHCloKQAAAMs"]
[Tue Apr 14 18:39:13.838703 2026] [:error] [pid 59985:tid 59995] [client 74.248.158.124:63911] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZUegHaxkvLE6V1klE_gAAAAI"]
[Tue Apr 14 18:39:13.969476 2026] [:error] [pid 22177:tid 22194] [client 74.248.158.124:63820] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZUYTVeJSXHDIlEDtTXAAAAQ8"]
[Tue Apr 14 18:39:14.796786 2026] [:error] [pid 59987:tid 60060] [client 74.248.158.124:63017] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad4ZUlWpk-Tfi6_vLKr5lQAAAI0"]
[Tue Apr 14 18:39:15.654518 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:63831] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZU1Wpk-Tfi6_vLKr5mAAAAJA"]
[Tue Apr 14 18:39:16.392862 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:60496] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZVITVeJSXHDIlEDtTYQAAAQM"]
[Tue Apr 14 18:39:16.543005 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:65024] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZVOtqnEmNU9vpHCloMgAAANM"]
[Tue Apr 14 18:39:17.373857 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:64381] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZVVWpk-Tfi6_vLKr5mwAAAJM"]
[Tue Apr 14 18:39:18.043278 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:64320] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad4ZVlWpk-Tfi6_vLKr5nQAAAJY"]
[Tue Apr 14 18:39:18.258658 2026] [:error] [pid 59987:tid 60059] [client 74.248.158.124:62719] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZVlWpk-Tfi6_vLKr5nwAAAIw"]
[Tue Apr 14 18:39:18.565354 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:63002] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZVutqnEmNU9vpHCloNgAAAM8"]
[Tue Apr 14 18:39:19.140908 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:63353] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZV4TVeJSXHDIlEDtTZQAAAQE"]
[Tue Apr 14 18:39:19.786977 2026] [:error] [pid 59986:tid 60041] [client 74.248.158.124:63383] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZV56axKeW6bX4H7cuLgAAAFU"]
[Tue Apr 14 18:39:20.419320 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:65033] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad4ZWFWpk-Tfi6_vLKr5qgAAAJA"]
[Tue Apr 14 18:39:20.729514 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:61407] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad4ZWITVeJSXHDIlEDtTaAAAAQs"]
[Tue Apr 14 18:39:21.075116 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:62981] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad4ZWYTVeJSXHDIlEDtTaQAAAQk"]
[Tue Apr 14 18:39:21.761651 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:65067] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad4ZWYTVeJSXHDIlEDtTagAAAQU"]
[Tue Apr 14 18:39:22.083512 2026] [proxy_fcgi:error] [pid 59986:tid 60034] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:22.341731 2026] [proxy_fcgi:error] [pid 59986:tid 60043] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:22.601873 2026] [proxy_fcgi:error] [pid 59986:tid 60025] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:22.971668 2026] [proxy_fcgi:error] [pid 59986:tid 60032] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.130387 2026] [proxy_fcgi:error] [pid 22177:tid 22202] [client 74.248.158.124:63346] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.231972 2026] [proxy_fcgi:error] [pid 59986:tid 60038] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.400986 2026] [proxy_fcgi:error] [pid 22177:tid 22198] [client 74.248.158.124:63346] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.490740 2026] [proxy_fcgi:error] [pid 59986:tid 60026] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.660096 2026] [proxy_fcgi:error] [pid 22177:tid 22191] [client 74.248.158.124:63346] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.749515 2026] [proxy_fcgi:error] [pid 59986:tid 60024] [client 74.248.158.124:63829] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:23.918960 2026] [proxy_fcgi:error] [pid 22177:tid 22180] [client 74.248.158.124:63346] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:39:24.076719 2026] [:error] [pid 59986:tid 60027] [client 74.248.158.124:63829] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZXJ6axKeW6bX4H7cuPAAAAEc"]
[Tue Apr 14 18:39:24.174072 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:63346] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad4ZXITVeJSXHDIlEDtTdQAAARI"]
[Tue Apr 14 18:39:24.633123 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:64962] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZXOtqnEmNU9vpHCloPAAAANE"]
[Tue Apr 14 18:39:24.728493 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:63929] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad4ZXOtqnEmNU9vpHCloPgAAAMQ"]
[Tue Apr 14 18:39:25.379843 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:62394] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad4ZXVWpk-Tfi6_vLKr5twAAAJc"]
[Tue Apr 14 18:39:25.857808 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:63366] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZXYTVeJSXHDIlEDtTfAAAARg"]
[Tue Apr 14 18:39:26.248045 2026] [:error] [pid 22177:tid 22192] [client 74.248.158.124:63864] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad4ZXoTVeJSXHDIlEDtTfgAAAQ0"]
[Tue Apr 14 18:39:26.792601 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:63818] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZXugHaxkvLE6V1klFGQAAAAU"]
[Tue Apr 14 18:39:27.106420 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:63308] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad4ZX4TVeJSXHDIlEDtThAAAAQM"]
[Tue Apr 14 18:39:27.595773 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:63928] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4ZX4TVeJSXHDIlEDtThgAAAQA"]
[Tue Apr 14 18:39:27.684406 2026] [:error] [pid 22177:tid 22185] [client 74.248.158.124:63412] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad4ZX4TVeJSXHDIlEDtThwAAAQY"]
[Tue Apr 14 18:39:28.795089 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:63358] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad4ZYFWpk-Tfi6_vLKr5wwAAAJU"]
[Tue Apr 14 18:39:29.207807 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:65068] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4ZYZ6axKeW6bX4H7cuPgAAAFc"]
[Tue Apr 14 18:39:30.028398 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:65059] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad4ZYlWpk-Tfi6_vLKr5ygAAAIg"]
[Tue Apr 14 18:39:30.364724 2026] [:error] [pid 59987:tid 60053] [client 74.248.158.124:61418] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4ZYlWpk-Tfi6_vLKr5zQAAAIY"]
[Tue Apr 14 18:39:30.964129 2026] [:error] [pid 59985:tid 60012] [client 74.248.158.124:63375] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4ZYugHaxkvLE6V1klFHQAAABM"]
[Tue Apr 14 18:39:31.650464 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:63018] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad4ZY1Wpk-Tfi6_vLKr50wAAAIM"]
[Tue Apr 14 18:39:31.786950 2026] [:error] [pid 59987:tid 60062] [client 74.248.158.124:63368] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZY1Wpk-Tfi6_vLKr51AAAAI8"]
[Tue Apr 14 18:39:32.249355 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:65031] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad4ZZJ6axKeW6bX4H7cuRgAAAEQ"]
[Tue Apr 14 18:39:32.799814 2026] [:error] [pid 59985:tid 60008] [client 74.248.158.124:63883] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZZOgHaxkvLE6V1klFHwAAAA8"]
[Tue Apr 14 18:39:32.873314 2026] [:error] [pid 59986:tid 60027] [client 74.248.158.124:63347] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad4ZZJ6axKeW6bX4H7cuSgAAAEc"]
[Tue Apr 14 18:39:33.602150 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:63008] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZZYTVeJSXHDIlEDtTkAAAAQc"]
[Tue Apr 14 18:39:33.634041 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:61379] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad4ZZYTVeJSXHDIlEDtTkQAAARQ"]
[Tue Apr 14 18:39:34.150861 2026] [:error] [pid 59985:tid 60014] [client 74.248.158.124:61412] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZZugHaxkvLE6V1klFJAAAABU"]
[Tue Apr 14 18:39:34.313378 2026] [:error] [pid 59985:tid 60000] [client 74.248.158.124:61437] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZZugHaxkvLE6V1klFJQAAAAc"]
[Tue Apr 14 18:39:35.007494 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:63326] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZZ4TVeJSXHDIlEDtTlQAAAQw"]
[Tue Apr 14 18:39:35.636284 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:60492] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZZ4TVeJSXHDIlEDtTlgAAAQo"]
[Tue Apr 14 18:39:35.731346 2026] [:error] [pid 22177:tid 22196] [client 74.248.158.124:64366] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4ZZ4TVeJSXHDIlEDtTlwAAARE"]
[Tue Apr 14 18:39:36.617710 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:63335] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad4ZaJ6axKeW6bX4H7cuVAAAAEY"]
[Tue Apr 14 18:39:37.572923 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:64421] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4ZaetqnEmNU9vpHCloRAAAAMM"]
[Tue Apr 14 18:39:37.643724 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:64322] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4ZaZ6axKeW6bX4H7cuVgAAAEQ"]
[Tue Apr 14 18:39:38.444159 2026] [:error] [pid 59986:tid 60029] [client 74.248.158.124:63387] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4Zap6axKeW6bX4H7cuWgAAAEk"]
[Tue Apr 14 18:39:38.537103 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:63370] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4ZaoTVeJSXHDIlEDtTmwAAAQI"]
[Tue Apr 14 18:39:39.176002 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:63322] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4Za4TVeJSXHDIlEDtTnQAAAQk"]
[Tue Apr 14 18:39:39.347999 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:64412] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4Za-tqnEmNU9vpHCloSgAAANQ"]
[Tue Apr 14 18:39:39.869786 2026] [:error] [pid 60074:tid 60077] [client 74.248.158.124:63377] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad4Za-tqnEmNU9vpHCloTAAAAME"]
[Tue Apr 14 18:39:40.477301 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:63016] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZbITVeJSXHDIlEDtTnwAAAQs"]
[Tue Apr 14 18:39:40.590073 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:65001] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZbITVeJSXHDIlEDtToAAAARY"]
[Tue Apr 14 18:39:41.367507 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:61399] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZbetqnEmNU9vpHCloUAAAAMA"]
[Tue Apr 14 18:39:41.679806 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:64333] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZbYTVeJSXHDIlEDtTqQAAAQA"]
[Tue Apr 14 18:39:42.389898 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:63031] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4ZboTVeJSXHDIlEDtTsQAAARY"]
[Tue Apr 14 18:39:42.646024 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:62661] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZblWpk-Tfi6_vLKr55gAAAIo"]
[Tue Apr 14 18:39:43.112949 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:63336] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad4Zb-tqnEmNU9vpHCloUgAAAM4"]
[Tue Apr 14 18:39:43.527259 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:63866] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4Zb1Wpk-Tfi6_vLKr56wAAAJc"]
[Tue Apr 14 18:39:44.096598 2026] [:error] [pid 59987:tid 60062] [client 74.248.158.124:62071] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4ZcFWpk-Tfi6_vLKr57wAAAI8"]
[Tue Apr 14 18:39:44.513369 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:63372] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZcITVeJSXHDIlEDtTtAAAAQo"]
[Tue Apr 14 18:39:44.933779 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:62397] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4ZcJ6axKeW6bX4H7cuaQAAAEA"]
[Tue Apr 14 18:39:46.602916 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:63332] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZcutqnEmNU9vpHCloYwAAANA"]
[Tue Apr 14 18:39:46.714277 2026] [:error] [pid 59986:tid 60035] [client 74.248.158.124:63303] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4Zcp6axKeW6bX4H7cucwAAAE8"]
[Tue Apr 14 18:39:47.866676 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:60528] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad4Zc-tqnEmNU9vpHCloaQAAAMA"]
[Tue Apr 14 18:39:48.057184 2026] [:error] [pid 59986:tid 60029] [client 74.248.158.124:64985] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZdJ6axKeW6bX4H7cufQAAAEk"]
[Tue Apr 14 18:39:48.677386 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:63904] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZdJ6axKeW6bX4H7cugwAAAFc"]
[Tue Apr 14 18:39:49.084525 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:62679] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZdVWpk-Tfi6_vLKr59AAAAJM"]
[Tue Apr 14 18:39:49.300881 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:64446] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZdVWpk-Tfi6_vLKr59gAAAIU"]
[Tue Apr 14 18:39:50.120924 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64434] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4ZdutqnEmNU9vpHClobwAAANg"]
[Tue Apr 14 18:39:50.498722 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:64976] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZdutqnEmNU9vpHClocgAAAM0"]
[Tue Apr 14 18:39:51.599190 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:63384] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4Zd-tqnEmNU9vpHCloeAAAAM4"]
[Tue Apr 14 18:39:51.777688 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:64329] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad4Zd-tqnEmNU9vpHCloeQAAAMg"]
[Tue Apr 14 18:39:52.377502 2026] [:error] [pid 59986:tid 60037] [client 74.248.158.124:65016] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZeJ6axKeW6bX4H7cuigAAAFE"]
[Tue Apr 14 18:39:52.823423 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63387] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZeOtqnEmNU9vpHClofwAAANE"]
[Tue Apr 14 18:39:53.287515 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:65029] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZeetqnEmNU9vpHCloggAAAMQ"]
[Tue Apr 14 18:39:53.530901 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:63908] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZeetqnEmNU9vpHClohgAAAM8"]
[Tue Apr 14 18:39:54.169986 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:63852] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4ZeutqnEmNU9vpHCloigAAAMw"]
[Tue Apr 14 18:39:54.204501 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63921] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4ZeutqnEmNU9vpHClojAAAANg"]
[Tue Apr 14 18:39:54.839864 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:61384] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4ZeoTVeJSXHDIlEDtTuQAAARM"]
[Tue Apr 14 18:39:55.296320 2026] [:error] [pid 59986:tid 60030] [client 74.248.158.124:65014] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad4Ze56axKeW6bX4H7cujQAAAEo"]
[Tue Apr 14 18:39:55.493676 2026] [:error] [pid 59986:tid 60025] [client 74.248.158.124:63918] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4Ze56axKeW6bX4H7cukAAAAEU"]
[Tue Apr 14 18:39:56.317282 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:65023] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4ZfITVeJSXHDIlEDtTvgAAAQM"]
[Tue Apr 14 18:39:56.449985 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:63365] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZfITVeJSXHDIlEDtTvwAAAQI"]
[Tue Apr 14 18:39:57.028128 2026] [:error] [pid 22177:tid 22183] [client 74.248.158.124:63878] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4ZfYTVeJSXHDIlEDtTwwAAAQQ"]
[Tue Apr 14 18:39:57.343276 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:61396] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZfetqnEmNU9vpHClooAAAAMs"]
[Tue Apr 14 18:39:58.126443 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:63350] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4ZflWpk-Tfi6_vLKr5_QAAAIU"]
[Tue Apr 14 18:39:58.659758 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:61398] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4ZfutqnEmNU9vpHClopwAAAM8"]
[Tue Apr 14 18:39:59.300494 2026] [:error] [pid 60074:tid 60090] [client 74.248.158.124:61421] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4Zf-tqnEmNU9vpHCloqwAAAM4"]
[Tue Apr 14 18:39:59.346620 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:60527] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "ad4Zf-tqnEmNU9vpHClorQAAANY"]
[Tue Apr 14 18:39:59.995302 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:63009] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4Zf4TVeJSXHDIlEDtTxQAAARI"]
[Tue Apr 14 18:40:00.175272 2026] [:error] [pid 22177:tid 22187] [client 74.248.158.124:63860] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4ZgITVeJSXHDIlEDtTxwAAAQg"]
[Tue Apr 14 18:40:00.626767 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:62676] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4ZgFWpk-Tfi6_vLKr5_wAAAIo"]
[Tue Apr 14 18:40:01.079589 2026] [:error] [pid 60074:tid 60099] [client 74.248.158.124:62364] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZgetqnEmNU9vpHClotQAAANc"]
[Tue Apr 14 18:40:01.304716 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:62998] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4ZgYTVeJSXHDIlEDtTyAAAARM"]
[Tue Apr 14 18:40:01.866095 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:64375] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZgYTVeJSXHDIlEDtTyQAAAQE"]
[Tue Apr 14 18:40:02.025183 2026] [:error] [pid 59986:tid 60035] [client 74.248.158.124:63316] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "ad4Zgp6axKeW6bX4H7cumgAAAE8"]
[Tue Apr 14 18:40:03.216771 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:62667] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4Zg4TVeJSXHDIlEDtTzgAAAQk"]
[Tue Apr 14 18:40:03.343317 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:65028] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4Zg4TVeJSXHDIlEDtTzwAAARY"]
[Tue Apr 14 18:40:03.956746 2026] [:error] [pid 22177:tid 22187] [client 74.248.158.124:61400] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4Zg4TVeJSXHDIlEDtT0gAAAQg"]
[Tue Apr 14 18:40:04.068510 2026] [:error] [pid 22177:tid 22203] [client 74.248.158.124:65030] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZhITVeJSXHDIlEDtT1QAAARg"]
[Tue Apr 14 18:40:04.845430 2026] [:error] [pid 59985:tid 60015] [client 74.248.158.124:62677] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZhOgHaxkvLE6V1klFLwAAABY"]
[Tue Apr 14 18:40:05.516203 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:63032] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4ZhYTVeJSXHDIlEDtT3gAAARU"]
[Tue Apr 14 18:40:05.917325 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:63393] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZhYTVeJSXHDIlEDtT4AAAAQI"]
[Tue Apr 14 18:40:06.459044 2026] [:error] [pid 22177:tid 22179] [client 74.248.158.124:65063] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "ad4ZhoTVeJSXHDIlEDtT4QAAAQA"]
[Tue Apr 14 18:40:06.768566 2026] [:error] [pid 59985:tid 59994] [client 74.248.158.124:65084] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZhugHaxkvLE6V1klFMwAAAAE"]
[Tue Apr 14 18:40:07.616322 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:62307] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4Zh4TVeJSXHDIlEDtT5gAAARY"]
[Tue Apr 14 18:40:07.872636 2026] [:error] [pid 59985:tid 59996] [client 74.248.158.124:63297] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4Zh-gHaxkvLE6V1klFNwAAAAM"]
[Tue Apr 14 18:40:08.337415 2026] [:error] [pid 22177:tid 22202] [client 74.248.158.124:62690] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZiITVeJSXHDIlEDtT5wAAARc"]
[Tue Apr 14 18:40:08.935107 2026] [:error] [pid 60074:tid 60099] [client 74.248.158.124:61395] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZiOtqnEmNU9vpHClowgAAANc"]
[Tue Apr 14 18:40:09.243513 2026] [:error] [pid 22177:tid 22182] [client 74.248.158.124:61400] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZiYTVeJSXHDIlEDtT6wAAAQM"]
[Tue Apr 14 18:40:09.874015 2026] [:error] [pid 60074:tid 60083] [client 74.248.158.124:62999] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "ad4ZietqnEmNU9vpHCloxAAAAMc"]
[Tue Apr 14 18:40:10.194659 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:63364] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZiutqnEmNU9vpHCloxgAAAMQ"]
[Tue Apr 14 18:40:10.564937 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:62398] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZilWpk-Tfi6_vLKr6CwAAAJI"]
[Tue Apr 14 18:40:11.161410 2026] [:error] [pid 59985:tid 60016] [client 74.248.158.124:64974] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4Zi-gHaxkvLE6V1klFOwAAABc"]
[Tue Apr 14 18:40:11.212994 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:63296] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4Zi56axKeW6bX4H7curAAAAEM"]
[Tue Apr 14 18:40:12.040300 2026] [:error] [pid 59986:tid 60033] [client 74.248.158.124:63406] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZjJ6axKeW6bX4H7curgAAAE0"]
[Tue Apr 14 18:40:12.084445 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:62373] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZjJ6axKeW6bX4H7curwAAAEQ"]
[Tue Apr 14 18:40:12.789710 2026] [:error] [pid 59985:tid 59993] [client 74.248.158.124:61422] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZjOgHaxkvLE6V1klFPgAAAAA"]
[Tue Apr 14 18:40:13.154991 2026] [:error] [pid 59986:tid 60041] [client 74.248.158.124:63348] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x3x.php"] [unique_id "ad4ZjZ6axKeW6bX4H7cutQAAAFU"]
[Tue Apr 14 18:40:13.873302 2026] [:error] [pid 59986:tid 60029] [client 74.248.158.124:63827] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZjZ6axKeW6bX4H7cutgAAAEk"]
[Tue Apr 14 18:40:14.135830 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:62699] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZjoTVeJSXHDIlEDtT8AAAAQs"]
[Tue Apr 14 18:40:15.134898 2026] [:error] [pid 59987:tid 60070] [client 74.248.158.124:61415] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4Zj1Wpk-Tfi6_vLKr6EQAAAJc"]
[Tue Apr 14 18:40:15.637087 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:63037] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4Zj1Wpk-Tfi6_vLKr6FQAAAJQ"]
[Tue Apr 14 18:40:16.060298 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:63917] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZkFWpk-Tfi6_vLKr6FgAAAIA"]
[Tue Apr 14 18:40:16.545799 2026] [:error] [pid 59986:tid 60038] [client 74.248.158.124:61423] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZkJ6axKeW6bX4H7cuwAAAAFI"]
[Tue Apr 14 18:40:16.902569 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:61405] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ad4ZkFWpk-Tfi6_vLKr6GAAAAIg"]
[Tue Apr 14 18:40:17.469646 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:61420] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ad4ZkZ6axKeW6bX4H7cuwQAAAEY"]
[Tue Apr 14 18:40:18.065303 2026] [:error] [pid 22177:tid 22187] [client 74.248.158.124:63023] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZkoTVeJSXHDIlEDtT-gAAAQg"]
[Tue Apr 14 18:40:18.811910 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:62275] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZkoTVeJSXHDIlEDtT_wAAAQU"]
[Tue Apr 14 18:40:18.998391 2026] [:error] [pid 59987:tid 60064] [client 74.248.158.124:63857] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ad4ZklWpk-Tfi6_vLKr6HAAAAJE"]
[Tue Apr 14 18:40:19.731987 2026] [:error] [pid 59987:tid 60051] [client 74.248.158.124:62984] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4Zk1Wpk-Tfi6_vLKr6IAAAAIQ"]
[Tue Apr 14 18:40:20.237139 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:63038] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ad4ZlITVeJSXHDIlEDtUBAAAAQo"]
[Tue Apr 14 18:40:20.878020 2026] [:error] [pid 22177:tid 22192] [client 74.248.158.124:61424] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/global.php"] [unique_id "ad4ZlITVeJSXHDIlEDtUBwAAAQ0"]
[Tue Apr 14 18:40:21.746926 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:62327] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ad4ZletqnEmNU9vpHClozgAAAMg"]
[Tue Apr 14 18:40:22.858330 2026] [:error] [pid 22177:tid 22186] [client 74.248.158.124:60494] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ad4ZloTVeJSXHDIlEDtUEQAAAQc"]
[Tue Apr 14 18:40:23.573257 2026] [proxy_fcgi:error] [pid 60074:tid 60083] [client 74.248.158.124:60511] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:23.881465 2026] [proxy_fcgi:error] [pid 60074:tid 60079] [client 74.248.158.124:60511] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:24.140711 2026] [proxy_fcgi:error] [pid 60074:tid 60088] [client 74.248.158.124:60511] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:24.400153 2026] [proxy_fcgi:error] [pid 60074:tid 60077] [client 74.248.158.124:60511] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:24.655123 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:60511] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad4ZmOtqnEmNU9vpHClo2QAAANE"]
[Tue Apr 14 18:40:26.213466 2026] [proxy_fcgi:error] [pid 22177:tid 22187] [client 74.248.158.124:63320] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:26.387233 2026] [proxy_fcgi:error] [pid 22177:tid 22185] [client 74.248.158.124:63888] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:26.482799 2026] [proxy_fcgi:error] [pid 22177:tid 22194] [client 74.248.158.124:63320] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:26.665206 2026] [proxy_fcgi:error] [pid 22177:tid 22203] [client 74.248.158.124:63888] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:26.743426 2026] [proxy_fcgi:error] [pid 22177:tid 22197] [client 74.248.158.124:63320] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:26.939636 2026] [proxy_fcgi:error] [pid 22177:tid 22188] [client 74.248.158.124:63888] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:27.002742 2026] [proxy_fcgi:error] [pid 22177:tid 22190] [client 74.248.158.124:63320] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:40:27.196619 2026] [:error] [pid 22177:tid 22193] [client 74.248.158.124:63888] [client 74.248.158.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad4Zm4TVeJSXHDIlEDtUKwAAAQ4"]
[Tue Apr 14 18:40:27.259019 2026] [:error] [pid 22177:tid 22181] [client 74.248.158.124:63320] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4Zm4TVeJSXHDIlEDtULAAAAQI"]
[Tue Apr 14 18:40:27.924978 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:62977] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4Zm-tqnEmNU9vpHClo3gAAAMo"]
[Tue Apr 14 18:40:29.679400 2026] [:error] [pid 59987:tid 60048] [client 74.248.158.124:63933] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZnVWpk-Tfi6_vLKr6OwAAAIE"]
[Tue Apr 14 18:40:29.849010 2026] [:error] [pid 60074:tid 60098] [client 74.248.158.124:63341] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ad4ZnetqnEmNU9vpHClo5gAAANY"]
[Tue Apr 14 18:40:30.863512 2026] [:error] [pid 59987:tid 60067] [client 74.248.158.124:64331] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ad4ZnlWpk-Tfi6_vLKr6PQAAAJQ"]
[Tue Apr 14 18:40:30.947937 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:60493] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZnutqnEmNU9vpHClo7AAAAMg"]
[Tue Apr 14 18:40:32.204153 2026] [:error] [pid 22177:tid 22184] [client 74.248.158.124:63333] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4ZoITVeJSXHDIlEDtUMgAAAQU"]
[Tue Apr 14 18:40:32.401787 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:62669] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ad4ZoJ6axKeW6bX4H7cu0gAAAFc"]
[Tue Apr 14 18:40:33.528220 2026] [:error] [pid 59985:tid 60000] [client 74.248.158.124:60503] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4ZoegHaxkvLE6V1klFSwAAAAc"]
[Tue Apr 14 18:40:33.542690 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:65036] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ad4ZoVWpk-Tfi6_vLKr6QAAAAIo"]
[Tue Apr 14 18:40:34.443704 2026] [:error] [pid 59986:tid 60039] [client 74.248.158.124:63035] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad4Zop6axKeW6bX4H7cu1QAAAFM"]
[Tue Apr 14 18:40:34.599350 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:63913] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4Zop6axKeW6bX4H7cu1gAAAFY"]
[Tue Apr 14 18:40:35.462350 2026] [:error] [pid 59985:tid 60007] [client 74.248.158.124:64336] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad4Zo-gHaxkvLE6V1klFUAAAAA4"]
[Tue Apr 14 18:40:35.462873 2026] [:error] [pid 59986:tid 60024] [client 74.248.158.124:62064] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4Zo56axKeW6bX4H7cu2QAAAEQ"]
[Tue Apr 14 18:40:36.429056 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:62707] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZpFWpk-Tfi6_vLKr6QwAAAJU"]
[Tue Apr 14 18:40:37.667213 2026] [:error] [pid 59986:tid 60032] [client 74.248.158.124:63865] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZpZ6axKeW6bX4H7cu3gAAAEw"]
[Tue Apr 14 18:40:39.112302 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:62083] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad4Zp4TVeJSXHDIlEDtUPQAAARM"]
[Tue Apr 14 18:40:42.104301 2026] [:error] [pid 59985:tid 60016] [client 74.248.158.124:62098] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad4ZqugHaxkvLE6V1klFXwAAABc"]
[Tue Apr 14 18:40:43.123406 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:64354] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad4Zq-tqnEmNU9vpHClpCwAAANg"]
[Tue Apr 14 18:40:45.983600 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:63405] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad4ZrZ6axKeW6bX4H7cu5gAAAEM"]
[Tue Apr 14 18:40:46.122115 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:62350] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZrlWpk-Tfi6_vLKr6UAAAAJI"]
[Tue Apr 14 18:40:47.831571 2026] [:error] [pid 59986:tid 60033] [client 74.248.158.124:63317] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4Zr56axKeW6bX4H7cu6gAAAE0"]
[Tue Apr 14 18:40:49.926801 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:63354] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4ZsYTVeJSXHDIlEDtUUgAAARM"]
[Tue Apr 14 18:40:51.012535 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63416] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4Zs-tqnEmNU9vpHClpGwAAANg"]
[Tue Apr 14 18:40:51.638390 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:63869] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad4Zs-tqnEmNU9vpHClpHgAAAMU"]
[Tue Apr 14 18:40:51.836368 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:62687] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4Zs4TVeJSXHDIlEDtUVgAAARQ"]
[Tue Apr 14 18:40:52.715915 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:62375] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad4ZtFWpk-Tfi6_vLKr6UwAAAIU"]
[Tue Apr 14 18:40:52.874464 2026] [:error] [pid 60074:tid 60087] [client 74.248.158.124:60537] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4ZtOtqnEmNU9vpHClpIQAAAMs"]
[Tue Apr 14 18:40:53.710681 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:63030] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZtetqnEmNU9vpHClpJQAAANE"]
[Tue Apr 14 18:40:53.943179 2026] [:error] [pid 59987:tid 60062] [client 74.248.158.124:64431] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad4ZtVWpk-Tfi6_vLKr6VQAAAI8"]
[Tue Apr 14 18:40:54.629573 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:63407] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad4ZtutqnEmNU9vpHClpJwAAANI"]
[Tue Apr 14 18:40:55.146064 2026] [:error] [pid 59985:tid 60005] [client 74.248.158.124:65070] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4Zt-gHaxkvLE6V1klFZQAAAAw"]
[Tue Apr 14 18:40:55.368167 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:64368] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad4Zt-tqnEmNU9vpHClpKwAAAMU"]
[Tue Apr 14 18:40:56.061082 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:65019] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZuOtqnEmNU9vpHClpLgAAAMg"]
[Tue Apr 14 18:40:56.070986 2026] [:error] [pid 60074:tid 60092] [client 74.248.158.124:62991] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad4ZuOtqnEmNU9vpHClpLwAAANA"]
[Tue Apr 14 18:40:56.813671 2026] [:error] [pid 60074:tid 60099] [client 74.248.158.124:63391] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZuOtqnEmNU9vpHClpMwAAANc"]
[Tue Apr 14 18:40:56.958319 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:63357] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZuOtqnEmNU9vpHClpNQAAANU"]
[Tue Apr 14 18:40:57.607789 2026] [:error] [pid 60074:tid 60082] [client 74.248.158.124:64435] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4ZuetqnEmNU9vpHClpOAAAAMY"]
[Tue Apr 14 18:40:57.653987 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:63029] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZuetqnEmNU9vpHClpOQAAAM0"]
[Tue Apr 14 18:40:58.611289 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63849] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZuutqnEmNU9vpHClpQAAAANg"]
[Tue Apr 14 18:40:59.554801 2026] [:error] [pid 60074:tid 60086] [client 74.248.158.124:62706] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4Zu-tqnEmNU9vpHClpRQAAAMo"]
[Tue Apr 14 18:41:00.365654 2026] [:error] [pid 59985:tid 60011] [client 74.248.158.124:63930] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad4ZvOgHaxkvLE6V1klFaAAAABI"]
[Tue Apr 14 18:41:01.272393 2026] [:error] [pid 59985:tid 59993] [client 74.248.158.124:63025] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4ZvegHaxkvLE6V1klFawAAAAA"]
[Tue Apr 14 18:41:02.108883 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:62997] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4ZvlWpk-Tfi6_vLKr6WQAAAJI"]
[Tue Apr 14 18:41:02.176680 2026] [:error] [pid 59987:tid 60058] [client 74.248.158.124:63339] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4ZvlWpk-Tfi6_vLKr6WgAAAIs"]
[Tue Apr 14 18:41:03.173058 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:62997] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4Zv-tqnEmNU9vpHClpTQAAANU"]
[Tue Apr 14 18:41:03.970022 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:60505] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad4Zv4TVeJSXHDIlEDtUaAAAAQk"]
[Tue Apr 14 18:41:04.899653 2026] [:error] [pid 59986:tid 60033] [client 74.248.158.124:64408] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZwJ6axKeW6bX4H7cu_wAAAE0"]
[Tue Apr 14 18:41:05.533839 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:63005] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZwYTVeJSXHDIlEDtUagAAAQw"]
[Tue Apr 14 18:41:06.451006 2026] [:error] [pid 22177:tid 22190] [client 74.248.158.124:63404] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4ZwoTVeJSXHDIlEDtUcgAAAQs"]
[Tue Apr 14 18:41:07.049317 2026] [:error] [pid 60074:tid 60089] [client 74.248.158.124:65021] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad4Zw-tqnEmNU9vpHClpWQAAAM0"]
[Tue Apr 14 18:41:07.379132 2026] [:error] [pid 60074:tid 60078] [client 74.248.158.124:64410] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4Zw-tqnEmNU9vpHClpWwAAAMI"]
[Tue Apr 14 18:41:07.691000 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:63411] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4Zw4TVeJSXHDIlEDtUgQAAARM"]
[Tue Apr 14 18:41:08.301826 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:62322] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4ZxFWpk-Tfi6_vLKr6ZQAAAJI"]
[Tue Apr 14 18:41:08.546905 2026] [:error] [pid 59985:tid 60017] [client 74.248.158.124:62701] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4ZxOgHaxkvLE6V1klFdwAAABg"]
[Tue Apr 14 18:41:09.466100 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:65012] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4ZxYTVeJSXHDIlEDtUkgAAAQE"]
[Tue Apr 14 18:41:10.244667 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:65066] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad4Zxp6axKeW6bX4H7cvAQAAAEA"]
[Tue Apr 14 18:41:10.962856 2026] [:error] [pid 59985:tid 60016] [client 74.248.158.124:60538] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZxugHaxkvLE6V1klFfgAAABc"]
[Tue Apr 14 18:41:11.350865 2026] [:error] [pid 59987:tid 60060] [client 74.248.158.124:64326] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4Zx1Wpk-Tfi6_vLKr6aQAAAI0"]
[Tue Apr 14 18:41:11.809705 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:62352] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4Zx1Wpk-Tfi6_vLKr6agAAAIA"]
[Tue Apr 14 18:41:12.185583 2026] [:error] [pid 59987:tid 60066] [client 74.248.158.124:64332] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4ZyFWpk-Tfi6_vLKr6awAAAJM"]
[Tue Apr 14 18:41:12.563696 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:60502] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZyITVeJSXHDIlEDtUmQAAAQE"]
[Tue Apr 14 18:41:13.114463 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:60512] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4ZyVWpk-Tfi6_vLKr6bQAAAIM"]
[Tue Apr 14 18:41:13.229958 2026] [:error] [pid 59986:tid 60041] [client 74.248.158.124:64970] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad4ZyZ6axKeW6bX4H7cvAwAAAFU"]
[Tue Apr 14 18:41:14.191932 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:64404] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4ZyutqnEmNU9vpHClpYwAAANI"]
[Tue Apr 14 18:41:14.348202 2026] [:error] [pid 59987:tid 60063] [client 74.248.158.124:62362] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4ZylWpk-Tfi6_vLKr6cAAAAJA"]
[Tue Apr 14 18:41:15.215180 2026] [:error] [pid 22177:tid 22195] [client 74.248.158.124:65017] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4Zy4TVeJSXHDIlEDtUnQAAARA"]
[Tue Apr 14 18:41:15.229049 2026] [:error] [pid 59985:tid 60011] [client 74.248.158.124:62983] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4Zy-gHaxkvLE6V1klFiQAAABI"]
[Tue Apr 14 18:41:15.895390 2026] [:error] [pid 59985:tid 59993] [client 74.248.158.124:65022] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4Zy-gHaxkvLE6V1klFiwAAAAA"]
[Tue Apr 14 18:41:16.775994 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:64330] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4ZzJ6axKeW6bX4H7cvCAAAAFY"]
[Tue Apr 14 18:41:16.865130 2026] [:error] [pid 59986:tid 60023] [client 74.248.158.124:63010] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad4ZzJ6axKeW6bX4H7cvCQAAAEM"]
[Tue Apr 14 18:41:17.680576 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:63367] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4ZzZ6axKeW6bX4H7cvDAAAAEE"]
[Tue Apr 14 18:41:18.252730 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:64437] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4ZzoTVeJSXHDIlEDtUnwAAAQE"]
[Tue Apr 14 18:41:18.651829 2026] [:error] [pid 22177:tid 22191] [client 74.248.158.124:63030] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4ZzoTVeJSXHDIlEDtUoQAAAQw"]
[Tue Apr 14 18:41:19.108100 2026] [:error] [pid 22177:tid 22198] [client 74.248.158.124:63309] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4Zz4TVeJSXHDIlEDtUpAAAARM"]
[Tue Apr 14 18:41:19.904300 2026] [:error] [pid 22177:tid 22183] [client 74.248.158.124:63019] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4Zz4TVeJSXHDIlEDtUpQAAAQQ"]
[Tue Apr 14 18:41:20.366301 2026] [:error] [pid 60074:tid 60100] [client 74.248.158.124:63895] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z0OtqnEmNU9vpHClpawAAANg"]
[Tue Apr 14 18:41:20.755666 2026] [:error] [pid 59987:tid 60050] [client 74.248.158.124:63875] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad4Z0FWpk-Tfi6_vLKr6eAAAAIM"]
[Tue Apr 14 18:41:22.553528 2026] [:error] [pid 59986:tid 60025] [client 74.248.158.124:62348] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4Z0p6axKeW6bX4H7cvEgAAAEU"]
[Tue Apr 14 18:41:23.627029 2026] [:error] [pid 59987:tid 60058] [client 74.248.158.124:63329] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4Z01Wpk-Tfi6_vLKr6fQAAAIs"]
[Tue Apr 14 18:41:25.930022 2026] [:error] [pid 22177:tid 22180] [client 74.248.158.124:64977] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4Z1YTVeJSXHDIlEDtUrQAAAQE"]
[Tue Apr 14 18:41:25.951762 2026] [:error] [pid 59987:tid 60058] [client 74.248.158.124:63382] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z1VWpk-Tfi6_vLKr6iAAAAIs"]
[Tue Apr 14 18:41:29.173694 2026] [proxy_fcgi:error] [pid 59986:tid 60044] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:29.432391 2026] [proxy_fcgi:error] [pid 59986:tid 60029] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:29.712152 2026] [proxy_fcgi:error] [pid 59986:tid 60020] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:29.986514 2026] [proxy_fcgi:error] [pid 59986:tid 60032] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:30.245032 2026] [proxy_fcgi:error] [pid 59986:tid 60041] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:30.690966 2026] [proxy_fcgi:error] [pid 59986:tid 60030] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:30.949623 2026] [proxy_fcgi:error] [pid 59986:tid 60043] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:31.208541 2026] [proxy_fcgi:error] [pid 59986:tid 60027] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:31.477371 2026] [proxy_fcgi:error] [pid 59986:tid 60038] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:31.738162 2026] [proxy_fcgi:error] [pid 59986:tid 60035] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:32.008744 2026] [proxy_fcgi:error] [pid 59986:tid 60031] [client 74.248.158.124:62674] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:41:32.264336 2026] [:error] [pid 59986:tid 60028] [client 74.248.158.124:62674] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad4Z3J6axKeW6bX4H7cvKAAAAEg"]
[Tue Apr 14 18:41:32.521047 2026] [:error] [pid 59987:tid 60069] [client 74.248.158.124:61381] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad4Z3FWpk-Tfi6_vLKr6kAAAAJY"]
[Tue Apr 14 18:41:33.991514 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:65005] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad4Z3etqnEmNU9vpHClpiwAAAMQ"]
[Tue Apr 14 18:41:34.097411 2026] [:error] [pid 59987:tid 60055] [client 74.248.158.124:65072] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z3lWpk-Tfi6_vLKr6kQAAAIg"]
[Tue Apr 14 18:41:36.268605 2026] [:error] [pid 60074:tid 60084] [client 74.248.158.124:63885] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad4Z4OtqnEmNU9vpHClplAAAAMg"]
[Tue Apr 14 18:41:36.295936 2026] [:error] [pid 22177:tid 22197] [client 74.248.158.124:65011] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z4ITVeJSXHDIlEDtUsQAAARI"]
[Tue Apr 14 18:41:37.927837 2026] [:error] [pid 60074:tid 60093] [client 74.248.158.124:62668] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z4etqnEmNU9vpHClpnQAAANE"]
[Tue Apr 14 18:41:38.224059 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:61438] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260325043000.php"] [unique_id "ad4Z4utqnEmNU9vpHClpnwAAAMk"]
[Tue Apr 14 18:41:39.078963 2026] [:error] [pid 60074:tid 60096] [client 74.248.158.124:64964] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad4Z4-tqnEmNU9vpHClpowAAANQ"]
[Tue Apr 14 18:41:40.452149 2026] [:error] [pid 59986:tid 60042] [client 74.248.158.124:64432] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad4Z5J6axKeW6bX4H7cvMQAAAFY"]
[Tue Apr 14 18:41:40.700157 2026] [:error] [pid 59986:tid 60021] [client 74.248.158.124:63013] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ad4Z5J6axKeW6bX4H7cvMgAAAEE"]
[Tue Apr 14 18:41:41.616961 2026] [:error] [pid 60074:tid 60085] [client 74.248.158.124:63900] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ad4Z5etqnEmNU9vpHClp9wAAAMk"]
[Tue Apr 14 18:41:41.875774 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:64389] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad4Z5YTVeJSXHDIlEDtUzAAAARQ"]
[Tue Apr 14 18:41:43.148529 2026] [:error] [pid 60074:tid 60088] [client 74.248.158.124:61388] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ad4Z5-tqnEmNU9vpHClp_gAAAMw"]
[Tue Apr 14 18:41:45.109295 2026] [:error] [pid 59985:tid 59999] [client 74.248.158.124:63401] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad4Z6egHaxkvLE6V1klFmQAAAAY"]
[Tue Apr 14 18:41:45.549751 2026] [:error] [pid 59987:tid 60057] [client 74.248.158.124:64386] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "ad4Z6VWpk-Tfi6_vLKr6lwAAAIo"]
[Tue Apr 14 18:41:46.751602 2026] [:error] [pid 22177:tid 22187] [client 74.248.158.124:63395] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad4Z6oTVeJSXHDIlEDtUzgAAAQg"]
[Tue Apr 14 18:41:46.843835 2026] [:error] [pid 59985:tid 60005] [client 74.248.158.124:64417] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "ad4Z6ugHaxkvLE6V1klFnAAAAAw"]
[Tue Apr 14 18:41:53.918667 2026] [:error] [pid 59987:tid 60068] [client 74.248.158.124:63899] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "ad4Z8VWpk-Tfi6_vLKr6ogAAAJU"]
[Tue Apr 14 18:41:54.885456 2026] [:error] [pid 60074:tid 60091] [client 74.248.158.124:65013] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "ad4Z8utqnEmNU9vpHClqDAAAAM8"]
[Tue Apr 14 18:41:55.564971 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:64429] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "ad4Z84TVeJSXHDIlEDtVCAAAARQ"]
[Tue Apr 14 18:41:57.305867 2026] [:error] [pid 22177:tid 22200] [client 74.248.158.124:64972] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "ad4Z9YTVeJSXHDIlEDtVFgAAARU"]
[Tue Apr 14 18:41:59.456433 2026] [:error] [pid 22177:tid 22189] [client 74.248.158.124:63388] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "ad4Z94TVeJSXHDIlEDtVJQAAAQo"]
[Tue Apr 14 18:42:00.803486 2026] [:error] [pid 60074:tid 60095] [client 74.248.158.124:62717] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "ad4Z-OtqnEmNU9vpHClqHwAAANM"]
[Tue Apr 14 18:42:02.502270 2026] [:error] [pid 59985:tid 60007] [client 74.248.158.124:64418] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "ad4Z-ugHaxkvLE6V1klFsgAAAA4"]
[Tue Apr 14 18:42:06.885150 2026] [:error] [pid 60074:tid 60082] [client 74.248.158.124:65018] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "ad4Z_utqnEmNU9vpHClqJAAAAMY"]
[Tue Apr 14 18:42:07.972656 2026] [:error] [pid 60074:tid 60079] [client 74.248.158.124:63920] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "ad4Z_-tqnEmNU9vpHClqKwAAAMM"]
[Tue Apr 14 18:42:08.850742 2026] [:error] [pid 59987:tid 60047] [client 74.248.158.124:64995] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "ad4aAFWpk-Tfi6_vLKr6xAAAAIA"]
[Tue Apr 14 18:42:09.927270 2026] [:error] [pid 60074:tid 60080] [client 74.248.158.124:64381] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "ad4aAetqnEmNU9vpHClqMAAAAMQ"]
[Tue Apr 14 18:42:10.693833 2026] [:error] [pid 22177:tid 22188] [client 74.248.158.124:64442] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad4aAoTVeJSXHDIlEDtVMwAAAQk"]
[Tue Apr 14 18:42:11.889218 2026] [:error] [pid 59986:tid 60026] [client 74.248.158.124:63897] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad4aA56axKeW6bX4H7cvTAAAAEY"]
[Tue Apr 14 18:42:13.519482 2026] [:error] [pid 60074:tid 60081] [client 74.248.158.124:61721] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad4aBetqnEmNU9vpHClqQgAAAMU"]
[Tue Apr 14 18:42:14.598511 2026] [:error] [pid 59986:tid 60020] [client 74.248.158.124:60530] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad4aBp6axKeW6bX4H7cvUQAAAEA"]
[Tue Apr 14 18:42:16.135204 2026] [:error] [pid 59987:tid 60065] [client 74.248.158.124:64393] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "ad4aCFWpk-Tfi6_vLKr60gAAAJI"]
[Tue Apr 14 18:42:16.861922 2026] [:error] [pid 59985:tid 59998] [client 74.248.158.124:64445] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "ad4aCOgHaxkvLE6V1klFzAAAAAU"]
[Tue Apr 14 18:42:17.783425 2026] [:error] [pid 59985:tid 60002] [client 74.248.158.124:64392] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "ad4aCegHaxkvLE6V1klFzgAAAAk"]
[Tue Apr 14 18:42:19.144908 2026] [:error] [pid 60074:tid 60076] [client 74.248.158.124:61772] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "ad4aC-tqnEmNU9vpHClqRwAAAMA"]
[Tue Apr 14 18:42:20.746294 2026] [:error] [pid 59986:tid 60031] [client 74.248.158.124:64356] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "ad4aDJ6axKeW6bX4H7cvWgAAAEs"]
[Tue Apr 14 18:42:22.486838 2026] [:error] [pid 59987:tid 60052] [client 74.248.158.124:64994] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "ad4aDlWpk-Tfi6_vLKr62gAAAIU"]
[Tue Apr 14 18:42:23.468716 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:63344] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "ad4aD-tqnEmNU9vpHClqUAAAANI"]
[Tue Apr 14 18:42:24.904294 2026] [:error] [pid 22177:tid 22195] [client 74.248.158.124:64361] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "ad4aEITVeJSXHDIlEDtVRQAAARA"]
[Tue Apr 14 18:42:26.006013 2026] [:error] [pid 22177:tid 22199] [client 74.248.158.124:62672] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ad4aEoTVeJSXHDIlEDtVSAAAARQ"]
[Tue Apr 14 18:42:27.038030 2026] [:error] [pid 60074:tid 60094] [client 74.248.158.124:65044] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ad4aE-tqnEmNU9vpHClqWwAAANI"]
[Tue Apr 14 18:42:28.406025 2026] [:error] [pid 60074:tid 60099] [client 74.248.158.124:62701] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ad4aFOtqnEmNU9vpHClqaQAAANc"]
[Tue Apr 14 18:42:29.119338 2026] [:error] [pid 60074:tid 60097] [client 74.248.158.124:62987] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ad4aFetqnEmNU9vpHClqcQAAANU"]
[Tue Apr 14 18:42:30.437741 2026] [:error] [pid 59986:tid 60043] [client 74.248.158.124:65074] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ad4aFp6axKeW6bX4H7cvYAAAAFc"]
[Tue Apr 14 18:42:31.133913 2026] [:error] [pid 22177:tid 22201] [client 74.248.158.124:64401] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ad4aF4TVeJSXHDIlEDtVYAAAARY"]
[Tue Apr 14 18:42:33.634455 2026] [proxy_fcgi:error] [pid 59985:tid 59999] [client 74.248.158.124:64982] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:42:33.916304 2026] [proxy_fcgi:error] [pid 59985:tid 60011] [client 74.248.158.124:64982] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:42:34.175923 2026] [proxy_fcgi:error] [pid 59985:tid 60008] [client 74.248.158.124:64982] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 18:42:34.540828 2026] [proxy_fcgi:error] [pid 59985:tid 59993] [client 74.248.158.124:64982] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 22:50:44.186897 2026] [:error] [pid 60074:tid 60097] [client 8.229.173.94:59087] [client 8.229.173.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.229.173.94, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "ad5UROtqnEmNU9vpHCnHFgAAANU"]
[Tue Apr 14 22:50:44.196835 2026] [proxy_fcgi:error] [pid 60074:tid 60097] [client 8.229.173.94:59087] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 22:50:46.207775 2026] [:error] [pid 60074:tid 60076] [client 8.229.173.94:59087] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ad5URutqnEmNU9vpHCnHIwAAAMA"]
[Tue Apr 14 22:50:46.538647 2026] [:error] [pid 3810:tid 3823] [client 8.229.173.94:55010] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ad5URsqc5XaYZhFXVGfNGgAAAYo"]
[Tue Apr 14 22:50:46.872763 2026] [:error] [pid 59987:tid 60069] [client 8.229.173.94:55253] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ad5URlWpk-Tfi6_vLKpNtgAAAJY"]
[Tue Apr 14 22:50:47.252181 2026] [:error] [pid 3778:tid 3793] [client 8.229.173.94:61490] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ad5URxx5DfpNmYF_PaEFzAAAAU0"]
[Tue Apr 14 22:50:47.607896 2026] [:error] [pid 3778:tid 3786] [client 8.229.173.94:52643] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ad5URxx5DfpNmYF_PaEFzQAAAUY"]
[Tue Apr 14 22:50:47.957405 2026] [:error] [pid 3778:tid 3794] [client 8.229.173.94:62001] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ad5URxx5DfpNmYF_PaEF0AAAAU4"]
[Tue Apr 14 22:50:48.326882 2026] [:error] [pid 59987:tid 60050] [client 8.229.173.94:50919] [client 8.229.173.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ad5USFWpk-Tfi6_vLKpNuQAAAIM"]
[Wed Apr 15 01:00:15.250042 2026] [proxy_fcgi:error] [pid 17734:tid 17743] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:15.759260 2026] [proxy_fcgi:error] [pid 17734:tid 17740] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:16.015814 2026] [proxy_fcgi:error] [pid 17734:tid 17753] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:16.272115 2026] [proxy_fcgi:error] [pid 17734:tid 17759] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:16.526719 2026] [proxy_fcgi:error] [pid 17734:tid 17756] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:16.780887 2026] [proxy_fcgi:error] [pid 17734:tid 17751] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:17.035317 2026] [proxy_fcgi:error] [pid 17734:tid 17744] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:17.290975 2026] [proxy_fcgi:error] [pid 17734:tid 17741] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:17.548396 2026] [proxy_fcgi:error] [pid 17734:tid 17757] [client 20.107.203.74:39217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:00:17.799264 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:39217] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad5yodN3xsztF3DFLWz6KgAAAJc"]
[Wed Apr 15 01:00:18.321782 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:18329] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad5yotN3xsztF3DFLWz6KwAAAIk"]
[Wed Apr 15 01:00:18.827643 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:62744] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad5yorPtNET7V_vfTPfNswAAAVY"]
[Wed Apr 15 01:00:19.331053 2026] [:error] [pid 62297:tid 62365] [client 20.107.203.74:3559] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad5yo6vogcWlrafOEaG5iAAAAQs"]
[Wed Apr 15 01:00:19.851905 2026] [:error] [pid 62296:tid 62338] [client 20.107.203.74:51658] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad5yo8TNd04nWM2DK4SA-wAAAEs"]
[Wed Apr 15 01:00:20.352628 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:57376] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad5ypKvogcWlrafOEaG5igAAAQY"]
[Wed Apr 15 01:00:20.870617 2026] [:error] [pid 62295:tid 62323] [client 20.107.203.74:24534] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad5ypBng-JDNFCa0BnhkpwAAABg"]
[Wed Apr 15 01:00:21.370346 2026] [:error] [pid 62297:tid 62358] [client 20.107.203.74:17280] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ad5ypavogcWlrafOEaG5jQAAAQQ"]
[Wed Apr 15 01:00:21.869810 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:55543] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ad5ypavogcWlrafOEaG5jwAAAQI"]
[Wed Apr 15 01:00:22.390363 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:55500] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ad5ypqvogcWlrafOEaG5kgAAARA"]
[Wed Apr 15 01:00:22.902540 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:18319] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ad5ypqvogcWlrafOEaG5lwAAARM"]
[Wed Apr 15 01:00:23.433437 2026] [:error] [pid 62432:tid 62445] [client 20.107.203.74:26443] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ad5yp7PtNET7V_vfTPfNvAAAAUo"]
[Wed Apr 15 01:00:23.939665 2026] [:error] [pid 17866:tid 17884] [client 20.107.203.74:57365] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ad5yp7x_17kv70EUVIlBoQAAAZA"]
[Wed Apr 15 01:00:24.464484 2026] [:error] [pid 17804:tid 17823] [client 20.107.203.74:19164] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ad5yqAAZKYxfpamecKd7fQAAAM0"]
[Wed Apr 15 01:00:24.965106 2026] [:error] [pid 17804:tid 17834] [client 20.107.203.74:36044] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ad5yqAAZKYxfpamecKd7fwAAANg"]
[Wed Apr 15 01:00:25.470118 2026] [:error] [pid 62432:tid 62450] [client 20.107.203.74:55594] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ad5yqbPtNET7V_vfTPfNxwAAAU8"]
[Wed Apr 15 01:00:25.971659 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:39243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ad5yqavogcWlrafOEaG5pwAAARc"]
[Wed Apr 15 01:00:26.474837 2026] [:error] [pid 62432:tid 62443] [client 20.107.203.74:3562] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ad5yqrPtNET7V_vfTPfNzgAAAUg"]
[Wed Apr 15 01:00:26.986888 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:55609] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ad5yqqvogcWlrafOEaG5rwAAARE"]
[Wed Apr 15 01:00:27.582582 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:51701] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ad5yq6vogcWlrafOEaG5swAAAQI"]
[Wed Apr 15 01:00:28.117900 2026] [:error] [pid 62296:tid 62328] [client 20.107.203.74:57375] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ad5yrMTNd04nWM2DK4SBBQAAAEE"]
[Wed Apr 15 01:00:28.695395 2026] [:error] [pid 62296:tid 62333] [client 20.107.203.74:39265] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ad5yrMTNd04nWM2DK4SBCAAAAEY"]
[Wed Apr 15 01:00:29.254861 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:30870] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ad5yrRng-JDNFCa0BnhktgAAABI"]
[Wed Apr 15 01:00:29.866939 2026] [:error] [pid 17866:tid 17870] [client 20.107.203.74:19168] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "ad5yrbx_17kv70EUVIlBtQAAAYI"]
[Wed Apr 15 01:00:30.422852 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:55509] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5yrhng-JDNFCa0BnhkugAAAAo"]
[Wed Apr 15 01:00:31.193228 2026] [:error] [pid 62296:tid 62334] [client 20.107.203.74:39243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5yr8TNd04nWM2DK4SBEgAAAEc"]
[Wed Apr 15 01:00:31.717311 2026] [:error] [pid 62296:tid 62343] [client 20.107.203.74:3539] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5yr8TNd04nWM2DK4SBFAAAAFA"]
[Wed Apr 15 01:00:32.249563 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:36070] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5ysKvogcWlrafOEaG53QAAAQg"]
[Wed Apr 15 01:00:32.789092 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:38925] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ad5ysBng-JDNFCa0BnhkxwAAABI"]
[Wed Apr 15 01:00:33.402917 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:19192] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ad5ysRng-JDNFCa0BnhkywAAAAI"]
[Wed Apr 15 01:00:34.084307 2026] [:error] [pid 17734:tid 17743] [client 20.107.203.74:51671] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ad5ystN3xsztF3DFLWz6NAAAAIQ"]
[Wed Apr 15 01:00:34.633456 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:36080] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ad5ystN3xsztF3DFLWz6NQAAAIE"]
[Wed Apr 15 01:00:35.165314 2026] [:error] [pid 17734:tid 17759] [client 20.107.203.74:51696] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ad5ys9N3xsztF3DFLWz6NgAAAJQ"]
[Wed Apr 15 01:00:35.775501 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:26474] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ad5ys6vogcWlrafOEaG58AAAARY"]
[Wed Apr 15 01:00:36.480725 2026] [:error] [pid 62432:tid 62435] [client 20.107.203.74:34779] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ad5ytLPtNET7V_vfTPfN2gAAAUA"]
[Wed Apr 15 01:00:37.331387 2026] [:error] [pid 17734:tid 17741] [client 20.107.203.74:55599] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "ad5ytdN3xsztF3DFLWz6OgAAAII"]
[Wed Apr 15 01:00:38.128481 2026] [:error] [pid 17926:tid 17940] [client 20.107.203.74:4065] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ad5ytvKxFvgDwMI04zBPxQAAAcc"]
[Wed Apr 15 01:00:38.697060 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:55543] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ad5ythng-JDNFCa0Bnhk6wAAAAE"]
[Wed Apr 15 01:00:39.304114 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:39255] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ad5ytxng-JDNFCa0Bnhk8gAAAAM"]
[Wed Apr 15 01:00:39.922316 2026] [:error] [pid 17804:tid 17820] [client 20.107.203.74:38935] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ad5ytwAZKYxfpamecKd7iwAAAMo"]
[Wed Apr 15 01:00:40.707518 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:55502] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ad5yuKvogcWlrafOEaG5_QAAAQk"]
[Wed Apr 15 01:00:41.427563 2026] [:error] [pid 62432:tid 62456] [client 20.107.203.74:55511] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ad5yubPtNET7V_vfTPfN6gAAAVU"]
[Wed Apr 15 01:00:42.040452 2026] [:error] [pid 62432:tid 62454] [client 20.107.203.74:32150] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ad5yurPtNET7V_vfTPfN7AAAAVM"]
[Wed Apr 15 01:00:42.648728 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:55569] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ad5yurPtNET7V_vfTPfN8QAAAUY"]
[Wed Apr 15 01:00:43.229343 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:55579] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5yu9N3xsztF3DFLWz6QAAAAIY"]
[Wed Apr 15 01:00:43.793173 2026] [:error] [pid 62297:tid 62365] [client 20.107.203.74:19151] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5yu6vogcWlrafOEaG6BwAAAQs"]
[Wed Apr 15 01:00:44.391452 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:32151] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5yvKvogcWlrafOEaG6CAAAAQ8"]
[Wed Apr 15 01:00:45.166455 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:34789] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5yvRng-JDNFCa0BnhlAgAAAA0"]
[Wed Apr 15 01:00:45.764019 2026] [:error] [pid 17804:tid 17826] [client 20.107.203.74:19158] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad5yvQAZKYxfpamecKd7jQAAANA"]
[Wed Apr 15 01:00:46.535323 2026] [:error] [pid 17804:tid 17831] [client 20.107.203.74:34781] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad5yvgAZKYxfpamecKd7kAAAANU"]
[Wed Apr 15 01:00:47.085913 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:39280] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad5yv6vogcWlrafOEaG6GQAAAQI"]
[Wed Apr 15 01:00:47.593870 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:21920] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad5yvxng-JDNFCa0BnhlCwAAAAg"]
[Wed Apr 15 01:00:48.108251 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:62104] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad5ywLPtNET7V_vfTPfN-wAAAVY"]
[Wed Apr 15 01:00:48.623483 2026] [:error] [pid 17926:tid 17942] [client 20.107.203.74:34767] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad5ywPKxFvgDwMI04zBP1QAAAck"]
[Wed Apr 15 01:00:49.146820 2026] [:error] [pid 62295:tid 62314] [client 20.107.203.74:57405] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad5ywRng-JDNFCa0BnhlEwAAAA8"]
[Wed Apr 15 01:00:49.669501 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:27406] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ad5ywRng-JDNFCa0BnhlFgAAAAs"]
[Wed Apr 15 01:00:50.299627 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:21894] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ad5ywhng-JDNFCa0BnhlGQAAAAo"]
[Wed Apr 15 01:00:50.837579 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:39263] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ad5ywhng-JDNFCa0BnhlHAAAABc"]
[Wed Apr 15 01:00:51.472754 2026] [:error] [pid 17926:tid 17934] [client 20.107.203.74:24899] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ad5yw_KxFvgDwMI04zBP2wAAAcE"]
[Wed Apr 15 01:00:52.101114 2026] [:error] [pid 62432:tid 62448] [client 20.107.203.74:4072] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "ad5yxLPtNET7V_vfTPfOAAAAAU0"]
[Wed Apr 15 01:00:52.658987 2026] [:error] [pid 62432:tid 62442] [client 20.107.203.74:56830] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ad5yxLPtNET7V_vfTPfOBQAAAUc"]
[Wed Apr 15 01:00:53.281998 2026] [:error] [pid 17926:tid 17943] [client 20.107.203.74:29018] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ad5yxfKxFvgDwMI04zBP5AAAAco"]
[Wed Apr 15 01:00:53.819857 2026] [:error] [pid 17804:tid 17829] [client 20.107.203.74:21902] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ad5yxQAZKYxfpamecKd7mQAAANM"]
[Wed Apr 15 01:00:54.457702 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:17814] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ad5yxhng-JDNFCa0BnhlJQAAAAM"]
[Wed Apr 15 01:00:55.252720 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:24896] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad5yxxng-JDNFCa0BnhlKwAAAAU"]
[Wed Apr 15 01:00:55.933426 2026] [:error] [pid 62295:tid 62314] [client 20.107.203.74:41729] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad5yxxng-JDNFCa0BnhlLQAAAA8"]
[Wed Apr 15 01:00:56.781908 2026] [:error] [pid 17926:tid 17957] [client 20.107.203.74:21596] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad5yyPKxFvgDwMI04zBP6wAAAdg"]
[Wed Apr 15 01:00:57.352186 2026] [:error] [pid 17926:tid 17948] [client 20.107.203.74:17799] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ad5yyfKxFvgDwMI04zBP8AAAAc8"]
[Wed Apr 15 01:00:58.096808 2026] [:error] [pid 17804:tid 17832] [client 20.107.203.74:37350] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad5yygAZKYxfpamecKd7ngAAANY"]
[Wed Apr 15 01:00:58.704051 2026] [:error] [pid 62432:tid 62435] [client 20.107.203.74:62151] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad5yyrPtNET7V_vfTPfOFgAAAUA"]
[Wed Apr 15 01:00:59.294940 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:17582] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad5yy6vogcWlrafOEaG6IAAAAQg"]
[Wed Apr 15 01:00:59.901530 2026] [:error] [pid 62432:tid 62440] [client 20.107.203.74:38647] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ad5yy7PtNET7V_vfTPfOHAAAAUU"]
[Wed Apr 15 01:01:00.483675 2026] [:error] [pid 62432:tid 62449] [client 20.107.203.74:62151] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ad5yzLPtNET7V_vfTPfOHgAAAU4"]
[Wed Apr 15 01:01:01.169708 2026] [:error] [pid 62432:tid 62456] [client 20.107.203.74:21195] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ad5yzbPtNET7V_vfTPfOIwAAAVU"]
[Wed Apr 15 01:01:01.839977 2026] [:error] [pid 17804:tid 17827] [client 20.107.203.74:51077] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ad5yzQAZKYxfpamecKd7oQAAANE"]
[Wed Apr 15 01:01:02.425624 2026] [:error] [pid 17866:tid 17885] [client 20.107.203.74:38639] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ad5yzrx_17kv70EUVIlBwgAAAZE"]
[Wed Apr 15 01:01:03.152545 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:41746] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad5yzxng-JDNFCa0BnhlOwAAAAM"]
[Wed Apr 15 01:01:03.727006 2026] [:error] [pid 62295:tid 62316] [client 20.107.203.74:51125] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad5yzxng-JDNFCa0BnhlPgAAABE"]
[Wed Apr 15 01:01:04.310725 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:21229] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad5y0PKxFvgDwMI04zBP-wAAAdQ"]
[Wed Apr 15 01:01:04.845115 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:3714] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ad5y0KvogcWlrafOEaG6KQAAAQM"]
[Wed Apr 15 01:01:05.411280 2026] [:error] [pid 17926:tid 17937] [client 20.107.203.74:30927] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ad5y0fKxFvgDwMI04zBP_gAAAcQ"]
[Wed Apr 15 01:01:06.122881 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:17151] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ad5y0qvogcWlrafOEaG6LQAAARM"]
[Wed Apr 15 01:01:06.898345 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:43534] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ad5y0qvogcWlrafOEaG6MAAAAQg"]
[Wed Apr 15 01:01:07.707062 2026] [:error] [pid 62296:tid 62330] [client 20.107.203.74:44277] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ad5y08TNd04nWM2DK4SBLgAAAEM"]
[Wed Apr 15 01:01:08.294871 2026] [:error] [pid 62296:tid 62346] [client 20.107.203.74:23026] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ad5y1MTNd04nWM2DK4SBMQAAAFM"]
[Wed Apr 15 01:01:09.240129 2026] [:error] [pid 62432:tid 62444] [client 20.107.203.74:51081] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ad5y1bPtNET7V_vfTPfOPAAAAUk"]
[Wed Apr 15 01:01:10.082931 2026] [:error] [pid 17734:tid 17750] [client 20.107.203.74:20039] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ad5y1tN3xsztF3DFLWz6TAAAAIs"]
[Wed Apr 15 01:01:10.973505 2026] [:error] [pid 17804:tid 17831] [client 20.107.203.74:45525] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ad5y1gAZKYxfpamecKd7rgAAANU"]
[Wed Apr 15 01:01:11.606546 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:3915] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ad5y16vogcWlrafOEaG6MwAAARY"]
[Wed Apr 15 01:01:12.296804 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:3238] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ad5y2LPtNET7V_vfTPfOPwAAAVY"]
[Wed Apr 15 01:01:13.164631 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:50387] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ad5y2avogcWlrafOEaG6OgAAARc"]
[Wed Apr 15 01:01:13.992455 2026] [:error] [pid 62432:tid 62455] [client 20.107.203.74:3922] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ad5y2bPtNET7V_vfTPfOQwAAAVQ"]
[Wed Apr 15 01:01:14.644911 2026] [:error] [pid 17804:tid 17821] [client 20.107.203.74:3944] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ad5y2gAZKYxfpamecKd7tQAAAMs"]
[Wed Apr 15 01:01:15.489556 2026] [:error] [pid 62295:tid 62308] [client 20.107.203.74:42332] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ad5y2xng-JDNFCa0BnhlVAAAAAk"]
[Wed Apr 15 01:01:16.759710 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:20020] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ad5y3Bng-JDNFCa0BnhlYAAAAAA"]
[Wed Apr 15 01:01:17.476834 2026] [proxy_fcgi:error] [pid 62297:tid 62358] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:17.730372 2026] [proxy_fcgi:error] [pid 62297:tid 62365] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:18.149422 2026] [proxy_fcgi:error] [pid 62297:tid 62354] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:18.708441 2026] [proxy_fcgi:error] [pid 62297:tid 62378] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:19.239039 2026] [proxy_fcgi:error] [pid 62297:tid 62361] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:19.511079 2026] [proxy_fcgi:error] [pid 62297:tid 62355] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:19.769711 2026] [proxy_fcgi:error] [pid 62297:tid 62359] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:20.030298 2026] [proxy_fcgi:error] [pid 62297:tid 62358] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:20.283724 2026] [proxy_fcgi:error] [pid 62297:tid 62374] [client 20.107.203.74:50381] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:01:20.571643 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:50381] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad5y4KvogcWlrafOEaG6YwAAARU"]
[Wed Apr 15 01:01:21.503660 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:44212] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad5y4avogcWlrafOEaG6aQAAARg"]
[Wed Apr 15 01:01:22.959174 2026] [:error] [pid 62296:tid 62332] [client 20.107.203.74:3099] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad5y4sTNd04nWM2DK4SBPgAAAEU"]
[Wed Apr 15 01:01:23.611626 2026] [:error] [pid 17804:tid 17830] [client 20.107.203.74:3090] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad5y4wAZKYxfpamecKd72AAAANQ"]
[Wed Apr 15 01:01:24.266182 2026] [:error] [pid 62297:tid 62358] [client 20.107.203.74:44187] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ad5y5KvogcWlrafOEaG6gwAAAQQ"]
[Wed Apr 15 01:01:25.711466 2026] [:error] [pid 17866:tid 17868] [client 20.107.203.74:3889] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ad5y5bx_17kv70EUVIlB0QAAAYA"]
[Wed Apr 15 01:01:26.969357 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:19428] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ad5y5qvogcWlrafOEaG6iAAAARM"]
[Wed Apr 15 01:01:28.251294 2026] [:error] [pid 62432:tid 62445] [client 20.107.203.74:3682] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ad5y6LPtNET7V_vfTPfOTQAAAUo"]
[Wed Apr 15 01:01:29.104155 2026] [:error] [pid 62296:tid 62337] [client 20.107.203.74:56190] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ad5y6cTNd04nWM2DK4SBTAAAAEo"]
[Wed Apr 15 01:01:29.933087 2026] [:error] [pid 17804:tid 17818] [client 20.107.203.74:18826] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ad5y6QAZKYxfpamecKd72wAAAMg"]
[Wed Apr 15 01:01:31.335266 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:19439] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ad5y6xng-JDNFCa0BnhljwAAAAY"]
[Wed Apr 15 01:01:32.645086 2026] [:error] [pid 17926:tid 17955] [client 20.107.203.74:18858] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "ad5y7PKxFvgDwMI04zBQDAAAAdY"]
[Wed Apr 15 01:01:33.465009 2026] [:error] [pid 17926:tid 17934] [client 20.107.203.74:23685] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ad5y7fKxFvgDwMI04zBQFwAAAcE"]
[Wed Apr 15 01:01:34.686324 2026] [:error] [pid 17734:tid 17763] [client 20.107.203.74:56155] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ad5y7tN3xsztF3DFLWz6dQAAAJg"]
[Wed Apr 15 01:01:35.683854 2026] [:error] [pid 62296:tid 62339] [client 20.107.203.74:3793] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ad5y78TNd04nWM2DK4SBVwAAAEw"]
[Wed Apr 15 01:01:36.645985 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:19406] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ad5y8KvogcWlrafOEaG6pgAAAQI"]
[Wed Apr 15 01:01:37.205950 2026] [:error] [pid 62296:tid 62331] [client 20.107.203.74:18418] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "ad5y8cTNd04nWM2DK4SBXAAAAEQ"]
[Wed Apr 15 01:01:37.830533 2026] [:error] [pid 62432:tid 62447] [client 20.107.203.74:51039] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "ad5y8bPtNET7V_vfTPfOUQAAAUw"]
[Wed Apr 15 01:01:38.402168 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:56166] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "ad5y8hng-JDNFCa0BnhllAAAAAs"]
[Wed Apr 15 01:01:39.163112 2026] [:error] [pid 62432:tid 62450] [client 20.107.203.74:3812] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "ad5y87PtNET7V_vfTPfOUgAAAU8"]
[Wed Apr 15 01:01:39.754883 2026] [:error] [pid 62297:tid 62366] [client 20.107.203.74:28375] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "ad5y86vogcWlrafOEaG6rAAAAQw"]
[Wed Apr 15 01:01:40.409880 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:18827] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "ad5y9KvogcWlrafOEaG6sAAAARM"]
[Wed Apr 15 01:01:41.015872 2026] [:error] [pid 62432:tid 62454] [client 20.107.203.74:37276] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "ad5y9bPtNET7V_vfTPfOUwAAAVM"]
[Wed Apr 15 01:01:41.663988 2026] [:error] [pid 17804:tid 17823] [client 20.107.203.74:21182] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "ad5y9QAZKYxfpamecKd75QAAAM0"]
[Wed Apr 15 01:01:42.634590 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:51037] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "ad5y9tN3xsztF3DFLWz6gQAAAIY"]
[Wed Apr 15 01:01:43.196957 2026] [:error] [pid 62296:tid 62349] [client 20.107.203.74:28396] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "ad5y98TNd04nWM2DK4SBbQAAAFY"]
[Wed Apr 15 01:01:44.360989 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:37268] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "ad5y-NN3xsztF3DFLWz6jQAAAJA"]
[Wed Apr 15 01:01:45.141835 2026] [:error] [pid 17734:tid 17742] [client 20.107.203.74:23400] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zample.php"] [unique_id "ad5y-dN3xsztF3DFLWz6jwAAAIM"]
[Wed Apr 15 01:01:45.736147 2026] [:error] [pid 17734:tid 17754] [client 20.107.203.74:23361] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad5y-dN3xsztF3DFLWz6kwAAAI8"]
[Wed Apr 15 01:01:46.484751 2026] [:error] [pid 62432:tid 62459] [client 20.107.203.74:35977] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad5y-rPtNET7V_vfTPfOWQAAAVg"]
[Wed Apr 15 01:01:47.690545 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:56765] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad5y-9N3xsztF3DFLWz6lQAAAJY"]
[Wed Apr 15 01:01:48.517887 2026] [:error] [pid 17804:tid 17825] [client 20.107.203.74:31576] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "ad5y_AAZKYxfpamecKd77QAAAM8"]
[Wed Apr 15 01:01:49.224987 2026] [:error] [pid 17926:tid 17952] [client 20.107.203.74:31588] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ad5y_fKxFvgDwMI04zBQRgAAAdM"]
[Wed Apr 15 01:01:50.158117 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:17795] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ad5y_rPtNET7V_vfTPfOZwAAAVI"]
[Wed Apr 15 01:01:51.096140 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:31601] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ad5y_9N3xsztF3DFLWz6mgAAAI4"]
[Wed Apr 15 01:01:51.990830 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:33437] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ad5y_9N3xsztF3DFLWz6nQAAAIk"]
[Wed Apr 15 01:01:52.711706 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:26950] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ad5zAKvogcWlrafOEaG6wQAAARc"]
[Wed Apr 15 01:01:53.472037 2026] [:error] [pid 62432:tid 62451] [client 20.107.203.74:28916] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ad5zAbPtNET7V_vfTPfOeQAAAVA"]
[Wed Apr 15 01:01:54.258276 2026] [:error] [pid 17926:tid 17955] [client 20.107.203.74:20458] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ad5zAvKxFvgDwMI04zBQTwAAAdY"]
[Wed Apr 15 01:01:54.897397 2026] [:error] [pid 62297:tid 62358] [client 20.107.203.74:38578] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ad5zAqvogcWlrafOEaG60AAAAQQ"]
[Wed Apr 15 01:01:56.101732 2026] [:error] [pid 17804:tid 17814] [client 20.107.203.74:38531] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ad5zBAAZKYxfpamecKd79QAAAMQ"]
[Wed Apr 15 01:01:57.347969 2026] [:error] [pid 62432:tid 62436] [client 20.107.203.74:20470] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ad5zBbPtNET7V_vfTPfOfQAAAUE"]
[Wed Apr 15 01:01:58.289328 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:26996] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ad5zBhng-JDNFCa0BnhlqAAAABU"]
[Wed Apr 15 01:01:59.602098 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:31530] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ad5zB7PtNET7V_vfTPfOfgAAAVY"]
[Wed Apr 15 01:02:00.653203 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:23410] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zCBng-JDNFCa0BnhlsQAAAAw"]
[Wed Apr 15 01:02:01.948546 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:20460] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zCRng-JDNFCa0BnhlugAAAAI"]
[Wed Apr 15 01:02:02.672876 2026] [:error] [pid 62295:tid 62319] [client 20.107.203.74:36024] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zChng-JDNFCa0BnhlwAAAABQ"]
[Wed Apr 15 01:02:04.134680 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:17796] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zDBng-JDNFCa0BnhlywAAAA0"]
[Wed Apr 15 01:02:04.813401 2026] [:error] [pid 17866:tid 17876] [client 20.107.203.74:31556] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad5zDLx_17kv70EUVIlB9AAAAYg"]
[Wed Apr 15 01:02:08.649652 2026] [:error] [pid 62432:tid 62437] [client 20.107.203.74:17810] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad5zELPtNET7V_vfTPfOgwAAAUI"]
[Wed Apr 15 01:02:09.505353 2026] [:error] [pid 62297:tid 62374] [client 20.107.203.74:3601] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad5zEavogcWlrafOEaG63gAAARQ"]
[Wed Apr 15 01:02:10.577665 2026] [:error] [pid 62297:tid 62361] [client 20.107.203.74:38540] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad5zEqvogcWlrafOEaG65QAAAQc"]
[Wed Apr 15 01:02:11.551168 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:38573] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5zExng-JDNFCa0Bnhl5wAAAAs"]
[Wed Apr 15 01:02:12.491353 2026] [:error] [pid 17866:tid 17891] [client 20.107.203.74:33457] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5zFLx_17kv70EUVIlB-gAAAZc"]
[Wed Apr 15 01:02:13.240500 2026] [:error] [pid 62432:tid 62442] [client 20.107.203.74:49794] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5zFbPtNET7V_vfTPfOigAAAUc"]
[Wed Apr 15 01:02:14.102218 2026] [:error] [pid 17926:tid 17936] [client 20.107.203.74:33438] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5zFvKxFvgDwMI04zBQYgAAAcM"]
[Wed Apr 15 01:02:14.839601 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:16585] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ad5zFrPtNET7V_vfTPfOjQAAAVY"]
[Wed Apr 15 01:02:15.489731 2026] [:error] [pid 62432:tid 62447] [client 20.107.203.74:38539] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ad5zF7PtNET7V_vfTPfOjwAAAUw"]
[Wed Apr 15 01:02:16.145796 2026] [:error] [pid 62296:tid 62330] [client 20.107.203.74:49799] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ad5zGMTNd04nWM2DK4SBhwAAAEM"]
[Wed Apr 15 01:02:16.759937 2026] [:error] [pid 17866:tid 17889] [client 20.107.203.74:31539] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ad5zGLx_17kv70EUVIlCCQAAAZU"]
[Wed Apr 15 01:02:17.393915 2026] [:error] [pid 17926:tid 17938] [client 20.107.203.74:44282] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ad5zGfKxFvgDwMI04zBQZAAAAcU"]
[Wed Apr 15 01:02:18.019461 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:16535] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ad5zGtN3xsztF3DFLWz6xAAAAIA"]
[Wed Apr 15 01:02:18.692618 2026] [:error] [pid 17926:tid 17933] [client 20.107.203.74:20473] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ad5zGvKxFvgDwMI04zBQZQAAAcA"]
[Wed Apr 15 01:02:19.462403 2026] [:error] [pid 62296:tid 62332] [client 20.107.203.74:20353] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ad5zG8TNd04nWM2DK4SBiwAAAEU"]
[Wed Apr 15 01:02:20.077400 2026] [proxy_fcgi:error] [pid 62296:tid 62333] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:20.394810 2026] [proxy_fcgi:error] [pid 62296:tid 62334] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:20.649389 2026] [proxy_fcgi:error] [pid 62296:tid 62328] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:20.904259 2026] [proxy_fcgi:error] [pid 62296:tid 62339] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:21.411852 2026] [proxy_fcgi:error] [pid 62296:tid 62347] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:21.668044 2026] [proxy_fcgi:error] [pid 62296:tid 62341] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:21.922878 2026] [proxy_fcgi:error] [pid 62296:tid 62351] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:22.192456 2026] [proxy_fcgi:error] [pid 62296:tid 62327] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:22.508533 2026] [proxy_fcgi:error] [pid 62296:tid 62331] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:22.792924 2026] [proxy_fcgi:error] [pid 62296:tid 62336] [client 20.107.203.74:28918] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:02:23.043777 2026] [:error] [pid 62296:tid 62345] [client 20.107.203.74:28918] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ad5zH8TNd04nWM2DK4SBogAAAFI"]
[Wed Apr 15 01:02:23.749866 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:16548] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ad5zH6vogcWlrafOEaG7CwAAAQ8"]
[Wed Apr 15 01:02:24.272686 2026] [:error] [pid 62297:tid 62359] [client 20.107.203.74:35991] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ad5zIKvogcWlrafOEaG7EwAAAQU"]
[Wed Apr 15 01:02:25.005758 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:46089] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "ad5zIRng-JDNFCa0BnhmFgAAAAY"]
[Wed Apr 15 01:02:25.767571 2026] [:error] [pid 17866:tid 17875] [client 20.107.203.74:34056] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zIbx_17kv70EUVIlCFwAAAYc"]
[Wed Apr 15 01:02:26.611224 2026] [:error] [pid 17866:tid 17878] [client 20.107.203.74:49843] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zIrx_17kv70EUVIlCGgAAAYo"]
[Wed Apr 15 01:02:27.881310 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:44252] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zIxng-JDNFCa0BnhmHwAAAAc"]
[Wed Apr 15 01:02:28.785309 2026] [:error] [pid 17926:tid 17948] [client 20.107.203.74:44272] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zJPKxFvgDwMI04zBQdwAAAc8"]
[Wed Apr 15 01:02:29.468505 2026] [:error] [pid 62295:tid 62308] [client 20.107.203.74:17358] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5zJRng-JDNFCa0BnhmLQAAAAk"]
[Wed Apr 15 01:02:30.062394 2026] [:error] [pid 17734:tid 17750] [client 20.107.203.74:17348] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5zJtN3xsztF3DFLWz6xgAAAIs"]
[Wed Apr 15 01:02:30.738578 2026] [:error] [pid 17926:tid 17955] [client 20.107.203.74:20417] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5zJvKxFvgDwMI04zBQfQAAAdY"]
[Wed Apr 15 01:02:31.466262 2026] [:error] [pid 17926:tid 17938] [client 20.107.203.74:20415] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5zJ_KxFvgDwMI04zBQiQAAAcU"]
[Wed Apr 15 01:02:32.170060 2026] [:error] [pid 17926:tid 17951] [client 20.107.203.74:46102] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ad5zKPKxFvgDwMI04zBQjAAAAdI"]
[Wed Apr 15 01:02:32.894958 2026] [:error] [pid 17866:tid 17873] [client 20.107.203.74:20389] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ad5zKLx_17kv70EUVIlCGwAAAYU"]
[Wed Apr 15 01:02:34.145087 2026] [:error] [pid 17866:tid 17872] [client 20.107.203.74:20443] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ad5zKrx_17kv70EUVIlCHQAAAYQ"]
[Wed Apr 15 01:02:35.187331 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:17372] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "ad5zK7PtNET7V_vfTPfOpwAAAVI"]
[Wed Apr 15 01:02:35.791095 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:46128] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ad5zKxng-JDNFCa0BnhmPQAAABc"]
[Wed Apr 15 01:02:36.454159 2026] [:error] [pid 17926:tid 17955] [client 20.107.203.74:20411] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ad5zLPKxFvgDwMI04zBQkAAAAdY"]
[Wed Apr 15 01:02:37.031773 2026] [:error] [pid 17804:tid 17814] [client 20.107.203.74:20474] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ad5zLQAZKYxfpamecKd8FQAAAMQ"]
[Wed Apr 15 01:02:37.667421 2026] [:error] [pid 17804:tid 17833] [client 20.107.203.74:20452] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ad5zLQAZKYxfpamecKd8HAAAANc"]
[Wed Apr 15 01:02:38.312622 2026] [:error] [pid 62432:tid 62454] [client 20.107.203.74:20436] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ad5zLrPtNET7V_vfTPfOtAAAAVM"]
[Wed Apr 15 01:02:38.879525 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:44267] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ad5zLtN3xsztF3DFLWz60QAAAIo"]
[Wed Apr 15 01:02:39.796883 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:17401] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ad5zL9N3xsztF3DFLWz61QAAAJY"]
[Wed Apr 15 01:02:40.394659 2026] [:error] [pid 17926:tid 17944] [client 20.107.203.74:16603] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ad5zMPKxFvgDwMI04zBQmAAAAcs"]
[Wed Apr 15 01:02:41.042684 2026] [:error] [pid 62296:tid 62345] [client 20.107.203.74:38558] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ad5zMcTNd04nWM2DK4SBugAAAFI"]
[Wed Apr 15 01:02:41.691471 2026] [:error] [pid 62296:tid 62343] [client 20.107.203.74:46108] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ad5zMcTNd04nWM2DK4SBwQAAAFA"]
[Wed Apr 15 01:02:42.280522 2026] [:error] [pid 17866:tid 17871] [client 20.107.203.74:17399] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ad5zMrx_17kv70EUVIlCMwAAAYM"]
[Wed Apr 15 01:02:43.092933 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:46084] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "ad5zM9N3xsztF3DFLWz62QAAAI4"]
[Wed Apr 15 01:02:43.881304 2026] [:error] [pid 17804:tid 17824] [client 20.107.203.74:33412] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ad5zMwAZKYxfpamecKd8MgAAAM4"]
[Wed Apr 15 01:02:44.435330 2026] [:error] [pid 17804:tid 17821] [client 20.107.203.74:34110] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ad5zNAAZKYxfpamecKd8NQAAAMs"]
[Wed Apr 15 01:02:45.235441 2026] [:error] [pid 17734:tid 17763] [client 20.107.203.74:25309] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ad5zNdN3xsztF3DFLWz63AAAAJg"]
[Wed Apr 15 01:02:45.865459 2026] [:error] [pid 17926:tid 17944] [client 20.107.203.74:20407] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "ad5zNfKxFvgDwMI04zBQrAAAAcs"]
[Wed Apr 15 01:02:46.493532 2026] [:error] [pid 62295:tid 62313] [client 20.107.203.74:44271] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5zNhng-JDNFCa0BnhmRQAAAA4"]
[Wed Apr 15 01:02:47.174629 2026] [:error] [pid 17926:tid 17945] [client 20.107.203.74:16587] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5zN_KxFvgDwMI04zBQrQAAAcw"]
[Wed Apr 15 01:02:47.823894 2026] [:error] [pid 17866:tid 17891] [client 20.107.203.74:17367] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5zN7x_17kv70EUVIlCQgAAAZc"]
[Wed Apr 15 01:02:48.474289 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:28905] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5zOBng-JDNFCa0BnhmRgAAABI"]
[Wed Apr 15 01:02:49.596025 2026] [:error] [pid 17804:tid 17819] [client 20.107.203.74:17361] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5zOQAZKYxfpamecKd8PQAAAMk"]
[Wed Apr 15 01:02:50.411602 2026] [:error] [pid 17734:tid 17763] [client 20.107.203.74:16588] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5zOtN3xsztF3DFLWz67gAAAJg"]
[Wed Apr 15 01:02:51.041623 2026] [:error] [pid 62296:tid 62341] [client 20.107.203.74:20438] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5zO8TNd04nWM2DK4SB0wAAAE4"]
[Wed Apr 15 01:02:51.858843 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:49825] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5zOxng-JDNFCa0BnhmVgAAAAE"]
[Wed Apr 15 01:02:52.495693 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:31525] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zPBng-JDNFCa0BnhmWwAAABI"]
[Wed Apr 15 01:02:53.187523 2026] [:error] [pid 17734:tid 17744] [client 20.107.203.74:44235] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zPdN3xsztF3DFLWz68gAAAIU"]
[Wed Apr 15 01:02:54.194071 2026] [:error] [pid 62295:tid 62314] [client 20.107.203.74:20437] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zPhng-JDNFCa0BnhmYgAAAA8"]
[Wed Apr 15 01:02:54.795935 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:21506] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5zPhng-JDNFCa0BnhmZQAAAAU"]
[Wed Apr 15 01:02:55.338165 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:31520] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ad5zPxng-JDNFCa0BnhmawAAAAQ"]
[Wed Apr 15 01:02:55.864681 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:28912] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ad5zP7PtNET7V_vfTPfO0AAAAVY"]
[Wed Apr 15 01:02:56.410023 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:16612] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ad5zQKvogcWlrafOEaG7PwAAARY"]
[Wed Apr 15 01:02:57.078051 2026] [:error] [pid 62296:tid 62344] [client 20.107.203.74:3772] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ad5zQcTNd04nWM2DK4SB1QAAAFE"]
[Wed Apr 15 01:02:57.671128 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:17381] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ad5zQRng-JDNFCa0BnhmegAAAAU"]
[Wed Apr 15 01:02:58.470662 2026] [:error] [pid 62297:tid 62372] [client 20.107.203.74:17394] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ad5zQqvogcWlrafOEaG7RQAAARI"]
[Wed Apr 15 01:02:59.188962 2026] [:error] [pid 62297:tid 62354] [client 20.107.203.74:3749] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ad5zQ6vogcWlrafOEaG7RwAAAQA"]
[Wed Apr 15 01:03:00.164057 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:46098] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ad5zRKvogcWlrafOEaG7SwAAAQg"]
[Wed Apr 15 01:03:01.169141 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:19371] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zRavogcWlrafOEaG7UAAAARc"]
[Wed Apr 15 01:03:02.105207 2026] [:error] [pid 17804:tid 17832] [client 20.107.203.74:45478] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zRgAZKYxfpamecKd8RgAAANY"]
[Wed Apr 15 01:03:02.755080 2026] [:error] [pid 17866:tid 17872] [client 20.107.203.74:45486] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zRrx_17kv70EUVIlCVAAAAYQ"]
[Wed Apr 15 01:03:03.422827 2026] [:error] [pid 62432:tid 62443] [client 20.107.203.74:56254] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ad5zR7PtNET7V_vfTPfO2QAAAUg"]
[Wed Apr 15 01:03:04.482192 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:17386] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zSKvogcWlrafOEaG7XgAAARY"]
[Wed Apr 15 01:03:05.143746 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:20862] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zSavogcWlrafOEaG7YAAAAQI"]
[Wed Apr 15 01:03:05.790209 2026] [:error] [pid 17926:tid 17951] [client 20.107.203.74:16624] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zSfKxFvgDwMI04zBQ6AAAAdI"]
[Wed Apr 15 01:03:06.463575 2026] [:error] [pid 62297:tid 62358] [client 20.107.203.74:44258] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5zSqvogcWlrafOEaG7ZgAAAQQ"]
[Wed Apr 15 01:03:07.268338 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:17355] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zSxng-JDNFCa0BnhmnwAAAAc"]
[Wed Apr 15 01:03:07.969398 2026] [:error] [pid 62295:tid 62323] [client 20.107.203.74:3757] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zSxng-JDNFCa0BnhmpQAAABg"]
[Wed Apr 15 01:03:08.984689 2026] [:error] [pid 17926:tid 17947] [client 20.107.203.74:16591] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zTPKxFvgDwMI04zBQ7AAAAc4"]
[Wed Apr 15 01:03:09.683917 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:56192] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5zTavogcWlrafOEaG7bwAAARg"]
[Wed Apr 15 01:03:10.245359 2026] [:error] [pid 17734:tid 17763] [client 20.107.203.74:56248] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zTtN3xsztF3DFLWz69AAAAJg"]
[Wed Apr 15 01:03:10.890966 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:56207] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zThng-JDNFCa0BnhmsgAAAAc"]
[Wed Apr 15 01:03:11.436686 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:25319] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zT9N3xsztF3DFLWz69wAAAIw"]
[Wed Apr 15 01:03:12.088125 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:46085] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zUNN3xsztF3DFLWz6-gAAAIY"]
[Wed Apr 15 01:03:12.738164 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:44253] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zUBng-JDNFCa0BnhmvQAAAAU"]
[Wed Apr 15 01:03:13.284907 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:56223] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zUavogcWlrafOEaG7hQAAAQ8"]
[Wed Apr 15 01:03:13.899074 2026] [:error] [pid 62297:tid 62364] [client 20.107.203.74:34106] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zUavogcWlrafOEaG7iwAAAQo"]
[Wed Apr 15 01:03:14.550686 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:20367] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad5zUtN3xsztF3DFLWz7AgAAAJA"]
[Wed Apr 15 01:03:15.341811 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:25295] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ad5zUxng-JDNFCa0BnhmxAAAAAM"]
[Wed Apr 15 01:03:15.953738 2026] [:error] [pid 17926:tid 17948] [client 20.107.203.74:20803] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ad5zU_KxFvgDwMI04zBQ9gAAAc8"]
[Wed Apr 15 01:03:16.874304 2026] [:error] [pid 62432:tid 62447] [client 20.107.203.74:56226] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ad5zVLPtNET7V_vfTPfO8wAAAUw"]
[Wed Apr 15 01:03:17.474701 2026] [:error] [pid 17866:tid 17880] [client 20.107.203.74:27461] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ad5zVbx_17kv70EUVIlCYQAAAYw"]
[Wed Apr 15 01:03:18.065207 2026] [:error] [pid 62297:tid 62367] [client 20.107.203.74:46122] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zVqvogcWlrafOEaG7rwAAAQ0"]
[Wed Apr 15 01:03:18.821391 2026] [:error] [pid 62432:tid 62446] [client 20.107.203.74:16576] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zVrPtNET7V_vfTPfO-QAAAUs"]
[Wed Apr 15 01:03:19.471564 2026] [:error] [pid 17734:tid 17746] [client 20.107.203.74:49837] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zV9N3xsztF3DFLWz7EwAAAIc"]
[Wed Apr 15 01:03:19.991728 2026] [:error] [pid 62296:tid 62331] [client 20.107.203.74:17364] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ad5zV8TNd04nWM2DK4SB7AAAAEQ"]
[Wed Apr 15 01:03:20.719285 2026] [:error] [pid 62295:tid 62323] [client 20.107.203.74:31518] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ad5zWBng-JDNFCa0BnhmyQAAABg"]
[Wed Apr 15 01:03:21.579010 2026] [:error] [pid 17866:tid 17887] [client 20.107.203.74:44257] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ad5zWbx_17kv70EUVIlCagAAAZM"]
[Wed Apr 15 01:03:22.136490 2026] [proxy_fcgi:error] [pid 62295:tid 62317] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:22.662459 2026] [proxy_fcgi:error] [pid 62295:tid 62306] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:23.179779 2026] [proxy_fcgi:error] [pid 62295:tid 62310] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:23.431937 2026] [proxy_fcgi:error] [pid 62295:tid 62323] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:23.686118 2026] [proxy_fcgi:error] [pid 62295:tid 62305] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:23.940511 2026] [proxy_fcgi:error] [pid 62295:tid 62321] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:24.273849 2026] [proxy_fcgi:error] [pid 62295:tid 62312] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:24.860556 2026] [proxy_fcgi:error] [pid 62295:tid 62314] [client 20.107.203.74:3717] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:03:25.110914 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:3717] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zXRng-JDNFCa0Bnhm6QAAAAM"]
[Wed Apr 15 01:03:25.662990 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:16601] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zXRng-JDNFCa0Bnhm7QAAAAw"]
[Wed Apr 15 01:03:26.489088 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:17380] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zXhng-JDNFCa0Bnhm-QAAABI"]
[Wed Apr 15 01:03:27.254563 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:16629] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5zXxng-JDNFCa0Bnhm_QAAAAc"]
[Wed Apr 15 01:03:27.877555 2026] [:error] [pid 17926:tid 17940] [client 20.107.203.74:27496] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad5zX_KxFvgDwMI04zBRAwAAAcc"]
[Wed Apr 15 01:03:28.634321 2026] [:error] [pid 17866:tid 17873] [client 20.107.203.74:27473] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad5zYLx_17kv70EUVIlCfQAAAYU"]
[Wed Apr 15 01:03:29.279576 2026] [:error] [pid 62432:tid 62448] [client 20.107.203.74:20456] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad5zYbPtNET7V_vfTPfPBQAAAU0"]
[Wed Apr 15 01:03:29.862759 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:20394] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "ad5zYRng-JDNFCa0BnhnBwAAAA0"]
[Wed Apr 15 01:03:30.414058 2026] [:error] [pid 62295:tid 62313] [client 20.107.203.74:56247] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ad5zYhng-JDNFCa0BnhnDQAAAA4"]
[Wed Apr 15 01:03:30.987329 2026] [:error] [pid 17866:tid 17875] [client 20.107.203.74:20832] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ad5zYrx_17kv70EUVIlCggAAAYc"]
[Wed Apr 15 01:03:31.516157 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:34076] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ad5zYxng-JDNFCa0BnhnGQAAABM"]
[Wed Apr 15 01:03:32.046170 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:26950] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ad5zZBng-JDNFCa0BnhnHgAAAA0"]
[Wed Apr 15 01:03:32.612915 2026] [:error] [pid 17926:tid 17933] [client 20.107.203.74:17359] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5zZPKxFvgDwMI04zBRCwAAAcA"]
[Wed Apr 15 01:03:33.250732 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:45500] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5zZRng-JDNFCa0BnhnKAAAAAo"]
[Wed Apr 15 01:03:33.843106 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:46141] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5zZavogcWlrafOEaG74QAAARc"]
[Wed Apr 15 01:03:34.438141 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:27472] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5zZqvogcWlrafOEaG75QAAARA"]
[Wed Apr 15 01:03:35.023993 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:34089] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zZ6vogcWlrafOEaG76wAAAQk"]
[Wed Apr 15 01:03:35.548647 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:44273] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zZxng-JDNFCa0BnhnNgAAAAM"]
[Wed Apr 15 01:03:36.059880 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:45445] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zaNN3xsztF3DFLWz7GgAAAJA"]
[Wed Apr 15 01:03:36.737410 2026] [:error] [pid 17926:tid 17938] [client 20.107.203.74:38572] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ad5zaPKxFvgDwMI04zBREwAAAcU"]
[Wed Apr 15 01:03:37.334480 2026] [:error] [pid 62296:tid 62332] [client 20.107.203.74:46080] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5zacTNd04nWM2DK4SCAQAAAEU"]
[Wed Apr 15 01:03:37.866838 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:34108] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5zaavogcWlrafOEaG79QAAAQE"]
[Wed Apr 15 01:03:38.407347 2026] [:error] [pid 62432:tid 62455] [client 20.107.203.74:56241] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5zarPtNET7V_vfTPfPDQAAAVQ"]
[Wed Apr 15 01:03:38.929398 2026] [:error] [pid 62296:tid 62335] [client 20.107.203.74:45473] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5zasTNd04nWM2DK4SCAgAAAEg"]
[Wed Apr 15 01:03:39.449950 2026] [:error] [pid 17866:tid 17880] [client 20.107.203.74:44242] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5za7x_17kv70EUVIlChwAAAYw"]
[Wed Apr 15 01:03:39.966904 2026] [:error] [pid 17734:tid 17743] [client 20.107.203.74:16616] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5za9N3xsztF3DFLWz7IgAAAIQ"]
[Wed Apr 15 01:03:40.674450 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:49813] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zbNN3xsztF3DFLWz7JQAAAIo"]
[Wed Apr 15 01:03:41.205038 2026] [:error] [pid 62296:tid 62346] [client 20.107.203.74:20767] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ad5zbcTNd04nWM2DK4SCBgAAAFM"]
[Wed Apr 15 01:03:41.727309 2026] [:error] [pid 17926:tid 17954] [client 20.107.203.74:45463] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ad5zbfKxFvgDwMI04zBRGAAAAdU"]
[Wed Apr 15 01:03:42.243417 2026] [:error] [pid 17926:tid 17956] [client 20.107.203.74:17377] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ad5zbvKxFvgDwMI04zBRGQAAAdc"]
[Wed Apr 15 01:03:42.747878 2026] [:error] [pid 17804:tid 17821] [client 20.107.203.74:49811] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ad5zbgAZKYxfpamecKd8VwAAAMs"]
[Wed Apr 15 01:03:43.291168 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:20816] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ad5zbxng-JDNFCa0BnhnRAAAAAw"]
[Wed Apr 15 01:03:43.818712 2026] [:error] [pid 62297:tid 62372] [client 20.107.203.74:46143] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ad5zb6vogcWlrafOEaG8FQAAARI"]
[Wed Apr 15 01:03:44.344368 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:45499] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ad5zcKvogcWlrafOEaG8HQAAARg"]
[Wed Apr 15 01:03:44.894636 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:16633] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ad5zcBng-JDNFCa0BnhnRwAAABM"]
[Wed Apr 15 01:03:45.453652 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:17363] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "ad5zcRng-JDNFCa0BnhnSAAAAAg"]
[Wed Apr 15 01:03:45.970866 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:56234] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ad5zcRng-JDNFCa0BnhnTAAAAAM"]
[Wed Apr 15 01:03:46.511530 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:38568] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ad5zchng-JDNFCa0BnhnUwAAAAI"]
[Wed Apr 15 01:03:47.075562 2026] [:error] [pid 17926:tid 17946] [client 20.107.203.74:21195] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ad5zc_KxFvgDwMI04zBRHAAAAc0"]
[Wed Apr 15 01:03:47.584691 2026] [:error] [pid 17926:tid 17937] [client 20.107.203.74:56251] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ad5zc_KxFvgDwMI04zBRHgAAAcQ"]
[Wed Apr 15 01:03:48.128201 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:17405] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ad5zdBng-JDNFCa0BnhnYQAAAAo"]
[Wed Apr 15 01:03:48.644150 2026] [:error] [pid 62295:tid 62313] [client 20.107.203.74:16638] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ad5zdBng-JDNFCa0BnhnZgAAAA4"]
[Wed Apr 15 01:03:49.168044 2026] [:error] [pid 62432:tid 62454] [client 20.107.203.74:34102] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ad5zdbPtNET7V_vfTPfPHwAAAVM"]
[Wed Apr 15 01:03:49.709221 2026] [:error] [pid 62432:tid 62436] [client 20.107.203.74:3748] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ad5zdbPtNET7V_vfTPfPIQAAAUE"]
[Wed Apr 15 01:03:50.235922 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:17375] [client 20.107.203.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad5zdhng-JDNFCa0BnhnbgAAAAg"]
[Wed Apr 15 01:03:50.801269 2026] [:error] [pid 62432:tid 62458] [client 20.107.203.74:49819] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad5zdrPtNET7V_vfTPfPJgAAAVc"]
[Wed Apr 15 01:03:51.304782 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:28878] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad5zd9N3xsztF3DFLWz7NQAAAJY"]
[Wed Apr 15 01:03:51.870039 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:44256] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad5zd6vogcWlrafOEaG8QQAAARY"]
[Wed Apr 15 01:03:52.469750 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:20776] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5zeKvogcWlrafOEaG8RQAAARg"]
[Wed Apr 15 01:03:53.025389 2026] [:error] [pid 62297:tid 62354] [client 20.107.203.74:34097] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5zeavogcWlrafOEaG8TAAAAQA"]
[Wed Apr 15 01:03:53.550761 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:17801] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5zeavogcWlrafOEaG8UAAAAQY"]
[Wed Apr 15 01:03:54.128361 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:16605] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5zetN3xsztF3DFLWz7SwAAAJY"]
[Wed Apr 15 01:03:54.631780 2026] [:error] [pid 62297:tid 62361] [client 20.107.203.74:20860] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5zeqvogcWlrafOEaG8XgAAAQc"]
[Wed Apr 15 01:03:55.204097 2026] [:error] [pid 62432:tid 62438] [client 20.107.203.74:44269] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5ze7PtNET7V_vfTPfPKwAAAUM"]
[Wed Apr 15 01:03:55.765636 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:34107] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5ze6vogcWlrafOEaG8awAAARU"]
[Wed Apr 15 01:03:56.425736 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:45443] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5zfKvogcWlrafOEaG8dAAAARM"]
[Wed Apr 15 01:03:57.024458 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:44280] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5zfRng-JDNFCa0BnhnfgAAABc"]
[Wed Apr 15 01:03:57.581089 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:34053] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5zfavogcWlrafOEaG8egAAARE"]
[Wed Apr 15 01:03:58.203711 2026] [:error] [pid 17804:tid 17829] [client 20.107.203.74:25327] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5zfgAZKYxfpamecKd8XwAAANM"]
[Wed Apr 15 01:03:58.825544 2026] [:error] [pid 62297:tid 62372] [client 20.107.203.74:20748] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5zfqvogcWlrafOEaG8gwAAARI"]
[Wed Apr 15 01:03:59.457924 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:32807] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ad5zfxng-JDNFCa0BnhnmwAAAAQ"]
[Wed Apr 15 01:04:00.037480 2026] [:error] [pid 62296:tid 62336] [client 20.107.203.74:20756] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ad5zgMTNd04nWM2DK4SCFAAAAEk"]
[Wed Apr 15 01:04:00.713901 2026] [:error] [pid 17804:tid 17811] [client 20.107.203.74:45489] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ad5zgAAZKYxfpamecKd8YQAAAME"]
[Wed Apr 15 01:04:01.390001 2026] [:error] [pid 62432:tid 62437] [client 20.107.203.74:32795] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ad5zgbPtNET7V_vfTPfPMwAAAUI"]
[Wed Apr 15 01:04:02.163719 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:44243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ad5zgqvogcWlrafOEaG8igAAARY"]
[Wed Apr 15 01:04:02.759799 2026] [:error] [pid 17866:tid 17876] [client 20.107.203.74:56246] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ad5zgrx_17kv70EUVIlCmAAAAYg"]
[Wed Apr 15 01:04:03.333536 2026] [:error] [pid 62297:tid 62366] [client 20.107.203.74:44270] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ad5zg6vogcWlrafOEaG8kQAAAQw"]
[Wed Apr 15 01:04:03.981198 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:28879] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "ad5zg6vogcWlrafOEaG8lwAAAQM"]
[Wed Apr 15 01:04:04.664880 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:3753] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ad5zhKvogcWlrafOEaG8nQAAARU"]
[Wed Apr 15 01:04:05.256297 2026] [:error] [pid 62296:tid 62341] [client 20.107.203.74:16628] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ad5zhcTNd04nWM2DK4SCIAAAAE4"]
[Wed Apr 15 01:04:05.827649 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:56198] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ad5zhdN3xsztF3DFLWz7hwAAAIE"]
[Wed Apr 15 01:04:06.398678 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:3730] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ad5zhtN3xsztF3DFLWz7kAAAAI4"]
[Wed Apr 15 01:04:06.983479 2026] [:error] [pid 17804:tid 17811] [client 20.107.203.74:3713] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ad5zhgAZKYxfpamecKd8cQAAAME"]
[Wed Apr 15 01:04:07.569822 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:44255] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ad5zh9N3xsztF3DFLWz7nwAAAJY"]
[Wed Apr 15 01:04:08.110810 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:45449] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ad5ziNN3xsztF3DFLWz7qQAAAIA"]
[Wed Apr 15 01:04:08.692596 2026] [:error] [pid 62432:tid 62456] [client 20.107.203.74:34058] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ad5ziLPtNET7V_vfTPfPUAAAAVU"]
[Wed Apr 15 01:04:09.306924 2026] [:error] [pid 17926:tid 17938] [client 20.107.203.74:46090] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ad5zifKxFvgDwMI04zBRLwAAAcU"]
[Wed Apr 15 01:04:09.819602 2026] [:error] [pid 62297:tid 62364] [client 20.107.203.74:44230] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ad5ziavogcWlrafOEaG8oQAAAQo"]
[Wed Apr 15 01:04:10.352644 2026] [:error] [pid 17926:tid 17957] [client 20.107.203.74:44251] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ad5zivKxFvgDwMI04zBRMwAAAdg"]
[Wed Apr 15 01:04:10.965630 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:20764] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ad5zirPtNET7V_vfTPfPWAAAAUY"]
[Wed Apr 15 01:04:11.540780 2026] [:error] [pid 62296:tid 62342] [client 20.107.203.74:27492] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5zi8TNd04nWM2DK4SCLgAAAE8"]
[Wed Apr 15 01:04:12.061592 2026] [:error] [pid 17734:tid 17754] [client 20.107.203.74:46088] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5zjNN3xsztF3DFLWz7vQAAAI8"]
[Wed Apr 15 01:04:12.567494 2026] [:error] [pid 17804:tid 17813] [client 20.107.203.74:25302] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5zjAAZKYxfpamecKd8cwAAAMM"]
[Wed Apr 15 01:04:13.084590 2026] [:error] [pid 17734:tid 17756] [client 20.107.203.74:45451] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5zjdN3xsztF3DFLWz7xgAAAJE"]
[Wed Apr 15 01:04:13.604789 2026] [:error] [pid 62296:tid 62339] [client 20.107.203.74:44239] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ad5zjcTNd04nWM2DK4SCQAAAAEw"]
[Wed Apr 15 01:04:14.226000 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:32774] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ad5zjtN3xsztF3DFLWz7zQAAAIo"]
[Wed Apr 15 01:04:14.773470 2026] [:error] [pid 17926:tid 17950] [client 20.107.203.74:3742] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ad5zjvKxFvgDwMI04zBRNwAAAdE"]
[Wed Apr 15 01:04:15.358412 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:16605] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ad5zj6vogcWlrafOEaG8pwAAARA"]
[Wed Apr 15 01:04:15.870610 2026] [:error] [pid 17926:tid 17935] [client 20.107.203.74:46086] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ad5zj_KxFvgDwMI04zBROAAAAcI"]
[Wed Apr 15 01:04:16.379866 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:56250] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ad5zkKvogcWlrafOEaG8sgAAARU"]
[Wed Apr 15 01:04:16.895859 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:34063] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ad5zkNN3xsztF3DFLWz75AAAAIA"]
[Wed Apr 15 01:04:17.400458 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:56214] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "ad5zkRng-JDNFCa0BnhnxwAAAAE"]
[Wed Apr 15 01:04:17.919272 2026] [:error] [pid 17926:tid 17951] [client 20.107.203.74:3770] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5zkfKxFvgDwMI04zBRPgAAAdI"]
[Wed Apr 15 01:04:18.428829 2026] [:error] [pid 62296:tid 62332] [client 20.107.203.74:3759] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5zksTNd04nWM2DK4SCVwAAAEU"]
[Wed Apr 15 01:04:18.966841 2026] [:error] [pid 17804:tid 17812] [client 20.107.203.74:3732] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5zkgAZKYxfpamecKd8fgAAAMI"]
[Wed Apr 15 01:04:19.484791 2026] [:error] [pid 17866:tid 17869] [client 20.107.203.74:56203] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5zk7x_17kv70EUVIlCngAAAYE"]
[Wed Apr 15 01:04:19.987552 2026] [:error] [pid 17866:tid 17868] [client 20.107.203.74:18459] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ad5zk7x_17kv70EUVIlCowAAAYA"]
[Wed Apr 15 01:04:20.508714 2026] [:error] [pid 62432:tid 62459] [client 20.107.203.74:32217] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ad5zlLPtNET7V_vfTPfPZQAAAVg"]
[Wed Apr 15 01:04:21.011589 2026] [:error] [pid 17804:tid 17827] [client 20.107.203.74:34075] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ad5zlQAZKYxfpamecKd8igAAANE"]
[Wed Apr 15 01:04:21.585390 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:25300] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ad5zldN3xsztF3DFLWz7_wAAAIA"]
[Wed Apr 15 01:04:22.138316 2026] [:error] [pid 17734:tid 17758] [client 20.107.203.74:20780] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "ad5zltN3xsztF3DFLWz8AgAAAJM"]
[Wed Apr 15 01:04:22.715808 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:27500] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "ad5zlqvogcWlrafOEaG8xwAAARE"]
[Wed Apr 15 01:04:23.436340 2026] [:error] [pid 62297:tid 62359] [client 20.107.203.74:45456] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "ad5zl6vogcWlrafOEaG8yQAAAQU"]
[Wed Apr 15 01:04:24.041840 2026] [proxy_fcgi:error] [pid 62297:tid 62374] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:24.358872 2026] [proxy_fcgi:error] [pid 62297:tid 62356] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:24.612998 2026] [proxy_fcgi:error] [pid 62297:tid 62361] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:24.866820 2026] [proxy_fcgi:error] [pid 62297:tid 62354] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:25.120275 2026] [proxy_fcgi:error] [pid 62297:tid 62363] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:25.624902 2026] [proxy_fcgi:error] [pid 62297:tid 62358] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:25.878940 2026] [proxy_fcgi:error] [pid 62297:tid 62372] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:26.141007 2026] [proxy_fcgi:error] [pid 62297:tid 62368] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:26.407426 2026] [proxy_fcgi:error] [pid 62297:tid 62365] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:26.673580 2026] [proxy_fcgi:error] [pid 62297:tid 62373] [client 20.107.203.74:3737] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 01:04:26.923241 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:3737] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ad5zmqvogcWlrafOEaG88QAAAQE"]
[Wed Apr 15 01:04:27.441646 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:25332] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ad5zm9N3xsztF3DFLWz8EQAAAJY"]
[Wed Apr 15 01:04:27.976478 2026] [:error] [pid 62296:tid 62337] [client 20.107.203.74:56212] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ad5zm8TNd04nWM2DK4SCXwAAAEo"]
[Wed Apr 15 01:04:28.490777 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:3771] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vee.php"] [unique_id "ad5znBng-JDNFCa0Bnhn2gAAAAA"]
[Wed Apr 15 01:04:29.037787 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:3725] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ad5znRng-JDNFCa0Bnhn3gAAABY"]
[Wed Apr 15 01:04:29.669904 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:3715] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ad5znRng-JDNFCa0Bnhn4gAAAA0"]
[Wed Apr 15 01:04:30.360688 2026] [:error] [pid 62432:tid 62459] [client 20.107.203.74:33453] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ad5znrPtNET7V_vfTPfPcgAAAVg"]
[Wed Apr 15 01:04:31.027929 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:32192] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ad5zn9N3xsztF3DFLWz8IAAAAJc"]
[Wed Apr 15 01:04:31.668515 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:56196] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad5zn9N3xsztF3DFLWz8JgAAAI4"]
[Wed Apr 15 01:04:32.213583 2026] [:error] [pid 17926:tid 17954] [client 20.107.203.74:56232] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad5zoPKxFvgDwMI04zBRRAAAAdU"]
[Wed Apr 15 01:04:32.716339 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:32806] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad5zoNN3xsztF3DFLWz8LAAAAIk"]
[Wed Apr 15 01:04:33.262314 2026] [:error] [pid 17734:tid 17756] [client 20.107.203.74:32228] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad5zodN3xsztF3DFLWz8LgAAAJE"]
[Wed Apr 15 01:04:33.774201 2026] [:error] [pid 62297:tid 62364] [client 20.107.203.74:45030] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ad5zoavogcWlrafOEaG89gAAAQo"]
[Wed Apr 15 01:04:34.331326 2026] [:error] [pid 17804:tid 17831] [client 20.107.203.74:23318] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ad5zogAZKYxfpamecKd8ngAAANU"]
[Wed Apr 15 01:04:34.910406 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:32201] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ad5zotN3xsztF3DFLWz8OAAAAIo"]
[Wed Apr 15 01:04:35.417299 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:23320] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x1da.php"] [unique_id "ad5zo9N3xsztF3DFLWz8PwAAAIk"]
[Wed Apr 15 01:04:36.010412 2026] [:error] [pid 17734:tid 17743] [client 20.107.203.74:23338] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ad5zpNN3xsztF3DFLWz8QgAAAIQ"]
[Wed Apr 15 01:04:36.526607 2026] [:error] [pid 62297:tid 62356] [client 20.107.203.74:23300] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ad5zpKvogcWlrafOEaG89wAAAQI"]
[Wed Apr 15 01:04:37.113833 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:18471] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ad5zpdN3xsztF3DFLWz8RQAAAJY"]
[Wed Apr 15 01:04:37.618318 2026] [:error] [pid 17926:tid 17940] [client 20.107.203.74:20788] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ad5zpfKxFvgDwMI04zBRVQAAAcc"]
[Wed Apr 15 01:04:38.126928 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:44996] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad5zptN3xsztF3DFLWz8SwAAAJA"]
[Wed Apr 15 01:04:38.641880 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:32227] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad5zptN3xsztF3DFLWz8TQAAAIY"]
[Wed Apr 15 01:04:39.155175 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:24501] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad5zp6vogcWlrafOEaG8_QAAAQM"]
[Wed Apr 15 01:04:39.669961 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:16617] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad5zp6vogcWlrafOEaG8_wAAARg"]
[Wed Apr 15 16:37:36.563956 2026] [proxy_fcgi:error] [pid 11385:tid 11469] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:36.809240 2026] [proxy_fcgi:error] [pid 11385:tid 11450] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:37.051923 2026] [proxy_fcgi:error] [pid 11385:tid 11473] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:37.427865 2026] [proxy_fcgi:error] [pid 11385:tid 11461] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:37.670449 2026] [proxy_fcgi:error] [pid 11385:tid 11446] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:37.912799 2026] [proxy_fcgi:error] [pid 11385:tid 11457] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:38.156070 2026] [proxy_fcgi:error] [pid 11385:tid 11466] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:38.399645 2026] [proxy_fcgi:error] [pid 11385:tid 11447] [client 158.158.105.128:41199] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:38.639327 2026] [:error] [pid 11385:tid 11458] [client 158.158.105.128:41199] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad9OUh_mZoXMMCiUoKVHEwAAAMk"]
[Wed Apr 15 16:37:39.179573 2026] [proxy_fcgi:error] [pid 11384:tid 11428] [client 158.158.105.128:43670] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:39.421591 2026] [proxy_fcgi:error] [pid 11384:tid 11440] [client 158.158.105.128:43670] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:37:39.766485 2026] [:error] [pid 11384:tid 11422] [client 158.158.105.128:43670] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad9OU3Ohpt4MrQIXF7CaqQAAAEA"]
[Wed Apr 15 16:37:40.691298 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:43692] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad9OVDOMRk2pAgm2-j7QmQAAABM"]
[Wed Apr 15 16:37:41.671014 2026] [:error] [pid 11383:tid 11410] [client 158.158.105.128:43676] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad9OVTOMRk2pAgm2-j7QnQAAAA8"]
[Wed Apr 15 16:37:42.281597 2026] [:error] [pid 12433:tid 12448] [client 158.158.105.128:41211] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ng.php"] [unique_id "ad9OVrwxDHWF005pP_643gAAAQ0"]
[Wed Apr 15 16:37:43.340780 2026] [:error] [pid 11385:tid 11461] [client 158.158.105.128:22697] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad9OVx_mZoXMMCiUoKVHGQAAAMw"]
[Wed Apr 15 16:37:44.544500 2026] [:error] [pid 12396:tid 12421] [client 158.158.105.128:23596] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad9OWMCQWGYUWgxc5kj7ngAAAJc"]
[Wed Apr 15 16:37:45.307543 2026] [:error] [pid 12396:tid 12403] [client 158.158.105.128:42398] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad9OWcCQWGYUWgxc5kj7ogAAAIU"]
[Wed Apr 15 16:37:45.876075 2026] [:error] [pid 11385:tid 11458] [client 158.158.105.128:23595] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "ad9OWR_mZoXMMCiUoKVHHwAAAMk"]
[Wed Apr 15 16:37:46.553335 2026] [:error] [pid 12433:tid 12441] [client 158.158.105.128:22659] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/state.php"] [unique_id "ad9OWrwxDHWF005pP_643wAAAQY"]
[Wed Apr 15 16:37:47.143067 2026] [:error] [pid 11383:tid 11416] [client 158.158.105.128:30840] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/state.php"] [unique_id "ad9OWzOMRk2pAgm2-j7QpAAAABU"]
[Wed Apr 15 16:37:48.246722 2026] [:error] [pid 12433:tid 12453] [client 158.158.105.128:30314] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/state.php"] [unique_id "ad9OXLwxDHWF005pP_644QAAARI"]
[Wed Apr 15 16:37:49.367285 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:23565] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/state.php"] [unique_id "ad9OXTOMRk2pAgm2-j7QqQAAABE"]
[Wed Apr 15 16:37:50.266120 2026] [:error] [pid 11475:tid 11483] [client 158.158.105.128:23579] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "ad9OXp7upE98bj816HPWDQAAAUY"]
[Wed Apr 15 16:37:51.231187 2026] [:error] [pid 11383:tid 11413] [client 158.158.105.128:64922] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "ad9OXzOMRk2pAgm2-j7QrgAAABI"]
[Wed Apr 15 16:37:52.074351 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:30803] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "ad9OYLwxDHWF005pP_645AAAAQw"]
[Wed Apr 15 16:37:53.143125 2026] [:error] [pid 11475:tid 11494] [client 158.158.105.128:44313] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "ad9OYZ7upE98bj816HPWEQAAAVE"]
[Wed Apr 15 16:37:56.517093 2026] [:error] [pid 65412:tid 65423] [client 158.158.105.128:24642] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad9OZPEYT61VHfhVE5fukAAAAYk"]
[Wed Apr 15 16:37:59.021008 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:24697] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad9OZzOMRk2pAgm2-j7QtQAAABM"]
[Wed Apr 15 16:38:00.082714 2026] [:error] [pid 12396:tid 12404] [client 158.158.105.128:30318] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad9OaMCQWGYUWgxc5kj7qAAAAIY"]
[Wed Apr 15 16:38:01.070596 2026] [:error] [pid 11385:tid 11458] [client 158.158.105.128:44301] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "ad9OaR_mZoXMMCiUoKVHJQAAAMk"]
[Wed Apr 15 16:38:01.879960 2026] [:error] [pid 12396:tid 12403] [client 158.158.105.128:43686] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad9OacCQWGYUWgxc5kj7qwAAAIU"]
[Wed Apr 15 16:38:02.779507 2026] [:error] [pid 11383:tid 11406] [client 158.158.105.128:22711] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad9OajOMRk2pAgm2-j7QvgAAAAs"]
[Wed Apr 15 16:38:05.080590 2026] [:error] [pid 11383:tid 11401] [client 158.158.105.128:30830] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad9ObTOMRk2pAgm2-j7QxAAAAAY"]
[Wed Apr 15 16:38:05.925970 2026] [:error] [pid 65412:tid 65417] [client 158.158.105.128:48816] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "ad9ObfEYT61VHfhVE5fulQAAAYM"]
[Wed Apr 15 16:38:06.618899 2026] [:error] [pid 11385:tid 11460] [client 158.158.105.128:44309] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad9Obh_mZoXMMCiUoKVHKQAAAMs"]
[Wed Apr 15 16:38:07.335485 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:23572] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad9ObzOMRk2pAgm2-j7QxwAAABE"]
[Wed Apr 15 16:38:08.893950 2026] [:error] [pid 11475:tid 11488] [client 158.158.105.128:44335] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad9OcJ7upE98bj816HPWGwAAAUs"]
[Wed Apr 15 16:38:09.506536 2026] [:error] [pid 12396:tid 12407] [client 158.158.105.128:30305] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ad9OccCQWGYUWgxc5kj7sAAAAIk"]
[Wed Apr 15 16:38:10.136860 2026] [:error] [pid 12433:tid 12453] [client 158.158.105.128:24178] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad9OcrwxDHWF005pP_649QAAARI"]
[Wed Apr 15 16:38:10.786613 2026] [:error] [pid 12396:tid 12420] [client 158.158.105.128:43685] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad9OcsCQWGYUWgxc5kj7tAAAAJY"]
[Wed Apr 15 16:38:12.157528 2026] [:error] [pid 12396:tid 12403] [client 158.158.105.128:44337] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad9OdMCQWGYUWgxc5kj7tgAAAIU"]
[Wed Apr 15 16:38:12.756178 2026] [:error] [pid 11383:tid 11415] [client 158.158.105.128:30810] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ss.php"] [unique_id "ad9OdDOMRk2pAgm2-j7Q0wAAABQ"]
[Wed Apr 15 16:38:13.681934 2026] [:error] [pid 11475:tid 11490] [client 158.158.105.128:43675] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9OdZ7upE98bj816HPWHAAAAU0"]
[Wed Apr 15 16:38:14.655556 2026] [:error] [pid 11475:tid 11501] [client 158.158.105.128:43653] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9Odp7upE98bj816HPWIAAAAVg"]
[Wed Apr 15 16:38:16.074575 2026] [:error] [pid 12396:tid 12405] [client 158.158.105.128:43665] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9OeMCQWGYUWgxc5kj7xQAAAIc"]
[Wed Apr 15 16:38:16.846170 2026] [:error] [pid 11475:tid 11495] [client 158.158.105.128:64948] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9OeJ7upE98bj816HPWIQAAAVI"]
[Wed Apr 15 16:38:17.642836 2026] [:error] [pid 11383:tid 11410] [client 158.158.105.128:44340] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "ad9OeTOMRk2pAgm2-j7Q2AAAAA8"]
[Wed Apr 15 16:38:18.752942 2026] [:error] [pid 11475:tid 11482] [client 158.158.105.128:23567] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "ad9Oep7upE98bj816HPWJQAAAUU"]
[Wed Apr 15 16:38:20.423441 2026] [:error] [pid 11475:tid 11490] [client 158.158.105.128:24678] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "ad9OfJ7upE98bj816HPWKwAAAU0"]
[Wed Apr 15 16:38:24.975136 2026] [:error] [pid 12433:tid 12452] [client 158.158.105.128:41829] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7.php"] [unique_id "ad9OgLwxDHWF005pP_64_gAAARE"]
[Wed Apr 15 16:38:28.059609 2026] [:error] [pid 11385:tid 11450] [client 158.158.105.128:53907] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad9OhB_mZoXMMCiUoKVHMgAAAMM"]
[Wed Apr 15 16:38:29.531961 2026] [:error] [pid 11384:tid 11424] [client 158.158.105.128:24176] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad9OhXOhpt4MrQIXF7CauAAAAEI"]
[Wed Apr 15 16:38:30.341942 2026] [:error] [pid 65412:tid 65425] [client 158.158.105.128:64921] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad9OhvEYT61VHfhVE5funAAAAYs"]
[Wed Apr 15 16:38:31.164305 2026] [:error] [pid 65412:tid 65431] [client 158.158.105.128:30288] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ad9Oh_EYT61VHfhVE5funQAAAZE"]
[Wed Apr 15 16:38:31.747975 2026] [:error] [pid 65412:tid 65434] [client 158.158.105.128:43705] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "ad9Oh_EYT61VHfhVE5fungAAAZQ"]
[Wed Apr 15 16:38:32.802024 2026] [:error] [pid 11384:tid 11422] [client 158.158.105.128:44290] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "ad9OiHOhpt4MrQIXF7CauwAAAEA"]
[Wed Apr 15 16:38:34.072814 2026] [:error] [pid 12396:tid 12412] [client 158.158.105.128:44343] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "ad9OisCQWGYUWgxc5kj72QAAAI4"]
[Wed Apr 15 16:38:34.919942 2026] [:error] [pid 11384:tid 11423] [client 158.158.105.128:24582] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "ad9OinOhpt4MrQIXF7CavgAAAEE"]
[Wed Apr 15 16:38:39.948943 2026] [proxy_fcgi:error] [pid 11384:tid 11438] [client 158.158.105.128:64925] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:40.508264 2026] [:error] [pid 11384:tid 11451] [client 158.158.105.128:64925] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.quarryspec.com.au"] [uri "/tiny.php"] [unique_id "ad9OkHOhpt4MrQIXF7CaxgAAAFg"]
[Wed Apr 15 16:38:41.378976 2026] [proxy_fcgi:error] [pid 11475:tid 11485] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:41.623844 2026] [proxy_fcgi:error] [pid 11475:tid 11481] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:41.867164 2026] [proxy_fcgi:error] [pid 11475:tid 11493] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:42.215513 2026] [proxy_fcgi:error] [pid 11475:tid 11489] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:42.635714 2026] [proxy_fcgi:error] [pid 11475:tid 11500] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:42.879109 2026] [proxy_fcgi:error] [pid 11475:tid 11483] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:43.143710 2026] [proxy_fcgi:error] [pid 11475:tid 11498] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:43.543070 2026] [proxy_fcgi:error] [pid 11475:tid 11492] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:43.788855 2026] [proxy_fcgi:error] [pid 11475:tid 11486] [client 158.158.105.128:44319] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:38:44.029299 2026] [:error] [pid 11475:tid 11488] [client 158.158.105.128:44319] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad9OlJ7upE98bj816HPWQgAAAUs"]
[Wed Apr 15 16:38:44.709671 2026] [:error] [pid 11383:tid 11395] [client 158.158.105.128:56504] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad9OlDOMRk2pAgm2-j7Q-QAAAAA"]
[Wed Apr 15 16:38:45.593974 2026] [:error] [pid 11384:tid 11426] [client 158.158.105.128:56539] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad9OlXOhpt4MrQIXF7CaywAAAEQ"]
[Wed Apr 15 16:38:46.681427 2026] [:error] [pid 12396:tid 12400] [client 158.158.105.128:24583] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lib.php"] [unique_id "ad9OlsCQWGYUWgxc5kj75QAAAII"]
[Wed Apr 15 16:38:47.454802 2026] [:error] [pid 11383:tid 11396] [client 158.158.105.128:53913] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad9OlzOMRk2pAgm2-j7Q-wAAAAE"]
[Wed Apr 15 16:38:48.362428 2026] [:error] [pid 65412:tid 65437] [client 158.158.105.128:30333] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad9OmPEYT61VHfhVE5fupwAAAZc"]
[Wed Apr 15 16:38:49.233784 2026] [:error] [pid 11385:tid 11467] [client 158.158.105.128:30331] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad9OmR_mZoXMMCiUoKVHOwAAANI"]
[Wed Apr 15 16:38:49.883955 2026] [:error] [pid 11385:tid 11465] [client 158.158.105.128:33792] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "ad9OmR_mZoXMMCiUoKVHPAAAANA"]
[Wed Apr 15 16:38:50.646335 2026] [:error] [pid 11383:tid 11396] [client 158.158.105.128:43700] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9OmjOMRk2pAgm2-j7RBAAAAAE"]
[Wed Apr 15 16:38:51.456900 2026] [:error] [pid 11383:tid 11403] [client 158.158.105.128:43699] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9OmzOMRk2pAgm2-j7RCAAAAAg"]
[Wed Apr 15 16:38:52.352602 2026] [:error] [pid 11383:tid 11400] [client 158.158.105.128:53922] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9OnDOMRk2pAgm2-j7RCgAAAAU"]
[Wed Apr 15 16:38:52.943770 2026] [:error] [pid 11475:tid 11487] [client 158.158.105.128:24637] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9OnJ7upE98bj816HPWRgAAAUo"]
[Wed Apr 15 16:38:54.353668 2026] [:error] [pid 11475:tid 11498] [client 158.158.105.128:56473] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad9Onp7upE98bj816HPWTQAAAVU"]
[Wed Apr 15 16:38:56.440466 2026] [:error] [pid 11383:tid 11402] [client 158.158.105.128:53923] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad9OoDOMRk2pAgm2-j7RDgAAAAc"]
[Wed Apr 15 16:38:58.196294 2026] [:error] [pid 65412:tid 65425] [client 158.158.105.128:33846] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad9OovEYT61VHfhVE5furgAAAYs"]
[Wed Apr 15 16:38:59.514398 2026] [:error] [pid 11475:tid 11497] [client 158.158.105.128:56491] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ad9Oo57upE98bj816HPWXAAAAVQ"]
[Wed Apr 15 16:39:00.750415 2026] [:error] [pid 11384:tid 11427] [client 158.158.105.128:48785] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad9OpHOhpt4MrQIXF7Ca1AAAAEU"]
[Wed Apr 15 16:39:01.449957 2026] [:error] [pid 12433:tid 12458] [client 158.158.105.128:44969] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad9OpbwxDHWF005pP_65EAAAARc"]
[Wed Apr 15 16:39:02.736618 2026] [:error] [pid 11384:tid 11437] [client 158.158.105.128:41147] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad9OpnOhpt4MrQIXF7Ca2gAAAE8"]
[Wed Apr 15 16:39:03.368456 2026] [:error] [pid 11383:tid 11405] [client 158.158.105.128:41204] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ad9OpzOMRk2pAgm2-j7RDwAAAAo"]
[Wed Apr 15 16:39:04.097133 2026] [:error] [pid 11385:tid 11464] [client 158.158.105.128:53892] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad9OqB_mZoXMMCiUoKVHRgAAAM8"]
[Wed Apr 15 16:39:04.699010 2026] [:error] [pid 11385:tid 11466] [client 158.158.105.128:44294] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad9OqB_mZoXMMCiUoKVHRwAAANE"]
[Wed Apr 15 16:39:05.362321 2026] [:error] [pid 12433:tid 12443] [client 158.158.105.128:41168] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad9OqbwxDHWF005pP_65GQAAAQg"]
[Wed Apr 15 16:39:05.930362 2026] [:error] [pid 11385:tid 11469] [client 158.158.105.128:56484] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dass.php"] [unique_id "ad9OqR_mZoXMMCiUoKVHSwAAANQ"]
[Wed Apr 15 16:39:06.660125 2026] [:error] [pid 11385:tid 11471] [client 158.158.105.128:41168] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/db.php"] [unique_id "ad9Oqh_mZoXMMCiUoKVHTgAAANY"]
[Wed Apr 15 16:39:07.220487 2026] [:error] [pid 11475:tid 11482] [client 158.158.105.128:24644] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/db.php"] [unique_id "ad9Oq57upE98bj816HPWYgAAAUU"]
[Wed Apr 15 16:39:07.905831 2026] [:error] [pid 11475:tid 11479] [client 158.158.105.128:24677] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/db.php"] [unique_id "ad9Oq57upE98bj816HPWZAAAAUI"]
[Wed Apr 15 16:39:08.588371 2026] [:error] [pid 11475:tid 11481] [client 158.158.105.128:44974] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/db.php"] [unique_id "ad9OrJ7upE98bj816HPWZwAAAUQ"]
[Wed Apr 15 16:39:09.292108 2026] [:error] [pid 12433:tid 12445] [client 158.158.105.128:24615] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/less.php"] [unique_id "ad9OrbwxDHWF005pP_65HAAAAQo"]
[Wed Apr 15 16:39:10.184466 2026] [:error] [pid 11475:tid 11501] [client 158.158.105.128:56465] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/less.php"] [unique_id "ad9Orp7upE98bj816HPWcQAAAVg"]
[Wed Apr 15 16:39:11.121365 2026] [:error] [pid 11385:tid 11461] [client 158.158.105.128:56518] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/less.php"] [unique_id "ad9Orx_mZoXMMCiUoKVHUgAAAMw"]
[Wed Apr 15 16:39:12.037223 2026] [:error] [pid 11475:tid 11500] [client 158.158.105.128:56515] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/less.php"] [unique_id "ad9OsJ7upE98bj816HPWegAAAVc"]
[Wed Apr 15 16:39:12.722196 2026] [:error] [pid 12433:tid 12459] [client 158.158.105.128:44328] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ad9OsLwxDHWF005pP_65HgAAARg"]
[Wed Apr 15 16:39:13.299127 2026] [:error] [pid 11475:tid 11491] [client 158.158.105.128:56549] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ad9OsZ7upE98bj816HPWfAAAAU4"]
[Wed Apr 15 16:39:14.159586 2026] [:error] [pid 11384:tid 11443] [client 158.158.105.128:56466] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ad9OsnOhpt4MrQIXF7Ca5wAAAFU"]
[Wed Apr 15 16:39:15.257900 2026] [:error] [pid 65412:tid 65427] [client 158.158.105.128:33833] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws86.php"] [unique_id "ad9Os_EYT61VHfhVE5futAAAAY0"]
[Wed Apr 15 16:39:16.575477 2026] [:error] [pid 12433:tid 12442] [client 158.158.105.128:40514] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "ad9OtLwxDHWF005pP_65KAAAAQc"]
[Wed Apr 15 16:39:18.141469 2026] [:error] [pid 12433:tid 12458] [client 158.158.105.128:43666] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "ad9OtrwxDHWF005pP_65LAAAARc"]
[Wed Apr 15 16:39:18.741982 2026] [:error] [pid 12396:tid 12421] [client 158.158.105.128:3240] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "ad9OtsCQWGYUWgxc5kj78AAAAJc"]
[Wed Apr 15 16:39:19.295509 2026] [:error] [pid 12396:tid 12409] [client 158.158.105.128:24145] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "ad9Ot8CQWGYUWgxc5kj78gAAAIs"]
[Wed Apr 15 16:39:20.027774 2026] [:error] [pid 11475:tid 11500] [client 158.158.105.128:56570] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad9OuJ7upE98bj816HPWgQAAAVc"]
[Wed Apr 15 16:39:20.658998 2026] [:error] [pid 11475:tid 11481] [client 158.158.105.128:24134] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad9OuJ7upE98bj816HPWhAAAAUQ"]
[Wed Apr 15 16:39:21.257511 2026] [:error] [pid 11475:tid 11492] [client 158.158.105.128:56489] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad9OuZ7upE98bj816HPWhwAAAU8"]
[Wed Apr 15 16:39:21.899173 2026] [:error] [pid 65412:tid 65426] [client 158.158.105.128:44299] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ad9OufEYT61VHfhVE5futwAAAYw"]
[Wed Apr 15 16:39:22.726097 2026] [:error] [pid 11475:tid 11485] [client 158.158.105.128:60920] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad9Oup7upE98bj816HPWkgAAAUg"]
[Wed Apr 15 16:39:23.242837 2026] [:error] [pid 12433:tid 12452] [client 158.158.105.128:41139] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad9Ou7wxDHWF005pP_65MQAAARE"]
[Wed Apr 15 16:39:23.884615 2026] [:error] [pid 11383:tid 11407] [client 158.158.105.128:60912] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad9OuzOMRk2pAgm2-j7REgAAAAw"]
[Wed Apr 15 16:39:24.604021 2026] [:error] [pid 11383:tid 11416] [client 158.158.105.128:53948] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad9OvDOMRk2pAgm2-j7REwAAABU"]
[Wed Apr 15 16:39:25.158608 2026] [:error] [pid 11475:tid 11496] [client 158.158.105.128:55825] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad9OvZ7upE98bj816HPWnAAAAVM"]
[Wed Apr 15 16:39:25.972217 2026] [:error] [pid 11475:tid 11494] [client 158.158.105.128:51434] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad9OvZ7upE98bj816HPWngAAAVE"]
[Wed Apr 15 16:39:26.743266 2026] [:error] [pid 11385:tid 11468] [client 158.158.105.128:51439] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad9Ovh_mZoXMMCiUoKVHVAAAANM"]
[Wed Apr 15 16:39:27.678538 2026] [:error] [pid 11385:tid 11469] [client 158.158.105.128:40533] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "ad9Ovx_mZoXMMCiUoKVHVgAAANQ"]
[Wed Apr 15 16:39:28.317106 2026] [:error] [pid 12433:tid 12451] [client 158.158.105.128:55866] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad9OwLwxDHWF005pP_65MgAAARA"]
[Wed Apr 15 16:39:29.054535 2026] [:error] [pid 11384:tid 11424] [client 158.158.105.128:44965] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad9OwXOhpt4MrQIXF7Ca6QAAAEI"]
[Wed Apr 15 16:39:29.664144 2026] [:error] [pid 11383:tid 11395] [client 158.158.105.128:3260] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad9OwTOMRk2pAgm2-j7RHgAAAAA"]
[Wed Apr 15 16:39:30.547625 2026] [:error] [pid 12396:tid 12413] [client 158.158.105.128:51414] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/v5.php"] [unique_id "ad9OwsCQWGYUWgxc5kj8AQAAAI8"]
[Wed Apr 15 16:39:31.303463 2026] [:error] [pid 11384:tid 11439] [client 158.158.105.128:24162] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad9Ow3Ohpt4MrQIXF7Ca7AAAAFE"]
[Wed Apr 15 16:39:32.129065 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:60891] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad9OxDOMRk2pAgm2-j7RIwAAABE"]
[Wed Apr 15 16:39:32.966911 2026] [:error] [pid 11383:tid 11413] [client 158.158.105.128:29764] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad9OxDOMRk2pAgm2-j7RJwAAABI"]
[Wed Apr 15 16:39:33.702911 2026] [:error] [pid 11384:tid 11433] [client 158.158.105.128:60904] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws85.php"] [unique_id "ad9OxXOhpt4MrQIXF7Ca8QAAAEs"]
[Wed Apr 15 16:39:34.631739 2026] [:error] [pid 12433:tid 12454] [client 158.158.105.128:65416] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad9OxrwxDHWF005pP_65NwAAARM"]
[Wed Apr 15 16:39:35.978382 2026] [:error] [pid 11384:tid 11442] [client 158.158.105.128:51395] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad9Ox3Ohpt4MrQIXF7Ca9AAAAFQ"]
[Wed Apr 15 16:39:39.705959 2026] [:error] [pid 12396:tid 12410] [client 158.158.105.128:64380] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad9Oy8CQWGYUWgxc5kj8BwAAAIw"]
[Wed Apr 15 16:39:41.986146 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:3249] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws87.php"] [unique_id "ad9OzTOMRk2pAgm2-j7RNgAAABM"]
[Wed Apr 15 16:39:43.843380 2026] [proxy_fcgi:error] [pid 12433:tid 12452] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:44.086615 2026] [proxy_fcgi:error] [pid 12433:tid 12438] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:44.427490 2026] [proxy_fcgi:error] [pid 12433:tid 12435] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:44.672323 2026] [proxy_fcgi:error] [pid 12433:tid 12457] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:45.005403 2026] [proxy_fcgi:error] [pid 12433:tid 12459] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:45.251789 2026] [proxy_fcgi:error] [pid 12433:tid 12441] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:45.575489 2026] [proxy_fcgi:error] [pid 12433:tid 12448] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:45.818806 2026] [proxy_fcgi:error] [pid 12433:tid 12437] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:46.062109 2026] [proxy_fcgi:error] [pid 12433:tid 12449] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:46.305405 2026] [proxy_fcgi:error] [pid 12433:tid 12458] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:46.548384 2026] [proxy_fcgi:error] [pid 12433:tid 12455] [client 158.158.105.128:51397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:39:46.787682 2026] [:error] [pid 12433:tid 12450] [client 158.158.105.128:51397] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad9O0rwxDHWF005pP_65TQAAAQ8"]
[Wed Apr 15 16:39:47.958802 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:45604] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad9O0zOMRk2pAgm2-j7RQQAAABM"]
[Wed Apr 15 16:39:48.923406 2026] [:error] [pid 12396:tid 12419] [client 158.158.105.128:29198] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad9O1MCQWGYUWgxc5kj8EgAAAJU"]
[Wed Apr 15 16:39:49.770855 2026] [:error] [pid 12396:tid 12414] [client 158.158.105.128:3871] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/qqa.php"] [unique_id "ad9O1cCQWGYUWgxc5kj8FAAAAJA"]
[Wed Apr 15 16:39:50.537275 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:29797] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad9O1rwxDHWF005pP_65UgAAAQw"]
[Wed Apr 15 16:39:51.074095 2026] [:error] [pid 11384:tid 11436] [client 158.158.105.128:3947] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad9O13Ohpt4MrQIXF7Ca_gAAAE4"]
[Wed Apr 15 16:39:51.945886 2026] [:error] [pid 12396:tid 12413] [client 158.158.105.128:22202] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad9O18CQWGYUWgxc5kj8FQAAAI8"]
[Wed Apr 15 16:39:52.633169 2026] [:error] [pid 65412:tid 65421] [client 158.158.105.128:34867] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "ad9O2PEYT61VHfhVE5fuwwAAAYc"]
[Wed Apr 15 16:39:53.179937 2026] [:error] [pid 65412:tid 65415] [client 158.158.105.128:26121] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad9O2fEYT61VHfhVE5fuxQAAAYE"]
[Wed Apr 15 16:39:53.860976 2026] [:error] [pid 11384:tid 11427] [client 158.158.105.128:62386] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad9O2XOhpt4MrQIXF7CbAAAAAEU"]
[Wed Apr 15 16:39:54.612601 2026] [:error] [pid 11384:tid 11428] [client 158.158.105.128:60210] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad9O2nOhpt4MrQIXF7CbAwAAAEY"]
[Wed Apr 15 16:39:55.234936 2026] [:error] [pid 11384:tid 11424] [client 158.158.105.128:32891] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ga.php"] [unique_id "ad9O23Ohpt4MrQIXF7CbBQAAAEI"]
[Wed Apr 15 16:39:56.497607 2026] [:error] [pid 11475:tid 11496] [client 158.158.105.128:53982] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad9O3J7upE98bj816HPWtQAAAVM"]
[Wed Apr 15 16:39:57.384057 2026] [:error] [pid 11384:tid 11443] [client 158.158.105.128:37894] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad9O3XOhpt4MrQIXF7CbBgAAAFU"]
[Wed Apr 15 16:39:57.947723 2026] [:error] [pid 11385:tid 11455] [client 158.158.105.128:51369] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad9O3R_mZoXMMCiUoKVHbAAAAMY"]
[Wed Apr 15 16:39:59.201346 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:37259] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xozx.php"] [unique_id "ad9O37wxDHWF005pP_65XgAAAQw"]
[Wed Apr 15 16:40:00.129978 2026] [:error] [pid 12433:tid 12455] [client 158.158.105.128:51372] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1100.php"] [unique_id "ad9O4LwxDHWF005pP_65ZgAAARQ"]
[Wed Apr 15 16:40:00.849860 2026] [:error] [pid 11384:tid 11440] [client 158.158.105.128:49464] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1100.php"] [unique_id "ad9O4HOhpt4MrQIXF7CbEgAAAFI"]
[Wed Apr 15 16:40:01.671318 2026] [:error] [pid 12433:tid 12439] [client 158.158.105.128:37895] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1100.php"] [unique_id "ad9O4bwxDHWF005pP_65bAAAAQQ"]
[Wed Apr 15 16:40:02.557020 2026] [:error] [pid 11475:tid 11485] [client 158.158.105.128:3912] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1100.php"] [unique_id "ad9O4p7upE98bj816HPWvQAAAUg"]
[Wed Apr 15 16:40:03.327899 2026] [:error] [pid 11475:tid 11486] [client 158.158.105.128:51335] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad9O457upE98bj816HPWwgAAAUk"]
[Wed Apr 15 16:40:03.880099 2026] [:error] [pid 11475:tid 11491] [client 158.158.105.128:35415] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad9O457upE98bj816HPWwwAAAU4"]
[Wed Apr 15 16:40:04.667127 2026] [:error] [pid 11475:tid 11483] [client 158.158.105.128:37260] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad9O5J7upE98bj816HPWxwAAAUY"]
[Wed Apr 15 16:40:05.397136 2026] [:error] [pid 11475:tid 11484] [client 158.158.105.128:37918] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/press.php"] [unique_id "ad9O5Z7upE98bj816HPWzQAAAUc"]
[Wed Apr 15 16:40:06.076602 2026] [:error] [pid 11475:tid 11487] [client 158.158.105.128:37264] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad9O5p7upE98bj816HPW0AAAAUo"]
[Wed Apr 15 16:40:06.698846 2026] [:error] [pid 11475:tid 11494] [client 158.158.105.128:51330] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad9O5p7upE98bj816HPW1QAAAVE"]
[Wed Apr 15 16:40:07.740788 2026] [:error] [pid 11475:tid 11500] [client 158.158.105.128:33917] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad9O557upE98bj816HPW1gAAAVc"]
[Wed Apr 15 16:40:08.531859 2026] [:error] [pid 11475:tid 11497] [client 158.158.105.128:55411] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "ad9O6J7upE98bj816HPW1wAAAVQ"]
[Wed Apr 15 16:40:09.467826 2026] [:error] [pid 11475:tid 11484] [client 158.158.105.128:37920] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad9O6Z7upE98bj816HPW2QAAAUc"]
[Wed Apr 15 16:40:10.090547 2026] [:error] [pid 12396:tid 12417] [client 158.158.105.128:33873] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad9O6sCQWGYUWgxc5kj8JAAAAJM"]
[Wed Apr 15 16:40:10.946090 2026] [:error] [pid 11384:tid 11435] [client 158.158.105.128:21720] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad9O6nOhpt4MrQIXF7CbGwAAAE0"]
[Wed Apr 15 16:40:11.741313 2026] [:error] [pid 11384:tid 11426] [client 158.158.105.128:26213] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "ad9O63Ohpt4MrQIXF7CbHQAAAEQ"]
[Wed Apr 15 16:40:12.528567 2026] [:error] [pid 11383:tid 11403] [client 158.158.105.128:35392] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad9O7DOMRk2pAgm2-j7RUgAAAAg"]
[Wed Apr 15 16:40:13.334702 2026] [:error] [pid 11383:tid 11419] [client 158.158.105.128:49466] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad9O7TOMRk2pAgm2-j7RVAAAABg"]
[Wed Apr 15 16:40:14.110035 2026] [:error] [pid 11475:tid 11499] [client 158.158.105.128:28702] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad9O7p7upE98bj816HPW2wAAAVY"]
[Wed Apr 15 16:40:15.040819 2026] [:error] [pid 11475:tid 11479] [client 158.158.105.128:55423] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "ad9O757upE98bj816HPW3gAAAUI"]
[Wed Apr 15 16:40:17.038281 2026] [:error] [pid 11475:tid 11478] [client 158.158.105.128:33899] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9O8Z7upE98bj816HPW6AAAAUE"]
[Wed Apr 15 16:40:17.629795 2026] [:error] [pid 11475:tid 11485] [client 158.158.105.128:26234] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9O8Z7upE98bj816HPW6gAAAUg"]
[Wed Apr 15 16:40:18.169426 2026] [:error] [pid 11383:tid 11395] [client 158.158.105.128:33878] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9O8jOMRk2pAgm2-j7RWgAAAAA"]
[Wed Apr 15 16:40:18.803048 2026] [:error] [pid 65412:tid 65425] [client 158.158.105.128:26667] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9O8vEYT61VHfhVE5fuzgAAAYs"]
[Wed Apr 15 16:40:19.407891 2026] [:error] [pid 11475:tid 11480] [client 158.158.105.128:44366] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad9O857upE98bj816HPW8QAAAUM"]
[Wed Apr 15 16:40:20.183944 2026] [:error] [pid 11383:tid 11417] [client 158.158.105.128:25137] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad9O9DOMRk2pAgm2-j7RXwAAABY"]
[Wed Apr 15 16:40:21.005728 2026] [:error] [pid 11475:tid 11478] [client 158.158.105.128:57082] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad9O9Z7upE98bj816HPW9QAAAUE"]
[Wed Apr 15 16:40:21.540451 2026] [:error] [pid 11383:tid 11399] [client 158.158.105.128:28203] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "ad9O9TOMRk2pAgm2-j7RYwAAAAQ"]
[Wed Apr 15 16:40:22.167506 2026] [:error] [pid 11384:tid 11443] [client 158.158.105.128:25183] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad9O9nOhpt4MrQIXF7CbKwAAAFU"]
[Wed Apr 15 16:40:22.743841 2026] [:error] [pid 12396:tid 12398] [client 158.158.105.128:26652] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad9O9sCQWGYUWgxc5kj8OQAAAIA"]
[Wed Apr 15 16:40:23.335173 2026] [:error] [pid 12396:tid 12405] [client 158.158.105.128:51998] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad9O98CQWGYUWgxc5kj8PAAAAIc"]
[Wed Apr 15 16:40:23.964711 2026] [:error] [pid 12396:tid 12415] [client 158.158.105.128:28161] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad9O98CQWGYUWgxc5kj8PwAAAJE"]
[Wed Apr 15 16:40:24.620125 2026] [:error] [pid 11475:tid 11490] [client 158.158.105.128:23178] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad9O-J7upE98bj816HPXAAAAAU0"]
[Wed Apr 15 16:40:25.531753 2026] [:error] [pid 11385:tid 11473] [client 158.158.105.128:58940] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad9O-R_mZoXMMCiUoKVHdwAAANg"]
[Wed Apr 15 16:40:26.334513 2026] [:error] [pid 11383:tid 11414] [client 158.158.105.128:32307] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad9O-jOMRk2pAgm2-j7RhAAAABM"]
[Wed Apr 15 16:40:27.276430 2026] [:error] [pid 11475:tid 11492] [client 158.158.105.128:23217] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "ad9O-57upE98bj816HPXHwAAAU8"]
[Wed Apr 15 16:40:28.001751 2026] [:error] [pid 11475:tid 11496] [client 158.158.105.128:22236] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad9O_J7upE98bj816HPXIwAAAVM"]
[Wed Apr 15 16:40:29.052670 2026] [:error] [pid 11384:tid 11425] [client 158.158.105.128:57046] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad9O_XOhpt4MrQIXF7CbNgAAAEM"]
[Wed Apr 15 16:40:30.073697 2026] [:error] [pid 65412:tid 65432] [client 158.158.105.128:32269] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad9O_vEYT61VHfhVE5fu2AAAAZI"]
[Wed Apr 15 16:40:30.786318 2026] [:error] [pid 11384:tid 11430] [client 158.158.105.128:29266] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "ad9O_nOhpt4MrQIXF7CbOwAAAEg"]
[Wed Apr 15 16:40:31.586518 2026] [:error] [pid 12433:tid 12441] [client 158.158.105.128:26649] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad9O_7wxDHWF005pP_65dwAAAQY"]
[Wed Apr 15 16:40:32.362293 2026] [:error] [pid 11475:tid 11489] [client 158.158.105.128:25198] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad9PAJ7upE98bj816HPXKwAAAUw"]
[Wed Apr 15 16:40:33.264636 2026] [:error] [pid 12433:tid 12440] [client 158.158.105.128:29263] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad9PAbwxDHWF005pP_65ewAAAQU"]
[Wed Apr 15 16:40:34.525741 2026] [:error] [pid 65412:tid 65423] [client 158.158.105.128:4000] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "ad9PAvEYT61VHfhVE5fu3gAAAYk"]
[Wed Apr 15 16:40:35.648385 2026] [:error] [pid 65412:tid 65424] [client 158.158.105.128:57069] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad9PA_EYT61VHfhVE5fu3wAAAYo"]
[Wed Apr 15 16:40:36.987140 2026] [:error] [pid 12433:tid 12446] [client 158.158.105.128:3973] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad9PBLwxDHWF005pP_65gQAAAQs"]
[Wed Apr 15 16:40:37.773322 2026] [:error] [pid 65412:tid 65435] [client 158.158.105.128:29274] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad9PBfEYT61VHfhVE5fu6AAAAZU"]
[Wed Apr 15 16:40:42.546539 2026] [:error] [pid 12433:tid 12445] [client 158.158.105.128:23208] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "ad9PCrwxDHWF005pP_65kAAAAQo"]
[Wed Apr 15 16:41:41.002157 2026] [proxy_fcgi:error] [pid 11475:tid 11501] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:41.359697 2026] [proxy_fcgi:error] [pid 11475:tid 11479] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:41.672428 2026] [proxy_fcgi:error] [pid 11475:tid 11487] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:42.379760 2026] [proxy_fcgi:error] [pid 11475:tid 11488] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:42.624983 2026] [proxy_fcgi:error] [pid 11475:tid 11484] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:42.927942 2026] [proxy_fcgi:error] [pid 11475:tid 11493] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:43.170451 2026] [proxy_fcgi:error] [pid 11475:tid 11501] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:43.584555 2026] [proxy_fcgi:error] [pid 11475:tid 11491] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:44.033975 2026] [proxy_fcgi:error] [pid 11475:tid 11479] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:44.442909 2026] [proxy_fcgi:error] [pid 11475:tid 11480] [client 158.158.105.128:45053] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:44.749464 2026] [:error] [pid 11475:tid 11485] [client 158.158.105.128:45053] [client 158.158.105.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad9PSJ7upE98bj816HPYQQAAAUg"]
[Wed Apr 15 16:41:45.785862 2026] [proxy_fcgi:error] [pid 11383:tid 11396] [client 158.158.105.128:61317] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:41:46.091663 2026] [:error] [pid 11383:tid 11400] [client 158.158.105.128:61317] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad9PSjOMRk2pAgm2-j7SMwAAAAU"]
[Wed Apr 15 16:41:47.330152 2026] [:error] [pid 12433:tid 12452] [client 158.158.105.128:45041] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad9PS7wxDHWF005pP_658wAAARE"]
[Wed Apr 15 16:41:48.303961 2026] [:error] [pid 12433:tid 12441] [client 158.158.105.128:61352] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad9PTLwxDHWF005pP_659QAAAQY"]
[Wed Apr 15 16:41:49.260183 2026] [:error] [pid 11475:tid 11483] [client 158.158.105.128:60809] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "ad9PTZ7upE98bj816HPYSQAAAUY"]
[Wed Apr 15 16:41:50.101974 2026] [:error] [pid 11475:tid 11492] [client 158.158.105.128:61868] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9PTp7upE98bj816HPYTAAAAU8"]
[Wed Apr 15 16:41:50.922435 2026] [:error] [pid 12433:tid 12437] [client 158.158.105.128:22724] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9PTrwxDHWF005pP_65_QAAAQI"]
[Wed Apr 15 16:41:52.564918 2026] [:error] [pid 11383:tid 11418] [client 158.158.105.128:3148] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9PUDOMRk2pAgm2-j7SPQAAABc"]
[Wed Apr 15 16:41:53.758556 2026] [:error] [pid 11385:tid 11465] [client 158.158.105.128:36697] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9PUR_mZoXMMCiUoKVHwgAAANA"]
[Wed Apr 15 16:41:54.766884 2026] [:error] [pid 12433:tid 12449] [client 158.158.105.128:3422] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad9PUrwxDHWF005pP_65_wAAAQ4"]
[Wed Apr 15 16:41:55.423971 2026] [:error] [pid 12433:tid 12456] [client 158.158.105.128:53324] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad9PU7wxDHWF005pP_66AgAAARU"]
[Wed Apr 15 16:41:56.307265 2026] [:error] [pid 12433:tid 12458] [client 158.158.105.128:22720] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad9PVLwxDHWF005pP_66BAAAARc"]
[Wed Apr 15 16:41:57.274487 2026] [:error] [pid 12396:tid 12417] [client 158.158.105.128:3187] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws57.php"] [unique_id "ad9PVcCQWGYUWgxc5kj9JAAAAJM"]
[Wed Apr 15 16:41:58.413261 2026] [:error] [pid 12433:tid 12436] [client 158.158.105.128:3425] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad9PVrwxDHWF005pP_66DAAAAQE"]
[Wed Apr 15 16:41:59.471923 2026] [:error] [pid 65412:tid 65435] [client 158.158.105.128:45044] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad9PV_EYT61VHfhVE5fvGQAAAZU"]
[Wed Apr 15 16:42:00.539799 2026] [:error] [pid 12396:tid 12400] [client 158.158.105.128:61885] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad9PWMCQWGYUWgxc5kj9LQAAAII"]
[Wed Apr 15 16:42:05.217325 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:27140] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws61.php"] [unique_id "ad9PXbwxDHWF005pP_66EAAAAQw"]
[Wed Apr 15 16:42:13.454934 2026] [:error] [pid 12396:tid 12417] [client 158.158.105.128:50807] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad9PZcCQWGYUWgxc5kj9YgAAAJM"]
[Wed Apr 15 16:42:15.841321 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:3432] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad9PZzOMRk2pAgm2-j7SUwAAABE"]
[Wed Apr 15 16:42:16.904507 2026] [:error] [pid 11385:tid 11456] [client 158.158.105.128:64982] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad9PaB_mZoXMMCiUoKVH2QAAAMc"]
[Wed Apr 15 16:42:17.556125 2026] [:error] [pid 11475:tid 11499] [client 158.158.105.128:3522] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws66.php"] [unique_id "ad9PaZ7upE98bj816HPYZQAAAVY"]
[Wed Apr 15 16:42:18.482063 2026] [:error] [pid 11384:tid 11437] [client 158.158.105.128:61873] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9PanOhpt4MrQIXF7Cb4QAAAE8"]
[Wed Apr 15 16:42:19.664913 2026] [:error] [pid 11475:tid 11484] [client 158.158.105.128:53317] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9Pa57upE98bj816HPYaQAAAUc"]
[Wed Apr 15 16:42:20.599301 2026] [:error] [pid 12433:tid 12441] [client 158.158.105.128:48895] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9PbLwxDHWF005pP_66UwAAAQY"]
[Wed Apr 15 16:42:21.929990 2026] [:error] [pid 12433:tid 12436] [client 158.158.105.128:54544] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9PbbwxDHWF005pP_66WAAAAQE"]
[Wed Apr 15 16:42:22.672501 2026] [:error] [pid 11384:tid 11443] [client 158.158.105.128:53353] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad9PbnOhpt4MrQIXF7Cb6QAAAFU"]
[Wed Apr 15 16:42:23.375819 2026] [:error] [pid 11384:tid 11423] [client 158.158.105.128:3565] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad9Pb3Ohpt4MrQIXF7Cb6gAAAEE"]
[Wed Apr 15 16:42:24.340995 2026] [:error] [pid 11475:tid 11493] [client 158.158.105.128:53341] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad9PcJ7upE98bj816HPYcAAAAVA"]
[Wed Apr 15 16:42:25.327432 2026] [:error] [pid 12396:tid 12416] [client 158.158.105.128:21635] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xynz.php"] [unique_id "ad9PccCQWGYUWgxc5kj9awAAAJI"]
[Wed Apr 15 16:42:26.508189 2026] [:error] [pid 11475:tid 11490] [client 158.158.105.128:3553] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad9Pcp7upE98bj816HPYdAAAAU0"]
[Wed Apr 15 16:42:27.932091 2026] [:error] [pid 11475:tid 11493] [client 158.158.105.128:48872] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad9Pc57upE98bj816HPYewAAAVA"]
[Wed Apr 15 16:42:29.150047 2026] [:error] [pid 11475:tid 11489] [client 158.158.105.128:50805] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad9PdZ7upE98bj816HPYgQAAAUw"]
[Wed Apr 15 16:42:30.219289 2026] [:error] [pid 11475:tid 11495] [client 158.158.105.128:21644] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-01ul.php"] [unique_id "ad9Pdp7upE98bj816HPYhQAAAVI"]
[Wed Apr 15 16:42:31.244468 2026] [:error] [pid 11383:tid 11399] [client 158.158.105.128:27182] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad9PdzOMRk2pAgm2-j7SVQAAAAQ"]
[Wed Apr 15 16:42:32.215470 2026] [:error] [pid 11383:tid 11401] [client 158.158.105.128:3442] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad9PeDOMRk2pAgm2-j7SVgAAAAY"]
[Wed Apr 15 16:42:33.131386 2026] [:error] [pid 11475:tid 11483] [client 158.158.105.128:29709] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad9PeZ7upE98bj816HPYigAAAUY"]
[Wed Apr 15 16:42:34.287418 2026] [:error] [pid 12433:tid 12447] [client 158.158.105.128:48854] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e7.php"] [unique_id "ad9PerwxDHWF005pP_66ZAAAAQw"]
[Wed Apr 15 16:42:35.394300 2026] [:error] [pid 11475:tid 11477] [client 158.158.105.128:52719] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad9Pe57upE98bj816HPYjQAAAUA"]
[Wed Apr 15 16:42:36.102177 2026] [:error] [pid 11384:tid 11423] [client 158.158.105.128:48858] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad9PfHOhpt4MrQIXF7Cb7wAAAEE"]
[Wed Apr 15 16:42:37.149640 2026] [:error] [pid 11475:tid 11500] [client 158.158.105.128:27157] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad9PfZ7upE98bj816HPYkgAAAVc"]
[Wed Apr 15 16:42:38.330978 2026] [:error] [pid 11475:tid 11479] [client 158.158.105.128:45672] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/e3.php"] [unique_id "ad9Pfp7upE98bj816HPYmwAAAUI"]
[Wed Apr 15 16:42:39.120929 2026] [:error] [pid 11475:tid 11495] [client 158.158.105.128:64976] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad9Pf57upE98bj816HPYnwAAAVI"]
[Wed Apr 15 16:42:39.875544 2026] [:error] [pid 11385:tid 11469] [client 158.158.105.128:54549] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad9Pfx_mZoXMMCiUoKVH5QAAANQ"]
[Wed Apr 15 16:42:40.731547 2026] [:error] [pid 12433:tid 12437] [client 158.158.105.128:21663] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad9PgLwxDHWF005pP_66ZwAAAQI"]
[Wed Apr 15 16:42:41.316391 2026] [:error] [pid 11383:tid 11403] [client 158.158.105.128:52680] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aevly.php"] [unique_id "ad9PgTOMRk2pAgm2-j7SWQAAAAg"]
[Wed Apr 15 16:42:41.989171 2026] [:error] [pid 11383:tid 11412] [client 158.158.105.128:45674] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9PgTOMRk2pAgm2-j7SWgAAABE"]
[Wed Apr 15 16:42:42.745610 2026] [:error] [pid 11383:tid 11396] [client 158.158.105.128:45689] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9PgjOMRk2pAgm2-j7SWwAAAAE"]
[Wed Apr 15 16:42:43.722651 2026] [:error] [pid 65412:tid 65425] [client 158.158.105.128:21662] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9Pg_EYT61VHfhVE5fvggAAAYs"]
[Wed Apr 15 16:42:44.546737 2026] [:error] [pid 11385:tid 11468] [client 158.158.105.128:47560] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9PhB_mZoXMMCiUoKVH6AAAANM"]
[Wed Apr 15 16:42:45.310925 2026] [proxy_fcgi:error] [pid 11384:tid 11433] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:45.689675 2026] [proxy_fcgi:error] [pid 11384:tid 11431] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:46.143906 2026] [proxy_fcgi:error] [pid 11384:tid 11435] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:46.388028 2026] [proxy_fcgi:error] [pid 11384:tid 11434] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:46.794198 2026] [proxy_fcgi:error] [pid 11384:tid 11443] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:47.253699 2026] [proxy_fcgi:error] [pid 11384:tid 11423] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:47.633753 2026] [proxy_fcgi:error] [pid 11384:tid 11425] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:48.037922 2026] [proxy_fcgi:error] [pid 11384:tid 11428] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:48.280694 2026] [proxy_fcgi:error] [pid 11384:tid 11436] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:48.572859 2026] [proxy_fcgi:error] [pid 11384:tid 11432] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:48.819842 2026] [proxy_fcgi:error] [pid 11384:tid 11422] [client 158.158.105.128:54566] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 16:42:49.151533 2026] [:error] [pid 11384:tid 11451] [client 158.158.105.128:54566] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad9PiXOhpt4MrQIXF7CcCAAAAFg"]
[Wed Apr 15 16:42:50.861862 2026] [:error] [pid 11475:tid 11491] [client 158.158.105.128:48850] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad9Pip7upE98bj816HPYpgAAAU4"]
[Wed Apr 15 16:42:52.335830 2026] [:error] [pid 11385:tid 11455] [client 158.158.105.128:63641] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad9PjB_mZoXMMCiUoKVH8AAAAMY"]
[Wed Apr 15 16:42:53.269400 2026] [:error] [pid 11384:tid 11428] [client 158.158.105.128:52687] [client 158.158.105.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/goods_260401065719.php"] [unique_id "ad9PjXOhpt4MrQIXF7CcCwAAAEY"]
[Wed Apr 15 18:21:34.374579 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:34.876083 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:35.203906 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:35.579210 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:35.888365 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:36.214390 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:36.692400 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:37.008763 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:37.310104 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:37.547813 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 172.213.140.103:16729] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:21:37.817857 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:16729] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "ad9msRcEkLCmvF0fjDeLGAAAAIw"]
[Wed Apr 15 18:21:38.517858 2026] [:error] [pid 30957:tid 31009] [client 172.213.140.103:16442] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "ad9msn5gwVEVXHfVSipeNgAAAFQ"]
[Wed Apr 15 18:21:39.430078 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:13139] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "ad9msxcEkLCmvF0fjDeLHQAAAIg"]
[Wed Apr 15 18:21:40.517447 2026] [:error] [pid 31053:tid 31069] [client 172.213.140.103:20944] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "ad9mtBcEkLCmvF0fjDeLIgAAAI0"]
[Wed Apr 15 18:21:41.773110 2026] [:error] [pid 31053:tid 31075] [client 172.213.140.103:23116] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "ad9mtRcEkLCmvF0fjDeLJgAAAJM"]
[Wed Apr 15 18:21:42.882203 2026] [:error] [pid 31053:tid 31057] [client 172.213.140.103:7960] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "ad9mthcEkLCmvF0fjDeLKwAAAIE"]
[Wed Apr 15 18:21:43.879696 2026] [:error] [pid 31053:tid 31080] [client 172.213.140.103:22474] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "ad9mtxcEkLCmvF0fjDeLLgAAAJg"]
[Wed Apr 15 18:21:47.963373 2026] [:error] [pid 30956:tid 30977] [client 172.213.140.103:22062] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "ad9mu0BGUpjaWntNYq1S5QAAABE"]
[Wed Apr 15 18:21:51.699966 2026] [:error] [pid 31053:tid 31076] [client 172.213.140.103:11267] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "ad9mvxcEkLCmvF0fjDeLUAAAAJQ"]
[Wed Apr 15 18:21:53.184684 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:22784] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "ad9mwRcEkLCmvF0fjDeLXAAAAIg"]
[Wed Apr 15 18:21:54.444325 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:29779] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "ad9mwseG3wSKTO7NWFF4OgAAANY"]
[Wed Apr 15 18:21:55.367530 2026] [:error] [pid 31053:tid 31075] [client 172.213.140.103:27732] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "ad9mwxcEkLCmvF0fjDeLZQAAAJM"]
[Wed Apr 15 18:22:01.142920 2026] [:error] [pid 30958:tid 31040] [client 172.213.140.103:26399] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/beerd.php"] [unique_id "ad9myceG3wSKTO7NWFF4RQAAANg"]
[Wed Apr 15 18:22:03.080468 2026] [:error] [pid 30958:tid 31036] [client 172.213.140.103:5173] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/beerd.php"] [unique_id "ad9my8eG3wSKTO7NWFF4SAAAANQ"]
[Wed Apr 15 18:22:05.597710 2026] [:error] [pid 30958:tid 31029] [client 172.213.140.103:18453] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/beerd.php"] [unique_id "ad9mzceG3wSKTO7NWFF4SgAAAM0"]
[Wed Apr 15 18:22:07.066200 2026] [:error] [pid 30958:tid 31030] [client 172.213.140.103:18294] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/beerd.php"] [unique_id "ad9mz8eG3wSKTO7NWFF4TQAAAM4"]
[Wed Apr 15 18:22:08.578973 2026] [:error] [pid 31053:tid 31073] [client 172.213.140.103:27834] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "ad9m0BcEkLCmvF0fjDeLfAAAAJE"]
[Wed Apr 15 18:22:09.970862 2026] [:error] [pid 31053:tid 31056] [client 172.213.140.103:27748] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "ad9m0RcEkLCmvF0fjDeLggAAAIA"]
[Wed Apr 15 18:22:11.065876 2026] [:error] [pid 30956:tid 30972] [client 172.213.140.103:24290] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "ad9m00BGUpjaWntNYq1S9wAAAAw"]
[Wed Apr 15 18:22:13.169064 2026] [:error] [pid 30957:tid 31011] [client 172.213.140.103:29823] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "ad9m1X5gwVEVXHfVSipeTwAAAFY"]
[Wed Apr 15 18:22:14.175050 2026] [:error] [pid 30958:tid 31020] [client 172.213.140.103:13701] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "ad9m1seG3wSKTO7NWFF4YQAAAMQ"]
[Wed Apr 15 18:22:15.384026 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:22119] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "ad9m18eG3wSKTO7NWFF4ZQAAANY"]
[Wed Apr 15 18:22:16.540329 2026] [:error] [pid 30958:tid 31025] [client 172.213.140.103:29822] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "ad9m2MeG3wSKTO7NWFF4agAAAMk"]
[Wed Apr 15 18:22:17.436381 2026] [:error] [pid 30958:tid 31028] [client 172.213.140.103:27742] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "ad9m2ceG3wSKTO7NWFF4cQAAAMw"]
[Wed Apr 15 18:22:18.317564 2026] [:error] [pid 30956:tid 30978] [client 172.213.140.103:27837] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9m2kBGUpjaWntNYq1S-gAAABI"]
[Wed Apr 15 18:22:19.611130 2026] [:error] [pid 31053:tid 31069] [client 172.213.140.103:13394] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9m2xcEkLCmvF0fjDeLmwAAAI0"]
[Wed Apr 15 18:22:20.565143 2026] [:error] [pid 31053:tid 31067] [client 172.213.140.103:26395] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9m3BcEkLCmvF0fjDeLnwAAAIs"]
[Wed Apr 15 18:22:21.742658 2026] [:error] [pid 31053:tid 31072] [client 172.213.140.103:22111] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "ad9m3RcEkLCmvF0fjDeLpQAAAJA"]
[Wed Apr 15 18:22:25.652689 2026] [:error] [pid 30957:tid 31010] [client 172.213.140.103:7736] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad9m4X5gwVEVXHfVSipeVwAAAFU"]
[Wed Apr 15 18:22:27.627492 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:16737] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad9m4xcEkLCmvF0fjDeLvwAAAIw"]
[Wed Apr 15 18:22:28.577005 2026] [:error] [pid 31053:tid 31058] [client 172.213.140.103:14241] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad9m5BcEkLCmvF0fjDeLwgAAAII"]
[Wed Apr 15 18:22:29.636402 2026] [:error] [pid 30957:tid 31013] [client 172.213.140.103:17924] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "ad9m5X5gwVEVXHfVSipeWgAAAFg"]
[Wed Apr 15 18:22:31.114852 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:29885] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/RIP.php"] [unique_id "ad9m5xcEkLCmvF0fjDeL0AAAAIo"]
[Wed Apr 15 18:22:32.748315 2026] [:error] [pid 30957:tid 30995] [client 172.213.140.103:11849] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/RIP.php"] [unique_id "ad9m6H5gwVEVXHfVSipeXQAAAEY"]
[Wed Apr 15 18:22:33.909946 2026] [:error] [pid 30958:tid 31024] [client 172.213.140.103:17936] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/RIP.php"] [unique_id "ad9m6ceG3wSKTO7NWFF4iQAAAMg"]
[Wed Apr 15 18:22:36.489350 2026] [:error] [pid 30958:tid 31018] [client 172.213.140.103:24229] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/RIP.php"] [unique_id "ad9m7MeG3wSKTO7NWFF4jwAAAMI"]
[Wed Apr 15 18:22:37.679282 2026] [proxy_fcgi:error] [pid 30956:tid 30961] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:38.085446 2026] [proxy_fcgi:error] [pid 30956:tid 30978] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:38.465582 2026] [proxy_fcgi:error] [pid 30956:tid 30980] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:39.687866 2026] [proxy_fcgi:error] [pid 30956:tid 30960] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:39.924399 2026] [proxy_fcgi:error] [pid 30956:tid 30966] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:40.161713 2026] [proxy_fcgi:error] [pid 30956:tid 30974] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:40.418174 2026] [proxy_fcgi:error] [pid 30956:tid 30979] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:40.655145 2026] [proxy_fcgi:error] [pid 30956:tid 30982] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:40.893661 2026] [proxy_fcgi:error] [pid 30956:tid 30981] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:41.303305 2026] [proxy_fcgi:error] [pid 30956:tid 30973] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:41.575909 2026] [proxy_fcgi:error] [pid 30956:tid 30972] [client 172.213.140.103:10245] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:22:41.929907 2026] [:error] [pid 30956:tid 30970] [client 172.213.140.103:10245] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "ad9m8UBGUpjaWntNYq1TGQAAAAo"]
[Wed Apr 15 18:22:42.653567 2026] [:error] [pid 30957:tid 30997] [client 172.213.140.103:24916] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "ad9m8n5gwVEVXHfVSipebQAAAEg"]
[Wed Apr 15 18:22:43.702383 2026] [:error] [pid 31053:tid 31069] [client 172.213.140.103:23879] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "ad9m8xcEkLCmvF0fjDeL3QAAAI0"]
[Wed Apr 15 18:22:47.224999 2026] [:error] [pid 31053:tid 31080] [client 172.213.140.103:11035] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "ad9m9xcEkLCmvF0fjDeL7AAAAJg"]
[Wed Apr 15 18:22:49.390150 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:8040] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7logs.php"] [unique_id "ad9m-RcEkLCmvF0fjDeL9AAAAJc"]
[Wed Apr 15 18:22:50.482357 2026] [:error] [pid 30958:tid 31028] [client 172.213.140.103:20175] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7logs.php"] [unique_id "ad9m-seG3wSKTO7NWFF4oQAAAMw"]
[Wed Apr 15 18:22:51.472531 2026] [:error] [pid 30956:tid 30984] [client 172.213.140.103:20220] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7logs.php"] [unique_id "ad9m-0BGUpjaWntNYq1TJQAAABg"]
[Wed Apr 15 18:22:52.600570 2026] [:error] [pid 30957:tid 31004] [client 172.213.140.103:20213] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/7logs.php"] [unique_id "ad9m_H5gwVEVXHfVSipedgAAAE8"]
[Wed Apr 15 18:22:53.618959 2026] [:error] [pid 30958:tid 31034] [client 172.213.140.103:5717] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acc.php"] [unique_id "ad9m_ceG3wSKTO7NWFF4qQAAANI"]
[Wed Apr 15 18:22:55.125765 2026] [:error] [pid 31053:tid 31067] [client 172.213.140.103:21197] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acc.php"] [unique_id "ad9m_xcEkLCmvF0fjDeL_QAAAIs"]
[Wed Apr 15 18:22:56.337662 2026] [:error] [pid 30956:tid 30979] [client 172.213.140.103:8022] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acc.php"] [unique_id "ad9nAEBGUpjaWntNYq1TKQAAABM"]
[Wed Apr 15 18:22:57.528605 2026] [:error] [pid 31053:tid 31063] [client 172.213.140.103:9653] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acc.php"] [unique_id "ad9nARcEkLCmvF0fjDeMBAAAAIc"]
[Wed Apr 15 18:22:58.364885 2026] [:error] [pid 30957:tid 31001] [client 172.213.140.103:30035] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "ad9nAn5gwVEVXHfVSipegQAAAEw"]
[Wed Apr 15 18:22:59.631005 2026] [:error] [pid 30957:tid 31008] [client 172.213.140.103:30002] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "ad9nA35gwVEVXHfVSipeggAAAFM"]
[Wed Apr 15 18:23:00.349514 2026] [:error] [pid 30957:tid 30996] [client 172.213.140.103:30069] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "ad9nBH5gwVEVXHfVSipegwAAAEc"]
[Wed Apr 15 18:23:01.328372 2026] [:error] [pid 30957:tid 31012] [client 172.213.140.103:7501] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "ad9nBX5gwVEVXHfVSipehgAAAFc"]
[Wed Apr 15 18:23:02.657431 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:7513] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9nBseG3wSKTO7NWFF4tAAAANY"]
[Wed Apr 15 18:23:03.354073 2026] [:error] [pid 30958:tid 31039] [client 172.213.140.103:21428] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9nB8eG3wSKTO7NWFF4twAAANc"]
[Wed Apr 15 18:23:04.110521 2026] [:error] [pid 30958:tid 31017] [client 172.213.140.103:30465] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9nCMeG3wSKTO7NWFF4uwAAAME"]
[Wed Apr 15 18:23:05.095951 2026] [:error] [pid 30958:tid 31034] [client 172.213.140.103:29983] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "ad9nCceG3wSKTO7NWFF4vgAAANI"]
[Wed Apr 15 18:23:05.708733 2026] [:error] [pid 30958:tid 31016] [client 172.213.140.103:20192] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9nCceG3wSKTO7NWFF4wAAAAMA"]
[Wed Apr 15 18:23:10.177196 2026] [:error] [pid 31053:tid 31060] [client 172.213.140.103:30480] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9nDhcEkLCmvF0fjDeMIQAAAIQ"]
[Wed Apr 15 18:23:12.056416 2026] [:error] [pid 30957:tid 31008] [client 172.213.140.103:10768] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9nEH5gwVEVXHfVSipemwAAAFM"]
[Wed Apr 15 18:23:13.752981 2026] [:error] [pid 30958:tid 31039] [client 172.213.140.103:17516] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ad9nEceG3wSKTO7NWFF4zAAAANc"]
[Wed Apr 15 18:23:14.582333 2026] [:error] [pid 30957:tid 31005] [client 172.213.140.103:41121] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "ad9nEn5gwVEVXHfVSipepQAAAFA"]
[Wed Apr 15 18:23:15.501020 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:15729] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "ad9nExcEkLCmvF0fjDeMLgAAAIg"]
[Wed Apr 15 18:23:16.238510 2026] [:error] [pid 30957:tid 31012] [client 172.213.140.103:15717] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "ad9nFH5gwVEVXHfVSipepgAAAFc"]
[Wed Apr 15 18:23:18.704120 2026] [:error] [pid 30958:tid 31028] [client 172.213.140.103:5646] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "ad9nFseG3wSKTO7NWFF41wAAAMw"]
[Wed Apr 15 18:23:21.358159 2026] [:error] [pid 30957:tid 31001] [client 172.213.140.103:10792] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "ad9nGX5gwVEVXHfVSipergAAAEw"]
[Wed Apr 15 18:23:22.803660 2026] [:error] [pid 30957:tid 31000] [client 172.213.140.103:10783] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "ad9nGn5gwVEVXHfVSipesgAAAEs"]
[Wed Apr 15 18:23:24.045277 2026] [:error] [pid 31053:tid 31077] [client 172.213.140.103:26918] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "ad9nHBcEkLCmvF0fjDeMQgAAAJU"]
[Wed Apr 15 18:23:25.032380 2026] [:error] [pid 31053:tid 31074] [client 172.213.140.103:17757] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "ad9nHRcEkLCmvF0fjDeMSgAAAJI"]
[Wed Apr 15 18:23:26.427565 2026] [:error] [pid 31053:tid 31070] [client 172.213.140.103:22620] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sde.php"] [unique_id "ad9nHhcEkLCmvF0fjDeMWAAAAI4"]
[Wed Apr 15 18:23:27.087610 2026] [:error] [pid 30956:tid 30977] [client 172.213.140.103:17159] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sde.php"] [unique_id "ad9nH0BGUpjaWntNYq1TPwAAABE"]
[Wed Apr 15 18:23:28.437551 2026] [:error] [pid 31053:tid 31072] [client 172.213.140.103:12659] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sde.php"] [unique_id "ad9nIBcEkLCmvF0fjDeMZAAAAJA"]
[Wed Apr 15 18:23:29.195072 2026] [:error] [pid 30957:tid 31007] [client 172.213.140.103:9214] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sde.php"] [unique_id "ad9nIX5gwVEVXHfVSipeuQAAAFI"]
[Wed Apr 15 18:23:29.894011 2026] [:error] [pid 30958:tid 31025] [client 172.213.140.103:41093] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wpb.php"] [unique_id "ad9nIceG3wSKTO7NWFF5CgAAAMk"]
[Wed Apr 15 18:23:30.503156 2026] [:error] [pid 31053:tid 31060] [client 172.213.140.103:9163] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wpb.php"] [unique_id "ad9nIhcEkLCmvF0fjDeMcgAAAIQ"]
[Wed Apr 15 18:23:31.055815 2026] [:error] [pid 30957:tid 30997] [client 172.213.140.103:41097] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wpb.php"] [unique_id "ad9nI35gwVEVXHfVSipeuwAAAEg"]
[Wed Apr 15 18:23:31.688281 2026] [:error] [pid 30958:tid 31019] [client 172.213.140.103:9161] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wpb.php"] [unique_id "ad9nI8eG3wSKTO7NWFF5FQAAAMM"]
[Wed Apr 15 18:23:32.759498 2026] [:error] [pid 30957:tid 31013] [client 172.213.140.103:26938] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad9nJH5gwVEVXHfVSipewAAAAFg"]
[Wed Apr 15 18:23:34.042448 2026] [:error] [pid 30958:tid 31032] [client 172.213.140.103:5520] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad9nJseG3wSKTO7NWFF5JwAAANA"]
[Wed Apr 15 18:23:35.678958 2026] [:error] [pid 31053:tid 31057] [client 172.213.140.103:5220] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad9nJxcEkLCmvF0fjDeMlgAAAIE"]
[Wed Apr 15 18:23:37.323609 2026] [:error] [pid 30957:tid 30993] [client 172.213.140.103:30612] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Geforce.php"] [unique_id "ad9nKX5gwVEVXHfVSipexwAAAEQ"]
[Wed Apr 15 18:23:38.094834 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:12101] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad9nKhcEkLCmvF0fjDeMrwAAAIw"]
[Wed Apr 15 18:23:38.854448 2026] [:error] [pid 30957:tid 31006] [client 172.213.140.103:19867] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad9nKn5gwVEVXHfVSipeywAAAFE"]
[Wed Apr 15 18:23:39.691566 2026] [:error] [pid 30957:tid 31009] [client 172.213.140.103:5226] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "ad9nK35gwVEVXHfVSipezAAAAFQ"]
[Wed Apr 15 18:23:42.765820 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:43.146519 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:43.435674 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:43.744568 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:43.983246 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:44.327849 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:44.730757 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:45.061000 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:45.483797 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:45.789068 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:46.158658 2026] [proxy_fcgi:error] [pid 31053:tid 31071] [client 172.213.140.103:16489] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:23:46.458378 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:16489] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad9nMhcEkLCmvF0fjDeNQgAAAJc"]
[Wed Apr 15 18:23:47.031251 2026] [:error] [pid 31053:tid 31063] [client 172.213.140.103:20872] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad9nMxcEkLCmvF0fjDeNTwAAAIc"]
[Wed Apr 15 18:23:47.778978 2026] [:error] [pid 31053:tid 31067] [client 172.213.140.103:9128] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad9nMxcEkLCmvF0fjDeNXgAAAIs"]
[Wed Apr 15 18:23:48.566314 2026] [:error] [pid 31053:tid 31063] [client 172.213.140.103:18533] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "ad9nNBcEkLCmvF0fjDeNbQAAAIc"]
[Wed Apr 15 18:23:49.355654 2026] [:error] [pid 30956:tid 30978] [client 172.213.140.103:15246] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "ad9nNUBGUpjaWntNYq1TZwAAABI"]
[Wed Apr 15 18:23:49.947626 2026] [:error] [pid 30956:tid 30967] [client 172.213.140.103:6044] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "ad9nNUBGUpjaWntNYq1TagAAAAc"]
[Wed Apr 15 18:23:50.740025 2026] [:error] [pid 30956:tid 30960] [client 172.213.140.103:16469] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "ad9nNkBGUpjaWntNYq1TcAAAAAA"]
[Wed Apr 15 18:23:51.565818 2026] [:error] [pid 30957:tid 30997] [client 172.213.140.103:18525] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "ad9nN35gwVEVXHfVSipe2AAAAEg"]
[Wed Apr 15 18:23:52.359189 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:18513] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ad9nOBcEkLCmvF0fjDeNrgAAAIo"]
[Wed Apr 15 18:23:52.946948 2026] [:error] [pid 30958:tid 31028] [client 172.213.140.103:20887] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ad9nOMeG3wSKTO7NWFF5awAAAMw"]
[Wed Apr 15 18:23:53.574448 2026] [:error] [pid 30957:tid 30992] [client 172.213.140.103:9103] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ad9nOX5gwVEVXHfVSipe3AAAAEM"]
[Wed Apr 15 18:23:54.318893 2026] [:error] [pid 30958:tid 31024] [client 172.213.140.103:6074] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "ad9nOseG3wSKTO7NWFF5cAAAAMg"]
[Wed Apr 15 18:23:55.093354 2026] [:error] [pid 30956:tid 30960] [client 172.213.140.103:6100] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9nO0BGUpjaWntNYq1TgwAAAAA"]
[Wed Apr 15 18:23:56.216738 2026] [:error] [pid 30956:tid 30967] [client 172.213.140.103:29332] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9nPEBGUpjaWntNYq1ThwAAAAc"]
[Wed Apr 15 18:23:57.291191 2026] [:error] [pid 30958:tid 31016] [client 172.213.140.103:16193] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9nPceG3wSKTO7NWFF5dQAAAMA"]
[Wed Apr 15 18:23:58.138045 2026] [:error] [pid 30958:tid 31031] [client 172.213.140.103:24673] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "ad9nPseG3wSKTO7NWFF5eAAAAM8"]
[Wed Apr 15 18:23:58.829196 2026] [:error] [pid 30956:tid 30960] [client 172.213.140.103:14527] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ad9nPkBGUpjaWntNYq1TjgAAAAA"]
[Wed Apr 15 18:23:59.900915 2026] [:error] [pid 30957:tid 31003] [client 172.213.140.103:28331] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ad9nP35gwVEVXHfVSipe7AAAAE4"]
[Wed Apr 15 18:24:00.517111 2026] [:error] [pid 30957:tid 30990] [client 172.213.140.103:15241] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ad9nQH5gwVEVXHfVSipe8QAAAEE"]
[Wed Apr 15 18:24:01.257658 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:24103] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "ad9nQRcEkLCmvF0fjDeOCQAAAJc"]
[Wed Apr 15 18:24:02.288380 2026] [:error] [pid 30958:tid 31033] [client 172.213.140.103:9404] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ad9nQseG3wSKTO7NWFF5gAAAANE"]
[Wed Apr 15 18:24:03.562069 2026] [:error] [pid 30958:tid 31019] [client 172.213.140.103:18545] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ad9nQ8eG3wSKTO7NWFF5iAAAAMM"]
[Wed Apr 15 18:24:04.423647 2026] [:error] [pid 30956:tid 30978] [client 172.213.140.103:29363] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ad9nREBGUpjaWntNYq1TlQAAABI"]
[Wed Apr 15 18:24:05.003559 2026] [:error] [pid 30957:tid 30991] [client 172.213.140.103:15255] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "ad9nRX5gwVEVXHfVSipe-wAAAEI"]
[Wed Apr 15 18:24:05.546043 2026] [:error] [pid 30957:tid 31004] [client 172.213.140.103:14492] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ad9nRX5gwVEVXHfVSipe_QAAAE8"]
[Wed Apr 15 18:24:06.110824 2026] [:error] [pid 30957:tid 31006] [client 172.213.140.103:28332] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ad9nRn5gwVEVXHfVSipfAAAAAFE"]
[Wed Apr 15 18:24:06.699807 2026] [:error] [pid 30958:tid 31034] [client 172.213.140.103:12909] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ad9nRseG3wSKTO7NWFF5lwAAANI"]
[Wed Apr 15 18:24:07.349926 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:16221] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "ad9nR35gwVEVXHfVSipfBwAAAEU"]
[Wed Apr 15 18:24:08.847551 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:28808] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/upll22.php"] [unique_id "ad9nSBcEkLCmvF0fjDeOQAAAAIw"]
[Wed Apr 15 18:24:09.930309 2026] [:error] [pid 30958:tid 31040] [client 172.213.140.103:10356] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/upll22.php"] [unique_id "ad9nSceG3wSKTO7NWFF5tgAAANg"]
[Wed Apr 15 18:24:10.717169 2026] [:error] [pid 30956:tid 30977] [client 172.213.140.103:28330] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/upll22.php"] [unique_id "ad9nSkBGUpjaWntNYq1TvQAAABE"]
[Wed Apr 15 18:24:11.826197 2026] [:error] [pid 31053:tid 31058] [client 172.213.140.103:24648] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/upll22.php"] [unique_id "ad9nSxcEkLCmvF0fjDeOUwAAAII"]
[Wed Apr 15 18:24:12.526071 2026] [:error] [pid 30958:tid 31034] [client 172.213.140.103:16210] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "ad9nTMeG3wSKTO7NWFF51QAAANI"]
[Wed Apr 15 18:24:13.434332 2026] [:error] [pid 30958:tid 31020] [client 172.213.140.103:27697] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "ad9nTceG3wSKTO7NWFF53AAAAMQ"]
[Wed Apr 15 18:24:14.052431 2026] [:error] [pid 30956:tid 30968] [client 172.213.140.103:24691] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "ad9nTkBGUpjaWntNYq1TzAAAAAg"]
[Wed Apr 15 18:24:14.759783 2026] [:error] [pid 30958:tid 31040] [client 172.213.140.103:10366] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "ad9nTseG3wSKTO7NWFF56AAAANg"]
[Wed Apr 15 18:24:15.452143 2026] [:error] [pid 30956:tid 30976] [client 172.213.140.103:27696] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad9nT0BGUpjaWntNYq1T1AAAABA"]
[Wed Apr 15 18:24:16.132584 2026] [:error] [pid 30958:tid 31032] [client 172.213.140.103:19172] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad9nUMeG3wSKTO7NWFF58QAAANA"]
[Wed Apr 15 18:24:16.814773 2026] [:error] [pid 30958:tid 31019] [client 172.213.140.103:14520] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad9nUMeG3wSKTO7NWFF59AAAAMM"]
[Wed Apr 15 18:24:17.677265 2026] [:error] [pid 30958:tid 31021] [client 172.213.140.103:9345] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "ad9nUceG3wSKTO7NWFF5-wAAAMU"]
[Wed Apr 15 18:24:18.321169 2026] [:error] [pid 30957:tid 31008] [client 172.213.140.103:12891] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "ad9nUn5gwVEVXHfVSipfEQAAAFM"]
[Wed Apr 15 18:24:18.934934 2026] [:error] [pid 30958:tid 31037] [client 172.213.140.103:22532] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "ad9nUseG3wSKTO7NWFF6AAAAANU"]
[Wed Apr 15 18:24:20.340375 2026] [:error] [pid 31053:tid 31065] [client 172.213.140.103:17259] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "ad9nVBcEkLCmvF0fjDeOZAAAAIk"]
[Wed Apr 15 18:24:21.092282 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:22377] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "ad9nVRcEkLCmvF0fjDeObAAAAIg"]
[Wed Apr 15 18:24:21.854461 2026] [:error] [pid 31053:tid 31072] [client 172.213.140.103:17695] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ad9nVRcEkLCmvF0fjDeOcAAAAJA"]
[Wed Apr 15 18:24:22.741590 2026] [:error] [pid 31053:tid 31078] [client 172.213.140.103:14522] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ad9nVhcEkLCmvF0fjDeOdQAAAJY"]
[Wed Apr 15 18:24:23.591299 2026] [:error] [pid 30956:tid 30963] [client 172.213.140.103:17674] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ad9nV0BGUpjaWntNYq1T_wAAAAM"]
[Wed Apr 15 18:24:24.164546 2026] [:error] [pid 30957:tid 30995] [client 172.213.140.103:12890] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "ad9nWH5gwVEVXHfVSipfGgAAAEY"]
[Wed Apr 15 18:24:24.946004 2026] [:error] [pid 31053:tid 31072] [client 172.213.140.103:28062] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ad9nWBcEkLCmvF0fjDeOfwAAAJA"]
[Wed Apr 15 18:24:25.703139 2026] [:error] [pid 31053:tid 31075] [client 172.213.140.103:30371] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ad9nWRcEkLCmvF0fjDeOggAAAJM"]
[Wed Apr 15 18:24:26.686070 2026] [:error] [pid 31053:tid 31071] [client 172.213.140.103:5997] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ad9nWhcEkLCmvF0fjDeOjAAAAI8"]
[Wed Apr 15 18:24:27.746327 2026] [:error] [pid 31053:tid 31077] [client 172.213.140.103:17703] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX1.php"] [unique_id "ad9nWxcEkLCmvF0fjDeOkwAAAJU"]
[Wed Apr 15 18:24:28.391706 2026] [:error] [pid 30957:tid 30992] [client 172.213.140.103:8646] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ad9nXH5gwVEVXHfVSipfIAAAAEM"]
[Wed Apr 15 18:24:29.539732 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:28087] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ad9nXRcEkLCmvF0fjDeOmgAAAIw"]
[Wed Apr 15 18:24:30.194514 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:8652] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ad9nXn5gwVEVXHfVSipfJQAAAEU"]
[Wed Apr 15 18:24:30.884949 2026] [:error] [pid 30958:tid 31037] [client 172.213.140.103:10076] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ad9nXseG3wSKTO7NWFF6DAAAANU"]
[Wed Apr 15 18:24:31.409570 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:26133] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ad9nX8eG3wSKTO7NWFF6DQAAANY"]
[Wed Apr 15 18:24:31.946099 2026] [:error] [pid 30958:tid 31035] [client 172.213.140.103:22393] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ad9nX8eG3wSKTO7NWFF6EAAAANM"]
[Wed Apr 15 18:24:32.492281 2026] [:error] [pid 30956:tid 30982] [client 172.213.140.103:19137] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ad9nYEBGUpjaWntNYq1UIwAAABY"]
[Wed Apr 15 18:24:33.197855 2026] [:error] [pid 31053:tid 31059] [client 172.213.140.103:5967] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ad9nYRcEkLCmvF0fjDeOowAAAIM"]
[Wed Apr 15 18:24:33.686778 2026] [:error] [pid 30958:tid 31022] [client 172.213.140.103:28033] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "ad9nYceG3wSKTO7NWFF6FwAAAMY"]
[Wed Apr 15 18:24:34.275068 2026] [:error] [pid 30956:tid 30964] [client 172.213.140.103:14056] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "ad9nYkBGUpjaWntNYq1UJgAAAAQ"]
[Wed Apr 15 18:24:34.753494 2026] [:error] [pid 31053:tid 31070] [client 172.213.140.103:22559] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "ad9nYhcEkLCmvF0fjDeOqgAAAI4"]
[Wed Apr 15 18:24:35.372525 2026] [:error] [pid 30958:tid 31035] [client 172.213.140.103:30350] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "ad9nY8eG3wSKTO7NWFF6HgAAANM"]
[Wed Apr 15 18:24:36.031754 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:22547] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9nZBcEkLCmvF0fjDeOrAAAAJc"]
[Wed Apr 15 18:24:36.619425 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:22341] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9nZH5gwVEVXHfVSipfLgAAAEU"]
[Wed Apr 15 18:24:37.447487 2026] [:error] [pid 31053:tid 31065] [client 172.213.140.103:19182] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9nZRcEkLCmvF0fjDeOtAAAAIk"]
[Wed Apr 15 18:24:38.017910 2026] [:error] [pid 31053:tid 31063] [client 172.213.140.103:14735] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9nZhcEkLCmvF0fjDeOuAAAAIc"]
[Wed Apr 15 18:24:38.706363 2026] [:error] [pid 30958:tid 31040] [client 172.213.140.103:16943] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad9nZseG3wSKTO7NWFF6OwAAANg"]
[Wed Apr 15 18:24:39.183169 2026] [:error] [pid 30956:tid 30970] [client 172.213.140.103:14026] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad9nZ0BGUpjaWntNYq1UKwAAAAo"]
[Wed Apr 15 18:24:39.856103 2026] [:error] [pid 30956:tid 30982] [client 172.213.140.103:26169] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad9nZ0BGUpjaWntNYq1USwAAABY"]
[Wed Apr 15 18:24:40.457442 2026] [:error] [pid 30956:tid 30981] [client 172.213.140.103:12819] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "ad9naEBGUpjaWntNYq1UdgAAABU"]
[Wed Apr 15 18:24:40.982579 2026] [:error] [pid 30957:tid 30989] [client 172.213.140.103:26450] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9naH5gwVEVXHfVSipfggAAAEA"]
[Wed Apr 15 18:24:41.670385 2026] [:error] [pid 30958:tid 31022] [client 172.213.140.103:24861] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9naceG3wSKTO7NWFF6qAAAAMY"]
[Wed Apr 15 18:24:42.345689 2026] [:error] [pid 30956:tid 30966] [client 172.213.140.103:5365] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9nakBGUpjaWntNYq1UkQAAAAY"]
[Wed Apr 15 18:24:43.131348 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:10093] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "ad9naxcEkLCmvF0fjDePNQAAAJc"]
[Wed Apr 15 18:24:43.642575 2026] [:error] [pid 31053:tid 31076] [client 172.213.140.103:5344] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ad9naxcEkLCmvF0fjDePOQAAAJQ"]
[Wed Apr 15 18:24:44.246437 2026] [:error] [pid 30956:tid 30982] [client 172.213.140.103:12813] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ad9nbEBGUpjaWntNYq1UlAAAABY"]
[Wed Apr 15 18:24:45.178326 2026] [:error] [pid 30958:tid 31031] [client 172.213.140.103:14068] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ad9nbceG3wSKTO7NWFF6qgAAAM8"]
[Wed Apr 15 18:24:45.755034 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:26115] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/CDX2.php"] [unique_id "ad9nbceG3wSKTO7NWFF6rQAAANY"]
[Wed Apr 15 18:24:46.342914 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:46.641763 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:46.971102 2026] [proxy_fcgi:error] [pid 31053:tid 31073] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:47.207808 2026] [proxy_fcgi:error] [pid 31053:tid 31067] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:47.451695 2026] [proxy_fcgi:error] [pid 31053:tid 31076] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:48.100757 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:24:48.525686 2026] [proxy_fcgi:error] [pid 31053:tid 31058] [client 172.213.140.103:30393] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:29.431120 2026] [proxy_fcgi:error] [pid 30957:tid 31004] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:29.746793 2026] [proxy_fcgi:error] [pid 30957:tid 30992] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:29.981444 2026] [proxy_fcgi:error] [pid 30957:tid 30993] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:30.217551 2026] [proxy_fcgi:error] [pid 30957:tid 30997] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:30.454552 2026] [proxy_fcgi:error] [pid 30957:tid 31010] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:31.893416 2026] [proxy_fcgi:error] [pid 30957:tid 31011] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:32.180658 2026] [proxy_fcgi:error] [pid 30957:tid 30991] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:32.418390 2026] [proxy_fcgi:error] [pid 30957:tid 31012] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:32.659287 2026] [proxy_fcgi:error] [pid 30957:tid 31008] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:32.907706 2026] [proxy_fcgi:error] [pid 30957:tid 30994] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:33.145107 2026] [proxy_fcgi:error] [pid 30957:tid 30989] [client 172.213.140.103:28784] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:28:33.440731 2026] [:error] [pid 30957:tid 31004] [client 172.213.140.103:28784] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ad9oUX5gwVEVXHfVSiphmgAAAE8"]
[Wed Apr 15 18:28:35.660786 2026] [:error] [pid 30958:tid 31020] [client 172.213.140.103:28216] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ad9oU8eG3wSKTO7NWFF82QAAAMQ"]
[Wed Apr 15 18:28:36.555543 2026] [:error] [pid 30958:tid 31035] [client 172.213.140.103:20204] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ad9oVMeG3wSKTO7NWFF83QAAANM"]
[Wed Apr 15 18:28:37.311853 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:14834] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "ad9oVRcEkLCmvF0fjDeS1AAAAIo"]
[Wed Apr 15 18:28:37.962349 2026] [:error] [pid 31053:tid 31074] [client 172.213.140.103:46533] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9oVRcEkLCmvF0fjDeS1wAAAJI"]
[Wed Apr 15 18:28:38.616462 2026] [:error] [pid 31053:tid 31075] [client 172.213.140.103:24125] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9oVhcEkLCmvF0fjDeS2wAAAJM"]
[Wed Apr 15 18:28:39.101522 2026] [:error] [pid 30956:tid 30964] [client 172.213.140.103:20609] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9oV0BGUpjaWntNYq1VtAAAAAQ"]
[Wed Apr 15 18:28:39.850851 2026] [:error] [pid 30958:tid 31023] [client 172.213.140.103:46486] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file61.php"] [unique_id "ad9oV8eG3wSKTO7NWFF84gAAAMc"]
[Wed Apr 15 18:28:40.416048 2026] [:error] [pid 31053:tid 31071] [client 172.213.140.103:20215] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad9oWBcEkLCmvF0fjDeS4gAAAI8"]
[Wed Apr 15 18:28:40.985317 2026] [:error] [pid 30958:tid 31035] [client 172.213.140.103:24126] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad9oWMeG3wSKTO7NWFF86AAAANM"]
[Wed Apr 15 18:28:41.591489 2026] [:error] [pid 31053:tid 31078] [client 172.213.140.103:20191] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad9oWRcEkLCmvF0fjDeS6AAAAJY"]
[Wed Apr 15 18:28:42.218610 2026] [:error] [pid 31053:tid 31063] [client 172.213.140.103:16167] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ad9oWhcEkLCmvF0fjDeS6gAAAIc"]
[Wed Apr 15 18:28:42.869140 2026] [:error] [pid 31053:tid 31076] [client 172.213.140.103:12610] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ad9oWhcEkLCmvF0fjDeS7QAAAJQ"]
[Wed Apr 15 18:28:43.546787 2026] [:error] [pid 31053:tid 31061] [client 172.213.140.103:24082] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ad9oWxcEkLCmvF0fjDeS8wAAAIU"]
[Wed Apr 15 18:28:44.196990 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:22641] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ad9oXBcEkLCmvF0fjDeS9AAAAIo"]
[Wed Apr 15 18:28:44.867825 2026] [:error] [pid 30958:tid 31029] [client 172.213.140.103:6112] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "ad9oXMeG3wSKTO7NWFF87wAAAM0"]
[Wed Apr 15 18:28:45.675865 2026] [:error] [pid 31053:tid 31075] [client 172.213.140.103:16505] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad9oXRcEkLCmvF0fjDeS-QAAAJM"]
[Wed Apr 15 18:28:46.377508 2026] [:error] [pid 30956:tid 30970] [client 172.213.140.103:11083] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad9oXkBGUpjaWntNYq1VtgAAAAo"]
[Wed Apr 15 18:28:47.030005 2026] [:error] [pid 30958:tid 31028] [client 172.213.140.103:26986] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad9oX8eG3wSKTO7NWFF89AAAAMw"]
[Wed Apr 15 18:28:47.581015 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:6093] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ad9oX35gwVEVXHfVSiphowAAAEU"]
[Wed Apr 15 18:28:48.279019 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:9652] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad9oYBcEkLCmvF0fjDeTAAAAAIg"]
[Wed Apr 15 18:28:49.743720 2026] [:error] [pid 31053:tid 31059] [client 172.213.140.103:6115] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad9oYRcEkLCmvF0fjDeTBQAAAIM"]
[Wed Apr 15 18:28:50.661421 2026] [:error] [pid 30957:tid 31006] [client 172.213.140.103:26962] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad9oYn5gwVEVXHfVSiphpAAAAFE"]
[Wed Apr 15 18:28:51.463668 2026] [:error] [pid 30957:tid 31013] [client 172.213.140.103:9607] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ad9oY35gwVEVXHfVSiphpwAAAFg"]
[Wed Apr 15 18:28:52.185503 2026] [:error] [pid 30957:tid 31005] [client 172.213.140.103:24954] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ad9oZH5gwVEVXHfVSiphqwAAAFA"]
[Wed Apr 15 18:28:53.003447 2026] [:error] [pid 31053:tid 31071] [client 172.213.140.103:15285] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ad9oZRcEkLCmvF0fjDeTCgAAAI8"]
[Wed Apr 15 18:28:53.918302 2026] [:error] [pid 30957:tid 30990] [client 172.213.140.103:15237] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ad9oZX5gwVEVXHfVSiphtAAAAEE"]
[Wed Apr 15 18:28:54.604060 2026] [:error] [pid 31053:tid 31056] [client 172.213.140.103:15295] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ad9oZhcEkLCmvF0fjDeTDgAAAIA"]
[Wed Apr 15 18:28:55.321624 2026] [:error] [pid 30957:tid 30992] [client 172.213.140.103:29973] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Cap.php"] [unique_id "ad9oZ35gwVEVXHfVSiphtwAAAEM"]
[Wed Apr 15 18:28:56.123721 2026] [:error] [pid 30958:tid 31040] [client 172.213.140.103:27927] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Cap.php"] [unique_id "ad9oaMeG3wSKTO7NWFF8-gAAANg"]
[Wed Apr 15 18:28:57.818952 2026] [:error] [pid 30957:tid 31003] [client 172.213.140.103:5535] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Cap.php"] [unique_id "ad9oaX5gwVEVXHfVSiphvgAAAE4"]
[Wed Apr 15 18:28:59.963717 2026] [:error] [pid 31053:tid 31073] [client 172.213.140.103:5513] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Cap.php"] [unique_id "ad9oaxcEkLCmvF0fjDeTGQAAAJE"]
[Wed Apr 15 18:29:01.210161 2026] [:error] [pid 31053:tid 31067] [client 172.213.140.103:5506] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ad9obRcEkLCmvF0fjDeTHQAAAIs"]
[Wed Apr 15 18:29:02.181031 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:5579] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ad9obhcEkLCmvF0fjDeTIQAAAIw"]
[Wed Apr 15 18:29:03.187573 2026] [:error] [pid 31053:tid 31069] [client 172.213.140.103:12152] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ad9obxcEkLCmvF0fjDeTKAAAAI0"]
[Wed Apr 15 18:29:04.203863 2026] [:error] [pid 30958:tid 31023] [client 172.213.140.103:5902] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ad9ocMeG3wSKTO7NWFF8_wAAAMc"]
[Wed Apr 15 18:29:05.497062 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:29845] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ad9ocRcEkLCmvF0fjDeTKgAAAJc"]
[Wed Apr 15 18:29:06.316952 2026] [:error] [pid 31053:tid 31076] [client 172.213.140.103:19109] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ad9ochcEkLCmvF0fjDeTLAAAAJQ"]
[Wed Apr 15 18:29:07.447917 2026] [:error] [pid 30958:tid 31019] [client 172.213.140.103:5940] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ad9oc8eG3wSKTO7NWFF9BgAAAMM"]
[Wed Apr 15 18:29:09.744104 2026] [:error] [pid 30956:tid 30971] [client 172.213.140.103:7797] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "ad9odUBGUpjaWntNYq1VwAAAAAs"]
[Wed Apr 15 18:29:11.024916 2026] [:error] [pid 30958:tid 31033] [client 172.213.140.103:29840] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad9od8eG3wSKTO7NWFF9FwAAANE"]
[Wed Apr 15 18:29:11.735407 2026] [:error] [pid 31053:tid 31064] [client 172.213.140.103:15039] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad9odxcEkLCmvF0fjDeTNQAAAIg"]
[Wed Apr 15 18:29:12.462391 2026] [:error] [pid 30958:tid 31030] [client 172.213.140.103:30425] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad9oeMeG3wSKTO7NWFF9LQAAAM4"]
[Wed Apr 15 18:29:13.097022 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:12034] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "ad9oeRcEkLCmvF0fjDeTPAAAAIw"]
[Wed Apr 15 18:29:14.355195 2026] [:error] [pid 30957:tid 31005] [client 172.213.140.103:9161] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "ad9oen5gwVEVXHfVSiphxwAAAFA"]
[Wed Apr 15 18:29:15.447810 2026] [:error] [pid 30956:tid 30969] [client 172.213.140.103:26651] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "ad9oe0BGUpjaWntNYq1VwwAAAAk"]
[Wed Apr 15 18:29:16.535016 2026] [:error] [pid 31053:tid 31058] [client 172.213.140.103:11330] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "ad9ofBcEkLCmvF0fjDeTRgAAAII"]
[Wed Apr 15 18:29:17.325944 2026] [:error] [pid 30958:tid 31019] [client 172.213.140.103:10760] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "ad9ofceG3wSKTO7NWFF9SAAAAMM"]
[Wed Apr 15 18:29:18.410017 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:19868] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad9ofn5gwVEVXHfVSiph0wAAAEU"]
[Wed Apr 15 18:29:19.618786 2026] [:error] [pid 30958:tid 31038] [client 172.213.140.103:16752] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad9of8eG3wSKTO7NWFF9WAAAANY"]
[Wed Apr 15 18:29:20.587471 2026] [:error] [pid 30956:tid 30966] [client 172.213.140.103:9993] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad9ogEBGUpjaWntNYq1VzQAAAAY"]
[Wed Apr 15 18:29:21.248991 2026] [:error] [pid 31053:tid 31069] [client 172.213.140.103:19876] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad9ogRcEkLCmvF0fjDeTSwAAAI0"]
[Wed Apr 15 18:29:22.638789 2026] [:error] [pid 30956:tid 30970] [client 172.213.140.103:24698] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ad9ogkBGUpjaWntNYq1V1wAAAAo"]
[Wed Apr 15 18:29:23.397822 2026] [:error] [pid 31053:tid 31057] [client 172.213.140.103:19863] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ad9ogxcEkLCmvF0fjDeTUAAAAIE"]
[Wed Apr 15 18:29:24.063872 2026] [:error] [pid 31053:tid 31056] [client 172.213.140.103:16716] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ad9ohBcEkLCmvF0fjDeTUwAAAIA"]
[Wed Apr 15 18:29:24.671385 2026] [:error] [pid 30956:tid 30969] [client 172.213.140.103:14279] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ad9ohEBGUpjaWntNYq1V2gAAAAk"]
[Wed Apr 15 18:29:26.145976 2026] [:error] [pid 30956:tid 30980] [client 172.213.140.103:9128] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9ohkBGUpjaWntNYq1V3AAAABQ"]
[Wed Apr 15 18:29:27.070168 2026] [:error] [pid 31053:tid 31079] [client 172.213.140.103:14977] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9ohxcEkLCmvF0fjDeTYgAAAJc"]
[Wed Apr 15 18:29:28.289228 2026] [:error] [pid 30957:tid 31000] [client 172.213.140.103:16730] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9oiH5gwVEVXHfVSiph2wAAAEs"]
[Wed Apr 15 18:29:29.298859 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:14294] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "ad9oiRcEkLCmvF0fjDeTaQAAAIo"]
[Wed Apr 15 18:29:30.138458 2026] [:error] [pid 31053:tid 31068] [client 172.213.140.103:11345] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new3.php"] [unique_id "ad9oihcEkLCmvF0fjDeTbQAAAIw"]
[Wed Apr 15 18:29:31.020145 2026] [:error] [pid 31053:tid 31080] [client 172.213.140.103:21469] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new3.php"] [unique_id "ad9oixcEkLCmvF0fjDeTcQAAAJg"]
[Wed Apr 15 18:29:31.903488 2026] [:error] [pid 31053:tid 31074] [client 172.213.140.103:11383] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new3.php"] [unique_id "ad9oixcEkLCmvF0fjDeTeQAAAJI"]
[Wed Apr 15 18:29:32.719906 2026] [:error] [pid 30956:tid 30964] [client 172.213.140.103:21481] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new3.php"] [unique_id "ad9ojEBGUpjaWntNYq1V4gAAAAQ"]
[Wed Apr 15 18:29:33.584791 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:33.884801 2026] [proxy_fcgi:error] [pid 31053:tid 31060] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:34.177484 2026] [proxy_fcgi:error] [pid 31053:tid 31065] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:34.469120 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:34.706369 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:34.975306 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:35.557703 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:35.895389 2026] [proxy_fcgi:error] [pid 31053:tid 31065] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:36.317185 2026] [proxy_fcgi:error] [pid 31053:tid 31068] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:36.996544 2026] [proxy_fcgi:error] [pid 31053:tid 31075] [client 172.213.140.103:16705] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 18:29:37.311297 2026] [:error] [pid 31053:tid 31066] [client 172.213.140.103:16705] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad9okRcEkLCmvF0fjDeTrAAAAIo"]
[Wed Apr 15 18:29:38.063451 2026] [:error] [pid 30957:tid 30989] [client 172.213.140.103:15038] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad9okn5gwVEVXHfVSiph8AAAAEA"]
[Wed Apr 15 18:29:39.260062 2026] [:error] [pid 30957:tid 30994] [client 172.213.140.103:11367] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad9ok35gwVEVXHfVSiph-AAAAEU"]
[Wed Apr 15 18:29:40.377531 2026] [:error] [pid 30957:tid 30990] [client 172.213.140.103:12051] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/motu.php"] [unique_id "ad9olH5gwVEVXHfVSiph_gAAAEE"]
[Wed Apr 15 18:29:41.645646 2026] [:error] [pid 30958:tid 31026] [client 172.213.140.103:13765] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ad9olceG3wSKTO7NWFF9rAAAAMo"]
[Wed Apr 15 18:29:43.176956 2026] [:error] [pid 31053:tid 31078] [client 172.213.140.103:10020] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ad9olxcEkLCmvF0fjDeTyQAAAJY"]
[Wed Apr 15 18:29:45.996772 2026] [:error] [pid 30958:tid 31033] [client 172.213.140.103:19898] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ad9omceG3wSKTO7NWFF9tgAAANE"]
[Wed Apr 15 18:29:48.382149 2026] [:error] [pid 31053:tid 31073] [client 172.213.140.103:19667] [client 172.213.140.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ad9onBcEkLCmvF0fjDeT0gAAAJE"]
[Wed Apr 15 19:27:56.656574 2026] [:error] [pid 30956:tid 30984] [client 35.237.142.171:63281] [client 35.237.142.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.142.171, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "ad92PEBGUpjaWntNYq1jGgAAABg"]
[Wed Apr 15 19:27:56.665875 2026] [proxy_fcgi:error] [pid 30956:tid 30984] [client 35.237.142.171:63281] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 19:28:00.750153 2026] [:error] [pid 30956:tid 30969] [client 35.237.142.171:63281] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ad92QEBGUpjaWntNYq1jLQAAAAk"]
[Wed Apr 15 19:28:01.489070 2026] [:error] [pid 37370:tid 37389] [client 35.237.142.171:58308] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ad92QXg-gnM2Ga0cGAANpwAAARE"]
[Wed Apr 15 19:28:02.117601 2026] [:error] [pid 30958:tid 31034] [client 35.237.142.171:57742] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ad92QseG3wSKTO7NWFGPmAAAANI"]
[Wed Apr 15 19:28:02.711528 2026] [:error] [pid 30958:tid 31021] [client 35.237.142.171:51898] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ad92QseG3wSKTO7NWFGPmQAAAMU"]
[Wed Apr 15 19:28:03.308033 2026] [:error] [pid 30958:tid 31033] [client 35.237.142.171:51907] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ad92Q8eG3wSKTO7NWFGPnAAAANE"]
[Wed Apr 15 19:28:03.908506 2026] [:error] [pid 30957:tid 31012] [client 35.237.142.171:57871] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ad92Q35gwVEVXHfVSipyygAAAFc"]
[Wed Apr 15 19:28:04.481995 2026] [:error] [pid 30958:tid 31017] [client 35.237.142.171:53876] [client 35.237.142.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ad92RMeG3wSKTO7NWFGPnQAAAME"]
[Thu Apr 16 00:28:08.211042 2026] [authz_core:error] [pid 30958:tid 31031] [client 128.199.182.152:37406] AH01630: client denied by server configuration: /home/quarryspec/quarryspec.com.au/server-status
[Thu Apr 16 00:28:08.612355 2026] [authz_core:error] [pid 30958:tid 31037] [client 134.122.28.88:49626] AH01630: client denied by server configuration: /home/quarryspec/quarryspec.com.au/server-status
[Thu Apr 16 00:28:13.344545 2026] [:error] [pid 16664:tid 16731] [client 128.199.182.152:45712] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "ad-8nTdzt684awDJwRTF3wAAAYw"]
[Thu Apr 16 00:28:13.799164 2026] [:error] [pid 23913:tid 23923] [client 134.122.28.88:49674] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "ad-8nVUaK3MLdSaLOyj4DAAAAUg"]
[Thu Apr 16 00:28:17.326674 2026] [:error] [pid 30957:tid 30994] [client 128.199.182.152:45728] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "ad-8oX5gwVEVXHfVSirSeAAAAEU"]
[Thu Apr 16 00:28:17.807657 2026] [:error] [pid 30957:tid 31012] [client 134.122.28.88:39976] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "ad-8oX5gwVEVXHfVSirSewAAAFc"]
[Thu Apr 16 00:28:19.460542 2026] [:error] [pid 31053:tid 31059] [client 128.199.182.152:45772] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api/gql"] [unique_id "ad-8oxcEkLCmvF0fjDdyCAAAAIM"]
[Thu Apr 16 00:28:19.730003 2026] [:error] [pid 31053:tid 31067] [client 128.199.182.152:45780] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "ad-8oxcEkLCmvF0fjDdyCwAAAIs"]
[Thu Apr 16 00:28:20.503963 2026] [:error] [pid 23913:tid 23928] [client 134.122.28.88:40012] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api/gql"] [unique_id "ad-8pFUaK3MLdSaLOyj4KQAAAU0"]
[Thu Apr 16 00:28:20.729538 2026] [:error] [pid 16664:tid 16735] [client 128.199.182.152:45792] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.json"] [unique_id "ad-8pDdzt684awDJwRTF7wAAAZA"]
[Thu Apr 16 00:28:20.919968 2026] [:error] [pid 16664:tid 16725] [client 134.122.28.88:40014] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "ad-8pDdzt684awDJwRTF8AAAAYY"]
[Thu Apr 16 00:28:21.730805 2026] [:error] [pid 31053:tid 31057] [client 128.199.182.152:45800] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/telescope/requests"] [unique_id "ad-8pRcEkLCmvF0fjDdyDQAAAIE"]
[Thu Apr 16 00:28:21.918762 2026] [:error] [pid 30956:tid 30962] [client 134.122.28.88:40020] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.json"] [unique_id "ad-8pUBGUpjaWntNYq2x5QAAAAI"]
[Thu Apr 16 00:28:22.731302 2026] [:error] [pid 30956:tid 30977] [client 128.199.182.152:36522] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "ad-8pkBGUpjaWntNYq2x5gAAABE"]
[Thu Apr 16 00:28:22.924250 2026] [:error] [pid 30956:tid 30984] [client 134.122.28.88:40032] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/telescope/requests"] [unique_id "ad-8pkBGUpjaWntNYq2x5wAAABg"]
[Thu Apr 16 00:28:23.730809 2026] [:error] [pid 16664:tid 16730] [client 128.199.182.152:36538] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/security.txt"] [unique_id "ad-8pzdzt684awDJwRTF9AAAAYs"]
[Thu Apr 16 00:28:23.932612 2026] [:error] [pid 16664:tid 16738] [client 134.122.28.88:40036] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php"] [unique_id "ad-8pzdzt684awDJwRTF9wAAAZM"]
[Thu Apr 16 00:28:24.731717 2026] [:error] [pid 30956:tid 30963] [client 128.199.182.152:36552] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/actuator/env"] [unique_id "ad-8qEBGUpjaWntNYq2x6gAAAAM"]
[Thu Apr 16 00:28:24.924690 2026] [:error] [pid 30957:tid 30994] [client 134.122.28.88:42994] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/security.txt"] [unique_id "ad-8qH5gwVEVXHfVSirShgAAAEU"]
[Thu Apr 16 00:28:25.932126 2026] [:error] [pid 31053:tid 31074] [client 134.122.28.88:43002] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/actuator/env"] [unique_id "ad-8qRcEkLCmvF0fjDdyEAAAAJI"]
[Thu Apr 16 00:28:26.733358 2026] [:error] [pid 31053:tid 31078] [client 128.199.182.152:36564] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger-ui.html"] [unique_id "ad-8qhcEkLCmvF0fjDdyEQAAAJY"]
[Thu Apr 16 00:28:27.733038 2026] [:error] [pid 30956:tid 30970] [client 128.199.182.152:36570] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/index.html"] [unique_id "ad-8q0BGUpjaWntNYq2x7wAAAAo"]
[Thu Apr 16 00:28:27.932778 2026] [:error] [pid 30957:tid 31000] [client 134.122.28.88:43004] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger-ui.html"] [unique_id "ad-8q35gwVEVXHfVSirSkwAAAEs"]
[Thu Apr 16 00:28:28.735645 2026] [:error] [pid 30958:tid 31016] [client 128.199.182.152:36572] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "ad-8rMeG3wSKTO7NWFEAXgAAAMA"]
[Thu Apr 16 00:28:28.934476 2026] [:error] [pid 30958:tid 31028] [client 134.122.28.88:43016] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/index.html"] [unique_id "ad-8rMeG3wSKTO7NWFEAYAAAAMw"]
[Thu Apr 16 00:28:29.758544 2026] [:error] [pid 30958:tid 31026] [client 128.199.182.152:36588] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "ad-8rceG3wSKTO7NWFEAYQAAAMo"]
[Thu Apr 16 00:28:29.928829 2026] [:error] [pid 16664:tid 16732] [client 134.122.28.88:43018] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "ad-8rTdzt684awDJwRTF-gAAAY0"]
[Thu Apr 16 00:28:30.742476 2026] [:error] [pid 23913:tid 23923] [client 128.199.182.152:36596] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger.json"] [unique_id "ad-8rlUaK3MLdSaLOyj4bAAAAUg"]
[Thu Apr 16 00:28:30.936852 2026] [:error] [pid 23913:tid 23936] [client 134.122.28.88:43026] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "ad-8rlUaK3MLdSaLOyj4cAAAAVU"]
[Thu Apr 16 00:28:31.740984 2026] [:error] [pid 30958:tid 31023] [client 128.199.182.152:36600] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "ad-8r8eG3wSKTO7NWFEAYwAAAMc"]
[Thu Apr 16 00:28:31.935695 2026] [:error] [pid 31053:tid 31066] [client 134.122.28.88:43036] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger.json"] [unique_id "ad-8rxcEkLCmvF0fjDdyGgAAAIo"]
[Thu Apr 16 00:28:32.739600 2026] [:error] [pid 31053:tid 31064] [client 128.199.182.152:41810] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2/api-docs"] [unique_id "ad-8sBcEkLCmvF0fjDdyHAAAAIg"]
[Thu Apr 16 00:28:32.936582 2026] [:error] [pid 37370:tid 37391] [client 134.122.28.88:43044] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "ad-8sHg-gnM2Ga0cGAC6lQAAARM"]
[Thu Apr 16 00:28:33.740740 2026] [:error] [pid 31053:tid 31069] [client 128.199.182.152:41822] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3/api-docs"] [unique_id "ad-8sRcEkLCmvF0fjDdyIQAAAI0"]
[Thu Apr 16 00:28:33.938931 2026] [:error] [pid 31053:tid 31058] [client 134.122.28.88:43058] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2/api-docs"] [unique_id "ad-8sRcEkLCmvF0fjDdyIwAAAII"]
[Thu Apr 16 00:28:34.743924 2026] [:error] [pid 31053:tid 31066] [client 128.199.182.152:41838] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api-docs/swagger.json"] [unique_id "ad-8shcEkLCmvF0fjDdyKQAAAIo"]
[Thu Apr 16 00:28:34.932058 2026] [:error] [pid 23913:tid 23917] [client 134.122.28.88:48452] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3/api-docs"] [unique_id "ad-8slUaK3MLdSaLOyj4iwAAAUI"]
[Thu Apr 16 00:28:35.742769 2026] [:error] [pid 30958:tid 31033] [client 128.199.182.152:41844] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api/swagger.json"] [unique_id "ad-8s8eG3wSKTO7NWFEAaQAAANE"]
[Thu Apr 16 00:28:35.932665 2026] [:error] [pid 30957:tid 31010] [client 134.122.28.88:48462] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api-docs/swagger.json"] [unique_id "ad-8s35gwVEVXHfVSirSnAAAAFU"]
[Thu Apr 16 00:28:36.743246 2026] [:error] [pid 23913:tid 23925] [client 128.199.182.152:41860] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trace.axd"] [unique_id "ad-8tFUaK3MLdSaLOyj4lgAAAUo"]
[Thu Apr 16 00:28:36.940789 2026] [:error] [pid 23913:tid 23936] [client 134.122.28.88:48464] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/api/swagger.json"] [unique_id "ad-8tFUaK3MLdSaLOyj4mQAAAVU"]
[Thu Apr 16 00:28:37.746716 2026] [:error] [pid 16664:tid 16735] [client 128.199.182.152:41866] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/@vite/env"] [unique_id "ad-8tTdzt684awDJwRTF_gAAAZA"]
[Thu Apr 16 00:28:37.940055 2026] [:error] [pid 30957:tid 30991] [client 134.122.28.88:48474] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trace.axd"] [unique_id "ad-8tX5gwVEVXHfVSirSnwAAAEI"]
[Thu Apr 16 00:28:38.745131 2026] [:error] [pid 16664:tid 16724] [client 128.199.182.152:41874] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "ad-8tjdzt684awDJwRTGAAAAAYU"]
[Thu Apr 16 00:28:38.939777 2026] [:error] [pid 23913:tid 23931] [client 134.122.28.88:48476] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/@vite/env"] [unique_id "ad-8tlUaK3MLdSaLOyj4oQAAAVA"]
[Thu Apr 16 00:28:39.746908 2026] [:error] [pid 30957:tid 30996] [client 128.199.182.152:41886] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ad-8t35gwVEVXHfVSirSogAAAEc"]
[Thu Apr 16 00:28:39.940716 2026] [:error] [pid 30957:tid 30997] [client 134.122.28.88:48480] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "ad-8t35gwVEVXHfVSirSowAAAEg"]
[Thu Apr 16 00:28:40.747436 2026] [:error] [pid 37370:tid 37390] [client 128.199.182.152:41900] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ad-8uHg-gnM2Ga0cGAC6nwAAARI"]
[Thu Apr 16 00:28:40.940324 2026] [:error] [pid 30957:tid 30992] [client 134.122.28.88:48486] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ad-8uH5gwVEVXHfVSirSpgAAAEM"]
[Thu Apr 16 00:28:41.748923 2026] [:error] [pid 16664:tid 16730] [client 128.199.182.152:41912] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/debug/default/view"] [unique_id "ad-8uTdzt684awDJwRTGBQAAAYs"]
[Thu Apr 16 00:28:41.941737 2026] [:error] [pid 30957:tid 31013] [client 134.122.28.88:48490] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ad-8uX5gwVEVXHfVSirSqQAAAFg"]
[Thu Apr 16 00:28:42.940450 2026] [:error] [pid 30958:tid 31040] [client 134.122.28.88:48506] [client 134.122.28.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/debug/default/view"] [unique_id "ad-8useG3wSKTO7NWFEAeAAAANg"]
[Thu Apr 16 02:43:16.419671 2026] [:error] [pid 792:tid 871] [client 91.200.101.138:51406] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/graphql"] [unique_id "ad_cRN3PZ8z30TezIkZokgAAAMI"]
[Thu Apr 16 07:04:59.393362 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:04:59.654029 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:04:59.938250 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:00.202347 2026] [proxy_fcgi:error] [pid 49094:tid 49116] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:00.502802 2026] [proxy_fcgi:error] [pid 49094:tid 49119] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:00.774506 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:01.033502 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:01.294149 2026] [proxy_fcgi:error] [pid 49094:tid 49111] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:01.556471 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:01.835276 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.215.216.144:64916] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:05:02.090196 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:64916] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "aeAZnjbDwvcXorHR_MynyQAAAU4"]
[Thu Apr 16 07:05:03.083151 2026] [:error] [pid 57538:tid 57621] [client 20.215.216.144:64317] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "aeAZn8uMaiEF5SVR2BdD0gAAAJM"]
[Thu Apr 16 07:05:03.693939 2026] [:error] [pid 57538:tid 57622] [client 20.215.216.144:64997] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "aeAZn8uMaiEF5SVR2BdD1gAAAJQ"]
[Thu Apr 16 07:05:04.710538 2026] [:error] [pid 57538:tid 57605] [client 20.215.216.144:63724] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/green.php"] [unique_id "aeAZoMuMaiEF5SVR2BdD3wAAAIM"]
[Thu Apr 16 07:05:05.344384 2026] [:error] [pid 57639:tid 57652] [client 20.215.216.144:64934] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/multirole.php"] [unique_id "aeAZoaMCQoTw7TsxWunTnwAAAMY"]
[Thu Apr 16 07:05:06.089427 2026] [:error] [pid 57538:tid 57616] [client 20.215.216.144:64977] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/multirole.php"] [unique_id "aeAZosuMaiEF5SVR2BdD6gAAAI4"]
[Thu Apr 16 07:05:07.421998 2026] [:error] [pid 57538:tid 57609] [client 20.215.216.144:63623] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/multirole.php"] [unique_id "aeAZo8uMaiEF5SVR2BdD7AAAAIc"]
[Thu Apr 16 07:05:09.411118 2026] [:error] [pid 57538:tid 57625] [client 20.215.216.144:63715] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/multirole.php"] [unique_id "aeAZpcuMaiEF5SVR2BdD8QAAAJc"]
[Thu Apr 16 07:05:10.137334 2026] [:error] [pid 57537:tid 57599] [client 20.215.216.144:65001] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "aeAZplVQRS8nm73ENAk7uAAAAFg"]
[Thu Apr 16 07:05:10.751346 2026] [:error] [pid 57537:tid 57575] [client 20.215.216.144:64955] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "aeAZplVQRS8nm73ENAk7ugAAAEA"]
[Thu Apr 16 07:05:11.519909 2026] [:error] [pid 57537:tid 57578] [client 20.215.216.144:63071] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "aeAZp1VQRS8nm73ENAk7vQAAAEM"]
[Thu Apr 16 07:05:12.508626 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:64995] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/RIP.php"] [unique_id "aeAZqMuMaiEF5SVR2BdD-AAAAJg"]
[Thu Apr 16 07:05:14.710269 2026] [:error] [pid 57639:tid 57658] [client 20.215.216.144:64979] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeAZqqMCQoTw7TsxWunTqgAAAMw"]
[Thu Apr 16 07:05:15.456156 2026] [:error] [pid 57536:tid 57566] [client 20.215.216.144:64999] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeAZqyQU4faGja6jpDuHpgAAABI"]
[Thu Apr 16 07:05:16.167319 2026] [:error] [pid 57536:tid 57558] [client 20.215.216.144:63695] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeAZrCQU4faGja6jpDuHpwAAAAo"]
[Thu Apr 16 07:05:17.103929 2026] [:error] [pid 49094:tid 49099] [client 20.215.216.144:62978] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeAZrTbDwvcXorHR_MynzAAAAUM"]
[Thu Apr 16 07:05:18.165764 2026] [:error] [pid 57536:tid 57550] [client 20.215.216.144:64933] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cobaini.php"] [unique_id "aeAZriQU4faGja6jpDuHqQAAAAI"]
[Thu Apr 16 07:05:19.344307 2026] [:error] [pid 29603:tid 29607] [client 20.215.216.144:64362] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cobaini.php"] [unique_id "aeAZr1fGOR6fpTWUAzrZTAAAAQI"]
[Thu Apr 16 07:05:21.214670 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:64896] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cobaini.php"] [unique_id "aeAZsVfGOR6fpTWUAzrZUwAAARE"]
[Thu Apr 16 07:05:22.254070 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:64289] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cobaini.php"] [unique_id "aeAZsjbDwvcXorHR_Myn0AAAAUU"]
[Thu Apr 16 07:05:23.262574 2026] [:error] [pid 57536:tid 57551] [client 20.215.216.144:64326] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mmp.php"] [unique_id "aeAZsyQU4faGja6jpDuH0gAAAAM"]
[Thu Apr 16 07:05:24.050023 2026] [:error] [pid 57538:tid 57616] [client 20.215.216.144:63075] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mmp.php"] [unique_id "aeAZtMuMaiEF5SVR2BdEFQAAAI4"]
[Thu Apr 16 07:05:24.965751 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:63627] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mmp.php"] [unique_id "aeAZtDbDwvcXorHR_Myn1QAAAVc"]
[Thu Apr 16 07:05:29.532943 2026] [:error] [pid 57639:tid 57646] [client 20.215.216.144:63680] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mmp.php"] [unique_id "aeAZuaMCQoTw7TsxWunTzAAAAMA"]
[Thu Apr 16 07:05:30.935433 2026] [:error] [pid 57538:tid 57611] [client 20.215.216.144:64332] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "aeAZusuMaiEF5SVR2BdEGwAAAIk"]
[Thu Apr 16 07:05:32.123124 2026] [:error] [pid 57639:tid 57661] [client 20.215.216.144:64268] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "aeAZvKMCQoTw7TsxWunTzwAAAM8"]
[Thu Apr 16 07:05:32.948464 2026] [:error] [pid 29603:tid 29621] [client 20.215.216.144:63642] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "aeAZvFfGOR6fpTWUAzrZaQAAARA"]
[Thu Apr 16 07:05:33.649066 2026] [:error] [pid 49094:tid 49106] [client 20.215.216.144:64374] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "aeAZvTbDwvcXorHR_Myn3AAAAUo"]
[Thu Apr 16 07:05:34.207275 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:62985] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeAZvjbDwvcXorHR_Myn3wAAAUQ"]
[Thu Apr 16 07:05:34.924771 2026] [:error] [pid 49094:tid 49117] [client 20.215.216.144:63742] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeAZvjbDwvcXorHR_Myn5QAAAVU"]
[Thu Apr 16 07:05:36.004918 2026] [:error] [pid 57538:tid 57617] [client 20.215.216.144:63004] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeAZwMuMaiEF5SVR2BdEIQAAAI8"]
[Thu Apr 16 07:05:36.725823 2026] [:error] [pid 57537:tid 57589] [client 20.215.216.144:64347] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeAZwFVQRS8nm73ENAk7xwAAAE4"]
[Thu Apr 16 07:05:37.470610 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:63641] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clque.php"] [unique_id "aeAZwTbDwvcXorHR_Myn7gAAAUY"]
[Thu Apr 16 07:05:38.533783 2026] [:error] [pid 57639:tid 57664] [client 20.215.216.144:61264] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clque.php"] [unique_id "aeAZwqMCQoTw7TsxWunT1AAAANI"]
[Thu Apr 16 07:05:39.350602 2026] [:error] [pid 57639:tid 57657] [client 20.215.216.144:64331] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clque.php"] [unique_id "aeAZw6MCQoTw7TsxWunT1QAAAMs"]
[Thu Apr 16 07:05:39.959315 2026] [:error] [pid 57538:tid 57607] [client 20.215.216.144:62989] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clque.php"] [unique_id "aeAZw8uMaiEF5SVR2BdEJwAAAIU"]
[Thu Apr 16 07:05:41.000192 2026] [:error] [pid 49094:tid 49114] [client 20.215.216.144:64311] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aeAZxDbDwvcXorHR_Myn8AAAAVI"]
[Thu Apr 16 07:05:41.730425 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:64370] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aeAZxTbDwvcXorHR_Myn9gAAAUc"]
[Thu Apr 16 07:05:42.476629 2026] [:error] [pid 57536:tid 57570] [client 20.215.216.144:62449] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aeAZxiQU4faGja6jpDuH5gAAABY"]
[Thu Apr 16 07:05:43.435391 2026] [:error] [pid 49094:tid 49096] [client 20.215.216.144:64257] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aeAZxzbDwvcXorHR_Myn-gAAAUA"]
[Thu Apr 16 07:05:44.162781 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:63620] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahaoi.php"] [unique_id "aeAZyMuMaiEF5SVR2BdEKwAAAIY"]
[Thu Apr 16 07:05:45.109593 2026] [:error] [pid 57538:tid 57604] [client 20.215.216.144:63681] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahaoi.php"] [unique_id "aeAZycuMaiEF5SVR2BdELgAAAII"]
[Thu Apr 16 07:05:45.705735 2026] [:error] [pid 57537:tid 57594] [client 20.215.216.144:64335] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahaoi.php"] [unique_id "aeAZyVVQRS8nm73ENAk7zgAAAFM"]
[Thu Apr 16 07:05:46.360826 2026] [:error] [pid 57538:tid 57607] [client 20.215.216.144:65000] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahaoi.php"] [unique_id "aeAZysuMaiEF5SVR2BdENAAAAIU"]
[Thu Apr 16 07:05:47.274973 2026] [:error] [pid 29603:tid 29626] [client 20.215.216.144:64348] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bogles.php"] [unique_id "aeAZy1fGOR6fpTWUAzrZdAAAARU"]
[Thu Apr 16 07:05:48.018272 2026] [:error] [pid 29603:tid 29609] [client 20.215.216.144:63675] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bogles.php"] [unique_id "aeAZzFfGOR6fpTWUAzrZdwAAAQQ"]
[Thu Apr 16 07:05:49.055509 2026] [:error] [pid 57538:tid 57615] [client 20.215.216.144:62354] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bogles.php"] [unique_id "aeAZzcuMaiEF5SVR2BdEOgAAAI0"]
[Thu Apr 16 07:05:49.750366 2026] [:error] [pid 57536:tid 57562] [client 20.215.216.144:63617] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bogles.php"] [unique_id "aeAZzSQU4faGja6jpDuH6gAAAA4"]
[Thu Apr 16 07:05:50.332440 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:63028] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeAZzjbDwvcXorHR_MyoCAAAAUk"]
[Thu Apr 16 07:05:51.054864 2026] [:error] [pid 57639:tid 57649] [client 20.215.216.144:64291] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeAZz6MCQoTw7TsxWunT4AAAAMM"]
[Thu Apr 16 07:05:51.679244 2026] [:error] [pid 49094:tid 49104] [client 20.215.216.144:61706] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeAZzzbDwvcXorHR_MyoDwAAAUg"]
[Thu Apr 16 07:05:52.995014 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:63670] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeAZ0DbDwvcXorHR_MyoGAAAAUw"]
[Thu Apr 16 07:06:13.536762 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:13.799323 2026] [proxy_fcgi:error] [pid 49094:tid 49119] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:14.086210 2026] [proxy_fcgi:error] [pid 49094:tid 49105] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:14.450679 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:14.717980 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:15.539457 2026] [proxy_fcgi:error] [pid 49094:tid 49109] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:15.799006 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:16.656074 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:16.962985 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:17.224110 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:17.548653 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.215.216.144:65006] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:06:17.950254 2026] [:error] [pid 49094:tid 49118] [client 20.215.216.144:65006] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeAZ6TbDwvcXorHR_MyocgAAAVY"]
[Thu Apr 16 07:06:20.618807 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:63687] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeAZ7MuMaiEF5SVR2BdEWAAAAJg"]
[Thu Apr 16 07:06:21.616231 2026] [:error] [pid 29603:tid 29627] [client 20.215.216.144:64324] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeAZ7VfGOR6fpTWUAzrZjQAAARY"]
[Thu Apr 16 07:06:22.293094 2026] [:error] [pid 57639:tid 57650] [client 20.215.216.144:64288] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeAZ7qMCQoTw7TsxWunT_wAAAMQ"]
[Thu Apr 16 07:06:23.270600 2026] [:error] [pid 57538:tid 57615] [client 20.215.216.144:64928] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "aeAZ78uMaiEF5SVR2BdEXwAAAI0"]
[Thu Apr 16 07:06:24.045197 2026] [:error] [pid 29603:tid 29619] [client 20.215.216.144:63084] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "aeAZ8FfGOR6fpTWUAzrZkQAAAQ4"]
[Thu Apr 16 07:06:24.653343 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:64376] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "aeAZ8FfGOR6fpTWUAzrZlQAAAQU"]
[Thu Apr 16 07:06:25.476022 2026] [:error] [pid 29603:tid 29626] [client 20.215.216.144:63619] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdn.php"] [unique_id "aeAZ8VfGOR6fpTWUAzrZmgAAARU"]
[Thu Apr 16 07:06:26.548064 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:63002] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-wlx.php"] [unique_id "aeAZ8jbDwvcXorHR_MyoeQAAAUE"]
[Thu Apr 16 07:06:27.481066 2026] [:error] [pid 57538:tid 57619] [client 20.215.216.144:63003] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-wlx.php"] [unique_id "aeAZ88uMaiEF5SVR2BdEaAAAAJE"]
[Thu Apr 16 07:06:28.759670 2026] [:error] [pid 57536:tid 57550] [client 20.215.216.144:64334] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-wlx.php"] [unique_id "aeAZ9CQU4faGja6jpDuIFAAAAAI"]
[Thu Apr 16 07:06:30.671444 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:63743] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-wlx.php"] [unique_id "aeAZ9jbDwvcXorHR_MyofAAAAUI"]
[Thu Apr 16 07:06:31.550079 2026] [:error] [pid 57536:tid 57571] [client 20.215.216.144:64280] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvz89.php"] [unique_id "aeAZ9yQU4faGja6jpDuIFwAAABc"]
[Thu Apr 16 07:06:33.110947 2026] [:error] [pid 57536:tid 57551] [client 20.215.216.144:63010] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvz89.php"] [unique_id "aeAZ-SQU4faGja6jpDuIGgAAAAM"]
[Thu Apr 16 07:06:34.153752 2026] [:error] [pid 57536:tid 57554] [client 20.215.216.144:65003] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvz89.php"] [unique_id "aeAZ-iQU4faGja6jpDuIHQAAAAY"]
[Thu Apr 16 07:06:34.908071 2026] [:error] [pid 29603:tid 29613] [client 20.215.216.144:64265] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvz89.php"] [unique_id "aeAZ-lfGOR6fpTWUAzrZqgAAAQg"]
[Thu Apr 16 07:06:36.597560 2026] [:error] [pid 57536:tid 57569] [client 20.215.216.144:63061] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/i6z19N.php"] [unique_id "aeAZ_CQU4faGja6jpDuIIwAAABU"]
[Thu Apr 16 07:06:38.497284 2026] [:error] [pid 57639:tid 57651] [client 20.215.216.144:63691] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/i6z19N.php"] [unique_id "aeAZ_qMCQoTw7TsxWunUCQAAAMU"]
[Thu Apr 16 07:06:40.091880 2026] [:error] [pid 49094:tid 49096] [client 20.215.216.144:63052] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/i6z19N.php"] [unique_id "aeAaADbDwvcXorHR_MyojAAAAUA"]
[Thu Apr 16 07:06:40.800514 2026] [:error] [pid 49094:tid 49107] [client 20.215.216.144:63060] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/i6z19N.php"] [unique_id "aeAaADbDwvcXorHR_MyojwAAAUs"]
[Thu Apr 16 07:06:41.464953 2026] [:error] [pid 57537:tid 57588] [client 20.215.216.144:62999] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl9.php"] [unique_id "aeAaAVVQRS8nm73ENAk7-QAAAE0"]
[Thu Apr 16 07:06:42.040372 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:62979] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl9.php"] [unique_id "aeAaAjbDwvcXorHR_MyokwAAAUc"]
[Thu Apr 16 07:06:42.892393 2026] [:error] [pid 29603:tid 29628] [client 20.215.216.144:64340] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl9.php"] [unique_id "aeAaAlfGOR6fpTWUAzrZsAAAARc"]
[Thu Apr 16 07:06:43.604261 2026] [:error] [pid 57639:tid 57653] [client 20.215.216.144:63719] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xl9.php"] [unique_id "aeAaA6MCQoTw7TsxWunUCgAAAMc"]
[Thu Apr 16 07:06:44.210612 2026] [:error] [pid 57639:tid 57654] [client 20.215.216.144:64304] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aeAaBKMCQoTw7TsxWunUDQAAAMg"]
[Thu Apr 16 07:06:44.984787 2026] [:error] [pid 57537:tid 57590] [client 20.215.216.144:61803] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aeAaBFVQRS8nm73ENAk7-wAAAE8"]
[Thu Apr 16 07:06:45.696005 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:64308] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aeAaBcuMaiEF5SVR2BdEcgAAAIY"]
[Thu Apr 16 07:06:46.372691 2026] [:error] [pid 57639:tid 57649] [client 20.215.216.144:63639] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd67.php"] [unique_id "aeAaBqMCQoTw7TsxWunUEgAAAMM"]
[Thu Apr 16 07:06:46.920881 2026] [:error] [pid 49094:tid 49113] [client 20.215.216.144:64318] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "aeAaBjbDwvcXorHR_MyolwAAAVE"]
[Thu Apr 16 07:06:47.502216 2026] [:error] [pid 57639:tid 57646] [client 20.215.216.144:63002] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "aeAaB6MCQoTw7TsxWunUEwAAAMA"]
[Thu Apr 16 07:06:48.108146 2026] [:error] [pid 57639:tid 57648] [client 20.215.216.144:63664] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "aeAaCKMCQoTw7TsxWunUFAAAAMI"]
[Thu Apr 16 07:06:48.728708 2026] [:error] [pid 29603:tid 29620] [client 20.215.216.144:63048] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "aeAaCFfGOR6fpTWUAzrZtgAAAQ8"]
[Thu Apr 16 07:06:49.480071 2026] [:error] [pid 29603:tid 29613] [client 20.215.216.144:61721] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeAaCVfGOR6fpTWUAzrZuAAAAQg"]
[Thu Apr 16 07:06:50.155690 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:61746] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeAaClfGOR6fpTWUAzrZvgAAAQM"]
[Thu Apr 16 07:06:50.874427 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:64329] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeAaCjbDwvcXorHR_MyooQAAAVM"]
[Thu Apr 16 07:06:51.663479 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:64283] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeAaCzbDwvcXorHR_MyopQAAAVc"]
[Thu Apr 16 07:06:52.428804 2026] [:error] [pid 29603:tid 29612] [client 20.215.216.144:64980] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "aeAaDFfGOR6fpTWUAzrZwQAAAQc"]
[Thu Apr 16 07:06:52.975552 2026] [:error] [pid 29603:tid 29606] [client 20.215.216.144:63707] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "aeAaDFfGOR6fpTWUAzrZxQAAAQE"]
[Thu Apr 16 07:06:53.652801 2026] [:error] [pid 29603:tid 29624] [client 20.215.216.144:65005] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "aeAaDVfGOR6fpTWUAzrZzAAAARM"]
[Thu Apr 16 07:06:54.367803 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:62980] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "aeAaDlfGOR6fpTWUAzrZ0AAAAQM"]
[Thu Apr 16 07:06:54.895994 2026] [:error] [pid 29603:tid 29621] [client 20.215.216.144:63023] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeAaDlfGOR6fpTWUAzrZ0wAAARA"]
[Thu Apr 16 07:06:55.529994 2026] [:error] [pid 29603:tid 29629] [client 20.215.216.144:63730] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeAaD1fGOR6fpTWUAzrZ1gAAARg"]
[Thu Apr 16 07:06:56.131925 2026] [:error] [pid 29603:tid 29628] [client 20.215.216.144:64964] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeAaEFfGOR6fpTWUAzrZ2AAAARc"]
[Thu Apr 16 07:06:56.809747 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:61703] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeAaEDbDwvcXorHR_MyorAAAAUU"]
[Thu Apr 16 07:06:57.475548 2026] [:error] [pid 57639:tid 57669] [client 20.215.216.144:63046] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/disagrsxr.php"] [unique_id "aeAaEaMCQoTw7TsxWunUHgAAANc"]
[Thu Apr 16 07:06:57.997689 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:63733] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/disagrsxr.php"] [unique_id "aeAaETbDwvcXorHR_MyotQAAAVc"]
[Thu Apr 16 07:06:58.856137 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:63016] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/disagrsxr.php"] [unique_id "aeAaElfGOR6fpTWUAzrZ3gAAAQU"]
[Thu Apr 16 07:06:59.485246 2026] [:error] [pid 49094:tid 49113] [client 20.215.216.144:63714] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/disagrsxr.php"] [unique_id "aeAaEzbDwvcXorHR_MyouwAAAVE"]
[Thu Apr 16 07:07:00.120276 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:64303] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aeAaFFfGOR6fpTWUAzrZ4AAAAQM"]
[Thu Apr 16 07:07:00.675827 2026] [:error] [pid 29603:tid 29621] [client 20.215.216.144:63654] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aeAaFFfGOR6fpTWUAzrZ4gAAARA"]
[Thu Apr 16 07:07:01.295584 2026] [:error] [pid 57536:tid 57557] [client 20.215.216.144:63024] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aeAaFSQU4faGja6jpDuILgAAAAk"]
[Thu Apr 16 07:07:01.912642 2026] [:error] [pid 57536:tid 57566] [client 20.215.216.144:64917] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aeAaFSQU4faGja6jpDuIMAAAABI"]
[Thu Apr 16 07:07:02.457603 2026] [:error] [pid 57639:tid 57646] [client 20.215.216.144:64924] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7W.php"] [unique_id "aeAaFqMCQoTw7TsxWunUIgAAAMA"]
[Thu Apr 16 07:07:03.018961 2026] [:error] [pid 57639:tid 57652] [client 20.215.216.144:61800] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7W.php"] [unique_id "aeAaF6MCQoTw7TsxWunUIwAAAMY"]
[Thu Apr 16 07:07:03.694953 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:62358] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7W.php"] [unique_id "aeAaFzbDwvcXorHR_MyoyQAAAUI"]
[Thu Apr 16 07:07:04.425468 2026] [:error] [pid 57639:tid 57647] [client 20.215.216.144:64259] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x7W.php"] [unique_id "aeAaGKMCQoTw7TsxWunUJgAAAME"]
[Thu Apr 16 07:07:05.651414 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:63653] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aeAaGTbDwvcXorHR_Myo5AAAAUc"]
[Thu Apr 16 07:07:06.368144 2026] [:error] [pid 57639:tid 57670] [client 20.215.216.144:63692] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aeAaGqMCQoTw7TsxWunULAAAANg"]
[Thu Apr 16 07:07:07.541012 2026] [:error] [pid 29603:tid 29619] [client 20.215.216.144:64932] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aeAaG1fGOR6fpTWUAzrZ5wAAAQ4"]
[Thu Apr 16 07:07:08.312677 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:64920] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aeAaHDbDwvcXorHR_Myo7QAAAUU"]
[Thu Apr 16 07:07:09.111881 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:63042] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeAaHTbDwvcXorHR_Myo8gAAAUQ"]
[Thu Apr 16 07:07:09.942950 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:63000] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeAaHTbDwvcXorHR_Myo9gAAAUk"]
[Thu Apr 16 07:07:10.720420 2026] [:error] [pid 57639:tid 57646] [client 20.215.216.144:64938] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeAaHqMCQoTw7TsxWunUMgAAAMA"]
[Thu Apr 16 07:07:12.050270 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:61210] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeAaIDbDwvcXorHR_Myo-wAAAUQ"]
[Thu Apr 16 07:07:12.692575 2026] [:error] [pid 57538:tid 57609] [client 20.215.216.144:63696] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeAaIMuMaiEF5SVR2BdEjgAAAIc"]
[Thu Apr 16 07:07:13.233384 2026] [:error] [pid 57538:tid 57615] [client 20.215.216.144:63663] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeAaIcuMaiEF5SVR2BdEkQAAAI0"]
[Thu Apr 16 07:07:13.825872 2026] [:error] [pid 49094:tid 49104] [client 20.215.216.144:65007] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeAaITbDwvcXorHR_Myo_QAAAUg"]
[Thu Apr 16 07:07:14.526140 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:64383] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeAaIjbDwvcXorHR_MypAgAAAVc"]
[Thu Apr 16 07:07:15.257823 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:63683] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes4.php"] [unique_id "aeAaIzbDwvcXorHR_MypBQAAAUU"]
[Thu Apr 16 07:07:15.795790 2026] [:error] [pid 49094:tid 49112] [client 20.215.216.144:64982] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes4.php"] [unique_id "aeAaIzbDwvcXorHR_MypCQAAAVA"]
[Thu Apr 16 07:07:16.491080 2026] [:error] [pid 29603:tid 29609] [client 20.215.216.144:64355] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes4.php"] [unique_id "aeAaJFfGOR6fpTWUAzrZ7AAAAQQ"]
[Thu Apr 16 07:07:17.082184 2026] [proxy_fcgi:error] [pid 29603:tid 29629] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:17.379878 2026] [proxy_fcgi:error] [pid 29603:tid 29612] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:17.699018 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:17.967120 2026] [proxy_fcgi:error] [pid 29603:tid 29620] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:18.236817 2026] [proxy_fcgi:error] [pid 29603:tid 29627] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:18.497581 2026] [proxy_fcgi:error] [pid 29603:tid 29617] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:18.763291 2026] [proxy_fcgi:error] [pid 29603:tid 29613] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:19.022043 2026] [proxy_fcgi:error] [pid 29603:tid 29626] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:19.313661 2026] [proxy_fcgi:error] [pid 29603:tid 29614] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:19.614243 2026] [proxy_fcgi:error] [pid 29603:tid 29621] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:19.893417 2026] [proxy_fcgi:error] [pid 29603:tid 29612] [client 20.215.216.144:61797] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:07:20.148413 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:61797] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prosell2.php"] [unique_id "aeAaKFfGOR6fpTWUAzraDgAAARE"]
[Thu Apr 16 07:07:20.724201 2026] [:error] [pid 29603:tid 29624] [client 20.215.216.144:64950] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prosell2.php"] [unique_id "aeAaKFfGOR6fpTWUAzraEQAAARM"]
[Thu Apr 16 07:07:21.336300 2026] [:error] [pid 57538:tid 57604] [client 20.215.216.144:61234] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prosell2.php"] [unique_id "aeAaKcuMaiEF5SVR2BdEmAAAAII"]
[Thu Apr 16 07:07:21.909656 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:64314] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/prosell2.php"] [unique_id "aeAaKcuMaiEF5SVR2BdEmQAAAIY"]
[Thu Apr 16 07:07:22.700501 2026] [:error] [pid 57639:tid 57653] [client 20.215.216.144:61806] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/22name.php"] [unique_id "aeAaKqMCQoTw7TsxWunUQQAAAMc"]
[Thu Apr 16 07:07:23.283157 2026] [:error] [pid 57639:tid 57650] [client 20.215.216.144:64263] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/22name.php"] [unique_id "aeAaK6MCQoTw7TsxWunUQgAAAMQ"]
[Thu Apr 16 07:07:23.836170 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:64337] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/22name.php"] [unique_id "aeAaKzbDwvcXorHR_MypFQAAAUw"]
[Thu Apr 16 07:07:24.349506 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:63740] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/22name.php"] [unique_id "aeAaLDbDwvcXorHR_MypGAAAAVM"]
[Thu Apr 16 07:07:24.945666 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:63017] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs9.php"] [unique_id "aeAaLDbDwvcXorHR_MypGwAAAUU"]
[Thu Apr 16 07:07:25.478757 2026] [:error] [pid 29603:tid 29606] [client 20.215.216.144:64304] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs9.php"] [unique_id "aeAaLVfGOR6fpTWUAzraHQAAAQE"]
[Thu Apr 16 07:07:26.017192 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:64971] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs9.php"] [unique_id "aeAaLlfGOR6fpTWUAzraHwAAARE"]
[Thu Apr 16 07:07:26.962862 2026] [:error] [pid 29603:tid 29619] [client 20.215.216.144:63656] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs9.php"] [unique_id "aeAaLlfGOR6fpTWUAzraJAAAAQ4"]
[Thu Apr 16 07:07:27.492802 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:62412] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeAaL8uMaiEF5SVR2BdEnQAAAJg"]
[Thu Apr 16 07:07:28.073059 2026] [:error] [pid 29603:tid 29629] [client 20.215.216.144:64357] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeAaMFfGOR6fpTWUAzraKAAAARg"]
[Thu Apr 16 07:07:28.705839 2026] [:error] [pid 57538:tid 57607] [client 20.215.216.144:61247] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeAaMMuMaiEF5SVR2BdEngAAAIU"]
[Thu Apr 16 07:07:29.246734 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:63078] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeAaMTbDwvcXorHR_MypJAAAAUc"]
[Thu Apr 16 07:07:29.803108 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:64905] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f2.php"] [unique_id "aeAaMTbDwvcXorHR_MypKAAAAUQ"]
[Thu Apr 16 07:07:30.388498 2026] [:error] [pid 29603:tid 29623] [client 20.215.216.144:63638] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f2.php"] [unique_id "aeAaMlfGOR6fpTWUAzraLAAAARI"]
[Thu Apr 16 07:07:30.929517 2026] [:error] [pid 49094:tid 49099] [client 20.215.216.144:63077] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f2.php"] [unique_id "aeAaMjbDwvcXorHR_MypLgAAAUM"]
[Thu Apr 16 07:07:31.469508 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:63693] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f2.php"] [unique_id "aeAaMzbDwvcXorHR_MypMQAAAUc"]
[Thu Apr 16 07:07:32.132932 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:64277] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "aeAaNFfGOR6fpTWUAzraMAAAARE"]
[Thu Apr 16 07:07:32.725796 2026] [:error] [pid 57538:tid 57620] [client 20.215.216.144:64358] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "aeAaNMuMaiEF5SVR2BdEpAAAAJI"]
[Thu Apr 16 07:07:33.317676 2026] [:error] [pid 57639:tid 57649] [client 20.215.216.144:63621] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "aeAaNaMCQoTw7TsxWunUSAAAAMM"]
[Thu Apr 16 07:07:33.869695 2026] [:error] [pid 29603:tid 29613] [client 20.215.216.144:61271] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "aeAaNVfGOR6fpTWUAzraNQAAAQg"]
[Thu Apr 16 07:07:34.568072 2026] [:error] [pid 57538:tid 57622] [client 20.215.216.144:61798] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shadow-bot.php"] [unique_id "aeAaNsuMaiEF5SVR2BdEpQAAAJQ"]
[Thu Apr 16 07:07:35.163885 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:63673] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shadow-bot.php"] [unique_id "aeAaNzbDwvcXorHR_MypOAAAAUk"]
[Thu Apr 16 07:07:35.684387 2026] [:error] [pid 57538:tid 57625] [client 20.215.216.144:62434] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shadow-bot.php"] [unique_id "aeAaN8uMaiEF5SVR2BdEpgAAAJc"]
[Thu Apr 16 07:07:36.302343 2026] [:error] [pid 57538:tid 57610] [client 20.215.216.144:64313] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shadow-bot.php"] [unique_id "aeAaOMuMaiEF5SVR2BdEqAAAAIg"]
[Thu Apr 16 07:07:36.973379 2026] [:error] [pid 57639:tid 57647] [client 20.215.216.144:63070] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ianmg.php"] [unique_id "aeAaOKMCQoTw7TsxWunUTAAAAME"]
[Thu Apr 16 07:07:37.559139 2026] [:error] [pid 57538:tid 57603] [client 20.215.216.144:64296] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ianmg.php"] [unique_id "aeAaOcuMaiEF5SVR2BdErQAAAIE"]
[Thu Apr 16 07:07:38.177158 2026] [:error] [pid 57538:tid 57617] [client 20.215.216.144:62445] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ianmg.php"] [unique_id "aeAaOsuMaiEF5SVR2BdEsQAAAI8"]
[Thu Apr 16 07:07:39.186157 2026] [:error] [pid 29603:tid 29616] [client 20.215.216.144:64994] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ianmg.php"] [unique_id "aeAaO1fGOR6fpTWUAzraQQAAAQs"]
[Thu Apr 16 07:07:40.336983 2026] [:error] [pid 57639:tid 57668] [client 20.215.216.144:63085] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "aeAaPKMCQoTw7TsxWunUTgAAANY"]
[Thu Apr 16 07:07:40.873112 2026] [:error] [pid 57538:tid 57616] [client 20.215.216.144:64995] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "aeAaPMuMaiEF5SVR2BdEtwAAAI4"]
[Thu Apr 16 07:07:41.723804 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:64297] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "aeAaPTbDwvcXorHR_MypUwAAAU8"]
[Thu Apr 16 07:07:42.388234 2026] [:error] [pid 57639:tid 57657] [client 20.215.216.144:63632] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "aeAaPqMCQoTw7TsxWunUUQAAAMs"]
[Thu Apr 16 07:07:43.155976 2026] [:error] [pid 57537:tid 57597] [client 20.215.216.144:63711] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssh3ll.php"] [unique_id "aeAaP1VQRS8nm73ENAk8QAAAAFY"]
[Thu Apr 16 07:07:44.219483 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:63655] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssh3ll.php"] [unique_id "aeAaQFfGOR6fpTWUAzrabAAAARE"]
[Thu Apr 16 07:07:44.877885 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:64919] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssh3ll.php"] [unique_id "aeAaQDbDwvcXorHR_MypbwAAAUw"]
[Thu Apr 16 07:07:45.518069 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:65023] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ssh3ll.php"] [unique_id "aeAaQTbDwvcXorHR_MypdQAAAUI"]
[Thu Apr 16 07:07:46.166019 2026] [:error] [pid 49094:tid 49117] [client 20.215.216.144:62988] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/itil.php"] [unique_id "aeAaQjbDwvcXorHR_MypegAAAVU"]
[Thu Apr 16 07:07:46.728176 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:61729] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/itil.php"] [unique_id "aeAaQjbDwvcXorHR_MypewAAAVQ"]
[Thu Apr 16 07:07:47.598969 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:64290] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/itil.php"] [unique_id "aeAaQzbDwvcXorHR_MypggAAAUE"]
[Thu Apr 16 07:07:48.249528 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:63702] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/itil.php"] [unique_id "aeAaRDbDwvcXorHR_MyphQAAAU4"]
[Thu Apr 16 07:07:48.930117 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:63022] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/snus.php"] [unique_id "aeAaRDbDwvcXorHR_MypiAAAAUI"]
[Thu Apr 16 07:07:49.476984 2026] [:error] [pid 57537:tid 57577] [client 20.215.216.144:63045] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/snus.php"] [unique_id "aeAaRVVQRS8nm73ENAk8SgAAAEI"]
[Thu Apr 16 07:07:50.195167 2026] [:error] [pid 57537:tid 57582] [client 20.215.216.144:62392] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/snus.php"] [unique_id "aeAaRlVQRS8nm73ENAk8SwAAAEc"]
[Thu Apr 16 07:07:51.051644 2026] [:error] [pid 57639:tid 57654] [client 20.215.216.144:65006] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/snus.php"] [unique_id "aeAaR6MCQoTw7TsxWunUWAAAAMg"]
[Thu Apr 16 07:07:51.640548 2026] [:error] [pid 49094:tid 49114] [client 20.215.216.144:63039] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aeAaRzbDwvcXorHR_MypjAAAAVI"]
[Thu Apr 16 07:07:52.247560 2026] [:error] [pid 29603:tid 29622] [client 20.215.216.144:62373] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aeAaSFfGOR6fpTWUAzrafgAAARE"]
[Thu Apr 16 07:07:52.780202 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:63634] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aeAaSDbDwvcXorHR_MypjgAAAUc"]
[Thu Apr 16 07:07:53.333655 2026] [:error] [pid 57538:tid 57619] [client 20.215.216.144:64968] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shlo.php"] [unique_id "aeAaScuMaiEF5SVR2BdEwgAAAJE"]
[Thu Apr 16 07:07:54.069898 2026] [:error] [pid 57639:tid 57660] [client 20.215.216.144:63705] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mas80.php"] [unique_id "aeAaSqMCQoTw7TsxWunUWQAAAM4"]
[Thu Apr 16 07:07:54.655279 2026] [:error] [pid 57639:tid 57669] [client 20.215.216.144:63729] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mas80.php"] [unique_id "aeAaSqMCQoTw7TsxWunUWgAAANc"]
[Thu Apr 16 07:07:55.298935 2026] [:error] [pid 29603:tid 29616] [client 20.215.216.144:64992] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mas80.php"] [unique_id "aeAaS1fGOR6fpTWUAzraggAAAQs"]
[Thu Apr 16 07:07:55.858859 2026] [:error] [pid 49094:tid 49103] [client 20.215.216.144:63686] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mas80.php"] [unique_id "aeAaSzbDwvcXorHR_MypnwAAAUc"]
[Thu Apr 16 07:07:56.465146 2026] [:error] [pid 29603:tid 29606] [client 20.215.216.144:61280] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa.php"] [unique_id "aeAaTFfGOR6fpTWUAzrahAAAAQE"]
[Thu Apr 16 07:07:57.071197 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:63009] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa.php"] [unique_id "aeAaTTbDwvcXorHR_MyppQAAAUE"]
[Thu Apr 16 07:07:57.735697 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:65012] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa.php"] [unique_id "aeAaTTbDwvcXorHR_MypqgAAAVQ"]
[Thu Apr 16 07:07:58.343700 2026] [:error] [pid 29603:tid 29611] [client 20.215.216.144:62998] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa.php"] [unique_id "aeAaTlfGOR6fpTWUAzraiAAAAQY"]
[Thu Apr 16 07:07:59.002735 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:64268] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeAaTzbDwvcXorHR_MyprQAAAUQ"]
[Thu Apr 16 07:07:59.703069 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:63697] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeAaTzbDwvcXorHR_MypsQAAAU8"]
[Thu Apr 16 07:08:00.660249 2026] [:error] [pid 49094:tid 49109] [client 20.215.216.144:64367] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeAaUDbDwvcXorHR_MyptAAAAU0"]
[Thu Apr 16 07:08:01.305436 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:64972] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeAaUTbDwvcXorHR_MypugAAAVg"]
[Thu Apr 16 07:08:01.826578 2026] [:error] [pid 57537:tid 57576] [client 20.215.216.144:64356] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-upload.php"] [unique_id "aeAaUVVQRS8nm73ENAk8TwAAAEE"]
[Thu Apr 16 07:08:03.220117 2026] [:error] [pid 57537:tid 57578] [client 20.215.216.144:61217] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-upload.php"] [unique_id "aeAaU1VQRS8nm73ENAk8UQAAAEM"]
[Thu Apr 16 07:08:03.869681 2026] [:error] [pid 57639:tid 57649] [client 20.215.216.144:63030] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-upload.php"] [unique_id "aeAaU6MCQoTw7TsxWunUWwAAAMM"]
[Thu Apr 16 07:08:04.588001 2026] [:error] [pid 57639:tid 57652] [client 20.215.216.144:63709] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-upload.php"] [unique_id "aeAaVKMCQoTw7TsxWunUXQAAAMY"]
[Thu Apr 16 07:08:05.276146 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:64320] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fcnlp.php"] [unique_id "aeAaVTbDwvcXorHR_MypvAAAAVc"]
[Thu Apr 16 07:08:05.968554 2026] [:error] [pid 29603:tid 29613] [client 20.215.216.144:64278] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fcnlp.php"] [unique_id "aeAaVVfGOR6fpTWUAzrakgAAAQg"]
[Thu Apr 16 07:08:07.452492 2026] [:error] [pid 49094:tid 49112] [client 20.215.216.144:64349] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fcnlp.php"] [unique_id "aeAaVzbDwvcXorHR_MypvwAAAVA"]
[Thu Apr 16 07:08:08.274225 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:60654] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fcnlp.php"] [unique_id "aeAaWDbDwvcXorHR_MypwQAAAVg"]
[Thu Apr 16 07:08:10.593582 2026] [:error] [pid 57537:tid 57596] [client 20.215.216.144:64945] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxc.php"] [unique_id "aeAaWlVQRS8nm73ENAk8VAAAAFU"]
[Thu Apr 16 07:08:11.242632 2026] [:error] [pid 57639:tid 57660] [client 20.215.216.144:63035] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxc.php"] [unique_id "aeAaW6MCQoTw7TsxWunUawAAAM4"]
[Thu Apr 16 07:08:11.838343 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:63072] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxc.php"] [unique_id "aeAaWzbDwvcXorHR_Myp0QAAAU4"]
[Thu Apr 16 07:08:12.471071 2026] [:error] [pid 49094:tid 49113] [client 20.215.216.144:63033] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxc.php"] [unique_id "aeAaXDbDwvcXorHR_Myp0gAAAVE"]
[Thu Apr 16 07:08:13.243647 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:62418] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-su.php"] [unique_id "aeAaXTbDwvcXorHR_Myp1wAAAUk"]
[Thu Apr 16 07:08:14.008162 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:64993] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-su.php"] [unique_id "aeAaXlfGOR6fpTWUAzraoQAAAQM"]
[Thu Apr 16 07:08:14.813371 2026] [:error] [pid 29603:tid 29611] [client 20.215.216.144:63712] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-su.php"] [unique_id "aeAaXlfGOR6fpTWUAzrapgAAAQY"]
[Thu Apr 16 07:08:15.750454 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:61749] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-su.php"] [unique_id "aeAaXzbDwvcXorHR_Myp7QAAAVQ"]
[Thu Apr 16 07:08:16.618533 2026] [:error] [pid 57536:tid 57548] [client 20.215.216.144:65021] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAaYCQU4faGja6jpDuIQwAAAAA"]
[Thu Apr 16 07:08:17.346906 2026] [:error] [pid 29603:tid 29614] [client 20.215.216.144:64973] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAaYVfGOR6fpTWUAzrasAAAAQk"]
[Thu Apr 16 07:08:17.995656 2026] [:error] [pid 49094:tid 49106] [client 20.215.216.144:64295] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAaYTbDwvcXorHR_MyqAQAAAUo"]
[Thu Apr 16 07:08:18.733342 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:64939] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAaYjbDwvcXorHR_MyqBAAAAU4"]
[Thu Apr 16 07:08:19.333409 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:19.617318 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:19.940375 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:20.311544 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:20.614457 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:20.924697 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:21.212972 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:21.503374 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:21.820714 2026] [proxy_fcgi:error] [pid 57639:tid 57649] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:22.148804 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:22.413295 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 20.215.216.144:63617] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:08:22.708363 2026] [:error] [pid 57639:tid 57664] [client 20.215.216.144:63617] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeAaZqMCQoTw7TsxWunUigAAANI"]
[Thu Apr 16 07:08:23.783746 2026] [:error] [pid 57538:tid 57606] [client 20.215.216.144:63651] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeAaZ8uMaiEF5SVR2BdE3wAAAIQ"]
[Thu Apr 16 07:08:24.733225 2026] [:error] [pid 49094:tid 49104] [client 20.215.216.144:60608] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeAaaDbDwvcXorHR_MyqHgAAAUg"]
[Thu Apr 16 07:08:25.357605 2026] [:error] [pid 29603:tid 29623] [client 20.215.216.144:63081] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeAaaVfGOR6fpTWUAzra0AAAARI"]
[Thu Apr 16 07:08:26.213325 2026] [:error] [pid 57538:tid 57616] [client 20.215.216.144:61762] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeAaasuMaiEF5SVR2BdE4QAAAI4"]
[Thu Apr 16 07:08:26.867817 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:64342] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeAaalfGOR6fpTWUAzra1AAAAQM"]
[Thu Apr 16 07:08:27.415731 2026] [:error] [pid 57538:tid 57621] [client 20.215.216.144:64927] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeAaa8uMaiEF5SVR2BdE4wAAAJM"]
[Thu Apr 16 07:08:28.341667 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:64372] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeAabFfGOR6fpTWUAzra1gAAAQU"]
[Thu Apr 16 07:08:29.216653 2026] [:error] [pid 49094:tid 49118] [client 20.215.216.144:63737] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rujgeote.php"] [unique_id "aeAabTbDwvcXorHR_MyqKgAAAVY"]
[Thu Apr 16 07:08:29.869847 2026] [:error] [pid 57639:tid 57652] [client 20.215.216.144:64316] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rujgeote.php"] [unique_id "aeAabaMCQoTw7TsxWunUmAAAAMY"]
[Thu Apr 16 07:08:30.406040 2026] [:error] [pid 57538:tid 57603] [client 20.215.216.144:60667] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rujgeote.php"] [unique_id "aeAabsuMaiEF5SVR2BdE5gAAAIE"]
[Thu Apr 16 07:08:31.230142 2026] [:error] [pid 57536:tid 57571] [client 20.215.216.144:62430] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rujgeote.php"] [unique_id "aeAabyQU4faGja6jpDuIRwAAABc"]
[Thu Apr 16 07:08:31.846053 2026] [:error] [pid 57536:tid 57564] [client 20.215.216.144:62981] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/shlo.php"] [unique_id "aeAabyQU4faGja6jpDuISQAAABA"]
[Thu Apr 16 07:08:32.632739 2026] [:error] [pid 57639:tid 57663] [client 20.215.216.144:62353] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/shlo.php"] [unique_id "aeAacKMCQoTw7TsxWunUnAAAANE"]
[Thu Apr 16 07:08:33.255656 2026] [:error] [pid 29603:tid 29612] [client 20.215.216.144:62421] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/shlo.php"] [unique_id "aeAacVfGOR6fpTWUAzra2wAAAQc"]
[Thu Apr 16 07:08:33.859499 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:64926] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/shlo.php"] [unique_id "aeAacTbDwvcXorHR_MyqNAAAAVQ"]
[Thu Apr 16 07:08:34.571868 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:62992] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeAacjbDwvcXorHR_MyqNgAAAVc"]
[Thu Apr 16 07:08:35.410641 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:64373] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeAaczbDwvcXorHR_MyqOwAAAU4"]
[Thu Apr 16 07:08:36.108519 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:63703] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeAadDbDwvcXorHR_MyqPQAAAU8"]
[Thu Apr 16 07:08:36.893667 2026] [:error] [pid 29603:tid 29614] [client 20.215.216.144:62371] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeAadFfGOR6fpTWUAzra3wAAAQk"]
[Thu Apr 16 07:08:37.735413 2026] [:error] [pid 49094:tid 49106] [client 20.215.216.144:63054] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "aeAadTbDwvcXorHR_MyqQQAAAUo"]
[Thu Apr 16 07:08:38.555694 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:61734] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "aeAadjbDwvcXorHR_MyqSAAAAUk"]
[Thu Apr 16 07:08:39.320054 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:63095] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "aeAadzbDwvcXorHR_MyqTQAAAUY"]
[Thu Apr 16 07:08:40.363400 2026] [:error] [pid 57537:tid 57597] [client 20.215.216.144:60548] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/only.php"] [unique_id "aeAaeFVQRS8nm73ENAk8cQAAAFY"]
[Thu Apr 16 07:08:40.934634 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:63649] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/un.php"] [unique_id "aeAaeDbDwvcXorHR_MyqUQAAAUw"]
[Thu Apr 16 07:08:41.643095 2026] [:error] [pid 57536:tid 57557] [client 20.215.216.144:64908] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/un.php"] [unique_id "aeAaeSQU4faGja6jpDuITwAAAAk"]
[Thu Apr 16 07:08:42.241745 2026] [:error] [pid 57536:tid 57559] [client 20.215.216.144:64970] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/un.php"] [unique_id "aeAaeiQU4faGja6jpDuIUAAAAAs"]
[Thu Apr 16 07:08:42.854670 2026] [:error] [pid 57538:tid 57603] [client 20.215.216.144:61276] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/un.php"] [unique_id "aeAaesuMaiEF5SVR2BdFFwAAAIE"]
[Thu Apr 16 07:08:43.601295 2026] [:error] [pid 57538:tid 57611] [client 20.215.216.144:64336] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-bugs.php"] [unique_id "aeAae8uMaiEF5SVR2BdFHwAAAIk"]
[Thu Apr 16 07:08:44.254902 2026] [:error] [pid 57538:tid 57616] [client 20.215.216.144:61713] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-bugs.php"] [unique_id "aeAafMuMaiEF5SVR2BdFJwAAAI4"]
[Thu Apr 16 07:08:44.832080 2026] [:error] [pid 57538:tid 57618] [client 20.215.216.144:64341] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-bugs.php"] [unique_id "aeAafMuMaiEF5SVR2BdFLwAAAJA"]
[Thu Apr 16 07:08:45.563835 2026] [:error] [pid 57639:tid 57651] [client 20.215.216.144:64273] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-bugs.php"] [unique_id "aeAafaMCQoTw7TsxWunUrQAAAMU"]
[Thu Apr 16 07:08:46.328006 2026] [:error] [pid 57639:tid 57658] [client 20.215.216.144:64300] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aeAafqMCQoTw7TsxWunUsAAAAMw"]
[Thu Apr 16 07:08:47.126379 2026] [:error] [pid 57538:tid 57618] [client 20.215.216.144:61732] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aeAaf8uMaiEF5SVR2BdFRgAAAJA"]
[Thu Apr 16 07:08:47.917450 2026] [:error] [pid 57538:tid 57609] [client 20.215.216.144:63643] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aeAaf8uMaiEF5SVR2BdFTwAAAIc"]
[Thu Apr 16 07:08:48.748800 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:63669] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aeAagDbDwvcXorHR_MyqWQAAAUY"]
[Thu Apr 16 07:08:49.562567 2026] [:error] [pid 57639:tid 57667] [client 20.215.216.144:63092] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "aeAagaMCQoTw7TsxWunUtQAAANU"]
[Thu Apr 16 07:08:52.272694 2026] [:error] [pid 49094:tid 49099] [client 20.215.216.144:61719] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "aeAahDbDwvcXorHR_MyqXAAAAUM"]
[Thu Apr 16 07:08:53.098184 2026] [:error] [pid 49094:tid 49114] [client 20.215.216.144:61267] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "aeAahTbDwvcXorHR_MyqXgAAAVI"]
[Thu Apr 16 07:08:56.410769 2026] [:error] [pid 29603:tid 29615] [client 20.215.216.144:64267] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs6.php"] [unique_id "aeAaiFfGOR6fpTWUAzra9wAAAQo"]
[Thu Apr 16 07:08:57.622345 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:63652] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeAaiTbDwvcXorHR_MyqagAAAUk"]
[Thu Apr 16 07:08:58.740068 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:64382] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeAaijbDwvcXorHR_MyqcAAAAU8"]
[Thu Apr 16 07:08:59.666975 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:63645] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeAai8uMaiEF5SVR2BdFWwAAAJg"]
[Thu Apr 16 07:09:00.577598 2026] [:error] [pid 57538:tid 57619] [client 20.215.216.144:64357] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeAajMuMaiEF5SVR2BdFYAAAAJE"]
[Thu Apr 16 07:09:02.183991 2026] [:error] [pid 29603:tid 29624] [client 20.215.216.144:62441] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "aeAajlfGOR6fpTWUAzra_AAAARM"]
[Thu Apr 16 07:09:03.761741 2026] [:error] [pid 57538:tid 57607] [client 20.215.216.144:62459] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "aeAaj8uMaiEF5SVR2BdFaAAAAIU"]
[Thu Apr 16 07:09:04.890455 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:63622] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "aeAakMuMaiEF5SVR2BdFbQAAAJg"]
[Thu Apr 16 07:09:08.637096 2026] [:error] [pid 57538:tid 57623] [client 20.215.216.144:64260] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/btx25.php"] [unique_id "aeAalMuMaiEF5SVR2BdFdwAAAJU"]
[Thu Apr 16 07:09:16.446908 2026] [:error] [pid 57537:tid 57581] [client 20.215.216.144:64360] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeAanFVQRS8nm73ENAk8dwAAAEY"]
[Thu Apr 16 07:09:17.625763 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:64925] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeAanTbDwvcXorHR_MyqlgAAAVM"]
[Thu Apr 16 07:09:18.509597 2026] [:error] [pid 57639:tid 57657] [client 20.215.216.144:61793] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeAanqMCQoTw7TsxWunUzgAAAMs"]
[Thu Apr 16 07:09:19.340285 2026] [:error] [pid 57538:tid 57621] [client 20.215.216.144:64954] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeAan8uMaiEF5SVR2BdFjgAAAJM"]
[Thu Apr 16 07:09:19.978184 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:63726] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aeAan8uMaiEF5SVR2BdFkwAAAJg"]
[Thu Apr 16 07:09:20.742359 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:63102] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aeAaoMuMaiEF5SVR2BdFmQAAAIY"]
[Thu Apr 16 07:09:21.516565 2026] [:error] [pid 57538:tid 57622] [client 20.215.216.144:64294] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/co.php"] [unique_id "aeAaocuMaiEF5SVR2BdFnAAAAJQ"]
[Thu Apr 16 07:09:22.099483 2026] [proxy_fcgi:error] [pid 57537:tid 57589] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:22.394335 2026] [proxy_fcgi:error] [pid 57537:tid 57586] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:22.656518 2026] [proxy_fcgi:error] [pid 57537:tid 57595] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:22.919441 2026] [proxy_fcgi:error] [pid 57537:tid 57599] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:23.184301 2026] [proxy_fcgi:error] [pid 57537:tid 57593] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:23.456288 2026] [proxy_fcgi:error] [pid 57537:tid 57598] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:23.724885 2026] [proxy_fcgi:error] [pid 57537:tid 57576] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:24.152516 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:24.415112 2026] [proxy_fcgi:error] [pid 57537:tid 57578] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:24.685173 2026] [proxy_fcgi:error] [pid 57537:tid 57584] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:24.954431 2026] [proxy_fcgi:error] [pid 57537:tid 57575] [client 20.215.216.144:64903] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:09:25.215845 2026] [:error] [pid 57537:tid 57597] [client 20.215.216.144:64903] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAapVVQRS8nm73ENAk8hgAAAFY"]
[Thu Apr 16 07:09:25.959187 2026] [:error] [pid 49094:tid 49113] [client 20.215.216.144:63713] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAapTbDwvcXorHR_MyqqAAAAVE"]
[Thu Apr 16 07:09:26.636452 2026] [:error] [pid 57536:tid 57549] [client 20.215.216.144:60569] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAapiQU4faGja6jpDuIWwAAAAE"]
[Thu Apr 16 07:09:27.288044 2026] [:error] [pid 29603:tid 29615] [client 20.215.216.144:63640] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAap1fGOR6fpTWUAzrbFwAAAQo"]
[Thu Apr 16 07:09:28.109840 2026] [:error] [pid 49094:tid 49107] [client 20.215.216.144:63661] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.yuf.php"] [unique_id "aeAaqDbDwvcXorHR_MyqsQAAAUs"]
[Thu Apr 16 07:09:28.833053 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:63101] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.yuf.php"] [unique_id "aeAaqDbDwvcXorHR_MyqtgAAAUU"]
[Thu Apr 16 07:09:29.571768 2026] [:error] [pid 49094:tid 49112] [client 20.215.216.144:62419] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.yuf.php"] [unique_id "aeAaqTbDwvcXorHR_MyqvAAAAVA"]
[Thu Apr 16 07:09:30.529290 2026] [:error] [pid 49094:tid 49107] [client 20.215.216.144:64317] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.yuf.php"] [unique_id "aeAaqjbDwvcXorHR_MyqvgAAAUs"]
[Thu Apr 16 07:09:31.251880 2026] [:error] [pid 29603:tid 29608] [client 20.215.216.144:62407] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeAaq1fGOR6fpTWUAzrbGwAAAQM"]
[Thu Apr 16 07:09:32.405652 2026] [:error] [pid 57538:tid 57623] [client 20.215.216.144:65013] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeAarMuMaiEF5SVR2BdFrQAAAJU"]
[Thu Apr 16 07:09:33.129684 2026] [:error] [pid 57538:tid 57615] [client 20.215.216.144:60635] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeAarcuMaiEF5SVR2BdFrwAAAI0"]
[Thu Apr 16 07:09:34.053073 2026] [:error] [pid 57538:tid 57618] [client 20.215.216.144:63008] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeAarsuMaiEF5SVR2BdFtAAAAJA"]
[Thu Apr 16 07:09:34.745682 2026] [:error] [pid 57538:tid 57621] [client 20.215.216.144:63650] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeAarsuMaiEF5SVR2BdFtwAAAJM"]
[Thu Apr 16 07:09:35.344618 2026] [:error] [pid 57538:tid 57626] [client 20.215.216.144:61297] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeAar8uMaiEF5SVR2BdFuAAAAJg"]
[Thu Apr 16 07:09:36.253029 2026] [:error] [pid 57537:tid 57587] [client 20.215.216.144:62340] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeAasFVQRS8nm73ENAk8iAAAAEw"]
[Thu Apr 16 07:09:37.106877 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:63065] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeAasTbDwvcXorHR_MyqzwAAAUE"]
[Thu Apr 16 07:09:37.808672 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:63012] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aeAasTbDwvcXorHR_Myq0wAAAU8"]
[Thu Apr 16 07:09:38.404089 2026] [:error] [pid 29603:tid 29625] [client 20.215.216.144:62345] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aeAaslfGOR6fpTWUAzrbJQAAARQ"]
[Thu Apr 16 07:09:39.126039 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:62431] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aeAaszbDwvcXorHR_Myq1wAAAUY"]
[Thu Apr 16 07:09:39.740145 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:63724] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "aeAaszbDwvcXorHR_Myq2gAAAUU"]
[Thu Apr 16 07:09:40.371957 2026] [:error] [pid 49094:tid 49117] [client 20.215.216.144:63636] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "aeAatDbDwvcXorHR_Myq3AAAAVU"]
[Thu Apr 16 07:09:41.031175 2026] [:error] [pid 29603:tid 29617] [client 20.215.216.144:63739] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "aeAatVfGOR6fpTWUAzrbKQAAAQw"]
[Thu Apr 16 07:09:41.637845 2026] [:error] [pid 29603:tid 29618] [client 20.215.216.144:64906] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "aeAatVfGOR6fpTWUAzrbKgAAAQ0"]
[Thu Apr 16 07:09:42.291107 2026] [:error] [pid 29603:tid 29623] [client 20.215.216.144:63727] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpb.php"] [unique_id "aeAatlfGOR6fpTWUAzrbLQAAARI"]
[Thu Apr 16 07:09:42.930139 2026] [:error] [pid 57639:tid 57668] [client 20.215.216.144:63680] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ver.php"] [unique_id "aeAatqMCQoTw7TsxWunU7AAAANY"]
[Thu Apr 16 07:09:43.490115 2026] [:error] [pid 57639:tid 57660] [client 20.215.216.144:62450] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ver.php"] [unique_id "aeAat6MCQoTw7TsxWunU7gAAAM4"]
[Thu Apr 16 07:09:44.018479 2026] [:error] [pid 57538:tid 57620] [client 20.215.216.144:64269] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ver.php"] [unique_id "aeAauMuMaiEF5SVR2BdFuwAAAJI"]
[Thu Apr 16 07:09:44.600045 2026] [:error] [pid 57639:tid 57659] [client 20.215.216.144:61788] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ver.php"] [unique_id "aeAauKMCQoTw7TsxWunU8QAAAM0"]
[Thu Apr 16 07:09:45.157961 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:64916] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "aeAauTbDwvcXorHR_Myq7QAAAUI"]
[Thu Apr 16 07:09:45.795847 2026] [:error] [pid 49094:tid 49096] [client 20.215.216.144:64912] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "aeAauTbDwvcXorHR_Myq7gAAAUA"]
[Thu Apr 16 07:09:46.411987 2026] [:error] [pid 57538:tid 57602] [client 20.215.216.144:62408] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "aeAausuMaiEF5SVR2BdFvgAAAIA"]
[Thu Apr 16 07:09:46.986174 2026] [:error] [pid 29603:tid 29628] [client 20.215.216.144:63068] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bootstrap.php"] [unique_id "aeAaulfGOR6fpTWUAzrbMwAAARc"]
[Thu Apr 16 07:09:47.555384 2026] [:error] [pid 57639:tid 57657] [client 20.215.216.144:64961] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "aeAau6MCQoTw7TsxWunU8wAAAMs"]
[Thu Apr 16 07:09:48.157374 2026] [:error] [pid 29603:tid 29616] [client 20.215.216.144:62363] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "aeAavFfGOR6fpTWUAzrbOQAAAQs"]
[Thu Apr 16 07:09:48.722847 2026] [:error] [pid 29603:tid 29609] [client 20.215.216.144:63659] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "aeAavFfGOR6fpTWUAzrbOwAAAQQ"]
[Thu Apr 16 07:09:49.324324 2026] [:error] [pid 29603:tid 29618] [client 20.215.216.144:62400] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/index.php"] [unique_id "aeAavVfGOR6fpTWUAzrbQAAAAQ0"]
[Thu Apr 16 07:09:49.870730 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:63103] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeAavVfGOR6fpTWUAzrbQwAAAQU"]
[Thu Apr 16 07:09:50.601986 2026] [:error] [pid 57537:tid 57591] [client 20.215.216.144:64326] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeAavlVQRS8nm73ENAk8jAAAAFA"]
[Thu Apr 16 07:09:51.317114 2026] [:error] [pid 57537:tid 57579] [client 20.215.216.144:64969] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeAav1VQRS8nm73ENAk8jgAAAEQ"]
[Thu Apr 16 07:09:51.850419 2026] [:error] [pid 57639:tid 57656] [client 20.215.216.144:64956] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeAav6MCQoTw7TsxWunU9AAAAMo"]
[Thu Apr 16 07:09:52.658059 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:62991] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/haz.php"] [unique_id "aeAawDbDwvcXorHR_Myq-gAAAUw"]
[Thu Apr 16 07:09:53.352136 2026] [:error] [pid 57537:tid 57586] [client 20.215.216.144:62370] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/haz.php"] [unique_id "aeAawVVQRS8nm73ENAk8kAAAAEs"]
[Thu Apr 16 07:09:54.038772 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:63079] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/haz.php"] [unique_id "aeAawjbDwvcXorHR_Myq_wAAAUk"]
[Thu Apr 16 07:09:54.682904 2026] [:error] [pid 57536:tid 57558] [client 20.215.216.144:62983] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/haz.php"] [unique_id "aeAawiQU4faGja6jpDuIZQAAAAo"]
[Thu Apr 16 07:09:55.466404 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:63723] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f222.php"] [unique_id "aeAawzbDwvcXorHR_MyrBgAAAUE"]
[Thu Apr 16 07:09:56.087632 2026] [:error] [pid 57537:tid 57583] [client 20.215.216.144:64354] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f222.php"] [unique_id "aeAaxFVQRS8nm73ENAk8mwAAAEg"]
[Thu Apr 16 07:09:56.671295 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:64257] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f222.php"] [unique_id "aeAaxDbDwvcXorHR_MyrCQAAAU8"]
[Thu Apr 16 07:09:57.255404 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:64274] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f222.php"] [unique_id "aeAaxTbDwvcXorHR_MyrCgAAAUw"]
[Thu Apr 16 07:09:57.793820 2026] [:error] [pid 29603:tid 29629] [client 20.215.216.144:64368] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aeAaxVfGOR6fpTWUAzrbSwAAARg"]
[Thu Apr 16 07:09:58.360035 2026] [:error] [pid 29603:tid 29605] [client 20.215.216.144:63688] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aeAaxlfGOR6fpTWUAzrbTwAAAQA"]
[Thu Apr 16 07:09:58.887007 2026] [:error] [pid 29603:tid 29623] [client 20.215.216.144:61738] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aeAaxlfGOR6fpTWUAzrbUAAAARI"]
[Thu Apr 16 07:09:59.472303 2026] [:error] [pid 57538:tid 57604] [client 20.215.216.144:61750] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aeAax8uMaiEF5SVR2BdFzAAAAII"]
[Thu Apr 16 07:10:00.111382 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:63674] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sfcl.php"] [unique_id "aeAayDbDwvcXorHR_MyrFgAAAUE"]
[Thu Apr 16 07:10:00.635646 2026] [:error] [pid 29603:tid 29614] [client 20.215.216.144:62403] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sfcl.php"] [unique_id "aeAayFfGOR6fpTWUAzrbUwAAAQk"]
[Thu Apr 16 07:10:01.414454 2026] [:error] [pid 49094:tid 49112] [client 20.215.216.144:63074] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sfcl.php"] [unique_id "aeAayTbDwvcXorHR_MyrGgAAAVA"]
[Thu Apr 16 07:10:02.187335 2026] [:error] [pid 57639:tid 57670] [client 20.215.216.144:62451] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sfcl.php"] [unique_id "aeAayqMCQoTw7TsxWunU-QAAANg"]
[Thu Apr 16 07:10:02.745786 2026] [:error] [pid 57639:tid 57661] [client 20.215.216.144:59387] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/database.php"] [unique_id "aeAayqMCQoTw7TsxWunU_AAAAM8"]
[Thu Apr 16 07:10:03.502481 2026] [:error] [pid 49094:tid 49113] [client 20.215.216.144:64311] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/database.php"] [unique_id "aeAayzbDwvcXorHR_MyrJAAAAVE"]
[Thu Apr 16 07:10:04.099985 2026] [:error] [pid 49094:tid 49118] [client 20.215.216.144:62987] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/database.php"] [unique_id "aeAazDbDwvcXorHR_MyrJQAAAVY"]
[Thu Apr 16 07:10:04.859415 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:64989] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/css/database.php"] [unique_id "aeAazDbDwvcXorHR_MyrKgAAAUI"]
[Thu Apr 16 07:10:05.556683 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:63720] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ca-022.php"] [unique_id "aeAazTbDwvcXorHR_MyrLAAAAUY"]
[Thu Apr 16 07:10:06.131821 2026] [:error] [pid 49094:tid 49107] [client 20.215.216.144:63670] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ca-022.php"] [unique_id "aeAazjbDwvcXorHR_MyrLQAAAUs"]
[Thu Apr 16 07:10:06.840215 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:63718] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ca-022.php"] [unique_id "aeAazjbDwvcXorHR_MyrMAAAAVg"]
[Thu Apr 16 07:10:07.843446 2026] [:error] [pid 49094:tid 49106] [client 20.215.216.144:64946] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ca-022.php"] [unique_id "aeAazzbDwvcXorHR_MyrNAAAAUo"]
[Thu Apr 16 07:10:08.593091 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:64902] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/act.php"] [unique_id "aeAa0FfGOR6fpTWUAzrbXAAAAQU"]
[Thu Apr 16 07:10:09.455973 2026] [:error] [pid 29603:tid 29616] [client 20.215.216.144:63096] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/act.php"] [unique_id "aeAa0VfGOR6fpTWUAzrbXgAAAQs"]
[Thu Apr 16 07:10:10.322191 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:61226] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/act.php"] [unique_id "aeAa0jbDwvcXorHR_MyrOAAAAUY"]
[Thu Apr 16 07:10:23.711496 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:63701] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/act.php"] [unique_id "aeAa3zbDwvcXorHR_MyrSwAAAVM"]
[Thu Apr 16 07:10:33.334390 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:33.593532 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:33.855198 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:34.115901 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:34.377419 2026] [proxy_fcgi:error] [pid 49094:tid 49098] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:34.636598 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:35.981315 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:36.309431 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:36.614937 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:37.009294 2026] [proxy_fcgi:error] [pid 49094:tid 49102] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:37.269019 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 20.215.216.144:64301] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:10:37.597287 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:64301] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-stat.php"] [unique_id "aeAa7TbDwvcXorHR_MyrawAAAUk"]
[Thu Apr 16 07:10:38.287073 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:63630] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-stat.php"] [unique_id "aeAa7jbDwvcXorHR_MyrbAAAAVc"]
[Thu Apr 16 07:10:38.944517 2026] [:error] [pid 49094:tid 49099] [client 20.215.216.144:62413] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-stat.php"] [unique_id "aeAa7jbDwvcXorHR_MyrbwAAAUM"]
[Thu Apr 16 07:10:39.545128 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:61759] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-stat.php"] [unique_id "aeAa7zbDwvcXorHR_MyrcgAAAUE"]
[Thu Apr 16 07:10:40.136794 2026] [:error] [pid 29603:tid 29607] [client 20.215.216.144:63671] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeAa8FfGOR6fpTWUAzrbhgAAAQI"]
[Thu Apr 16 07:10:40.677708 2026] [:error] [pid 29603:tid 29627] [client 20.215.216.144:64335] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeAa8FfGOR6fpTWUAzrbiQAAARY"]
[Thu Apr 16 07:10:41.235415 2026] [:error] [pid 29603:tid 29614] [client 20.215.216.144:64302] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeAa8VfGOR6fpTWUAzrbigAAAQk"]
[Thu Apr 16 07:10:41.932438 2026] [:error] [pid 29603:tid 29619] [client 20.215.216.144:64949] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeAa8VfGOR6fpTWUAzrbjQAAAQ4"]
[Thu Apr 16 07:10:42.572485 2026] [:error] [pid 29603:tid 29605] [client 20.215.216.144:63691] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zo.php/itil.php"] [unique_id "aeAa8lfGOR6fpTWUAzrbjgAAAQA"]
[Thu Apr 16 07:10:43.150033 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:64941] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zo.php/itil.php"] [unique_id "aeAa8zbDwvcXorHR_MyregAAAUk"]
[Thu Apr 16 07:10:43.740683 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:61256] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zo.php/itil.php"] [unique_id "aeAa88uMaiEF5SVR2BdF2gAAAIY"]
[Thu Apr 16 07:10:44.571010 2026] [:error] [pid 29603:tid 29606] [client 20.215.216.144:64271] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zo.php/itil.php"] [unique_id "aeAa9FfGOR6fpTWUAzrbkQAAAQE"]
[Thu Apr 16 07:10:45.190426 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:62398] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq.php"] [unique_id "aeAa9TbDwvcXorHR_MyrfQAAAU8"]
[Thu Apr 16 07:10:45.794791 2026] [:error] [pid 57538:tid 57602] [client 20.215.216.144:63734] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq.php"] [unique_id "aeAa9cuMaiEF5SVR2BdF3AAAAIA"]
[Thu Apr 16 07:10:46.361777 2026] [:error] [pid 57538:tid 57623] [client 20.215.216.144:62982] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq.php"] [unique_id "aeAa9suMaiEF5SVR2BdF3wAAAJU"]
[Thu Apr 16 07:10:47.099041 2026] [:error] [pid 29603:tid 29625] [client 20.215.216.144:63693] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwq.php"] [unique_id "aeAa91fGOR6fpTWUAzrblgAAARQ"]
[Thu Apr 16 07:10:47.870731 2026] [:error] [pid 57537:tid 57593] [client 20.215.216.144:64929] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeAa91VQRS8nm73ENAk8swAAAFI"]
[Thu Apr 16 07:10:48.535406 2026] [:error] [pid 57537:tid 57598] [client 20.215.216.144:63663] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeAa-FVQRS8nm73ENAk8tAAAAFc"]
[Thu Apr 16 07:10:49.192253 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:64381] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeAa-TbDwvcXorHR_MyrgwAAAVQ"]
[Thu Apr 16 07:10:49.789928 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:64997] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeAa-TbDwvcXorHR_MyrhAAAAUI"]
[Thu Apr 16 07:10:50.391894 2026] [:error] [pid 49094:tid 49104] [client 20.215.216.144:62395] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAa-jbDwvcXorHR_MyrhwAAAUg"]
[Thu Apr 16 07:10:51.263542 2026] [:error] [pid 57537:tid 57594] [client 20.215.216.144:65004] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAa-1VQRS8nm73ENAk8tgAAAFM"]
[Thu Apr 16 07:10:52.199929 2026] [:error] [pid 57537:tid 57599] [client 20.215.216.144:64308] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAa_FVQRS8nm73ENAk8twAAAFg"]
[Thu Apr 16 07:10:52.731904 2026] [:error] [pid 29603:tid 29609] [client 20.215.216.144:64288] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAa_FfGOR6fpTWUAzrbmQAAAQQ"]
[Thu Apr 16 07:10:53.902976 2026] [:error] [pid 29603:tid 29615] [client 20.215.216.144:63627] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aeAa_VfGOR6fpTWUAzrbmwAAAQo"]
[Thu Apr 16 07:10:54.540698 2026] [:error] [pid 49094:tid 49114] [client 20.215.216.144:63087] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aeAa_jbDwvcXorHR_MyrjAAAAVI"]
[Thu Apr 16 07:10:55.319646 2026] [:error] [pid 49094:tid 49102] [client 20.215.216.144:62354] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aeAa_zbDwvcXorHR_MyrjwAAAUY"]
[Thu Apr 16 07:10:56.107915 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:64923] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aeAbADbDwvcXorHR_MyrkQAAAVc"]
[Thu Apr 16 07:10:56.901067 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:62990] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aeAbADbDwvcXorHR_MyrlgAAAVM"]
[Thu Apr 16 07:10:57.813569 2026] [:error] [pid 49094:tid 49118] [client 20.215.216.144:64332] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aeAbATbDwvcXorHR_MyrmAAAAVY"]
[Thu Apr 16 07:10:58.578818 2026] [:error] [pid 49094:tid 49104] [client 20.215.216.144:64350] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aeAbAjbDwvcXorHR_MyrmQAAAUg"]
[Thu Apr 16 07:10:59.423431 2026] [:error] [pid 49094:tid 49107] [client 20.215.216.144:64258] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "aeAbAzbDwvcXorHR_MyrnAAAAUs"]
[Thu Apr 16 07:11:00.051158 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:63059] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAbBDbDwvcXorHR_MyrnwAAAUQ"]
[Thu Apr 16 07:11:00.918748 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:63644] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAbBDbDwvcXorHR_MyrowAAAVg"]
[Thu Apr 16 07:11:01.714254 2026] [:error] [pid 49094:tid 49116] [client 20.215.216.144:64955] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAbBTbDwvcXorHR_MyrpwAAAVQ"]
[Thu Apr 16 07:11:02.435399 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:61783] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAbBjbDwvcXorHR_MyrrwAAAUU"]
[Thu Apr 16 07:11:03.107999 2026] [:error] [pid 57538:tid 57614] [client 20.215.216.144:63668] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeAbB8uMaiEF5SVR2BdF5gAAAIw"]
[Thu Apr 16 07:11:03.891917 2026] [:error] [pid 57537:tid 57575] [client 20.215.216.144:62366] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeAbB1VQRS8nm73ENAk8uAAAAEA"]
[Thu Apr 16 07:11:04.779805 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:63721] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeAbCMuMaiEF5SVR2BdF6AAAAIY"]
[Thu Apr 16 07:11:05.762395 2026] [:error] [pid 57538:tid 57602] [client 20.215.216.144:63646] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeAbCcuMaiEF5SVR2BdF6gAAAIA"]
[Thu Apr 16 07:11:06.760811 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:64321] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aeAbCjbDwvcXorHR_MyrwwAAAVg"]
[Thu Apr 16 07:11:07.439203 2026] [:error] [pid 49094:tid 49112] [client 20.215.216.144:61295] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aeAbCzbDwvcXorHR_MyrxgAAAVA"]
[Thu Apr 16 07:11:08.028545 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:64353] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aeAbDDbDwvcXorHR_MyrzQAAAU8"]
[Thu Apr 16 07:11:08.679601 2026] [:error] [pid 29603:tid 29610] [client 20.215.216.144:65008] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aeAbDFfGOR6fpTWUAzrbqwAAAQU"]
[Thu Apr 16 07:11:09.662577 2026] [:error] [pid 57639:tid 57665] [client 20.215.216.144:60646] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeAbDaMCQoTw7TsxWunVdAAAANM"]
[Thu Apr 16 07:11:10.319009 2026] [:error] [pid 49094:tid 49115] [client 20.215.216.144:63681] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeAbDjbDwvcXorHR_Myr2QAAAVM"]
[Thu Apr 16 07:11:10.965532 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:64960] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeAbDjbDwvcXorHR_Myr3gAAAUw"]
[Thu Apr 16 07:11:11.905572 2026] [:error] [pid 49094:tid 49109] [client 20.215.216.144:63056] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeAbDzbDwvcXorHR_Myr5wAAAU0"]
[Thu Apr 16 07:11:13.309767 2026] [:error] [pid 49094:tid 49117] [client 20.215.216.144:63047] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zt2.php"] [unique_id "aeAbETbDwvcXorHR_Myr8wAAAVU"]
[Thu Apr 16 07:11:14.053716 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:63019] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zt2.php"] [unique_id "aeAbEjbDwvcXorHR_Myr_QAAAUw"]
[Thu Apr 16 07:11:15.383891 2026] [:error] [pid 49094:tid 49100] [client 20.215.216.144:64944] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zt2.php"] [unique_id "aeAbEzbDwvcXorHR_MysBQAAAUQ"]
[Thu Apr 16 07:11:16.028410 2026] [:error] [pid 49094:tid 49098] [client 20.215.216.144:64962] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zt2.php"] [unique_id "aeAbFDbDwvcXorHR_MysBwAAAUI"]
[Thu Apr 16 07:11:17.411019 2026] [:error] [pid 57537:tid 57585] [client 20.215.216.144:63628] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-cc.php"] [unique_id "aeAbFVVQRS8nm73ENAk8ugAAAEo"]
[Thu Apr 16 07:11:18.072418 2026] [:error] [pid 57537:tid 57577] [client 20.215.216.144:64920] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-cc.php"] [unique_id "aeAbFlVQRS8nm73ENAk8vAAAAEI"]
[Thu Apr 16 07:11:18.741995 2026] [:error] [pid 49094:tid 49120] [client 20.215.216.144:65015] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-cc.php"] [unique_id "aeAbFjbDwvcXorHR_MysCwAAAVg"]
[Thu Apr 16 07:11:20.400797 2026] [:error] [pid 49094:tid 49101] [client 20.215.216.144:62452] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-cc.php"] [unique_id "aeAbGDbDwvcXorHR_MysEgAAAUU"]
[Thu Apr 16 07:11:21.099562 2026] [:error] [pid 57639:tid 57647] [client 20.215.216.144:63040] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAbGaMCQoTw7TsxWunVeQAAAME"]
[Thu Apr 16 07:11:22.122302 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:64363] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAbGjbDwvcXorHR_MysFQAAAUk"]
[Thu Apr 16 07:11:23.302986 2026] [:error] [pid 57639:tid 57646] [client 20.215.216.144:63741] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAbG6MCQoTw7TsxWunVewAAAMA"]
[Thu Apr 16 07:11:24.082504 2026] [:error] [pid 49094:tid 49119] [client 20.215.216.144:63733] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAbHDbDwvcXorHR_MysIAAAAVc"]
[Thu Apr 16 07:11:24.666782 2026] [:error] [pid 49094:tid 49108] [client 20.215.216.144:63714] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bx.php"] [unique_id "aeAbHDbDwvcXorHR_MysJQAAAUw"]
[Thu Apr 16 07:11:25.436636 2026] [:error] [pid 49094:tid 49114] [client 20.215.216.144:60586] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bx.php"] [unique_id "aeAbHTbDwvcXorHR_MysKgAAAVI"]
[Thu Apr 16 07:11:27.378588 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:61813] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bx.php"] [unique_id "aeAbHzbDwvcXorHR_MysMwAAAUE"]
[Thu Apr 16 07:11:28.758491 2026] [:error] [pid 49094:tid 49110] [client 20.215.216.144:64256] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bx.php"] [unique_id "aeAbIDbDwvcXorHR_MysPQAAAU4"]
[Thu Apr 16 07:11:29.486574 2026] [:error] [pid 49094:tid 49105] [client 20.215.216.144:64938] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeAbITbDwvcXorHR_MysQgAAAUk"]
[Thu Apr 16 07:11:30.088986 2026] [:error] [pid 49094:tid 49109] [client 20.215.216.144:63662] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeAbIjbDwvcXorHR_MysRwAAAU0"]
[Thu Apr 16 07:11:30.987303 2026] [:error] [pid 29603:tid 29629] [client 20.215.216.144:65007] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeAbIlfGOR6fpTWUAzrbtgAAARg"]
[Thu Apr 16 07:11:33.186964 2026] [:error] [pid 49094:tid 49111] [client 20.215.216.144:64364] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeAbJTbDwvcXorHR_MysVwAAAU8"]
[Thu Apr 16 07:11:33.782628 2026] [:error] [pid 57538:tid 57620] [client 20.215.216.144:64275] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeAbJcuMaiEF5SVR2BdF_gAAAJI"]
[Thu Apr 16 07:11:34.575113 2026] [:error] [pid 49094:tid 49097] [client 20.215.216.144:64304] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeAbJjbDwvcXorHR_MysXQAAAUE"]
[Thu Apr 16 07:11:35.414215 2026] [:error] [pid 57537:tid 57586] [client 20.215.216.144:63647] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeAbJ1VQRS8nm73ENAk8zwAAAEs"]
[Thu Apr 16 07:11:36.375363 2026] [:error] [pid 57538:tid 57608] [client 20.215.216.144:62427] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeAbKMuMaiEF5SVR2BdGAgAAAIY"]
[Thu Apr 16 07:11:37.123657 2026] [proxy_fcgi:error] [pid 29603:tid 29608] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:37.409504 2026] [proxy_fcgi:error] [pid 29603:tid 29607] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:37.668117 2026] [proxy_fcgi:error] [pid 29603:tid 29617] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:38.013027 2026] [proxy_fcgi:error] [pid 29603:tid 29627] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:38.339497 2026] [proxy_fcgi:error] [pid 29603:tid 29629] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:38.710454 2026] [proxy_fcgi:error] [pid 29603:tid 29626] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:39.029794 2026] [proxy_fcgi:error] [pid 29603:tid 29610] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:39.339287 2026] [proxy_fcgi:error] [pid 29603:tid 29605] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:39.599120 2026] [proxy_fcgi:error] [pid 29603:tid 29628] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:40.358392 2026] [proxy_fcgi:error] [pid 29603:tid 29611] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:40.667725 2026] [proxy_fcgi:error] [pid 29603:tid 29616] [client 20.215.216.144:63706] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 07:11:40.946198 2026] [:error] [pid 29603:tid 29613] [client 20.215.216.144:63706] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "aeAbLFfGOR6fpTWUAzrb0AAAAQg"]
[Thu Apr 16 07:11:42.516789 2026] [:error] [pid 57538:tid 57623] [client 20.215.216.144:64365] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "aeAbLsuMaiEF5SVR2BdGBwAAAJU"]
[Thu Apr 16 07:11:44.753360 2026] [:error] [pid 57537:tid 57583] [client 20.215.216.144:62421] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "aeAbMFVQRS8nm73ENAk82wAAAEg"]
[Thu Apr 16 07:11:45.443172 2026] [:error] [pid 57537:tid 57575] [client 20.215.216.144:64327] [client 20.215.216.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "aeAbMVVQRS8nm73ENAk83QAAAEA"]
[Thu Apr 16 09:50:30.858716 2026] [:error] [pid 49094:tid 49103] [client 98.93.160.221:52354] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aeBAZjbDwvcXorHR_Mzw0AAAAUc"]
[Thu Apr 16 11:30:29.197437 2026] [proxy_fcgi:error] [pid 7880:tid 7886] [client 172.213.241.216:54066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 13:18:49.604879 2026] [:error] [pid 57639:tid 57646] [client 98.93.160.221:44094] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aeBxOaMCQoTw7TsxWumGsgAAAMA"]
[Thu Apr 16 16:27:12.049823 2026] [:error] [pid 7880:tid 7891] [client 216.73.216.6:59479] [client 216.73.216.6] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||quarryspec.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "quarryspec.com.au"] [uri "/robots.txt"] [unique_id "aeCdYKaezm4fSGc0yUJR7wAAAYY"]
[Thu Apr 16 19:15:40.622165 2026] [:error] [pid 49094:tid 49099] [client 88.151.33.19:60304] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/backend/.env"] [unique_id "aeDE3DbDwvcXorHR_MyUFgAAAUM"]
[Thu Apr 16 19:15:40.622580 2026] [:error] [pid 49094:tid 49105] [client 88.151.33.19:60270] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "aeDE3DbDwvcXorHR_MyUFwAAAUk"]
[Thu Apr 16 19:15:40.622637 2026] [:error] [pid 49094:tid 49107] [client 88.151.33.19:60258] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aeDE3DbDwvcXorHR_MyUGAAAAUs"]
[Thu Apr 16 19:15:40.622951 2026] [:error] [pid 57639:tid 57663] [client 88.151.33.19:60238] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aeDE3KMCQoTw7TsxWulB6AAAANE"]
[Thu Apr 16 19:15:40.623981 2026] [:error] [pid 57536:tid 57552] [client 88.151.33.19:60228] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aeDE3CQU4faGja6jpDtGmAAAAAQ"]
[Thu Apr 16 19:15:40.625114 2026] [:error] [pid 49094:tid 49097] [client 88.151.33.19:60288] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "aeDE3DbDwvcXorHR_MyUGQAAAUE"]
[Thu Apr 16 19:15:40.625759 2026] [:error] [pid 49094:tid 49103] [client 88.151.33.19:60284] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "aeDE3DbDwvcXorHR_MyUGgAAAUc"]
[Thu Apr 16 19:15:40.625997 2026] [:error] [pid 57537:tid 57586] [client 88.151.33.19:60300] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "aeDE3FVQRS8nm73ENAmiagAAAEs"]
[Thu Apr 16 19:15:40.626067 2026] [:error] [pid 57536:tid 57572] [client 88.151.33.19:60254] [client 88.151.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/laravel/.env"] [unique_id "aeDE3CQU4faGja6jpDtGmQAAABg"]
[Thu Apr 16 20:47:54.179495 2026] [:error] [pid 49094:tid 49097] [client 158.158.112.230:65020] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDaejbDwvcXorHR_MzJ3QAAAUE"]
[Thu Apr 16 20:47:55.475715 2026] [:error] [pid 57537:tid 57599] [client 158.158.112.230:65498] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDae1VQRS8nm73ENAmykQAAAFg"]
[Thu Apr 16 20:47:56.219913 2026] [:error] [pid 57537:tid 57577] [client 158.158.112.230:65410] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDafFVQRS8nm73ENAmylAAAAEI"]
[Thu Apr 16 20:47:56.933832 2026] [:error] [pid 57639:tid 57656] [client 158.158.112.230:64956] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeDafKMCQoTw7TsxWumPugAAAMo"]
[Thu Apr 16 20:58:12.596205 2026] [:error] [pid 57639:tid 57650] [client 167.71.180.252:63920] [client 167.71.180.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.180.252, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aeDc5KMCQoTw7TsxWumWlQAAAMQ"]
[Thu Apr 16 20:58:12.605577 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 167.71.180.252:63920] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:21:11.729139 2026] [:error] [pid 57538:tid 57622] [client 45.130.203.154:47055] [client 45.130.203.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "aeDiR8uMaiEF5SVR2BfkEAAAAJQ"]
[Thu Apr 16 22:34:09.505999 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:09.770151 2026] [proxy_fcgi:error] [pid 7880:tid 7891] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:10.114181 2026] [proxy_fcgi:error] [pid 7880:tid 7901] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:10.428440 2026] [proxy_fcgi:error] [pid 7880:tid 7893] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:10.792468 2026] [proxy_fcgi:error] [pid 7880:tid 7890] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:11.065544 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:11.354916 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:11.708374 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 74.234.86.1:26915] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:12.218493 2026] [:error] [pid 7880:tid 7898] [client 74.234.86.1:26915] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeDzZKaezm4fSGc0yULEjwAAAY0"]
[Thu Apr 16 22:34:13.053853 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 74.234.86.1:13031] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:13.364293 2026] [proxy_fcgi:error] [pid 57537:tid 57595] [client 74.234.86.1:13031] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:34:13.649314 2026] [:error] [pid 57537:tid 57579] [client 74.234.86.1:13031] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeDzZVVQRS8nm73ENAnF5AAAAEQ"]
[Thu Apr 16 22:34:14.508843 2026] [:error] [pid 57536:tid 57570] [client 74.234.86.1:16438] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeDzZiQU4faGja6jpDufRQAAABY"]
[Thu Apr 16 22:34:15.651498 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:26202] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeDzZ6MCQoTw7TsxWunlgAAAAMM"]
[Thu Apr 16 22:34:17.075664 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:32695] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeDzaTbDwvcXorHR_MwIvQAAAVM"]
[Thu Apr 16 22:34:26.904853 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:25890] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aeDzciQU4faGja6jpDufbAAAAAM"]
[Thu Apr 16 22:34:27.751540 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:31880] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aeDzcyQU4faGja6jpDufeAAAABM"]
[Thu Apr 16 22:34:29.005624 2026] [:error] [pid 7880:tid 7886] [client 74.234.86.1:5796] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aeDzdaaezm4fSGc0yULEmQAAAYE"]
[Thu Apr 16 22:34:57.574378 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:15107] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeDzkTbDwvcXorHR_MwJQAAAAUo"]
[Thu Apr 16 22:34:59.458019 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:26425] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeDzk6MCQoTw7TsxWunmEgAAANQ"]
[Thu Apr 16 22:35:07.507468 2026] [:error] [pid 7880:tid 7885] [client 74.234.86.1:13558] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeDzm6aezm4fSGc0yULEugAAAYA"]
[Thu Apr 16 22:35:13.059531 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:13.354493 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:13.656367 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:13.921540 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:14.241191 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:14.504970 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:15.103818 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:15.415216 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 74.234.86.1:13626] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:15.951473 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:13626] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aeDzo6MCQoTw7TsxWunmWQAAANc"]
[Thu Apr 16 22:35:20.772221 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 74.234.86.1:21403] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:35:21.056302 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:21403] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDzqaMCQoTw7TsxWunmZgAAANc"]
[Thu Apr 16 22:35:22.151921 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:13714] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDzqiQU4faGja6jpDufxAAAAAE"]
[Thu Apr 16 22:35:23.921108 2026] [:error] [pid 29603:tid 29619] [client 74.234.86.1:19778] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDzq1fGOR6fpTWUAzqtCAAAAQ4"]
[Thu Apr 16 22:35:32.206590 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:13589] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeDztDbDwvcXorHR_MwJbgAAAVc"]
[Thu Apr 16 22:35:43.002366 2026] [:error] [pid 57536:tid 57557] [client 74.234.86.1:13712] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeDzvyQU4faGja6jpDugDQAAAAk"]
[Thu Apr 16 22:35:45.457506 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:21381] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeDzwSQU4faGja6jpDugJQAAAAI"]
[Thu Apr 16 22:35:46.608777 2026] [:error] [pid 57537:tid 57579] [client 74.234.86.1:15792] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeDzwlVQRS8nm73ENAnGJwAAAEQ"]
[Thu Apr 16 22:35:48.046581 2026] [:error] [pid 7880:tid 7887] [client 74.234.86.1:20957] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeDzxKaezm4fSGc0yULFDgAAAYI"]
[Thu Apr 16 22:35:49.228804 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:15137] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeDzxaaezm4fSGc0yULFEwAAAZU"]
[Thu Apr 16 22:35:50.063287 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:20981] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeDzxiQU4faGja6jpDugMQAAABA"]
[Thu Apr 16 22:35:51.171731 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:20954] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeDzx1fGOR6fpTWUAzqtFQAAAQg"]
[Thu Apr 16 22:35:54.954893 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:26391] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeDzyjbDwvcXorHR_MwJqAAAAU8"]
[Thu Apr 16 22:35:56.173193 2026] [:error] [pid 49094:tid 49114] [client 74.234.86.1:13696] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeDzzDbDwvcXorHR_MwJqwAAAVI"]
[Thu Apr 16 22:35:57.346793 2026] [:error] [pid 49094:tid 49100] [client 74.234.86.1:16438] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeDzzTbDwvcXorHR_MwJsAAAAUQ"]
[Thu Apr 16 22:35:59.937107 2026] [:error] [pid 57538:tid 57603] [client 74.234.86.1:15753] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeDzz8uMaiEF5SVR2Bf02wAAAIE"]
[Thu Apr 16 22:36:05.996673 2026] [:error] [pid 49094:tid 49113] [client 74.234.86.1:19762] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeDz1TbDwvcXorHR_MwJ3wAAAVE"]
[Thu Apr 16 22:36:07.349709 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:5910] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeDz1zbDwvcXorHR_MwJ6QAAAUE"]
[Thu Apr 16 22:36:08.239106 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:21954] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeDz2DbDwvcXorHR_MwJ9wAAAUE"]
[Thu Apr 16 22:36:09.417983 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:19714] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeDz2TbDwvcXorHR_MwKBwAAAU8"]
[Thu Apr 16 22:36:10.576418 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:20945] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeDz2qMCQoTw7TsxWunmuQAAAMc"]
[Thu Apr 16 22:36:14.048684 2026] [:error] [pid 7880:tid 7900] [client 74.234.86.1:16229] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeDz3qaezm4fSGc0yULFcAAAAY8"]
[Thu Apr 16 22:36:15.212633 2026] [:error] [pid 57536:tid 57570] [client 74.234.86.1:21128] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeDz3yQU4faGja6jpDugfAAAABY"]
[Thu Apr 16 22:36:18.680417 2026] [:error] [pid 57536:tid 57556] [client 74.234.86.1:32023] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeDz4iQU4faGja6jpDuggQAAAAg"]
[Thu Apr 16 22:36:31.489351 2026] [proxy_fcgi:error] [pid 57537:tid 57577] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:31.843909 2026] [proxy_fcgi:error] [pid 57537:tid 57590] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:32.144273 2026] [proxy_fcgi:error] [pid 57537:tid 57583] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:32.460485 2026] [proxy_fcgi:error] [pid 57537:tid 57598] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:32.749445 2026] [proxy_fcgi:error] [pid 57537:tid 57581] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:33.160905 2026] [proxy_fcgi:error] [pid 57537:tid 57578] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:33.471836 2026] [proxy_fcgi:error] [pid 57537:tid 57587] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:33.763665 2026] [proxy_fcgi:error] [pid 57537:tid 57596] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:34.078065 2026] [proxy_fcgi:error] [pid 57537:tid 57580] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:34.367108 2026] [proxy_fcgi:error] [pid 57537:tid 57576] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:34.687910 2026] [proxy_fcgi:error] [pid 57537:tid 57591] [client 74.234.86.1:16206] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:36:34.979917 2026] [:error] [pid 57537:tid 57588] [client 74.234.86.1:16206] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeDz8lVQRS8nm73ENAnGYgAAAE0"]
[Thu Apr 16 22:36:36.392786 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:15000] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeDz9KMCQoTw7TsxWunnHgAAAMA"]
[Thu Apr 16 22:36:42.698770 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:14482] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeDz-qMCQoTw7TsxWunnMwAAANc"]
[Thu Apr 16 22:36:46.896812 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:21955] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeDz_iQU4faGja6jpDugqAAAAAY"]
[Thu Apr 16 22:36:56.447560 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:15642] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeD0CDbDwvcXorHR_MwKWAAAAVM"]
[Thu Apr 16 22:37:04.223581 2026] [:error] [pid 57639:tid 57657] [client 74.234.86.1:22669] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeD0EKMCQoTw7TsxWunn9gAAAMs"]
[Thu Apr 16 22:37:05.725093 2026] [:error] [pid 57538:tid 57610] [client 74.234.86.1:13671] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeD0EcuMaiEF5SVR2Bf1MAAAAIg"]
[Thu Apr 16 22:37:22.321664 2026] [:error] [pid 57538:tid 57615] [client 74.234.86.1:31848] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeD0IsuMaiEF5SVR2Bf1TgAAAI0"]
[Thu Apr 16 22:37:25.197297 2026] [:error] [pid 7880:tid 7896] [client 74.234.86.1:13109] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeD0Jaaezm4fSGc0yULFqwAAAYs"]
[Thu Apr 16 22:37:26.076830 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:20146] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeD0Jqaezm4fSGc0yULFrAAAAZU"]
[Thu Apr 16 22:37:30.600501 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:16064] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeD0KqMCQoTw7TsxWunoNAAAAMU"]
[Thu Apr 16 22:37:31.351831 2026] [:error] [pid 49094:tid 49099] [client 74.234.86.1:17924] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeD0KzbDwvcXorHR_MwK0AAAAUM"]
[Thu Apr 16 22:37:32.960716 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:31838] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeD0LKMCQoTw7TsxWunoPgAAAMg"]
[Thu Apr 16 22:37:36.884610 2026] [proxy_fcgi:error] [pid 57538:tid 57618] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:37.375226 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:37.766813 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:38.092187 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:38.969649 2026] [proxy_fcgi:error] [pid 57538:tid 57624] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:39.258110 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:39.595758 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:39.889055 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:40.178843 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:40.547448 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:41.113371 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 74.234.86.1:16080] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:37:41.398077 2026] [:error] [pid 57538:tid 57622] [client 74.234.86.1:16080] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aeD0NcuMaiEF5SVR2Bf1dAAAAJQ"]
[Thu Apr 16 22:37:42.405538 2026] [:error] [pid 57537:tid 57578] [client 74.234.86.1:18275] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aeD0NlVQRS8nm73ENAnGlAAAAEM"]
[Thu Apr 16 22:37:45.308946 2026] [:error] [pid 57536:tid 57561] [client 74.234.86.1:19286] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aeD0OSQU4faGja6jpDuhOQAAAA0"]
[Thu Apr 16 22:37:49.315742 2026] [:error] [pid 29603:tid 29616] [client 74.234.86.1:14496] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aeD0PVfGOR6fpTWUAzqtnAAAAQs"]
[Thu Apr 16 22:37:54.674853 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:14863] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeD0QqMCQoTw7TsxWunoigAAAM4"]
[Thu Apr 16 22:37:55.814534 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:25722] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeD0QzbDwvcXorHR_MwLFAAAAUE"]
[Thu Apr 16 22:37:58.504053 2026] [:error] [pid 57538:tid 57620] [client 74.234.86.1:16102] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeD0RsuMaiEF5SVR2Bf1lQAAAJI"]
[Thu Apr 16 22:38:05.642392 2026] [:error] [pid 57538:tid 57616] [client 74.234.86.1:15366] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeD0TcuMaiEF5SVR2Bf1rAAAAI4"]
[Thu Apr 16 22:38:08.609465 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:5932] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeD0UCQU4faGja6jpDuhfAAAAAE"]
[Thu Apr 16 22:38:12.946744 2026] [:error] [pid 7880:tid 7892] [client 74.234.86.1:14020] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeD0VKaezm4fSGc0yULGGgAAAYc"]
[Thu Apr 16 22:38:13.737664 2026] [:error] [pid 7880:tid 7886] [client 74.234.86.1:27653] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeD0Vaaezm4fSGc0yULGHQAAAYE"]
[Thu Apr 16 22:38:15.266322 2026] [:error] [pid 57537:tid 57582] [client 74.234.86.1:19787] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "aeD0V1VQRS8nm73ENAnGwwAAAEc"]
[Thu Apr 16 22:38:19.678167 2026] [:error] [pid 7880:tid 7888] [client 74.234.86.1:5916] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "aeD0W6aezm4fSGc0yULGJgAAAYM"]
[Thu Apr 16 22:38:20.549063 2026] [:error] [pid 29603:tid 29624] [client 74.234.86.1:16234] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "aeD0XFfGOR6fpTWUAzqt4gAAARM"]
[Thu Apr 16 22:38:23.204810 2026] [:error] [pid 7880:tid 7887] [client 74.234.86.1:28500] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqa.php"] [unique_id "aeD0X6aezm4fSGc0yULGOAAAAYI"]
[Thu Apr 16 22:38:24.167879 2026] [:error] [pid 57537:tid 57599] [client 74.234.86.1:32040] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeD0YFVQRS8nm73ENAnG0gAAAFg"]
[Thu Apr 16 22:38:26.023109 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:16199] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeD0YqMCQoTw7TsxWuno3gAAAMk"]
[Thu Apr 16 22:38:28.563409 2026] [:error] [pid 57538:tid 57608] [client 74.234.86.1:5943] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeD0ZMuMaiEF5SVR2Bf1zgAAAIY"]
[Thu Apr 16 22:38:30.641487 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:21144] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeD0ZqMCQoTw7TsxWuno_AAAANg"]
[Thu Apr 16 22:38:33.024216 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:32043] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeD0aaMCQoTw7TsxWunpDwAAAMc"]
[Thu Apr 16 22:38:33.910579 2026] [:error] [pid 57537:tid 57596] [client 74.234.86.1:21154] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeD0aVVQRS8nm73ENAnG3QAAAFU"]
[Thu Apr 16 22:38:35.583955 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:13610] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeD0a6MCQoTw7TsxWunpJAAAANc"]
[Thu Apr 16 22:38:37.220518 2026] [:error] [pid 57537:tid 57579] [client 74.234.86.1:15418] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeD0bVVQRS8nm73ENAnG6AAAAEQ"]
[Thu Apr 16 22:38:40.024238 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:32050] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeD0cCQU4faGja6jpDuhvwAAABc"]
[Thu Apr 16 22:38:42.891595 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:43.283271 2026] [proxy_fcgi:error] [pid 7880:tid 7901] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:43.570774 2026] [proxy_fcgi:error] [pid 7880:tid 7887] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:43.897919 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:44.399000 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:44.744445 2026] [proxy_fcgi:error] [pid 7880:tid 7885] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:45.010530 2026] [proxy_fcgi:error] [pid 7880:tid 7899] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:45.322282 2026] [proxy_fcgi:error] [pid 7880:tid 7902] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:45.663555 2026] [proxy_fcgi:error] [pid 7880:tid 7894] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:45.962503 2026] [proxy_fcgi:error] [pid 7880:tid 7903] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:46.345189 2026] [proxy_fcgi:error] [pid 7880:tid 7887] [client 74.234.86.1:15779] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:38:46.773470 2026] [:error] [pid 7880:tid 7891] [client 74.234.86.1:15779] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeD0dqaezm4fSGc0yULGbAAAAYY"]
[Thu Apr 16 22:38:48.124700 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:26177] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeD0eKMCQoTw7TsxWunpZQAAANg"]
[Thu Apr 16 22:38:51.805494 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:14553] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeD0e1fGOR6fpTWUAzquFAAAARg"]
[Thu Apr 16 22:39:06.237446 2026] [:error] [pid 49094:tid 49113] [client 74.234.86.1:5949] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeD0ijbDwvcXorHR_MwMFAAAAVE"]
[Thu Apr 16 22:39:08.013638 2026] [:error] [pid 7880:tid 7895] [client 74.234.86.1:13210] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeD0jKaezm4fSGc0yULGygAAAYo"]
[Thu Apr 16 22:39:10.217315 2026] [:error] [pid 57538:tid 57611] [client 74.234.86.1:28818] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeD0jsuMaiEF5SVR2Bf2DgAAAIk"]
[Thu Apr 16 22:39:24.679292 2026] [:error] [pid 7880:tid 7898] [client 74.234.86.1:23427] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "aeD0nKaezm4fSGc0yULG9QAAAY0"]
[Thu Apr 16 22:39:30.896578 2026] [:error] [pid 7880:tid 7902] [client 74.234.86.1:13869] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "aeD0oqaezm4fSGc0yULHDAAAAZE"]
[Thu Apr 16 22:39:38.261960 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:24046] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper.php"] [unique_id "aeD0qqMCQoTw7TsxWunqMgAAAMk"]
[Thu Apr 16 22:39:40.311377 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:13143] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeD0rCQU4faGja6jpDuiTgAAAA8"]
[Thu Apr 16 22:39:41.383164 2026] [:error] [pid 57538:tid 57618] [client 74.234.86.1:32647] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeD0rcuMaiEF5SVR2Bf2UQAAAJA"]
[Thu Apr 16 22:39:44.027590 2026] [:error] [pid 49094:tid 49113] [client 74.234.86.1:32659] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxpass.php"] [unique_id "aeD0sDbDwvcXorHR_MwMkAAAAVE"]
[Thu Apr 16 22:39:55.933029 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:56.265548 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:56.674856 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:56.976973 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:57.257506 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:57.667267 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:57.948192 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:58.253076 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:58.591848 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 74.234.86.1:13148] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:39:58.868762 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:13148] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeD0vqMCQoTw7TsxWunqsQAAAMc"]
[Thu Apr 16 22:39:59.971372 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 74.234.86.1:25644] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:40:00.397193 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 74.234.86.1:25644] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:40:00.811910 2026] [:error] [pid 49094:tid 49103] [client 74.234.86.1:25644] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeD0wDbDwvcXorHR_MwM2wAAAUc"]
[Thu Apr 16 22:40:09.894578 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:24832] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeD0yTbDwvcXorHR_MwM8QAAAUE"]
[Thu Apr 16 22:40:10.754089 2026] [:error] [pid 57538:tid 57602] [client 74.234.86.1:5806] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeD0ysuMaiEF5SVR2Bf2gQAAAIA"]
[Thu Apr 16 22:40:15.728207 2026] [:error] [pid 57639:tid 57657] [client 74.234.86.1:26923] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeD0z6MCQoTw7TsxWunrJQAAAMs"]
[Thu Apr 16 22:40:20.840688 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:14153] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeD01DbDwvcXorHR_MwNPAAAAUs"]
[Thu Apr 16 22:40:23.244319 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:32700] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeD01zbDwvcXorHR_MwNYgAAAUE"]
[Thu Apr 16 22:40:25.830567 2026] [:error] [pid 7880:tid 7900] [client 74.234.86.1:16421] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeD02aaezm4fSGc0yULHXAAAAY8"]
[Thu Apr 16 22:40:30.699660 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:13151] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeD03jbDwvcXorHR_MwNkgAAAUE"]
[Thu Apr 16 22:40:56.669299 2026] [:error] [pid 29603:tid 29628] [client 74.234.86.1:25603] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeD0-FfGOR6fpTWUAzqvBgAAARc"]
[Thu Apr 16 22:41:14.603357 2026] [proxy_fcgi:error] [pid 57639:tid 57661] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:14.900177 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:15.197401 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:15.486524 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:16.065879 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:16.363308 2026] [proxy_fcgi:error] [pid 57639:tid 57668] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:16.655913 2026] [proxy_fcgi:error] [pid 57639:tid 57650] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:16.950160 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:17.220847 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:17.494399 2026] [proxy_fcgi:error] [pid 57639:tid 57664] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:17.769766 2026] [proxy_fcgi:error] [pid 57639:tid 57665] [client 74.234.86.1:19066] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:41:18.041462 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:19066] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD1DqMCQoTw7TsxWunsIQAAAME"]
[Thu Apr 16 22:41:19.120629 2026] [:error] [pid 57538:tid 57623] [client 74.234.86.1:16417] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD1D8uMaiEF5SVR2Bf3EgAAAJU"]
[Thu Apr 16 22:41:20.643570 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:32640] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD1ECQU4faGja6jpDujdQAAAA8"]
[Thu Apr 16 22:41:22.944495 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:14196] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD1EiQU4faGja6jpDujiQAAAA4"]
[Thu Apr 16 22:41:26.378505 2026] [:error] [pid 57536:tid 57557] [client 74.234.86.1:14200] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeD1FiQU4faGja6jpDujkQAAAAk"]
[Thu Apr 16 22:41:27.771387 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:25631] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeD1F6MCQoTw7TsxWunsRwAAAMg"]
[Thu Apr 16 22:41:28.924381 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:21453] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeD1GKMCQoTw7TsxWunsTwAAANc"]
[Thu Apr 16 22:41:31.439417 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:22482] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeD1G6MCQoTw7TsxWunsYAAAANU"]
[Thu Apr 16 22:41:32.590612 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:24853] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeD1HKMCQoTw7TsxWunscAAAAME"]
[Thu Apr 16 22:41:35.729126 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:13058] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeD1H6MCQoTw7TsxWunshQAAAMQ"]
[Thu Apr 16 22:41:40.528137 2026] [:error] [pid 57537:tid 57589] [client 74.234.86.1:22472] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeD1JFVQRS8nm73ENAnIAgAAAE4"]
[Thu Apr 16 22:41:42.468295 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:5231] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeD1JqMCQoTw7TsxWunsvgAAAM4"]
[Thu Apr 16 22:41:43.943230 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:13157] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeD1JzbDwvcXorHR_MwObAAAAUk"]
[Thu Apr 16 22:41:44.672612 2026] [:error] [pid 57538:tid 57624] [client 74.234.86.1:23746] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeD1KMuMaiEF5SVR2Bf3PQAAAJY"]
[Thu Apr 16 22:41:46.304020 2026] [:error] [pid 57537:tid 57588] [client 74.234.86.1:18011] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeD1KlVQRS8nm73ENAnIIQAAAE0"]
[Thu Apr 16 22:41:47.781571 2026] [:error] [pid 57537:tid 57595] [client 74.234.86.1:23684] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeD1K1VQRS8nm73ENAnIJgAAAFQ"]
[Thu Apr 16 22:41:48.780490 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:25655] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeD1LCQU4faGja6jpDujwwAAABc"]
[Thu Apr 16 22:42:22.261841 2026] [proxy_fcgi:error] [pid 57537:tid 57597] [client 74.234.86.1:17948] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 22:42:22.535606 2026] [proxy_fcgi:error] [pid 57537:tid 57582] [client 74.234.86.1:17948] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:35:59.275582 2026] [:error] [pid 7880:tid 7893] [client 45.130.203.130:63873] [client 45.130.203.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "aeEB36aezm4fSGc0yULZ0QAAAYg"]
[Fri Apr 17 00:24:18.747650 2026] [:error] [pid 43386:tid 43445] [client 34.168.47.2:56022] [client 34.168.47.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.47.2, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeENMu91GAVgUfhPVDGs6AAAAFg"]
[Fri Apr 17 00:24:18.758738 2026] [proxy_fcgi:error] [pid 43386:tid 43445] [client 34.168.47.2:56022] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 00:24:21.257312 2026] [:error] [pid 43386:tid 43423] [client 34.168.47.2:56022] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeENNe91GAVgUfhPVDGs-gAAAEM"]
[Fri Apr 17 00:24:21.643964 2026] [:error] [pid 3245:tid 3269] [client 34.168.47.2:64276] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeENNaESOMTHVLs-uFC0RwAAAQc"]
[Fri Apr 17 00:24:22.147346 2026] [:error] [pid 3245:tid 3272] [client 34.168.47.2:51955] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeENNqESOMTHVLs-uFC0SwAAAQo"]
[Fri Apr 17 00:24:22.584495 2026] [:error] [pid 3245:tid 3285] [client 34.168.47.2:55406] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeENNqESOMTHVLs-uFC0TQAAARc"]
[Fri Apr 17 00:24:23.193607 2026] [:error] [pid 43482:tid 43498] [client 34.168.47.2:56658] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeENNz9SZnuKxlHrct12AwAAAM4"]
[Fri Apr 17 00:24:23.704085 2026] [:error] [pid 43482:tid 43491] [client 34.168.47.2:58197] [client 34.168.47.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeENNz9SZnuKxlHrct12BQAAAMc"]
[Fri Apr 17 01:17:39.246295 2026] [proxy_fcgi:error] [pid 43385:tid 43395] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:39.533330 2026] [proxy_fcgi:error] [pid 43385:tid 43408] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:39.849320 2026] [proxy_fcgi:error] [pid 43385:tid 43411] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:40.124588 2026] [proxy_fcgi:error] [pid 43385:tid 43405] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:40.413807 2026] [proxy_fcgi:error] [pid 43385:tid 43412] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:42.084713 2026] [proxy_fcgi:error] [pid 43385:tid 43392] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:42.505099 2026] [proxy_fcgi:error] [pid 43385:tid 43391] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:42.790892 2026] [proxy_fcgi:error] [pid 43385:tid 43413] [client 172.213.155.173:48930] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:43.075332 2026] [:error] [pid 43385:tid 43407] [client 172.213.155.173:48930] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeEZt8nIxkJaUI8KNs4PsgAAABI"]
[Fri Apr 17 01:17:43.769697 2026] [proxy_fcgi:error] [pid 43385:tid 43391] [client 172.213.155.173:41599] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:44.221477 2026] [proxy_fcgi:error] [pid 43385:tid 43408] [client 172.213.155.173:41599] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:17:44.459856 2026] [:error] [pid 43385:tid 43415] [client 172.213.155.173:41599] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeEZuMnIxkJaUI8KNs4PwQAAABg"]
[Fri Apr 17 01:17:45.303278 2026] [:error] [pid 43387:tid 43449] [client 172.213.155.173:8203] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeEZuSBNsONqHxWTakU6tQAAAIE"]
[Fri Apr 17 01:17:46.775633 2026] [:error] [pid 26480:tid 26484] [client 172.213.155.173:27458] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeEZugwLDJKTQNfarA1v8wAAAcI"]
[Fri Apr 17 01:17:48.702085 2026] [:error] [pid 26480:tid 26504] [client 172.213.155.173:38282] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeEZvAwLDJKTQNfarA1wFwAAAdY"]
[Fri Apr 17 01:18:29.639937 2026] [:error] [pid 43482:tid 43502] [client 172.213.155.173:25159] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "aeEZ5T9SZnuKxlHrct2bBAAAANI"]
[Fri Apr 17 01:18:35.662324 2026] [:error] [pid 26102:tid 26108] [client 172.213.155.173:42949] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/state.php"] [unique_id "aeEZ6_127aFqw6ALdngTLAAAAYM"]
[Fri Apr 17 01:18:38.714483 2026] [:error] [pid 26480:tid 26497] [client 172.213.155.173:37878] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeEZ7gwLDJKTQNfarA1xMgAAAc8"]
[Fri Apr 17 01:18:44.201069 2026] [proxy_fcgi:error] [pid 43387:tid 43472] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:44.493981 2026] [proxy_fcgi:error] [pid 43387:tid 43466] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:44.792345 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:45.303932 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:45.601488 2026] [proxy_fcgi:error] [pid 43387:tid 43465] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:45.876636 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:46.168694 2026] [proxy_fcgi:error] [pid 43387:tid 43460] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:46.718367 2026] [proxy_fcgi:error] [pid 43387:tid 43471] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:47.201322 2026] [proxy_fcgi:error] [pid 43387:tid 43473] [client 172.213.155.173:42951] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:18:47.747654 2026] [:error] [pid 43387:tid 43475] [client 172.213.155.173:42951] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aeEZ9yBNsONqHxWTakU7NwAAAJY"]
[Fri Apr 17 01:18:51.157660 2026] [:error] [pid 26102:tid 26114] [client 172.213.155.173:49303] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEZ-_127aFqw6ALdngTSAAAAYk"]
[Fri Apr 17 01:18:55.126701 2026] [:error] [pid 26480:tid 26505] [client 172.213.155.173:49334] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEZ_wwLDJKTQNfarA1xeQAAAdc"]
[Fri Apr 17 01:18:57.985404 2026] [:error] [pid 43385:tid 43407] [client 172.213.155.173:8485] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEaAcnIxkJaUI8KNs4RpwAAABI"]
[Fri Apr 17 01:18:59.703321 2026] [:error] [pid 43482:tid 43493] [client 172.213.155.173:37842] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeEaAz9SZnuKxlHrct2b3wAAAMk"]
[Fri Apr 17 01:19:01.353139 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:42955] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeEaBcnIxkJaUI8KNs4RxAAAABc"]
[Fri Apr 17 01:19:02.468702 2026] [:error] [pid 3245:tid 3276] [client 172.213.155.173:25726] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeEaBqESOMTHVLs-uFDTjQAAAQ4"]
[Fri Apr 17 01:19:03.421065 2026] [:error] [pid 3245:tid 3264] [client 172.213.155.173:25713] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeEaB6ESOMTHVLs-uFDTmAAAAQI"]
[Fri Apr 17 01:19:04.385295 2026] [:error] [pid 43482:tid 43490] [client 172.213.155.173:25720] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeEaCD9SZnuKxlHrct2b9AAAAMY"]
[Fri Apr 17 01:19:05.134040 2026] [:error] [pid 43385:tid 43415] [client 172.213.155.173:37871] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeEaCcnIxkJaUI8KNs4R1wAAABg"]
[Fri Apr 17 01:19:05.906890 2026] [:error] [pid 43387:tid 43462] [client 172.213.155.173:21169] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeEaCSBNsONqHxWTakU7TAAAAIs"]
[Fri Apr 17 01:19:06.937670 2026] [:error] [pid 43482:tid 43489] [client 172.213.155.173:46762] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeEaCj9SZnuKxlHrct2cAgAAAMU"]
[Fri Apr 17 01:19:08.436381 2026] [:error] [pid 43482:tid 43505] [client 172.213.155.173:20706] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeEaDD9SZnuKxlHrct2cCQAAANU"]
[Fri Apr 17 01:19:09.460302 2026] [:error] [pid 43482:tid 43485] [client 172.213.155.173:21159] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeEaDT9SZnuKxlHrct2cDQAAAME"]
[Fri Apr 17 01:19:10.554878 2026] [:error] [pid 26480:tid 26499] [client 172.213.155.173:37847] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeEaDgwLDJKTQNfarA1xugAAAdE"]
[Fri Apr 17 01:19:11.336730 2026] [:error] [pid 26102:tid 26124] [client 172.213.155.173:17890] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeEaD_127aFqw6ALdngTggAAAZM"]
[Fri Apr 17 01:19:12.186137 2026] [:error] [pid 43482:tid 43506] [client 172.213.155.173:17900] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeEaED9SZnuKxlHrct2cLAAAANY"]
[Fri Apr 17 01:19:12.869671 2026] [:error] [pid 43387:tid 43475] [client 172.213.155.173:21130] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeEaECBNsONqHxWTakU7VwAAAJY"]
[Fri Apr 17 01:19:13.965299 2026] [:error] [pid 43385:tid 43404] [client 172.213.155.173:17862] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeEaEcnIxkJaUI8KNs4SFQAAAA8"]
[Fri Apr 17 01:19:14.638982 2026] [:error] [pid 43482:tid 43502] [client 172.213.155.173:25191] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeEaEj9SZnuKxlHrct2cSgAAANI"]
[Fri Apr 17 01:19:15.255612 2026] [:error] [pid 43482:tid 43507] [client 172.213.155.173:25203] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/footer.php"] [unique_id "aeEaEz9SZnuKxlHrct2cVAAAANc"]
[Fri Apr 17 01:19:16.886437 2026] [:error] [pid 4086:tid 4089] [client 172.213.155.173:42953] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeEaFFlz7gxl_exM0FpFvQAAAUE"]
[Fri Apr 17 01:19:17.676778 2026] [:error] [pid 26480:tid 26485] [client 172.213.155.173:25678] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeEaFQwLDJKTQNfarA1xzwAAAcM"]
[Fri Apr 17 01:19:18.309771 2026] [:error] [pid 26480:tid 26484] [client 172.213.155.173:42946] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeEaFgwLDJKTQNfarA1x1gAAAcI"]
[Fri Apr 17 01:19:19.859812 2026] [:error] [pid 26480:tid 26482] [client 172.213.155.173:37874] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeEaFwwLDJKTQNfarA1x4AAAAcA"]
[Fri Apr 17 01:19:22.763225 2026] [:error] [pid 3245:tid 3268] [client 172.213.155.173:25682] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeEaGqESOMTHVLs-uFDTuQAAAQY"]
[Fri Apr 17 01:19:24.263719 2026] [:error] [pid 43482:tid 43503] [client 172.213.155.173:25170] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeEaHD9SZnuKxlHrct2cpwAAANM"]
[Fri Apr 17 01:19:25.992558 2026] [:error] [pid 43385:tid 43415] [client 172.213.155.173:25158] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeEaHcnIxkJaUI8KNs4STAAAABg"]
[Fri Apr 17 01:19:28.952124 2026] [:error] [pid 3245:tid 3286] [client 172.213.155.173:17915] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeEaIKESOMTHVLs-uFDT1QAAARg"]
[Fri Apr 17 01:19:31.324286 2026] [:error] [pid 43385:tid 43415] [client 172.213.155.173:25716] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeEaI8nIxkJaUI8KNs4ShAAAABg"]
[Fri Apr 17 01:19:32.131358 2026] [:error] [pid 43482:tid 43506] [client 172.213.155.173:25695] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeEaJD9SZnuKxlHrct2c0QAAANY"]
[Fri Apr 17 01:19:35.055375 2026] [:error] [pid 3245:tid 3277] [client 172.213.155.173:46728] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeEaJ6ESOMTHVLs-uFDT3gAAAQ8"]
[Fri Apr 17 01:19:37.823563 2026] [:error] [pid 26102:tid 26105] [client 172.213.155.173:43003] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeEaKf127aFqw6ALdngTtwAAAYA"]
[Fri Apr 17 01:19:38.728122 2026] [:error] [pid 43386:tid 43425] [client 172.213.155.173:25168] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeEaKu91GAVgUfhPVDG--gAAAEU"]
[Fri Apr 17 01:19:39.521070 2026] [:error] [pid 43482:tid 43488] [client 172.213.155.173:8452] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeEaKz9SZnuKxlHrct2c_AAAAMQ"]
[Fri Apr 17 01:19:40.359460 2026] [:error] [pid 3245:tid 3270] [client 172.213.155.173:21135] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeEaLKESOMTHVLs-uFDT6QAAAQg"]
[Fri Apr 17 01:19:41.260072 2026] [:error] [pid 43482:tid 43508] [client 172.213.155.173:42949] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeEaLT9SZnuKxlHrct2dFgAAANg"]
[Fri Apr 17 01:19:42.045446 2026] [:error] [pid 43385:tid 43393] [client 172.213.155.173:20703] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeEaLsnIxkJaUI8KNs4SxwAAAAQ"]
[Fri Apr 17 01:19:42.768197 2026] [:error] [pid 43386:tid 43441] [client 172.213.155.173:21132] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeEaLu91GAVgUfhPVDG_AgAAAFQ"]
[Fri Apr 17 01:19:43.507390 2026] [:error] [pid 43482:tid 43494] [client 172.213.155.173:17875] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeEaLz9SZnuKxlHrct2dLQAAAMo"]
[Fri Apr 17 01:19:44.121191 2026] [:error] [pid 43385:tid 43411] [client 172.213.155.173:25723] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeEaMMnIxkJaUI8KNs4S0gAAABU"]
[Fri Apr 17 01:19:44.829113 2026] [:error] [pid 43482:tid 43488] [client 172.213.155.173:8499] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aeEaMD9SZnuKxlHrct2dMAAAAMQ"]
[Fri Apr 17 01:19:45.713369 2026] [:error] [pid 43482:tid 43495] [client 172.213.155.173:8458] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aeEaMT9SZnuKxlHrct2dNAAAAMs"]
[Fri Apr 17 01:19:47.269773 2026] [proxy_fcgi:error] [pid 26480:tid 26505] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:47.512054 2026] [proxy_fcgi:error] [pid 26480:tid 26491] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:47.754700 2026] [proxy_fcgi:error] [pid 26480:tid 26482] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:48.024601 2026] [proxy_fcgi:error] [pid 26480:tid 26490] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:48.274831 2026] [proxy_fcgi:error] [pid 26480:tid 26506] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:48.533980 2026] [proxy_fcgi:error] [pid 26480:tid 26484] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:48.785893 2026] [proxy_fcgi:error] [pid 26480:tid 26505] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:50.344275 2026] [proxy_fcgi:error] [pid 26480:tid 26491] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:50.585986 2026] [proxy_fcgi:error] [pid 26480:tid 26482] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:50.826485 2026] [proxy_fcgi:error] [pid 26480:tid 26504] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:51.068676 2026] [proxy_fcgi:error] [pid 26480:tid 26485] [client 172.213.155.173:46757] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:19:51.307611 2026] [:error] [pid 26480:tid 26502] [client 172.213.155.173:46757] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeEaNwwLDJKTQNfarA1yTQAAAdQ"]
[Fri Apr 17 01:19:52.832334 2026] [:error] [pid 43385:tid 43407] [client 172.213.155.173:21145] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeEaOMnIxkJaUI8KNs4S6gAAABI"]
[Fri Apr 17 01:19:54.540904 2026] [:error] [pid 43387:tid 43474] [client 172.213.155.173:49281] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeEaOiBNsONqHxWTakU7nwAAAJU"]
[Fri Apr 17 01:19:55.783108 2026] [:error] [pid 26480:tid 26503] [client 172.213.155.173:46733] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bdktk.php"] [unique_id "aeEaOwwLDJKTQNfarA1yawAAAdU"]
[Fri Apr 17 01:19:57.411318 2026] [:error] [pid 26480:tid 26491] [client 172.213.155.173:21128] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeEaPQwLDJKTQNfarA1ydAAAAck"]
[Fri Apr 17 01:19:58.319438 2026] [:error] [pid 26480:tid 26490] [client 172.213.155.173:8502] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeEaPgwLDJKTQNfarA1ydQAAAcg"]
[Fri Apr 17 01:19:59.529820 2026] [:error] [pid 26102:tid 26119] [client 172.213.155.173:37824] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeEaP_127aFqw6ALdngT4wAAAY4"]
[Fri Apr 17 01:20:01.730766 2026] [:error] [pid 43482:tid 43507] [client 172.213.155.173:42973] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v5.php"] [unique_id "aeEaQT9SZnuKxlHrct2drAAAANc"]
[Fri Apr 17 01:20:04.614940 2026] [:error] [pid 26102:tid 26107] [client 172.213.155.173:46763] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeEaRP127aFqw6ALdngT7wAAAYI"]
[Fri Apr 17 01:20:08.743221 2026] [:error] [pid 43387:tid 43470] [client 172.213.155.173:37850] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeEaSCBNsONqHxWTakU7sgAAAJE"]
[Fri Apr 17 01:20:21.298069 2026] [:error] [pid 4086:tid 4097] [client 172.213.155.173:8488] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aeEaVVlz7gxl_exM0FpGPAAAAUk"]
[Fri Apr 17 01:20:29.378982 2026] [:error] [pid 4086:tid 4106] [client 172.213.155.173:25182] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aeEaXVlz7gxl_exM0FpGTAAAAVI"]
[Fri Apr 17 01:20:31.272704 2026] [:error] [pid 43387:tid 43460] [client 172.213.155.173:54844] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aeEaXyBNsONqHxWTakU77QAAAIk"]
[Fri Apr 17 01:20:32.481249 2026] [:error] [pid 43385:tid 43396] [client 172.213.155.173:33883] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aeEaYMnIxkJaUI8KNs4UEgAAAAc"]
[Fri Apr 17 01:20:34.350856 2026] [:error] [pid 43385:tid 43411] [client 172.213.155.173:8343] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeEaYsnIxkJaUI8KNs4UJgAAABU"]
[Fri Apr 17 01:20:35.805348 2026] [:error] [pid 43482:tid 43491] [client 172.213.155.173:38600] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeEaYz9SZnuKxlHrct2eZAAAAMc"]
[Fri Apr 17 01:20:36.516478 2026] [:error] [pid 43386:tid 43427] [client 172.213.155.173:38640] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeEaZO91GAVgUfhPVDG_TQAAAEc"]
[Fri Apr 17 01:20:37.719024 2026] [:error] [pid 26102:tid 26114] [client 172.213.155.173:35954] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeEaZf127aFqw6ALdngUQQAAAYk"]
[Fri Apr 17 01:21:54.091843 2026] [proxy_fcgi:error] [pid 43385:tid 43399] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:56.325619 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:56.577250 2026] [proxy_fcgi:error] [pid 43385:tid 43390] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:56.841522 2026] [proxy_fcgi:error] [pid 43385:tid 43401] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:57.083056 2026] [proxy_fcgi:error] [pid 43385:tid 43398] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:57.338141 2026] [proxy_fcgi:error] [pid 43385:tid 43406] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:57.600170 2026] [proxy_fcgi:error] [pid 43385:tid 43404] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:59.077731 2026] [proxy_fcgi:error] [pid 43385:tid 43408] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:59.319485 2026] [proxy_fcgi:error] [pid 43385:tid 43396] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:59.569109 2026] [proxy_fcgi:error] [pid 43385:tid 43392] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:21:59.828364 2026] [proxy_fcgi:error] [pid 43385:tid 43407] [client 172.213.155.173:41974] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:22:00.068356 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:41974] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeEauMnIxkJaUI8KNs4W4gAAABc"]
[Fri Apr 17 01:22:07.516531 2026] [:error] [pid 3245:tid 3263] [client 172.213.155.173:28200] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeEav6ESOMTHVLs-uFDVOQAAAQE"]
[Fri Apr 17 01:22:11.784773 2026] [:error] [pid 43387:tid 43467] [client 172.213.155.173:38319] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeEawyBNsONqHxWTakU8jgAAAI4"]
[Fri Apr 17 01:22:12.754284 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:28181] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ga.php"] [unique_id "aeEaxMnIxkJaUI8KNs4XQQAAABc"]
[Fri Apr 17 01:22:14.987199 2026] [:error] [pid 43387:tid 43473] [client 172.213.155.173:44735] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeEaxiBNsONqHxWTakU8lAAAAJQ"]
[Fri Apr 17 01:22:16.738210 2026] [:error] [pid 4086:tid 4095] [client 172.213.155.173:17384] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeEayFlz7gxl_exM0FpHHAAAAUc"]
[Fri Apr 17 01:22:17.523155 2026] [:error] [pid 4086:tid 4104] [client 172.213.155.173:32893] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeEayVlz7gxl_exM0FpHIAAAAVA"]
[Fri Apr 17 01:22:18.290422 2026] [:error] [pid 11854:tid 11876] [client 172.213.155.173:17365] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "aeEaytxJCSIaqP1XSdaVPgAAAlM"]
[Fri Apr 17 01:22:19.202278 2026] [:error] [pid 43386:tid 43420] [client 172.213.155.173:56468] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "aeEay-91GAVgUfhPVDHBHwAAAEA"]
[Fri Apr 17 01:22:20.009193 2026] [:error] [pid 43387:tid 43453] [client 172.213.155.173:25626] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "aeEazCBNsONqHxWTakU8pwAAAIM"]
[Fri Apr 17 01:22:22.198378 2026] [:error] [pid 43482:tid 43504] [client 172.213.155.173:8277] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "aeEazj9SZnuKxlHrct2fgQAAANQ"]
[Fri Apr 17 01:22:23.739903 2026] [:error] [pid 43386:tid 43439] [client 172.213.155.173:56466] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1100.php"] [unique_id "aeEaz-91GAVgUfhPVDHBLAAAAFM"]
[Fri Apr 17 01:22:25.449925 2026] [:error] [pid 43482:tid 43488] [client 172.213.155.173:9121] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeEa0T9SZnuKxlHrct2fiwAAAMQ"]
[Fri Apr 17 01:22:26.757912 2026] [:error] [pid 26480:tid 26482] [client 172.213.155.173:8733] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeEa0gwLDJKTQNfarA11YwAAAcA"]
[Fri Apr 17 01:22:27.954891 2026] [:error] [pid 11854:tid 11873] [client 172.213.155.173:64597] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeEa09xJCSIaqP1XSdaVaQAAAlA"]
[Fri Apr 17 01:22:28.671740 2026] [:error] [pid 26480:tid 26494] [client 172.213.155.173:32843] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeEa1AwLDJKTQNfarA11cAAAAcw"]
[Fri Apr 17 01:22:29.424506 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:44703] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeEa1cnIxkJaUI8KNs4XqQAAABc"]
[Fri Apr 17 01:22:30.229224 2026] [:error] [pid 11854:tid 11880] [client 172.213.155.173:64907] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeEa1txJCSIaqP1XSdaVbwAAAlc"]
[Fri Apr 17 01:22:31.186354 2026] [:error] [pid 43385:tid 43397] [client 172.213.155.173:25637] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeEa18nIxkJaUI8KNs4XuAAAAAg"]
[Fri Apr 17 01:22:31.814737 2026] [:error] [pid 11854:tid 11860] [client 172.213.155.173:44729] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeEa19xJCSIaqP1XSdaVggAAAkM"]
[Fri Apr 17 01:22:32.933881 2026] [:error] [pid 3245:tid 3284] [client 172.213.155.173:9107] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeEa2KESOMTHVLs-uFDVcgAAARY"]
[Fri Apr 17 01:22:33.776131 2026] [:error] [pid 11692:tid 11712] [client 172.213.155.173:17403] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeEa2c1AYuhm4BZwKNoWFAAAAg8"]
[Fri Apr 17 01:22:34.385640 2026] [:error] [pid 43387:tid 43462] [client 172.213.155.173:48958] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeEa2iBNsONqHxWTakU8uQAAAIs"]
[Fri Apr 17 01:22:35.522399 2026] [:error] [pid 43385:tid 43393] [client 172.213.155.173:44695] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeEa28nIxkJaUI8KNs4X1QAAAAQ"]
[Fri Apr 17 01:22:36.186356 2026] [:error] [pid 43386:tid 43438] [client 172.213.155.173:9129] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "aeEa3O91GAVgUfhPVDHBTAAAAFI"]
[Fri Apr 17 01:22:36.800860 2026] [:error] [pid 11854:tid 11869] [client 172.213.155.173:54313] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "aeEa3NxJCSIaqP1XSdaVlgAAAkw"]
[Fri Apr 17 01:22:37.450815 2026] [:error] [pid 43386:tid 43432] [client 172.213.155.173:54284] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "aeEa3e91GAVgUfhPVDHBWwAAAEw"]
[Fri Apr 17 01:22:38.099947 2026] [:error] [pid 43386:tid 43435] [client 172.213.155.173:64946] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-lo.php"] [unique_id "aeEa3u91GAVgUfhPVDHBZwAAAE8"]
[Fri Apr 17 01:22:38.900871 2026] [:error] [pid 43386:tid 43442] [client 172.213.155.173:8719] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeEa3u91GAVgUfhPVDHBcQAAAFU"]
[Fri Apr 17 01:22:39.675039 2026] [:error] [pid 43482:tid 43496] [client 172.213.155.173:8766] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeEa3z9SZnuKxlHrct2foAAAAMw"]
[Fri Apr 17 01:22:40.350379 2026] [:error] [pid 26480:tid 26493] [client 172.213.155.173:64595] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeEa4AwLDJKTQNfarA11tAAAAcs"]
[Fri Apr 17 01:22:41.237445 2026] [:error] [pid 11692:tid 11706] [client 172.213.155.173:25663] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeEa4c1AYuhm4BZwKNoWKQAAAgk"]
[Fri Apr 17 01:22:42.062334 2026] [:error] [pid 43386:tid 43420] [client 172.213.155.173:8712] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "aeEa4u91GAVgUfhPVDHBhgAAAEA"]
[Fri Apr 17 01:22:42.809943 2026] [:error] [pid 43482:tid 43489] [client 172.213.155.173:25633] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "aeEa4j9SZnuKxlHrct2fqgAAAMU"]
[Fri Apr 17 01:22:43.923621 2026] [:error] [pid 26102:tid 26129] [client 172.213.155.173:8704] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "aeEa4_127aFqw6ALdngVVQAAAZg"]
[Fri Apr 17 01:22:45.837149 2026] [:error] [pid 43386:tid 43433] [client 172.213.155.173:49462] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ipv6.php"] [unique_id "aeEa5e91GAVgUfhPVDHBlwAAAE0"]
[Fri Apr 17 01:22:46.933576 2026] [:error] [pid 43385:tid 43408] [client 172.213.155.173:25650] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEa5snIxkJaUI8KNs4YAQAAABM"]
[Fri Apr 17 01:22:49.165141 2026] [:error] [pid 43386:tid 43426] [client 172.213.155.173:48928] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEa6e91GAVgUfhPVDHBqAAAAEY"]
[Fri Apr 17 01:22:51.293475 2026] [:error] [pid 11854:tid 11871] [client 172.213.155.173:44715] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEa69xJCSIaqP1XSdaVxwAAAk4"]
[Fri Apr 17 01:22:55.966888 2026] [:error] [pid 26480:tid 26504] [client 172.213.155.173:44675] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeEa7wwLDJKTQNfarA12JwAAAdY"]
[Fri Apr 17 01:22:58.857523 2026] [:error] [pid 11692:tid 11711] [client 172.213.155.173:8706] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeEa8s1AYuhm4BZwKNoWbwAAAg4"]
[Fri Apr 17 01:23:02.126156 2026] [proxy_fcgi:error] [pid 11692:tid 11701] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:02.400498 2026] [proxy_fcgi:error] [pid 11692:tid 11700] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:02.694016 2026] [proxy_fcgi:error] [pid 11692:tid 11713] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:02.982663 2026] [proxy_fcgi:error] [pid 11692:tid 11714] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:03.259296 2026] [proxy_fcgi:error] [pid 11692:tid 11716] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:03.561974 2026] [proxy_fcgi:error] [pid 11692:tid 11701] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:03.846132 2026] [proxy_fcgi:error] [pid 11692:tid 11700] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:04.122659 2026] [proxy_fcgi:error] [pid 11692:tid 11697] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:04.414579 2026] [proxy_fcgi:error] [pid 11692:tid 11710] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:04.692560 2026] [proxy_fcgi:error] [pid 11692:tid 11715] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:04.968658 2026] [proxy_fcgi:error] [pid 11692:tid 11716] [client 172.213.155.173:25602] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:23:05.258250 2026] [:error] [pid 11692:tid 11701] [client 172.213.155.173:25602] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeEa-c1AYuhm4BZwKNoWgwAAAgQ"]
[Fri Apr 17 01:23:10.454724 2026] [:error] [pid 4086:tid 4103] [client 172.213.155.173:48947] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeEa_llz7gxl_exM0FpHcgAAAU8"]
[Fri Apr 17 01:23:12.281134 2026] [:error] [pid 43386:tid 43434] [client 172.213.155.173:27475] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeEbAO91GAVgUfhPVDHCVwAAAE4"]
[Fri Apr 17 01:23:14.068805 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:8734] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeEbAsnIxkJaUI8KNs4YwQAAABc"]
[Fri Apr 17 01:23:15.617984 2026] [:error] [pid 26480:tid 26505] [client 172.213.155.173:42195] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeEbAwwLDJKTQNfarA12jAAAAdc"]
[Fri Apr 17 01:23:16.929591 2026] [:error] [pid 43386:tid 43424] [client 172.213.155.173:42184] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeEbBO91GAVgUfhPVDHCawAAAEQ"]
[Fri Apr 17 01:23:18.406782 2026] [:error] [pid 43385:tid 43402] [client 172.213.155.173:48950] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeEbBsnIxkJaUI8KNs4Y7QAAAA0"]
[Fri Apr 17 01:23:20.733762 2026] [:error] [pid 26480:tid 26503] [client 172.213.155.173:41543] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeEbCAwLDJKTQNfarA12oQAAAdU"]
[Fri Apr 17 01:23:22.467355 2026] [:error] [pid 26480:tid 26494] [client 172.213.155.173:8286] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEbCgwLDJKTQNfarA12rwAAAcw"]
[Fri Apr 17 01:23:28.906188 2026] [:error] [pid 43385:tid 43413] [client 172.213.155.173:26639] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEbEMnIxkJaUI8KNs4ZVwAAABc"]
[Fri Apr 17 01:23:32.552035 2026] [:error] [pid 26480:tid 26499] [client 172.213.155.173:41784] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEbFAwLDJKTQNfarA122wAAAdE"]
[Fri Apr 17 01:23:33.991290 2026] [:error] [pid 43385:tid 43405] [client 172.213.155.173:39758] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEbFcnIxkJaUI8KNs4ZkgAAABA"]
[Fri Apr 17 01:23:35.318312 2026] [:error] [pid 43482:tid 43499] [client 172.213.155.173:59790] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeEbFz9SZnuKxlHrct2gGQAAAM8"]
[Fri Apr 17 01:23:36.702209 2026] [:error] [pid 43386:tid 43438] [client 172.213.155.173:33319] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeEbGO91GAVgUfhPVDHCqgAAAFI"]
[Fri Apr 17 01:23:38.287768 2026] [:error] [pid 3245:tid 3272] [client 172.213.155.173:59797] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeEbGqESOMTHVLs-uFDV0gAAAQo"]
[Fri Apr 17 01:23:39.514717 2026] [:error] [pid 43482:tid 43500] [client 172.213.155.173:8653] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeEbGz9SZnuKxlHrct2gKAAAANA"]
[Fri Apr 17 01:23:40.490296 2026] [:error] [pid 43482:tid 43484] [client 172.213.155.173:8653] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeEbHD9SZnuKxlHrct2gLAAAAMA"]
[Fri Apr 17 01:23:41.066415 2026] [:error] [pid 43385:tid 43415] [client 172.213.155.173:59790] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeEbHcnIxkJaUI8KNs4ZtwAAABg"]
[Fri Apr 17 01:23:41.705903 2026] [:error] [pid 11692:tid 11710] [client 172.213.155.173:59780] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeEbHc1AYuhm4BZwKNoW7wAAAg0"]
[Fri Apr 17 01:23:42.281186 2026] [:error] [pid 11692:tid 11716] [client 172.213.155.173:36995] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeEbHs1AYuhm4BZwKNoW_QAAAhM"]
[Fri Apr 17 01:23:43.104327 2026] [:error] [pid 43385:tid 43403] [client 172.213.155.173:46234] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeEbH8nIxkJaUI8KNs4ZuwAAAA4"]
[Fri Apr 17 01:23:43.734705 2026] [:error] [pid 11692:tid 11716] [client 172.213.155.173:59800] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeEbH81AYuhm4BZwKNoXCQAAAhM"]
[Fri Apr 17 01:23:44.854873 2026] [:error] [pid 11854:tid 11868] [client 172.213.155.173:41789] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeEbINxJCSIaqP1XSdaWXwAAAks"]
[Fri Apr 17 01:23:47.702450 2026] [:error] [pid 26102:tid 26120] [client 172.213.155.173:49750] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeEbI_127aFqw6ALdngVpwAAAY8"]
[Fri Apr 17 01:23:49.155826 2026] [:error] [pid 43385:tid 43402] [client 172.213.155.173:36393] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeEbJcnIxkJaUI8KNs4Z6gAAAA0"]
[Fri Apr 17 01:23:50.377611 2026] [:error] [pid 11692:tid 11702] [client 172.213.155.173:8286] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeEbJs1AYuhm4BZwKNoXHwAAAgU"]
[Fri Apr 17 01:23:51.020840 2026] [:error] [pid 43386:tid 43436] [client 172.213.155.173:37007] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeEbJ-91GAVgUfhPVDHC6QAAAFA"]
[Fri Apr 17 01:23:51.741138 2026] [:error] [pid 43385:tid 43404] [client 172.213.155.173:59819] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeEbJ8nIxkJaUI8KNs4Z_AAAAA8"]
[Fri Apr 17 01:23:52.617898 2026] [:error] [pid 43385:tid 43392] [client 172.213.155.173:26568] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeEbKMnIxkJaUI8KNs4aAQAAAAM"]
[Fri Apr 17 01:23:53.478133 2026] [:error] [pid 43385:tid 43395] [client 172.213.155.173:26577] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeEbKcnIxkJaUI8KNs4aAwAAAAY"]
[Fri Apr 17 01:23:54.391519 2026] [:error] [pid 26480:tid 26487] [client 172.213.155.173:8700] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeEbKgwLDJKTQNfarA13HAAAAcU"]
[Fri Apr 17 01:23:55.341268 2026] [:error] [pid 43386:tid 43439] [client 172.213.155.173:59814] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeEbK-91GAVgUfhPVDHC8AAAAFM"]
[Fri Apr 17 01:23:56.352104 2026] [:error] [pid 43386:tid 43421] [client 172.213.155.173:49787] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeEbLO91GAVgUfhPVDHC-AAAAEE"]
[Fri Apr 17 01:23:57.144194 2026] [:error] [pid 43386:tid 43424] [client 172.213.155.173:49766] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeEbLe91GAVgUfhPVDHDAAAAAEQ"]
[Fri Apr 17 01:23:58.003644 2026] [:error] [pid 43386:tid 43439] [client 172.213.155.173:26599] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeEbLu91GAVgUfhPVDHDBwAAAFM"]
[Fri Apr 17 01:23:59.503295 2026] [:error] [pid 11692:tid 11702] [client 172.213.155.173:46211] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeEbL81AYuhm4BZwKNoXUgAAAgU"]
[Fri Apr 17 01:24:00.779435 2026] [:error] [pid 43386:tid 43420] [client 172.213.155.173:8692] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeEbMO91GAVgUfhPVDHDFAAAAEA"]
[Fri Apr 17 01:24:01.789093 2026] [:error] [pid 26102:tid 26129] [client 172.213.155.173:49768] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeEbMf127aFqw6ALdngVsQAAAZg"]
[Fri Apr 17 01:24:02.485563 2026] [:error] [pid 11854:tid 11863] [client 172.213.155.173:59786] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeEbMtxJCSIaqP1XSdaWiQAAAkY"]
[Fri Apr 17 01:24:03.311544 2026] [:error] [pid 4086:tid 4089] [client 172.213.155.173:39746] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeEbM1lz7gxl_exM0FpHsAAAAUE"]
[Fri Apr 17 01:24:05.860499 2026] [proxy_fcgi:error] [pid 11692:tid 11718] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:06.101622 2026] [proxy_fcgi:error] [pid 11692:tid 11716] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:06.342777 2026] [proxy_fcgi:error] [pid 11692:tid 11697] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:06.587756 2026] [proxy_fcgi:error] [pid 11692:tid 11714] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:06.828829 2026] [proxy_fcgi:error] [pid 11692:tid 11711] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:07.078519 2026] [proxy_fcgi:error] [pid 11692:tid 11715] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:07.335658 2026] [proxy_fcgi:error] [pid 11692:tid 11702] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:07.790404 2026] [proxy_fcgi:error] [pid 11692:tid 11707] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:08.728273 2026] [proxy_fcgi:error] [pid 11692:tid 11710] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:08.974678 2026] [proxy_fcgi:error] [pid 11692:tid 11713] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:09.215856 2026] [proxy_fcgi:error] [pid 11692:tid 11708] [client 172.213.155.173:17290] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:24:09.456495 2026] [:error] [pid 11692:tid 11701] [client 172.213.155.173:17290] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "aeEbOc1AYuhm4BZwKNoXbwAAAgQ"]
[Fri Apr 17 01:24:11.844309 2026] [:error] [pid 43386:tid 43434] [client 172.213.155.173:39780] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "aeEbO-91GAVgUfhPVDHDRwAAAE4"]
[Fri Apr 17 01:24:16.107331 2026] [:error] [pid 43386:tid 43443] [client 172.213.155.173:8674] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "aeEbQO91GAVgUfhPVDHDegAAAFY"]
[Fri Apr 17 01:24:27.626690 2026] [:error] [pid 43386:tid 43423] [client 172.213.155.173:36397] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeEbS-91GAVgUfhPVDHDxAAAAEM"]
[Fri Apr 17 01:24:30.557305 2026] [:error] [pid 11854:tid 11875] [client 172.213.155.173:33311] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeEbTtxJCSIaqP1XSdaWsgAAAlI"]
[Fri Apr 17 01:24:32.590606 2026] [:error] [pid 3245:tid 3276] [client 172.213.155.173:41758] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeEbUKESOMTHVLs-uFDV_gAAAQ4"]
[Fri Apr 17 01:24:34.244775 2026] [:error] [pid 26102:tid 26128] [client 172.213.155.173:39793] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeEbUv127aFqw6ALdngV3wAAAZc"]
[Fri Apr 17 01:24:35.082169 2026] [:error] [pid 43387:tid 43453] [client 172.213.155.173:8675] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeEbUyBNsONqHxWTakU9FQAAAIM"]
[Fri Apr 17 01:24:36.026435 2026] [:error] [pid 43385:tid 43400] [client 172.213.155.173:8645] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeEbVMnIxkJaUI8KNs4bUQAAAAs"]
[Fri Apr 17 01:24:36.551810 2026] [:error] [pid 43386:tid 43424] [client 172.213.155.173:8675] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeEbVO91GAVgUfhPVDHD7wAAAEQ"]
[Fri Apr 17 01:24:37.099409 2026] [:error] [pid 43385:tid 43408] [client 172.213.155.173:8680] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/curl.php"] [unique_id "aeEbVcnIxkJaUI8KNs4bYwAAABM"]
[Fri Apr 17 01:24:38.314965 2026] [:error] [pid 26480:tid 26484] [client 172.213.155.173:36358] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeEbVgwLDJKTQNfarA13oAAAAcI"]
[Fri Apr 17 01:24:39.424001 2026] [:error] [pid 11854:tid 11864] [client 172.213.155.173:23874] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeEbV9xJCSIaqP1XSdaWzAAAAkc"]
[Fri Apr 17 01:24:39.984902 2026] [:error] [pid 43385:tid 43397] [client 172.213.155.173:59832] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeEbV8nIxkJaUI8KNs4bdQAAAAg"]
[Fri Apr 17 01:24:40.664457 2026] [:error] [pid 43385:tid 43398] [client 172.213.155.173:36369] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aeEbWMnIxkJaUI8KNs4bgQAAAAk"]
[Fri Apr 17 01:24:41.462152 2026] [:error] [pid 11854:tid 11878] [client 172.213.155.173:8696] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeEbWdxJCSIaqP1XSdaW0gAAAlU"]
[Fri Apr 17 01:24:42.170842 2026] [:error] [pid 3245:tid 3263] [client 172.213.155.173:8693] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeEbWqESOMTHVLs-uFDWFAAAAQE"]
[Fri Apr 17 01:24:42.984613 2026] [:error] [pid 11854:tid 11872] [client 172.213.155.173:39776] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeEbWtxJCSIaqP1XSdaW2gAAAk8"]
[Fri Apr 17 01:24:43.861608 2026] [:error] [pid 11692:tid 11716] [client 172.213.155.173:33303] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeEbW81AYuhm4BZwKNoX1gAAAhM"]
[Fri Apr 17 01:24:45.053634 2026] [:error] [pid 3245:tid 3266] [client 172.213.155.173:49733] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeEbXaESOMTHVLs-uFDWGQAAAQQ"]
[Fri Apr 17 01:24:45.770186 2026] [:error] [pid 11854:tid 11880] [client 172.213.155.173:26580] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeEbXdxJCSIaqP1XSdaW7QAAAlc"]
[Fri Apr 17 01:24:50.829145 2026] [:error] [pid 26480:tid 26488] [client 172.213.155.173:59801] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeEbYgwLDJKTQNfarA13rwAAAcY"]
[Fri Apr 17 01:24:59.016581 2026] [:error] [pid 11692:tid 11699] [client 172.213.155.173:46215] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeEba81AYuhm4BZwKNoYHAAAAgI"]
[Fri Apr 17 01:25:02.207644 2026] [:error] [pid 11692:tid 11708] [client 172.213.155.173:33297] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeEbbs1AYuhm4BZwKNoYJgAAAgs"]
[Fri Apr 17 01:25:04.415674 2026] [:error] [pid 43387:tid 43471] [client 172.213.155.173:41786] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeEbcCBNsONqHxWTakU9MwAAAJI"]
[Fri Apr 17 01:25:07.530016 2026] [:error] [pid 26102:tid 26108] [client 172.213.155.173:37016] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeEbc_127aFqw6ALdngWTgAAAYM"]
[Fri Apr 17 01:25:09.794144 2026] [proxy_fcgi:error] [pid 26102:tid 26126] [client 172.213.155.173:33337] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:25:10.064782 2026] [proxy_fcgi:error] [pid 26102:tid 26123] [client 172.213.155.173:33337] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 01:25:10.352091 2026] [proxy_fcgi:error] [pid 26102:tid 26111] [client 172.213.155.173:33337] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:12.129086 2026] [proxy_fcgi:error] [pid 26480:tid 26498] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:12.394942 2026] [proxy_fcgi:error] [pid 26480:tid 26484] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:13.900806 2026] [proxy_fcgi:error] [pid 26480:tid 26484] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:14.214516 2026] [proxy_fcgi:error] [pid 26480:tid 26490] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:14.862282 2026] [proxy_fcgi:error] [pid 26480:tid 26491] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:15.137679 2026] [proxy_fcgi:error] [pid 26480:tid 26505] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:16.749692 2026] [proxy_fcgi:error] [pid 26480:tid 26505] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:17.402692 2026] [proxy_fcgi:error] [pid 26480:tid 26483] [client 20.215.249.39:58504] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:15:17.675001 2026] [:error] [pid 26480:tid 26506] [client 20.215.249.39:58504] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "aeE1RQwLDJKTQNfarA2aNAAAAdg"]
[Fri Apr 17 03:15:18.617702 2026] [:error] [pid 43387:tid 43449] [client 20.215.249.39:62788] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "aeE1RiBNsONqHxWTakVnmQAAAIE"]
[Fri Apr 17 03:15:19.306413 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:62702] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "aeE1RyBNsONqHxWTakVnnAAAAI8"]
[Fri Apr 17 03:15:20.232723 2026] [:error] [pid 43386:tid 43439] [client 20.215.249.39:58530] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "aeE1SO91GAVgUfhPVDH36gAAAFM"]
[Fri Apr 17 03:15:20.949282 2026] [:error] [pid 4086:tid 4088] [client 20.215.249.39:62706] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "aeE1SFlz7gxl_exM0FpUXwAAAUA"]
[Fri Apr 17 03:15:21.688822 2026] [:error] [pid 43386:tid 43438] [client 20.215.249.39:52222] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "aeE1Se91GAVgUfhPVDH37wAAAFI"]
[Fri Apr 17 03:15:22.453120 2026] [:error] [pid 26480:tid 26504] [client 20.215.249.39:62717] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "aeE1SgwLDJKTQNfarA2aOAAAAdY"]
[Fri Apr 17 03:15:23.526457 2026] [:error] [pid 26480:tid 26497] [client 20.215.249.39:62714] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "aeE1SwwLDJKTQNfarA2aOwAAAc8"]
[Fri Apr 17 03:15:24.493489 2026] [:error] [pid 43387:tid 43470] [client 20.215.249.39:52199] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "aeE1TCBNsONqHxWTakVnugAAAJE"]
[Fri Apr 17 03:15:25.361507 2026] [:error] [pid 43482:tid 43485] [client 20.215.249.39:59482] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "aeE1TT9SZnuKxlHrct3HzAAAAME"]
[Fri Apr 17 03:15:26.645023 2026] [:error] [pid 3245:tid 3283] [client 20.215.249.39:62707] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "aeE1TqESOMTHVLs-uFDiHgAAARU"]
[Fri Apr 17 03:15:27.504902 2026] [:error] [pid 3245:tid 3272] [client 20.215.249.39:62718] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "aeE1T6ESOMTHVLs-uFDiIwAAAQo"]
[Fri Apr 17 03:15:28.391000 2026] [:error] [pid 11692:tid 11706] [client 20.215.249.39:59469] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeE1UM1AYuhm4BZwKNoulwAAAgk"]
[Fri Apr 17 03:15:28.986572 2026] [:error] [pid 43386:tid 43424] [client 20.215.249.39:62710] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeE1UO91GAVgUfhPVDH4BgAAAEQ"]
[Fri Apr 17 03:15:30.375143 2026] [:error] [pid 26480:tid 26505] [client 20.215.249.39:52213] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeE1UgwLDJKTQNfarA2aQgAAAdc"]
[Fri Apr 17 03:15:31.312622 2026] [:error] [pid 11692:tid 11718] [client 20.215.249.39:59483] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aeE1U81AYuhm4BZwKNounQAAAhU"]
[Fri Apr 17 03:15:32.415886 2026] [:error] [pid 26480:tid 26506] [client 20.215.249.39:52173] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "aeE1VAwLDJKTQNfarA2aRQAAAdg"]
[Fri Apr 17 03:15:33.200993 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:62681] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "aeE1VT9SZnuKxlHrct3H1QAAAM0"]
[Fri Apr 17 03:15:35.221654 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:59478] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "aeE1Vz9SZnuKxlHrct3H2wAAANM"]
[Fri Apr 17 03:15:36.310303 2026] [:error] [pid 43386:tid 43425] [client 20.215.249.39:59430] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "aeE1WO91GAVgUfhPVDH4FgAAAEU"]
[Fri Apr 17 03:15:38.332647 2026] [:error] [pid 43387:tid 43465] [client 20.215.249.39:59427] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeE1WiBNsONqHxWTakVoBQAAAIw"]
[Fri Apr 17 03:15:39.986160 2026] [:error] [pid 26480:tid 26496] [client 20.215.249.39:59405] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeE1WwwLDJKTQNfarA2aTwAAAc4"]
[Fri Apr 17 03:15:41.942384 2026] [:error] [pid 43386:tid 43434] [client 20.215.249.39:52220] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeE1Xe91GAVgUfhPVDH4HAAAAE4"]
[Fri Apr 17 03:15:44.661327 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:59515] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeE1YD9SZnuKxlHrct3H5QAAANM"]
[Fri Apr 17 03:15:45.446144 2026] [:error] [pid 11854:tid 11877] [client 20.215.249.39:58510] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeE1YdxJCSIaqP1XSdap3AAAAlQ"]
[Fri Apr 17 03:15:47.324084 2026] [:error] [pid 43482:tid 43491] [client 20.215.249.39:62845] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeE1Yz9SZnuKxlHrct3H6gAAAMc"]
[Fri Apr 17 03:15:49.278522 2026] [:error] [pid 43387:tid 43456] [client 20.215.249.39:62846] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeE1ZSBNsONqHxWTakVoTwAAAIU"]
[Fri Apr 17 03:15:50.576785 2026] [:error] [pid 26480:tid 26491] [client 20.215.249.39:62838] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeE1ZgwLDJKTQNfarA2aYgAAAck"]
[Fri Apr 17 03:15:53.470369 2026] [:error] [pid 43387:tid 43449] [client 20.215.249.39:47886] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeE1aSBNsONqHxWTakVoXQAAAIE"]
[Fri Apr 17 03:15:55.632294 2026] [:error] [pid 3245:tid 3267] [client 20.215.249.39:58534] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeE1a6ESOMTHVLs-uFDiMwAAAQU"]
[Fri Apr 17 03:15:57.371293 2026] [:error] [pid 26102:tid 26123] [client 20.215.249.39:52002] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeE1bf127aFqw6ALdngmIQAAAZI"]
[Fri Apr 17 03:15:59.673219 2026] [:error] [pid 11854:tid 11875] [client 20.215.249.39:55366] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeE1b9xJCSIaqP1XSdap4QAAAlI"]
[Fri Apr 17 03:16:00.379484 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:58499] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeE1cCBNsONqHxWTakVoagAAAI8"]
[Fri Apr 17 03:16:01.098966 2026] [:error] [pid 43386:tid 43435] [client 20.215.249.39:58512] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeE1ce91GAVgUfhPVDH4MAAAAE8"]
[Fri Apr 17 03:16:01.637928 2026] [:error] [pid 43387:tid 43461] [client 20.215.249.39:62694] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeE1cSBNsONqHxWTakVocAAAAIo"]
[Fri Apr 17 03:16:02.393153 2026] [:error] [pid 43387:tid 43466] [client 20.215.249.39:55380] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeE1ciBNsONqHxWTakVocgAAAI0"]
[Fri Apr 17 03:16:03.094720 2026] [:error] [pid 4086:tid 4110] [client 20.215.249.39:52197] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeE1c1lz7gxl_exM0FpUZwAAAVY"]
[Fri Apr 17 03:16:03.649847 2026] [:error] [pid 43386:tid 43433] [client 20.215.249.39:59400] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeE1c-91GAVgUfhPVDH4NQAAAE0"]
[Fri Apr 17 03:16:04.237371 2026] [:error] [pid 11692:tid 11701] [client 20.215.249.39:62680] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeE1dM1AYuhm4BZwKNousQAAAgQ"]
[Fri Apr 17 03:16:04.785332 2026] [:error] [pid 43387:tid 43453] [client 20.215.249.39:62812] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeE1dCBNsONqHxWTakVoeAAAAIM"]
[Fri Apr 17 03:16:05.339007 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:62689] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeE1dSBNsONqHxWTakVofgAAAI8"]
[Fri Apr 17 03:16:06.042698 2026] [:error] [pid 43387:tid 43475] [client 20.215.249.39:59446] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeE1diBNsONqHxWTakVoggAAAJY"]
[Fri Apr 17 03:16:06.755030 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:59499] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeE1diBNsONqHxWTakVohAAAAI4"]
[Fri Apr 17 03:16:07.378532 2026] [:error] [pid 43387:tid 43458] [client 20.215.249.39:59456] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeE1dyBNsONqHxWTakVohwAAAIc"]
[Fri Apr 17 03:16:08.275208 2026] [:error] [pid 43482:tid 43491] [client 20.215.249.39:52187] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeE1eD9SZnuKxlHrct3H-AAAAMc"]
[Fri Apr 17 03:16:09.826725 2026] [:error] [pid 43482:tid 43489] [client 20.215.249.39:62832] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeE1eT9SZnuKxlHrct3H-QAAAMU"]
[Fri Apr 17 03:16:10.632284 2026] [:error] [pid 43482:tid 43504] [client 20.215.249.39:43144] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeE1ej9SZnuKxlHrct3H_wAAANQ"]
[Fri Apr 17 03:16:11.506149 2026] [:error] [pid 43387:tid 43477] [client 20.215.249.39:59510] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeE1eyBNsONqHxWTakVomgAAAJg"]
[Fri Apr 17 03:16:12.755500 2026] [:error] [pid 43385:tid 43399] [client 20.215.249.39:62840] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeE1fMnIxkJaUI8KNs46wQAAAAo"]
[Fri Apr 17 03:16:13.582644 2026] [:error] [pid 43387:tid 43448] [client 20.215.249.39:62813] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeE1fSBNsONqHxWTakVooAAAAIA"]
[Fri Apr 17 03:16:14.256698 2026] [:error] [pid 43387:tid 43454] [client 20.215.249.39:55399] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeE1fiBNsONqHxWTakVoogAAAIQ"]
[Fri Apr 17 03:16:14.950711 2026] [:error] [pid 43387:tid 43475] [client 20.215.249.39:59497] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeE1fiBNsONqHxWTakVopQAAAJY"]
[Fri Apr 17 03:16:15.541175 2026] [:error] [pid 43482:tid 43487] [client 20.215.249.39:56706] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeE1fz9SZnuKxlHrct3ICQAAAMM"]
[Fri Apr 17 03:16:16.325120 2026] [:error] [pid 43386:tid 43422] [client 20.215.249.39:59496] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeE1gO91GAVgUfhPVDH4QAAAAEI"]
[Fri Apr 17 03:16:17.214419 2026] [proxy_fcgi:error] [pid 4086:tid 4102] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:17.478004 2026] [proxy_fcgi:error] [pid 4086:tid 4109] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:17.996325 2026] [proxy_fcgi:error] [pid 4086:tid 4088] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:18.270599 2026] [proxy_fcgi:error] [pid 4086:tid 4099] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:18.610909 2026] [proxy_fcgi:error] [pid 4086:tid 4107] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:18.890865 2026] [proxy_fcgi:error] [pid 4086:tid 4113] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:19.164414 2026] [proxy_fcgi:error] [pid 4086:tid 4104] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:19.422684 2026] [proxy_fcgi:error] [pid 4086:tid 4097] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:19.680816 2026] [proxy_fcgi:error] [pid 4086:tid 4100] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:19.950701 2026] [proxy_fcgi:error] [pid 4086:tid 4112] [client 20.215.249.39:59437] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:16:20.218370 2026] [:error] [pid 4086:tid 4092] [client 20.215.249.39:59437] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeE1hFlz7gxl_exM0FpUdAAAAUQ"]
[Fri Apr 17 03:16:20.802627 2026] [:error] [pid 43385:tid 43402] [client 20.215.249.39:59459] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeE1hMnIxkJaUI8KNs46wwAAAA0"]
[Fri Apr 17 03:16:21.351076 2026] [:error] [pid 43385:tid 43405] [client 20.215.249.39:58502] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeE1hcnIxkJaUI8KNs46xQAAABA"]
[Fri Apr 17 03:16:21.905729 2026] [:error] [pid 11692:tid 11703] [client 20.215.249.39:59397] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeE1hc1AYuhm4BZwKNoutgAAAgY"]
[Fri Apr 17 03:16:22.460185 2026] [:error] [pid 11854:tid 11871] [client 20.215.249.39:59458] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeE1htxJCSIaqP1XSdap5gAAAk4"]
[Fri Apr 17 03:16:22.997040 2026] [:error] [pid 3245:tid 3278] [client 20.215.249.39:56707] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeE1hqESOMTHVLs-uFDiNwAAARA"]
[Fri Apr 17 03:16:23.591525 2026] [:error] [pid 43387:tid 43461] [client 20.215.249.39:56730] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeE1hyBNsONqHxWTakVosAAAAIo"]
[Fri Apr 17 03:16:24.114006 2026] [:error] [pid 43387:tid 43473] [client 20.215.249.39:59462] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeE1iCBNsONqHxWTakVouAAAAJQ"]
[Fri Apr 17 03:16:24.625085 2026] [:error] [pid 3245:tid 3263] [client 20.215.249.39:58549] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeE1iKESOMTHVLs-uFDiOAAAAQE"]
[Fri Apr 17 03:16:25.181097 2026] [:error] [pid 43385:tid 43392] [client 20.215.249.39:59447] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeE1icnIxkJaUI8KNs460QAAAAM"]
[Fri Apr 17 03:16:25.714928 2026] [:error] [pid 26480:tid 26505] [client 20.215.249.39:62694] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeE1iQwLDJKTQNfarA2ahQAAAdc"]
[Fri Apr 17 03:16:26.264285 2026] [:error] [pid 43482:tid 43504] [client 20.215.249.39:59455] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeE1ij9SZnuKxlHrct3IDgAAANQ"]
[Fri Apr 17 03:16:26.870905 2026] [:error] [pid 26102:tid 26115] [client 20.215.249.39:52201] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeE1iv127aFqw6ALdngmLAAAAYo"]
[Fri Apr 17 03:16:27.593947 2026] [:error] [pid 3245:tid 3268] [client 20.215.249.39:58551] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeE1i6ESOMTHVLs-uFDiPAAAAQY"]
[Fri Apr 17 03:16:28.238966 2026] [:error] [pid 43482:tid 43502] [client 20.215.249.39:52162] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeE1jD9SZnuKxlHrct3IFAAAANI"]
[Fri Apr 17 03:16:28.987329 2026] [:error] [pid 43387:tid 43456] [client 20.215.249.39:58514] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeE1jCBNsONqHxWTakVoxgAAAIU"]
[Fri Apr 17 03:16:29.507599 2026] [:error] [pid 43387:tid 43462] [client 20.215.249.39:62784] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeE1jSBNsONqHxWTakVozAAAAIs"]
[Fri Apr 17 03:16:30.031646 2026] [:error] [pid 43387:tid 43477] [client 20.215.249.39:58554] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeE1jiBNsONqHxWTakVo0QAAAJg"]
[Fri Apr 17 03:16:30.673191 2026] [:error] [pid 26480:tid 26497] [client 20.215.249.39:59466] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeE1jgwLDJKTQNfarA2ahwAAAc8"]
[Fri Apr 17 03:16:31.432442 2026] [:error] [pid 3245:tid 3262] [client 20.215.249.39:62688] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeE1j6ESOMTHVLs-uFDiPwAAAQA"]
[Fri Apr 17 03:16:32.050110 2026] [:error] [pid 3245:tid 3271] [client 20.215.249.39:52223] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeE1kKESOMTHVLs-uFDiQwAAAQk"]
[Fri Apr 17 03:16:32.616672 2026] [:error] [pid 43385:tid 43402] [client 20.215.249.39:62719] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeE1kMnIxkJaUI8KNs461AAAAA0"]
[Fri Apr 17 03:16:33.290806 2026] [:error] [pid 43387:tid 43457] [client 20.215.249.39:59415] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeE1kSBNsONqHxWTakVo2QAAAIY"]
[Fri Apr 17 03:16:33.821373 2026] [:error] [pid 43387:tid 43448] [client 20.215.249.39:55365] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeE1kSBNsONqHxWTakVo3AAAAIA"]
[Fri Apr 17 03:16:34.401353 2026] [:error] [pid 26480:tid 26483] [client 20.215.249.39:59424] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeE1kgwLDJKTQNfarA2aiAAAAcE"]
[Fri Apr 17 03:16:35.017470 2026] [:error] [pid 26102:tid 26117] [client 20.215.249.39:55413] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeE1k_127aFqw6ALdngmMAAAAYw"]
[Fri Apr 17 03:16:35.686386 2026] [:error] [pid 26102:tid 26123] [client 20.215.249.39:56715] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeE1k_127aFqw6ALdngmMwAAAZI"]
[Fri Apr 17 03:16:36.295203 2026] [:error] [pid 11854:tid 11864] [client 20.215.249.39:62687] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeE1lNxJCSIaqP1XSdap6QAAAkc"]
[Fri Apr 17 03:16:37.055439 2026] [:error] [pid 43386:tid 43444] [client 20.215.249.39:62807] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE1le91GAVgUfhPVDH4ZwAAAFc"]
[Fri Apr 17 03:16:38.009660 2026] [:error] [pid 43385:tid 43403] [client 20.215.249.39:59449] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE1lsnIxkJaUI8KNs462QAAAA4"]
[Fri Apr 17 03:16:38.821368 2026] [:error] [pid 26480:tid 26488] [client 20.215.249.39:62804] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE1lgwLDJKTQNfarA2ajAAAAcY"]
[Fri Apr 17 03:16:39.648419 2026] [:error] [pid 3245:tid 3282] [client 20.215.249.39:56733] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE1l6ESOMTHVLs-uFDiTgAAARQ"]
[Fri Apr 17 03:16:40.572892 2026] [:error] [pid 43385:tid 43404] [client 20.215.249.39:52177] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeE1mMnIxkJaUI8KNs462gAAAA8"]
[Fri Apr 17 03:16:41.819011 2026] [:error] [pid 11854:tid 11861] [client 20.215.249.39:47897] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeE1mdxJCSIaqP1XSdap7gAAAkQ"]
[Fri Apr 17 03:16:42.865932 2026] [:error] [pid 26102:tid 26110] [client 20.215.249.39:52198] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeE1mv127aFqw6ALdngmNwAAAYU"]
[Fri Apr 17 03:16:44.994105 2026] [:error] [pid 3245:tid 3277] [client 20.215.249.39:58506] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeE1nKESOMTHVLs-uFDiVgAAAQ8"]
[Fri Apr 17 03:16:47.107431 2026] [:error] [pid 43385:tid 43395] [client 20.215.249.39:59425] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeE1n8nIxkJaUI8KNs463AAAAAY"]
[Fri Apr 17 03:16:47.738967 2026] [:error] [pid 3245:tid 3270] [client 20.215.249.39:58554] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeE1n6ESOMTHVLs-uFDiXQAAAQg"]
[Fri Apr 17 03:16:48.783833 2026] [:error] [pid 43386:tid 43443] [client 20.215.249.39:58553] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeE1oO91GAVgUfhPVDH4dwAAAFY"]
[Fri Apr 17 03:16:49.789207 2026] [:error] [pid 43386:tid 43423] [client 20.215.249.39:56741] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeE1oe91GAVgUfhPVDH4egAAAEM"]
[Fri Apr 17 03:16:50.626664 2026] [:error] [pid 43387:tid 43459] [client 20.215.249.39:62682] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeE1oiBNsONqHxWTakVo9AAAAIg"]
[Fri Apr 17 03:16:51.231457 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:52217] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeE1oyBNsONqHxWTakVo9QAAAI8"]
[Fri Apr 17 03:16:51.858221 2026] [:error] [pid 43387:tid 43472] [client 20.215.249.39:55363] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeE1oyBNsONqHxWTakVo-QAAAJM"]
[Fri Apr 17 03:16:52.446730 2026] [:error] [pid 43482:tid 43489] [client 20.215.249.39:62830] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeE1pD9SZnuKxlHrct3ILwAAAMU"]
[Fri Apr 17 03:16:53.046304 2026] [:error] [pid 26480:tid 26506] [client 20.215.249.39:59485] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeE1pQwLDJKTQNfarA2amgAAAdg"]
[Fri Apr 17 03:16:54.017134 2026] [:error] [pid 43482:tid 43495] [client 20.215.249.39:59496] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeE1pj9SZnuKxlHrct3IMQAAAMs"]
[Fri Apr 17 03:16:54.770899 2026] [:error] [pid 11854:tid 11875] [client 20.215.249.39:55371] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeE1ptxJCSIaqP1XSdap8QAAAlI"]
[Fri Apr 17 03:16:55.319567 2026] [:error] [pid 11692:tid 11702] [client 20.215.249.39:59504] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeE1p81AYuhm4BZwKNouxwAAAgU"]
[Fri Apr 17 03:16:56.053756 2026] [:error] [pid 43387:tid 43454] [client 20.215.249.39:58518] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeE1qCBNsONqHxWTakVo_gAAAIQ"]
[Fri Apr 17 03:16:56.689878 2026] [:error] [pid 43482:tid 43486] [client 20.215.249.39:62700] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeE1qD9SZnuKxlHrct3INgAAAMI"]
[Fri Apr 17 03:16:57.564705 2026] [:error] [pid 43385:tid 43389] [client 20.215.249.39:56755] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeE1qcnIxkJaUI8KNs464wAAAAA"]
[Fri Apr 17 03:16:58.248394 2026] [:error] [pid 43386:tid 43428] [client 20.215.249.39:58531] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeE1qu91GAVgUfhPVDH4gQAAAEg"]
[Fri Apr 17 03:16:58.873546 2026] [:error] [pid 43387:tid 43465] [client 20.215.249.39:62715] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeE1qiBNsONqHxWTakVpAAAAAIw"]
[Fri Apr 17 03:16:59.592815 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:62811] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeE1qz9SZnuKxlHrct3ISgAAAM0"]
[Fri Apr 17 03:17:00.118151 2026] [:error] [pid 43385:tid 43405] [client 20.215.249.39:55367] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeE1rMnIxkJaUI8KNs466AAAABA"]
[Fri Apr 17 03:17:00.722338 2026] [:error] [pid 43386:tid 43427] [client 20.215.249.39:56725] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeE1rO91GAVgUfhPVDH4gwAAAEc"]
[Fri Apr 17 03:17:01.378181 2026] [:error] [pid 43386:tid 43434] [client 20.215.249.39:56745] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeE1re91GAVgUfhPVDH4iAAAAE4"]
[Fri Apr 17 03:17:01.918155 2026] [:error] [pid 3245:tid 3269] [client 20.215.249.39:56712] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeE1raESOMTHVLs-uFDiYAAAAQc"]
[Fri Apr 17 03:17:02.680993 2026] [:error] [pid 43385:tid 43408] [client 20.215.249.39:58528] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeE1rsnIxkJaUI8KNs467QAAABM"]
[Fri Apr 17 03:17:03.433245 2026] [:error] [pid 43387:tid 43476] [client 20.215.249.39:58532] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeE1ryBNsONqHxWTakVpBQAAAJc"]
[Fri Apr 17 03:17:04.021310 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:62824] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeE1sCBNsONqHxWTakVpCQAAAI8"]
[Fri Apr 17 03:17:04.590530 2026] [:error] [pid 43386:tid 43437] [client 20.215.249.39:52050] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeE1sO91GAVgUfhPVDH4kgAAAFE"]
[Fri Apr 17 03:17:05.170866 2026] [:error] [pid 43385:tid 43389] [client 20.215.249.39:58496] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeE1scnIxkJaUI8KNs468wAAAAA"]
[Fri Apr 17 03:17:05.836588 2026] [:error] [pid 4086:tid 4113] [client 20.215.249.39:62839] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeE1sVlz7gxl_exM0FpUgwAAAVg"]
[Fri Apr 17 03:17:06.466344 2026] [:error] [pid 4086:tid 4100] [client 20.215.249.39:62669] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeE1sllz7gxl_exM0FpUhQAAAUw"]
[Fri Apr 17 03:17:07.059316 2026] [:error] [pid 43482:tid 43499] [client 20.215.249.39:56711] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeE1sz9SZnuKxlHrct3IVAAAAM8"]
[Fri Apr 17 03:17:07.858420 2026] [:error] [pid 4086:tid 4093] [client 20.215.249.39:58533] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeE1s1lz7gxl_exM0FpUiQAAAUU"]
[Fri Apr 17 03:17:08.728453 2026] [:error] [pid 43385:tid 43405] [client 20.215.249.39:52216] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeE1tMnIxkJaUI8KNs469gAAABA"]
[Fri Apr 17 03:17:10.445322 2026] [:error] [pid 4086:tid 4108] [client 20.215.249.39:62822] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeE1tllz7gxl_exM0FpUjgAAAVQ"]
[Fri Apr 17 03:17:11.500896 2026] [:error] [pid 43386:tid 43425] [client 20.215.249.39:52178] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeE1t-91GAVgUfhPVDH4ngAAAEU"]
[Fri Apr 17 03:17:12.437556 2026] [:error] [pid 43387:tid 43448] [client 20.215.249.39:55361] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeE1uCBNsONqHxWTakVpCwAAAIA"]
[Fri Apr 17 03:17:14.316259 2026] [:error] [pid 43387:tid 43473] [client 20.215.249.39:52160] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeE1uiBNsONqHxWTakVpGQAAAJQ"]
[Fri Apr 17 03:17:15.433368 2026] [:error] [pid 43387:tid 43458] [client 20.215.249.39:58552] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeE1uyBNsONqHxWTakVpHAAAAIc"]
[Fri Apr 17 03:17:16.691033 2026] [:error] [pid 43386:tid 43431] [client 20.215.249.39:55384] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeE1vO91GAVgUfhPVDH4qQAAAEs"]
[Fri Apr 17 03:17:17.792633 2026] [:error] [pid 43387:tid 43473] [client 20.215.249.39:59417] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeE1vSBNsONqHxWTakVpIwAAAJQ"]
[Fri Apr 17 03:17:19.491037 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:19.749840 2026] [proxy_fcgi:error] [pid 43387:tid 43458] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:20.190833 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:20.458174 2026] [proxy_fcgi:error] [pid 43387:tid 43448] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:20.719897 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:20.982008 2026] [proxy_fcgi:error] [pid 43387:tid 43469] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:21.248292 2026] [proxy_fcgi:error] [pid 43387:tid 43457] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:21.524924 2026] [proxy_fcgi:error] [pid 43387:tid 43477] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:21.783455 2026] [proxy_fcgi:error] [pid 43387:tid 43466] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:22.049250 2026] [proxy_fcgi:error] [pid 43387:tid 43476] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:22.308083 2026] [proxy_fcgi:error] [pid 43387:tid 43459] [client 20.215.249.39:59404] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:17:22.563312 2026] [:error] [pid 43387:tid 43470] [client 20.215.249.39:59404] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeE1wiBNsONqHxWTakVpQQAAAJE"]
[Fri Apr 17 03:17:23.173426 2026] [:error] [pid 43482:tid 43493] [client 20.215.249.39:59432] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeE1wz9SZnuKxlHrct3IZAAAAMk"]
[Fri Apr 17 03:17:23.978045 2026] [:error] [pid 26480:tid 26494] [client 20.215.249.39:62696] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeE1wwwLDJKTQNfarA2a0gAAAcw"]
[Fri Apr 17 03:17:24.989966 2026] [:error] [pid 43387:tid 43449] [client 20.215.249.39:62658] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeE1xCBNsONqHxWTakVpTgAAAIE"]
[Fri Apr 17 03:17:26.962625 2026] [:error] [pid 26480:tid 26487] [client 20.215.249.39:56705] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeE1xgwLDJKTQNfarA2a0wAAAcU"]
[Fri Apr 17 03:17:29.749445 2026] [:error] [pid 43386:tid 43426] [client 20.215.249.39:59501] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeE1ye91GAVgUfhPVDH4rwAAAEY"]
[Fri Apr 17 03:17:31.100387 2026] [:error] [pid 11692:tid 11715] [client 20.215.249.39:56709] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeE1y81AYuhm4BZwKNou1AAAAhI"]
[Fri Apr 17 03:17:32.397663 2026] [:error] [pid 43482:tid 43502] [client 20.215.249.39:56732] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeE1zD9SZnuKxlHrct3IdQAAANI"]
[Fri Apr 17 03:17:33.511681 2026] [:error] [pid 43385:tid 43402] [client 20.215.249.39:62798] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE1zcnIxkJaUI8KNs47FQAAAA0"]
[Fri Apr 17 03:17:34.365164 2026] [:error] [pid 3245:tid 3267] [client 20.215.249.39:55373] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE1zqESOMTHVLs-uFDiaQAAAQU"]
[Fri Apr 17 03:17:35.799622 2026] [:error] [pid 11692:tid 11700] [client 20.215.249.39:59442] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE1z81AYuhm4BZwKNou5QAAAgM"]
[Fri Apr 17 03:17:37.201260 2026] [:error] [pid 11692:tid 11702] [client 20.215.249.39:62679] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE10c1AYuhm4BZwKNou5wAAAgU"]
[Fri Apr 17 03:17:38.604944 2026] [:error] [pid 26480:tid 26502] [client 20.215.249.39:62659] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeE10gwLDJKTQNfarA2a4wAAAdQ"]
[Fri Apr 17 03:17:39.851106 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:59479] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeE10yBNsONqHxWTakVpVQAAAI4"]
[Fri Apr 17 03:17:42.151562 2026] [:error] [pid 43386:tid 43427] [client 20.215.249.39:55418] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeE11u91GAVgUfhPVDH40AAAAEc"]
[Fri Apr 17 03:17:43.097423 2026] [:error] [pid 43386:tid 43429] [client 20.215.249.39:42647] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeE11-91GAVgUfhPVDH41wAAAEk"]
[Fri Apr 17 03:17:43.941933 2026] [:error] [pid 43387:tid 43469] [client 20.215.249.39:59502] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeE11yBNsONqHxWTakVpVwAAAJA"]
[Fri Apr 17 03:17:45.364480 2026] [:error] [pid 43386:tid 43428] [client 20.215.249.39:56713] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeE12e91GAVgUfhPVDH42wAAAEg"]
[Fri Apr 17 03:17:46.814593 2026] [:error] [pid 43386:tid 43443] [client 20.215.249.39:59412] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeE12u91GAVgUfhPVDH44AAAAFY"]
[Fri Apr 17 03:17:47.709470 2026] [:error] [pid 43386:tid 43432] [client 20.215.249.39:56763] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeE12-91GAVgUfhPVDH45AAAAEw"]
[Fri Apr 17 03:17:49.872361 2026] [:error] [pid 43385:tid 43411] [client 20.215.249.39:52203] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aeE13cnIxkJaUI8KNs47KgAAABU"]
[Fri Apr 17 03:17:51.734891 2026] [:error] [pid 43385:tid 43393] [client 20.215.249.39:59440] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aeE138nIxkJaUI8KNs47LQAAAAQ"]
[Fri Apr 17 03:17:53.892453 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:52214] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aeE14SBNsONqHxWTakVpYAAAAI8"]
[Fri Apr 17 03:17:54.792607 2026] [:error] [pid 11692:tid 11714] [client 20.215.249.39:47908] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "aeE14s1AYuhm4BZwKNou7wAAAhE"]
[Fri Apr 17 03:17:55.758664 2026] [:error] [pid 43386:tid 43432] [client 20.215.249.39:52194] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeE14-91GAVgUfhPVDH48QAAAEw"]
[Fri Apr 17 03:17:56.908211 2026] [:error] [pid 4086:tid 4107] [client 20.215.249.39:59454] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeE15Flz7gxl_exM0FpUngAAAVM"]
[Fri Apr 17 03:17:58.768570 2026] [:error] [pid 11692:tid 11702] [client 20.215.249.39:62697] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeE15s1AYuhm4BZwKNou8wAAAgU"]
[Fri Apr 17 03:17:59.565261 2026] [:error] [pid 11692:tid 11715] [client 20.215.249.39:59461] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "aeE1581AYuhm4BZwKNou9wAAAhI"]
[Fri Apr 17 03:18:00.392589 2026] [:error] [pid 43387:tid 43457] [client 20.215.249.39:52188] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeE16CBNsONqHxWTakVpaAAAAIY"]
[Fri Apr 17 03:18:00.918634 2026] [:error] [pid 43387:tid 43465] [client 20.215.249.39:59480] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeE16CBNsONqHxWTakVpagAAAIw"]
[Fri Apr 17 03:18:01.483075 2026] [:error] [pid 43386:tid 43426] [client 20.215.249.39:59476] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeE16e91GAVgUfhPVDH5AgAAAEY"]
[Fri Apr 17 03:18:02.100711 2026] [:error] [pid 43386:tid 43441] [client 20.215.249.39:58542] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeE16u91GAVgUfhPVDH5BgAAAFQ"]
[Fri Apr 17 03:18:02.720491 2026] [:error] [pid 43386:tid 43445] [client 20.215.249.39:58548] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeE16u91GAVgUfhPVDH5BwAAAFg"]
[Fri Apr 17 03:18:03.384453 2026] [:error] [pid 43387:tid 43475] [client 20.215.249.39:59506] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeE16yBNsONqHxWTakVpcAAAAJY"]
[Fri Apr 17 03:18:04.099685 2026] [:error] [pid 11692:tid 11718] [client 20.215.249.39:47903] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeE17M1AYuhm4BZwKNou_QAAAhU"]
[Fri Apr 17 03:18:04.852164 2026] [:error] [pid 43385:tid 43406] [client 20.215.249.39:58527] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeE17MnIxkJaUI8KNs47QgAAABE"]
[Fri Apr 17 03:18:05.679555 2026] [:error] [pid 43386:tid 43430] [client 20.215.249.39:42634] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeE17e91GAVgUfhPVDH5DQAAAEo"]
[Fri Apr 17 03:18:06.445207 2026] [:error] [pid 3245:tid 3270] [client 20.215.249.39:56752] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeE17qESOMTHVLs-uFDifQAAAQg"]
[Fri Apr 17 03:18:07.118594 2026] [:error] [pid 43385:tid 43395] [client 20.215.249.39:59407] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeE178nIxkJaUI8KNs47SQAAAAY"]
[Fri Apr 17 03:18:07.930621 2026] [:error] [pid 43385:tid 43399] [client 20.215.249.39:62660] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeE178nIxkJaUI8KNs47SgAAAAo"]
[Fri Apr 17 03:18:08.498947 2026] [:error] [pid 43482:tid 43502] [client 20.215.249.39:58516] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeE18D9SZnuKxlHrct3IsAAAANI"]
[Fri Apr 17 03:18:09.128514 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:55394] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeE18T9SZnuKxlHrct3IsgAAAM0"]
[Fri Apr 17 03:18:10.061092 2026] [:error] [pid 43482:tid 43492] [client 20.215.249.39:62670] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeE18j9SZnuKxlHrct3ItQAAAMg"]
[Fri Apr 17 03:18:10.637776 2026] [:error] [pid 43386:tid 43445] [client 20.215.249.39:56708] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeE18u91GAVgUfhPVDH5EwAAAFg"]
[Fri Apr 17 03:18:11.290694 2026] [:error] [pid 43385:tid 43405] [client 20.215.249.39:55374] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeE188nIxkJaUI8KNs47UQAAABA"]
[Fri Apr 17 03:18:11.898985 2026] [:error] [pid 43482:tid 43508] [client 20.215.249.39:62817] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeE18z9SZnuKxlHrct3ItgAAANg"]
[Fri Apr 17 03:18:12.577266 2026] [:error] [pid 11854:tid 11873] [client 20.215.249.39:59493] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeE19NxJCSIaqP1XSdaqDQAAAlA"]
[Fri Apr 17 03:18:13.203231 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:55414] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeE19T9SZnuKxlHrct3IuQAAANM"]
[Fri Apr 17 03:18:13.793922 2026] [:error] [pid 43482:tid 43487] [client 20.215.249.39:48181] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aeE19T9SZnuKxlHrct3IvAAAAMM"]
[Fri Apr 17 03:18:14.391860 2026] [:error] [pid 43482:tid 43498] [client 20.215.249.39:62787] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aeE19j9SZnuKxlHrct3IvgAAAM4"]
[Fri Apr 17 03:18:14.969111 2026] [:error] [pid 4086:tid 4108] [client 20.215.249.39:59489] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aeE19llz7gxl_exM0FpUpgAAAVQ"]
[Fri Apr 17 03:18:15.570854 2026] [:error] [pid 4086:tid 4106] [client 20.215.249.39:58538] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless4.php"] [unique_id "aeE191lz7gxl_exM0FpUpwAAAVI"]
[Fri Apr 17 03:18:16.613871 2026] [:error] [pid 43387:tid 43477] [client 20.215.249.39:62686] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeE1-CBNsONqHxWTakVpewAAAJg"]
[Fri Apr 17 03:18:17.161314 2026] [:error] [pid 3245:tid 3285] [client 20.215.249.39:62841] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeE1-aESOMTHVLs-uFDigwAAARc"]
[Fri Apr 17 03:18:17.754157 2026] [:error] [pid 43386:tid 43420] [client 20.215.249.39:52087] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeE1-e91GAVgUfhPVDH5GwAAAEA"]
[Fri Apr 17 03:18:18.365521 2026] [:error] [pid 43482:tid 43485] [client 20.215.249.39:56736] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeE1-j9SZnuKxlHrct3IwQAAAME"]
[Fri Apr 17 03:18:18.893083 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:52179] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aeE1-j9SZnuKxlHrct3IwwAAAM0"]
[Fri Apr 17 03:18:19.482631 2026] [:error] [pid 3245:tid 3277] [client 20.215.249.39:47900] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aeE1-6ESOMTHVLs-uFDihgAAAQ8"]
[Fri Apr 17 03:18:20.028351 2026] [:error] [pid 43387:tid 43475] [client 20.215.249.39:47873] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aeE1_CBNsONqHxWTakVpfAAAAJY"]
[Fri Apr 17 03:18:20.722106 2026] [:error] [pid 43386:tid 43428] [client 20.215.249.39:55360] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "aeE1_O91GAVgUfhPVDH5JwAAAEg"]
[Fri Apr 17 03:18:21.272386 2026] [:error] [pid 43386:tid 43423] [client 20.215.249.39:62678] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "aeE1_e91GAVgUfhPVDH5KgAAAEM"]
[Fri Apr 17 03:18:21.980003 2026] [:error] [pid 26480:tid 26495] [client 20.215.249.39:51981] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plss3.php"] [unique_id "aeE1_QwLDJKTQNfarA2bEAAAAc0"]
[Fri Apr 17 03:18:22.627672 2026] [proxy_fcgi:error] [pid 43387:tid 43462] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:22.895435 2026] [proxy_fcgi:error] [pid 43387:tid 43474] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:23.155763 2026] [proxy_fcgi:error] [pid 43387:tid 43467] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:23.690710 2026] [proxy_fcgi:error] [pid 43387:tid 43450] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:23.955768 2026] [proxy_fcgi:error] [pid 43387:tid 43469] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:24.231661 2026] [proxy_fcgi:error] [pid 43387:tid 43459] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:24.538302 2026] [proxy_fcgi:error] [pid 43387:tid 43476] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:25.334244 2026] [proxy_fcgi:error] [pid 43387:tid 43470] [client 20.215.249.39:55379] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:18:25.616318 2026] [:error] [pid 43387:tid 43458] [client 20.215.249.39:55379] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeE2ASBNsONqHxWTakVpkgAAAIc"]
[Fri Apr 17 03:18:26.271373 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:59429] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeE2AiBNsONqHxWTakVplQAAAI4"]
[Fri Apr 17 03:18:26.827882 2026] [:error] [pid 26480:tid 26487] [client 20.215.249.39:59399] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeE2AgwLDJKTQNfarA2bGAAAAcU"]
[Fri Apr 17 03:18:27.367124 2026] [:error] [pid 43387:tid 43449] [client 20.215.249.39:62790] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeE2AyBNsONqHxWTakVpmAAAAIE"]
[Fri Apr 17 03:18:28.009427 2026] [:error] [pid 4086:tid 4088] [client 20.215.249.39:42642] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeE2BFlz7gxl_exM0FpUrgAAAUA"]
[Fri Apr 17 03:18:28.817559 2026] [:error] [pid 43387:tid 43448] [client 20.215.249.39:62690] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeE2BCBNsONqHxWTakVpogAAAIA"]
[Fri Apr 17 03:18:29.608841 2026] [:error] [pid 3245:tid 3270] [client 20.215.249.39:52008] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeE2BaESOMTHVLs-uFDiiwAAAQg"]
[Fri Apr 17 03:18:30.223894 2026] [:error] [pid 43387:tid 43468] [client 20.215.249.39:48165] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeE2BiBNsONqHxWTakVppgAAAI8"]
[Fri Apr 17 03:18:30.964986 2026] [:error] [pid 43387:tid 43466] [client 20.215.249.39:62843] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeE2BiBNsONqHxWTakVprQAAAI0"]
[Fri Apr 17 03:18:31.545013 2026] [:error] [pid 43385:tid 43406] [client 20.215.249.39:52091] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeE2B8nIxkJaUI8KNs47XgAAABE"]
[Fri Apr 17 03:18:32.402888 2026] [:error] [pid 11854:tid 11876] [client 20.215.249.39:62664] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeE2CNxJCSIaqP1XSdaqFAAAAlM"]
[Fri Apr 17 03:18:33.137510 2026] [:error] [pid 43482:tid 43489] [client 20.215.249.39:55375] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeE2CT9SZnuKxlHrct3IzwAAAMU"]
[Fri Apr 17 03:18:34.196483 2026] [:error] [pid 4086:tid 4097] [client 20.215.249.39:56722] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeE2Cllz7gxl_exM0FpUsgAAAUk"]
[Fri Apr 17 03:18:34.816026 2026] [:error] [pid 4086:tid 4101] [client 20.215.249.39:47888] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeE2Cllz7gxl_exM0FpUtwAAAU0"]
[Fri Apr 17 03:18:35.512145 2026] [:error] [pid 11854:tid 11859] [client 20.215.249.39:48152] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeE2C9xJCSIaqP1XSdaqIwAAAkI"]
[Fri Apr 17 03:18:36.275643 2026] [:error] [pid 43386:tid 43439] [client 20.215.249.39:43157] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeE2DO91GAVgUfhPVDH5MwAAAFM"]
[Fri Apr 17 03:18:37.103612 2026] [:error] [pid 43387:tid 43454] [client 20.215.249.39:52176] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE2DSBNsONqHxWTakVpuwAAAIQ"]
[Fri Apr 17 03:18:38.054345 2026] [:error] [pid 11692:tid 11697] [client 20.215.249.39:52210] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE2Ds1AYuhm4BZwKNovDwAAAgA"]
[Fri Apr 17 03:18:38.747948 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:48173] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE2DiBNsONqHxWTakVpwgAAAI4"]
[Fri Apr 17 03:18:39.479968 2026] [:error] [pid 43387:tid 43473] [client 20.215.249.39:55401] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE2DyBNsONqHxWTakVpywAAAJQ"]
[Fri Apr 17 03:18:40.348643 2026] [:error] [pid 43387:tid 43453] [client 20.215.249.39:56743] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeE2ECBNsONqHxWTakVpzwAAAIM"]
[Fri Apr 17 03:18:41.078399 2026] [:error] [pid 43387:tid 43474] [client 20.215.249.39:59475] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeE2ESBNsONqHxWTakVp1wAAAJU"]
[Fri Apr 17 03:18:41.823448 2026] [:error] [pid 43387:tid 43456] [client 20.215.249.39:58522] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeE2ESBNsONqHxWTakVp3AAAAIU"]
[Fri Apr 17 03:18:42.604777 2026] [:error] [pid 43387:tid 43453] [client 20.215.249.39:52092] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeE2EiBNsONqHxWTakVp3gAAAIM"]
[Fri Apr 17 03:18:43.538695 2026] [:error] [pid 26102:tid 26105] [client 20.215.249.39:56726] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeE2E_127aFqw6ALdngmegAAAYA"]
[Fri Apr 17 03:18:44.585397 2026] [:error] [pid 11692:tid 11712] [client 20.215.249.39:47907] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeE2FM1AYuhm4BZwKNovFgAAAg8"]
[Fri Apr 17 03:18:45.461455 2026] [:error] [pid 26102:tid 26112] [client 20.215.249.39:58517] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeE2Ff127aFqw6ALdngmfQAAAYc"]
[Fri Apr 17 03:18:46.433826 2026] [:error] [pid 4086:tid 4098] [client 20.215.249.39:56747] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeE2Fllz7gxl_exM0FpUvwAAAUo"]
[Fri Apr 17 03:18:47.208508 2026] [:error] [pid 26102:tid 26114] [client 20.215.249.39:62789] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "aeE2F_127aFqw6ALdngmggAAAYk"]
[Fri Apr 17 03:18:48.173308 2026] [:error] [pid 11854:tid 11871] [client 20.215.249.39:51978] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "aeE2GNxJCSIaqP1XSdaqLQAAAk4"]
[Fri Apr 17 03:18:48.772245 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:47891] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "aeE2GCBNsONqHxWTakVp8wAAAI4"]
[Fri Apr 17 03:18:49.537043 2026] [:error] [pid 43387:tid 43474] [client 20.215.249.39:58508] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "aeE2GSBNsONqHxWTakVp-gAAAJU"]
[Fri Apr 17 03:18:50.065620 2026] [:error] [pid 43386:tid 43421] [client 20.215.249.39:55383] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "aeE2Gu91GAVgUfhPVDH5QAAAAEE"]
[Fri Apr 17 03:18:50.773190 2026] [:error] [pid 11854:tid 11859] [client 20.215.249.39:36237] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "aeE2GtxJCSIaqP1XSdaqNAAAAkI"]
[Fri Apr 17 03:18:51.574539 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:55416] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "aeE2Gz9SZnuKxlHrct3I3wAAANM"]
[Fri Apr 17 03:18:52.164924 2026] [:error] [pid 26102:tid 26110] [client 20.215.249.39:59513] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alpha.php"] [unique_id "aeE2HP127aFqw6ALdngmiAAAAYU"]
[Fri Apr 17 03:18:52.718290 2026] [:error] [pid 43482:tid 43496] [client 20.215.249.39:62677] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE2HD9SZnuKxlHrct3I4wAAAMw"]
[Fri Apr 17 03:18:53.363667 2026] [:error] [pid 26480:tid 26501] [client 20.215.249.39:56757] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE2HQwLDJKTQNfarA2bKwAAAdM"]
[Fri Apr 17 03:18:54.159408 2026] [:error] [pid 43385:tid 43401] [client 20.215.249.39:59463] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE2HsnIxkJaUI8KNs47bgAAAAw"]
[Fri Apr 17 03:18:54.680632 2026] [:error] [pid 43386:tid 43436] [client 20.215.249.39:52014] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE2Hu91GAVgUfhPVDH5SQAAAFA"]
[Fri Apr 17 03:18:55.350192 2026] [:error] [pid 11692:tid 11710] [client 20.215.249.39:59516] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "aeE2H81AYuhm4BZwKNovIgAAAg0"]
[Fri Apr 17 03:18:56.027161 2026] [:error] [pid 43482:tid 43498] [client 20.215.249.39:55397] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "aeE2ID9SZnuKxlHrct3I5AAAAM4"]
[Fri Apr 17 03:18:56.714980 2026] [:error] [pid 43385:tid 43412] [client 20.215.249.39:62842] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "aeE2IMnIxkJaUI8KNs47dAAAABY"]
[Fri Apr 17 03:18:57.469993 2026] [:error] [pid 43482:tid 43505] [client 20.215.249.39:52170] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-michan.php"] [unique_id "aeE2IT9SZnuKxlHrct3I6gAAANU"]
[Fri Apr 17 03:18:58.392023 2026] [:error] [pid 43386:tid 43420] [client 20.215.249.39:62810] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "aeE2Iu91GAVgUfhPVDH5UAAAAEA"]
[Fri Apr 17 03:18:58.975263 2026] [:error] [pid 43482:tid 43500] [client 20.215.249.39:59491] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "aeE2Ij9SZnuKxlHrct3I7gAAANA"]
[Fri Apr 17 03:18:59.579750 2026] [:error] [pid 43482:tid 43491] [client 20.215.249.39:48128] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "aeE2Iz9SZnuKxlHrct3I7wAAAMc"]
[Fri Apr 17 03:19:00.355669 2026] [:error] [pid 26480:tid 26504] [client 20.215.249.39:62711] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "aeE2JAwLDJKTQNfarA2bMgAAAdY"]
[Fri Apr 17 03:19:01.111132 2026] [:error] [pid 11692:tid 11700] [client 20.215.249.39:52015] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeE2Jc1AYuhm4BZwKNovKQAAAgM"]
[Fri Apr 17 03:19:01.784148 2026] [:error] [pid 43385:tid 43408] [client 20.215.249.39:62693] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeE2JcnIxkJaUI8KNs47dwAAABM"]
[Fri Apr 17 03:19:02.359845 2026] [:error] [pid 43385:tid 43407] [client 20.215.249.39:62834] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeE2JsnIxkJaUI8KNs47eQAAABI"]
[Fri Apr 17 03:19:02.985654 2026] [:error] [pid 43386:tid 43434] [client 20.215.249.39:59436] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeE2Ju91GAVgUfhPVDH5WQAAAE4"]
[Fri Apr 17 03:19:03.584899 2026] [:error] [pid 4086:tid 4103] [client 20.215.249.39:62791] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeE2J1lz7gxl_exM0FpUywAAAU8"]
[Fri Apr 17 03:19:04.175664 2026] [:error] [pid 26480:tid 26490] [client 20.215.249.39:56760] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeE2KAwLDJKTQNfarA2bNAAAAcg"]
[Fri Apr 17 03:19:04.919022 2026] [:error] [pid 43482:tid 43493] [client 20.215.249.39:59395] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeE2KD9SZnuKxlHrct3I9wAAAMk"]
[Fri Apr 17 03:19:05.658982 2026] [:error] [pid 26480:tid 26497] [client 20.215.249.39:59431] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeE2KQwLDJKTQNfarA2bNgAAAc8"]
[Fri Apr 17 03:19:06.885152 2026] [:error] [pid 26480:tid 26492] [client 20.215.249.39:55405] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeE2KgwLDJKTQNfarA2bOAAAAco"]
[Fri Apr 17 03:19:07.723540 2026] [:error] [pid 11854:tid 11872] [client 20.215.249.39:52202] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeE2K9xJCSIaqP1XSdaqQgAAAk8"]
[Fri Apr 17 03:19:08.402437 2026] [:error] [pid 43387:tid 43461] [client 20.215.249.39:62793] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeE2LCBNsONqHxWTakVqGQAAAIo"]
[Fri Apr 17 03:19:09.350064 2026] [:error] [pid 43386:tid 43442] [client 20.215.249.39:48150] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeE2Le91GAVgUfhPVDH5cAAAAFU"]
[Fri Apr 17 03:19:10.094988 2026] [:error] [pid 43386:tid 43430] [client 20.215.249.39:59393] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeE2Lu91GAVgUfhPVDH5dQAAAEo"]
[Fri Apr 17 03:19:10.687098 2026] [:error] [pid 43386:tid 43444] [client 20.215.249.39:52036] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeE2Lu91GAVgUfhPVDH5fAAAAFc"]
[Fri Apr 17 03:19:11.429812 2026] [:error] [pid 3245:tid 3283] [client 20.215.249.39:55392] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeE2L6ESOMTHVLs-uFDimAAAARU"]
[Fri Apr 17 03:19:12.023479 2026] [:error] [pid 26102:tid 26127] [client 20.215.249.39:62712] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeE2MP127aFqw6ALdngmnAAAAZY"]
[Fri Apr 17 03:19:12.635346 2026] [:error] [pid 11692:tid 11703] [client 20.215.249.39:56764] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeE2MM1AYuhm4BZwKNovMQAAAgY"]
[Fri Apr 17 03:19:13.300500 2026] [:error] [pid 43482:tid 43501] [client 20.215.249.39:36286] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeE2MT9SZnuKxlHrct3JCwAAANE"]
[Fri Apr 17 03:19:13.823745 2026] [:error] [pid 43386:tid 43430] [client 20.215.249.39:52027] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeE2Me91GAVgUfhPVDH5gwAAAEo"]
[Fri Apr 17 03:19:14.481140 2026] [:error] [pid 43386:tid 43443] [client 20.215.249.39:52207] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeE2Mu91GAVgUfhPVDH5hQAAAFY"]
[Fri Apr 17 03:19:15.332365 2026] [:error] [pid 43386:tid 43444] [client 20.215.249.39:40575] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeE2M-91GAVgUfhPVDH5hwAAAFc"]
[Fri Apr 17 03:19:16.032387 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:42654] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeE2ND9SZnuKxlHrct3JDgAAANM"]
[Fri Apr 17 03:19:17.297282 2026] [:error] [pid 43387:tid 43476] [client 20.215.249.39:52186] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeE2NSBNsONqHxWTakVqHAAAAJc"]
[Fri Apr 17 03:19:18.561300 2026] [:error] [pid 43385:tid 43403] [client 20.215.249.39:47909] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeE2NsnIxkJaUI8KNs47gQAAAA4"]
[Fri Apr 17 03:19:19.183649 2026] [:error] [pid 43482:tid 43485] [client 20.215.249.39:42663] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeE2Nz9SZnuKxlHrct3JEgAAAME"]
[Fri Apr 17 03:19:19.778492 2026] [:error] [pid 43482:tid 43493] [client 20.215.249.39:52089] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeE2Nz9SZnuKxlHrct3JFgAAAMk"]
[Fri Apr 17 03:19:20.562786 2026] [:error] [pid 43482:tid 43499] [client 20.215.249.39:56762] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeE2OD9SZnuKxlHrct3JGAAAAM8"]
[Fri Apr 17 03:19:21.279601 2026] [:error] [pid 43482:tid 43502] [client 20.215.249.39:52025] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeE2OT9SZnuKxlHrct3JHAAAANI"]
[Fri Apr 17 03:19:21.939586 2026] [:error] [pid 43387:tid 43471] [client 20.215.249.39:59457] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeE2OSBNsONqHxWTakVqIAAAAJI"]
[Fri Apr 17 03:19:22.608289 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:62836] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeE2Oj9SZnuKxlHrct3JHQAAAM0"]
[Fri Apr 17 03:19:23.240867 2026] [:error] [pid 43482:tid 43492] [client 20.215.249.39:55400] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeE2Oz9SZnuKxlHrct3JHwAAAMg"]
[Fri Apr 17 03:19:23.804974 2026] [:error] [pid 43385:tid 43393] [client 20.215.249.39:62835] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeE2O8nIxkJaUI8KNs47hQAAAAQ"]
[Fri Apr 17 03:19:24.694685 2026] [:error] [pid 4086:tid 4113] [client 20.215.249.39:56731] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeE2PFlz7gxl_exM0FpU1gAAAVg"]
[Fri Apr 17 03:19:25.338168 2026] [proxy_fcgi:error] [pid 11854:tid 11860] [client 20.215.249.39:42626] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:25.599403 2026] [proxy_fcgi:error] [pid 11854:tid 11863] [client 20.215.249.39:42626] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:25.864504 2026] [proxy_fcgi:error] [pid 11854:tid 11858] [client 20.215.249.39:42626] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:26.141402 2026] [proxy_fcgi:error] [pid 11854:tid 11867] [client 20.215.249.39:42626] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:26.709411 2026] [:error] [pid 11854:tid 11875] [client 20.215.249.39:42626] [client 20.215.249.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeE2PtxJCSIaqP1XSdaqSgAAAlI"]
[Fri Apr 17 03:19:27.506553 2026] [proxy_fcgi:error] [pid 26480:tid 26498] [client 20.215.249.39:52166] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:28.577435 2026] [proxy_fcgi:error] [pid 26480:tid 26496] [client 20.215.249.39:52166] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:28.836502 2026] [proxy_fcgi:error] [pid 26480:tid 26491] [client 20.215.249.39:52166] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:19:29.092309 2026] [:error] [pid 26480:tid 26500] [client 20.215.249.39:52166] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeE2QQwLDJKTQNfarA2bWgAAAdI"]
[Fri Apr 17 03:19:30.071780 2026] [:error] [pid 43482:tid 43497] [client 20.215.249.39:62708] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeE2Qj9SZnuKxlHrct3JMAAAAM0"]
[Fri Apr 17 03:19:31.014210 2026] [:error] [pid 4086:tid 4097] [client 20.215.249.39:62706] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeE2Q1lz7gxl_exM0FpU1wAAAUk"]
[Fri Apr 17 03:19:31.879802 2026] [:error] [pid 43387:tid 43465] [client 20.215.249.39:47905] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeE2QyBNsONqHxWTakVqNQAAAIw"]
[Fri Apr 17 03:19:32.685870 2026] [:error] [pid 43385:tid 43396] [client 20.215.249.39:40535] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeE2RMnIxkJaUI8KNs47iAAAAAc"]
[Fri Apr 17 03:19:33.533774 2026] [:error] [pid 11692:tid 11716] [client 20.215.249.39:62673] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeE2Rc1AYuhm4BZwKNovNwAAAhM"]
[Fri Apr 17 03:19:34.633920 2026] [:error] [pid 3245:tid 3267] [client 20.215.249.39:59448] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeE2RqESOMTHVLs-uFDinQAAAQU"]
[Fri Apr 17 03:19:37.110232 2026] [:error] [pid 43387:tid 43472] [client 20.215.249.39:48147] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeE2SSBNsONqHxWTakVqPAAAAJM"]
[Fri Apr 17 03:19:38.428888 2026] [:error] [pid 43385:tid 43399] [client 20.215.249.39:62847] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeE2SsnIxkJaUI8KNs47igAAAAo"]
[Fri Apr 17 03:19:39.761071 2026] [:error] [pid 43386:tid 43444] [client 20.215.249.39:42687] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeE2S-91GAVgUfhPVDH5jwAAAFc"]
[Fri Apr 17 03:19:41.153387 2026] [:error] [pid 43387:tid 43448] [client 20.215.249.39:52041] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeE2TSBNsONqHxWTakVqQAAAAIA"]
[Fri Apr 17 03:19:42.408782 2026] [:error] [pid 43386:tid 43435] [client 20.215.249.39:59511] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeE2Tu91GAVgUfhPVDH5mwAAAE8"]
[Fri Apr 17 03:19:44.128061 2026] [:error] [pid 43386:tid 43431] [client 20.215.249.39:55388] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE2UO91GAVgUfhPVDH5ogAAAEs"]
[Fri Apr 17 03:19:44.910862 2026] [:error] [pid 43386:tid 43427] [client 20.215.249.39:59445] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE2UO91GAVgUfhPVDH5qQAAAEc"]
[Fri Apr 17 03:19:45.814969 2026] [:error] [pid 43482:tid 43507] [client 20.215.249.39:56724] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE2UT9SZnuKxlHrct3JQAAAANc"]
[Fri Apr 17 03:19:46.716032 2026] [:error] [pid 26480:tid 26484] [client 20.215.249.39:52038] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE2UgwLDJKTQNfarA2bZwAAAcI"]
[Fri Apr 17 03:19:47.734036 2026] [:error] [pid 43385:tid 43404] [client 20.215.249.39:59500] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "aeE2U8nIxkJaUI8KNs47jAAAAA8"]
[Fri Apr 17 03:19:48.532060 2026] [:error] [pid 11854:tid 11872] [client 20.215.249.39:52016] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "aeE2VNxJCSIaqP1XSdaqVQAAAk8"]
[Fri Apr 17 03:19:49.607524 2026] [:error] [pid 26480:tid 26485] [client 20.215.249.39:56766] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "aeE2VQwLDJKTQNfarA2baQAAAcM"]
[Fri Apr 17 03:19:50.644493 2026] [:error] [pid 43386:tid 43431] [client 20.215.249.39:47921] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "aeE2Vu91GAVgUfhPVDH5tgAAAEs"]
[Fri Apr 17 03:19:51.664396 2026] [:error] [pid 3245:tid 3286] [client 20.215.249.39:62794] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeE2V6ESOMTHVLs-uFDingAAARg"]
[Fri Apr 17 03:19:52.460934 2026] [:error] [pid 43386:tid 43442] [client 20.215.249.39:52058] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeE2WO91GAVgUfhPVDH5uwAAAFU"]
[Fri Apr 17 03:19:53.311287 2026] [:error] [pid 43386:tid 43426] [client 20.215.249.39:47892] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeE2We91GAVgUfhPVDH5wQAAAEY"]
[Fri Apr 17 03:19:54.138983 2026] [:error] [pid 43386:tid 43420] [client 20.215.249.39:62797] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeE2Wu91GAVgUfhPVDH5xQAAAEA"]
[Fri Apr 17 03:19:54.740705 2026] [:error] [pid 11854:tid 11875] [client 20.215.249.39:52082] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE2WtxJCSIaqP1XSdaqWwAAAlI"]
[Fri Apr 17 03:19:55.651905 2026] [:error] [pid 26480:tid 26482] [client 20.215.249.39:47927] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE2WwwLDJKTQNfarA2bbAAAAcA"]
[Fri Apr 17 03:19:56.355199 2026] [:error] [pid 43387:tid 43473] [client 20.215.249.39:48185] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE2XCBNsONqHxWTakVqRgAAAJQ"]
[Fri Apr 17 03:19:56.987514 2026] [:error] [pid 43386:tid 43427] [client 20.215.249.39:55370] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE2XO91GAVgUfhPVDH5ywAAAEc"]
[Fri Apr 17 03:19:57.597333 2026] [:error] [pid 43387:tid 43454] [client 20.215.249.39:59403] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeE2XSBNsONqHxWTakVqRwAAAIQ"]
[Fri Apr 17 03:20:02.112052 2026] [:error] [pid 43385:tid 43412] [client 20.215.249.39:56729] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeE2YsnIxkJaUI8KNs47lwAAABY"]
[Fri Apr 17 03:20:03.287192 2026] [:error] [pid 26480:tid 26490] [client 20.215.249.39:59484] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeE2YwwLDJKTQNfarA2beAAAAcg"]
[Fri Apr 17 03:20:04.765515 2026] [:error] [pid 43385:tid 43396] [client 20.215.249.39:58500] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeE2ZMnIxkJaUI8KNs47nAAAAAc"]
[Fri Apr 17 03:20:06.394730 2026] [:error] [pid 43387:tid 43475] [client 20.215.249.39:51990] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeE2ZiBNsONqHxWTakVqTgAAAJY"]
[Fri Apr 17 03:20:08.503781 2026] [:error] [pid 43482:tid 43503] [client 20.215.249.39:42675] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeE2aD9SZnuKxlHrct3JUQAAANM"]
[Fri Apr 17 03:20:10.236138 2026] [:error] [pid 43385:tid 43412] [client 20.215.249.39:36375] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeE2asnIxkJaUI8KNs47owAAABY"]
[Fri Apr 17 03:20:12.661782 2026] [:error] [pid 26480:tid 26482] [client 20.215.249.39:62833] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeE2bAwLDJKTQNfarA2bgwAAAcA"]
[Fri Apr 17 03:20:14.056429 2026] [:error] [pid 26102:tid 26125] [client 20.215.249.39:48158] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeE2bv127aFqw6ALdngmqwAAAZQ"]
[Fri Apr 17 03:20:15.053782 2026] [:error] [pid 26102:tid 26109] [client 20.215.249.39:62829] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeE2b_127aFqw6ALdngmsgAAAYQ"]
[Fri Apr 17 03:20:16.020549 2026] [:error] [pid 26102:tid 26128] [client 20.215.249.39:55382] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeE2cP127aFqw6ALdngmuAAAAZc"]
[Fri Apr 17 03:20:17.325254 2026] [:error] [pid 43387:tid 43476] [client 20.215.249.39:56728] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeE2cSBNsONqHxWTakVqVQAAAJc"]
[Fri Apr 17 03:20:18.579362 2026] [:error] [pid 43387:tid 43458] [client 20.215.249.39:52165] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeE2ciBNsONqHxWTakVqWwAAAIc"]
[Fri Apr 17 03:20:19.421943 2026] [:error] [pid 11692:tid 11699] [client 20.215.249.39:40074] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeE2c81AYuhm4BZwKNovWwAAAgI"]
[Fri Apr 17 03:20:20.224905 2026] [:error] [pid 3245:tid 3281] [client 20.215.249.39:52200] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeE2dKESOMTHVLs-uFDirAAAARM"]
[Fri Apr 17 03:20:20.927973 2026] [:error] [pid 43385:tid 43405] [client 20.215.249.39:62803] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeE2dMnIxkJaUI8KNs47swAAABA"]
[Fri Apr 17 03:20:22.078645 2026] [:error] [pid 26102:tid 26116] [client 20.215.249.39:48135] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeE2dv127aFqw6ALdngmwAAAAYs"]
[Fri Apr 17 03:20:23.119499 2026] [:error] [pid 26480:tid 26505] [client 20.215.249.39:56749] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeE2dwwLDJKTQNfarA2bhQAAAdc"]
[Fri Apr 17 03:20:23.837059 2026] [:error] [pid 26480:tid 26497] [client 20.215.249.39:47929] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeE2dwwLDJKTQNfarA2bhwAAAc8"]
[Fri Apr 17 03:20:24.704266 2026] [:error] [pid 43387:tid 43454] [client 20.215.249.39:59423] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeE2eCBNsONqHxWTakVqZgAAAIQ"]
[Fri Apr 17 03:20:25.761694 2026] [:error] [pid 43387:tid 43467] [client 20.215.249.39:62704] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeE2eSBNsONqHxWTakVqagAAAI4"]
[Fri Apr 17 03:20:26.932026 2026] [:error] [pid 43385:tid 43400] [client 20.215.249.39:56748] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeE2esnIxkJaUI8KNs47ugAAAAs"]
[Fri Apr 17 03:20:28.397371 2026] [proxy_fcgi:error] [pid 43385:tid 43404] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:29.400456 2026] [proxy_fcgi:error] [pid 43385:tid 43389] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:29.659299 2026] [proxy_fcgi:error] [pid 43385:tid 43403] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:30.082978 2026] [proxy_fcgi:error] [pid 43385:tid 43392] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:30.343996 2026] [proxy_fcgi:error] [pid 43385:tid 43395] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:30.636575 2026] [proxy_fcgi:error] [pid 43385:tid 43399] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:30.895407 2026] [proxy_fcgi:error] [pid 43385:tid 43393] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:31.197224 2026] [proxy_fcgi:error] [pid 43385:tid 43400] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:31.457991 2026] [proxy_fcgi:error] [pid 43385:tid 43398] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:31.716897 2026] [proxy_fcgi:error] [pid 43385:tid 43407] [client 20.215.249.39:52185] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:20:32.055125 2026] [:error] [pid 43385:tid 43397] [client 20.215.249.39:52185] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeE2gMnIxkJaUI8KNs470AAAAAg"]
[Fri Apr 17 03:20:33.238196 2026] [:error] [pid 43385:tid 43413] [client 20.215.249.39:55404] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeE2gcnIxkJaUI8KNs470gAAABc"]
[Fri Apr 17 03:20:34.270533 2026] [:error] [pid 11692:tid 11701] [client 20.215.249.39:52195] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeE2gs1AYuhm4BZwKNovaQAAAgQ"]
[Fri Apr 17 03:20:35.892872 2026] [:error] [pid 43385:tid 43412] [client 20.215.249.39:59392] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "aeE2g8nIxkJaUI8KNs471gAAABY"]
[Fri Apr 17 03:20:37.040010 2026] [:error] [pid 43386:tid 43439] [client 20.215.249.39:62663] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeE2he91GAVgUfhPVDH55gAAAFM"]
[Fri Apr 17 03:20:38.014810 2026] [:error] [pid 43386:tid 43435] [client 20.215.249.39:40542] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeE2hu91GAVgUfhPVDH56QAAAE8"]
[Fri Apr 17 03:20:39.171958 2026] [:error] [pid 43387:tid 43450] [client 20.215.249.39:59471] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeE2hyBNsONqHxWTakVqiwAAAII"]
[Fri Apr 17 03:20:40.164701 2026] [:error] [pid 11854:tid 11864] [client 20.215.249.39:47920] [client 20.215.249.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeE2iNxJCSIaqP1XSdaqYgAAAkc"]
[Fri Apr 17 03:40:42.425066 2026] [:error] [pid 9263:tid 9268] [client 34.86.178.51:53338] [client 34.86.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.178.51, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeE7OhP68VyHNvj1e555qQAAAMM"]
[Fri Apr 17 03:40:42.436780 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 34.86.178.51:53338] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 03:40:45.791801 2026] [:error] [pid 9263:tid 9282] [client 34.86.178.51:53338] [client 34.86.178.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeE7PRP68VyHNvj1e555uAAAANE"]
[Fri Apr 17 03:40:47.175735 2026] [:error] [pid 9263:tid 9269] [client 34.86.178.51:49297] [client 34.86.178.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeE7PxP68VyHNvj1e555vQAAAMQ"]
[Fri Apr 17 04:02:40.988831 2026] [:error] [pid 9152:tid 9213] [client 209.38.89.62:36622] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAYJJYca8I3TNCwIfNKwAAAFc"]
[Fri Apr 17 04:02:41.523323 2026] [:error] [pid 9263:tid 9287] [client 209.38.89.62:36630] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAYRP68VyHNvj1e56NaQAAANY"]
[Fri Apr 17 04:02:41.603583 2026] [:error] [pid 9152:tid 9206] [client 209.38.89.62:36638] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAYZJYca8I3TNCwIfNLgAAAFA"]
[Fri Apr 17 04:02:41.656111 2026] [:error] [pid 9152:tid 9203] [client 209.38.89.62:36648] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAYZJYca8I3TNCwIfNLwAAAE0"]
[Fri Apr 17 04:02:41.737035 2026] [:error] [pid 9263:tid 9269] [client 209.38.89.62:36652] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAYRP68VyHNvj1e56NawAAAMQ"]
[Fri Apr 17 04:02:41.966816 2026] [:error] [pid 9152:tid 9207] [client 209.38.89.62:36654] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAYZJYca8I3TNCwIfNMQAAAFE"]
[Fri Apr 17 04:02:42.043391 2026] [:error] [pid 9263:tid 9275] [client 209.38.89.62:36656] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAYhP68VyHNvj1e56NbwAAAMo"]
[Fri Apr 17 04:02:42.151083 2026] [:error] [pid 9263:tid 9277] [client 209.38.89.62:36660] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAYhP68VyHNvj1e56NcAAAAMw"]
[Fri Apr 17 04:02:42.201400 2026] [:error] [pid 9263:tid 9279] [client 209.38.89.62:36664] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAYhP68VyHNvj1e56NcQAAAM4"]
[Fri Apr 17 04:02:42.251269 2026] [:error] [pid 9263:tid 9273] [client 209.38.89.62:36666] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAYhP68VyHNvj1e56NcgAAAMg"]
[Fri Apr 17 04:02:42.395956 2026] [:error] [pid 9153:tid 9237] [client 209.38.89.62:36678] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAYuMHGxkTZX3c45euAAAAAJM"]
[Fri Apr 17 04:02:42.570315 2026] [:error] [pid 9153:tid 9240] [client 209.38.89.62:36684] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAYuMHGxkTZX3c45euAgAAAJY"]
[Fri Apr 17 04:02:42.687503 2026] [:error] [pid 9153:tid 9234] [client 209.38.89.62:36686] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAYuMHGxkTZX3c45euAwAAAJA"]
[Fri Apr 17 05:54:53.840089 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:54.080934 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:54.320967 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:54.559868 2026] [proxy_fcgi:error] [pid 9152:tid 9208] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:54.799374 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:55.039024 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:55.282690 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:55.522377 2026] [proxy_fcgi:error] [pid 9152:tid 9202] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:55.761885 2026] [proxy_fcgi:error] [pid 9152:tid 9191] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:56.001320 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 51.107.69.154:27552] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 05:54:56.237488 2026] [:error] [pid 9152:tid 9213] [client 51.107.69.154:27552] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "aeFasJJYca8I3TNCwIcTRwAAAFc"]
[Fri Apr 17 05:54:56.756561 2026] [:error] [pid 9153:tid 9239] [client 51.107.69.154:37895] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "aeFasOMHGxkTZX3c45cEYAAAAJU"]
[Fri Apr 17 05:54:57.317760 2026] [:error] [pid 9263:tid 9288] [client 51.107.69.154:22393] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "aeFasRP68VyHNvj1e54BDQAAANc"]
[Fri Apr 17 05:54:57.833716 2026] [:error] [pid 9263:tid 9277] [client 51.107.69.154:39698] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "aeFasRP68VyHNvj1e54BDwAAAMw"]
[Fri Apr 17 05:54:58.312444 2026] [:error] [pid 51878:tid 51883] [client 51.107.69.154:31885] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFasknQhUtMbw9EsgZ0fwAAAQM"]
[Fri Apr 17 05:54:58.792651 2026] [:error] [pid 9152:tid 9209] [client 51.107.69.154:4461] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFaspJYca8I3TNCwIcTSgAAAFM"]
[Fri Apr 17 05:54:59.281735 2026] [:error] [pid 51878:tid 51885] [client 51.107.69.154:4450] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFas0nQhUtMbw9EsgZ0gAAAAQU"]
[Fri Apr 17 05:54:59.755682 2026] [:error] [pid 9263:tid 9278] [client 51.107.69.154:37840] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/block-template-utils.php"] [unique_id "aeFasxP68VyHNvj1e54BFwAAAM0"]
[Fri Apr 17 05:55:00.277630 2026] [:error] [pid 9153:tid 9240] [client 51.107.69.154:27527] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/14.php"] [unique_id "aeFatOMHGxkTZX3c45cEZgAAAJY"]
[Fri Apr 17 05:55:00.790509 2026] [:error] [pid 9263:tid 9270] [client 51.107.69.154:31930] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/14.php"] [unique_id "aeFatBP68VyHNvj1e54BHQAAAMU"]
[Fri Apr 17 05:55:01.264756 2026] [:error] [pid 9263:tid 9271] [client 51.107.69.154:31913] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/14.php"] [unique_id "aeFatRP68VyHNvj1e54BIQAAAMY"]
[Fri Apr 17 05:55:01.744041 2026] [:error] [pid 9152:tid 9193] [client 51.107.69.154:27563] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/14.php"] [unique_id "aeFatZJYca8I3TNCwIcTTgAAAEM"]
[Fri Apr 17 05:55:02.253515 2026] [:error] [pid 9152:tid 9196] [client 51.107.69.154:4432] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFatpJYca8I3TNCwIcTUAAAAEY"]
[Fri Apr 17 05:55:02.754826 2026] [:error] [pid 51878:tid 51880] [client 51.107.69.154:38700] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFatknQhUtMbw9EsgZ0hAAAAQA"]
[Fri Apr 17 05:55:03.234389 2026] [:error] [pid 9151:tid 9162] [client 51.107.69.154:31905] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFat8hTVuRPkua22vSfnQAAAAE"]
[Fri Apr 17 05:55:03.708151 2026] [:error] [pid 9151:tid 9169] [client 51.107.69.154:35524] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update_with_pics.php"] [unique_id "aeFat8hTVuRPkua22vSfngAAAAg"]
[Fri Apr 17 05:55:04.221474 2026] [:error] [pid 9151:tid 9161] [client 51.107.69.154:35564] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date-object.php"] [unique_id "aeFauMhTVuRPkua22vSfoQAAAAA"]
[Fri Apr 17 05:55:04.762020 2026] [:error] [pid 9263:tid 9283] [client 51.107.69.154:37841] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date-object.php"] [unique_id "aeFauBP68VyHNvj1e54BMQAAANI"]
[Fri Apr 17 05:55:05.274598 2026] [:error] [pid 51878:tid 51899] [client 51.107.69.154:27640] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date-object.php"] [unique_id "aeFauUnQhUtMbw9EsgZ0iAAAARM"]
[Fri Apr 17 05:55:05.755982 2026] [:error] [pid 51878:tid 51901] [client 51.107.69.154:4446] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/date-object.php"] [unique_id "aeFauUnQhUtMbw9EsgZ0igAAARU"]
[Fri Apr 17 05:55:06.267894 2026] [:error] [pid 9152:tid 9195] [client 51.107.69.154:35543] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w-1.php"] [unique_id "aeFaupJYca8I3TNCwIcTVwAAAEU"]
[Fri Apr 17 05:55:06.781741 2026] [:error] [pid 9263:tid 9278] [client 51.107.69.154:31922] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w-1.php"] [unique_id "aeFauhP68VyHNvj1e54BPwAAAM0"]
[Fri Apr 17 05:55:07.293599 2026] [:error] [pid 9263:tid 9283] [client 51.107.69.154:28307] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w-1.php"] [unique_id "aeFauxP68VyHNvj1e54BQwAAANI"]
[Fri Apr 17 05:55:07.802075 2026] [:error] [pid 9152:tid 9194] [client 51.107.69.154:35541] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w-1.php"] [unique_id "aeFau5JYca8I3TNCwIcTWwAAAEQ"]
[Fri Apr 17 05:55:08.309765 2026] [:error] [pid 9152:tid 9191] [client 51.107.69.154:38682] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "aeFavJJYca8I3TNCwIcTXgAAAEE"]
[Fri Apr 17 05:55:08.821065 2026] [:error] [pid 9152:tid 9193] [client 51.107.69.154:28322] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "aeFavJJYca8I3TNCwIcTXwAAAEM"]
[Fri Apr 17 05:55:09.296304 2026] [:error] [pid 9263:tid 9289] [client 51.107.69.154:37862] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "aeFavRP68VyHNvj1e54BSgAAANg"]
[Fri Apr 17 05:55:09.766655 2026] [:error] [pid 9153:tid 9228] [client 51.107.69.154:35087] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "aeFaveMHGxkTZX3c45cEdAAAAIo"]
[Fri Apr 17 05:55:10.276826 2026] [:error] [pid 9152:tid 9208] [client 51.107.69.154:35084] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bbh.php"] [unique_id "aeFavpJYca8I3TNCwIcTYgAAAFI"]
[Fri Apr 17 05:55:10.815044 2026] [:error] [pid 51878:tid 51893] [client 51.107.69.154:27523] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bbh.php"] [unique_id "aeFavknQhUtMbw9EsgZ0nQAAAQ0"]
[Fri Apr 17 05:55:11.324120 2026] [:error] [pid 9152:tid 9206] [client 51.107.69.154:28309] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bbh.php"] [unique_id "aeFav5JYca8I3TNCwIcTZQAAAFA"]
[Fri Apr 17 05:55:11.870088 2026] [:error] [pid 9152:tid 9212] [client 51.107.69.154:4463] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bbh.php"] [unique_id "aeFav5JYca8I3TNCwIcTZgAAAFY"]
[Fri Apr 17 05:55:12.404394 2026] [:error] [pid 51878:tid 51899] [client 51.107.69.154:28302] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gool.php"] [unique_id "aeFawEnQhUtMbw9EsgZ0nwAAARM"]
[Fri Apr 17 05:55:12.904646 2026] [:error] [pid 51878:tid 51884] [client 51.107.69.154:33896] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gool.php"] [unique_id "aeFawEnQhUtMbw9EsgZ0pAAAAQQ"]
[Fri Apr 17 05:55:13.434897 2026] [:error] [pid 9152:tid 9190] [client 51.107.69.154:31878] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gool.php"] [unique_id "aeFawZJYca8I3TNCwIcTaQAAAEA"]
[Fri Apr 17 05:55:14.024994 2026] [:error] [pid 9151:tid 9176] [client 51.107.69.154:39713] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gool.php"] [unique_id "aeFawshTVuRPkua22vSfqAAAAA8"]
[Fri Apr 17 05:55:14.504715 2026] [:error] [pid 9153:tid 9224] [client 51.107.69.154:39681] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFawuMHGxkTZX3c45cEewAAAIY"]
[Fri Apr 17 05:55:15.063992 2026] [:error] [pid 9153:tid 9223] [client 51.107.69.154:22354] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFaw-MHGxkTZX3c45cEfgAAAIU"]
[Fri Apr 17 05:55:15.585098 2026] [:error] [pid 51878:tid 51895] [client 51.107.69.154:37842] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFaw0nQhUtMbw9EsgZ0rQAAAQ8"]
[Fri Apr 17 05:55:16.077949 2026] [:error] [pid 51878:tid 51900] [client 51.107.69.154:22396] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFaxEnQhUtMbw9EsgZ0sQAAARQ"]
[Fri Apr 17 05:55:16.660096 2026] [:error] [pid 51878:tid 51898] [client 51.107.69.154:28313] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFaxEnQhUtMbw9EsgZ0tAAAARI"]
[Fri Apr 17 05:55:17.278907 2026] [:error] [pid 9152:tid 9200] [client 51.107.69.154:22362] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFaxZJYca8I3TNCwIcTcgAAAEo"]
[Fri Apr 17 05:55:17.905219 2026] [:error] [pid 51878:tid 51890] [client 51.107.69.154:22376] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFaxUnQhUtMbw9EsgZ0vAAAAQo"]
[Fri Apr 17 05:55:18.397752 2026] [:error] [pid 51878:tid 51895] [client 51.107.69.154:42020] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeFaxknQhUtMbw9EsgZ0wAAAAQ8"]
[Fri Apr 17 05:55:18.922204 2026] [:error] [pid 9263:tid 9272] [client 51.107.69.154:42018] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFaxhP68VyHNvj1e54BVwAAAMc"]
[Fri Apr 17 05:55:19.490475 2026] [:error] [pid 9153:tid 9242] [client 51.107.69.154:42014] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFax-MHGxkTZX3c45cEhgAAAJg"]
[Fri Apr 17 05:55:20.063013 2026] [:error] [pid 9263:tid 9275] [client 51.107.69.154:33827] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFayBP68VyHNvj1e54BXAAAAMo"]
[Fri Apr 17 05:55:20.604349 2026] [:error] [pid 51878:tid 51884] [client 51.107.69.154:4961] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFayEnQhUtMbw9EsgZ0yAAAAQQ"]
[Fri Apr 17 05:55:21.158651 2026] [:error] [pid 9263:tid 9269] [client 51.107.69.154:22804] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpputty.php"] [unique_id "aeFayRP68VyHNvj1e54BXgAAAMQ"]
[Fri Apr 17 05:55:21.711814 2026] [:error] [pid 9263:tid 9273] [client 51.107.69.154:36994] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpputty.php"] [unique_id "aeFayRP68VyHNvj1e54BYAAAAMg"]
[Fri Apr 17 05:55:22.260393 2026] [:error] [pid 9151:tid 9184] [client 51.107.69.154:36632] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpputty.php"] [unique_id "aeFayshTVuRPkua22vSfqgAAABc"]
[Fri Apr 17 05:55:22.798801 2026] [:error] [pid 9153:tid 9236] [client 51.107.69.154:4501] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpputty.php"] [unique_id "aeFayuMHGxkTZX3c45cElAAAAJI"]
[Fri Apr 17 05:55:23.303180 2026] [:error] [pid 9263:tid 9288] [client 51.107.69.154:37038] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dodo.php"] [unique_id "aeFayxP68VyHNvj1e54BYwAAANc"]
[Fri Apr 17 05:55:23.773565 2026] [:error] [pid 9153:tid 9227] [client 51.107.69.154:23321] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dodo.php"] [unique_id "aeFay-MHGxkTZX3c45cEmQAAAIk"]
[Fri Apr 17 05:55:24.285644 2026] [:error] [pid 9263:tid 9277] [client 51.107.69.154:30180] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dodo.php"] [unique_id "aeFazBP68VyHNvj1e54BZgAAAMw"]
[Fri Apr 17 05:55:24.793698 2026] [:error] [pid 9263:tid 9281] [client 51.107.69.154:4520] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dodo.php"] [unique_id "aeFazBP68VyHNvj1e54BaQAAANA"]
[Fri Apr 17 05:55:25.294815 2026] [:error] [pid 9263:tid 9286] [client 51.107.69.154:29353] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFazRP68VyHNvj1e54BagAAANU"]
[Fri Apr 17 05:55:25.796995 2026] [:error] [pid 9263:tid 9272] [client 51.107.69.154:21768] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFazRP68VyHNvj1e54BbAAAAMc"]
[Fri Apr 17 05:55:26.302947 2026] [:error] [pid 9151:tid 9183] [client 51.107.69.154:4960] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFazshTVuRPkua22vSfrAAAABY"]
[Fri Apr 17 05:55:26.819318 2026] [:error] [pid 51878:tid 51901] [client 51.107.69.154:37016] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-post-data.php"] [unique_id "aeFazknQhUtMbw9EsgZ02AAAARU"]
[Fri Apr 17 05:55:27.320317 2026] [:error] [pid 9151:tid 9180] [client 51.107.69.154:22807] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFaz8hTVuRPkua22vSfrQAAABM"]
[Fri Apr 17 05:55:27.822989 2026] [:error] [pid 9263:tid 9270] [client 51.107.69.154:30786] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFazxP68VyHNvj1e54BcAAAAMU"]
[Fri Apr 17 05:55:28.298555 2026] [:error] [pid 51878:tid 51885] [client 51.107.69.154:38882] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFa0EnQhUtMbw9EsgZ03QAAAQU"]
[Fri Apr 17 05:55:28.776540 2026] [:error] [pid 51878:tid 51900] [client 51.107.69.154:38398] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFa0EnQhUtMbw9EsgZ04QAAARQ"]
[Fri Apr 17 05:55:29.287565 2026] [:error] [pid 51878:tid 51886] [client 51.107.69.154:4116] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Marvins.php"] [unique_id "aeFa0UnQhUtMbw9EsgZ04wAAAQY"]
[Fri Apr 17 05:55:29.825290 2026] [:error] [pid 51878:tid 51896] [client 51.107.69.154:38889] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Marvins.php"] [unique_id "aeFa0UnQhUtMbw9EsgZ05wAAARA"]
[Fri Apr 17 05:55:30.332038 2026] [:error] [pid 9153:tid 9227] [client 51.107.69.154:29319] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Marvins.php"] [unique_id "aeFa0uMHGxkTZX3c45cEpQAAAIk"]
[Fri Apr 17 05:55:30.842685 2026] [:error] [pid 51878:tid 51904] [client 51.107.69.154:22785] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Marvins.php"] [unique_id "aeFa0knQhUtMbw9EsgZ07AAAARg"]
[Fri Apr 17 05:55:31.385570 2026] [:error] [pid 9263:tid 9273] [client 51.107.69.154:38891] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/astab.php"] [unique_id "aeFa0xP68VyHNvj1e54BdAAAAMg"]
[Fri Apr 17 05:55:31.924443 2026] [:error] [pid 9153:tid 9219] [client 51.107.69.154:38354] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/astab.php"] [unique_id "aeFa0-MHGxkTZX3c45cEqgAAAIE"]
[Fri Apr 17 05:55:32.440442 2026] [:error] [pid 9151:tid 9165] [client 51.107.69.154:38359] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/astab.php"] [unique_id "aeFa1MhTVuRPkua22vSfsAAAAAQ"]
[Fri Apr 17 05:55:33.037217 2026] [:error] [pid 9151:tid 9162] [client 51.107.69.154:30826] [client 51.107.69.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/astab.php"] [unique_id "aeFa1chTVuRPkua22vSfswAAAAE"]
[Fri Apr 17 07:34:48.091680 2026] [proxy_fcgi:error] [pid 25010:tid 25021] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:48.345774 2026] [proxy_fcgi:error] [pid 25010:tid 25015] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:48.599677 2026] [proxy_fcgi:error] [pid 25010:tid 25036] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:50.193974 2026] [proxy_fcgi:error] [pid 25010:tid 25018] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:50.448860 2026] [proxy_fcgi:error] [pid 25010:tid 25033] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:50.956795 2026] [proxy_fcgi:error] [pid 25010:tid 25035] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:51.211003 2026] [proxy_fcgi:error] [pid 25010:tid 25024] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:51.466755 2026] [proxy_fcgi:error] [pid 25010:tid 25022] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:51.721031 2026] [proxy_fcgi:error] [pid 25010:tid 25034] [client 20.238.112.20:30222] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:34:51.972291 2026] [:error] [pid 25010:tid 25019] [client 20.238.112.20:30222] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeFyG4-7kkf42RarqQ3sLwAAAUY"]
[Fri Apr 17 07:34:52.526268 2026] [:error] [pid 25010:tid 25027] [client 20.238.112.20:30233] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeFyHI-7kkf42RarqQ3sMgAAAU4"]
[Fri Apr 17 07:34:53.025847 2026] [:error] [pid 34273:tid 34293] [client 20.238.112.20:30230] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeFyHWuQDW686mK3dgEceAAAAZI"]
[Fri Apr 17 07:34:53.562806 2026] [:error] [pid 9151:tid 9161] [client 20.238.112.20:30257] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeFyHchTVuRPkua22vTLxwAAAAA"]
[Fri Apr 17 07:34:54.106695 2026] [:error] [pid 51878:tid 51896] [client 20.238.112.20:30160] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeFyHknQhUtMbw9EsgbPvQAAARA"]
[Fri Apr 17 07:34:54.606315 2026] [:error] [pid 9152:tid 9191] [client 20.238.112.20:30216] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeFyHpJYca8I3TNCwIdJ7QAAAEE"]
[Fri Apr 17 07:34:55.133757 2026] [:error] [pid 9263:tid 9285] [client 20.238.112.20:30164] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeFyHxP68VyHNvj1e55E_gAAANQ"]
[Fri Apr 17 07:34:55.637282 2026] [:error] [pid 34273:tid 34281] [client 20.238.112.20:30271] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aeFyH2uQDW686mK3dgEcfQAAAYY"]
[Fri Apr 17 07:34:56.170046 2026] [:error] [pid 9151:tid 9172] [client 20.238.112.20:30161] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeFyIMhTVuRPkua22vTLyQAAAAs"]
[Fri Apr 17 07:34:56.694774 2026] [:error] [pid 34273:tid 34285] [client 20.238.112.20:30191] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeFyIGuQDW686mK3dgEcgwAAAYo"]
[Fri Apr 17 07:34:57.227402 2026] [:error] [pid 51878:tid 51904] [client 20.238.112.20:30208] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeFyIUnQhUtMbw9EsgbPvwAAARg"]
[Fri Apr 17 07:34:57.726287 2026] [:error] [pid 9263:tid 9270] [client 20.238.112.20:30148] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeFyIRP68VyHNvj1e55FAwAAAMU"]
[Fri Apr 17 07:34:58.262543 2026] [:error] [pid 25010:tid 25018] [client 20.238.112.20:30253] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeFyIo-7kkf42RarqQ3sOwAAAUU"]
[Fri Apr 17 07:34:58.763323 2026] [:error] [pid 9153:tid 9229] [client 20.238.112.20:30259] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeFyIuMHGxkTZX3c45dgfwAAAIs"]
[Fri Apr 17 07:34:59.296783 2026] [:error] [pid 25010:tid 25035] [client 20.238.112.20:30227] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeFyI4-7kkf42RarqQ3sPgAAAVY"]
[Fri Apr 17 07:34:59.797602 2026] [:error] [pid 9152:tid 9207] [client 20.238.112.20:30269] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeFyI5JYca8I3TNCwIdJ7wAAAFE"]
[Fri Apr 17 07:35:00.333474 2026] [:error] [pid 34273:tid 34284] [client 20.238.112.20:30252] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeFyJGuQDW686mK3dgEchwAAAYk"]
[Fri Apr 17 07:35:00.861321 2026] [:error] [pid 34273:tid 34277] [client 20.238.112.20:30215] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeFyJGuQDW686mK3dgEciwAAAYI"]
[Fri Apr 17 07:35:01.384518 2026] [:error] [pid 34273:tid 34281] [client 20.238.112.20:30147] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeFyJWuQDW686mK3dgEckAAAAYY"]
[Fri Apr 17 07:35:01.924078 2026] [:error] [pid 9152:tid 9214] [client 20.238.112.20:5067] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeFyJZJYca8I3TNCwIdJ8gAAAFg"]
[Fri Apr 17 07:35:02.423326 2026] [:error] [pid 9152:tid 9212] [client 20.238.112.20:30241] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeFyJpJYca8I3TNCwIdJ9AAAAFY"]
[Fri Apr 17 07:35:02.921916 2026] [:error] [pid 9152:tid 9213] [client 20.238.112.20:30248] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeFyJpJYca8I3TNCwIdJ9wAAAFc"]
[Fri Apr 17 07:35:03.422542 2026] [:error] [pid 34273:tid 34298] [client 20.238.112.20:30213] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeFyJ2uQDW686mK3dgEclwAAAZc"]
[Fri Apr 17 07:35:03.955657 2026] [:error] [pid 51878:tid 51883] [client 20.238.112.20:30159] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeFyJ0nQhUtMbw9EsgbPyAAAAQM"]
[Fri Apr 17 07:35:04.500170 2026] [:error] [pid 9152:tid 9197] [client 20.238.112.20:30236] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeFyKJJYca8I3TNCwIdJ-QAAAEc"]
[Fri Apr 17 07:35:05.041124 2026] [:error] [pid 9152:tid 9193] [client 20.238.112.20:30152] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeFyKZJYca8I3TNCwIdJ-wAAAEM"]
[Fri Apr 17 07:35:05.563962 2026] [:error] [pid 34273:tid 34277] [client 20.238.112.20:30235] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeFyKWuQDW686mK3dgEcmQAAAYI"]
[Fri Apr 17 07:35:06.062967 2026] [:error] [pid 9152:tid 9198] [client 20.238.112.20:30223] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeFyKpJYca8I3TNCwIdKAAAAAEg"]
[Fri Apr 17 07:35:06.562399 2026] [:error] [pid 9151:tid 9174] [client 20.238.112.20:30173] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeFyKshTVuRPkua22vTLzwAAAA0"]
[Fri Apr 17 07:35:07.089082 2026] [:error] [pid 34273:tid 34288] [client 20.238.112.20:30251] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeFyK2uQDW686mK3dgEcnAAAAY0"]
[Fri Apr 17 07:35:07.590863 2026] [:error] [pid 34273:tid 34291] [client 20.238.112.20:30211] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeFyK2uQDW686mK3dgEcnwAAAZA"]
[Fri Apr 17 07:35:08.124169 2026] [:error] [pid 34273:tid 34278] [client 20.238.112.20:30212] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeFyLGuQDW686mK3dgEcowAAAYM"]
[Fri Apr 17 07:35:08.623007 2026] [:error] [pid 34273:tid 34283] [client 20.238.112.20:30262] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFyLGuQDW686mK3dgEcpwAAAYg"]
[Fri Apr 17 07:35:09.158060 2026] [:error] [pid 9152:tid 9209] [client 20.238.112.20:30254] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFyLZJYca8I3TNCwIdKBQAAAFM"]
[Fri Apr 17 07:35:09.691342 2026] [:error] [pid 51878:tid 51881] [client 20.238.112.20:30221] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFyLUnQhUtMbw9EsgbPzAAAAQE"]
[Fri Apr 17 07:35:10.189816 2026] [:error] [pid 9151:tid 9165] [client 20.238.112.20:30157] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFyLshTVuRPkua22vTL0AAAAAQ"]
[Fri Apr 17 07:35:10.734314 2026] [:error] [pid 9153:tid 9220] [client 20.238.112.20:30154] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeFyLuMHGxkTZX3c45dgtQAAAII"]
[Fri Apr 17 07:35:11.233508 2026] [:error] [pid 9153:tid 9227] [client 20.238.112.20:30270] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeFyL-MHGxkTZX3c45dgugAAAIk"]
[Fri Apr 17 07:35:11.766710 2026] [:error] [pid 34273:tid 34292] [client 20.238.112.20:30174] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeFyL2uQDW686mK3dgEcrAAAAZE"]
[Fri Apr 17 07:35:12.268824 2026] [:error] [pid 34273:tid 34291] [client 20.238.112.20:30169] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeFyMGuQDW686mK3dgEcsAAAAZA"]
[Fri Apr 17 07:35:12.802043 2026] [:error] [pid 34273:tid 34282] [client 20.238.112.20:30264] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeFyMGuQDW686mK3dgEcswAAAYc"]
[Fri Apr 17 07:35:13.335908 2026] [:error] [pid 34273:tid 34296] [client 20.238.112.20:5086] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeFyMWuQDW686mK3dgEctAAAAZU"]
[Fri Apr 17 07:35:13.835896 2026] [:error] [pid 34273:tid 34278] [client 20.238.112.20:30145] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeFyMWuQDW686mK3dgEctgAAAYM"]
[Fri Apr 17 07:35:14.380534 2026] [:error] [pid 34273:tid 34298] [client 20.238.112.20:30192] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeFyMmuQDW686mK3dgEcuAAAAZc"]
[Fri Apr 17 07:35:14.881455 2026] [:error] [pid 34273:tid 34290] [client 20.238.112.20:30246] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeFyMmuQDW686mK3dgEcvAAAAY8"]
[Fri Apr 17 07:35:15.381085 2026] [:error] [pid 34273:tid 34279] [client 20.238.112.20:30224] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeFyM2uQDW686mK3dgEcvwAAAYQ"]
[Fri Apr 17 07:35:15.913974 2026] [:error] [pid 9152:tid 9195] [client 20.238.112.20:5060] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeFyM5JYca8I3TNCwIdKDgAAAEU"]
[Fri Apr 17 07:35:16.437345 2026] [:error] [pid 34273:tid 34292] [client 20.238.112.20:30203] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeFyNGuQDW686mK3dgEcxAAAAZE"]
[Fri Apr 17 07:35:16.968863 2026] [:error] [pid 34273:tid 34276] [client 20.238.112.20:5094] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeFyNGuQDW686mK3dgEcxwAAAYE"]
[Fri Apr 17 07:35:17.504555 2026] [:error] [pid 25010:tid 25014] [client 20.238.112.20:30234] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeFyNY-7kkf42RarqQ3sTgAAAUE"]
[Fri Apr 17 07:35:18.020105 2026] [:error] [pid 25010:tid 25028] [client 20.238.112.20:30177] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeFyNo-7kkf42RarqQ3sUAAAAU8"]
[Fri Apr 17 07:35:18.520013 2026] [:error] [pid 34273:tid 34283] [client 20.238.112.20:30146] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeFyNmuQDW686mK3dgEczwAAAYg"]
[Fri Apr 17 07:35:19.153792 2026] [:error] [pid 34273:tid 34294] [client 20.238.112.20:30267] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeFyN2uQDW686mK3dgEc0gAAAZM"]
[Fri Apr 17 07:35:19.767689 2026] [:error] [pid 34273:tid 34295] [client 20.238.112.20:30151] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeFyN2uQDW686mK3dgEc1QAAAZQ"]
[Fri Apr 17 07:35:20.368971 2026] [:error] [pid 34273:tid 34296] [client 20.238.112.20:30184] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeFyOGuQDW686mK3dgEc2gAAAZU"]
[Fri Apr 17 07:35:20.947830 2026] [:error] [pid 34273:tid 34298] [client 20.238.112.20:30232] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeFyOGuQDW686mK3dgEc3QAAAZc"]
[Fri Apr 17 07:35:21.494778 2026] [:error] [pid 34273:tid 34294] [client 20.238.112.20:30150] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeFyOWuQDW686mK3dgEc4QAAAZM"]
[Fri Apr 17 07:35:22.008317 2026] [:error] [pid 9151:tid 9169] [client 20.238.112.20:5059] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeFyOshTVuRPkua22vTL0wAAAAg"]
[Fri Apr 17 07:35:22.536184 2026] [:error] [pid 9151:tid 9161] [client 20.238.112.20:5097] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeFyOshTVuRPkua22vTL1QAAAAA"]
[Fri Apr 17 07:35:23.069718 2026] [:error] [pid 34273:tid 34296] [client 20.238.112.20:30218] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeFyO2uQDW686mK3dgEc6AAAAZU"]
[Fri Apr 17 07:35:23.596127 2026] [:error] [pid 9152:tid 9214] [client 20.238.112.20:5097] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeFyO5JYca8I3TNCwIdKFAAAAFg"]
[Fri Apr 17 07:35:24.102800 2026] [:error] [pid 9151:tid 9166] [client 20.238.112.20:30209] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeFyPMhTVuRPkua22vTL2wAAAAU"]
[Fri Apr 17 07:35:24.602441 2026] [:error] [pid 9151:tid 9167] [client 20.238.112.20:30237] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeFyPMhTVuRPkua22vTL3AAAAAY"]
[Fri Apr 17 07:35:25.135864 2026] [:error] [pid 34273:tid 34290] [client 20.238.112.20:5064] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeFyPWuQDW686mK3dgEc7AAAAY8"]
[Fri Apr 17 07:35:25.635660 2026] [:error] [pid 34273:tid 34275] [client 20.238.112.20:4992] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeFyPWuQDW686mK3dgEc7wAAAYA"]
[Fri Apr 17 07:35:26.170786 2026] [:error] [pid 9153:tid 9225] [client 20.238.112.20:30263] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeFyPuMHGxkTZX3c45dg7gAAAIc"]
[Fri Apr 17 07:35:26.717982 2026] [:error] [pid 51878:tid 51896] [client 20.238.112.20:30207] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeFyPknQhUtMbw9EsgbPzwAAARA"]
[Fri Apr 17 07:35:27.251223 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:30245] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeFyP2uQDW686mK3dgEc_QAAAZY"]
[Fri Apr 17 07:35:27.778500 2026] [:error] [pid 34273:tid 34282] [client 20.238.112.20:30219] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeFyP2uQDW686mK3dgEdAQAAAYc"]
[Fri Apr 17 07:35:28.280691 2026] [:error] [pid 34273:tid 34298] [client 20.238.112.20:30240] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeFyQGuQDW686mK3dgEdBgAAAZc"]
[Fri Apr 17 07:35:28.807020 2026] [:error] [pid 9152:tid 9197] [client 20.238.112.20:5062] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeFyQJJYca8I3TNCwIdKFwAAAEc"]
[Fri Apr 17 07:35:29.336597 2026] [:error] [pid 34273:tid 34295] [client 20.238.112.20:5080] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeFyQWuQDW686mK3dgEdDgAAAZQ"]
[Fri Apr 17 07:35:29.839086 2026] [:error] [pid 9152:tid 9211] [client 20.238.112.20:30266] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeFyQZJYca8I3TNCwIdKGAAAAFU"]
[Fri Apr 17 07:35:30.338627 2026] [:error] [pid 34273:tid 34284] [client 20.238.112.20:5061] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeFyQmuQDW686mK3dgEdGAAAAYk"]
[Fri Apr 17 07:35:30.864645 2026] [:error] [pid 9153:tid 9240] [client 20.238.112.20:5083] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeFyQuMHGxkTZX3c45dg7wAAAJY"]
[Fri Apr 17 07:35:31.390581 2026] [:error] [pid 9153:tid 9218] [client 20.238.112.20:30175] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeFyQ-MHGxkTZX3c45dg8AAAAIA"]
[Fri Apr 17 07:35:31.924494 2026] [:error] [pid 25010:tid 25025] [client 20.238.112.20:30210] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeFyQ4-7kkf42RarqQ3sVgAAAUw"]
[Fri Apr 17 07:35:32.457004 2026] [:error] [pid 9152:tid 9194] [client 20.238.112.20:5089] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeFyRJJYca8I3TNCwIdKIAAAAEQ"]
[Fri Apr 17 07:35:33.000885 2026] [:error] [pid 9263:tid 9281] [client 20.238.112.20:30168] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeFyRBP68VyHNvj1e55FCQAAANA"]
[Fri Apr 17 07:35:33.535372 2026] [:error] [pid 34273:tid 34294] [client 20.238.112.20:30166] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeFyRWuQDW686mK3dgEdKAAAAZM"]
[Fri Apr 17 07:35:34.034930 2026] [:error] [pid 34273:tid 34284] [client 20.238.112.20:5071] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeFyRmuQDW686mK3dgEdKwAAAYk"]
[Fri Apr 17 07:35:34.535783 2026] [:error] [pid 9152:tid 9202] [client 20.238.112.20:30260] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeFyRpJYca8I3TNCwIdKIwAAAEw"]
[Fri Apr 17 07:35:35.068940 2026] [:error] [pid 34273:tid 34293] [client 20.238.112.20:30250] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeFyR2uQDW686mK3dgEdMwAAAZI"]
[Fri Apr 17 07:35:35.632395 2026] [:error] [pid 9152:tid 9214] [client 20.238.112.20:30220] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeFyR5JYca8I3TNCwIdKJQAAAFg"]
[Fri Apr 17 07:35:36.195765 2026] [:error] [pid 34273:tid 34285] [client 20.238.112.20:5108] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeFySGuQDW686mK3dgEdOgAAAYo"]
[Fri Apr 17 07:35:37.148734 2026] [:error] [pid 9152:tid 9210] [client 20.238.112.20:30258] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeFySZJYca8I3TNCwIdKLwAAAFQ"]
[Fri Apr 17 07:35:37.802544 2026] [:error] [pid 9152:tid 9191] [client 20.238.112.20:30172] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeFySZJYca8I3TNCwIdKMwAAAEE"]
[Fri Apr 17 07:35:38.361891 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:30228] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeFySmuQDW686mK3dgEdRgAAAZY"]
[Fri Apr 17 07:35:39.007882 2026] [:error] [pid 34273:tid 34279] [client 20.238.112.20:30170] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeFyS2uQDW686mK3dgEdSQAAAYQ"]
[Fri Apr 17 07:35:39.591831 2026] [:error] [pid 9152:tid 9212] [client 20.238.112.20:30176] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeFyS5JYca8I3TNCwIdKOAAAAFY"]
[Fri Apr 17 07:35:40.369452 2026] [:error] [pid 34273:tid 34275] [client 20.238.112.20:30195] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeFyTGuQDW686mK3dgEdTgAAAYA"]
[Fri Apr 17 07:35:40.873285 2026] [:error] [pid 51878:tid 51894] [client 20.238.112.20:30158] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeFyTEnQhUtMbw9EsgbP1gAAAQ4"]
[Fri Apr 17 07:35:41.372493 2026] [:error] [pid 9151:tid 9177] [client 20.238.112.20:30225] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aeFyTchTVuRPkua22vTL4QAAABA"]
[Fri Apr 17 07:35:41.899303 2026] [:error] [pid 34273:tid 34276] [client 20.238.112.20:5065] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aeFyTWuQDW686mK3dgEdUgAAAYE"]
[Fri Apr 17 07:35:42.402619 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:30165] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aeFyTmuQDW686mK3dgEdVwAAAZY"]
[Fri Apr 17 07:35:42.919405 2026] [:error] [pid 34273:tid 34289] [client 20.238.112.20:30261] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aeFyTmuQDW686mK3dgEdWgAAAY4"]
[Fri Apr 17 07:35:43.441474 2026] [:error] [pid 34273:tid 34292] [client 20.238.112.20:5026] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFyT2uQDW686mK3dgEdXAAAAZE"]
[Fri Apr 17 07:35:43.956052 2026] [:error] [pid 9263:tid 9280] [client 20.238.112.20:30198] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFyTxP68VyHNvj1e55FDwAAAM8"]
[Fri Apr 17 07:35:44.490653 2026] [:error] [pid 9152:tid 9203] [client 20.238.112.20:30268] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFyUJJYca8I3TNCwIdKOgAAAE0"]
[Fri Apr 17 07:35:45.004954 2026] [:error] [pid 9263:tid 9269] [client 20.238.112.20:30162] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFyURP68VyHNvj1e55FFAAAAMQ"]
[Fri Apr 17 07:35:45.543118 2026] [:error] [pid 9263:tid 9288] [client 20.238.112.20:30250] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeFyURP68VyHNvj1e55FFwAAANc"]
[Fri Apr 17 07:35:46.043451 2026] [:error] [pid 34273:tid 34278] [client 20.238.112.20:30179] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeFyUmuQDW686mK3dgEdZQAAAYM"]
[Fri Apr 17 07:35:46.555983 2026] [:error] [pid 34273:tid 34285] [client 20.238.112.20:5081] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeFyUmuQDW686mK3dgEdZwAAAYo"]
[Fri Apr 17 07:35:47.064945 2026] [:error] [pid 9263:tid 9267] [client 20.238.112.20:5085] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeFyUxP68VyHNvj1e55FHAAAAMI"]
[Fri Apr 17 07:35:47.569185 2026] [:error] [pid 9263:tid 9278] [client 20.238.112.20:5073] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeFyUxP68VyHNvj1e55FHQAAAM0"]
[Fri Apr 17 07:35:48.069859 2026] [:error] [pid 9263:tid 9281] [client 20.238.112.20:5096] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeFyVBP68VyHNvj1e55FHgAAANA"]
[Fri Apr 17 07:35:48.570377 2026] [:error] [pid 51878:tid 51900] [client 20.238.112.20:30265] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeFyVEnQhUtMbw9EsgbP3gAAARQ"]
[Fri Apr 17 07:35:49.103893 2026] [:error] [pid 9263:tid 9282] [client 20.238.112.20:30202] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeFyVRP68VyHNvj1e55FIQAAANE"]
[Fri Apr 17 07:35:49.634657 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:5072] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aeFyVWuQDW686mK3dgEdbQAAAZY"]
[Fri Apr 17 07:35:50.179343 2026] [:error] [pid 34273:tid 34278] [client 20.238.112.20:5079] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aeFyVmuQDW686mK3dgEdcAAAAYM"]
[Fri Apr 17 07:35:50.678339 2026] [:error] [pid 34273:tid 34285] [client 20.238.112.20:5075] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aeFyVmuQDW686mK3dgEdcwAAAYo"]
[Fri Apr 17 07:35:51.757977 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:52.292010 2026] [proxy_fcgi:error] [pid 25010:tid 25032] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:52.559062 2026] [proxy_fcgi:error] [pid 25010:tid 25030] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:53.144294 2026] [proxy_fcgi:error] [pid 25010:tid 25016] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:53.410887 2026] [proxy_fcgi:error] [pid 25010:tid 25023] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:53.677753 2026] [proxy_fcgi:error] [pid 25010:tid 25025] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:53.944051 2026] [proxy_fcgi:error] [pid 25010:tid 25027] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:54.210651 2026] [proxy_fcgi:error] [pid 25010:tid 25029] [client 20.238.112.20:30156] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:35:54.473767 2026] [:error] [pid 25010:tid 25026] [client 20.238.112.20:30156] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aeFyWo-7kkf42RarqQ3sawAAAU0"]
[Fri Apr 17 07:35:55.019259 2026] [:error] [pid 9263:tid 9266] [client 20.238.112.20:5119] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aeFyWxP68VyHNvj1e55FIwAAAME"]
[Fri Apr 17 07:35:55.519916 2026] [:error] [pid 9263:tid 9276] [client 20.238.112.20:30249] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aeFyWxP68VyHNvj1e55FJAAAAMs"]
[Fri Apr 17 07:35:56.067142 2026] [:error] [pid 9151:tid 9166] [client 20.238.112.20:5056] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aeFyXMhTVuRPkua22vTL6wAAAAU"]
[Fri Apr 17 07:35:56.567775 2026] [:error] [pid 9151:tid 9167] [client 20.238.112.20:4997] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboutc.php"] [unique_id "aeFyXMhTVuRPkua22vTL7gAAAAY"]
[Fri Apr 17 07:35:57.068041 2026] [:error] [pid 9151:tid 9185] [client 20.238.112.20:5058] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboutc.php"] [unique_id "aeFyXchTVuRPkua22vTL8AAAABg"]
[Fri Apr 17 07:35:57.572369 2026] [:error] [pid 9151:tid 9180] [client 20.238.112.20:5116] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboutc.php"] [unique_id "aeFyXchTVuRPkua22vTL9AAAABM"]
[Fri Apr 17 07:35:58.080661 2026] [:error] [pid 9151:tid 9165] [client 20.238.112.20:5022] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboutc.php"] [unique_id "aeFyXshTVuRPkua22vTL9gAAAAQ"]
[Fri Apr 17 07:35:58.580147 2026] [:error] [pid 9152:tid 9204] [client 20.238.112.20:30167] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeFyXpJYca8I3TNCwIdKQQAAAE4"]
[Fri Apr 17 07:35:59.127109 2026] [:error] [pid 34273:tid 34277] [client 20.238.112.20:5095] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeFyX2uQDW686mK3dgEdfQAAAYI"]
[Fri Apr 17 07:35:59.654092 2026] [:error] [pid 34273:tid 34281] [client 20.238.112.20:5070] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeFyX2uQDW686mK3dgEdgQAAAYY"]
[Fri Apr 17 07:36:00.187421 2026] [:error] [pid 25010:tid 25013] [client 20.238.112.20:30185] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeFyYI-7kkf42RarqQ3sbAAAAUA"]
[Fri Apr 17 07:36:00.732627 2026] [:error] [pid 25010:tid 25015] [client 20.238.112.20:5093] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeFyYI-7kkf42RarqQ3sbgAAAUI"]
[Fri Apr 17 07:36:01.232528 2026] [:error] [pid 9153:tid 9234] [client 20.238.112.20:4965] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeFyYeMHGxkTZX3c45dg8wAAAJA"]
[Fri Apr 17 07:36:01.732390 2026] [:error] [pid 25010:tid 25033] [client 20.238.112.20:30181] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeFyYY-7kkf42RarqQ3scQAAAVQ"]
[Fri Apr 17 07:36:02.269203 2026] [:error] [pid 9152:tid 9207] [client 20.238.112.20:30190] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeFyYpJYca8I3TNCwIdKQwAAAFE"]
[Fri Apr 17 07:36:02.805251 2026] [:error] [pid 9263:tid 9270] [client 20.238.112.20:5068] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFyYhP68VyHNvj1e55FKwAAAMU"]
[Fri Apr 17 07:36:03.337470 2026] [:error] [pid 51878:tid 51897] [client 20.238.112.20:30178] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFyY0nQhUtMbw9EsgbP7wAAARE"]
[Fri Apr 17 07:36:03.860282 2026] [:error] [pid 9263:tid 9275] [client 20.238.112.20:5028] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFyYxP68VyHNvj1e55FLgAAAMo"]
[Fri Apr 17 07:36:04.386000 2026] [:error] [pid 25010:tid 25022] [client 20.238.112.20:5103] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFyZI-7kkf42RarqQ3sdgAAAUk"]
[Fri Apr 17 07:36:04.922619 2026] [:error] [pid 9152:tid 9191] [client 20.238.112.20:30149] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeFyZJJYca8I3TNCwIdKRAAAAEE"]
[Fri Apr 17 07:36:05.449182 2026] [:error] [pid 9152:tid 9200] [client 20.238.112.20:30155] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeFyZZJYca8I3TNCwIdKRQAAAEo"]
[Fri Apr 17 07:36:05.983047 2026] [:error] [pid 9151:tid 9185] [client 20.238.112.20:30180] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeFyZchTVuRPkua22vTMAAAAABg"]
[Fri Apr 17 07:36:06.481719 2026] [:error] [pid 9152:tid 9190] [client 20.238.112.20:5031] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeFyZpJYca8I3TNCwIdKRwAAAEA"]
[Fri Apr 17 07:36:06.986698 2026] [:error] [pid 9263:tid 9286] [client 20.238.112.20:4996] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeFyZhP68VyHNvj1e55FMwAAANU"]
[Fri Apr 17 07:36:07.519738 2026] [:error] [pid 34273:tid 34284] [client 20.238.112.20:30144] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeFyZ2uQDW686mK3dgEdiQAAAYk"]
[Fri Apr 17 07:36:08.056535 2026] [:error] [pid 51878:tid 51903] [client 20.238.112.20:5027] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeFyaEnQhUtMbw9EsgbP8wAAARc"]
[Fri Apr 17 07:36:08.562528 2026] [:error] [pid 9151:tid 9163] [client 20.238.112.20:5100] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeFyaMhTVuRPkua22vTMBQAAAAI"]
[Fri Apr 17 07:36:09.095391 2026] [:error] [pid 9153:tid 9223] [client 20.238.112.20:5036] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeFyaeMHGxkTZX3c45dg9gAAAIU"]
[Fri Apr 17 07:36:09.630713 2026] [:error] [pid 9152:tid 9202] [client 20.238.112.20:5114] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeFyaZJYca8I3TNCwIdKSAAAAEw"]
[Fri Apr 17 07:36:10.136650 2026] [:error] [pid 9153:tid 9221] [client 20.238.112.20:30243] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeFyauMHGxkTZX3c45dg-AAAAIM"]
[Fri Apr 17 07:36:10.669250 2026] [:error] [pid 9153:tid 9228] [client 20.238.112.20:30193] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeFyauMHGxkTZX3c45dg-gAAAIo"]
[Fri Apr 17 07:36:11.209465 2026] [:error] [pid 34273:tid 34295] [client 20.238.112.20:5102] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeFya2uQDW686mK3dgEdkgAAAZQ"]
[Fri Apr 17 07:36:11.714498 2026] [:error] [pid 9152:tid 9198] [client 20.238.112.20:30196] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeFya5JYca8I3TNCwIdKUQAAAEg"]
[Fri Apr 17 07:36:12.239254 2026] [:error] [pid 9152:tid 9197] [client 20.238.112.20:30239] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeFybJJYca8I3TNCwIdKUgAAAEc"]
[Fri Apr 17 07:36:12.738715 2026] [:error] [pid 9151:tid 9182] [client 20.238.112.20:5008] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeFybMhTVuRPkua22vTMCQAAABU"]
[Fri Apr 17 07:36:13.278755 2026] [:error] [pid 9153:tid 9225] [client 20.238.112.20:5111] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeFybeMHGxkTZX3c45dg_wAAAIc"]
[Fri Apr 17 07:36:13.786818 2026] [:error] [pid 25010:tid 25023] [client 20.238.112.20:30200] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeFybY-7kkf42RarqQ3sfQAAAUo"]
[Fri Apr 17 07:36:14.332348 2026] [:error] [pid 25010:tid 25027] [client 20.238.112.20:30183] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeFybo-7kkf42RarqQ3sfwAAAU4"]
[Fri Apr 17 07:36:14.860748 2026] [:error] [pid 51878:tid 51890] [client 20.238.112.20:30204] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeFybknQhUtMbw9EsgbP9QAAAQo"]
[Fri Apr 17 07:36:15.382756 2026] [:error] [pid 9151:tid 9171] [client 20.238.112.20:30187] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeFyb8hTVuRPkua22vTMDAAAAAo"]
[Fri Apr 17 07:36:15.882223 2026] [:error] [pid 9153:tid 9218] [client 20.238.112.20:5069] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeFyb-MHGxkTZX3c45dhAAAAAIA"]
[Fri Apr 17 07:36:16.408904 2026] [:error] [pid 9153:tid 9234] [client 20.238.112.20:5009] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeFycOMHGxkTZX3c45dhBAAAAJA"]
[Fri Apr 17 07:36:16.931515 2026] [:error] [pid 25010:tid 25013] [client 20.238.112.20:5035] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeFycI-7kkf42RarqQ3sggAAAUA"]
[Fri Apr 17 07:36:17.437018 2026] [:error] [pid 25010:tid 25015] [client 20.238.112.20:4964] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFycY-7kkf42RarqQ3sgwAAAUI"]
[Fri Apr 17 07:36:17.963327 2026] [:error] [pid 9263:tid 9280] [client 20.238.112.20:4993] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFycRP68VyHNvj1e55FOQAAAM8"]
[Fri Apr 17 07:36:18.486121 2026] [:error] [pid 9263:tid 9274] [client 20.238.112.20:30229] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFychP68VyHNvj1e55FOgAAAMk"]
[Fri Apr 17 07:36:19.031645 2026] [:error] [pid 9263:tid 9283] [client 20.238.112.20:5001] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFycxP68VyHNvj1e55FOwAAANI"]
[Fri Apr 17 07:36:19.559138 2026] [:error] [pid 9151:tid 9166] [client 20.238.112.20:5023] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeFyc8hTVuRPkua22vTMDwAAAAU"]
[Fri Apr 17 07:36:20.058865 2026] [:error] [pid 9263:tid 9270] [client 20.238.112.20:5002] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeFydBP68VyHNvj1e55FPAAAAMU"]
[Fri Apr 17 07:36:20.560815 2026] [:error] [pid 25010:tid 25033] [client 20.238.112.20:30238] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeFydI-7kkf42RarqQ3shwAAAVQ"]
[Fri Apr 17 07:36:21.098758 2026] [:error] [pid 9263:tid 9277] [client 20.238.112.20:5118] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeFydRP68VyHNvj1e55FQAAAAMw"]
[Fri Apr 17 07:36:21.598405 2026] [:error] [pid 9152:tid 9200] [client 20.238.112.20:5063] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeFydZJYca8I3TNCwIdKVwAAAEo"]
[Fri Apr 17 07:36:22.098081 2026] [:error] [pid 34273:tid 34284] [client 20.238.112.20:5104] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeFydmuQDW686mK3dgEdmwAAAYk"]
[Fri Apr 17 07:36:22.597587 2026] [:error] [pid 34273:tid 34294] [client 20.238.112.20:5048] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeFydmuQDW686mK3dgEdngAAAZM"]
[Fri Apr 17 07:36:23.131511 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:30188] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeFyd2uQDW686mK3dgEdoQAAAZY"]
[Fri Apr 17 07:36:23.631308 2026] [:error] [pid 9152:tid 9208] [client 20.238.112.20:5025] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aeFyd5JYca8I3TNCwIdKWgAAAFI"]
[Fri Apr 17 07:36:24.183057 2026] [:error] [pid 51878:tid 51880] [client 20.238.112.20:5106] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aeFyeEnQhUtMbw9EsgbP_wAAAQA"]
[Fri Apr 17 07:36:24.683101 2026] [:error] [pid 51878:tid 51892] [client 20.238.112.20:4999] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aeFyeEnQhUtMbw9EsgbQAQAAAQw"]
[Fri Apr 17 07:36:25.198198 2026] [:error] [pid 34273:tid 34290] [client 20.238.112.20:5052] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aeFyeWuQDW686mK3dgEdpAAAAY8"]
[Fri Apr 17 07:36:25.713662 2026] [:error] [pid 34273:tid 34288] [client 20.238.112.20:30217] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aeFyeWuQDW686mK3dgEdqQAAAY0"]
[Fri Apr 17 07:36:26.222377 2026] [:error] [pid 34273:tid 34296] [client 20.238.112.20:4994] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aeFyemuQDW686mK3dgEdqwAAAZU"]
[Fri Apr 17 07:36:26.755664 2026] [:error] [pid 34273:tid 34280] [client 20.238.112.20:30182] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aeFyemuQDW686mK3dgEdsAAAAYU"]
[Fri Apr 17 07:36:27.286441 2026] [:error] [pid 34273:tid 34297] [client 20.238.112.20:30247] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aeFye2uQDW686mK3dgEdsgAAAZY"]
[Fri Apr 17 07:36:27.789976 2026] [:error] [pid 51878:tid 51884] [client 20.238.112.20:5082] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeFye0nQhUtMbw9EsgbQBQAAAQQ"]
[Fri Apr 17 07:36:28.294987 2026] [:error] [pid 34273:tid 34288] [client 20.238.112.20:5076] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeFyfGuQDW686mK3dgEduAAAAY0"]
[Fri Apr 17 07:36:28.795515 2026] [:error] [pid 34273:tid 34296] [client 20.238.112.20:4866] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeFyfGuQDW686mK3dgEdugAAAZU"]
[Fri Apr 17 07:36:29.332113 2026] [:error] [pid 25010:tid 25034] [client 20.238.112.20:5021] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeFyfY-7kkf42RarqQ3siwAAAVU"]
[Fri Apr 17 07:36:29.846646 2026] [:error] [pid 25010:tid 25019] [client 20.238.112.20:4939] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "aeFyfY-7kkf42RarqQ3sjAAAAUY"]
[Fri Apr 17 07:36:30.390846 2026] [:error] [pid 9152:tid 9212] [client 20.238.112.20:4937] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "aeFyfpJYca8I3TNCwIdKWwAAAFY"]
[Fri Apr 17 07:36:30.925780 2026] [:error] [pid 51878:tid 51900] [client 20.238.112.20:5017] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "aeFyfknQhUtMbw9EsgbQBwAAARQ"]
[Fri Apr 17 07:36:31.457445 2026] [:error] [pid 9153:tid 9231] [client 20.238.112.20:5105] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "aeFyf-MHGxkTZX3c45dhCwAAAI0"]
[Fri Apr 17 07:36:31.995075 2026] [:error] [pid 9153:tid 9227] [client 20.238.112.20:5088] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeFyf-MHGxkTZX3c45dhDgAAAIk"]
[Fri Apr 17 07:36:32.496710 2026] [:error] [pid 9152:tid 9203] [client 20.238.112.20:4981] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeFygJJYca8I3TNCwIdKXQAAAE0"]
[Fri Apr 17 07:36:33.019187 2026] [:error] [pid 9153:tid 9218] [client 20.238.112.20:5101] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeFygeMHGxkTZX3c45dhFAAAAIA"]
[Fri Apr 17 07:36:33.553329 2026] [:error] [pid 25010:tid 25031] [client 20.238.112.20:30255] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeFygY-7kkf42RarqQ3skAAAAVI"]
[Fri Apr 17 07:36:34.088331 2026] [:error] [pid 9151:tid 9165] [client 20.238.112.20:5087] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeFygshTVuRPkua22vTMFAAAAAQ"]
[Fri Apr 17 07:36:34.588067 2026] [:error] [pid 9153:tid 9226] [client 20.238.112.20:5011] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeFyguMHGxkTZX3c45dhHgAAAIg"]
[Fri Apr 17 07:36:35.086315 2026] [:error] [pid 25010:tid 25032] [client 20.238.112.20:30256] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeFyg4-7kkf42RarqQ3skQAAAVM"]
[Fri Apr 17 07:36:35.623728 2026] [:error] [pid 25010:tid 25027] [client 20.238.112.20:30244] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeFyg4-7kkf42RarqQ3skwAAAU4"]
[Fri Apr 17 07:36:36.153926 2026] [:error] [pid 9153:tid 9231] [client 20.238.112.20:4936] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFyhOMHGxkTZX3c45dhIAAAAI0"]
[Fri Apr 17 07:36:36.656460 2026] [:error] [pid 9153:tid 9225] [client 20.238.112.20:4933] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFyhOMHGxkTZX3c45dhIgAAAIc"]
[Fri Apr 17 07:36:37.156141 2026] [:error] [pid 9263:tid 9284] [client 20.238.112.20:5016] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFyhRP68VyHNvj1e55FSQAAANM"]
[Fri Apr 17 07:36:37.657924 2026] [:error] [pid 34273:tid 34276] [client 20.238.112.20:4976] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFyhWuQDW686mK3dgEd0AAAAYE"]
[Fri Apr 17 07:36:38.192531 2026] [:error] [pid 34273:tid 34295] [client 20.238.112.20:30231] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeFyhmuQDW686mK3dgEd1gAAAZQ"]
[Fri Apr 17 07:36:38.714646 2026] [:error] [pid 34273:tid 34299] [client 20.238.112.20:30206] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeFyhmuQDW686mK3dgEd2gAAAZg"]
[Fri Apr 17 07:36:39.247055 2026] [:error] [pid 9153:tid 9223] [client 20.238.112.20:30163] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeFyh-MHGxkTZX3c45dhKAAAAIU"]
[Fri Apr 17 07:36:39.783698 2026] [:error] [pid 9153:tid 9236] [client 20.238.112.20:5012] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeFyh-MHGxkTZX3c45dhKgAAAJI"]
[Fri Apr 17 07:36:40.282994 2026] [:error] [pid 51878:tid 51893] [client 20.238.112.20:5015] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeFyiEnQhUtMbw9EsgbQEAAAAQ0"]
[Fri Apr 17 07:36:40.781703 2026] [:error] [pid 34273:tid 34277] [client 20.238.112.20:30214] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeFyiGuQDW686mK3dgEd5QAAAYI"]
[Fri Apr 17 07:36:41.284013 2026] [:error] [pid 34273:tid 34290] [client 20.238.112.20:5043] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeFyiWuQDW686mK3dgEd5gAAAY8"]
[Fri Apr 17 07:36:41.785477 2026] [:error] [pid 25010:tid 25020] [client 20.238.112.20:4934] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeFyiY-7kkf42RarqQ3smgAAAUc"]
[Fri Apr 17 07:36:42.294015 2026] [:error] [pid 9152:tid 9201] [client 20.238.112.20:5112] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeFyipJYca8I3TNCwIdKagAAAEs"]
[Fri Apr 17 07:36:42.795789 2026] [:error] [pid 9151:tid 9175] [client 20.238.112.20:5010] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeFyishTVuRPkua22vTMFgAAAA4"]
[Fri Apr 17 07:36:43.344084 2026] [:error] [pid 9151:tid 9174] [client 20.238.112.20:5047] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeFyi8hTVuRPkua22vTMGAAAAA0"]
[Fri Apr 17 07:36:43.848383 2026] [:error] [pid 9152:tid 9203] [client 20.238.112.20:5037] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeFyi5JYca8I3TNCwIdKcAAAAE0"]
[Fri Apr 17 07:36:44.347715 2026] [:error] [pid 9152:tid 9196] [client 20.238.112.20:5000] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeFyjJJYca8I3TNCwIdKcwAAAEY"]
[Fri Apr 17 07:36:44.872462 2026] [:error] [pid 9152:tid 9198] [client 20.238.112.20:5057] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeFyjJJYca8I3TNCwIdKdAAAAEg"]
[Fri Apr 17 07:36:45.371904 2026] [:error] [pid 9153:tid 9241] [client 20.238.112.20:5078] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeFyjeMHGxkTZX3c45dhMAAAAJc"]
[Fri Apr 17 07:36:45.931330 2026] [:error] [pid 9153:tid 9234] [client 20.238.112.20:30197] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeFyjeMHGxkTZX3c45dhMgAAAJA"]
[Fri Apr 17 07:36:46.462227 2026] [:error] [pid 9151:tid 9177] [client 20.238.112.20:5084] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeFyjshTVuRPkua22vTMHAAAABA"]
[Fri Apr 17 07:36:46.987892 2026] [:error] [pid 9151:tid 9181] [client 20.238.112.20:5014] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeFyjshTVuRPkua22vTMHgAAABQ"]
[Fri Apr 17 07:36:47.531732 2026] [:error] [pid 9151:tid 9162] [client 20.238.112.20:5039] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeFyj8hTVuRPkua22vTMIAAAAAE"]
[Fri Apr 17 07:36:48.092342 2026] [:error] [pid 9263:tid 9277] [client 20.238.112.20:30199] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeFykBP68VyHNvj1e55FUQAAAMw"]
[Fri Apr 17 07:36:48.591314 2026] [:error] [pid 9151:tid 9185] [client 20.238.112.20:5074] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeFykMhTVuRPkua22vTMIgAAABg"]
[Fri Apr 17 07:36:49.130654 2026] [:error] [pid 51878:tid 51896] [client 20.238.112.20:4950] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeFykUnQhUtMbw9EsgbQFAAAARA"]
[Fri Apr 17 07:36:49.636807 2026] [:error] [pid 9151:tid 9172] [client 20.238.112.20:5005] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeFykchTVuRPkua22vTMJAAAAAs"]
[Fri Apr 17 07:36:50.158867 2026] [:error] [pid 9151:tid 9165] [client 20.238.112.20:4983] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeFykshTVuRPkua22vTMJwAAAAQ"]
[Fri Apr 17 07:36:50.701423 2026] [:error] [pid 9151:tid 9175] [client 20.238.112.20:30205] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeFykshTVuRPkua22vTMKAAAAA4"]
[Fri Apr 17 07:36:51.263856 2026] [:error] [pid 34273:tid 34278] [client 20.238.112.20:5019] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeFyk2uQDW686mK3dgEd-AAAAYM"]
[Fri Apr 17 07:36:51.772735 2026] [:error] [pid 9151:tid 9171] [client 20.238.112.20:5098] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeFyk8hTVuRPkua22vTMLQAAAAo"]
[Fri Apr 17 07:36:52.352140 2026] [:error] [pid 9151:tid 9181] [client 20.238.112.20:4928] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aeFylMhTVuRPkua22vTMMwAAABQ"]
[Fri Apr 17 07:36:52.903118 2026] [:error] [pid 34273:tid 34280] [client 20.238.112.20:4875] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aeFylGuQDW686mK3dgEd-wAAAYU"]
[Fri Apr 17 07:36:53.452209 2026] [:error] [pid 9153:tid 9231] [client 20.238.112.20:4955] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aeFyleMHGxkTZX3c45dhNQAAAI0"]
[Fri Apr 17 07:36:53.953990 2026] [:error] [pid 9151:tid 9168] [client 20.238.112.20:4869] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aeFylchTVuRPkua22vTMOgAAAAc"]
[Fri Apr 17 07:36:54.522117 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:54.787101 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:55.052646 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:55.325176 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:55.600926 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:55.866838 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:56.667319 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 20.238.112.20:30201] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 07:36:56.929220 2026] [:error] [pid 9263:tid 9287] [client 20.238.112.20:30201] [client 20.238.112.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/fm.php"] [unique_id "aeFymBP68VyHNvj1e55FYwAAANY"]
[Fri Apr 17 15:40:33.667530 2026] [:error] [pid 9152:tid 9211] [client 68.183.24.113:57743] [client 68.183.24.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.24.113, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aeHj8ZJYca8I3TNCwIcPSAAAAFU"]
[Fri Apr 17 15:40:33.677264 2026] [proxy_fcgi:error] [pid 9152:tid 9211] [client 68.183.24.113:57743] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:29:59.965738 2026] [:error] [pid 9263:tid 9280] [client 170.64.140.161:58241] [client 170.64.140.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.140.161, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aeHvhxP68VyHNvj1e57c6QAAAM8"]
[Fri Apr 17 16:29:59.975040 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 170.64.140.161:58241] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 19:50:50.235053 2026] [:error] [pid 34273:tid 34278] [client 136.109.85.253:50337] [client 136.109.85.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.85.253, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeIemmuQDW686mK3dgH2rQAAAYM"]
[Fri Apr 17 19:50:50.245969 2026] [proxy_fcgi:error] [pid 34273:tid 34278] [client 136.109.85.253:50337] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 19:50:53.071991 2026] [:error] [pid 34273:tid 34287] [client 136.109.85.253:50337] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeIenWuQDW686mK3dgH2wgAAAYw"]
[Fri Apr 17 19:50:57.954943 2026] [:error] [pid 9152:tid 9205] [client 136.109.85.253:63110] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeIeoZJYca8I3TNCwIdLPgAAAE8"]
[Fri Apr 17 19:51:00.302309 2026] [:error] [pid 51878:tid 51895] [client 136.109.85.253:59435] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeIepEnQhUtMbw9EsgZuBwAAAQ8"]
[Fri Apr 17 19:51:03.424645 2026] [:error] [pid 9153:tid 9232] [client 136.109.85.253:62042] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeIep-MHGxkTZX3c45f84AAAAI4"]
[Fri Apr 17 19:51:05.407276 2026] [:error] [pid 9153:tid 9233] [client 136.109.85.253:64736] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeIeqeMHGxkTZX3c45f85AAAAI8"]
[Fri Apr 17 19:51:08.410971 2026] [:error] [pid 51878:tid 51887] [client 136.109.85.253:52717] [client 136.109.85.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeIerEnQhUtMbw9EsgZuHQAAAQc"]
[Sat Apr 18 00:12:36.490743 2026] [:error] [pid 59044:tid 59123] [client 20.238.75.27:64605] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJb9AFamkFyEtD_SMGjkQAAAJY"]
[Sat Apr 18 00:12:37.048193 2026] [:error] [pid 59044:tid 59106] [client 20.238.75.27:65302] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJb9QFamkFyEtD_SMGjlAAAAIU"]
[Sat Apr 18 00:12:37.993719 2026] [:error] [pid 59136:tid 59141] [client 20.238.75.27:65348] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJb9SaoiUyiIR3EhLWZXwAAAMI"]
[Sat Apr 18 00:12:39.057253 2026] [:error] [pid 59042:tid 59048] [client 20.238.75.27:65401] [client 20.238.75.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeJb956p5oql0UklEBIdBwAAAAE"]
[Sat Apr 18 05:12:41.800287 2026] [:error] [pid 9863:tid 9890] [client 35.245.182.175:42486] [client 35.245.182.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aeKiSTjjiypiFrTucbL_VgAAABE"]
[Sat Apr 18 17:42:22.041926 2026] [:error] [pid 9865:tid 9944] [client 35.196.11.212:57854] [client 35.196.11.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.11.212, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNR_qzb5knECIY-C-hoWQAAAIc"]
[Sat Apr 18 17:42:22.052052 2026] [proxy_fcgi:error] [pid 9865:tid 9944] [client 35.196.11.212:57854] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 17:42:25.420220 2026] [:error] [pid 9865:tid 9938] [client 35.196.11.212:57854] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 6"] [hostname "quarryspec.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aeNSAazb5knECIY-C-hoYwAAAIE"]
[Sat Apr 18 17:42:25.906539 2026] [:error] [pid 9970:tid 9995] [client 35.196.11.212:55623] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 7"] [hostname "quarryspec.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aeNSASYdRLRhVmaIMx2XCAAAANU"]
[Sat Apr 18 17:42:26.378300 2026] [:error] [pid 13023:tid 13039] [client 35.196.11.212:55701] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeNSAv1e7hG8DAeABB_hBwAAAQ4"]
[Sat Apr 18 17:42:26.868782 2026] [:error] [pid 13023:tid 13044] [client 35.196.11.212:63193] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeNSAv1e7hG8DAeABB_hCgAAARM"]
[Sat Apr 18 17:42:27.341973 2026] [:error] [pid 9863:tid 9887] [client 35.196.11.212:53139] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeNSAzjjiypiFrTucbK3xgAAAA4"]
[Sat Apr 18 17:42:27.766690 2026] [:error] [pid 34237:tid 34251] [client 35.196.11.212:56548] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeNSAxBmX4Wq5a6rxfZjUQAAAUw"]
[Sat Apr 18 17:42:28.236138 2026] [:error] [pid 34288:tid 34304] [client 35.196.11.212:49507] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeNSBOTIiy__PtiLmpnBBgAAAYw"]
[Sat Apr 18 17:42:28.708991 2026] [:error] [pid 13023:tid 13040] [client 35.196.11.212:58368] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeNSBP1e7hG8DAeABB_hDQAAAQ8"]
[Sat Apr 18 17:42:29.219725 2026] [:error] [pid 9970:tid 9988] [client 35.196.11.212:60126] [client 35.196.11.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.196.11.212, counter = 8"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeNSBSYdRLRhVmaIMx2XDAAAAM4"]
[Sat Apr 18 21:36:06.085478 2026] [proxy_fcgi:error] [pid 32678:tid 32724] [client 59.126.168.24:50112] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:36:08.935469 2026] [proxy_fcgi:error] [pid 32677:tid 32688] [client 59.126.168.24:50184] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:56:59.295891 2026] [proxy_fcgi:error] [pid 9865:tid 9955] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:56:59.555463 2026] [proxy_fcgi:error] [pid 9865:tid 9942] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:56:59.878818 2026] [proxy_fcgi:error] [pid 9865:tid 9950] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:00.184735 2026] [proxy_fcgi:error] [pid 9865:tid 9958] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:00.450405 2026] [proxy_fcgi:error] [pid 9865:tid 9948] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:00.711699 2026] [proxy_fcgi:error] [pid 9865:tid 9953] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:00.973113 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:01.253821 2026] [proxy_fcgi:error] [pid 9865:tid 9947] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:01.547248 2026] [proxy_fcgi:error] [pid 9865:tid 9952] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:01.824795 2026] [proxy_fcgi:error] [pid 9865:tid 9939] [client 158.158.124.190:3555] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:57:02.097840 2026] [:error] [pid 9865:tid 9940] [client 158.158.124.190:3555] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "aeONrqzb5knECIY-C-iWTwAAAIM"]
[Sat Apr 18 21:57:04.463564 2026] [:error] [pid 32677:tid 32683] [client 158.158.124.190:3561] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "aeONsBngmUE3LdC-wP7n7gAAAkM"]
[Sat Apr 18 21:57:05.658634 2026] [:error] [pid 9865:tid 9943] [client 158.158.124.190:3602] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "aeONsazb5knECIY-C-iWVQAAAIY"]
[Sat Apr 18 21:57:06.588006 2026] [:error] [pid 9863:tid 9880] [client 158.158.124.190:3600] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/man.php"] [unique_id "aeONsjjjiypiFrTucbLVBwAAAAc"]
[Sat Apr 18 21:57:07.234220 2026] [:error] [pid 34288:tid 34307] [client 158.158.124.190:3566] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeONs-TIiy__PtiLmpnamgAAAY8"]
[Sat Apr 18 21:57:09.364756 2026] [:error] [pid 9865:tid 9947] [client 158.158.124.190:3535] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeONtazb5knECIY-C-iWaQAAAIo"]
[Sat Apr 18 21:57:10.934605 2026] [:error] [pid 34288:tid 34304] [client 158.158.124.190:3522] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeONtuTIiy__PtiLmpnangAAAYw"]
[Sat Apr 18 21:57:12.194275 2026] [:error] [pid 13023:tid 13029] [client 158.158.124.190:3547] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeONuP1e7hG8DAeABB8qBwAAAQQ"]
[Sat Apr 18 21:57:17.761214 2026] [:error] [pid 32677:tid 32701] [client 158.158.124.190:3574] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeONvRngmUE3LdC-wP7oAgAAAlU"]
[Sat Apr 18 21:57:25.322963 2026] [:error] [pid 13023:tid 13042] [client 158.158.124.190:3520] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeONxf1e7hG8DAeABB8qLgAAARE"]
[Sat Apr 18 21:57:26.351154 2026] [:error] [pid 9865:tid 9956] [client 158.158.124.190:3540] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeONxqzb5knECIY-C-iWmwAAAJM"]
[Sat Apr 18 21:57:27.678981 2026] [:error] [pid 13023:tid 13036] [client 158.158.124.190:3599] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeONx_1e7hG8DAeABB8qOQAAAQs"]
[Sat Apr 18 21:57:28.996898 2026] [:error] [pid 9970:tid 9987] [client 158.158.124.190:3551] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeONyCYdRLRhVmaIMx3OfwAAAM0"]
[Sat Apr 18 21:57:32.113874 2026] [:error] [pid 9970:tid 9996] [client 158.158.124.190:3548] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeONzCYdRLRhVmaIMx3OigAAANY"]
[Sat Apr 18 21:57:33.171948 2026] [:error] [pid 9970:tid 9982] [client 158.158.124.190:3598] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeONzSYdRLRhVmaIMx3OjgAAAMg"]
[Sat Apr 18 21:57:35.334994 2026] [:error] [pid 13023:tid 13047] [client 158.158.124.190:3588] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeONz_1e7hG8DAeABB8qWwAAARY"]
[Sat Apr 18 21:57:37.244645 2026] [:error] [pid 32647:tid 32674] [client 158.158.124.190:3572] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeON0UkxooM0iRo6e54ruAAAAhg"]
[Sat Apr 18 21:57:38.201927 2026] [:error] [pid 32647:tid 32658] [client 158.158.124.190:3523] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeON0kkxooM0iRo6e54rugAAAgg"]
[Sat Apr 18 21:57:38.942863 2026] [:error] [pid 9865:tid 9956] [client 158.158.124.190:3534] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeON0qzb5knECIY-C-iWpwAAAJM"]
[Sat Apr 18 21:57:40.397016 2026] [:error] [pid 9865:tid 9945] [client 158.158.124.190:3581] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeON1Kzb5knECIY-C-iWrgAAAIg"]
[Sat Apr 18 21:57:43.864715 2026] [:error] [pid 13023:tid 13045] [client 158.158.124.190:3587] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeON1_1e7hG8DAeABB8qjAAAARQ"]
[Sat Apr 18 21:57:44.807371 2026] [:error] [pid 34288:tid 34311] [client 158.158.124.190:3534] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeON2OTIiy__PtiLmpnapAAAAZM"]
[Sat Apr 18 21:57:49.649367 2026] [:error] [pid 34288:tid 34299] [client 158.158.124.190:3533] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeON3eTIiy__PtiLmpnapgAAAYc"]
[Sat Apr 18 21:57:51.985006 2026] [:error] [pid 9865:tid 9953] [client 158.158.124.190:3573] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeON36zb5knECIY-C-iWuwAAAJA"]
[Sat Apr 18 21:57:53.987126 2026] [:error] [pid 9970:tid 9990] [client 158.158.124.190:3563] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeON4SYdRLRhVmaIMx3OtwAAANA"]
[Sat Apr 18 21:57:55.930124 2026] [:error] [pid 9970:tid 9974] [client 158.158.124.190:3536] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeON4yYdRLRhVmaIMx3OvgAAAMA"]
[Sat Apr 18 21:58:04.187766 2026] [proxy_fcgi:error] [pid 32647:tid 32661] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:04.434712 2026] [proxy_fcgi:error] [pid 32647:tid 32664] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:04.676910 2026] [proxy_fcgi:error] [pid 32647:tid 32660] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:04.919263 2026] [proxy_fcgi:error] [pid 32647:tid 32674] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:05.182412 2026] [proxy_fcgi:error] [pid 32647:tid 32670] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:05.424372 2026] [proxy_fcgi:error] [pid 32647:tid 32671] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:05.677833 2026] [proxy_fcgi:error] [pid 32647:tid 32650] [client 158.158.124.190:3592] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:05.932879 2026] [:error] [pid 32647:tid 32653] [client 158.158.124.190:3592] [client 158.158.124.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aeON7UkxooM0iRo6e54rzAAAAgM"]
[Sat Apr 18 21:58:11.673070 2026] [proxy_fcgi:error] [pid 32647:tid 32662] [client 158.158.124.190:4035] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:12.185997 2026] [proxy_fcgi:error] [pid 32647:tid 32663] [client 158.158.124.190:4035] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:12.461009 2026] [proxy_fcgi:error] [pid 32647:tid 32654] [client 158.158.124.190:4035] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:58:12.716490 2026] [:error] [pid 32647:tid 32655] [client 158.158.124.190:4035] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aeON9EkxooM0iRo6e54r0QAAAgU"]
[Sat Apr 18 21:58:29.708337 2026] [:error] [pid 32678:tid 32725] [client 158.158.124.190:3527] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOOBRUlAXU_ZWUu5y8GWwAAApI"]
[Sat Apr 18 21:58:31.191015 2026] [:error] [pid 9970:tid 9977] [client 158.158.124.190:3560] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOOByYdRLRhVmaIMx3O6gAAAMM"]
[Sat Apr 18 21:58:32.054031 2026] [:error] [pid 9865:tid 9937] [client 158.158.124.190:3594] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOOCKzb5knECIY-C-iWyQAAAIA"]
[Sat Apr 18 21:58:33.308389 2026] [:error] [pid 34290:tid 34325] [client 158.158.124.190:3521] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeOOCRqX6WpmmAXOBi8nsQAAAcY"]
[Sat Apr 18 21:58:37.712190 2026] [:error] [pid 9865:tid 9961] [client 158.158.124.190:3558] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeOODazb5knECIY-C-iW2AAAAJg"]
[Sat Apr 18 21:58:40.111931 2026] [:error] [pid 13023:tid 13042] [client 158.158.124.190:3539] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeOOEP1e7hG8DAeABB8qxgAAARE"]
[Sat Apr 18 21:58:42.001631 2026] [:error] [pid 9970:tid 9976] [client 158.158.124.190:4055] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeOOEiYdRLRhVmaIMx3O_gAAAMI"]
[Sat Apr 18 21:58:45.880134 2026] [:error] [pid 13023:tid 13038] [client 158.158.124.190:3546] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeOOFf1e7hG8DAeABB8q1AAAAQ0"]
[Sat Apr 18 21:58:47.368786 2026] [:error] [pid 9970:tid 9998] [client 158.158.124.190:3596] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "aeOOFyYdRLRhVmaIMx3PBgAAANg"]
[Sat Apr 18 21:58:48.557802 2026] [:error] [pid 9970:tid 9983] [client 158.158.124.190:3553] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "aeOOGCYdRLRhVmaIMx3PCgAAAMk"]
[Sat Apr 18 21:58:50.100140 2026] [:error] [pid 9863:tid 9885] [client 158.158.124.190:3562] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "aeOOGjjjiypiFrTucbLVIQAAAAw"]
[Sat Apr 18 21:58:52.272933 2026] [:error] [pid 9864:tid 9916] [client 158.158.124.190:3579] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.php"] [unique_id "aeOOHICFeowknfXHM7kq5QAAAEo"]
[Sat Apr 18 21:58:57.074721 2026] [:error] [pid 13023:tid 13049] [client 158.158.124.190:3545] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeOOIf1e7hG8DAeABB8q4AAAARg"]
[Sat Apr 18 21:58:58.013757 2026] [:error] [pid 32647:tid 32650] [client 158.158.124.190:4043] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeOOIkkxooM0iRo6e54r5QAAAgA"]
[Sat Apr 18 21:58:59.492775 2026] [:error] [pid 32678:tid 32731] [client 158.158.124.190:3607] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeOOIxUlAXU_ZWUu5y8GfgAAApg"]
[Sat Apr 18 21:59:00.378540 2026] [:error] [pid 9970:tid 9992] [client 158.158.124.190:3552] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeOOJCYdRLRhVmaIMx3PJgAAANI"]
[Sat Apr 18 21:59:02.085884 2026] [:error] [pid 9864:tid 9929] [client 158.158.124.190:3525] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeOOJoCFeowknfXHM7kq6QAAAFc"]
[Sat Apr 18 21:59:04.914308 2026] [:error] [pid 9970:tid 9983] [client 158.158.124.190:3575] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeOOKCYdRLRhVmaIMx3PLAAAAMk"]
[Sat Apr 18 21:59:05.934465 2026] [:error] [pid 9864:tid 9915] [client 158.158.124.190:3634] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeOOKYCFeowknfXHM7kq7gAAAEk"]
[Sat Apr 18 21:59:06.598575 2026] [:error] [pid 9864:tid 9914] [client 158.158.124.190:3565] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeOOKoCFeowknfXHM7kq8QAAAEg"]
[Sat Apr 18 21:59:07.547529 2026] [:error] [pid 9970:tid 9987] [client 158.158.124.190:3580] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeOOKyYdRLRhVmaIMx3POwAAAM0"]
[Sat Apr 18 21:59:08.271446 2026] [:error] [pid 9864:tid 9914] [client 158.158.124.190:3565] [client 158.158.124.190] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.51_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeOOKoCFeowknfXHM7kq8QAAAEg"]
[Sat Apr 18 21:59:08.599488 2026] [:error] [pid 13023:tid 13030] [client 158.158.124.190:4037] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeOOLP1e7hG8DAeABB8q-AAAAQU"]
[Sat Apr 18 21:59:09.289993 2026] [:error] [pid 9970:tid 9994] [client 158.158.124.190:3631] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeOOLSYdRLRhVmaIMx3PPgAAANQ"]
[Sat Apr 18 21:59:10.371306 2026] [:error] [pid 9865:tid 9941] [client 158.158.124.190:3616] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeOOLqzb5knECIY-C-iW8QAAAIQ"]
[Sat Apr 18 21:59:14.791678 2026] [proxy_fcgi:error] [pid 13023:tid 13036] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:15.035645 2026] [proxy_fcgi:error] [pid 13023:tid 13025] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:15.278594 2026] [proxy_fcgi:error] [pid 13023:tid 13026] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:15.521823 2026] [proxy_fcgi:error] [pid 13023:tid 13034] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:15.769145 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:16.255663 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:16.500100 2026] [proxy_fcgi:error] [pid 13023:tid 13043] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:16.894580 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:17.995556 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 158.158.124.190:3582] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:59:18.351671 2026] [:error] [pid 13023:tid 13027] [client 158.158.124.190:3582] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOONv1e7hG8DAeABB8rIgAAAQI"]
[Sat Apr 18 21:59:24.103570 2026] [:error] [pid 32677:tid 32702] [client 158.158.124.190:3569] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOOPBngmUE3LdC-wP7odgAAAlY"]
[Sat Apr 18 21:59:32.849116 2026] [:error] [pid 9970:tid 9985] [client 158.158.124.190:3578] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeOORCYdRLRhVmaIMx3PUAAAAMs"]
[Sat Apr 18 21:59:33.921268 2026] [:error] [pid 9863:tid 9887] [client 158.158.124.190:3577] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeOORTjjiypiFrTucbLVKwAAAA4"]
[Sat Apr 18 21:59:35.455719 2026] [:error] [pid 9865:tid 9942] [client 158.158.124.190:3647] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeOOR6zb5knECIY-C-iXFAAAAIU"]
[Sat Apr 18 21:59:37.006010 2026] [:error] [pid 34290:tid 34338] [client 158.158.124.190:4034] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeOOSRqX6WpmmAXOBi8nxgAAAdM"]
[Sat Apr 18 21:59:39.248634 2026] [:error] [pid 34290:tid 34335] [client 158.158.124.190:3559] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeOOSxqX6WpmmAXOBi8nxwAAAdA"]
[Sat Apr 18 21:59:40.412061 2026] [:error] [pid 32678:tid 32717] [client 158.158.124.190:3638] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aeOOTBUlAXU_ZWUu5y8GpQAAAoo"]
[Sat Apr 18 21:59:41.771407 2026] [:error] [pid 32647:tid 32651] [client 158.158.124.190:3532] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aeOOTUkxooM0iRo6e54r_wAAAgE"]
[Sat Apr 18 21:59:43.358078 2026] [:error] [pid 9865:tid 9951] [client 158.158.124.190:3567] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aeOOT6zb5knECIY-C-iXJAAAAI4"]
[Sat Apr 18 21:59:44.256628 2026] [:error] [pid 32677:tid 32702] [client 158.158.124.190:3583] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aeOOUBngmUE3LdC-wP7ofwAAAlY"]
[Sat Apr 18 21:59:45.040742 2026] [:error] [pid 13023:tid 13037] [client 158.158.124.190:3556] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeOOUf1e7hG8DAeABB8rWgAAAQw"]
[Sat Apr 18 21:59:46.211924 2026] [:error] [pid 32678:tid 32716] [client 158.158.124.190:3568] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeOOUhUlAXU_ZWUu5y8GqwAAAok"]
[Sat Apr 18 21:59:46.842923 2026] [:error] [pid 13023:tid 13045] [client 158.158.124.190:3630] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeOOUv1e7hG8DAeABB8rXAAAARQ"]
[Sat Apr 18 21:59:47.477061 2026] [:error] [pid 13023:tid 13030] [client 158.158.124.190:3595] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeOOU_1e7hG8DAeABB8rXgAAAQU"]
[Sat Apr 18 21:59:48.241916 2026] [:error] [pid 13023:tid 13046] [client 158.158.124.190:3554] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeOOVP1e7hG8DAeABB8rYgAAARU"]
[Sat Apr 18 21:59:48.989772 2026] [:error] [pid 32678:tid 32721] [client 158.158.124.190:4050] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeOOVBUlAXU_ZWUu5y8GrwAAAo4"]
[Sat Apr 18 21:59:51.353467 2026] [:error] [pid 32678:tid 32730] [client 158.158.124.190:3601] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeOOVxUlAXU_ZWUu5y8GtQAAApc"]
[Sat Apr 18 21:59:52.120164 2026] [:error] [pid 32647:tid 32664] [client 158.158.124.190:3576] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeOOWEkxooM0iRo6e54sCgAAAg4"]
[Sat Apr 18 21:59:53.119099 2026] [:error] [pid 32647:tid 32670] [client 158.158.124.190:3604] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeOOWUkxooM0iRo6e54sDAAAAhQ"]
[Sat Apr 18 21:59:53.882250 2026] [:error] [pid 32678:tid 32713] [client 158.158.124.190:3557] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeOOWRUlAXU_ZWUu5y8GtwAAAoY"]
[Sat Apr 18 21:59:54.850128 2026] [:error] [pid 32647:tid 32653] [client 158.158.124.190:4036] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeOOWkkxooM0iRo6e54sDgAAAgM"]
[Sat Apr 18 21:59:56.013439 2026] [:error] [pid 9863:tid 9888] [client 158.158.124.190:3528] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeOOXDjjiypiFrTucbLVNQAAAA8"]
[Sat Apr 18 21:59:56.592303 2026] [:error] [pid 32678:tid 32721] [client 158.158.124.190:3609] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeOOXBUlAXU_ZWUu5y8GugAAAo4"]
[Sat Apr 18 21:59:57.744793 2026] [:error] [pid 32677:tid 32695] [client 158.158.124.190:3639] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeOOXRngmUE3LdC-wP7ohgAAAk8"]
[Sat Apr 18 21:59:58.773032 2026] [:error] [pid 9970:tid 9987] [client 158.158.124.190:3633] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeOOXiYdRLRhVmaIMx3PYAAAAM0"]
[Sat Apr 18 22:00:00.670167 2026] [:error] [pid 32677:tid 32703] [client 158.158.124.190:3614] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeOOYBngmUE3LdC-wP7oiwAAAlc"]
[Sat Apr 18 22:00:02.194058 2026] [:error] [pid 9865:tid 9937] [client 158.158.124.190:3625] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeOOYqzb5knECIY-C-iXKAAAAIA"]
[Sat Apr 18 22:00:07.753825 2026] [:error] [pid 34288:tid 34305] [client 158.158.124.190:3615] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeOOZ-TIiy__PtiLmpna1gAAAY0"]
[Sat Apr 18 22:00:21.508680 2026] [proxy_fcgi:error] [pid 9970:tid 9987] [client 158.158.124.190:3533] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:21.754478 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 158.158.124.190:3533] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:21.994148 2026] [:error] [pid 9970:tid 9982] [client 158.158.124.190:3533] [client 158.158.124.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeOOdSYdRLRhVmaIMx3PbAAAAMg"]
[Sat Apr 18 22:00:23.925795 2026] [proxy_fcgi:error] [pid 32678:tid 32717] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:24.180566 2026] [proxy_fcgi:error] [pid 32678:tid 32708] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:24.497541 2026] [proxy_fcgi:error] [pid 32678:tid 32725] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:24.741785 2026] [proxy_fcgi:error] [pid 32678:tid 32713] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:25.329249 2026] [proxy_fcgi:error] [pid 32678:tid 32709] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:25.604666 2026] [proxy_fcgi:error] [pid 32678:tid 32714] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:25.859048 2026] [proxy_fcgi:error] [pid 32678:tid 32731] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:26.103924 2026] [proxy_fcgi:error] [pid 32678:tid 32721] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:26.374629 2026] [proxy_fcgi:error] [pid 32678:tid 32715] [client 158.158.124.190:3589] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:00:26.626291 2026] [:error] [pid 32678:tid 32720] [client 158.158.124.190:3589] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeOOehUlAXU_ZWUu5y8G2wAAAo0"]
[Sat Apr 18 22:00:27.309818 2026] [:error] [pid 13023:tid 13034] [client 158.158.124.190:4080] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeOOe_1e7hG8DAeABB8rhQAAAQk"]
[Sat Apr 18 22:00:28.246408 2026] [:error] [pid 13023:tid 13044] [client 158.158.124.190:3549] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeOOfP1e7hG8DAeABB8rjQAAARM"]
[Sat Apr 18 22:00:28.883017 2026] [:error] [pid 9865:tid 9940] [client 158.158.124.190:3542] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aeOOfKzb5knECIY-C-iXLwAAAIM"]
[Sat Apr 18 22:00:29.988591 2026] [:error] [pid 13023:tid 13028] [client 158.158.124.190:4073] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aeOOff1e7hG8DAeABB8rlQAAAQM"]
[Sat Apr 18 22:00:31.179062 2026] [:error] [pid 9865:tid 9943] [client 158.158.124.190:4067] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aeOOf6zb5knECIY-C-iXMAAAAIY"]
[Sat Apr 18 22:00:31.926121 2026] [:error] [pid 13023:tid 13047] [client 158.158.124.190:3537] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aeOOf_1e7hG8DAeABB8rmgAAARY"]
[Sat Apr 18 22:00:37.958212 2026] [:error] [pid 9970:tid 9983] [client 158.158.124.190:3627] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aeOOhSYdRLRhVmaIMx3PegAAAMk"]
[Sat Apr 18 22:00:40.010712 2026] [:error] [pid 34290:tid 34320] [client 158.158.124.190:4054] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeOOiBqX6WpmmAXOBi8n5gAAAcE"]
[Sat Apr 18 22:00:42.353561 2026] [:error] [pid 32678:tid 32707] [client 158.158.124.190:4048] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeOOihUlAXU_ZWUu5y8G5AAAAoA"]
[Sat Apr 18 22:00:44.675183 2026] [:error] [pid 9865:tid 9938] [client 158.158.124.190:3629] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeOOjKzb5knECIY-C-iXRgAAAIE"]
[Sat Apr 18 22:00:48.021657 2026] [:error] [pid 32678:tid 32717] [client 158.158.124.190:4063] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aeOOkBUlAXU_ZWUu5y8G9QAAAoo"]
[Sat Apr 18 22:00:49.585062 2026] [:error] [pid 32678:tid 32712] [client 158.158.124.190:3571] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeOOkRUlAXU_ZWUu5y8HAQAAAoU"]
[Sat Apr 18 22:00:51.398809 2026] [:error] [pid 32677:tid 32695] [client 158.158.124.190:3538] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeOOkxngmUE3LdC-wP7onAAAAk8"]
[Sat Apr 18 22:00:52.995819 2026] [:error] [pid 9865:tid 9951] [client 158.158.124.190:3526] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeOOlKzb5knECIY-C-iXSgAAAI4"]
[Sat Apr 18 22:00:55.100276 2026] [:error] [pid 32677:tid 32685] [client 158.158.124.190:3624] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeOOlxngmUE3LdC-wP7ongAAAkU"]
[Sat Apr 18 22:00:56.326982 2026] [:error] [pid 9865:tid 9961] [client 158.158.124.190:3628] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "aeOOmKzb5knECIY-C-iXTgAAAJg"]
[Sat Apr 18 22:00:57.367621 2026] [:error] [pid 9864:tid 9925] [client 158.158.124.190:3550] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "aeOOmYCFeowknfXHM7krEwAAAFM"]
[Sat Apr 18 22:01:00.182569 2026] [:error] [pid 34288:tid 34316] [client 158.158.124.190:3543] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "aeOOnOTIiy__PtiLmpna2gAAAZg"]
[Sat Apr 18 22:01:01.640103 2026] [:error] [pid 9863:tid 9888] [client 158.158.124.190:4047] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xs.php"] [unique_id "aeOOnTjjiypiFrTucbLVRgAAAA8"]
[Sat Apr 18 22:01:02.882109 2026] [:error] [pid 9970:tid 9988] [client 158.158.124.190:3637] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeOOniYdRLRhVmaIMx3PhQAAAM4"]
[Sat Apr 18 22:01:04.844870 2026] [:error] [pid 9970:tid 9980] [client 158.158.124.190:3640] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeOOoCYdRLRhVmaIMx3PhgAAAMY"]
[Sat Apr 18 22:01:07.455935 2026] [:error] [pid 9970:tid 9983] [client 158.158.124.190:3619] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeOOoyYdRLRhVmaIMx3PjAAAAMk"]
[Sat Apr 18 22:01:08.473552 2026] [:error] [pid 32677:tid 32693] [client 158.158.124.190:3610] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/img.php"] [unique_id "aeOOpBngmUE3LdC-wP7opQAAAk0"]
[Sat Apr 18 22:01:09.908379 2026] [:error] [pid 9864:tid 9920] [client 158.158.124.190:4084] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeOOpYCFeowknfXHM7krGgAAAE4"]
[Sat Apr 18 22:01:11.089281 2026] [:error] [pid 9864:tid 9905] [client 158.158.124.190:4066] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeOOp4CFeowknfXHM7krGwAAAEA"]
[Sat Apr 18 22:01:12.553011 2026] [:error] [pid 9863:tid 9873] [client 158.158.124.190:3555] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeOOqDjjiypiFrTucbLVSwAAAAA"]
[Sat Apr 18 22:01:13.713008 2026] [:error] [pid 34290:tid 34326] [client 158.158.124.190:3646] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeOOqRqX6WpmmAXOBi8n8AAAAcc"]
[Sat Apr 18 22:01:25.423411 2026] [:error] [pid 13023:tid 13032] [client 158.158.124.190:4045] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/index.php"] [unique_id "aeOOtf1e7hG8DAeABB8rxQAAAQc"]
[Sat Apr 18 22:01:26.529110 2026] [proxy_fcgi:error] [pid 32647:tid 32653] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:26.771794 2026] [proxy_fcgi:error] [pid 32647:tid 32662] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:27.115483 2026] [proxy_fcgi:error] [pid 32647:tid 32666] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:27.359132 2026] [proxy_fcgi:error] [pid 32647:tid 32655] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:27.665967 2026] [proxy_fcgi:error] [pid 32647:tid 32652] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:27.932147 2026] [proxy_fcgi:error] [pid 32647:tid 32668] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:28.175491 2026] [proxy_fcgi:error] [pid 32647:tid 32654] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:28.418385 2026] [proxy_fcgi:error] [pid 32647:tid 32669] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:28.662121 2026] [proxy_fcgi:error] [pid 32647:tid 32667] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:28.976659 2026] [proxy_fcgi:error] [pid 32647:tid 32660] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:29.289104 2026] [proxy_fcgi:error] [pid 32647:tid 32664] [client 158.158.124.190:3590] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:01:29.659350 2026] [:error] [pid 32647:tid 32661] [client 158.158.124.190:3590] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aeOOuUkxooM0iRo6e54sOwAAAgs"]
[Sat Apr 18 22:01:30.535632 2026] [:error] [pid 9970:tid 9988] [client 158.158.124.190:3643] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aeOOuiYdRLRhVmaIMx3PogAAAM4"]
[Sat Apr 18 22:01:31.471643 2026] [:error] [pid 13023:tid 13026] [client 158.158.124.190:4069] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aeOOu_1e7hG8DAeABB8rzQAAAQE"]
[Sat Apr 18 22:01:32.431402 2026] [:error] [pid 13023:tid 13047] [client 158.158.124.190:3612] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aeOOvP1e7hG8DAeABB8r0wAAARY"]
[Sat Apr 18 22:01:33.534194 2026] [:error] [pid 34290:tid 34334] [client 158.158.124.190:3641] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aeOOvRqX6WpmmAXOBi8oAQAAAc8"]
[Sat Apr 18 22:01:34.360004 2026] [:error] [pid 13023:tid 13034] [client 158.158.124.190:3531] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aeOOvv1e7hG8DAeABB8r5wAAAQk"]
[Sat Apr 18 22:01:36.167042 2026] [:error] [pid 9970:tid 9993] [client 158.158.124.190:3608] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aeOOwCYdRLRhVmaIMx3PqgAAANM"]
[Sat Apr 18 22:01:37.777206 2026] [:error] [pid 32677:tid 32683] [client 158.158.124.190:3642] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aeOOwRngmUE3LdC-wP7owgAAAkM"]
[Sat Apr 18 22:01:38.778691 2026] [:error] [pid 32677:tid 32701] [client 158.158.124.190:4051] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aeOOwhngmUE3LdC-wP7oxgAAAlU"]
[Sat Apr 18 22:01:39.641780 2026] [:error] [pid 34288:tid 34309] [client 158.158.124.190:4057] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aeOOw-TIiy__PtiLmpna4AAAAZE"]
[Sat Apr 18 22:01:41.224190 2026] [:error] [pid 9863:tid 9892] [client 158.158.124.190:4076] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aeOOxTjjiypiFrTucbLVmwAAABM"]
[Sat Apr 18 22:01:42.022455 2026] [:error] [pid 9863:tid 9885] [client 158.158.124.190:3603] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aeOOxjjjiypiFrTucbLVngAAAAw"]
[Sat Apr 18 22:01:42.768577 2026] [:error] [pid 13023:tid 13028] [client 158.158.124.190:4087] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "aeOOxv1e7hG8DAeABB8r7wAAAQM"]
[Sat Apr 18 22:01:45.430332 2026] [:error] [pid 9864:tid 9909] [client 158.158.124.190:4058] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "aeOOyYCFeowknfXHM7krLAAAAEQ"]
[Sat Apr 18 22:01:46.896851 2026] [:error] [pid 32647:tid 32673] [client 158.158.124.190:3626] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "aeOOykkxooM0iRo6e54sRwAAAhc"]
[Sat Apr 18 22:01:49.303837 2026] [:error] [pid 34288:tid 34297] [client 158.158.124.190:3991] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pp.php"] [unique_id "aeOOzeTIiy__PtiLmpna4wAAAYU"]
[Sat Apr 18 22:01:51.118507 2026] [:error] [pid 34290:tid 34337] [client 158.158.124.190:3602] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOOzxqX6WpmmAXOBi8oDgAAAdI"]
[Sat Apr 18 22:01:53.671684 2026] [:error] [pid 9970:tid 9989] [client 158.158.124.190:3540] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOO0SYdRLRhVmaIMx3PtgAAAM8"]
[Sat Apr 18 22:01:56.035589 2026] [:error] [pid 9864:tid 9929] [client 158.158.124.190:3598] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOO1ICFeowknfXHM7krPwAAAFc"]
[Sat Apr 18 22:02:01.133958 2026] [:error] [pid 32678:tid 32717] [client 158.158.124.190:3636] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOO2RUlAXU_ZWUu5y8HdgAAAoo"]
[Sat Apr 18 22:02:01.800769 2026] [:error] [pid 9865:tid 9942] [client 158.158.124.190:3982] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "aeOO2azb5knECIY-C-iXcwAAAIU"]
[Sat Apr 18 22:02:03.509121 2026] [:error] [pid 34290:tid 34326] [client 158.158.124.190:3585] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "aeOO2xqX6WpmmAXOBi8oFQAAAcc"]
[Sat Apr 18 22:02:06.845055 2026] [:error] [pid 32647:tid 32663] [client 158.158.124.190:3541] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "aeOO3kkxooM0iRo6e54sWQAAAg0"]
[Sat Apr 18 22:02:07.742288 2026] [:error] [pid 34290:tid 34329] [client 158.158.124.190:3548] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son1.php"] [unique_id "aeOO3xqX6WpmmAXOBi8oGAAAAco"]
[Sat Apr 18 22:02:08.506048 2026] [:error] [pid 32678:tid 32724] [client 158.158.124.190:3599] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeOO4BUlAXU_ZWUu5y8HeAAAApE"]
[Sat Apr 18 22:02:09.517128 2026] [:error] [pid 9865:tid 9954] [client 158.158.124.190:4046] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeOO4azb5knECIY-C-iXdwAAAJE"]
[Sat Apr 18 22:02:10.654624 2026] [:error] [pid 32677:tid 32684] [client 158.158.124.190:3617] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeOO4hngmUE3LdC-wP7o1AAAAkQ"]
[Sat Apr 18 22:02:11.593292 2026] [:error] [pid 9864:tid 9909] [client 158.158.124.190:3570] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeOO44CFeowknfXHM7krdQAAAEQ"]
[Sat Apr 18 22:02:12.567031 2026] [:error] [pid 9864:tid 9916] [client 158.158.124.190:4053] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeOO5ICFeowknfXHM7kreAAAAEo"]
[Sat Apr 18 22:02:14.356931 2026] [:error] [pid 13023:tid 13045] [client 158.158.124.190:3564] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeOO5v1e7hG8DAeABB8sFwAAARQ"]
[Sat Apr 18 22:02:15.209932 2026] [:error] [pid 13023:tid 13036] [client 158.158.124.190:4000] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeOO5_1e7hG8DAeABB8sGQAAAQs"]
[Sat Apr 18 22:02:15.892589 2026] [:error] [pid 13023:tid 13039] [client 158.158.124.190:3983] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeOO5_1e7hG8DAeABB8sHQAAAQ4"]
[Sat Apr 18 22:02:16.761967 2026] [:error] [pid 13023:tid 13049] [client 158.158.124.190:4074] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeOO6P1e7hG8DAeABB8sIQAAARg"]
[Sat Apr 18 22:02:17.806485 2026] [:error] [pid 13023:tid 13025] [client 158.158.124.190:4068] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeOO6f1e7hG8DAeABB8sJAAAAQA"]
[Sat Apr 18 22:02:18.523272 2026] [:error] [pid 9865:tid 9961] [client 158.158.124.190:4049] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeOO6qzb5knECIY-C-iXgAAAAJg"]
[Sat Apr 18 22:02:19.049830 2026] [:error] [pid 13023:tid 13042] [client 158.158.124.190:4079] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeOO6_1e7hG8DAeABB8sKgAAARE"]
[Sat Apr 18 22:02:19.887039 2026] [:error] [pid 9970:tid 9993] [client 158.158.124.190:3618] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeOO6yYdRLRhVmaIMx3P9gAAANM"]
[Sat Apr 18 22:02:26.414294 2026] [:error] [pid 13023:tid 13036] [client 158.158.124.190:3591] [client 158.158.124.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeOO8v1e7hG8DAeABB8sLAAAAQs"]
[Sat Apr 18 22:02:31.391258 2026] [proxy_fcgi:error] [pid 13023:tid 13043] [client 158.158.124.190:3563] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:02:31.671591 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 158.158.124.190:3563] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 22:02:31.931445 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 158.158.124.190:3563] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:02.665112 2026] [proxy_fcgi:error] [pid 32166:tid 32219] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:02.911474 2026] [proxy_fcgi:error] [pid 32166:tid 32215] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:03.164614 2026] [proxy_fcgi:error] [pid 32166:tid 32200] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:03.510398 2026] [proxy_fcgi:error] [pid 32166:tid 32222] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:03.761815 2026] [proxy_fcgi:error] [pid 32166:tid 32204] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:04.017714 2026] [proxy_fcgi:error] [pid 32166:tid 32198] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:04.254824 2026] [proxy_fcgi:error] [pid 32166:tid 32207] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:04.541816 2026] [proxy_fcgi:error] [pid 32166:tid 32217] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:04.867575 2026] [proxy_fcgi:error] [pid 32166:tid 32221] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:05.151733 2026] [proxy_fcgi:error] [pid 32166:tid 32220] [client 72.146.12.65:49441] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:54:05.411555 2026] [:error] [pid 32166:tid 32213] [client 72.146.12.65:49441] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "aePFPZCHNkWwdiZnafLNqAAAAE8"]
[Sun Apr 19 01:54:05.912418 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:49386] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "aePFPX4Zz-rubR1wiZ-uDgAAANc"]
[Sun Apr 19 01:54:06.764012 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:38400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "aePFPkyD4Jm27Mb3NJh8gQAAAIQ"]
[Sun Apr 19 01:54:07.277707 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:38412] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eursi.php"] [unique_id "aePFP0yD4Jm27Mb3NJh8hAAAAIU"]
[Sun Apr 19 01:54:07.807106 2026] [:error] [pid 33517:tid 33537] [client 72.146.12.65:38431] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gkojz.php"] [unique_id "aePFP34Zz-rubR1wiZ-uEAAAANI"]
[Sun Apr 19 01:54:08.369712 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:38423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gkojz.php"] [unique_id "aePFQHFWunkyacYqsD05uQAAAVg"]
[Sun Apr 19 01:54:08.922921 2026] [:error] [pid 33517:tid 33520] [client 72.146.12.65:49384] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gkojz.php"] [unique_id "aePFQH4Zz-rubR1wiZ-uEgAAAME"]
[Sun Apr 19 01:54:09.397597 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:49398] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gkojz.php"] [unique_id "aePFQUyD4Jm27Mb3NJh8iQAAAIM"]
[Sun Apr 19 01:54:09.934713 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:49424] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/isvqf.php"] [unique_id "aePFQeXl4Yc-Lt5fJ9igKQAAAQs"]
[Sun Apr 19 01:54:10.591146 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:38402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/isvqf.php"] [unique_id "aePFQuXl4Yc-Lt5fJ9igKwAAAQ8"]
[Sun Apr 19 01:54:11.347417 2026] [:error] [pid 32252:tid 32268] [client 72.146.12.65:49403] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/isvqf.php"] [unique_id "aePFQ-Xl4Yc-Lt5fJ9igLAAAAQ4"]
[Sun Apr 19 01:54:11.873446 2026] [:error] [pid 32166:tid 32222] [client 72.146.12.65:38481] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/isvqf.php"] [unique_id "aePFQ5CHNkWwdiZnafLNqwAAAFg"]
[Sun Apr 19 01:54:12.365041 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:38441] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ppxhp.php"] [unique_id "aePFREyD4Jm27Mb3NJh8jAAAAJg"]
[Sun Apr 19 01:54:12.837887 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:38505] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ppxhp.php"] [unique_id "aePFREH3ayszMLZYflv3FAAAAYw"]
[Sun Apr 19 01:54:13.412590 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:49364] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ppxhp.php"] [unique_id "aePFRUyD4Jm27Mb3NJh8jgAAAJM"]
[Sun Apr 19 01:54:14.126604 2026] [:error] [pid 32252:tid 32263] [client 72.146.12.65:38486] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ppxhp.php"] [unique_id "aePFRuXl4Yc-Lt5fJ9igMwAAAQk"]
[Sun Apr 19 01:54:14.666945 2026] [:error] [pid 32165:tid 32186] [client 72.146.12.65:38430] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whtrq.php"] [unique_id "aePFRqe2vKwEk_N0Brb21wAAABE"]
[Sun Apr 19 01:54:15.384816 2026] [:error] [pid 32252:tid 32256] [client 72.146.12.65:49396] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whtrq.php"] [unique_id "aePFR-Xl4Yc-Lt5fJ9igOAAAAQI"]
[Sun Apr 19 01:54:15.913279 2026] [:error] [pid 41277:tid 41280] [client 72.146.12.65:38502] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whtrq.php"] [unique_id "aePFR0H3ayszMLZYflv3GwAAAYE"]
[Sun Apr 19 01:54:16.388542 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:24070] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/whtrq.php"] [unique_id "aePFSEyD4Jm27Mb3NJh8kwAAAJQ"]
[Sun Apr 19 01:54:17.650682 2026] [:error] [pid 32165:tid 32181] [client 72.146.12.65:49445] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "aePFSae2vKwEk_N0Brb22gAAAAw"]
[Sun Apr 19 01:54:18.326832 2026] [:error] [pid 32252:tid 32278] [client 72.146.12.65:38483] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "aePFSuXl4Yc-Lt5fJ9igPgAAARg"]
[Sun Apr 19 01:54:18.844614 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:38518] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "aePFSkyD4Jm27Mb3NJh8mAAAAIU"]
[Sun Apr 19 01:54:19.419887 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:38504] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rkiea.php"] [unique_id "aePFS0yD4Jm27Mb3NJh8mgAAAJE"]
[Sun Apr 19 01:54:20.196079 2026] [:error] [pid 41277:tid 41281] [client 72.146.12.65:49437] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aePFTEH3ayszMLZYflv3IAAAAYI"]
[Sun Apr 19 01:54:20.796132 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:38474] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aePFTEyD4Jm27Mb3NJh8oAAAAIE"]
[Sun Apr 19 01:54:21.335775 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:38415] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aePFTXFWunkyacYqsD05ygAAAUY"]
[Sun Apr 19 01:54:21.971222 2026] [:error] [pid 32252:tid 32261] [client 72.146.12.65:49417] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckk.php"] [unique_id "aePFTeXl4Yc-Lt5fJ9igQwAAAQc"]
[Sun Apr 19 01:54:22.478717 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:49429] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePFTkH3ayszMLZYflv3JgAAAY0"]
[Sun Apr 19 01:54:23.455444 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:38472] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePFT0yD4Jm27Mb3NJh8owAAAJU"]
[Sun Apr 19 01:54:24.343631 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:38422] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePFUEH3ayszMLZYflv3KgAAAYg"]
[Sun Apr 19 01:54:24.909355 2026] [:error] [pid 41277:tid 41281] [client 72.146.12.65:49402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePFUEH3ayszMLZYflv3MQAAAYI"]
[Sun Apr 19 01:54:25.385717 2026] [:error] [pid 41277:tid 41301] [client 72.146.12.65:49465] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "aePFUUH3ayszMLZYflv3NwAAAZY"]
[Sun Apr 19 01:54:26.091608 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:49381] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "aePFUnFWunkyacYqsD051AAAAUI"]
[Sun Apr 19 01:54:26.637513 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:38469] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "aePFUnFWunkyacYqsD051QAAAVg"]
[Sun Apr 19 01:54:27.401903 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:49351] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8xyz.php"] [unique_id "aePFU0H3ayszMLZYflv3PwAAAZA"]
[Sun Apr 19 01:54:27.928900 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:49433] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/106.php"] [unique_id "aePFU34Zz-rubR1wiZ-uJgAAAM4"]
[Sun Apr 19 01:54:28.589069 2026] [:error] [pid 33517:tid 33534] [client 72.146.12.65:38517] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/106.php"] [unique_id "aePFVH4Zz-rubR1wiZ-uKAAAAM8"]
[Sun Apr 19 01:54:29.240776 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:38489] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/106.php"] [unique_id "aePFVX4Zz-rubR1wiZ-uLgAAAMM"]
[Sun Apr 19 01:54:29.845588 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:24127] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/106.php"] [unique_id "aePFVUH3ayszMLZYflv3SQAAAY8"]
[Sun Apr 19 01:54:33.519204 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:38470] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aePFWUyD4Jm27Mb3NJh8rAAAAJU"]
[Sun Apr 19 01:54:37.964023 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:38519] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aePFXUH3ayszMLZYflv3YgAAAYA"]
[Sun Apr 19 01:54:38.611192 2026] [:error] [pid 32166:tid 32218] [client 72.146.12.65:49352] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aePFXpCHNkWwdiZnafLNtgAAAFQ"]
[Sun Apr 19 01:54:39.165380 2026] [:error] [pid 32165:tid 32190] [client 72.146.12.65:49404] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aePFX6e2vKwEk_N0Brb25wAAABU"]
[Sun Apr 19 01:54:39.734450 2026] [:error] [pid 32165:tid 32174] [client 72.146.12.65:38518] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cwclass.php"] [unique_id "aePFX6e2vKwEk_N0Brb26AAAAAU"]
[Sun Apr 19 01:54:40.454671 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:38488] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cwclass.php"] [unique_id "aePFYEyD4Jm27Mb3NJh8tgAAAIY"]
[Sun Apr 19 01:54:41.029904 2026] [:error] [pid 32165:tid 32171] [client 72.146.12.65:49387] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cwclass.php"] [unique_id "aePFYae2vKwEk_N0Brb27AAAAAI"]
[Sun Apr 19 01:54:41.507453 2026] [:error] [pid 32166:tid 32217] [client 72.146.12.65:49414] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cwclass.php"] [unique_id "aePFYZCHNkWwdiZnafLNvwAAAFM"]
[Sun Apr 19 01:54:42.157089 2026] [:error] [pid 32165:tid 32189] [client 72.146.12.65:38484] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aePFYqe2vKwEk_N0Brb27gAAABQ"]
[Sun Apr 19 01:54:42.684446 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:49420] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aePFYkH3ayszMLZYflv3ZgAAAZE"]
[Sun Apr 19 01:54:43.239438 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:49423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aePFY34Zz-rubR1wiZ-uSAAAAMQ"]
[Sun Apr 19 01:54:43.742156 2026] [:error] [pid 33517:tid 33540] [client 72.146.12.65:49380] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aePFY34Zz-rubR1wiZ-uSgAAANU"]
[Sun Apr 19 01:54:44.287206 2026] [:error] [pid 33517:tid 33539] [client 72.146.12.65:38409] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "aePFZH4Zz-rubR1wiZ-uTAAAANQ"]
[Sun Apr 19 01:54:44.823814 2026] [:error] [pid 32167:tid 32241] [client 72.146.12.65:49356] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "aePFZEyD4Jm27Mb3NJh8uQAAAJA"]
[Sun Apr 19 01:54:45.304047 2026] [:error] [pid 33517:tid 33525] [client 72.146.12.65:49452] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "aePFZX4Zz-rubR1wiZ-uUAAAAMY"]
[Sun Apr 19 01:54:46.027524 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:38462] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/41.php"] [unique_id "aePFZn4Zz-rubR1wiZ-uUwAAANc"]
[Sun Apr 19 01:54:46.670593 2026] [:error] [pid 32165:tid 32174] [client 72.146.12.65:49471] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aePFZqe2vKwEk_N0Brb28wAAAAU"]
[Sun Apr 19 01:54:47.300717 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:49362] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aePFZ3FWunkyacYqsD055QAAAVI"]
[Sun Apr 19 01:54:47.835049 2026] [:error] [pid 33517:tid 33543] [client 72.146.12.65:24120] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aePFZ34Zz-rubR1wiZ-uVAAAANg"]
[Sun Apr 19 01:54:48.536961 2026] [:error] [pid 33517:tid 33528] [client 72.146.12.65:38501] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ww.php"] [unique_id "aePFaH4Zz-rubR1wiZ-uVwAAAMk"]
[Sun Apr 19 01:54:49.194188 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:24103] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aePFaX4Zz-rubR1wiZ-uWQAAAMM"]
[Sun Apr 19 01:54:49.786352 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:23754] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aePFaXFWunkyacYqsD056QAAAUk"]
[Sun Apr 19 01:54:50.448641 2026] [:error] [pid 60910:tid 60923] [client 72.146.12.65:49361] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aePFanFWunkyacYqsD057gAAAUs"]
[Sun Apr 19 01:54:50.985084 2026] [:error] [pid 32252:tid 32278] [client 72.146.12.65:38515] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aePFauXl4Yc-Lt5fJ9igYAAAARg"]
[Sun Apr 19 01:54:51.518104 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:49432] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "aePFa0H3ayszMLZYflv3dgAAAYs"]
[Sun Apr 19 01:54:52.132860 2026] [:error] [pid 41277:tid 41298] [client 72.146.12.65:50240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "aePFbEH3ayszMLZYflv3eQAAAZM"]
[Sun Apr 19 01:54:52.948825 2026] [:error] [pid 41277:tid 41281] [client 72.146.12.65:49443] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "aePFbEH3ayszMLZYflv3fgAAAYI"]
[Sun Apr 19 01:54:53.497126 2026] [:error] [pid 41277:tid 41293] [client 72.146.12.65:38421] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/elp.php"] [unique_id "aePFbUH3ayszMLZYflv3hAAAAY4"]
[Sun Apr 19 01:54:54.094076 2026] [:error] [pid 33517:tid 33536] [client 72.146.12.65:38461] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjq.php"] [unique_id "aePFbn4Zz-rubR1wiZ-uXQAAANE"]
[Sun Apr 19 01:54:54.646348 2026] [:error] [pid 33517:tid 33541] [client 72.146.12.65:38525] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjq.php"] [unique_id "aePFbn4Zz-rubR1wiZ-uXgAAANY"]
[Sun Apr 19 01:54:55.183627 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:38476] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjq.php"] [unique_id "aePFb-Xl4Yc-Lt5fJ9igZQAAAQs"]
[Sun Apr 19 01:54:56.113076 2026] [:error] [pid 32252:tid 32262] [client 72.146.12.65:49447] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mjq.php"] [unique_id "aePFcOXl4Yc-Lt5fJ9igZwAAAQg"]
[Sun Apr 19 01:54:56.691375 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:23748] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zu.php"] [unique_id "aePFcEH3ayszMLZYflv3jgAAAYc"]
[Sun Apr 19 01:54:57.201033 2026] [:error] [pid 32252:tid 32254] [client 72.146.12.65:38503] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zu.php"] [unique_id "aePFceXl4Yc-Lt5fJ9igawAAAQA"]
[Sun Apr 19 01:54:57.708845 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:38494] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zu.php"] [unique_id "aePFcX4Zz-rubR1wiZ-uYAAAAM4"]
[Sun Apr 19 01:54:58.232502 2026] [:error] [pid 60910:tid 60919] [client 72.146.12.65:38493] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zu.php"] [unique_id "aePFcnFWunkyacYqsD05_AAAAUc"]
[Sun Apr 19 01:54:58.928593 2026] [:error] [pid 32252:tid 32263] [client 72.146.12.65:49393] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws53.php"] [unique_id "aePFcuXl4Yc-Lt5fJ9igcwAAAQk"]
[Sun Apr 19 01:54:59.791903 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:38476] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws53.php"] [unique_id "aePFc3FWunkyacYqsD06CQAAAUw"]
[Sun Apr 19 01:55:00.665813 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:38485] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws53.php"] [unique_id "aePFdHFWunkyacYqsD06EAAAAVc"]
[Sun Apr 19 01:55:01.312958 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:49466] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws53.php"] [unique_id "aePFdUyD4Jm27Mb3NJh8xwAAAJI"]
[Sun Apr 19 01:55:01.968391 2026] [:error] [pid 60910:tid 60923] [client 72.146.12.65:49446] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws56.php"] [unique_id "aePFdXFWunkyacYqsD06HAAAAUs"]
[Sun Apr 19 01:55:02.607452 2026] [:error] [pid 32165:tid 32178] [client 72.146.12.65:49455] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws56.php"] [unique_id "aePFdqe2vKwEk_N0Brb2_wAAAAk"]
[Sun Apr 19 01:55:03.246286 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:38433] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws56.php"] [unique_id "aePFd3FWunkyacYqsD06HgAAAUY"]
[Sun Apr 19 01:55:03.895409 2026] [:error] [pid 60910:tid 60931] [client 72.146.12.65:38520] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws56.php"] [unique_id "aePFd3FWunkyacYqsD06IgAAAVM"]
[Sun Apr 19 01:55:04.610621 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:49421] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws58.php"] [unique_id "aePFeEyD4Jm27Mb3NJh8zAAAAIQ"]
[Sun Apr 19 01:55:05.346197 2026] [proxy_fcgi:error] [pid 33517:tid 33531] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:05.601361 2026] [proxy_fcgi:error] [pid 33517:tid 33529] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:05.837506 2026] [proxy_fcgi:error] [pid 33517:tid 33540] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:06.167705 2026] [proxy_fcgi:error] [pid 33517:tid 33528] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:06.405435 2026] [proxy_fcgi:error] [pid 33517:tid 33532] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:06.676576 2026] [proxy_fcgi:error] [pid 33517:tid 33535] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:07.115355 2026] [proxy_fcgi:error] [pid 33517:tid 33522] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:07.987827 2026] [proxy_fcgi:error] [pid 33517:tid 33526] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:08.233146 2026] [proxy_fcgi:error] [pid 33517:tid 33539] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:08.468577 2026] [proxy_fcgi:error] [pid 33517:tid 33519] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:08.705353 2026] [proxy_fcgi:error] [pid 33517:tid 33521] [client 72.146.12.65:38427] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:55:08.948823 2026] [:error] [pid 33517:tid 33525] [client 72.146.12.65:38427] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "aePFfH4Zz-rubR1wiZ-udAAAAMY"]
[Sun Apr 19 01:55:10.515020 2026] [:error] [pid 33517:tid 33541] [client 72.146.12.65:24065] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "aePFfn4Zz-rubR1wiZ-ufgAAANY"]
[Sun Apr 19 01:55:11.269386 2026] [:error] [pid 33517:tid 33539] [client 72.146.12.65:49357] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "aePFf34Zz-rubR1wiZ-ugwAAANQ"]
[Sun Apr 19 01:55:12.066024 2026] [:error] [pid 60910:tid 60913] [client 72.146.12.65:49377] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kbfr.php"] [unique_id "aePFgHFWunkyacYqsD06MgAAAUE"]
[Sun Apr 19 01:55:12.750507 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:49397] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abhjr.php"] [unique_id "aePFgHFWunkyacYqsD06NwAAAVU"]
[Sun Apr 19 01:55:13.643097 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:23757] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abhjr.php"] [unique_id "aePFgUH3ayszMLZYflv3oQAAAYk"]
[Sun Apr 19 01:55:14.249371 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:49440] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abhjr.php"] [unique_id "aePFgnFWunkyacYqsD06OgAAAUg"]
[Sun Apr 19 01:55:14.821504 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:49442] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abhjr.php"] [unique_id "aePFgkyD4Jm27Mb3NJh82gAAAJY"]
[Sun Apr 19 01:55:15.378826 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:23777] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anczg.php"] [unique_id "aePFg0yD4Jm27Mb3NJh83gAAAIk"]
[Sun Apr 19 01:55:15.975345 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:49391] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anczg.php"] [unique_id "aePFg-Xl4Yc-Lt5fJ9igfAAAAQs"]
[Sun Apr 19 01:55:16.457864 2026] [:error] [pid 32252:tid 32262] [client 72.146.12.65:49350] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anczg.php"] [unique_id "aePFhOXl4Yc-Lt5fJ9igfwAAAQg"]
[Sun Apr 19 01:55:16.940937 2026] [:error] [pid 32252:tid 32268] [client 72.146.12.65:38413] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/anczg.php"] [unique_id "aePFhOXl4Yc-Lt5fJ9iggwAAAQ4"]
[Sun Apr 19 01:55:17.487093 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:23755] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ardsw.php"] [unique_id "aePFhXFWunkyacYqsD06QQAAAVc"]
[Sun Apr 19 01:55:18.034400 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:38490] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ardsw.php"] [unique_id "aePFhn4Zz-rubR1wiZ-uiQAAAM4"]
[Sun Apr 19 01:55:18.579718 2026] [:error] [pid 33517:tid 33543] [client 72.146.12.65:38407] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ardsw.php"] [unique_id "aePFhn4Zz-rubR1wiZ-uiwAAANg"]
[Sun Apr 19 01:55:19.059065 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:38492] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ardsw.php"] [unique_id "aePFh0yD4Jm27Mb3NJh85AAAAIA"]
[Sun Apr 19 01:55:19.565582 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:49371] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atfis.php"] [unique_id "aePFh3FWunkyacYqsD06SQAAAUU"]
[Sun Apr 19 01:55:20.907766 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:38455] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atfis.php"] [unique_id "aePFiH4Zz-rubR1wiZ-ulQAAAMQ"]
[Sun Apr 19 01:55:21.458187 2026] [:error] [pid 33517:tid 33536] [client 72.146.12.65:24095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atfis.php"] [unique_id "aePFiX4Zz-rubR1wiZ-umgAAANE"]
[Sun Apr 19 01:55:21.957847 2026] [:error] [pid 60910:tid 60923] [client 72.146.12.65:49435] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atfis.php"] [unique_id "aePFiXFWunkyacYqsD06TAAAAUs"]
[Sun Apr 19 01:55:22.431964 2026] [:error] [pid 60910:tid 60931] [client 72.146.12.65:38524] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/azpaq.php"] [unique_id "aePFinFWunkyacYqsD06TQAAAVM"]
[Sun Apr 19 01:55:22.993962 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:49399] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/azpaq.php"] [unique_id "aePFikyD4Jm27Mb3NJh87AAAAIE"]
[Sun Apr 19 01:55:23.570974 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:50249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/azpaq.php"] [unique_id "aePFi0yD4Jm27Mb3NJh88gAAAI0"]
[Sun Apr 19 01:55:24.133804 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:49415] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/azpaq.php"] [unique_id "aePFjEyD4Jm27Mb3NJh89gAAAII"]
[Sun Apr 19 01:55:24.762745 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:49359] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bclms.php"] [unique_id "aePFjH4Zz-rubR1wiZ-upQAAANM"]
[Sun Apr 19 01:55:25.311212 2026] [:error] [pid 32166:tid 32201] [client 72.146.12.65:49450] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bclms.php"] [unique_id "aePFjZCHNkWwdiZnafLN2AAAAEM"]
[Sun Apr 19 01:55:25.943609 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:38434] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bclms.php"] [unique_id "aePFjeXl4Yc-Lt5fJ9igiQAAAQ8"]
[Sun Apr 19 01:55:26.592868 2026] [:error] [pid 60910:tid 60928] [client 72.146.12.65:38445] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bclms.php"] [unique_id "aePFjnFWunkyacYqsD06UgAAAVA"]
[Sun Apr 19 01:55:27.163079 2026] [:error] [pid 32165:tid 32179] [client 72.146.12.65:38446] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bivvw.php"] [unique_id "aePFj6e2vKwEk_N0Brb3FgAAAAo"]
[Sun Apr 19 01:55:27.710322 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:23798] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bivvw.php"] [unique_id "aePFj0yD4Jm27Mb3NJh8_wAAAJI"]
[Sun Apr 19 01:55:28.239447 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:49355] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bivvw.php"] [unique_id "aePFkEyD4Jm27Mb3NJh9AgAAAJU"]
[Sun Apr 19 01:55:28.765273 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:24068] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bivvw.php"] [unique_id "aePFkH4Zz-rubR1wiZ-uswAAANA"]
[Sun Apr 19 01:55:29.315082 2026] [:error] [pid 33517:tid 33528] [client 72.146.12.65:24118] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bykdo.php"] [unique_id "aePFkX4Zz-rubR1wiZ-utQAAAMk"]
[Sun Apr 19 01:55:29.906375 2026] [:error] [pid 32252:tid 32277] [client 72.146.12.65:38420] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bykdo.php"] [unique_id "aePFkeXl4Yc-Lt5fJ9igjgAAARc"]
[Sun Apr 19 01:55:30.401627 2026] [:error] [pid 60910:tid 60929] [client 72.146.12.65:50241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bykdo.php"] [unique_id "aePFknFWunkyacYqsD06WQAAAVE"]
[Sun Apr 19 01:55:31.281501 2026] [:error] [pid 32252:tid 32273] [client 72.146.12.65:49370] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bykdo.php"] [unique_id "aePFk-Xl4Yc-Lt5fJ9igkQAAARM"]
[Sun Apr 19 01:55:31.758718 2026] [:error] [pid 32166:tid 32212] [client 72.146.12.65:50256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byueb.php"] [unique_id "aePFk5CHNkWwdiZnafLN2gAAAE4"]
[Sun Apr 19 01:55:32.285160 2026] [:error] [pid 60910:tid 60925] [client 72.146.12.65:38458] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byueb.php"] [unique_id "aePFlHFWunkyacYqsD06YAAAAU0"]
[Sun Apr 19 01:55:32.768735 2026] [:error] [pid 32165:tid 32186] [client 72.146.12.65:49388] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byueb.php"] [unique_id "aePFlKe2vKwEk_N0Brb3GgAAABE"]
[Sun Apr 19 01:55:33.279900 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:24102] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byueb.php"] [unique_id "aePFlXFWunkyacYqsD06ZAAAAVc"]
[Sun Apr 19 01:55:33.830873 2026] [:error] [pid 32165:tid 32192] [client 72.146.12.65:38471] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cjndd.php"] [unique_id "aePFlae2vKwEk_N0Brb3HQAAABc"]
[Sun Apr 19 01:55:34.340193 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:49358] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cjndd.php"] [unique_id "aePFlnFWunkyacYqsD06ZQAAAVg"]
[Sun Apr 19 01:55:34.872750 2026] [:error] [pid 32165:tid 32188] [client 72.146.12.65:49409] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cjndd.php"] [unique_id "aePFlqe2vKwEk_N0Brb3IQAAABM"]
[Sun Apr 19 01:55:35.417208 2026] [:error] [pid 32165:tid 32177] [client 72.146.12.65:38511] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cjndd.php"] [unique_id "aePFl6e2vKwEk_N0Brb3IwAAAAg"]
[Sun Apr 19 01:55:35.979920 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:38498] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/coiuz.php"] [unique_id "aePFl0yD4Jm27Mb3NJh9EQAAAIk"]
[Sun Apr 19 01:55:36.464109 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:23804] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/coiuz.php"] [unique_id "aePFmHFWunkyacYqsD06aQAAAUU"]
[Sun Apr 19 01:55:36.988782 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:49389] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/coiuz.php"] [unique_id "aePFmEyD4Jm27Mb3NJh9FQAAAIY"]
[Sun Apr 19 01:55:37.702768 2026] [:error] [pid 32252:tid 32256] [client 72.146.12.65:38479] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/coiuz.php"] [unique_id "aePFmeXl4Yc-Lt5fJ9iglwAAAQI"]
[Sun Apr 19 01:55:38.250155 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:49406] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "aePFmn4Zz-rubR1wiZ-uvQAAAMw"]
[Sun Apr 19 01:55:38.795187 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:49457] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "aePFmn4Zz-rubR1wiZ-uwAAAAMI"]
[Sun Apr 19 01:55:39.414475 2026] [:error] [pid 32166:tid 32206] [client 72.146.12.65:24109] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "aePFm5CHNkWwdiZnafLN3wAAAEg"]
[Sun Apr 19 01:55:39.918829 2026] [:error] [pid 32252:tid 32262] [client 72.146.12.65:49438] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/click.php"] [unique_id "aePFm-Xl4Yc-Lt5fJ9igmQAAAQg"]
[Sun Apr 19 01:55:40.567806 2026] [:error] [pid 32165:tid 32172] [client 72.146.12.65:49360] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctjpseby.php"] [unique_id "aePFnKe2vKwEk_N0Brb3LAAAAAM"]
[Sun Apr 19 01:55:41.073954 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:49422] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctjpseby.php"] [unique_id "aePFnXFWunkyacYqsD06cAAAAUw"]
[Sun Apr 19 01:55:41.591124 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:38509] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctjpseby.php"] [unique_id "aePFnXFWunkyacYqsD06dAAAAVU"]
[Sun Apr 19 01:55:42.148753 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:38514] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctjpseby.php"] [unique_id "aePFnnFWunkyacYqsD06dgAAAUU"]
[Sun Apr 19 01:55:42.691464 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:49470] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxxuv.php"] [unique_id "aePFnn4Zz-rubR1wiZ-uyQAAAMQ"]
[Sun Apr 19 01:55:43.240752 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:50252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxxuv.php"] [unique_id "aePFn0yD4Jm27Mb3NJh9GwAAAIc"]
[Sun Apr 19 01:55:43.855551 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:38416] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxxuv.php"] [unique_id "aePFn34Zz-rubR1wiZ-uzQAAANA"]
[Sun Apr 19 01:55:44.364914 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:50270] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxxuv.php"] [unique_id "aePFoH4Zz-rubR1wiZ-uzgAAAMI"]
[Sun Apr 19 01:55:44.928652 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:49412] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dawvg.php"] [unique_id "aePFoH4Zz-rubR1wiZ-u0AAAAMs"]
[Sun Apr 19 01:55:45.407746 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:49395] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dawvg.php"] [unique_id "aePFoUyD4Jm27Mb3NJh9HQAAAJQ"]
[Sun Apr 19 01:55:45.916955 2026] [:error] [pid 33517:tid 33520] [client 72.146.12.65:38439] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dawvg.php"] [unique_id "aePFoX4Zz-rubR1wiZ-u1QAAAME"]
[Sun Apr 19 01:55:46.753551 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:49456] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dawvg.php"] [unique_id "aePFokH3ayszMLZYflv3rwAAAYg"]
[Sun Apr 19 01:55:47.266758 2026] [:error] [pid 41277:tid 41281] [client 72.146.12.65:38457] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dhjqs.php"] [unique_id "aePFo0H3ayszMLZYflv3sQAAAYI"]
[Sun Apr 19 01:55:47.867288 2026] [:error] [pid 32252:tid 32257] [client 72.146.12.65:49424] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dhjqs.php"] [unique_id "aePFo-Xl4Yc-Lt5fJ9igngAAAQM"]
[Sun Apr 19 01:55:48.405850 2026] [:error] [pid 32252:tid 32260] [client 72.146.12.65:38522] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dhjqs.php"] [unique_id "aePFpOXl4Yc-Lt5fJ9igoAAAAQY"]
[Sun Apr 19 01:55:49.036549 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:38487] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dhjqs.php"] [unique_id "aePFpUyD4Jm27Mb3NJh9JAAAAI0"]
[Sun Apr 19 01:55:49.532437 2026] [:error] [pid 32166:tid 32205] [client 72.146.12.65:38428] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/diayd.php"] [unique_id "aePFpZCHNkWwdiZnafLN6QAAAEc"]
[Sun Apr 19 01:55:50.036182 2026] [:error] [pid 32252:tid 32263] [client 72.146.12.65:49347] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/diayd.php"] [unique_id "aePFpuXl4Yc-Lt5fJ9igpgAAAQk"]
[Sun Apr 19 01:55:50.691071 2026] [:error] [pid 32165:tid 32175] [client 72.146.12.65:24083] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/diayd.php"] [unique_id "aePFpqe2vKwEk_N0Brb3NQAAAAY"]
[Sun Apr 19 01:55:51.270023 2026] [:error] [pid 32165:tid 32188] [client 72.146.12.65:23805] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/diayd.php"] [unique_id "aePFp6e2vKwEk_N0Brb3NgAAABM"]
[Sun Apr 19 01:55:51.826599 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:49411] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dljpy.php"] [unique_id "aePFp0yD4Jm27Mb3NJh9KgAAAJg"]
[Sun Apr 19 01:55:52.574683 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:49436] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dljpy.php"] [unique_id "aePFqH4Zz-rubR1wiZ-u3wAAAMw"]
[Sun Apr 19 01:55:53.328304 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:38438] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dljpy.php"] [unique_id "aePFqUH3ayszMLZYflv3swAAAYs"]
[Sun Apr 19 01:55:54.375330 2026] [:error] [pid 32166:tid 32208] [client 72.146.12.65:38482] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dljpy.php"] [unique_id "aePFqpCHNkWwdiZnafLN6gAAAEo"]
[Sun Apr 19 01:55:55.242508 2026] [:error] [pid 32167:tid 32240] [client 72.146.12.65:23801] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dqagu.php"] [unique_id "aePFq0yD4Jm27Mb3NJh9NQAAAI8"]
[Sun Apr 19 01:55:55.805176 2026] [:error] [pid 32165:tid 32183] [client 72.146.12.65:38410] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dqagu.php"] [unique_id "aePFq6e2vKwEk_N0Brb3OwAAAA4"]
[Sun Apr 19 01:55:56.279825 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:49410] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dqagu.php"] [unique_id "aePFrEyD4Jm27Mb3NJh9NgAAAII"]
[Sun Apr 19 01:55:56.754515 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:38456] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dqagu.php"] [unique_id "aePFrEyD4Jm27Mb3NJh9OAAAAJU"]
[Sun Apr 19 01:55:57.289467 2026] [:error] [pid 60910:tid 60919] [client 72.146.12.65:38460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/druqr.php"] [unique_id "aePFrXFWunkyacYqsD06gAAAAUc"]
[Sun Apr 19 01:55:57.841061 2026] [:error] [pid 32166:tid 32203] [client 72.146.12.65:23750] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/druqr.php"] [unique_id "aePFrZCHNkWwdiZnafLN7QAAAEU"]
[Sun Apr 19 01:55:58.385607 2026] [:error] [pid 32166:tid 32213] [client 72.146.12.65:38425] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/druqr.php"] [unique_id "aePFrpCHNkWwdiZnafLN7gAAAE8"]
[Sun Apr 19 01:55:59.001020 2026] [:error] [pid 32167:tid 32233] [client 72.146.12.65:23749] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/druqr.php"] [unique_id "aePFrkyD4Jm27Mb3NJh9QwAAAIg"]
[Sun Apr 19 01:55:59.547954 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:23758] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dyxbc.php"] [unique_id "aePFr34Zz-rubR1wiZ-u5AAAANc"]
[Sun Apr 19 01:56:00.166377 2026] [:error] [pid 32252:tid 32261] [client 72.146.12.65:49344] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dyxbc.php"] [unique_id "aePFsOXl4Yc-Lt5fJ9igrAAAAQc"]
[Sun Apr 19 01:56:00.822445 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:23775] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dyxbc.php"] [unique_id "aePFsH4Zz-rubR1wiZ-u5wAAAMo"]
[Sun Apr 19 01:56:01.366475 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:38424] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dyxbc.php"] [unique_id "aePFsUyD4Jm27Mb3NJh9TQAAAJE"]
[Sun Apr 19 01:56:02.196664 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:49379] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eapjf.php"] [unique_id "aePFskyD4Jm27Mb3NJh9UgAAAII"]
[Sun Apr 19 01:56:02.861438 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:24112] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eapjf.php"] [unique_id "aePFskyD4Jm27Mb3NJh9VwAAAIk"]
[Sun Apr 19 01:56:03.521307 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:23770] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eapjf.php"] [unique_id "aePFs34Zz-rubR1wiZ-u6gAAAMQ"]
[Sun Apr 19 01:56:04.139988 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:49451] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eapjf.php"] [unique_id "aePFtEH3ayszMLZYflv3tgAAAYk"]
[Sun Apr 19 01:56:04.877028 2026] [:error] [pid 32252:tid 32256] [client 72.146.12.65:38426] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebuom.php"] [unique_id "aePFtOXl4Yc-Lt5fJ9igsAAAAQI"]
[Sun Apr 19 01:56:05.834169 2026] [:error] [pid 33517:tid 33540] [client 72.146.12.65:38496] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebuom.php"] [unique_id "aePFtX4Zz-rubR1wiZ-u6wAAANU"]
[Sun Apr 19 01:56:06.707315 2026] [:error] [pid 32166:tid 32214] [client 72.146.12.65:38456] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebuom.php"] [unique_id "aePFtpCHNkWwdiZnafLN8QAAAFA"]
[Sun Apr 19 01:56:07.314891 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:49382] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ebuom.php"] [unique_id "aePFt0yD4Jm27Mb3NJh9YAAAAIo"]
[Sun Apr 19 01:56:08.019797 2026] [proxy_fcgi:error] [pid 32167:tid 32244] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:08.338449 2026] [proxy_fcgi:error] [pid 32167:tid 32249] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:08.669488 2026] [proxy_fcgi:error] [pid 32167:tid 32247] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:08.960039 2026] [proxy_fcgi:error] [pid 32167:tid 32230] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:09.195353 2026] [proxy_fcgi:error] [pid 32167:tid 32248] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:09.534560 2026] [proxy_fcgi:error] [pid 32167:tid 32231] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:09.781891 2026] [proxy_fcgi:error] [pid 32167:tid 32226] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:10.030103 2026] [proxy_fcgi:error] [pid 32167:tid 32228] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:10.268760 2026] [proxy_fcgi:error] [pid 32167:tid 32235] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:10.784801 2026] [proxy_fcgi:error] [pid 32167:tid 32232] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:11.067099 2026] [proxy_fcgi:error] [pid 32167:tid 32246] [client 72.146.12.65:24086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:56:11.335732 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:24086] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jctyd.php"] [unique_id "aePFu0yD4Jm27Mb3NJh9cAAAAJM"]
[Sun Apr 19 01:56:12.195196 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:38453] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jctyd.php"] [unique_id "aePFvH4Zz-rubR1wiZ-u7wAAANc"]
[Sun Apr 19 01:56:13.364889 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:38513] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jctyd.php"] [unique_id "aePFvUH3ayszMLZYflv3vQAAAYs"]
[Sun Apr 19 01:56:14.155767 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:38408] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jctyd.php"] [unique_id "aePFvkyD4Jm27Mb3NJh9cgAAAII"]
[Sun Apr 19 01:56:15.111087 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:38418] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtfocpif.php"] [unique_id "aePFv0yD4Jm27Mb3NJh9dQAAAIQ"]
[Sun Apr 19 01:56:15.963520 2026] [:error] [pid 32165:tid 32171] [client 72.146.12.65:38464] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtfocpif.php"] [unique_id "aePFv6e2vKwEk_N0Brb3SwAAAAI"]
[Sun Apr 19 01:56:16.606887 2026] [:error] [pid 32252:tid 32254] [client 72.146.12.65:46161] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtfocpif.php"] [unique_id "aePFwOXl4Yc-Lt5fJ9igwQAAAQA"]
[Sun Apr 19 01:56:17.717580 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:49463] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jtfocpif.php"] [unique_id "aePFwUH3ayszMLZYflv3wQAAAYk"]
[Sun Apr 19 01:56:18.436673 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:49346] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/junvh.php"] [unique_id "aePFwkyD4Jm27Mb3NJh9eQAAAIA"]
[Sun Apr 19 01:56:19.338568 2026] [:error] [pid 32252:tid 32255] [client 72.146.12.65:24076] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/junvh.php"] [unique_id "aePFw-Xl4Yc-Lt5fJ9igxgAAAQE"]
[Sun Apr 19 01:56:20.351871 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:24072] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/junvh.php"] [unique_id "aePFxEyD4Jm27Mb3NJh9ewAAAIs"]
[Sun Apr 19 01:56:21.082652 2026] [:error] [pid 32252:tid 32258] [client 72.146.12.65:38506] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/junvh.php"] [unique_id "aePFxeXl4Yc-Lt5fJ9igygAAAQQ"]
[Sun Apr 19 01:56:21.686797 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:50303] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jvtsa.php"] [unique_id "aePFxUyD4Jm27Mb3NJh9gAAAAI4"]
[Sun Apr 19 01:56:22.355119 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:38406] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jvtsa.php"] [unique_id "aePFxkH3ayszMLZYflv3zwAAAYA"]
[Sun Apr 19 01:56:23.181442 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:49439] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jvtsa.php"] [unique_id "aePFx0yD4Jm27Mb3NJh9hgAAAIc"]
[Sun Apr 19 01:56:24.034314 2026] [:error] [pid 60910:tid 60929] [client 72.146.12.65:49363] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jvtsa.php"] [unique_id "aePFyHFWunkyacYqsD06kgAAAVE"]
[Sun Apr 19 01:56:24.631843 2026] [:error] [pid 32252:tid 32254] [client 72.146.12.65:23746] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaduu.php"] [unique_id "aePFyOXl4Yc-Lt5fJ9ig0QAAAQA"]
[Sun Apr 19 01:56:25.438281 2026] [:error] [pid 33517:tid 33525] [client 72.146.12.65:50250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaduu.php"] [unique_id "aePFyX4Zz-rubR1wiZ-u_AAAAMY"]
[Sun Apr 19 01:56:26.131926 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:24098] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaduu.php"] [unique_id "aePFynFWunkyacYqsD06lQAAAUI"]
[Sun Apr 19 01:56:26.751351 2026] [:error] [pid 60910:tid 60916] [client 72.146.12.65:24096] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kaduu.php"] [unique_id "aePFynFWunkyacYqsD06mQAAAUQ"]
[Sun Apr 19 01:56:27.302274 2026] [:error] [pid 60910:tid 60923] [client 72.146.12.65:50255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kagug.php"] [unique_id "aePFy3FWunkyacYqsD06nAAAAUs"]
[Sun Apr 19 01:56:27.825430 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:49365] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kagug.php"] [unique_id "aePFy3FWunkyacYqsD06oAAAAUY"]
[Sun Apr 19 01:56:29.085369 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:50092] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kagug.php"] [unique_id "aePFzUyD4Jm27Mb3NJh9kAAAAII"]
[Sun Apr 19 01:56:29.644264 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:38414] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kagug.php"] [unique_id "aePFzUH3ayszMLZYflv33wAAAZg"]
[Sun Apr 19 01:56:30.113289 2026] [:error] [pid 33517:tid 33534] [client 72.146.12.65:38516] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kandw.php"] [unique_id "aePFzn4Zz-rubR1wiZ-vCQAAAM8"]
[Sun Apr 19 01:56:30.742913 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:50256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kandw.php"] [unique_id "aePFzkyD4Jm27Mb3NJh9lwAAAJc"]
[Sun Apr 19 01:56:31.439349 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:24069] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kandw.php"] [unique_id "aePFz3FWunkyacYqsD06owAAAVg"]
[Sun Apr 19 01:56:31.997039 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:24080] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kandw.php"] [unique_id "aePFz0yD4Jm27Mb3NJh9mQAAAJQ"]
[Sun Apr 19 01:56:32.485841 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:24067] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kduhq.php"] [unique_id "aePF0EyD4Jm27Mb3NJh9nQAAAI0"]
[Sun Apr 19 01:56:32.982787 2026] [:error] [pid 60910:tid 60934] [client 72.146.12.65:24078] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kduhq.php"] [unique_id "aePF0HFWunkyacYqsD06pgAAAVY"]
[Sun Apr 19 01:56:33.533747 2026] [:error] [pid 60910:tid 60916] [client 72.146.12.65:24124] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kduhq.php"] [unique_id "aePF0XFWunkyacYqsD06pwAAAUQ"]
[Sun Apr 19 01:56:34.095931 2026] [:error] [pid 41277:tid 41302] [client 72.146.12.65:50288] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kduhq.php"] [unique_id "aePF0kH3ayszMLZYflv35QAAAZc"]
[Sun Apr 19 01:56:34.613553 2026] [:error] [pid 33517:tid 33526] [client 72.146.12.65:24079] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rgjrq.php"] [unique_id "aePF0n4Zz-rubR1wiZ-vEgAAAMc"]
[Sun Apr 19 01:56:35.112946 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:23785] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rgjrq.php"] [unique_id "aePF00H3ayszMLZYflv35wAAAY0"]
[Sun Apr 19 01:56:35.605659 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:38448] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rgjrq.php"] [unique_id "aePF03FWunkyacYqsD06qgAAAUg"]
[Sun Apr 19 01:56:36.201864 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:23772] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rgjrq.php"] [unique_id "aePF1EyD4Jm27Mb3NJh9qgAAAJQ"]
[Sun Apr 19 01:56:36.707151 2026] [:error] [pid 33517:tid 33528] [client 72.146.12.65:50294] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vopxx.php"] [unique_id "aePF1H4Zz-rubR1wiZ-vFgAAAMk"]
[Sun Apr 19 01:56:37.281930 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:49369] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vopxx.php"] [unique_id "aePF1UyD4Jm27Mb3NJh9rgAAAIE"]
[Sun Apr 19 01:56:41.117345 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:45127] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vopxx.php"] [unique_id "aePF2UyD4Jm27Mb3NJh9uAAAAJU"]
[Sun Apr 19 01:56:43.863549 2026] [:error] [pid 32165:tid 32176] [client 72.146.12.65:50051] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vopxx.php"] [unique_id "aePF26e2vKwEk_N0Brb3WQAAAAc"]
[Sun Apr 19 01:56:48.653692 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:24074] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcoiw.php"] [unique_id "aePF4H4Zz-rubR1wiZ-vJQAAAM4"]
[Sun Apr 19 01:56:50.011212 2026] [:error] [pid 32252:tid 32263] [client 72.146.12.65:23776] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcoiw.php"] [unique_id "aePF4uXl4Yc-Lt5fJ9ig5wAAAQk"]
[Sun Apr 19 01:56:50.503724 2026] [:error] [pid 41277:tid 41297] [client 72.146.12.65:24064] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcoiw.php"] [unique_id "aePF4kH3ayszMLZYflv3_AAAAZI"]
[Sun Apr 19 01:56:51.283480 2026] [:error] [pid 60910:tid 60925] [client 72.146.12.65:50261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcoiw.php"] [unique_id "aePF43FWunkyacYqsD06vgAAAU0"]
[Sun Apr 19 01:56:51.817805 2026] [:error] [pid 32166:tid 32201] [client 72.146.12.65:38466] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtogs.php"] [unique_id "aePF45CHNkWwdiZnafLOGgAAAEM"]
[Sun Apr 19 01:56:52.344430 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:38449] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtogs.php"] [unique_id "aePF5JCHNkWwdiZnafLOGwAAAEs"]
[Sun Apr 19 01:56:52.909936 2026] [:error] [pid 60910:tid 60927] [client 72.146.12.65:50267] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtogs.php"] [unique_id "aePF5HFWunkyacYqsD06ygAAAU8"]
[Sun Apr 19 01:56:53.823967 2026] [:error] [pid 32167:tid 32241] [client 72.146.12.65:38460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wtogs.php"] [unique_id "aePF5UyD4Jm27Mb3NJh9xAAAAJA"]
[Sun Apr 19 01:56:54.297024 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:24100] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xbbih.php"] [unique_id "aePF5kyD4Jm27Mb3NJh9xgAAAIc"]
[Sun Apr 19 01:56:54.855777 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:50284] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xbbih.php"] [unique_id "aePF5kyD4Jm27Mb3NJh9yAAAAJM"]
[Sun Apr 19 01:56:55.477193 2026] [:error] [pid 41277:tid 41297] [client 72.146.12.65:24113] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xbbih.php"] [unique_id "aePF50H3ayszMLZYflv4DAAAAZI"]
[Sun Apr 19 01:56:56.039879 2026] [:error] [pid 32252:tid 32258] [client 72.146.12.65:46167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xbbih.php"] [unique_id "aePF6OXl4Yc-Lt5fJ9ig7wAAAQQ"]
[Sun Apr 19 01:56:56.701181 2026] [:error] [pid 60910:tid 60912] [client 72.146.12.65:49434] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xcakx.php"] [unique_id "aePF6HFWunkyacYqsD063wAAAUA"]
[Sun Apr 19 01:56:57.234428 2026] [:error] [pid 60910:tid 60926] [client 72.146.12.65:23789] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xcakx.php"] [unique_id "aePF6XFWunkyacYqsD064gAAAU4"]
[Sun Apr 19 01:56:57.830341 2026] [:error] [pid 32166:tid 32216] [client 72.146.12.65:38508] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xcakx.php"] [unique_id "aePF6ZCHNkWwdiZnafLOIwAAAFI"]
[Sun Apr 19 01:56:58.536694 2026] [:error] [pid 33517:tid 33537] [client 72.146.12.65:23779] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xcakx.php"] [unique_id "aePF6n4Zz-rubR1wiZ-vKAAAANI"]
[Sun Apr 19 01:56:59.081309 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:38440] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xjgdw.php"] [unique_id "aePF634Zz-rubR1wiZ-vKwAAAMs"]
[Sun Apr 19 01:56:59.582182 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:24104] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xjgdw.php"] [unique_id "aePF634Zz-rubR1wiZ-vLgAAANM"]
[Sun Apr 19 01:57:00.083908 2026] [:error] [pid 32166:tid 32200] [client 72.146.12.65:49367] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xjgdw.php"] [unique_id "aePF7JCHNkWwdiZnafLOKQAAAEI"]
[Sun Apr 19 01:57:00.586211 2026] [:error] [pid 41277:tid 41302] [client 72.146.12.65:23800] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xjgdw.php"] [unique_id "aePF7EH3ayszMLZYflv4EgAAAZc"]
[Sun Apr 19 01:57:01.160151 2026] [:error] [pid 32252:tid 32263] [client 72.146.12.65:50254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xopgt.php"] [unique_id "aePF7eXl4Yc-Lt5fJ9ig8gAAAQk"]
[Sun Apr 19 01:57:01.686436 2026] [:error] [pid 32167:tid 32241] [client 72.146.12.65:23793] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xopgt.php"] [unique_id "aePF7UyD4Jm27Mb3NJh9zwAAAJA"]
[Sun Apr 19 01:57:02.250671 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:49353] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xopgt.php"] [unique_id "aePF7kyD4Jm27Mb3NJh90QAAAJc"]
[Sun Apr 19 01:57:02.739474 2026] [:error] [pid 41277:tid 41280] [client 72.146.12.65:38507] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xopgt.php"] [unique_id "aePF7kH3ayszMLZYflv4FAAAAYE"]
[Sun Apr 19 01:57:03.234921 2026] [:error] [pid 33517:tid 33520] [client 72.146.12.65:49354] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsjtz.php"] [unique_id "aePF734Zz-rubR1wiZ-vMwAAAME"]
[Sun Apr 19 01:57:04.030155 2026] [:error] [pid 32165:tid 32181] [client 72.146.12.65:24108] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsjtz.php"] [unique_id "aePF8Ke2vKwEk_N0Brb3aAAAAAw"]
[Sun Apr 19 01:57:04.539874 2026] [:error] [pid 32165:tid 32170] [client 72.146.12.65:38442] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsjtz.php"] [unique_id "aePF8Ke2vKwEk_N0Brb3agAAAAE"]
[Sun Apr 19 01:57:05.052334 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:50276] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xsjtz.php"] [unique_id "aePF8XFWunkyacYqsD066QAAAUM"]
[Sun Apr 19 01:57:05.559768 2026] [:error] [pid 32165:tid 32174] [client 72.146.12.65:49416] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvinn.php"] [unique_id "aePF8ae2vKwEk_N0Brb3awAAAAU"]
[Sun Apr 19 01:57:06.098537 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:24114] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvinn.php"] [unique_id "aePF8nFWunkyacYqsD067gAAAVc"]
[Sun Apr 19 01:57:06.698553 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:38443] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvinn.php"] [unique_id "aePF8nFWunkyacYqsD067wAAAUY"]
[Sun Apr 19 01:57:07.244518 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:50069] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zvinn.php"] [unique_id "aePF80yD4Jm27Mb3NJh92QAAAIY"]
[Sun Apr 19 01:57:07.717761 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:38521] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/balin.php"] [unique_id "aePF80yD4Jm27Mb3NJh93AAAAIw"]
[Sun Apr 19 01:57:08.217504 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:49458] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/balin.php"] [unique_id "aePF9EyD4Jm27Mb3NJh93gAAAJg"]
[Sun Apr 19 01:57:08.682696 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:38523] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/balin.php"] [unique_id "aePF9H4Zz-rubR1wiZ-vNwAAAMI"]
[Sun Apr 19 01:57:09.389762 2026] [:error] [pid 60910:tid 60934] [client 72.146.12.65:45129] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/balin.php"] [unique_id "aePF9XFWunkyacYqsD069AAAAVY"]
[Sun Apr 19 01:57:09.878153 2026] [:error] [pid 32165:tid 32181] [client 72.146.12.65:49454] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePF9ae2vKwEk_N0Brb3cAAAAAw"]
[Sun Apr 19 01:57:10.349585 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:49459] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePF9nFWunkyacYqsD069wAAAUo"]
[Sun Apr 19 01:57:10.843763 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:49376] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePF9nFWunkyacYqsD06-gAAAUw"]
[Sun Apr 19 01:57:11.322540 2026] [proxy_fcgi:error] [pid 32165:tid 32170] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:11.612730 2026] [proxy_fcgi:error] [pid 32165:tid 32172] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:11.849589 2026] [proxy_fcgi:error] [pid 32165:tid 32184] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:12.092888 2026] [proxy_fcgi:error] [pid 32165:tid 32192] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:12.360124 2026] [proxy_fcgi:error] [pid 32165:tid 32177] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:12.597375 2026] [proxy_fcgi:error] [pid 32165:tid 32175] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:12.833830 2026] [proxy_fcgi:error] [pid 32165:tid 32187] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:13.070078 2026] [proxy_fcgi:error] [pid 32165:tid 32191] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:13.306278 2026] [proxy_fcgi:error] [pid 32165:tid 32189] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:13.551739 2026] [proxy_fcgi:error] [pid 32165:tid 32185] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:13.799027 2026] [proxy_fcgi:error] [pid 32165:tid 32183] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:57:14.041143 2026] [:error] [pid 32165:tid 32173] [client 72.146.12.65:50274] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abpxrnwe.php"] [unique_id "aePF-qe2vKwEk_N0Brb3gQAAAAQ"]
[Sun Apr 19 01:57:14.840576 2026] [:error] [pid 32252:tid 32264] [client 72.146.12.65:49392] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abpxrnwe.php"] [unique_id "aePF-uXl4Yc-Lt5fJ9ig-QAAAQo"]
[Sun Apr 19 01:57:15.424680 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:24097] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abpxrnwe.php"] [unique_id "aePF-0yD4Jm27Mb3NJh95gAAAJU"]
[Sun Apr 19 01:57:15.953617 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:49368] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abpxrnwe.php"] [unique_id "aePF-0yD4Jm27Mb3NJh96AAAAIE"]
[Sun Apr 19 01:57:16.460437 2026] [:error] [pid 60910:tid 60912] [client 72.146.12.65:23797] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abalqdol.php"] [unique_id "aePF_HFWunkyacYqsD07AgAAAUA"]
[Sun Apr 19 01:57:16.957988 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:49449] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abalqdol.php"] [unique_id "aePF_EyD4Jm27Mb3NJh97wAAAIA"]
[Sun Apr 19 01:57:17.455820 2026] [:error] [pid 32252:tid 32261] [client 72.146.12.65:23762] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abalqdol.php"] [unique_id "aePF_eXl4Yc-Lt5fJ9ig-wAAAQc"]
[Sun Apr 19 01:57:17.954136 2026] [:error] [pid 32165:tid 32172] [client 72.146.12.65:50090] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abalqdol.php"] [unique_id "aePF_ae2vKwEk_N0Brb3hAAAAAM"]
[Sun Apr 19 01:57:18.543711 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:46159] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aqotrjkg.php"] [unique_id "aePF_kH3ayszMLZYflv4GQAAAYw"]
[Sun Apr 19 01:57:19.073971 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:23774] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aqotrjkg.php"] [unique_id "aePF_0yD4Jm27Mb3NJh98AAAAIU"]
[Sun Apr 19 01:57:19.593656 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:38437] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aqotrjkg.php"] [unique_id "aePF_5CHNkWwdiZnafLOOAAAAEs"]
[Sun Apr 19 01:57:20.080325 2026] [:error] [pid 32166:tid 32204] [client 72.146.12.65:49400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aqotrjkg.php"] [unique_id "aePGAJCHNkWwdiZnafLOOwAAAEY"]
[Sun Apr 19 01:57:20.591280 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:50272] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhigtouj.php"] [unique_id "aePGAEyD4Jm27Mb3NJh99QAAAI0"]
[Sun Apr 19 01:57:21.067688 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:38512] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhigtouj.php"] [unique_id "aePGAUyD4Jm27Mb3NJh99gAAAIE"]
[Sun Apr 19 01:57:21.535422 2026] [:error] [pid 32252:tid 32275] [client 72.146.12.65:49418] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhigtouj.php"] [unique_id "aePGAeXl4Yc-Lt5fJ9ihAAAAARU"]
[Sun Apr 19 01:57:22.172139 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:24114] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhigtouj.php"] [unique_id "aePGAnFWunkyacYqsD07BAAAAUM"]
[Sun Apr 19 01:57:22.655854 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:23749] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePGAnFWunkyacYqsD07BgAAAUg"]
[Sun Apr 19 01:57:23.205187 2026] [:error] [pid 60910:tid 60929] [client 72.146.12.65:38495] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePGA3FWunkyacYqsD07CQAAAVE"]
[Sun Apr 19 01:57:23.957448 2026] [:error] [pid 60910:tid 60934] [client 72.146.12.65:24122] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePGA3FWunkyacYqsD07DgAAAVY"]
[Sun Apr 19 01:57:24.591659 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:24107] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePGBEyD4Jm27Mb3NJh9-gAAAIM"]
[Sun Apr 19 01:57:25.323082 2026] [:error] [pid 60910:tid 60913] [client 72.146.12.65:49348] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccrheegr.php"] [unique_id "aePGBXFWunkyacYqsD07GQAAAUE"]
[Sun Apr 19 01:57:25.873053 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:45153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccrheegr.php"] [unique_id "aePGBUyD4Jm27Mb3NJh9-wAAAIk"]
[Sun Apr 19 01:57:27.245889 2026] [:error] [pid 32252:tid 32268] [client 72.146.12.65:24110] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccrheegr.php"] [unique_id "aePGB-Xl4Yc-Lt5fJ9ihCAAAAQ4"]
[Sun Apr 19 01:57:27.903493 2026] [:error] [pid 33517:tid 33540] [client 72.146.12.65:38404] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccrheegr.php"] [unique_id "aePGB34Zz-rubR1wiZ-vPAAAANU"]
[Sun Apr 19 01:57:28.461820 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:50094] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePGCH4Zz-rubR1wiZ-vPgAAAMM"]
[Sun Apr 19 01:57:29.161164 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:49373] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePGCXFWunkyacYqsD07HgAAAUI"]
[Sun Apr 19 01:57:29.894853 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:24089] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePGCXFWunkyacYqsD07IAAAAUY"]
[Sun Apr 19 01:57:30.368542 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:24126] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePGCuXl4Yc-Lt5fJ9ihEAAAAQ8"]
[Sun Apr 19 01:57:31.090889 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:50077] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggddssvl.php"] [unique_id "aePGC0yD4Jm27Mb3NJh-AgAAAJQ"]
[Sun Apr 19 01:57:31.652809 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:49385] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggddssvl.php"] [unique_id "aePGC3FWunkyacYqsD07JQAAAUM"]
[Sun Apr 19 01:57:32.209189 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:24099] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggddssvl.php"] [unique_id "aePGDH4Zz-rubR1wiZ-vRwAAANA"]
[Sun Apr 19 01:57:32.758894 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:38451] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggddssvl.php"] [unique_id "aePGDEyD4Jm27Mb3NJh-BgAAAIk"]
[Sun Apr 19 01:57:33.257797 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:49407] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePGDUyD4Jm27Mb3NJh-CQAAAJU"]
[Sun Apr 19 01:57:33.782127 2026] [:error] [pid 32166:tid 32216] [client 72.146.12.65:50245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePGDZCHNkWwdiZnafLOSAAAAFI"]
[Sun Apr 19 01:57:34.285150 2026] [:error] [pid 33517:tid 33526] [client 72.146.12.65:49427] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePGDn4Zz-rubR1wiZ-vTAAAAMc"]
[Sun Apr 19 01:57:34.861059 2026] [:error] [pid 60910:tid 60916] [client 72.146.12.65:38467] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePGDnFWunkyacYqsD07KQAAAUQ"]
[Sun Apr 19 01:57:35.388733 2026] [:error] [pid 32252:tid 32267] [client 72.146.12.65:50300] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePGD-Xl4Yc-Lt5fJ9ihFAAAAQ0"]
[Sun Apr 19 01:57:35.961161 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:50282] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePGD34Zz-rubR1wiZ-vTwAAAMM"]
[Sun Apr 19 01:57:36.451766 2026] [:error] [pid 41277:tid 41300] [client 72.146.12.65:38403] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePGEEH3ayszMLZYflv4HwAAAZU"]
[Sun Apr 19 01:57:37.045245 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:50067] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePGEUH3ayszMLZYflv4IAAAAZE"]
[Sun Apr 19 01:57:37.570154 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:50082] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePGEXFWunkyacYqsD07OgAAAUU"]
[Sun Apr 19 01:57:38.166113 2026] [:error] [pid 32165:tid 32180] [client 72.146.12.65:23788] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePGEqe2vKwEk_N0Brb3jAAAAAs"]
[Sun Apr 19 01:57:38.764203 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:24093] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePGEkH3ayszMLZYflv4JAAAAYs"]
[Sun Apr 19 01:57:39.299903 2026] [:error] [pid 41277:tid 41285] [client 72.146.12.65:38452] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePGE0H3ayszMLZYflv4JgAAAYY"]
[Sun Apr 19 01:57:39.895101 2026] [:error] [pid 32165:tid 32181] [client 72.146.12.65:24071] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "aePGE6e2vKwEk_N0Brb3jgAAAAw"]
[Sun Apr 19 01:57:40.522641 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:38526] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "aePGFOXl4Yc-Lt5fJ9ihFgAAAQs"]
[Sun Apr 19 01:57:41.097964 2026] [:error] [pid 32167:tid 32241] [client 72.146.12.65:24101] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "aePGFUyD4Jm27Mb3NJh-EgAAAJA"]
[Sun Apr 19 01:57:41.805217 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:50108] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/erty.php"] [unique_id "aePGFXFWunkyacYqsD07RgAAAVI"]
[Sun Apr 19 01:57:42.379484 2026] [:error] [pid 33517:tid 33524] [client 72.146.12.65:50062] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop.php"] [unique_id "aePGFn4Zz-rubR1wiZ-vWgAAAMU"]
[Sun Apr 19 01:57:43.217502 2026] [:error] [pid 41277:tid 41281] [client 72.146.12.65:24077] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop.php"] [unique_id "aePGF0H3ayszMLZYflv4LAAAAYI"]
[Sun Apr 19 01:57:43.753864 2026] [:error] [pid 32165:tid 32188] [client 72.146.12.65:49401] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop.php"] [unique_id "aePGF6e2vKwEk_N0Brb3kgAAABM"]
[Sun Apr 19 01:57:44.367712 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:23747] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shop.php"] [unique_id "aePGGHFWunkyacYqsD07TgAAAUk"]
[Sun Apr 19 01:57:44.851057 2026] [:error] [pid 32166:tid 32206] [client 72.146.12.65:38480] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aePGGJCHNkWwdiZnafLOUwAAAEg"]
[Sun Apr 19 01:57:45.351295 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:38510] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aePGGX4Zz-rubR1wiZ-vXAAAAMo"]
[Sun Apr 19 01:57:45.860756 2026] [:error] [pid 32166:tid 32210] [client 72.146.12.65:23761] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aePGGZCHNkWwdiZnafLOVwAAAEw"]
[Sun Apr 19 01:57:46.351710 2026] [:error] [pid 32166:tid 32208] [client 72.146.12.65:50052] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/vx.php"] [unique_id "aePGGpCHNkWwdiZnafLOWwAAAEo"]
[Sun Apr 19 01:57:46.894859 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:50098] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0xD.php"] [unique_id "aePGGn4Zz-rubR1wiZ-vYAAAANc"]
[Sun Apr 19 01:57:47.478300 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:49468] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0xD.php"] [unique_id "aePGG0H3ayszMLZYflv4LwAAAZE"]
[Sun Apr 19 01:57:48.124016 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:45141] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0xD.php"] [unique_id "aePGHEH3ayszMLZYflv4MAAAAZA"]
[Sun Apr 19 01:57:48.603993 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:23769] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0xD.php"] [unique_id "aePGHEH3ayszMLZYflv4MgAAAYs"]
[Sun Apr 19 01:57:49.415297 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:50242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gh.php"] [unique_id "aePGHUyD4Jm27Mb3NJh-GQAAAIQ"]
[Sun Apr 19 01:57:49.970763 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:50057] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gh.php"] [unique_id "aePGHUyD4Jm27Mb3NJh-GwAAAJY"]
[Sun Apr 19 01:57:50.457798 2026] [:error] [pid 32166:tid 32222] [client 72.146.12.65:38429] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gh.php"] [unique_id "aePGHpCHNkWwdiZnafLOYQAAAFg"]
[Sun Apr 19 01:57:51.065580 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:38447] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gh.php"] [unique_id "aePGH0yD4Jm27Mb3NJh-HgAAAIE"]
[Sun Apr 19 01:57:51.775133 2026] [:error] [pid 32167:tid 32241] [client 72.146.12.65:38468] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aePGH0yD4Jm27Mb3NJh-IgAAAJA"]
[Sun Apr 19 01:57:52.255956 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:24075] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aePGIEyD4Jm27Mb3NJh-JAAAAIY"]
[Sun Apr 19 01:57:52.729283 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:38527] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aePGIEyD4Jm27Mb3NJh-JQAAAJc"]
[Sun Apr 19 01:57:53.930121 2026] [:error] [pid 32252:tid 32275] [client 72.146.12.65:24087] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aePGIeXl4Yc-Lt5fJ9ihIgAAARU"]
[Sun Apr 19 01:57:54.543193 2026] [:error] [pid 41277:tid 41302] [client 72.146.12.65:23782] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "aePGIkH3ayszMLZYflv4OAAAAZc"]
[Sun Apr 19 01:57:55.118498 2026] [:error] [pid 32165:tid 32172] [client 72.146.12.65:38473] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "aePGI6e2vKwEk_N0Brb3mAAAAAM"]
[Sun Apr 19 01:57:55.654757 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:38500] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "aePGI3FWunkyacYqsD07hgAAAUU"]
[Sun Apr 19 01:57:56.816752 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:38497] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sa.php7"] [unique_id "aePGJEH3ayszMLZYflv4PQAAAYw"]
[Sun Apr 19 01:57:57.574214 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:38489] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xigmltad.php"] [unique_id "aePGJXFWunkyacYqsD07jQAAAUM"]
[Sun Apr 19 01:57:58.166553 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:49428] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xigmltad.php"] [unique_id "aePGJnFWunkyacYqsD07kQAAAUI"]
[Sun Apr 19 01:57:58.719811 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:24091] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xigmltad.php"] [unique_id "aePGJkyD4Jm27Mb3NJh-MAAAAJI"]
[Sun Apr 19 01:57:59.269114 2026] [:error] [pid 60910:tid 60927] [client 72.146.12.65:49394] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xigmltad.php"] [unique_id "aePGJ3FWunkyacYqsD07mAAAAU8"]
[Sun Apr 19 01:58:00.081230 2026] [:error] [pid 41277:tid 41301] [client 72.146.12.65:50087] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aePGKEH3ayszMLZYflv4PwAAAZY"]
[Sun Apr 19 01:58:00.592573 2026] [:error] [pid 33517:tid 33519] [client 72.146.12.65:50050] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aePGKH4Zz-rubR1wiZ-vfwAAAMA"]
[Sun Apr 19 01:58:01.272619 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:50271] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aePGKX4Zz-rubR1wiZ-vgwAAAMs"]
[Sun Apr 19 01:58:02.116639 2026] [:error] [pid 32252:tid 32276] [client 72.146.12.65:50073] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aePGKuXl4Yc-Lt5fJ9ihJAAAARY"]
[Sun Apr 19 01:58:02.858065 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:50295] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aePGKkyD4Jm27Mb3NJh-NAAAAIo"]
[Sun Apr 19 01:58:03.723226 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:49349] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aePGK0H3ayszMLZYflv4SAAAAYc"]
[Sun Apr 19 01:58:04.606408 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:50297] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aePGLEH3ayszMLZYflv4SwAAAYw"]
[Sun Apr 19 01:58:05.364903 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:23773] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aePGLUyD4Jm27Mb3NJh-OAAAAIA"]
[Sun Apr 19 01:58:06.268492 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:38435] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sad.php"] [unique_id "aePGLkyD4Jm27Mb3NJh-PgAAAIk"]
[Sun Apr 19 01:58:06.882863 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:38454] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sad.php"] [unique_id "aePGLkyD4Jm27Mb3NJh-QAAAAIc"]
[Sun Apr 19 01:58:07.464431 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:38419] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sad.php"] [unique_id "aePGL0H3ayszMLZYflv4TQAAAY0"]
[Sun Apr 19 01:58:08.103298 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:46173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sad.php"] [unique_id "aePGMEyD4Jm27Mb3NJh-RAAAAI4"]
[Sun Apr 19 01:58:08.709545 2026] [:error] [pid 32165:tid 32179] [client 72.146.12.65:50068] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "aePGMKe2vKwEk_N0Brb3pAAAAAo"]
[Sun Apr 19 01:58:09.215947 2026] [:error] [pid 41277:tid 41282] [client 72.146.12.65:24094] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "aePGMUH3ayszMLZYflv4UgAAAYM"]
[Sun Apr 19 01:58:09.813847 2026] [:error] [pid 32252:tid 32254] [client 72.146.12.65:23761] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "aePGMeXl4Yc-Lt5fJ9ihKAAAAQA"]
[Sun Apr 19 01:58:10.422676 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:46150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws77.php"] [unique_id "aePGMnFWunkyacYqsD07tAAAAVc"]
[Sun Apr 19 01:58:10.909987 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:24073] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gi.php"] [unique_id "aePGMkyD4Jm27Mb3NJh-rAAAAI4"]
[Sun Apr 19 01:58:11.414687 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:24081] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gi.php"] [unique_id "aePGM0yD4Jm27Mb3NJh-xAAAAIs"]
[Sun Apr 19 01:58:11.912791 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:23764] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gi.php"] [unique_id "aePGM0yD4Jm27Mb3NJh-1wAAAJI"]
[Sun Apr 19 01:58:12.389398 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:23763] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gi.php"] [unique_id "aePGNH4Zz-rubR1wiZ-vqQAAAMg"]
[Sun Apr 19 01:58:12.912131 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:46155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aePGNEH3ayszMLZYflv4agAAAYs"]
[Sun Apr 19 01:58:13.435100 2026] [proxy_fcgi:error] [pid 41277:tid 41285] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:13.702595 2026] [proxy_fcgi:error] [pid 41277:tid 41292] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:13.938755 2026] [proxy_fcgi:error] [pid 41277:tid 41284] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:14.197337 2026] [proxy_fcgi:error] [pid 41277:tid 41294] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:14.433743 2026] [proxy_fcgi:error] [pid 41277:tid 41302] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:14.670453 2026] [proxy_fcgi:error] [pid 41277:tid 41287] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:14.907774 2026] [proxy_fcgi:error] [pid 41277:tid 41286] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:15.167184 2026] [proxy_fcgi:error] [pid 41277:tid 41293] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:15.436211 2026] [proxy_fcgi:error] [pid 41277:tid 41281] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:15.713021 2026] [proxy_fcgi:error] [pid 41277:tid 41303] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:15.967077 2026] [proxy_fcgi:error] [pid 41277:tid 41283] [client 72.146.12.65:46180] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:58:16.200839 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:46180] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123.php"] [unique_id "aePGOEH3ayszMLZYflv4gQAAAYA"]
[Sun Apr 19 01:58:16.775154 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:23792] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123.php"] [unique_id "aePGOEyD4Jm27Mb3NJh_IwAAAIo"]
[Sun Apr 19 01:58:17.316247 2026] [:error] [pid 32252:tid 32264] [client 72.146.12.65:49383] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123.php"] [unique_id "aePGOeXl4Yc-Lt5fJ9ihKwAAAQo"]
[Sun Apr 19 01:58:17.925071 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:38431] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x123.php"] [unique_id "aePGOeXl4Yc-Lt5fJ9ihLQAAAQs"]
[Sun Apr 19 01:58:18.604862 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:49378] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aePGOn4Zz-rubR1wiZ-vvAAAAM0"]
[Sun Apr 19 01:58:19.112777 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:23756] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aePGO34Zz-rubR1wiZ-vvQAAAMg"]
[Sun Apr 19 01:58:19.623087 2026] [:error] [pid 33517:tid 33524] [client 72.146.12.65:50299] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aePGO34Zz-rubR1wiZ-vvgAAAMU"]
[Sun Apr 19 01:58:20.698903 2026] [:error] [pid 32167:tid 32233] [client 72.146.12.65:49408] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aePGPEyD4Jm27Mb3NJh_JgAAAIg"]
[Sun Apr 19 01:58:21.225549 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:49345] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp5.php"] [unique_id "aePGPX4Zz-rubR1wiZ-vwAAAANA"]
[Sun Apr 19 01:58:21.742957 2026] [:error] [pid 41277:tid 41299] [client 72.146.12.65:38475] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp5.php"] [unique_id "aePGPUH3ayszMLZYflv4gwAAAZQ"]
[Sun Apr 19 01:58:22.240830 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:45151] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp5.php"] [unique_id "aePGPn4Zz-rubR1wiZ-vwwAAAMI"]
[Sun Apr 19 01:58:22.745318 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:38401] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lp5.php"] [unique_id "aePGPuXl4Yc-Lt5fJ9ihOgAAAQ8"]
[Sun Apr 19 01:58:23.330443 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:24084] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aePGP3FWunkyacYqsD078wAAAVI"]
[Sun Apr 19 01:58:24.118769 2026] [:error] [pid 32166:tid 32221] [client 72.146.12.65:50262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aePGQJCHNkWwdiZnafLOfwAAAFc"]
[Sun Apr 19 01:58:24.744760 2026] [:error] [pid 32166:tid 32203] [client 72.146.12.65:49405] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aePGQJCHNkWwdiZnafLOhAAAAEU"]
[Sun Apr 19 01:58:25.242112 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:24088] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aePGQXFWunkyacYqsD079gAAAUo"]
[Sun Apr 19 01:58:25.749144 2026] [:error] [pid 32252:tid 32272] [client 72.146.12.65:50286] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit-tags.php"] [unique_id "aePGQeXl4Yc-Lt5fJ9ihWAAAARI"]
[Sun Apr 19 01:58:26.225830 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:38423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit-tags.php"] [unique_id "aePGQkyD4Jm27Mb3NJh_OAAAAJY"]
[Sun Apr 19 01:58:26.700719 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:23759] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit-tags.php"] [unique_id "aePGQnFWunkyacYqsD07-AAAAUk"]
[Sun Apr 19 01:58:27.178288 2026] [:error] [pid 41277:tid 41289] [client 72.146.12.65:38400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit-tags.php"] [unique_id "aePGQ0H3ayszMLZYflv4lAAAAYo"]
[Sun Apr 19 01:58:27.664950 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:46169] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aePGQ34Zz-rubR1wiZ-v0QAAAM0"]
[Sun Apr 19 01:58:28.191869 2026] [:error] [pid 32165:tid 32188] [client 72.146.12.65:49464] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aePGRKe2vKwEk_N0Brb3xAAAABM"]
[Sun Apr 19 01:58:28.711110 2026] [:error] [pid 32165:tid 32177] [client 72.146.12.65:38491] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aePGRKe2vKwEk_N0Brb3xgAAAAg"]
[Sun Apr 19 01:58:29.332334 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:23745] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aePGRUH3ayszMLZYflv4owAAAY8"]
[Sun Apr 19 01:58:29.870938 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:38430] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc2.php"] [unique_id "aePGReXl4Yc-Lt5fJ9ihgwAAAQ8"]
[Sun Apr 19 01:58:30.373414 2026] [:error] [pid 32166:tid 32198] [client 72.146.12.65:42352] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc2.php"] [unique_id "aePGRpCHNkWwdiZnafLOpAAAAEA"]
[Sun Apr 19 01:58:30.870304 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:23794] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc2.php"] [unique_id "aePGRkyD4Jm27Mb3NJh_SwAAAIE"]
[Sun Apr 19 01:58:31.361483 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:38415] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpc2.php"] [unique_id "aePGR0yD4Jm27Mb3NJh_TAAAAJg"]
[Sun Apr 19 01:58:31.904787 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:49413] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/intall.php"] [unique_id "aePGR0yD4Jm27Mb3NJh_TQAAAJM"]
[Sun Apr 19 01:58:32.424356 2026] [:error] [pid 60910:tid 60912] [client 72.146.12.65:42364] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/intall.php"] [unique_id "aePGSHFWunkyacYqsD07_wAAAUA"]
[Sun Apr 19 01:58:32.912251 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:38505] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/intall.php"] [unique_id "aePGSOXl4Yc-Lt5fJ9ihlgAAAQ8"]
[Sun Apr 19 01:58:33.556217 2026] [:error] [pid 33517:tid 33528] [client 72.146.12.65:42244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/intall.php"] [unique_id "aePGSX4Zz-rubR1wiZ-v2gAAAMk"]
[Sun Apr 19 01:58:34.038047 2026] [:error] [pid 60910:tid 60928] [client 72.146.12.65:49447] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aePGSnFWunkyacYqsD08BAAAAVA"]
[Sun Apr 19 01:58:34.545410 2026] [:error] [pid 32166:tid 32211] [client 72.146.12.65:23781] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aePGSpCHNkWwdiZnafLOqAAAAE0"]
[Sun Apr 19 01:58:35.076510 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:49384] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aePGS0yD4Jm27Mb3NJh_UQAAAIk"]
[Sun Apr 19 01:58:35.567791 2026] [:error] [pid 41277:tid 41293] [client 72.146.12.65:38524] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aePGS0H3ayszMLZYflv4xQAAAY4"]
[Sun Apr 19 01:58:36.070785 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:50048] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "aePGTEH3ayszMLZYflv4xwAAAYU"]
[Sun Apr 19 01:58:36.649466 2026] [:error] [pid 41277:tid 41298] [client 72.146.12.65:49437] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "aePGTEH3ayszMLZYflv4yAAAAZM"]
[Sun Apr 19 01:58:37.138408 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:45182] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "aePGTUyD4Jm27Mb3NJh_bwAAAIE"]
[Sun Apr 19 01:58:37.616484 2026] [:error] [pid 41277:tid 41299] [client 72.146.12.65:42309] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/callback.php"] [unique_id "aePGTUH3ayszMLZYflv4yQAAAZQ"]
[Sun Apr 19 01:58:38.091018 2026] [:error] [pid 41277:tid 41297] [client 72.146.12.65:23796] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aePGTkH3ayszMLZYflv4zAAAAZI"]
[Sun Apr 19 01:58:38.697546 2026] [:error] [pid 33517:tid 33519] [client 72.146.12.65:38402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aePGTn4Zz-rubR1wiZ-v4AAAAMA"]
[Sun Apr 19 01:58:39.207371 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:49465] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aePGT34Zz-rubR1wiZ-v4wAAAMI"]
[Sun Apr 19 01:58:39.707529 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:50095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aePGT3FWunkyacYqsD08DQAAAUk"]
[Sun Apr 19 01:58:40.790434 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:50287] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "aePGUEH3ayszMLZYflv4zwAAAYc"]
[Sun Apr 19 01:58:41.262213 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:49449] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "aePGUX4Zz-rubR1wiZ-v5gAAAMs"]
[Sun Apr 19 01:58:41.806341 2026] [:error] [pid 32165:tid 32175] [client 72.146.12.65:38422] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "aePGUae2vKwEk_N0Brb4PwAAAAY"]
[Sun Apr 19 01:58:42.404180 2026] [:error] [pid 60910:tid 60913] [client 72.146.12.65:24106] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abrand.php"] [unique_id "aePGUnFWunkyacYqsD08FgAAAUE"]
[Sun Apr 19 01:58:42.913681 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:38459] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/camara.php"] [unique_id "aePGUnFWunkyacYqsD08GQAAAUo"]
[Sun Apr 19 01:58:43.475309 2026] [:error] [pid 41277:tid 41285] [client 72.146.12.65:46186] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/camara.php"] [unique_id "aePGU0H3ayszMLZYflv40gAAAYY"]
[Sun Apr 19 01:58:43.980136 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:38499] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/camara.php"] [unique_id "aePGU0yD4Jm27Mb3NJh_fgAAAIc"]
[Sun Apr 19 01:58:44.536364 2026] [:error] [pid 32165:tid 32180] [client 72.146.12.65:38412] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/camara.php"] [unique_id "aePGVKe2vKwEk_N0Brb4QAAAAAs"]
[Sun Apr 19 01:58:45.067358 2026] [:error] [pid 32166:tid 32216] [client 72.146.12.65:23752] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assacc.php"] [unique_id "aePGVZCHNkWwdiZnafLOrAAAAFI"]
[Sun Apr 19 01:58:45.597493 2026] [:error] [pid 32166:tid 32208] [client 72.146.12.65:24111] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assacc.php"] [unique_id "aePGVZCHNkWwdiZnafLOrQAAAEo"]
[Sun Apr 19 01:58:46.108476 2026] [:error] [pid 32165:tid 32179] [client 72.146.12.65:23744] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assacc.php"] [unique_id "aePGVqe2vKwEk_N0Brb4QwAAAAo"]
[Sun Apr 19 01:58:46.617452 2026] [:error] [pid 32166:tid 32217] [client 72.146.12.65:24115] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/assacc.php"] [unique_id "aePGVpCHNkWwdiZnafLOsAAAAFM"]
[Sun Apr 19 01:58:47.228385 2026] [:error] [pid 41277:tid 41297] [client 72.146.12.65:50289] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "aePGV0H3ayszMLZYflv42QAAAZI"]
[Sun Apr 19 01:58:47.742215 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:46149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "aePGV0H3ayszMLZYflv42gAAAYg"]
[Sun Apr 19 01:58:48.230659 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:50093] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "aePGWH4Zz-rubR1wiZ-v6wAAANc"]
[Sun Apr 19 01:58:48.827331 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:50302] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws83.php"] [unique_id "aePGWHFWunkyacYqsD08KAAAAUk"]
[Sun Apr 19 01:58:49.398560 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:42354] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aePGWUyD4Jm27Mb3NJh_fwAAAI4"]
[Sun Apr 19 01:58:50.461173 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:45123] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aePGWnFWunkyacYqsD08LgAAAVg"]
[Sun Apr 19 01:58:51.929826 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:50266] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aePGW34Zz-rubR1wiZ-v8QAAAMs"]
[Sun Apr 19 01:58:52.789151 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:50064] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aePGXH4Zz-rubR1wiZ-v8gAAAMw"]
[Sun Apr 19 01:58:53.265148 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:23760] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePGXUyD4Jm27Mb3NJh_hQAAAIY"]
[Sun Apr 19 01:58:54.081270 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:24066] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePGXkyD4Jm27Mb3NJh_iAAAAIQ"]
[Sun Apr 19 01:58:54.555854 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:50053] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePGXkyD4Jm27Mb3NJh_jQAAAIk"]
[Sun Apr 19 01:58:55.147509 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:23767] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePGX0H3ayszMLZYflv44gAAAYk"]
[Sun Apr 19 01:58:55.643437 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:49426] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtsr.php"] [unique_id "aePGX0H3ayszMLZYflv44wAAAYs"]
[Sun Apr 19 01:58:56.496318 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:46172] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtsr.php"] [unique_id "aePGYOXl4Yc-Lt5fJ9ihsQAAAQs"]
[Sun Apr 19 01:58:57.028370 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:50248] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtsr.php"] [unique_id "aePGYUyD4Jm27Mb3NJh_lAAAAIo"]
[Sun Apr 19 01:58:57.621702 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:50054] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtsr.php"] [unique_id "aePGYUyD4Jm27Mb3NJh_lgAAAIY"]
[Sun Apr 19 01:58:58.094280 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:49417] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "aePGYkyD4Jm27Mb3NJh_mAAAAJI"]
[Sun Apr 19 01:58:58.684120 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:23807] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "aePGYkH3ayszMLZYflv45QAAAYU"]
[Sun Apr 19 01:58:59.165901 2026] [:error] [pid 41277:tid 41289] [client 72.146.12.65:50240] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "aePGY0H3ayszMLZYflv46QAAAYo"]
[Sun Apr 19 01:58:59.743177 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:46202] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zz8.php"] [unique_id "aePGY3FWunkyacYqsD08NwAAAUo"]
[Sun Apr 19 01:59:00.215924 2026] [:error] [pid 60910:tid 60931] [client 72.146.12.65:42354] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aePGZHFWunkyacYqsD08OAAAAVM"]
[Sun Apr 19 01:59:00.720403 2026] [:error] [pid 32165:tid 32185] [client 72.146.12.65:38472] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aePGZKe2vKwEk_N0Brb4UQAAABA"]
[Sun Apr 19 01:59:01.200607 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:49423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aePGZUyD4Jm27Mb3NJh_ngAAAJg"]
[Sun Apr 19 01:59:01.730935 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:49444] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aePGZUyD4Jm27Mb3NJh_oQAAAIA"]
[Sun Apr 19 01:59:02.228434 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:49460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aePGZkyD4Jm27Mb3NJh_pAAAAIQ"]
[Sun Apr 19 01:59:02.739091 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:50246] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aePGZkyD4Jm27Mb3NJh_pQAAAIk"]
[Sun Apr 19 01:59:03.217289 2026] [:error] [pid 32167:tid 32233] [client 72.146.12.65:49387] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aePGZ0yD4Jm27Mb3NJh_qAAAAIg"]
[Sun Apr 19 01:59:03.731536 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:49402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aePGZ3FWunkyacYqsD08QAAAAUw"]
[Sun Apr 19 01:59:04.554149 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:24103] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aePGaEyD4Jm27Mb3NJh_qwAAAJE"]
[Sun Apr 19 01:59:05.056694 2026] [:error] [pid 32252:tid 32278] [client 72.146.12.65:46165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aePGaeXl4Yc-Lt5fJ9ihuwAAARg"]
[Sun Apr 19 01:59:05.564542 2026] [:error] [pid 60910:tid 60927] [client 72.146.12.65:38421] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aePGaXFWunkyacYqsD08SAAAAU8"]
[Sun Apr 19 01:59:06.095715 2026] [:error] [pid 60910:tid 60934] [client 72.146.12.65:39029] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aePGanFWunkyacYqsD08SwAAAVY"]
[Sun Apr 19 01:59:06.642629 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:38409] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amwxl.php"] [unique_id "aePGakyD4Jm27Mb3NJh_rgAAAIQ"]
[Sun Apr 19 01:59:07.129215 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:38484] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amwxl.php"] [unique_id "aePGa0yD4Jm27Mb3NJh_sAAAAJM"]
[Sun Apr 19 01:59:07.700196 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:45174] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amwxl.php"] [unique_id "aePGa0yD4Jm27Mb3NJh_swAAAJY"]
[Sun Apr 19 01:59:08.189126 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:38494] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amwxl.php"] [unique_id "aePGbEyD4Jm27Mb3NJh_tQAAAIU"]
[Sun Apr 19 01:59:08.796839 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:49460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awdld.php"] [unique_id "aePGbEyD4Jm27Mb3NJh_uAAAAIM"]
[Sun Apr 19 01:59:09.286012 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:50075] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awdld.php"] [unique_id "aePGbUyD4Jm27Mb3NJh_vQAAAJM"]
[Sun Apr 19 01:59:09.784059 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:46194] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awdld.php"] [unique_id "aePGbUyD4Jm27Mb3NJh_wAAAAIo"]
[Sun Apr 19 01:59:10.263181 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:38450] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awdld.php"] [unique_id "aePGbkH3ayszMLZYflv4-gAAAYg"]
[Sun Apr 19 01:59:10.769369 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:23787] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "aePGbkyD4Jm27Mb3NJh_xAAAAIE"]
[Sun Apr 19 01:59:11.296854 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:38436] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "aePGb0yD4Jm27Mb3NJh_xQAAAIY"]
[Sun Apr 19 01:59:11.791076 2026] [:error] [pid 60910:tid 60923] [client 72.146.12.65:38519] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "aePGb3FWunkyacYqsD08UgAAAUs"]
[Sun Apr 19 01:59:12.287329 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:38444] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bkyac.php"] [unique_id "aePGcEyD4Jm27Mb3NJh_yQAAAII"]
[Sun Apr 19 01:59:12.769117 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:38477] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krntz.php"] [unique_id "aePGcEyD4Jm27Mb3NJh_ywAAAI4"]
[Sun Apr 19 01:59:13.241867 2026] [:error] [pid 33517:tid 33524] [client 72.146.12.65:50058] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krntz.php"] [unique_id "aePGcX4Zz-rubR1wiZ-wDQAAAMU"]
[Sun Apr 19 01:59:13.800262 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:46176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krntz.php"] [unique_id "aePGcUH3ayszMLZYflv4_wAAAYs"]
[Sun Apr 19 01:59:14.293198 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:38405] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/krntz.php"] [unique_id "aePGcn4Zz-rubR1wiZ-wDgAAAMg"]
[Sun Apr 19 01:59:14.813428 2026] [:error] [pid 32252:tid 32275] [client 72.146.12.65:38504] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aePGcuXl4Yc-Lt5fJ9ihxQAAARU"]
[Sun Apr 19 01:59:15.333661 2026] [proxy_fcgi:error] [pid 32166:tid 32214] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:15.570598 2026] [proxy_fcgi:error] [pid 32166:tid 32198] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:15.842259 2026] [proxy_fcgi:error] [pid 32166:tid 32213] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:16.078927 2026] [proxy_fcgi:error] [pid 32166:tid 32204] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:16.321934 2026] [proxy_fcgi:error] [pid 32166:tid 32205] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:16.559494 2026] [proxy_fcgi:error] [pid 32166:tid 32220] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:16.795615 2026] [proxy_fcgi:error] [pid 32166:tid 32211] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:17.037711 2026] [proxy_fcgi:error] [pid 32166:tid 32221] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:17.274274 2026] [proxy_fcgi:error] [pid 32166:tid 32201] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:17.531508 2026] [proxy_fcgi:error] [pid 32166:tid 32210] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:17.767470 2026] [proxy_fcgi:error] [pid 32166:tid 32222] [client 72.146.12.65:38520] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 01:59:18.000771 2026] [:error] [pid 32166:tid 32219] [client 72.146.12.65:38520] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lclnqiii.php"] [unique_id "aePGdZCHNkWwdiZnafLOzwAAAFU"]
[Sun Apr 19 01:59:18.512263 2026] [:error] [pid 32252:tid 32272] [client 72.146.12.65:23751] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lclnqiii.php"] [unique_id "aePGduXl4Yc-Lt5fJ9ihxwAAARI"]
[Sun Apr 19 01:59:19.003823 2026] [:error] [pid 32252:tid 32274] [client 72.146.12.65:38483] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lclnqiii.php"] [unique_id "aePGd-Xl4Yc-Lt5fJ9ihyAAAARQ"]
[Sun Apr 19 01:59:19.512703 2026] [:error] [pid 32252:tid 32262] [client 72.146.12.65:49398] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lclnqiii.php"] [unique_id "aePGd-Xl4Yc-Lt5fJ9ihywAAAQg"]
[Sun Apr 19 01:59:20.051675 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:23753] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat.php"] [unique_id "aePGeHFWunkyacYqsD08VgAAAVI"]
[Sun Apr 19 01:59:20.586113 2026] [:error] [pid 32252:tid 32271] [client 72.146.12.65:46190] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat.php"] [unique_id "aePGeOXl4Yc-Lt5fJ9ih0gAAARE"]
[Sun Apr 19 01:59:21.102769 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:38465] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat.php"] [unique_id "aePGeUH3ayszMLZYflv5BAAAAY8"]
[Sun Apr 19 01:59:21.592982 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:24116] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goat.php"] [unique_id "aePGeUH3ayszMLZYflv5BQAAAYg"]
[Sun Apr 19 01:59:22.213348 2026] [:error] [pid 32165:tid 32187] [client 72.146.12.65:49362] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "aePGeqe2vKwEk_N0Brb4VwAAABI"]
[Sun Apr 19 01:59:22.719355 2026] [:error] [pid 32165:tid 32172] [client 72.146.12.65:50063] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "aePGeqe2vKwEk_N0Brb4WgAAAAM"]
[Sun Apr 19 01:59:23.229722 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:46152] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "aePGe5CHNkWwdiZnafLO0wAAAEs"]
[Sun Apr 19 01:59:23.756120 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:38485] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tot.php"] [unique_id "aePGe34Zz-rubR1wiZ-wFgAAAM4"]
[Sun Apr 19 01:59:24.228367 2026] [:error] [pid 41277:tid 41300] [client 72.146.12.65:49432] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tap.php"] [unique_id "aePGfEH3ayszMLZYflv5BwAAAZU"]
[Sun Apr 19 01:59:24.765301 2026] [:error] [pid 32166:tid 32214] [client 72.146.12.65:23790] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tap.php"] [unique_id "aePGfJCHNkWwdiZnafLO1QAAAFA"]
[Sun Apr 19 01:59:25.242879 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:49397] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tap.php"] [unique_id "aePGfUH3ayszMLZYflv5CQAAAYA"]
[Sun Apr 19 01:59:25.849262 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:24119] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tap.php"] [unique_id "aePGfX4Zz-rubR1wiZ-wHQAAAMg"]
[Sun Apr 19 01:59:26.362898 2026] [:error] [pid 33517:tid 33537] [client 72.146.12.65:49453] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vrhiw.php"] [unique_id "aePGfn4Zz-rubR1wiZ-wHwAAANI"]
[Sun Apr 19 01:59:26.988416 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:49430] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vrhiw.php"] [unique_id "aePGfkH3ayszMLZYflv5DwAAAZA"]
[Sun Apr 19 01:59:27.472075 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:50263] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vrhiw.php"] [unique_id "aePGf3FWunkyacYqsD08VwAAAUU"]
[Sun Apr 19 01:59:28.005219 2026] [:error] [pid 32165:tid 32185] [client 72.146.12.65:45175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vrhiw.php"] [unique_id "aePGgKe2vKwEk_N0Brb4XQAAABA"]
[Sun Apr 19 01:59:28.554302 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:50251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqjki.php"] [unique_id "aePGgEH3ayszMLZYflv5EQAAAY8"]
[Sun Apr 19 01:59:29.197544 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:23803] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqjki.php"] [unique_id "aePGgUH3ayszMLZYflv5EgAAAYg"]
[Sun Apr 19 01:59:29.897168 2026] [:error] [pid 41277:tid 41300] [client 72.146.12.65:23771] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqjki.php"] [unique_id "aePGgUH3ayszMLZYflv5EwAAAZU"]
[Sun Apr 19 01:59:30.414769 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:49435] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qqjki.php"] [unique_id "aePGgn4Zz-rubR1wiZ-wJQAAAMs"]
[Sun Apr 19 01:59:30.951442 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:38413] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aePGgkH3ayszMLZYflv5FAAAAYs"]
[Sun Apr 19 01:59:31.662276 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:49386] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aePGg34Zz-rubR1wiZ-wKQAAANM"]
[Sun Apr 19 01:59:32.220697 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:38462] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aePGhEyD4Jm27Mb3NJh_1gAAAIs"]
[Sun Apr 19 01:59:32.756464 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:38432] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aePGhEyD4Jm27Mb3NJh_2AAAAIk"]
[Sun Apr 19 01:59:33.270464 2026] [:error] [pid 33517:tid 33525] [client 72.146.12.65:46166] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePGhX4Zz-rubR1wiZ-wLAAAAMY"]
[Sun Apr 19 01:59:33.867942 2026] [:error] [pid 60910:tid 60912] [client 72.146.12.65:45137] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePGhXFWunkyacYqsD08XAAAAUA"]
[Sun Apr 19 01:59:34.372586 2026] [:error] [pid 32166:tid 32211] [client 72.146.12.65:23766] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePGhpCHNkWwdiZnafLO2wAAAE0"]
[Sun Apr 19 01:59:34.882186 2026] [:error] [pid 32252:tid 32275] [client 72.146.12.65:50099] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/baixy.php"] [unique_id "aePGhuXl4Yc-Lt5fJ9ih-AAAARU"]
[Sun Apr 19 01:59:35.381670 2026] [:error] [pid 41277:tid 41301] [client 72.146.12.65:42346] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aePGh0H3ayszMLZYflv5GAAAAZY"]
[Sun Apr 19 01:59:35.908999 2026] [:error] [pid 32166:tid 32199] [client 72.146.12.65:49350] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aePGh5CHNkWwdiZnafLO3AAAAEE"]
[Sun Apr 19 01:59:36.374189 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:50265] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aePGiEH3ayszMLZYflv5GQAAAZg"]
[Sun Apr 19 01:59:36.853635 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:38525] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aePGiH4Zz-rubR1wiZ-wMwAAAMM"]
[Sun Apr 19 01:59:37.682662 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:45164] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aePGiUyD4Jm27Mb3NJh_2wAAAIE"]
[Sun Apr 19 01:59:38.354155 2026] [:error] [pid 41277:tid 41300] [client 72.146.12.65:45138] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aePGikH3ayszMLZYflv5HgAAAZU"]
[Sun Apr 19 01:59:38.948157 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:49370] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aePGikH3ayszMLZYflv5IQAAAYs"]
[Sun Apr 19 01:59:39.434980 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:24105] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/torsa1.php"] [unique_id "aePGi0H3ayszMLZYflv5IwAAAYw"]
[Sun Apr 19 01:59:39.923646 2026] [:error] [pid 41277:tid 41293] [client 72.146.12.65:49461] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "aePGi0H3ayszMLZYflv5JwAAAY4"]
[Sun Apr 19 01:59:40.421559 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:38427] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "aePGjEH3ayszMLZYflv5KQAAAZg"]
[Sun Apr 19 01:59:40.926756 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:46179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "aePGjOXl4Yc-Lt5fJ9ih-gAAAQ8"]
[Sun Apr 19 01:59:41.394888 2026] [:error] [pid 33517:tid 33540] [client 72.146.12.65:49452] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bjfl.php"] [unique_id "aePGjX4Zz-rubR1wiZ-wPwAAANU"]
[Sun Apr 19 01:59:41.907304 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:50079] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "aePGjX4Zz-rubR1wiZ-wQgAAAMg"]
[Sun Apr 19 01:59:42.429457 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:38463] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "aePGjn4Zz-rubR1wiZ-wRgAAAMI"]
[Sun Apr 19 01:59:42.933602 2026] [:error] [pid 33517:tid 33519] [client 72.146.12.65:49462] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "aePGjn4Zz-rubR1wiZ-wRwAAAMA"]
[Sun Apr 19 01:59:43.443532 2026] [:error] [pid 33517:tid 33536] [client 72.146.12.65:50105] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buc.php"] [unique_id "aePGj34Zz-rubR1wiZ-wSQAAANE"]
[Sun Apr 19 01:59:43.937752 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:50111] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "aePGj34Zz-rubR1wiZ-wTAAAANA"]
[Sun Apr 19 01:59:44.492000 2026] [:error] [pid 33517:tid 33526] [client 72.146.12.65:24109] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "aePGkH4Zz-rubR1wiZ-wTgAAAMc"]
[Sun Apr 19 01:59:44.971475 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:49457] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "aePGkH4Zz-rubR1wiZ-wUQAAAM0"]
[Sun Apr 19 01:59:45.504599 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:38433] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rithin.php"] [unique_id "aePGkX4Zz-rubR1wiZ-wUgAAAMI"]
[Sun Apr 19 01:59:46.115402 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:50241] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aePGkn4Zz-rubR1wiZ-wVQAAAMQ"]
[Sun Apr 19 01:59:46.702495 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:46199] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aePGkn4Zz-rubR1wiZ-wVwAAANM"]
[Sun Apr 19 01:59:47.373657 2026] [:error] [pid 41277:tid 41282] [client 72.146.12.65:46185] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aePGk0H3ayszMLZYflv5OAAAAYM"]
[Sun Apr 19 01:59:47.901217 2026] [:error] [pid 33517:tid 33537] [client 72.146.12.65:45167] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aePGk34Zz-rubR1wiZ-wXAAAANI"]
[Sun Apr 19 01:59:48.433179 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:23774] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "aePGlH4Zz-rubR1wiZ-wYQAAAM0"]
[Sun Apr 19 01:59:48.936540 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:45154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "aePGlEyD4Jm27Mb3NJh_3AAAAJE"]
[Sun Apr 19 01:59:49.513034 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:49450] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "aePGlXFWunkyacYqsD08XwAAAVI"]
[Sun Apr 19 01:59:49.981183 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:42307] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xfun.php"] [unique_id "aePGlUyD4Jm27Mb3NJh_4gAAAII"]
[Sun Apr 19 01:59:50.497400 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:38455] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aePGlkyD4Jm27Mb3NJh_5wAAAIs"]
[Sun Apr 19 01:59:51.020134 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:49395] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aePGl0yD4Jm27Mb3NJh_6QAAAIo"]
[Sun Apr 19 01:59:51.586443 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:23768] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aePGl0yD4Jm27Mb3NJh_8AAAAJY"]
[Sun Apr 19 01:59:52.099590 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:24082] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aePGmEyD4Jm27Mb3NJh_-AAAAIk"]
[Sun Apr 19 01:59:52.660837 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:45132] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aePGmHFWunkyacYqsD08ZgAAAUg"]
[Sun Apr 19 01:59:53.223761 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:23795] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aePGmUyD4Jm27Mb3NJiABAAAAIk"]
[Sun Apr 19 01:59:53.747575 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:49358] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aePGmX4Zz-rubR1wiZ-wZQAAANA"]
[Sun Apr 19 01:59:54.253919 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:45126] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aePGmn4Zz-rubR1wiZ-wZwAAAMo"]
[Sun Apr 19 01:59:54.988346 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:23777] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aePGmkyD4Jm27Mb3NJiACgAAAJc"]
[Sun Apr 19 01:59:55.518853 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:42282] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aePGm0yD4Jm27Mb3NJiADAAAAJg"]
[Sun Apr 19 01:59:56.020277 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:38441] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aePGnEH3ayszMLZYflv5QAAAAYw"]
[Sun Apr 19 01:59:56.603589 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:49352] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aePGnEH3ayszMLZYflv5QgAAAYQ"]
[Sun Apr 19 01:59:57.257480 2026] [:error] [pid 33517:tid 33536] [client 72.146.12.65:49448] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "aePGnX4Zz-rubR1wiZ-waQAAANE"]
[Sun Apr 19 01:59:57.885118 2026] [:error] [pid 32165:tid 32178] [client 72.146.12.65:49441] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "aePGnae2vKwEk_N0Brb4cQAAAAk"]
[Sun Apr 19 01:59:58.955105 2026] [:error] [pid 32165:tid 32183] [client 72.146.12.65:45173] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "aePGnqe2vKwEk_N0Brb4dgAAAA4"]
[Sun Apr 19 01:59:59.852068 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:50269] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Cap.php"] [unique_id "aePGn34Zz-rubR1wiZ-wbQAAAM0"]
[Sun Apr 19 02:00:01.139774 2026] [:error] [pid 41277:tid 41302] [client 72.146.12.65:49429] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "aePGoUH3ayszMLZYflv5SAAAAZc"]
[Sun Apr 19 02:00:01.824557 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:49388] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "aePGoUH3ayszMLZYflv5SwAAAYs"]
[Sun Apr 19 02:00:02.483795 2026] [:error] [pid 60910:tid 60932] [client 72.146.12.65:49360] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "aePGonFWunkyacYqsD08aQAAAVQ"]
[Sun Apr 19 02:00:03.188705 2026] [:error] [pid 33517:tid 33539] [client 72.146.12.65:49351] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/h2.php"] [unique_id "aePGo34Zz-rubR1wiZ-wdAAAANQ"]
[Sun Apr 19 02:00:03.844715 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:38428] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aePGo34Zz-rubR1wiZ-weQAAAMg"]
[Sun Apr 19 02:00:04.982135 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:42299] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aePGpH4Zz-rubR1wiZ-wgQAAAMo"]
[Sun Apr 19 02:00:05.736503 2026] [:error] [pid 32166:tid 32214] [client 72.146.12.65:46198] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aePGpZCHNkWwdiZnafLO8wAAAFA"]
[Sun Apr 19 02:00:06.421616 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:24125] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aePGpkH3ayszMLZYflv5UQAAAY0"]
[Sun Apr 19 02:00:07.126446 2026] [:error] [pid 32165:tid 32169] [client 72.146.12.65:38416] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aePGp6e2vKwEk_N0Brb4mwAAAAA"]
[Sun Apr 19 02:00:07.862792 2026] [:error] [pid 33517:tid 33541] [client 72.146.12.65:38474] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aePGp34Zz-rubR1wiZ-wiAAAANY"]
[Sun Apr 19 02:00:08.840516 2026] [:error] [pid 32166:tid 32200] [client 72.146.12.65:49436] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aePGqJCHNkWwdiZnafLO9QAAAEI"]
[Sun Apr 19 02:00:09.670382 2026] [:error] [pid 32166:tid 32220] [client 72.146.12.65:49374] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aePGqZCHNkWwdiZnafLO9wAAAFY"]
[Sun Apr 19 02:00:10.235569 2026] [:error] [pid 32165:tid 32171] [client 72.146.12.65:24092] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aePGqqe2vKwEk_N0Brb4qAAAAAI"]
[Sun Apr 19 02:00:10.752091 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:38509] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aePGqkyD4Jm27Mb3NJiAGwAAAIU"]
[Sun Apr 19 02:00:11.934368 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:46200] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aePGq34Zz-rubR1wiZ-wjQAAAMI"]
[Sun Apr 19 02:00:12.637766 2026] [:error] [pid 33517:tid 33534] [client 72.146.12.65:24120] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aePGrH4Zz-rubR1wiZ-wjgAAAM8"]
[Sun Apr 19 02:00:13.183895 2026] [:error] [pid 32252:tid 32270] [client 72.146.12.65:38492] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "aePGreXl4Yc-Lt5fJ9iiBgAAARA"]
[Sun Apr 19 02:00:14.234286 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:38521] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "aePGrkyD4Jm27Mb3NJiAJAAAAI0"]
[Sun Apr 19 02:00:15.141453 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:39012] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "aePGr0yD4Jm27Mb3NJiAJwAAAIs"]
[Sun Apr 19 02:00:16.341305 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:49347] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lowpr.php"] [unique_id "aePGsH4Zz-rubR1wiZ-wlAAAANM"]
[Sun Apr 19 02:00:17.126879 2026] [proxy_fcgi:error] [pid 32167:tid 32228] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:17.478317 2026] [proxy_fcgi:error] [pid 32167:tid 32226] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:17.714885 2026] [proxy_fcgi:error] [pid 32167:tid 32231] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:17.951984 2026] [proxy_fcgi:error] [pid 32167:tid 32244] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:18.188088 2026] [proxy_fcgi:error] [pid 32167:tid 32240] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:18.468675 2026] [proxy_fcgi:error] [pid 32167:tid 32234] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:18.770817 2026] [proxy_fcgi:error] [pid 32167:tid 32249] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:19.013096 2026] [proxy_fcgi:error] [pid 32167:tid 32232] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:19.275641 2026] [proxy_fcgi:error] [pid 32167:tid 32236] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:19.516495 2026] [proxy_fcgi:error] [pid 32167:tid 32233] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:19.777959 2026] [proxy_fcgi:error] [pid 32167:tid 32230] [client 72.146.12.65:50264] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:00:20.177217 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:50264] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aePGtEyD4Jm27Mb3NJiANAAAAJI"]
[Sun Apr 19 02:00:21.834464 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:38476] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aePGtUyD4Jm27Mb3NJiANQAAAIM"]
[Sun Apr 19 02:00:22.652901 2026] [:error] [pid 32252:tid 32270] [client 72.146.12.65:38493] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aePGtuXl4Yc-Lt5fJ9iiEAAAARA"]
[Sun Apr 19 02:00:23.807249 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:49456] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws87.php"] [unique_id "aePGt0yD4Jm27Mb3NJiAOwAAAJU"]
[Sun Apr 19 02:00:24.663665 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:50088] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "aePGuEyD4Jm27Mb3NJiAPgAAAIc"]
[Sun Apr 19 02:00:25.387472 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:49455] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "aePGuUyD4Jm27Mb3NJiAQgAAAIU"]
[Sun Apr 19 02:00:26.028796 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:49445] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "aePGukH3ayszMLZYflv5WgAAAY0"]
[Sun Apr 19 02:00:26.728212 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:23754] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxfyf.php"] [unique_id "aePGukyD4Jm27Mb3NJiATQAAAJg"]
[Sun Apr 19 02:00:27.388193 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:24117] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aePGu0yD4Jm27Mb3NJiAUQAAAJY"]
[Sun Apr 19 02:00:28.059553 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:50252] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aePGvHFWunkyacYqsD08fAAAAVc"]
[Sun Apr 19 02:00:28.583587 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:38501] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aePGvEyD4Jm27Mb3NJiAVQAAAJg"]
[Sun Apr 19 02:00:29.095490 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:45155] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aePGvXFWunkyacYqsD08gAAAAVg"]
[Sun Apr 19 02:00:29.719337 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:23806] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "aePGvUyD4Jm27Mb3NJiAWAAAAIo"]
[Sun Apr 19 02:00:30.838795 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:50259] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "aePGvkyD4Jm27Mb3NJiAWwAAAJE"]
[Sun Apr 19 02:00:31.402479 2026] [:error] [pid 32165:tid 32179] [client 72.146.12.65:50089] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "aePGv6e2vKwEk_N0Brb45QAAAAo"]
[Sun Apr 19 02:00:32.016474 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:24095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gpt-sh.php"] [unique_id "aePGwOXl4Yc-Lt5fJ9iiFQAAAQ8"]
[Sun Apr 19 02:00:32.716853 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:49440] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "aePGwH4Zz-rubR1wiZ-woAAAANc"]
[Sun Apr 19 02:00:33.368606 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:49361] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "aePGwXFWunkyacYqsD08iwAAAVg"]
[Sun Apr 19 02:00:33.990251 2026] [:error] [pid 32252:tid 32274] [client 72.146.12.65:49442] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "aePGweXl4Yc-Lt5fJ9iiFwAAARQ"]
[Sun Apr 19 02:00:34.561109 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:38469] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ne2026.php"] [unique_id "aePGwnFWunkyacYqsD08kwAAAUo"]
[Sun Apr 19 02:00:35.164344 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:49467] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "aePGw3FWunkyacYqsD08lAAAAUk"]
[Sun Apr 19 02:00:35.997435 2026] [:error] [pid 32165:tid 32170] [client 72.146.12.65:50101] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "aePGw6e2vKwEk_N0Brb46gAAAAE"]
[Sun Apr 19 02:00:36.762761 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:45171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "aePGxEH3ayszMLZYflv5YwAAAYk"]
[Sun Apr 19 02:00:37.289356 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:42341] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2ksm17n.php"] [unique_id "aePGxUyD4Jm27Mb3NJiAYQAAAIo"]
[Sun Apr 19 02:00:37.778548 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:49366] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aePGxUyD4Jm27Mb3NJiAYgAAAIE"]
[Sun Apr 19 02:00:38.662196 2026] [:error] [pid 32165:tid 32176] [client 72.146.12.65:50107] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aePGxqe2vKwEk_N0Brb48AAAAAc"]
[Sun Apr 19 02:00:39.267456 2026] [:error] [pid 33517:tid 33534] [client 72.146.12.65:46207] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aePGx34Zz-rubR1wiZ-wpAAAAM8"]
[Sun Apr 19 02:00:39.894863 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:24124] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "aePGx0H3ayszMLZYflv5ZgAAAYU"]
[Sun Apr 19 02:00:40.442066 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:38518] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aePGyEH3ayszMLZYflv5aAAAAZg"]
[Sun Apr 19 02:00:41.283949 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:49439] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aePGyUyD4Jm27Mb3NJiAaQAAAJY"]
[Sun Apr 19 02:00:41.895763 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:24078] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aePGyUyD4Jm27Mb3NJiAagAAAJI"]
[Sun Apr 19 02:00:42.605966 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:49419] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aePGykyD4Jm27Mb3NJiAbQAAAJU"]
[Sun Apr 19 02:00:43.124386 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:50092] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aePGy0yD4Jm27Mb3NJiAcAAAAIc"]
[Sun Apr 19 02:00:43.731703 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:38457] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aePGy0H3ayszMLZYflv5awAAAY8"]
[Sun Apr 19 02:00:44.235274 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:50244] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aePGzEyD4Jm27Mb3NJiAcQAAAIM"]
[Sun Apr 19 02:00:44.772756 2026] [:error] [pid 32252:tid 32256] [client 72.146.12.65:23765] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aePGzOXl4Yc-Lt5fJ9iiHwAAAQI"]
[Sun Apr 19 02:00:45.418187 2026] [:error] [pid 41277:tid 41290] [client 72.146.12.65:50078] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "aePGzUH3ayszMLZYflv5bQAAAYs"]
[Sun Apr 19 02:00:45.917331 2026] [:error] [pid 32166:tid 32221] [client 72.146.12.65:50243] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "aePGzZCHNkWwdiZnafLPCgAAAFc"]
[Sun Apr 19 02:00:46.492154 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:49399] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "aePGzkyD4Jm27Mb3NJiAeAAAAIM"]
[Sun Apr 19 02:00:46.997143 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:45160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fsgdjkl.php"] [unique_id "aePGzkH3ayszMLZYflv5cAAAAYU"]
[Sun Apr 19 02:00:47.721909 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:38449] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "aePGz0H3ayszMLZYflv5cwAAAZg"]
[Sun Apr 19 02:00:48.510790 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:49424] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "aePG0EyD4Jm27Mb3NJiAgAAAAJE"]
[Sun Apr 19 02:00:49.267276 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:49375] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "aePG0UH3ayszMLZYflv5dgAAAZE"]
[Sun Apr 19 02:00:49.889328 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:50055] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless.php"] [unique_id "aePG0UyD4Jm27Mb3NJiAhgAAAJU"]
[Sun Apr 19 02:00:50.837672 2026] [:error] [pid 32252:tid 32257] [client 72.146.12.65:38414] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "aePG0uXl4Yc-Lt5fJ9iiJAAAAQM"]
[Sun Apr 19 02:00:51.556571 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:49420] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "aePG034Zz-rubR1wiZ-wvgAAANM"]
[Sun Apr 19 02:00:52.146111 2026] [:error] [pid 33517:tid 33543] [client 72.146.12.65:38479] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "aePG1H4Zz-rubR1wiZ-wwAAAANg"]
[Sun Apr 19 02:00:53.792981 2026] [:error] [pid 41277:tid 41280] [client 72.146.12.65:38490] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jlex.php"] [unique_id "aePG1UH3ayszMLZYflv5fQAAAYE"]
[Sun Apr 19 02:00:54.961719 2026] [:error] [pid 32167:tid 32240] [client 72.146.12.65:50091] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "aePG1kyD4Jm27Mb3NJiAlgAAAI8"]
[Sun Apr 19 02:00:55.887527 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:49359] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "aePG10yD4Jm27Mb3NJiAngAAAJM"]
[Sun Apr 19 02:00:56.794150 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:49406] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "aePG2EyD4Jm27Mb3NJiAqgAAAI4"]
[Sun Apr 19 02:00:57.454287 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:50291] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ta0ol.php"] [unique_id "aePG2UH3ayszMLZYflv5ggAAAYk"]
[Sun Apr 19 02:00:58.669315 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:24085] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a6.php"] [unique_id "aePG2kyD4Jm27Mb3NJiAuwAAAJU"]
[Sun Apr 19 02:00:59.970904 2026] [:error] [pid 32167:tid 32233] [client 72.146.12.65:24069] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a6.php"] [unique_id "aePG20yD4Jm27Mb3NJiAwgAAAIg"]
[Sun Apr 19 02:01:01.014179 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:38426] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a6.php"] [unique_id "aePG3UyD4Jm27Mb3NJiAyQAAAIY"]
[Sun Apr 19 02:01:02.645555 2026] [:error] [pid 32166:tid 32200] [client 72.146.12.65:49372] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a6.php"] [unique_id "aePG3pCHNkWwdiZnafLPEAAAAEI"]
[Sun Apr 19 02:01:04.327334 2026] [:error] [pid 41277:tid 41302] [client 72.146.12.65:46204] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aePG4EH3ayszMLZYflv5iQAAAZc"]
[Sun Apr 19 02:01:06.115682 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:49371] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aePG4kH3ayszMLZYflv5jwAAAYc"]
[Sun Apr 19 02:01:06.902626 2026] [:error] [pid 60910:tid 60919] [client 72.146.12.65:50290] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aePG4nFWunkyacYqsD08qwAAAUc"]
[Sun Apr 19 02:01:07.913617 2026] [:error] [pid 60910:tid 60932] [client 72.146.12.65:38517] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aePG43FWunkyacYqsD08rgAAAVQ"]
[Sun Apr 19 02:01:10.682482 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:38408] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "aePG5kyD4Jm27Mb3NJiA8gAAAJg"]
[Sun Apr 19 02:01:15.046781 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:50296] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "aePG63FWunkyacYqsD08ygAAAVg"]
[Sun Apr 19 02:01:15.972703 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:24076] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "aePG60yD4Jm27Mb3NJiBDAAAAJQ"]
[Sun Apr 19 02:01:17.153281 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:49378] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a8.php"] [unique_id "aePG7UyD4Jm27Mb3NJiBFAAAAIk"]
[Sun Apr 19 02:01:18.072600 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:38434] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a9.php"] [unique_id "aePG7kyD4Jm27Mb3NJiBHAAAAII"]
[Sun Apr 19 02:01:18.770948 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:46160] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a9.php"] [unique_id "aePG7uXl4Yc-Lt5fJ9iiPAAAAQs"]
[Sun Apr 19 02:01:19.618944 2026] [proxy_fcgi:error] [pid 33517:tid 33536] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:19.855777 2026] [proxy_fcgi:error] [pid 33517:tid 33531] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:20.093418 2026] [proxy_fcgi:error] [pid 33517:tid 33526] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:20.339913 2026] [proxy_fcgi:error] [pid 33517:tid 33525] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:20.578515 2026] [proxy_fcgi:error] [pid 33517:tid 33543] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:20.841809 2026] [proxy_fcgi:error] [pid 33517:tid 33519] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:21.166342 2026] [proxy_fcgi:error] [pid 33517:tid 33533] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:22.540450 2026] [proxy_fcgi:error] [pid 33517:tid 33522] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:24.069018 2026] [proxy_fcgi:error] [pid 33517:tid 33540] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:24.305419 2026] [proxy_fcgi:error] [pid 33517:tid 33524] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:24.571209 2026] [proxy_fcgi:error] [pid 33517:tid 33539] [client 72.146.12.65:49354] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:01:24.833957 2026] [:error] [pid 33517:tid 33541] [client 72.146.12.65:49354] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "aePG9H4Zz-rubR1wiZ-w4AAAANY"]
[Sun Apr 19 02:01:25.398453 2026] [:error] [pid 41277:tid 41298] [client 72.146.12.65:38445] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "aePG9UH3ayszMLZYflv5mQAAAZM"]
[Sun Apr 19 02:01:25.978361 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:23793] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "aePG9UH3ayszMLZYflv5mwAAAYk"]
[Sun Apr 19 02:01:26.456892 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:49410] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htto.php"] [unique_id "aePG9kH3ayszMLZYflv5nQAAAYc"]
[Sun Apr 19 02:01:26.964290 2026] [:error] [pid 41277:tid 41293] [client 72.146.12.65:50293] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "aePG9kH3ayszMLZYflv5oQAAAY4"]
[Sun Apr 19 02:01:27.458165 2026] [:error] [pid 32166:tid 32218] [client 72.146.12.65:50267] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "aePG95CHNkWwdiZnafLPGQAAAFQ"]
[Sun Apr 19 02:01:27.953679 2026] [:error] [pid 60910:tid 60935] [client 72.146.12.65:50275] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "aePG93FWunkyacYqsD082QAAAVc"]
[Sun Apr 19 02:01:28.432421 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:38513] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-ccv.php"] [unique_id "aePG-EH3ayszMLZYflv5pgAAAZE"]
[Sun Apr 19 02:01:28.942719 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:49392] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "aePG-HFWunkyacYqsD082wAAAVg"]
[Sun Apr 19 02:01:29.426943 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:45127] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "aePG-eXl4Yc-Lt5fJ9iiSQAAAQs"]
[Sun Apr 19 02:01:29.961558 2026] [:error] [pid 32166:tid 32212] [client 72.146.12.65:23801] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "aePG-ZCHNkWwdiZnafLPGwAAAE4"]
[Sun Apr 19 02:01:30.446818 2026] [:error] [pid 41277:tid 41298] [client 72.146.12.65:23802] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hfles.php"] [unique_id "aePG-kH3ayszMLZYflv5qQAAAZM"]
[Sun Apr 19 02:01:31.174592 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:38506] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aePG-0yD4Jm27Mb3NJiBRgAAAIQ"]
[Sun Apr 19 02:01:31.653345 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:38481] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aePG-0yD4Jm27Mb3NJiBSgAAAII"]
[Sun Apr 19 02:01:32.125468 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:49438] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aePG_EyD4Jm27Mb3NJiBUQAAAIk"]
[Sun Apr 19 02:01:32.710607 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:49363] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aePG_EyD4Jm27Mb3NJiBVgAAAJI"]
[Sun Apr 19 02:01:33.185587 2026] [:error] [pid 32252:tid 32267] [client 72.146.12.65:49344] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aePG_eXl4Yc-Lt5fJ9iiSwAAAQ0"]
[Sun Apr 19 02:01:33.718517 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:24123] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aePG_UH3ayszMLZYflv5rAAAAYU"]
[Sun Apr 19 02:01:34.254416 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:38446] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aePG_kH3ayszMLZYflv5rgAAAYQ"]
[Sun Apr 19 02:01:34.863901 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:24118] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aePG_nFWunkyacYqsD084AAAAUo"]
[Sun Apr 19 02:01:35.356324 2026] [:error] [pid 60910:tid 60913] [client 72.146.12.65:38413] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aePG_3FWunkyacYqsD084gAAAUE"]
[Sun Apr 19 02:01:35.832583 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:38438] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aePG_3FWunkyacYqsD085QAAAUY"]
[Sun Apr 19 02:01:36.310820 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:38470] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aePHAHFWunkyacYqsD085gAAAUM"]
[Sun Apr 19 02:01:36.868998 2026] [:error] [pid 32166:tid 32221] [client 72.146.12.65:49415] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aePHAJCHNkWwdiZnafLPHwAAAFc"]
[Sun Apr 19 02:01:37.343133 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:49389] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aePHAXFWunkyacYqsD086gAAAUw"]
[Sun Apr 19 02:01:37.829708 2026] [:error] [pid 60910:tid 60931] [client 72.146.12.65:38418] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aePHAXFWunkyacYqsD087gAAAVM"]
[Sun Apr 19 02:01:38.333280 2026] [:error] [pid 41277:tid 41293] [client 72.146.12.65:46197] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aePHAkH3ayszMLZYflv5sgAAAY4"]
[Sun Apr 19 02:01:38.813523 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:42320] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aePHAnFWunkyacYqsD088wAAAUk"]
[Sun Apr 19 02:01:39.389531 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:49356] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aePHA34Zz-rubR1wiZ-w6wAAANA"]
[Sun Apr 19 02:01:39.893364 2026] [:error] [pid 32252:tid 32274] [client 72.146.12.65:42334] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aePHA-Xl4Yc-Lt5fJ9iiVgAAARQ"]
[Sun Apr 19 02:01:40.404181 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:38417] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aePHBH4Zz-rubR1wiZ-w7QAAAMo"]
[Sun Apr 19 02:01:40.880446 2026] [:error] [pid 32166:tid 32216] [client 72.146.12.65:38487] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aePHBJCHNkWwdiZnafLPIQAAAFI"]
[Sun Apr 19 02:01:41.395815 2026] [:error] [pid 41277:tid 41282] [client 72.146.12.65:42342] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "aePHBUH3ayszMLZYflv5vQAAAYM"]
[Sun Apr 19 02:01:41.864919 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:38512] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "aePHBUH3ayszMLZYflv5vgAAAYQ"]
[Sun Apr 19 02:01:42.335749 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:24121] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "aePHBn4Zz-rubR1wiZ-w7wAAANc"]
[Sun Apr 19 02:01:42.843806 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:42272] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tdsaz.php"] [unique_id "aePHBn4Zz-rubR1wiZ-w8QAAAMw"]
[Sun Apr 19 02:01:43.367713 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:38498] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "aePHB0yD4Jm27Mb3NJiBjQAAAI0"]
[Sun Apr 19 02:01:43.966121 2026] [:error] [pid 41277:tid 41296] [client 72.146.12.65:24067] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "aePHB0H3ayszMLZYflv5vwAAAZE"]
[Sun Apr 19 02:01:44.443314 2026] [:error] [pid 33517:tid 33525] [client 72.146.12.65:49407] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "aePHCH4Zz-rubR1wiZ-w8wAAAMY"]
[Sun Apr 19 02:01:44.961903 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:49369] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ynjli.php"] [unique_id "aePHCEyD4Jm27Mb3NJiBmgAAAIA"]
[Sun Apr 19 02:01:45.433282 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:49470] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aePHCXFWunkyacYqsD08-QAAAUU"]
[Sun Apr 19 02:01:45.965775 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:45147] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aePHCUyD4Jm27Mb3NJiBpAAAAIE"]
[Sun Apr 19 02:01:46.469464 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:49463] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aePHCkyD4Jm27Mb3NJiBpwAAAIU"]
[Sun Apr 19 02:01:46.947751 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:24064] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aePHCkyD4Jm27Mb3NJiBqwAAAIw"]
[Sun Apr 19 02:01:47.421440 2026] [:error] [pid 32165:tid 32173] [client 72.146.12.65:38420] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "aePHC6e2vKwEk_N0Brb4_gAAAAQ"]
[Sun Apr 19 02:01:47.916694 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:38453] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "aePHC3FWunkyacYqsD08-wAAAUk"]
[Sun Apr 19 02:01:48.531110 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:49400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "aePHDEH3ayszMLZYflv5wgAAAZA"]
[Sun Apr 19 02:01:49.000034 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:49421] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rogsa.php"] [unique_id "aePHDHFWunkyacYqsD08_gAAAVU"]
[Sun Apr 19 02:01:49.506117 2026] [:error] [pid 60910:tid 60926] [client 72.146.12.65:50060] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "aePHDXFWunkyacYqsD08_wAAAU4"]
[Sun Apr 19 02:01:50.002963 2026] [:error] [pid 60910:tid 60932] [client 72.146.12.65:50273] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "aePHDnFWunkyacYqsD09AgAAAVQ"]
[Sun Apr 19 02:01:50.563362 2026] [:error] [pid 60910:tid 60913] [client 72.146.12.65:49416] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "aePHDnFWunkyacYqsD09BgAAAUE"]
[Sun Apr 19 02:01:51.034298 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:38461] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoper1.php"] [unique_id "aePHD0H3ayszMLZYflv5yAAAAYc"]
[Sun Apr 19 02:01:51.564191 2026] [:error] [pid 33517:tid 33534] [client 72.146.12.65:23780] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "aePHD34Zz-rubR1wiZ-w9QAAAM8"]
[Sun Apr 19 02:01:52.094622 2026] [:error] [pid 60910:tid 60936] [client 72.146.12.65:45136] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "aePHEHFWunkyacYqsD09DAAAAVg"]
[Sun Apr 19 02:01:52.591004 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:38522] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "aePHEHFWunkyacYqsD09EAAAAVU"]
[Sun Apr 19 02:01:53.236558 2026] [:error] [pid 32166:tid 32199] [client 72.146.12.65:38460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new3.php"] [unique_id "aePHEZCHNkWwdiZnafLPJgAAAEE"]
[Sun Apr 19 02:01:53.735465 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:38478] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "aePHEX4Zz-rubR1wiZ-w9wAAAMo"]
[Sun Apr 19 02:01:54.201718 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:50300] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "aePHEkH3ayszMLZYflv5zQAAAYg"]
[Sun Apr 19 02:01:54.670715 2026] [:error] [pid 32252:tid 32265] [client 72.146.12.65:38965] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "aePHEuXl4Yc-Lt5fJ9iiYAAAAQs"]
[Sun Apr 19 02:01:55.200656 2026] [:error] [pid 41277:tid 41303] [client 72.146.12.65:49422] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0yellow.php"] [unique_id "aePHE0H3ayszMLZYflv51AAAAZg"]
[Sun Apr 19 02:01:55.729735 2026] [:error] [pid 32252:tid 32270] [client 72.146.12.65:38511] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aePHE-Xl4Yc-Lt5fJ9iiYQAAARA"]
[Sun Apr 19 02:01:56.220685 2026] [:error] [pid 60910:tid 60930] [client 72.146.12.65:49348] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aePHFHFWunkyacYqsD09GAAAAVI"]
[Sun Apr 19 02:01:56.706548 2026] [:error] [pid 32167:tid 32240] [client 72.146.12.65:23748] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aePHFEyD4Jm27Mb3NJiB2AAAAI8"]
[Sun Apr 19 02:01:57.184452 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:38468] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aePHFUyD4Jm27Mb3NJiB2gAAAJM"]
[Sun Apr 19 02:01:57.731083 2026] [:error] [pid 32252:tid 32260] [client 72.146.12.65:50069] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aePHFeXl4Yc-Lt5fJ9iiZAAAAQY"]
[Sun Apr 19 02:01:58.222212 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:50108] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aePHFkyD4Jm27Mb3NJiB4QAAAJE"]
[Sun Apr 19 02:01:58.721370 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:23770] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aePHFkyD4Jm27Mb3NJiB5QAAAIQ"]
[Sun Apr 19 02:01:59.237626 2026] [:error] [pid 32166:tid 32217] [client 72.146.12.65:45133] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aePHF5CHNkWwdiZnafLPKQAAAFM"]
[Sun Apr 19 02:01:59.721555 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:24099] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aePHF3FWunkyacYqsD09HAAAAUw"]
[Sun Apr 19 02:02:00.203833 2026] [:error] [pid 32167:tid 32233] [client 72.146.12.65:50086] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aePHGEyD4Jm27Mb3NJiB7QAAAIg"]
[Sun Apr 19 02:02:00.798874 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:50288] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aePHGEyD4Jm27Mb3NJiB8QAAAIA"]
[Sun Apr 19 02:02:01.273618 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:49469] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aePHGUyD4Jm27Mb3NJiB9QAAAIQ"]
[Sun Apr 19 02:02:01.750667 2026] [:error] [pid 32166:tid 32215] [client 72.146.12.65:45168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "aePHGZCHNkWwdiZnafLPLQAAAFE"]
[Sun Apr 19 02:02:02.260817 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:23788] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "aePHGnFWunkyacYqsD09IQAAAUI"]
[Sun Apr 19 02:02:02.744722 2026] [:error] [pid 32167:tid 32230] [client 72.146.12.65:23784] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "aePHGkyD4Jm27Mb3NJiB_AAAAIU"]
[Sun Apr 19 02:02:03.245590 2026] [:error] [pid 32167:tid 32234] [client 72.146.12.65:50282] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/repurify.php"] [unique_id "aePHG0yD4Jm27Mb3NJiB_wAAAIk"]
[Sun Apr 19 02:02:03.778804 2026] [:error] [pid 32252:tid 32264] [client 72.146.12.65:38439] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePHG-Xl4Yc-Lt5fJ9iiaAAAAQo"]
[Sun Apr 19 02:02:04.280862 2026] [:error] [pid 32166:tid 32213] [client 72.146.12.65:38503] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePHHJCHNkWwdiZnafLPMgAAAE8"]
[Sun Apr 19 02:02:04.797115 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:38464] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePHHH4Zz-rubR1wiZ-xAAAAAM4"]
[Sun Apr 19 02:02:05.283666 2026] [:error] [pid 32166:tid 32210] [client 72.146.12.65:49468] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePHHZCHNkWwdiZnafLPMwAAAEw"]
[Sun Apr 19 02:02:05.784008 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:24074] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aePHHUH3ayszMLZYflv59wAAAYA"]
[Sun Apr 19 02:02:06.338156 2026] [:error] [pid 32165:tid 32184] [client 72.146.12.65:24083] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aePHHqe2vKwEk_N0Brb5BQAAAA8"]
[Sun Apr 19 02:02:06.815822 2026] [:error] [pid 32166:tid 32199] [client 72.146.12.65:24101] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aePHHpCHNkWwdiZnafLPNgAAAEE"]
[Sun Apr 19 02:02:07.307688 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:49346] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aePHH5CHNkWwdiZnafLPOAAAAEs"]
[Sun Apr 19 02:02:07.783561 2026] [:error] [pid 32166:tid 32214] [client 72.146.12.65:45176] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aePHH5CHNkWwdiZnafLPOgAAAFA"]
[Sun Apr 19 02:02:08.417911 2026] [:error] [pid 32166:tid 32207] [client 72.146.12.65:38448] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aePHIJCHNkWwdiZnafLPOwAAAEk"]
[Sun Apr 19 02:02:08.902831 2026] [:error] [pid 60910:tid 60932] [client 72.146.12.65:49447] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aePHIHFWunkyacYqsD09JQAAAVQ"]
[Sun Apr 19 02:02:09.392550 2026] [:error] [pid 32166:tid 32202] [client 72.146.12.65:49414] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aePHIZCHNkWwdiZnafLPPQAAAEQ"]
[Sun Apr 19 02:02:09.872882 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:38523] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aePHIUyD4Jm27Mb3NJiCFgAAAIQ"]
[Sun Apr 19 02:02:10.367918 2026] [:error] [pid 60910:tid 60931] [client 72.146.12.65:46168] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aePHInFWunkyacYqsD09JwAAAVM"]
[Sun Apr 19 02:02:10.839939 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:50051] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aePHInFWunkyacYqsD09KAAAAUM"]
[Sun Apr 19 02:02:11.393577 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:24093] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aePHI0yD4Jm27Mb3NJiCHQAAAJQ"]
[Sun Apr 19 02:02:11.914908 2026] [:error] [pid 32165:tid 32186] [client 72.146.12.65:50283] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "aePHI6e2vKwEk_N0Brb5BwAAABE"]
[Sun Apr 19 02:02:12.393735 2026] [:error] [pid 32166:tid 32217] [client 72.146.12.65:49412] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "aePHJJCHNkWwdiZnafLPRAAAAFM"]
[Sun Apr 19 02:02:12.865040 2026] [:error] [pid 32252:tid 32272] [client 72.146.12.65:24091] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "aePHJOXl4Yc-Lt5fJ9iidAAAARI"]
[Sun Apr 19 02:02:13.421911 2026] [:error] [pid 32252:tid 32270] [client 72.146.12.65:23786] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upll22.php"] [unique_id "aePHJeXl4Yc-Lt5fJ9iidgAAARA"]
[Sun Apr 19 02:02:13.939595 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:50255] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aePHJXFWunkyacYqsD09LwAAAUY"]
[Sun Apr 19 02:02:14.425645 2026] [:error] [pid 32252:tid 32261] [client 72.146.12.65:45179] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aePHJuXl4Yc-Lt5fJ9iieAAAAQc"]
[Sun Apr 19 02:02:14.918850 2026] [:error] [pid 32252:tid 32274] [client 72.146.12.65:49431] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aePHJuXl4Yc-Lt5fJ9iieQAAARQ"]
[Sun Apr 19 02:02:15.428484 2026] [:error] [pid 33517:tid 33529] [client 72.146.12.65:38480] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aePHJ34Zz-rubR1wiZ-xDgAAAMo"]
[Sun Apr 19 02:02:15.950185 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:38429] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aePHJ0yD4Jm27Mb3NJiCMAAAAIY"]
[Sun Apr 19 02:02:16.465793 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:49434] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aePHKH4Zz-rubR1wiZ-xEwAAAMw"]
[Sun Apr 19 02:02:16.953618 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:23798] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aePHKEyD4Jm27Mb3NJiCNwAAAIM"]
[Sun Apr 19 02:02:17.470413 2026] [:error] [pid 33517:tid 33519] [client 72.146.12.65:38451] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aePHKX4Zz-rubR1wiZ-xGgAAAMA"]
[Sun Apr 19 02:02:17.946749 2026] [:error] [pid 32165:tid 32188] [client 72.146.12.65:50254] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "aePHKae2vKwEk_N0Brb5DgAAABM"]
[Sun Apr 19 02:02:18.498577 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:49367] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "aePHKkH3ayszMLZYflv6CAAAAYQ"]
[Sun Apr 19 02:02:18.969124 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:49381] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "aePHKn4Zz-rubR1wiZ-xIgAAANc"]
[Sun Apr 19 02:02:19.447252 2026] [:error] [pid 32165:tid 32182] [client 72.146.12.65:49373] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-942.php"] [unique_id "aePHK6e2vKwEk_N0Brb5EQAAAA0"]
[Sun Apr 19 02:02:19.942074 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:42321] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "aePHK0yD4Jm27Mb3NJiCRQAAAJg"]
[Sun Apr 19 02:02:20.443031 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:24086] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "aePHLEyD4Jm27Mb3NJiCSQAAAI4"]
[Sun Apr 19 02:02:20.978120 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:49469] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "aePHLEyD4Jm27Mb3NJiCTAAAAIE"]
[Sun Apr 19 02:02:21.479056 2026] [:error] [pid 32252:tid 32257] [client 72.146.12.65:46175] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-243.php"] [unique_id "aePHLeXl4Yc-Lt5fJ9iigAAAAQM"]
[Sun Apr 19 02:02:21.957787 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:49349] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePHLUyD4Jm27Mb3NJiCVQAAAJg"]
[Sun Apr 19 02:02:22.460972 2026] [:error] [pid 33517:tid 33541] [client 72.146.12.65:38527] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePHLn4Zz-rubR1wiZ-xLAAAANY"]
[Sun Apr 19 02:02:22.930824 2026] [:error] [pid 32166:tid 32202] [client 72.146.12.65:23804] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePHLpCHNkWwdiZnafLPUAAAAEQ"]
[Sun Apr 19 02:02:23.448827 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:50247] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePHL0H3ayszMLZYflv6CgAAAYc"]
[Sun Apr 19 02:02:23.942933 2026] [:error] [pid 32166:tid 32210] [client 72.146.12.65:50242] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/161dfd072f.php"] [unique_id "aePHL5CHNkWwdiZnafLPUQAAAEw"]
[Sun Apr 19 02:02:24.491796 2026] [proxy_fcgi:error] [pid 32166:tid 32213] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:24.730460 2026] [proxy_fcgi:error] [pid 32166:tid 32211] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:24.968303 2026] [proxy_fcgi:error] [pid 32166:tid 32205] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:25.228634 2026] [proxy_fcgi:error] [pid 32166:tid 32217] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:25.496213 2026] [proxy_fcgi:error] [pid 32166:tid 32199] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:25.736067 2026] [proxy_fcgi:error] [pid 32166:tid 32204] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:25.972190 2026] [proxy_fcgi:error] [pid 32166:tid 32220] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:26.210272 2026] [proxy_fcgi:error] [pid 32166:tid 32209] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:26.445427 2026] [proxy_fcgi:error] [pid 32166:tid 32203] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:26.682676 2026] [proxy_fcgi:error] [pid 32166:tid 32216] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:26.919565 2026] [proxy_fcgi:error] [pid 32166:tid 32207] [client 72.146.12.65:49454] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:02:27.152764 2026] [:error] [pid 32166:tid 32198] [client 72.146.12.65:49454] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "aePHM5CHNkWwdiZnafLPYgAAAEA"]
[Sun Apr 19 02:02:27.808119 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:50073] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "aePHM3FWunkyacYqsD09NQAAAUo"]
[Sun Apr 19 02:02:28.289782 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:23769] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "aePHNEyD4Jm27Mb3NJiCeQAAAI4"]
[Sun Apr 19 02:02:28.767824 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:49380] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bfil.php"] [unique_id "aePHNEyD4Jm27Mb3NJiCfgAAAJM"]
[Sun Apr 19 02:02:29.248866 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:23789] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aePHNUyD4Jm27Mb3NJiCgAAAAIM"]
[Sun Apr 19 02:02:29.716918 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:49400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aePHNUyD4Jm27Mb3NJiCiQAAAJI"]
[Sun Apr 19 02:02:30.374848 2026] [:error] [pid 32252:tid 32273] [client 72.146.12.65:38507] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aePHNuXl4Yc-Lt5fJ9iikQAAARM"]
[Sun Apr 19 02:02:30.896575 2026] [:error] [pid 32167:tid 32249] [client 72.146.12.65:38401] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aePHNkyD4Jm27Mb3NJiCmgAAAJg"]
[Sun Apr 19 02:02:31.376513 2026] [:error] [pid 32167:tid 32229] [client 72.146.12.65:46181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aePHN0yD4Jm27Mb3NJiCnwAAAIQ"]
[Sun Apr 19 02:02:31.855621 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:49459] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aePHN3FWunkyacYqsD09NgAAAUg"]
[Sun Apr 19 02:02:32.332165 2026] [:error] [pid 32167:tid 32235] [client 72.146.12.65:49379] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aePHOEyD4Jm27Mb3NJiCqgAAAIo"]
[Sun Apr 19 02:02:32.832122 2026] [:error] [pid 60910:tid 60918] [client 72.146.12.65:49418] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albrt.php"] [unique_id "aePHOHFWunkyacYqsD09OAAAAUY"]
[Sun Apr 19 02:02:33.307677 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:24126] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "aePHOXFWunkyacYqsD09OQAAAUU"]
[Sun Apr 19 02:02:33.849703 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:50245] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "aePHOUyD4Jm27Mb3NJiCsgAAAIM"]
[Sun Apr 19 02:02:34.322612 2026] [:error] [pid 41277:tid 41282] [client 72.146.12.65:49355] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "aePHOkH3ayszMLZYflv6FQAAAYM"]
[Sun Apr 19 02:02:34.862425 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:45149] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hhxc.php"] [unique_id "aePHOkyD4Jm27Mb3NJiCuQAAAJM"]
[Sun Apr 19 02:02:35.569439 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:50298] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aePHO0H3ayszMLZYflv6FgAAAZA"]
[Sun Apr 19 02:02:36.042100 2026] [:error] [pid 32252:tid 32257] [client 72.146.12.65:42304] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aePHPOXl4Yc-Lt5fJ9iimwAAAQM"]
[Sun Apr 19 02:02:36.572572 2026] [:error] [pid 32252:tid 32276] [client 72.146.12.65:38419] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aePHPOXl4Yc-Lt5fJ9iioAAAARY"]
[Sun Apr 19 02:02:37.082306 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:24070] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aePHPUH3ayszMLZYflv6HAAAAY8"]
[Sun Apr 19 02:02:37.830293 2026] [:error] [pid 41277:tid 41301] [client 72.146.12.65:49401] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aePHPUH3ayszMLZYflv6IQAAAZY"]
[Sun Apr 19 02:02:38.404527 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:50052] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aePHPkH3ayszMLZYflv6JQAAAYQ"]
[Sun Apr 19 02:02:38.906771 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:24079] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aePHPnFWunkyacYqsD09RQAAAUg"]
[Sun Apr 19 02:02:39.372427 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:50083] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aePHP0yD4Jm27Mb3NJiCvAAAAII"]
[Sun Apr 19 02:02:39.883568 2026] [:error] [pid 32165:tid 32190] [client 72.146.12.65:38437] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aePHP6e2vKwEk_N0Brb5GAAAABU"]
[Sun Apr 19 02:02:40.357715 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:24110] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aePHQEyD4Jm27Mb3NJiCwAAAAIc"]
[Sun Apr 19 02:02:40.832082 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:49466] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aePHQEyD4Jm27Mb3NJiCwQAAAIM"]
[Sun Apr 19 02:02:41.299888 2026] [:error] [pid 32252:tid 32271] [client 72.146.12.65:49471] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aePHQeXl4Yc-Lt5fJ9iiugAAARE"]
[Sun Apr 19 02:02:41.843785 2026] [:error] [pid 33517:tid 33532] [client 72.146.12.65:50292] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "aePHQX4Zz-rubR1wiZ-xMwAAAM0"]
[Sun Apr 19 02:02:42.360591 2026] [:error] [pid 32252:tid 32272] [client 72.146.12.65:38524] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "aePHQuXl4Yc-Lt5fJ9iiwgAAARI"]
[Sun Apr 19 02:02:42.937220 2026] [:error] [pid 33517:tid 33531] [client 72.146.12.65:49353] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "aePHQn4Zz-rubR1wiZ-xOAAAAMw"]
[Sun Apr 19 02:02:43.402808 2026] [:error] [pid 33517:tid 33537] [client 72.146.12.65:42322] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/HLA-dd.php"] [unique_id "aePHQ34Zz-rubR1wiZ-xOgAAANI"]
[Sun Apr 19 02:02:43.914548 2026] [:error] [pid 33517:tid 33543] [client 72.146.12.65:23782] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aePHQ34Zz-rubR1wiZ-xPAAAANg"]
[Sun Apr 19 02:02:44.477278 2026] [:error] [pid 60910:tid 60929] [client 72.146.12.65:45181] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aePHRHFWunkyacYqsD09TwAAAVE"]
[Sun Apr 19 02:02:45.009762 2026] [:error] [pid 32166:tid 32208] [client 72.146.12.65:49391] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aePHRZCHNkWwdiZnafLPZwAAAEo"]
[Sun Apr 19 02:02:45.479412 2026] [:error] [pid 32166:tid 32213] [client 72.146.12.65:38464] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aePHRZCHNkWwdiZnafLPaAAAAE8"]
[Sun Apr 19 02:02:45.949815 2026] [:error] [pid 60910:tid 60925] [client 72.146.12.65:49409] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePHRXFWunkyacYqsD09UwAAAU0"]
[Sun Apr 19 02:02:46.525034 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:46150] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePHRnFWunkyacYqsD09VQAAAUw"]
[Sun Apr 19 02:02:47.050517 2026] [:error] [pid 60910:tid 60922] [client 72.146.12.65:45129] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePHR3FWunkyacYqsD09WQAAAUo"]
[Sun Apr 19 02:02:47.566922 2026] [:error] [pid 32166:tid 32218] [client 72.146.12.65:49404] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePHR5CHNkWwdiZnafLPbgAAAFQ"]
[Sun Apr 19 02:02:48.050385 2026] [:error] [pid 32165:tid 32175] [client 72.146.12.65:24089] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePHSKe2vKwEk_N0Brb5IAAAAAY"]
[Sun Apr 19 02:02:48.525771 2026] [:error] [pid 32165:tid 32186] [client 72.146.12.65:24102] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePHSKe2vKwEk_N0Brb5IgAAABE"]
[Sun Apr 19 02:02:49.008212 2026] [:error] [pid 33517:tid 33521] [client 72.146.12.65:49364] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePHSX4Zz-rubR1wiZ-xQAAAAMI"]
[Sun Apr 19 02:02:49.639587 2026] [:error] [pid 33517:tid 33542] [client 72.146.12.65:49433] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePHSX4Zz-rubR1wiZ-xQwAAANc"]
[Sun Apr 19 02:02:50.185080 2026] [:error] [pid 33517:tid 33524] [client 72.146.12.65:38404] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "aePHSn4Zz-rubR1wiZ-xRwAAAMU"]
[Sun Apr 19 02:02:50.672897 2026] [:error] [pid 32166:tid 32200] [client 72.146.12.65:50268] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "aePHSpCHNkWwdiZnafLPcQAAAEI"]
[Sun Apr 19 02:02:51.160252 2026] [:error] [pid 32165:tid 32192] [client 72.146.12.65:49443] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "aePHS6e2vKwEk_N0Brb5JgAAABc"]
[Sun Apr 19 02:02:51.678566 2026] [:error] [pid 33517:tid 33543] [client 72.146.12.65:24084] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blnux.php"] [unique_id "aePHS34Zz-rubR1wiZ-xSQAAANg"]
[Sun Apr 19 02:02:52.172745 2026] [:error] [pid 33517:tid 33527] [client 72.146.12.65:50299] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "aePHTH4Zz-rubR1wiZ-xSgAAAMg"]
[Sun Apr 19 02:02:52.652170 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:38495] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "aePHTH4Zz-rubR1wiZ-xTAAAANM"]
[Sun Apr 19 02:02:53.141119 2026] [:error] [pid 33517:tid 33522] [client 72.146.12.65:38402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "aePHTX4Zz-rubR1wiZ-xTQAAAMM"]
[Sun Apr 19 02:02:53.612989 2026] [:error] [pid 32165:tid 32185] [client 72.146.12.65:38486] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blqjs.php"] [unique_id "aePHTae2vKwEk_N0Brb5KgAAABA"]
[Sun Apr 19 02:02:54.402082 2026] [:error] [pid 41277:tid 41285] [client 72.146.12.65:38430] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "aePHTkH3ayszMLZYflv6NQAAAYY"]
[Sun Apr 19 02:02:57.443162 2026] [:error] [pid 32165:tid 32173] [client 72.146.12.65:38500] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "aePHUae2vKwEk_N0Brb5MAAAAAQ"]
[Sun Apr 19 02:03:00.554564 2026] [:error] [pid 60910:tid 60925] [client 72.146.12.65:50095] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "aePHVHFWunkyacYqsD09ZwAAAU0"]
[Sun Apr 19 02:03:01.902637 2026] [:error] [pid 33517:tid 33523] [client 72.146.12.65:49403] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fyflv.php"] [unique_id "aePHVX4Zz-rubR1wiZ-xVwAAAMQ"]
[Sun Apr 19 02:03:02.805790 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:38411] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "aePHVkyD4Jm27Mb3NJiCzgAAAIw"]
[Sun Apr 19 02:03:03.373827 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:49446] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "aePHV0yD4Jm27Mb3NJiC1QAAAII"]
[Sun Apr 19 02:03:03.942587 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:39031] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "aePHV0yD4Jm27Mb3NJiC1wAAAI0"]
[Sun Apr 19 02:03:04.484765 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:24114] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iindv.php"] [unique_id "aePHWEyD4Jm27Mb3NJiC3QAAAIw"]
[Sun Apr 19 02:03:05.030981 2026] [:error] [pid 32167:tid 32244] [client 72.146.12.65:42292] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkogn.php"] [unique_id "aePHWUyD4Jm27Mb3NJiC4gAAAJM"]
[Sun Apr 19 02:03:05.544836 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:24065] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkogn.php"] [unique_id "aePHWUyD4Jm27Mb3NJiC6AAAAIM"]
[Sun Apr 19 02:03:06.106134 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:38447] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkogn.php"] [unique_id "aePHWkyD4Jm27Mb3NJiC6wAAAJc"]
[Sun Apr 19 02:03:06.617662 2026] [:error] [pid 32165:tid 32179] [client 72.146.12.65:50261] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkogn.php"] [unique_id "aePHWqe2vKwEk_N0Brb5OwAAAAo"]
[Sun Apr 19 02:03:07.098482 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:38467] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwdgl.php"] [unique_id "aePHW0yD4Jm27Mb3NJiC9QAAAI0"]
[Sun Apr 19 02:03:07.628869 2026] [:error] [pid 33517:tid 33530] [client 72.146.12.65:50081] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwdgl.php"] [unique_id "aePHW34Zz-rubR1wiZ-xWgAAAMs"]
[Sun Apr 19 02:03:08.144954 2026] [:error] [pid 32167:tid 32246] [client 72.146.12.65:50301] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwdgl.php"] [unique_id "aePHXEyD4Jm27Mb3NJiC_QAAAJU"]
[Sun Apr 19 02:03:08.641440 2026] [:error] [pid 33517:tid 33540] [client 72.146.12.65:50056] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwdgl.php"] [unique_id "aePHXH4Zz-rubR1wiZ-xXQAAANU"]
[Sun Apr 19 02:03:09.132523 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:38423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "aePHXUH3ayszMLZYflv6PgAAAYg"]
[Sun Apr 19 02:03:09.621003 2026] [:error] [pid 32166:tid 32206] [client 72.146.12.65:23764] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "aePHXZCHNkWwdiZnafLPfQAAAEg"]
[Sun Apr 19 02:03:10.101793 2026] [:error] [pid 32165:tid 32173] [client 72.146.12.65:49376] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "aePHXqe2vKwEk_N0Brb5PwAAAAQ"]
[Sun Apr 19 02:03:10.585026 2026] [:error] [pid 60910:tid 60924] [client 72.146.12.65:24108] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wxeyc.php"] [unique_id "aePHXnFWunkyacYqsD09bgAAAUw"]
[Sun Apr 19 02:03:11.075624 2026] [:error] [pid 60910:tid 60914] [client 72.146.12.65:38425] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePHX3FWunkyacYqsD09cQAAAUI"]
[Sun Apr 19 02:03:11.545136 2026] [:error] [pid 32166:tid 32199] [client 72.146.12.65:23763] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePHX5CHNkWwdiZnafLPfwAAAEE"]
[Sun Apr 19 02:03:12.297951 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:50287] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePHYEyD4Jm27Mb3NJiDAgAAAIw"]
[Sun Apr 19 02:03:12.927187 2026] [:error] [pid 32167:tid 32228] [client 72.146.12.65:49385] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePHYEyD4Jm27Mb3NJiDBAAAAIM"]
[Sun Apr 19 02:03:13.414594 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:23783] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePHYZCHNkWwdiZnafLPggAAAEs"]
[Sun Apr 19 02:03:13.910367 2026] [:error] [pid 33517:tid 33533] [client 72.146.12.65:49460] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePHYX4Zz-rubR1wiZ-xZAAAAM4"]
[Sun Apr 19 02:03:14.458462 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:50096] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePHYkyD4Jm27Mb3NJiDCQAAAI0"]
[Sun Apr 19 02:03:14.985339 2026] [:error] [pid 32166:tid 32216] [client 72.146.12.65:38424] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePHYpCHNkWwdiZnafLPhAAAAFI"]
[Sun Apr 19 02:03:15.461275 2026] [:error] [pid 41277:tid 41294] [client 72.146.12.65:50277] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3akp.php"] [unique_id "aePHY0H3ayszMLZYflv6SAAAAY8"]
[Sun Apr 19 02:03:15.944881 2026] [:error] [pid 32167:tid 32226] [client 72.146.12.65:50053] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3akp.php"] [unique_id "aePHY0yD4Jm27Mb3NJiDCwAAAIE"]
[Sun Apr 19 02:03:16.432963 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:38516] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3akp.php"] [unique_id "aePHZEyD4Jm27Mb3NJiDDQAAAJQ"]
[Sun Apr 19 02:03:16.946648 2026] [:error] [pid 60910:tid 60919] [client 72.146.12.65:38484] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3akp.php"] [unique_id "aePHZHFWunkyacYqsD09iwAAAUc"]
[Sun Apr 19 02:03:17.481998 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:38519] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "aePHZUyD4Jm27Mb3NJiDEQAAAJY"]
[Sun Apr 19 02:03:17.970735 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:38489] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "aePHZUyD4Jm27Mb3NJiDEgAAAIc"]
[Sun Apr 19 02:03:18.498459 2026] [:error] [pid 41277:tid 41288] [client 72.146.12.65:23776] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "aePHZkH3ayszMLZYflv6TwAAAYk"]
[Sun Apr 19 02:03:19.205245 2026] [:error] [pid 60910:tid 60921] [client 72.146.12.65:42330] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sde.php"] [unique_id "aePHZ3FWunkyacYqsD09lQAAAUk"]
[Sun Apr 19 02:03:19.768128 2026] [:error] [pid 60910:tid 60917] [client 72.146.12.65:38475] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "aePHZ3FWunkyacYqsD09mgAAAUU"]
[Sun Apr 19 02:03:20.239214 2026] [:error] [pid 41277:tid 41295] [client 72.146.12.65:23779] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "aePHaEH3ayszMLZYflv6UgAAAZA"]
[Sun Apr 19 02:03:20.728422 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:45139] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "aePHaEH3ayszMLZYflv6UwAAAYA"]
[Sun Apr 19 02:03:21.354181 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:38409] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cdn3.php"] [unique_id "aePHaXFWunkyacYqsD09ogAAAVU"]
[Sun Apr 19 02:03:21.825462 2026] [:error] [pid 32252:tid 32259] [client 72.146.12.65:38505] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aePHaeXl4Yc-Lt5fJ9ii1AAAAQU"]
[Sun Apr 19 02:03:22.352575 2026] [:error] [pid 41277:tid 41280] [client 72.146.12.65:23745] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aePHakH3ayszMLZYflv6WAAAAYE"]
[Sun Apr 19 02:03:22.896139 2026] [:error] [pid 32252:tid 32262] [client 72.146.12.65:38421] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aePHauXl4Yc-Lt5fJ9ii1QAAAQg"]
[Sun Apr 19 02:03:23.488654 2026] [:error] [pid 41277:tid 41287] [client 72.146.12.65:46153] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aePHa0H3ayszMLZYflv6WwAAAYg"]
[Sun Apr 19 02:03:23.962268 2026] [:error] [pid 41277:tid 41298] [client 72.146.12.65:49423] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "aePHa0H3ayszMLZYflv6XAAAAZM"]
[Sun Apr 19 02:03:24.453944 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:38436] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "aePHbEyD4Jm27Mb3NJiDLAAAAJc"]
[Sun Apr 19 02:03:25.015760 2026] [:error] [pid 32165:tid 32184] [client 72.146.12.65:24068] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "aePHbae2vKwEk_N0Brb5RgAAAA8"]
[Sun Apr 19 02:03:25.503667 2026] [:error] [pid 32166:tid 32222] [client 72.146.12.65:24100] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-220.php"] [unique_id "aePHbZCHNkWwdiZnafLPkgAAAFg"]
[Sun Apr 19 02:03:25.992298 2026] [:error] [pid 32166:tid 32205] [client 72.146.12.65:24113] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aePHbZCHNkWwdiZnafLPlAAAAEc"]
[Sun Apr 19 02:03:26.491733 2026] [proxy_fcgi:error] [pid 41277:tid 41279] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:26.728016 2026] [proxy_fcgi:error] [pid 41277:tid 41303] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:26.964420 2026] [proxy_fcgi:error] [pid 41277:tid 41285] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:27.220188 2026] [proxy_fcgi:error] [pid 41277:tid 41286] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:27.691993 2026] [proxy_fcgi:error] [pid 41277:tid 41292] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:28.039329 2026] [proxy_fcgi:error] [pid 41277:tid 41299] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:28.281846 2026] [proxy_fcgi:error] [pid 41277:tid 41288] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:28.519706 2026] [proxy_fcgi:error] [pid 41277:tid 41289] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:28.756486 2026] [proxy_fcgi:error] [pid 41277:tid 41301] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:28.994911 2026] [proxy_fcgi:error] [pid 41277:tid 41296] [client 72.146.12.65:50274] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 02:03:29.253373 2026] [:error] [pid 41277:tid 41297] [client 72.146.12.65:50274] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aePHcUH3ayszMLZYflv6bQAAAZI"]
[Sun Apr 19 02:03:29.750867 2026] [:error] [pid 32166:tid 32199] [client 72.146.12.65:42347] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aePHcZCHNkWwdiZnafLPlwAAAEE"]
[Sun Apr 19 02:03:30.226450 2026] [:error] [pid 32166:tid 32204] [client 72.146.12.65:24122] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aePHcpCHNkWwdiZnafLPmAAAAEY"]
[Sun Apr 19 02:03:30.712395 2026] [:error] [pid 32165:tid 32173] [client 72.146.12.65:38435] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aePHcqe2vKwEk_N0Brb5SgAAAAQ"]
[Sun Apr 19 02:03:31.304601 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:50276] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oco.php"] [unique_id "aePHc0yD4Jm27Mb3NJiDMAAAAIs"]
[Sun Apr 19 02:03:31.784114 2026] [:error] [pid 32252:tid 32254] [client 72.146.12.65:50109] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oco.php"] [unique_id "aePHc-Xl4Yc-Lt5fJ9ii4QAAAQA"]
[Sun Apr 19 02:03:32.263084 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:49345] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oco.php"] [unique_id "aePHdEH3ayszMLZYflv6bgAAAYQ"]
[Sun Apr 19 02:03:32.777413 2026] [:error] [pid 32252:tid 32269] [client 72.146.12.65:50278] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oco.php"] [unique_id "aePHdOXl4Yc-Lt5fJ9ii5AAAAQ8"]
[Sun Apr 19 02:03:33.302523 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:49394] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogr.php"] [unique_id "aePHdUyD4Jm27Mb3NJiDMgAAAJc"]
[Sun Apr 19 02:03:33.822804 2026] [:error] [pid 32167:tid 32247] [client 72.146.12.65:38450] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogr.php"] [unique_id "aePHdUyD4Jm27Mb3NJiDMwAAAJY"]
[Sun Apr 19 02:03:34.309588 2026] [:error] [pid 41277:tid 41291] [client 72.146.12.65:23762] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogr.php"] [unique_id "aePHdkH3ayszMLZYflv6cQAAAYw"]
[Sun Apr 19 02:03:34.780993 2026] [:error] [pid 41277:tid 41285] [client 72.146.12.65:38410] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ogr.php"] [unique_id "aePHdkH3ayszMLZYflv6cwAAAYY"]
[Sun Apr 19 02:03:35.432713 2026] [:error] [pid 41277:tid 41286] [client 72.146.12.65:23755] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oti.php"] [unique_id "aePHd0H3ayszMLZYflv6dAAAAYc"]
[Sun Apr 19 02:03:35.944011 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:42275] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oti.php"] [unique_id "aePHd0yD4Jm27Mb3NJiDOQAAAJI"]
[Sun Apr 19 02:03:36.434032 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:38497] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oti.php"] [unique_id "aePHeHFWunkyacYqsD09vAAAAUM"]
[Sun Apr 19 02:03:36.912599 2026] [:error] [pid 32166:tid 32215] [client 72.146.12.65:50250] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oti.php"] [unique_id "aePHeJCHNkWwdiZnafLPnAAAAFE"]
[Sun Apr 19 02:03:37.437334 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:23799] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-124.php"] [unique_id "aePHeUyD4Jm27Mb3NJiDPAAAAIw"]
[Sun Apr 19 02:03:37.975687 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:38483] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-124.php"] [unique_id "aePHeUyD4Jm27Mb3NJiDPgAAAJE"]
[Sun Apr 19 02:03:38.531459 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:45170] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-124.php"] [unique_id "aePHekyD4Jm27Mb3NJiDPwAAAIY"]
[Sun Apr 19 02:03:39.007468 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:38400] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zc-124.php"] [unique_id "aePHe0yD4Jm27Mb3NJiDQwAAAIs"]
[Sun Apr 19 02:03:39.534666 2026] [:error] [pid 60910:tid 60916] [client 72.146.12.65:49398] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aePHe3FWunkyacYqsD09wAAAAUQ"]
[Sun Apr 19 02:03:40.037678 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:23753] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aePHfEyD4Jm27Mb3NJiDSQAAAJI"]
[Sun Apr 19 02:03:40.534632 2026] [:error] [pid 60910:tid 60926] [client 72.146.12.65:49365] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aePHfHFWunkyacYqsD09wgAAAU4"]
[Sun Apr 19 02:03:41.083059 2026] [:error] [pid 41277:tid 41283] [client 72.146.12.65:23751] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "aePHfUH3ayszMLZYflv6ewAAAYQ"]
[Sun Apr 19 02:03:41.563629 2026] [:error] [pid 32166:tid 32209] [client 72.146.12.65:38432] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aePHfZCHNkWwdiZnafLPqAAAAEs"]
[Sun Apr 19 02:03:42.059911 2026] [:error] [pid 32166:tid 32207] [client 72.146.12.65:46205] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aePHfpCHNkWwdiZnafLPrAAAAEk"]
[Sun Apr 19 02:03:42.579162 2026] [:error] [pid 33517:tid 33519] [client 72.146.12.65:38440] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aePHfn4Zz-rubR1wiZ-xhgAAAMA"]
[Sun Apr 19 02:03:43.131341 2026] [:error] [pid 32166:tid 32206] [client 72.146.12.65:49417] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aePHf5CHNkWwdiZnafLPrgAAAEg"]
[Sun Apr 19 02:03:43.665391 2026] [:error] [pid 41277:tid 41284] [client 72.146.12.65:42256] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aePHf0H3ayszMLZYflv6fwAAAYU"]
[Sun Apr 19 02:03:44.156303 2026] [:error] [pid 41277:tid 41292] [client 72.146.12.65:42312] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aePHgEH3ayszMLZYflv6gAAAAY0"]
[Sun Apr 19 02:03:44.625581 2026] [:error] [pid 32166:tid 32218] [client 72.146.12.65:49444] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aePHgJCHNkWwdiZnafLPtgAAAFQ"]
[Sun Apr 19 02:03:45.140126 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:49449] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aePHgXFWunkyacYqsD09xAAAAUM"]
[Sun Apr 19 02:03:45.621368 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:38515] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fss.php"] [unique_id "aePHgUyD4Jm27Mb3NJiDUQAAAI0"]
[Sun Apr 19 02:03:46.126070 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:49368] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fss.php"] [unique_id "aePHgkyD4Jm27Mb3NJiDUgAAAIw"]
[Sun Apr 19 02:03:46.620452 2026] [:error] [pid 41277:tid 41301] [client 72.146.12.65:50251] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fss.php"] [unique_id "aePHgkH3ayszMLZYflv6gwAAAZY"]
[Sun Apr 19 02:03:47.095947 2026] [:error] [pid 41277:tid 41279] [client 72.146.12.65:38471] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fss.php"] [unique_id "aePHg0H3ayszMLZYflv6hQAAAYA"]
[Sun Apr 19 02:03:47.564632 2026] [:error] [pid 32167:tid 32225] [client 72.146.12.65:46154] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aePHg0yD4Jm27Mb3NJiDVQAAAIA"]
[Sun Apr 19 02:03:48.036661 2026] [:error] [pid 32167:tid 32245] [client 72.146.12.65:24104] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aePHhEyD4Jm27Mb3NJiDVwAAAJQ"]
[Sun Apr 19 02:03:48.598678 2026] [:error] [pid 33517:tid 33535] [client 72.146.12.65:45171] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aePHhH4Zz-rubR1wiZ-xiQAAANA"]
[Sun Apr 19 02:03:49.081569 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:23750] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aePHhUyD4Jm27Mb3NJiDWwAAAII"]
[Sun Apr 19 02:03:49.551911 2026] [:error] [pid 32252:tid 32255] [client 72.146.12.65:38499] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/011i.php"] [unique_id "aePHheXl4Yc-Lt5fJ9ii9wAAAQE"]
[Sun Apr 19 02:03:50.216678 2026] [:error] [pid 32167:tid 32248] [client 72.146.12.65:38403] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/011i.php"] [unique_id "aePHhkyD4Jm27Mb3NJiDXQAAAJc"]
[Sun Apr 19 02:03:50.709299 2026] [:error] [pid 32165:tid 32170] [client 72.146.12.65:38431] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/011i.php"] [unique_id "aePHhqe2vKwEk_N0Brb5VAAAAAE"]
[Sun Apr 19 02:03:51.175317 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:49402] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/011i.php"] [unique_id "aePHh0yD4Jm27Mb3NJiDYgAAAJE"]
[Sun Apr 19 02:03:51.684566 2026] [:error] [pid 32167:tid 32231] [client 72.146.12.65:45165] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "aePHh0yD4Jm27Mb3NJiDZQAAAIY"]
[Sun Apr 19 02:03:52.150486 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:50302] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "aePHiEyD4Jm27Mb3NJiDaQAAAII"]
[Sun Apr 19 02:03:52.706858 2026] [:error] [pid 32167:tid 32243] [client 72.146.12.65:24094] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "aePHiEyD4Jm27Mb3NJiDbgAAAJI"]
[Sun Apr 19 02:03:53.200533 2026] [:error] [pid 32167:tid 32242] [client 72.146.12.65:38488] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gk.php"] [unique_id "aePHiUyD4Jm27Mb3NJiDcwAAAJE"]
[Sun Apr 19 02:03:53.696918 2026] [:error] [pid 33517:tid 33538] [client 72.146.12.65:50080] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aePHiX4Zz-rubR1wiZ-xigAAANM"]
[Sun Apr 19 02:03:54.254996 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:46163] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aePHikyD4Jm27Mb3NJiDeQAAAIs"]
[Sun Apr 19 02:03:54.732963 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:50085] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aePHikyD4Jm27Mb3NJiDfAAAAIc"]
[Sun Apr 19 02:03:55.446549 2026] [:error] [pid 32167:tid 32238] [client 72.146.12.65:50249] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aePHi0yD4Jm27Mb3NJiDfwAAAI0"]
[Sun Apr 19 02:03:55.987151 2026] [:error] [pid 60910:tid 60926] [client 72.146.12.65:49435] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePHi3FWunkyacYqsD09ygAAAU4"]
[Sun Apr 19 02:03:56.578623 2026] [:error] [pid 60910:tid 60933] [client 72.146.12.65:49350] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePHjHFWunkyacYqsD09zAAAAVU"]
[Sun Apr 19 02:03:57.072283 2026] [:error] [pid 60910:tid 60920] [client 72.146.12.65:23767] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePHjXFWunkyacYqsD09zgAAAUg"]
[Sun Apr 19 02:03:57.640814 2026] [:error] [pid 32167:tid 32237] [client 72.146.12.65:38465] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePHjUyD4Jm27Mb3NJiDigAAAIw"]
[Sun Apr 19 02:03:58.111339 2026] [:error] [pid 32167:tid 32232] [client 72.146.12.65:24105] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePHjkyD4Jm27Mb3NJiDjgAAAIc"]
[Sun Apr 19 02:03:58.594727 2026] [:error] [pid 32167:tid 32236] [client 72.146.12.65:50067] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePHjkyD4Jm27Mb3NJiDkgAAAIs"]
[Sun Apr 19 02:03:59.065598 2026] [:error] [pid 33517:tid 33528] [client 72.146.12.65:24072] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePHj34Zz-rubR1wiZ-xjQAAAMk"]
[Sun Apr 19 02:03:59.543437 2026] [:error] [pid 32167:tid 32227] [client 72.146.12.65:50262] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePHj0yD4Jm27Mb3NJiDmgAAAII"]
[Sun Apr 19 02:04:00.026896 2026] [:error] [pid 41277:tid 41299] [client 72.146.12.65:38496] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home.php"] [unique_id "aePHkEH3ayszMLZYflv6jQAAAZQ"]
[Sun Apr 19 02:04:00.542835 2026] [:error] [pid 32167:tid 32239] [client 72.146.12.65:42325] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home.php"] [unique_id "aePHkEyD4Jm27Mb3NJiDngAAAI4"]
[Sun Apr 19 02:04:01.027477 2026] [:error] [pid 32166:tid 32215] [client 72.146.12.65:38508] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home.php"] [unique_id "aePHkZCHNkWwdiZnafLPxQAAAFE"]
[Sun Apr 19 02:04:01.501557 2026] [:error] [pid 60910:tid 60915] [client 72.146.12.65:49362] [client 72.146.12.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/home.php"] [unique_id "aePHkXFWunkyacYqsD090wAAAUM"]
[Sun Apr 19 03:16:59.092812 2026] [:error] [pid 32167:tid 32245] [client 172.98.33.61:29749] [client 172.98.33.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.61, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aePYq0yD4Jm27Mb3NJiqhQAAAJQ"]
[Sun Apr 19 03:16:59.104883 2026] [proxy_fcgi:error] [pid 32167:tid 32245] [client 172.98.33.61:29749] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:36.405205 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:36.648607 2026] [proxy_fcgi:error] [pid 15760:tid 15784] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:36.891805 2026] [proxy_fcgi:error] [pid 15760:tid 15790] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:37.134547 2026] [proxy_fcgi:error] [pid 15760:tid 15772] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:37.431476 2026] [proxy_fcgi:error] [pid 15760:tid 15779] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:37.674351 2026] [proxy_fcgi:error] [pid 15760:tid 15786] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:37.918346 2026] [proxy_fcgi:error] [pid 15760:tid 15778] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:38.175422 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:38.472975 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:38.718902 2026] [proxy_fcgi:error] [pid 15760:tid 15783] [client 158.158.35.144:42924] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:36:38.962494 2026] [:error] [pid 15760:tid 15769] [client 158.158.35.144:42924] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeRb1vSdD_XHQMJ_IStJJgAAAcE"]
[Sun Apr 19 12:36:39.821363 2026] [:error] [pid 15764:tid 15840] [client 158.158.35.144:48058] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeRb12LL_sqdSHoVp-RquAAAAk4"]
[Sun Apr 19 12:36:40.761929 2026] [:error] [pid 47775:tid 47861] [client 158.158.35.144:31454] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeRb2Lmztjlk9tsmoezJcgAAAJI"]
[Sun Apr 19 12:36:41.535819 2026] [:error] [pid 15764:tid 15829] [client 158.158.35.144:42888] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nwflm.php"] [unique_id "aeRb2WLL_sqdSHoVp-RqugAAAkM"]
[Sun Apr 19 12:36:42.480868 2026] [:error] [pid 15764:tid 15835] [client 158.158.35.144:59962] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeRb2mLL_sqdSHoVp-RqvwAAAkk"]
[Sun Apr 19 12:36:43.907456 2026] [:error] [pid 15763:tid 15802] [client 158.158.35.144:47303] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeRb27MXv1Y1THOoxaCJVAAAAgY"]
[Sun Apr 19 12:36:44.878833 2026] [:error] [pid 15764:tid 15840] [client 158.158.35.144:59935] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeRb3GLL_sqdSHoVp-RqyQAAAk4"]
[Sun Apr 19 12:36:46.269333 2026] [:error] [pid 15764:tid 15827] [client 158.158.35.144:48040] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeRb3mLL_sqdSHoVp-RqzQAAAkE"]
[Sun Apr 19 12:36:47.159042 2026] [:error] [pid 15764:tid 15835] [client 158.158.35.144:47312] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeRb32LL_sqdSHoVp-RqzwAAAkk"]
[Sun Apr 19 12:36:48.094261 2026] [:error] [pid 15763:tid 15820] [client 158.158.35.144:59955] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeRb4LMXv1Y1THOoxaCJWAAAAhg"]
[Sun Apr 19 12:36:49.506803 2026] [:error] [pid 15764:tid 15831] [client 158.158.35.144:41738] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeRb4WLL_sqdSHoVp-Rq1QAAAkU"]
[Sun Apr 19 12:36:50.862214 2026] [:error] [pid 47775:tid 47852] [client 158.158.35.144:57984] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeRb4rmztjlk9tsmoezJfgAAAIk"]
[Sun Apr 19 12:36:52.266224 2026] [:error] [pid 15694:tid 15725] [client 158.158.35.144:59915] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeRb5LimB-jol1fwqArfoAAAAYI"]
[Sun Apr 19 12:36:54.122502 2026] [:error] [pid 15760:tid 15773] [client 158.158.35.144:41758] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeRb5vSdD_XHQMJ_IStJMAAAAcU"]
[Sun Apr 19 12:36:56.110575 2026] [:error] [pid 47773:tid 47827] [client 158.158.35.144:41771] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeRb6OiBHdnCJDuPq9DoQAAAAEs"]
[Sun Apr 19 12:36:57.035068 2026] [:error] [pid 47886:tid 47906] [client 158.158.35.144:47297] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeRb6USe8yiyuPrD7yM3ogAAANI"]
[Sun Apr 19 12:36:58.042432 2026] [:error] [pid 15693:tid 15700] [client 158.158.35.144:41791] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeRb6sNMD-ccazQlTsk0BAAAAUQ"]
[Sun Apr 19 12:36:58.999629 2026] [:error] [pid 15693:tid 15709] [client 158.158.35.144:41762] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeRb6sNMD-ccazQlTsk0BQAAAU0"]
[Sun Apr 19 12:36:59.795582 2026] [:error] [pid 15763:tid 15809] [client 158.158.35.144:48027] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeRb67MXv1Y1THOoxaCJXQAAAg0"]
[Sun Apr 19 12:37:01.490568 2026] [:error] [pid 47886:tid 47892] [client 158.158.35.144:48031] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeRb7USe8yiyuPrD7yM3qgAAAMQ"]
[Sun Apr 19 12:37:03.201561 2026] [:error] [pid 47772:tid 47791] [client 158.158.35.144:9556] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeRb74c0L16cb4smAz8zegAAAAI"]
[Sun Apr 19 12:37:04.254928 2026] [:error] [pid 47772:tid 47808] [client 158.158.35.144:46677] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeRb8Ic0L16cb4smAz8zewAAABM"]
[Sun Apr 19 12:37:05.736427 2026] [:error] [pid 47773:tid 47838] [client 158.158.35.144:46688] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeRb8eiBHdnCJDuPq9DoQwAAAFY"]
[Sun Apr 19 12:37:06.706523 2026] [:error] [pid 15764:tid 15836] [client 158.158.35.144:53020] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeRb8mLL_sqdSHoVp-Rq4wAAAko"]
[Sun Apr 19 12:37:07.587271 2026] [:error] [pid 47772:tid 47811] [client 158.158.35.144:46702] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeRb84c0L16cb4smAz8zfgAAABY"]
[Sun Apr 19 12:37:09.075074 2026] [:error] [pid 15764:tid 15847] [client 158.158.35.144:46077] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeRb9WLL_sqdSHoVp-Rq6QAAAlU"]
[Sun Apr 19 12:37:10.094980 2026] [:error] [pid 15763:tid 15797] [client 158.158.35.144:41749] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeRb9rMXv1Y1THOoxaCJZgAAAgE"]
[Sun Apr 19 12:37:11.759363 2026] [:error] [pid 47772:tid 47807] [client 158.158.35.144:41760] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeRb94c0L16cb4smAz8zgAAAABI"]
[Sun Apr 19 12:37:12.787534 2026] [:error] [pid 47772:tid 47806] [client 158.158.35.144:41742] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "aeRb-Ic0L16cb4smAz8zhAAAABE"]
[Sun Apr 19 12:37:13.686268 2026] [:error] [pid 15694:tid 15734] [client 158.158.35.144:42886] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "aeRb-bimB-jol1fwqArfpQAAAYg"]
[Sun Apr 19 12:37:14.488183 2026] [:error] [pid 47773:tid 47836] [client 158.158.35.144:41774] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "aeRb-uiBHdnCJDuPq9DoSAAAAFQ"]
[Sun Apr 19 12:37:15.749381 2026] [:error] [pid 15694:tid 15751] [client 158.158.35.144:41734] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/water.php"] [unique_id "aeRb-7imB-jol1fwqArfqgAAAZg"]
[Sun Apr 19 12:37:16.948042 2026] [:error] [pid 15694:tid 15745] [client 158.158.35.144:46034] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aeRb_LimB-jol1fwqArfsAAAAZM"]
[Sun Apr 19 12:37:18.022832 2026] [:error] [pid 47773:tid 47829] [client 158.158.35.144:41731] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aeRb_uiBHdnCJDuPq9DoSwAAAE0"]
[Sun Apr 19 12:37:19.265067 2026] [:error] [pid 47775:tid 47858] [client 158.158.35.144:10150] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aeRb_7mztjlk9tsmoezJjAAAAI8"]
[Sun Apr 19 12:37:20.155567 2026] [:error] [pid 47772:tid 47805] [client 158.158.35.144:46695] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ggb.php"] [unique_id "aeRcAIc0L16cb4smAz8zjQAAABA"]
[Sun Apr 19 12:37:21.177049 2026] [:error] [pid 15764:tid 15838] [client 158.158.35.144:10160] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeRcAWLL_sqdSHoVp-Rq7wAAAkw"]
[Sun Apr 19 12:37:22.484787 2026] [:error] [pid 15693:tid 15710] [client 158.158.35.144:10161] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeRcAsNMD-ccazQlTsk0BwAAAU4"]
[Sun Apr 19 12:37:24.395581 2026] [:error] [pid 47886:tid 47891] [client 158.158.35.144:56102] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeRcBESe8yiyuPrD7yM3swAAAMM"]
[Sun Apr 19 12:37:26.877868 2026] [:error] [pid 47773:tid 47836] [client 158.158.35.144:47312] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeRcBuiBHdnCJDuPq9DoVgAAAFQ"]
[Sun Apr 19 12:37:27.566613 2026] [:error] [pid 47886:tid 47904] [client 158.158.35.144:56070] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeRcB0Se8yiyuPrD7yM3uAAAANA"]
[Sun Apr 19 12:37:29.618386 2026] [:error] [pid 47886:tid 47888] [client 158.158.35.144:53021] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeRcCUSe8yiyuPrD7yM3uQAAAMA"]
[Sun Apr 19 12:37:35.517961 2026] [:error] [pid 47886:tid 47893] [client 158.158.35.144:42896] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wert.php"] [unique_id "aeRcD0Se8yiyuPrD7yM3wAAAAMU"]
[Sun Apr 19 12:37:57.564835 2026] [proxy_fcgi:error] [pid 15693:tid 15699] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:57.808740 2026] [proxy_fcgi:error] [pid 15693:tid 15720] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:58.052078 2026] [proxy_fcgi:error] [pid 15693:tid 15698] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:58.297574 2026] [proxy_fcgi:error] [pid 15693:tid 15715] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:58.539813 2026] [proxy_fcgi:error] [pid 15693:tid 15700] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:58.782876 2026] [proxy_fcgi:error] [pid 15693:tid 15711] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:59.025842 2026] [proxy_fcgi:error] [pid 15693:tid 15718] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:59.274641 2026] [proxy_fcgi:error] [pid 15693:tid 15719] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:59.530730 2026] [proxy_fcgi:error] [pid 15693:tid 15701] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:37:59.773291 2026] [proxy_fcgi:error] [pid 15693:tid 15697] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:38:00.016211 2026] [proxy_fcgi:error] [pid 15693:tid 15702] [client 158.158.35.144:35101] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:38:00.264018 2026] [:error] [pid 15693:tid 15705] [client 158.158.35.144:35101] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeRcKMNMD-ccazQlTsk0FgAAAUk"]
[Sun Apr 19 12:38:01.530832 2026] [:error] [pid 47772:tid 47793] [client 158.158.35.144:50140] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeRcKYc0L16cb4smAz8zpAAAAAQ"]
[Sun Apr 19 12:38:02.633503 2026] [:error] [pid 15764:tid 15844] [client 158.158.35.144:9792] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeRcKmLL_sqdSHoVp-RrDwAAAlI"]
[Sun Apr 19 12:38:03.328915 2026] [:error] [pid 15694:tid 15733] [client 158.158.35.144:56106] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeRcK7imB-jol1fwqArfxgAAAYc"]
[Sun Apr 19 12:38:04.307482 2026] [:error] [pid 15764:tid 15839] [client 158.158.35.144:9831] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeRcLGLL_sqdSHoVp-RrEgAAAk0"]
[Sun Apr 19 12:38:04.870780 2026] [:error] [pid 15694:tid 15751] [client 158.158.35.144:56755] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeRcLLimB-jol1fwqArfxwAAAZg"]
[Sun Apr 19 12:38:05.493407 2026] [:error] [pid 15764:tid 15832] [client 158.158.35.144:53018] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeRcLWLL_sqdSHoVp-RrFAAAAkY"]
[Sun Apr 19 12:38:06.032753 2026] [:error] [pid 15764:tid 15837] [client 158.158.35.144:46673] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeRcLmLL_sqdSHoVp-RrFQAAAks"]
[Sun Apr 19 12:38:06.557993 2026] [:error] [pid 47773:tid 47832] [client 158.158.35.144:52995] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeRcLuiBHdnCJDuPq9DocgAAAFA"]
[Sun Apr 19 12:38:07.365940 2026] [:error] [pid 15765:tid 15863] [client 158.158.35.144:9837] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeRcL_Rqinw-W5EwQ77BhAAAAoo"]
[Sun Apr 19 12:38:08.009160 2026] [:error] [pid 15760:tid 15785] [client 158.158.35.144:35076] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeRcMPSdD_XHQMJ_IStJSwAAAdE"]
[Sun Apr 19 12:38:08.863797 2026] [:error] [pid 47773:tid 47826] [client 158.158.35.144:9853] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "aeRcMOiBHdnCJDuPq9DodAAAAEo"]
[Sun Apr 19 12:38:09.714763 2026] [:error] [pid 15763:tid 15803] [client 158.158.35.144:50115] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeRcMbMXv1Y1THOoxaCJdAAAAgc"]
[Sun Apr 19 12:38:10.363821 2026] [:error] [pid 47775:tid 47851] [client 158.158.35.144:46658] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeRcMrmztjlk9tsmoezJogAAAIg"]
[Sun Apr 19 12:38:10.968449 2026] [:error] [pid 15763:tid 15818] [client 158.158.35.144:46070] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeRcMrMXv1Y1THOoxaCJdwAAAhY"]
[Sun Apr 19 12:38:11.739545 2026] [:error] [pid 15694:tid 15741] [client 158.158.35.144:9812] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "aeRcM7imB-jol1fwqArfzAAAAY8"]
[Sun Apr 19 12:38:12.651213 2026] [:error] [pid 47775:tid 47867] [client 158.158.35.144:50151] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeRcNLmztjlk9tsmoezJqAAAAJg"]
[Sun Apr 19 12:38:13.465610 2026] [:error] [pid 15763:tid 15799] [client 158.158.35.144:56704] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeRcNbMXv1Y1THOoxaCJegAAAgM"]
[Sun Apr 19 12:38:13.971346 2026] [:error] [pid 47775:tid 47848] [client 158.158.35.144:53053] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeRcNbmztjlk9tsmoezJrAAAAIU"]
[Sun Apr 19 12:38:14.563930 2026] [:error] [pid 47775:tid 47858] [client 158.158.35.144:35090] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "aeRcNrmztjlk9tsmoezJrQAAAI8"]
[Sun Apr 19 12:38:15.121571 2026] [:error] [pid 15760:tid 15779] [client 158.158.35.144:46685] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeRcN_SdD_XHQMJ_IStJUAAAAcs"]
[Sun Apr 19 12:38:16.434690 2026] [:error] [pid 15760:tid 15778] [client 158.158.35.144:56114] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeRcOPSdD_XHQMJ_IStJUgAAAco"]
[Sun Apr 19 12:38:18.106703 2026] [:error] [pid 15763:tid 15815] [client 158.158.35.144:35082] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeRcOrMXv1Y1THOoxaCJewAAAhM"]
[Sun Apr 19 12:38:18.811822 2026] [:error] [pid 47775:tid 47844] [client 158.158.35.144:50162] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "aeRcOrmztjlk9tsmoezJtQAAAIE"]
[Sun Apr 19 12:38:19.528363 2026] [:error] [pid 15765:tid 15876] [client 158.158.35.144:46657] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aeRcO_Rqinw-W5EwQ77BkQAAApc"]
[Sun Apr 19 12:38:20.297427 2026] [:error] [pid 15764:tid 15828] [client 158.158.35.144:9820] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aeRcPGLL_sqdSHoVp-RrLwAAAkI"]
[Sun Apr 19 12:38:20.986571 2026] [:error] [pid 15764:tid 15842] [client 158.158.35.144:56723] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aeRcPGLL_sqdSHoVp-RrMwAAAlA"]
[Sun Apr 19 12:38:21.769956 2026] [:error] [pid 47886:tid 47901] [client 158.158.35.144:56757] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.mopj.php"] [unique_id "aeRcPUSe8yiyuPrD7yM30gAAAM0"]
[Sun Apr 19 12:38:22.823377 2026] [:error] [pid 15760:tid 15787] [client 158.158.35.144:9799] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeRcPvSdD_XHQMJ_IStJVQAAAdM"]
[Sun Apr 19 12:38:23.991329 2026] [:error] [pid 47775:tid 47846] [client 158.158.35.144:9835] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeRcP7mztjlk9tsmoezJuwAAAIM"]
[Sun Apr 19 12:38:25.418690 2026] [:error] [pid 15694:tid 15751] [client 158.158.35.144:35094] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeRcQbimB-jol1fwqArfzwAAAZg"]
[Sun Apr 19 12:38:26.376820 2026] [:error] [pid 15763:tid 15809] [client 158.158.35.144:46065] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeRcQrMXv1Y1THOoxaCJfwAAAg0"]
[Sun Apr 19 12:38:27.406559 2026] [:error] [pid 15763:tid 15797] [client 158.158.35.144:53008] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "aeRcQ7MXv1Y1THOoxaCJgQAAAgE"]
[Sun Apr 19 12:38:28.528440 2026] [:error] [pid 15763:tid 15804] [client 158.158.35.144:46047] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "aeRcRLMXv1Y1THOoxaCJhAAAAgg"]
[Sun Apr 19 12:38:29.452697 2026] [:error] [pid 15763:tid 15799] [client 158.158.35.144:50148] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "aeRcRbMXv1Y1THOoxaCJhQAAAgM"]
[Sun Apr 19 12:38:30.594127 2026] [:error] [pid 15763:tid 15819] [client 158.158.35.144:56722] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nano.php"] [unique_id "aeRcRrMXv1Y1THOoxaCJhgAAAhc"]
[Sun Apr 19 12:38:32.063643 2026] [:error] [pid 47775:tid 47843] [client 158.158.35.144:35107] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeRcSLmztjlk9tsmoezJvwAAAIA"]
[Sun Apr 19 12:38:33.287663 2026] [:error] [pid 15764:tid 15844] [client 158.158.35.144:10122] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeRcSWLL_sqdSHoVp-RrPwAAAlI"]
[Sun Apr 19 12:38:34.087446 2026] [:error] [pid 47772:tid 47800] [client 158.158.35.144:56760] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeRcSoc0L16cb4smAz8zvAAAAAs"]
[Sun Apr 19 12:38:34.874821 2026] [:error] [pid 47772:tid 47802] [client 158.158.35.144:56754] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "aeRcSoc0L16cb4smAz8zvwAAAA0"]
[Sun Apr 19 12:38:35.941818 2026] [:error] [pid 47773:tid 47836] [client 158.158.35.144:50127] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeRcS-iBHdnCJDuPq9DojQAAAFQ"]
[Sun Apr 19 12:38:36.716590 2026] [:error] [pid 15763:tid 15798] [client 158.158.35.144:10167] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeRcTLMXv1Y1THOoxaCJigAAAgI"]
[Sun Apr 19 12:38:37.341924 2026] [:error] [pid 47775:tid 47849] [client 158.158.35.144:35098] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeRcTbmztjlk9tsmoezJxgAAAIY"]
[Sun Apr 19 12:38:37.971545 2026] [:error] [pid 47772:tid 47797] [client 158.158.35.144:56756] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aeRcTYc0L16cb4smAz8zyQAAAAg"]
[Sun Apr 19 12:38:38.758244 2026] [:error] [pid 47772:tid 47794] [client 158.158.35.144:9342] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeRcToc0L16cb4smAz8zzgAAAAU"]
[Sun Apr 19 12:38:39.630306 2026] [:error] [pid 15694:tid 15747] [client 158.158.35.144:46075] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeRcT7imB-jol1fwqArf1gAAAZU"]
[Sun Apr 19 12:38:40.391600 2026] [:error] [pid 15694:tid 15736] [client 158.158.35.144:10127] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeRcULimB-jol1fwqArf1wAAAYo"]
[Sun Apr 19 12:38:41.104018 2026] [:error] [pid 47772:tid 47806] [client 158.158.35.144:35100] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "aeRcUYc0L16cb4smAz8z1wAAABE"]
[Sun Apr 19 12:38:41.736662 2026] [:error] [pid 47886:tid 47897] [client 158.158.35.144:46710] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeRcUUSe8yiyuPrD7yM31QAAAMk"]
[Sun Apr 19 12:38:42.296087 2026] [:error] [pid 47772:tid 47810] [client 158.158.35.144:53025] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeRcUoc0L16cb4smAz8z2gAAABU"]
[Sun Apr 19 12:38:42.904356 2026] [:error] [pid 15693:tid 15710] [client 158.158.35.144:46033] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeRcUsNMD-ccazQlTsk0FwAAAU4"]
[Sun Apr 19 12:38:43.678533 2026] [:error] [pid 15765:tid 15872] [client 158.158.35.144:56104] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "aeRcU_Rqinw-W5EwQ77BlgAAApM"]
[Sun Apr 19 12:38:44.571446 2026] [:error] [pid 15763:tid 15801] [client 158.158.35.144:46674] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeRcVLMXv1Y1THOoxaCJkwAAAgU"]
[Sun Apr 19 12:38:45.198066 2026] [:error] [pid 47775:tid 47850] [client 158.158.35.144:9803] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeRcVbmztjlk9tsmoezJywAAAIc"]
[Sun Apr 19 12:38:45.814764 2026] [:error] [pid 47886:tid 47891] [client 158.158.35.144:51861] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeRcVUSe8yiyuPrD7yM31wAAAMM"]
[Sun Apr 19 12:38:46.572131 2026] [:error] [pid 47773:tid 47829] [client 158.158.35.144:50137] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "aeRcVuiBHdnCJDuPq9DokQAAAE0"]
[Sun Apr 19 12:38:47.414057 2026] [:error] [pid 47773:tid 47821] [client 158.158.35.144:50117] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeRcV-iBHdnCJDuPq9DokwAAAEU"]
[Sun Apr 19 12:38:48.353639 2026] [:error] [pid 47773:tid 47827] [client 158.158.35.144:46709] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeRcWOiBHdnCJDuPq9DolAAAAEs"]
[Sun Apr 19 12:38:48.899089 2026] [:error] [pid 47886:tid 47902] [client 158.158.35.144:53000] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeRcWESe8yiyuPrD7yM32QAAAM4"]
[Sun Apr 19 12:38:49.824269 2026] [:error] [pid 47886:tid 47895] [client 158.158.35.144:46706] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeRcWUSe8yiyuPrD7yM32gAAAMc"]
[Sun Apr 19 12:38:50.592514 2026] [:error] [pid 15694:tid 15726] [client 158.158.35.144:56066] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeRcWrimB-jol1fwqArf2AAAAYM"]
[Sun Apr 19 12:38:51.697737 2026] [:error] [pid 47775:tid 47849] [client 158.158.35.144:9800] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeRcW7mztjlk9tsmoezJzQAAAIY"]
[Sun Apr 19 12:38:52.906672 2026] [:error] [pid 47773:tid 47817] [client 158.158.35.144:50113] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeRcXOiBHdnCJDuPq9DomAAAAEE"]
[Sun Apr 19 12:38:53.969004 2026] [:error] [pid 15764:tid 15846] [client 158.158.35.144:50125] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeRcXWLL_sqdSHoVp-RrUQAAAlQ"]
[Sun Apr 19 12:38:54.874872 2026] [:error] [pid 15764:tid 15833] [client 158.158.35.144:9797] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeRcXmLL_sqdSHoVp-RrVgAAAkc"]
[Sun Apr 19 12:38:55.944978 2026] [:error] [pid 15764:tid 15834] [client 158.158.35.144:46698] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeRcX2LL_sqdSHoVp-RrWgAAAkg"]
[Sun Apr 19 12:38:57.255087 2026] [:error] [pid 47773:tid 47822] [client 158.158.35.144:51893] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeRcYeiBHdnCJDuPq9DomwAAAEY"]
[Sun Apr 19 12:38:58.266700 2026] [:error] [pid 15763:tid 15811] [client 158.158.35.144:56742] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeRcYrMXv1Y1THOoxaCJngAAAg8"]
[Sun Apr 19 12:38:59.168509 2026] [:error] [pid 15765:tid 15857] [client 158.158.35.144:56735] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeRcY_Rqinw-W5EwQ77BnAAAAoQ"]
[Sun Apr 19 12:39:00.555272 2026] [proxy_fcgi:error] [pid 47772:tid 47796] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:00.798241 2026] [proxy_fcgi:error] [pid 47772:tid 47794] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:01.073457 2026] [proxy_fcgi:error] [pid 47772:tid 47799] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:01.318110 2026] [proxy_fcgi:error] [pid 47772:tid 47812] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:01.584294 2026] [proxy_fcgi:error] [pid 47772:tid 47791] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:01.829438 2026] [proxy_fcgi:error] [pid 47772:tid 47792] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:02.072966 2026] [proxy_fcgi:error] [pid 47772:tid 47811] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:02.320917 2026] [proxy_fcgi:error] [pid 47772:tid 47793] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:02.564269 2026] [proxy_fcgi:error] [pid 47772:tid 47806] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:02.808446 2026] [proxy_fcgi:error] [pid 47772:tid 47797] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:03.074524 2026] [proxy_fcgi:error] [pid 47772:tid 47789] [client 158.158.35.144:51899] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:39:03.325946 2026] [:error] [pid 47772:tid 47802] [client 158.158.35.144:51899] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeRcZ4c0L16cb4smAz8z-QAAAA0"]
[Sun Apr 19 12:39:04.801279 2026] [:error] [pid 47773:tid 47821] [client 158.158.35.144:46692] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeRcaOiBHdnCJDuPq9DoogAAAEU"]
[Sun Apr 19 12:39:06.708222 2026] [:error] [pid 15764:tid 15843] [client 158.158.35.144:46020] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeRcamLL_sqdSHoVp-RrZgAAAlE"]
[Sun Apr 19 12:39:07.856638 2026] [:error] [pid 15764:tid 15838] [client 158.158.35.144:53012] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeRca2LL_sqdSHoVp-RragAAAkw"]
[Sun Apr 19 12:39:09.095365 2026] [:error] [pid 47773:tid 47825] [client 158.158.35.144:46668] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "aeRcbeiBHdnCJDuPq9DopgAAAEk"]
[Sun Apr 19 12:39:13.772522 2026] [:error] [pid 15764:tid 15837] [client 158.158.35.144:46713] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "aeRccWLL_sqdSHoVp-RrbwAAAks"]
[Sun Apr 19 12:39:20.504002 2026] [:error] [pid 47775:tid 47845] [client 158.158.35.144:9821] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "aeRceLmztjlk9tsmoezJ-QAAAII"]
[Sun Apr 19 12:39:27.603817 2026] [:error] [pid 15764:tid 15843] [client 158.158.35.144:46030] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "aeRcf2LL_sqdSHoVp-RrtwAAAlE"]
[Sun Apr 19 12:39:28.908629 2026] [:error] [pid 47775:tid 47845] [client 158.158.35.144:50114] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "aeRcgLmztjlk9tsmoezJ_wAAAII"]
[Sun Apr 19 12:39:30.116862 2026] [:error] [pid 47773:tid 47826] [client 158.158.35.144:9850] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "aeRcguiBHdnCJDuPq9DotQAAAEo"]
[Sun Apr 19 12:39:30.753558 2026] [:error] [pid 15760:tid 15776] [client 158.158.35.144:9808] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "aeRcgvSdD_XHQMJ_IStJiwAAAcg"]
[Sun Apr 19 12:39:31.510131 2026] [:error] [pid 47775:tid 47863] [client 158.158.35.144:42933] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "aeRcg7mztjlk9tsmoezKBgAAAJQ"]
[Sun Apr 19 12:39:32.148078 2026] [:error] [pid 15763:tid 15820] [client 158.158.35.144:50141] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "aeRchLMXv1Y1THOoxaCJ6gAAAhg"]
[Sun Apr 19 12:39:32.890755 2026] [:error] [pid 15765:tid 15864] [client 158.158.35.144:56753] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "aeRchPRqinw-W5EwQ77BvwAAAos"]
[Sun Apr 19 12:39:33.437079 2026] [:error] [pid 15765:tid 15866] [client 158.158.35.144:51903] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "aeRchfRqinw-W5EwQ77BwgAAAo0"]
[Sun Apr 19 12:39:34.351815 2026] [:error] [pid 15763:tid 15807] [client 158.158.35.144:56088] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeRchrMXv1Y1THOoxaCJ7QAAAgs"]
[Sun Apr 19 12:39:35.210097 2026] [:error] [pid 15765:tid 15875] [client 158.158.35.144:56071] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeRch_Rqinw-W5EwQ77BxgAAApY"]
[Sun Apr 19 12:39:36.075647 2026] [:error] [pid 15763:tid 15819] [client 158.158.35.144:50133] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeRciLMXv1Y1THOoxaCJ8QAAAhc"]
[Sun Apr 19 12:39:36.648020 2026] [:error] [pid 15763:tid 15812] [client 158.158.35.144:51852] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeRciLMXv1Y1THOoxaCJ8wAAAhA"]
[Sun Apr 19 12:39:37.420395 2026] [:error] [pid 15764:tid 15829] [client 158.158.35.144:51879] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeRciWLL_sqdSHoVp-RrvQAAAkM"]
[Sun Apr 19 12:39:38.127342 2026] [:error] [pid 15764:tid 15835] [client 158.158.35.144:54325] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeRcimLL_sqdSHoVp-RrvwAAAkk"]
[Sun Apr 19 12:39:38.706379 2026] [:error] [pid 15764:tid 15850] [client 158.158.35.144:50172] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeRcimLL_sqdSHoVp-RrwgAAAlc"]
[Sun Apr 19 12:39:39.361831 2026] [:error] [pid 47772:tid 47805] [client 158.158.35.144:9829] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeRci4c0L16cb4smAz80GAAAABA"]
[Sun Apr 19 12:39:40.132878 2026] [:error] [pid 47775:tid 47856] [client 158.158.35.144:51860] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcjLmztjlk9tsmoezKCgAAAI0"]
[Sun Apr 19 12:39:41.366811 2026] [:error] [pid 47773:tid 47838] [client 158.158.35.144:9844] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcjeiBHdnCJDuPq9DouAAAAFY"]
[Sun Apr 19 12:39:42.788310 2026] [:error] [pid 47772:tid 47801] [client 158.158.35.144:46052] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcjoc0L16cb4smAz80HQAAAAw"]
[Sun Apr 19 12:39:43.756353 2026] [:error] [pid 47772:tid 47789] [client 158.158.35.144:49413] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcj4c0L16cb4smAz80IQAAAAA"]
[Sun Apr 19 12:39:45.450757 2026] [:error] [pid 47772:tid 47808] [client 158.158.35.144:51843] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeRckYc0L16cb4smAz80KQAAABM"]
[Sun Apr 19 12:39:47.075695 2026] [:error] [pid 15760:tid 15778] [client 158.158.35.144:46049] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeRck_SdD_XHQMJ_IStJjwAAAco"]
[Sun Apr 19 12:39:48.373371 2026] [:error] [pid 47772:tid 47812] [client 158.158.35.144:53014] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeRclIc0L16cb4smAz80MAAAABc"]
[Sun Apr 19 12:39:50.759809 2026] [:error] [pid 15694:tid 15745] [client 158.158.35.144:9834] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeRclrimB-jol1fwqArf5QAAAZM"]
[Sun Apr 19 12:39:52.951407 2026] [:error] [pid 15694:tid 15742] [client 158.158.35.144:9814] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeRcmLimB-jol1fwqArf6AAAAZA"]
[Sun Apr 19 12:39:56.018760 2026] [:error] [pid 15694:tid 15741] [client 158.158.35.144:53070] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeRcnLimB-jol1fwqArf6QAAAY8"]
[Sun Apr 19 12:39:58.299968 2026] [:error] [pid 47773:tid 47835] [client 158.158.35.144:50159] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeRcnuiBHdnCJDuPq9DowAAAAFM"]
[Sun Apr 19 12:40:00.174584 2026] [:error] [pid 47772:tid 47793] [client 158.158.35.144:51902] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeRcoIc0L16cb4smAz80OQAAAAQ"]
[Sun Apr 19 12:40:03.718908 2026] [proxy_fcgi:error] [pid 15760:tid 15781] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:03.984555 2026] [proxy_fcgi:error] [pid 15760:tid 15770] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:04.236746 2026] [proxy_fcgi:error] [pid 15760:tid 15790] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:04.480061 2026] [proxy_fcgi:error] [pid 15760:tid 15782] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:04.723190 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:04.985524 2026] [proxy_fcgi:error] [pid 15760:tid 15778] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:05.471026 2026] [proxy_fcgi:error] [pid 15760:tid 15788] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:05.715591 2026] [proxy_fcgi:error] [pid 15760:tid 15777] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:05.976092 2026] [proxy_fcgi:error] [pid 15760:tid 15773] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:06.245346 2026] [proxy_fcgi:error] [pid 15760:tid 15769] [client 158.158.35.144:46659] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:40:07.201222 2026] [:error] [pid 15760:tid 15792] [client 158.158.35.144:46659] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeRcp_SdD_XHQMJ_IStJogAAAdg"]
[Sun Apr 19 12:40:08.716358 2026] [:error] [pid 15694:tid 15735] [client 158.158.35.144:53003] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeRcqLimB-jol1fwqArf6gAAAYk"]
[Sun Apr 19 12:40:09.811260 2026] [:error] [pid 47772:tid 47807] [client 158.158.35.144:56728] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeRcqYc0L16cb4smAz80SgAAABI"]
[Sun Apr 19 12:40:10.762785 2026] [:error] [pid 47772:tid 47798] [client 158.158.35.144:46069] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeRcqoc0L16cb4smAz80TwAAAAk"]
[Sun Apr 19 12:40:11.814348 2026] [:error] [pid 47773:tid 47838] [client 158.158.35.144:9818] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRcq-iBHdnCJDuPq9DozAAAAFY"]
[Sun Apr 19 12:40:12.807658 2026] [:error] [pid 47886:tid 47889] [client 158.158.35.144:9329] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRcrESe8yiyuPrD7yM39AAAAME"]
[Sun Apr 19 12:40:14.931299 2026] [:error] [pid 15765:tid 15857] [client 158.158.35.144:53009] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRcrvRqinw-W5EwQ77B1AAAAoQ"]
[Sun Apr 19 12:40:16.443298 2026] [:error] [pid 15765:tid 15863] [client 158.158.35.144:46024] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeRcsPRqinw-W5EwQ77B4wAAAoo"]
[Sun Apr 19 12:40:17.226328 2026] [:error] [pid 15760:tid 15772] [client 158.158.35.144:50146] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRcsfSdD_XHQMJ_IStJpgAAAcQ"]
[Sun Apr 19 12:40:18.198893 2026] [:error] [pid 47773:tid 47816] [client 158.158.35.144:56117] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRcsuiBHdnCJDuPq9Do4wAAAEA"]
[Sun Apr 19 12:40:19.644194 2026] [:error] [pid 15764:tid 15828] [client 158.158.35.144:56111] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRcs2LL_sqdSHoVp-RrywAAAkI"]
[Sun Apr 19 12:40:21.523885 2026] [:error] [pid 15763:tid 15818] [client 158.158.35.144:56093] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeRctbMXv1Y1THOoxaCKCAAAAhY"]
[Sun Apr 19 12:40:22.366094 2026] [:error] [pid 15763:tid 15796] [client 158.158.35.144:51850] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRctrMXv1Y1THOoxaCKDwAAAgA"]
[Sun Apr 19 12:40:24.259551 2026] [:error] [pid 15763:tid 15800] [client 158.158.35.144:50129] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRcuLMXv1Y1THOoxaCKFwAAAgQ"]
[Sun Apr 19 12:40:24.970000 2026] [:error] [pid 47775:tid 47857] [client 158.158.35.144:46054] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRcuLmztjlk9tsmoezKFQAAAI4"]
[Sun Apr 19 12:40:26.270133 2026] [:error] [pid 15760:tid 15769] [client 158.158.35.144:53036] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeRcuvSdD_XHQMJ_IStJqAAAAcE"]
[Sun Apr 19 12:40:27.240777 2026] [:error] [pid 47773:tid 47817] [client 158.158.35.144:9813] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "aeRcu-iBHdnCJDuPq9Do5wAAAEE"]
[Sun Apr 19 12:40:28.121962 2026] [:error] [pid 47773:tid 47826] [client 158.158.35.144:56121] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "aeRcvOiBHdnCJDuPq9Do6wAAAEo"]
[Sun Apr 19 12:40:28.910518 2026] [:error] [pid 15760:tid 15771] [client 158.158.35.144:9313] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "aeRcvPSdD_XHQMJ_IStJqwAAAcM"]
[Sun Apr 19 12:40:29.704072 2026] [:error] [pid 47886:tid 47892] [client 158.158.35.144:9833] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "aeRcvUSe8yiyuPrD7yM4PgAAAMQ"]
[Sun Apr 19 12:40:30.322525 2026] [:error] [pid 15760:tid 15789] [client 158.158.35.144:52994] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeRcvvSdD_XHQMJ_IStJrAAAAdU"]
[Sun Apr 19 12:40:30.892028 2026] [:error] [pid 15764:tid 15830] [client 158.158.35.144:62472] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeRcvmLL_sqdSHoVp-Rr1gAAAkQ"]
[Sun Apr 19 12:40:31.462294 2026] [:error] [pid 47886:tid 47888] [client 158.158.35.144:46029] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeRcv0Se8yiyuPrD7yM4QQAAAMA"]
[Sun Apr 19 12:40:32.020176 2026] [:error] [pid 47886:tid 47900] [client 158.158.35.144:50118] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeRcwESe8yiyuPrD7yM4RAAAAMw"]
[Sun Apr 19 12:40:32.533991 2026] [:error] [pid 15693:tid 15713] [client 158.158.35.144:46043] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeRcwMNMD-ccazQlTsk0KgAAAVE"]
[Sun Apr 19 12:40:33.369732 2026] [:error] [pid 15760:tid 15772] [client 158.158.35.144:50121] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeRcwfSdD_XHQMJ_IStJrgAAAcQ"]
[Sun Apr 19 12:40:34.327648 2026] [:error] [pid 15693:tid 15708] [client 158.158.35.144:56767] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeRcwsNMD-ccazQlTsk0LQAAAUw"]
[Sun Apr 19 12:40:35.803662 2026] [:error] [pid 47772:tid 47810] [client 158.158.35.144:53107] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeRcw4c0L16cb4smAz80XQAAABU"]
[Sun Apr 19 12:40:37.493628 2026] [:error] [pid 15765:tid 15871] [client 158.158.35.144:59867] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeRcxfRqinw-W5EwQ77B9QAAApI"]
[Sun Apr 19 12:40:38.508270 2026] [:error] [pid 15763:tid 15797] [client 158.158.35.144:46032] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeRcxrMXv1Y1THOoxaCKHgAAAgE"]
[Sun Apr 19 12:40:39.078113 2026] [:error] [pid 15760:tid 15784] [client 158.158.35.144:51864] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeRcx_SdD_XHQMJ_IStJsQAAAdA"]
[Sun Apr 19 12:40:39.787464 2026] [:error] [pid 15764:tid 15834] [client 158.158.35.144:59873] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeRcx2LL_sqdSHoVp-Rr2gAAAkg"]
[Sun Apr 19 12:40:40.699243 2026] [:error] [pid 15763:tid 15809] [client 158.158.35.144:59841] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcyLMXv1Y1THOoxaCKIAAAAg0"]
[Sun Apr 19 12:40:42.733312 2026] [:error] [pid 47773:tid 47840] [client 158.158.35.144:10159] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRcyuiBHdnCJDuPq9Do7wAAAFg"]
[Sun Apr 19 12:40:45.058649 2026] [:error] [pid 47775:tid 47845] [client 158.158.35.144:53017] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRczbmztjlk9tsmoezKIgAAAII"]
[Sun Apr 19 12:40:45.942587 2026] [:error] [pid 47775:tid 47865] [client 158.158.35.144:59857] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeRczbmztjlk9tsmoezKJAAAAJY"]
[Sun Apr 19 12:40:47.034885 2026] [:error] [pid 47772:tid 47801] [client 158.158.35.144:46063] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRcz4c0L16cb4smAz80YgAAAAw"]
[Sun Apr 19 12:40:48.135199 2026] [:error] [pid 15693:tid 15708] [client 158.158.35.144:53094] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc0MNMD-ccazQlTsk0NAAAAUw"]
[Sun Apr 19 12:40:49.552842 2026] [:error] [pid 15764:tid 15839] [client 158.158.35.144:51887] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc0WLL_sqdSHoVp-Rr6gAAAk0"]
[Sun Apr 19 12:40:50.852265 2026] [:error] [pid 47886:tid 47905] [client 158.158.35.144:46035] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc0kSe8yiyuPrD7yM4SwAAANE"]
[Sun Apr 19 12:40:51.715736 2026] [:error] [pid 47772:tid 47790] [client 158.158.35.144:9587] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeRc04c0L16cb4smAz80aQAAAAE"]
[Sun Apr 19 12:40:52.913957 2026] [:error] [pid 15765:tid 15862] [client 158.158.35.144:56761] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeRc1PRqinw-W5EwQ77B-QAAAok"]
[Sun Apr 19 12:40:54.063532 2026] [:error] [pid 15765:tid 15865] [client 158.158.35.144:53088] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeRc1vRqinw-W5EwQ77CBgAAAow"]
[Sun Apr 19 12:40:55.809551 2026] [:error] [pid 15765:tid 15862] [client 158.158.35.144:53034] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeRc1_Rqinw-W5EwQ77CDQAAAok"]
[Sun Apr 19 12:40:57.071789 2026] [:error] [pid 15764:tid 15844] [client 158.158.35.144:59870] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeRc2WLL_sqdSHoVp-RsAwAAAlI"]
[Sun Apr 19 12:40:58.419443 2026] [:error] [pid 15764:tid 15836] [client 158.158.35.144:56740] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeRc2mLL_sqdSHoVp-RsBQAAAko"]
[Sun Apr 19 12:40:59.113698 2026] [:error] [pid 15760:tid 15785] [client 158.158.35.144:46042] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeRc2_SdD_XHQMJ_IStJuQAAAdE"]
[Sun Apr 19 12:40:59.813466 2026] [:error] [pid 15765:tid 15865] [client 158.158.35.144:46060] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeRc2_Rqinw-W5EwQ77CEAAAAow"]
[Sun Apr 19 12:41:00.498407 2026] [:error] [pid 15694:tid 15735] [client 158.158.35.144:56097] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc3LimB-jol1fwqArf9QAAAYk"]
[Sun Apr 19 12:41:01.885639 2026] [:error] [pid 47772:tid 47805] [client 158.158.35.144:59849] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc3Yc0L16cb4smAz80igAAABA"]
[Sun Apr 19 12:41:02.432858 2026] [:error] [pid 47772:tid 47812] [client 158.158.35.144:56064] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc3oc0L16cb4smAz80iwAAABc"]
[Sun Apr 19 12:41:03.278084 2026] [:error] [pid 15763:tid 15809] [client 158.158.35.144:53007] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeRc37MXv1Y1THOoxaCKKAAAAg0"]
[Sun Apr 19 12:41:03.917064 2026] [:error] [pid 15760:tid 15775] [client 158.158.35.144:53065] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeRc3_SdD_XHQMJ_IStJvAAAAcc"]
[Sun Apr 19 12:41:05.261488 2026] [:error] [pid 15764:tid 15851] [client 158.158.35.144:53098] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeRc4WLL_sqdSHoVp-RsDAAAAlg"]
[Sun Apr 19 12:41:06.394876 2026] [proxy_fcgi:error] [pid 47775:tid 47849] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:07.064214 2026] [proxy_fcgi:error] [pid 47775:tid 47859] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:07.551849 2026] [proxy_fcgi:error] [pid 47775:tid 47865] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:08.115033 2026] [proxy_fcgi:error] [pid 47775:tid 47858] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:08.393588 2026] [proxy_fcgi:error] [pid 47775:tid 47867] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:08.729948 2026] [proxy_fcgi:error] [pid 47775:tid 47856] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:09.116411 2026] [proxy_fcgi:error] [pid 47775:tid 47863] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:09.670062 2026] [proxy_fcgi:error] [pid 47775:tid 47855] [client 158.158.35.144:56730] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:41:09.909552 2026] [:error] [pid 47775:tid 47857] [client 158.158.35.144:56730] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRc5bmztjlk9tsmoezKNgAAAI4"]
[Sun Apr 19 12:41:10.676305 2026] [:error] [pid 15763:tid 15815] [client 158.158.35.144:59884] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRc5rMXv1Y1THOoxaCKMwAAAhM"]
[Sun Apr 19 12:41:11.422334 2026] [:error] [pid 47772:tid 47804] [client 158.158.35.144:37062] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRc54c0L16cb4smAz80nQAAAA8"]
[Sun Apr 19 12:41:12.029158 2026] [:error] [pid 47773:tid 47836] [client 158.158.35.144:48298] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeRc6OiBHdnCJDuPq9DpCAAAAFQ"]
[Sun Apr 19 12:41:12.821846 2026] [:error] [pid 15763:tid 15810] [client 158.158.35.144:37104] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeRc6LMXv1Y1THOoxaCKOAAAAg4"]
[Sun Apr 19 12:41:13.388210 2026] [:error] [pid 15764:tid 15830] [client 158.158.35.144:43711] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeRc6WLL_sqdSHoVp-RsEAAAAkQ"]
[Sun Apr 19 12:41:14.056558 2026] [:error] [pid 15764:tid 15827] [client 158.158.35.144:59886] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeRc6mLL_sqdSHoVp-RsFQAAAkE"]
[Sun Apr 19 12:41:14.895806 2026] [:error] [pid 47773:tid 47822] [client 158.158.35.144:61839] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeRc6uiBHdnCJDuPq9DpCQAAAEY"]
[Sun Apr 19 12:41:16.072876 2026] [:error] [pid 47773:tid 47840] [client 158.158.35.144:61876] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeRc7OiBHdnCJDuPq9DpDgAAAFg"]
[Sun Apr 19 12:41:16.840702 2026] [:error] [pid 15765:tid 15873] [client 158.158.35.144:54897] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeRc7PRqinw-W5EwQ77CEgAAApQ"]
[Sun Apr 19 12:41:17.652191 2026] [:error] [pid 47772:tid 47803] [client 158.158.35.144:63030] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeRc7Yc0L16cb4smAz80pAAAAA4"]
[Sun Apr 19 12:41:19.540319 2026] [:error] [pid 47886:tid 47898] [client 158.158.35.144:62996] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "aeRc70Se8yiyuPrD7yM4WwAAAMo"]
[Sun Apr 19 12:41:20.500724 2026] [:error] [pid 15764:tid 15828] [client 158.158.35.144:45339] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRc8GLL_sqdSHoVp-RsdQAAAkI"]
[Sun Apr 19 12:41:21.371418 2026] [:error] [pid 15764:tid 15832] [client 158.158.35.144:55427] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRc8WLL_sqdSHoVp-RsfwAAAkY"]
[Sun Apr 19 12:41:22.587508 2026] [:error] [pid 15764:tid 15851] [client 158.158.35.144:9812] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRc8mLL_sqdSHoVp-RsgQAAAlg"]
[Sun Apr 19 12:41:25.326948 2026] [:error] [pid 15693:tid 15715] [client 158.158.35.144:55477] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeRc9cNMD-ccazQlTsk0PQAAAVM"]
[Sun Apr 19 12:41:28.382654 2026] [:error] [pid 15760:tid 15789] [client 158.158.35.144:44389] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeRc-PSdD_XHQMJ_IStJwAAAAdU"]
[Sun Apr 19 12:41:29.804503 2026] [:error] [pid 15693:tid 15718] [client 158.158.35.144:49502] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeRc-cNMD-ccazQlTsk0QAAAAVY"]
[Sun Apr 19 12:41:30.747676 2026] [:error] [pid 15764:tid 15830] [client 158.158.35.144:51828] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeRc-mLL_sqdSHoVp-RsiAAAAkQ"]
[Sun Apr 19 12:41:32.136946 2026] [:error] [pid 15764:tid 15847] [client 158.158.35.144:55454] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeRc_GLL_sqdSHoVp-RsjQAAAlU"]
[Sun Apr 19 12:41:33.567690 2026] [:error] [pid 47772:tid 47796] [client 158.158.35.144:45340] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRc_Yc0L16cb4smAz80sAAAAAc"]
[Sun Apr 19 12:41:35.317026 2026] [:error] [pid 47886:tid 47903] [client 158.158.35.144:49501] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRc_0Se8yiyuPrD7yM4bQAAAM8"]
[Sun Apr 19 12:41:36.372367 2026] [:error] [pid 47886:tid 47902] [client 158.158.35.144:57268] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRdAESe8yiyuPrD7yM4cAAAAM4"]
[Sun Apr 19 12:41:38.775217 2026] [:error] [pid 47773:tid 47833] [client 158.158.35.144:50787] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeRdAuiBHdnCJDuPq9DpFQAAAFE"]
[Sun Apr 19 12:41:40.165484 2026] [:error] [pid 15693:tid 15710] [client 158.158.35.144:57279] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeRdBMNMD-ccazQlTsk0QwAAAU4"]
[Sun Apr 19 12:41:42.796756 2026] [:error] [pid 15694:tid 15731] [client 158.158.35.144:56691] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeRdBrimB-jol1fwqArgLgAAAYU"]
[Sun Apr 19 12:41:45.455321 2026] [:error] [pid 15764:tid 15827] [client 158.158.35.144:63688] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeRdCWLL_sqdSHoVp-RsmwAAAkE"]
[Sun Apr 19 12:41:47.383697 2026] [:error] [pid 15764:tid 15851] [client 158.158.35.144:64308] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeRdC2LL_sqdSHoVp-RsogAAAlg"]
[Sun Apr 19 12:41:48.971060 2026] [:error] [pid 15765:tid 15862] [client 158.158.35.144:62408] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeRdDPRqinw-W5EwQ77CGwAAAok"]
[Sun Apr 19 12:41:50.467624 2026] [:error] [pid 15763:tid 15812] [client 158.158.35.144:56156] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeRdDrMXv1Y1THOoxaCKPwAAAhA"]
[Sun Apr 19 12:41:51.592857 2026] [:error] [pid 15764:tid 15833] [client 158.158.35.144:57976] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeRdD2LL_sqdSHoVp-RsqQAAAkc"]
[Sun Apr 19 12:41:52.675929 2026] [:error] [pid 47772:tid 47795] [client 158.158.35.144:63776] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeRdEIc0L16cb4smAz80vQAAAAY"]
[Sun Apr 19 12:41:53.420922 2026] [:error] [pid 15763:tid 15798] [client 158.158.35.144:35098] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeRdEbMXv1Y1THOoxaCKRgAAAgI"]
[Sun Apr 19 12:41:54.236594 2026] [:error] [pid 15763:tid 15799] [client 158.158.35.144:56168] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeRdErMXv1Y1THOoxaCKSgAAAgM"]
[Sun Apr 19 12:41:54.899365 2026] [:error] [pid 47772:tid 47805] [client 158.158.35.144:56181] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeRdEoc0L16cb4smAz80vwAAABA"]
[Sun Apr 19 12:41:55.717977 2026] [:error] [pid 47772:tid 47806] [client 158.158.35.144:64300] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeRdE4c0L16cb4smAz80wQAAABE"]
[Sun Apr 19 12:41:56.678744 2026] [:error] [pid 15694:tid 15737] [client 158.158.35.144:57963] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeRdFLimB-jol1fwqArgMQAAAYs"]
[Sun Apr 19 12:41:57.539381 2026] [:error] [pid 15763:tid 15803] [client 158.158.35.144:64284] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeRdFbMXv1Y1THOoxaCKUAAAAgc"]
[Sun Apr 19 12:41:58.368610 2026] [:error] [pid 47773:tid 47835] [client 158.158.35.144:64281] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeRdFuiBHdnCJDuPq9DppQAAAFM"]
[Sun Apr 19 12:41:59.342237 2026] [:error] [pid 47775:tid 47848] [client 158.158.35.144:57924] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeRdF7mztjlk9tsmoezKUAAAAIU"]
[Sun Apr 19 12:42:00.181415 2026] [:error] [pid 15765:tid 15867] [client 158.158.35.144:64297] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeRdGPRqinw-W5EwQ77CIgAAAo4"]
[Sun Apr 19 12:42:01.013843 2026] [:error] [pid 15760:tid 15775] [client 158.158.35.144:63796] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeRdGfSdD_XHQMJ_IStJ6wAAAcc"]
[Sun Apr 19 12:42:02.457324 2026] [:error] [pid 15760:tid 15786] [client 158.158.35.144:63803] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeRdGvSdD_XHQMJ_IStJ7gAAAdI"]
[Sun Apr 19 12:42:03.357806 2026] [:error] [pid 15764:tid 15841] [client 158.158.35.144:53745] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeRdG2LL_sqdSHoVp-RssgAAAk8"]
[Sun Apr 19 12:42:07.882617 2026] [:error] [pid 15764:tid 15829] [client 158.158.35.144:9881] [client 158.158.35.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeRdH2LL_sqdSHoVp-RsuwAAAkM"]
[Sun Apr 19 12:42:10.938603 2026] [proxy_fcgi:error] [pid 15764:tid 15830] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:11.683286 2026] [proxy_fcgi:error] [pid 15764:tid 15831] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:11.926445 2026] [proxy_fcgi:error] [pid 15764:tid 15850] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:12.169449 2026] [proxy_fcgi:error] [pid 15764:tid 15827] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:12.412531 2026] [proxy_fcgi:error] [pid 15764:tid 15839] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:12.659886 2026] [proxy_fcgi:error] [pid 15764:tid 15826] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:12.901060 2026] [proxy_fcgi:error] [pid 15764:tid 15842] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:13.143805 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:13.387765 2026] [proxy_fcgi:error] [pid 15764:tid 15829] [client 158.158.35.144:10086] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:42:13.628502 2026] [:error] [pid 15764:tid 15830] [client 158.158.35.144:10086] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeRdJWLL_sqdSHoVp-RtCAAAAkQ"]
[Sun Apr 19 12:42:15.552659 2026] [:error] [pid 15764:tid 15850] [client 158.158.35.144:53701] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeRdJ2LL_sqdSHoVp-RtDQAAAlc"]
[Sun Apr 19 12:42:17.069642 2026] [:error] [pid 15693:tid 15709] [client 158.158.35.144:9966] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeRdKcNMD-ccazQlTsk0SAAAAU0"]
[Sun Apr 19 12:42:18.177426 2026] [:error] [pid 47775:tid 47855] [client 158.158.35.144:49008] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bengi.php"] [unique_id "aeRdKrmztjlk9tsmoezKVAAAAIw"]
[Sun Apr 19 12:42:19.581844 2026] [:error] [pid 47772:tid 47803] [client 158.158.35.144:10080] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRdK4c0L16cb4smAz81AgAAAA4"]
[Sun Apr 19 12:42:20.286885 2026] [:error] [pid 15693:tid 15702] [client 158.158.35.144:45962] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRdLMNMD-ccazQlTsk0SQAAAUY"]
[Sun Apr 19 12:42:20.869592 2026] [:error] [pid 47775:tid 47846] [client 158.158.35.144:45400] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRdLLmztjlk9tsmoezKVgAAAIM"]
[Sun Apr 19 12:42:21.474915 2026] [:error] [pid 47886:tid 47910] [client 158.158.35.144:47470] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeRdLUSe8yiyuPrD7yM4fgAAANY"]
[Sun Apr 19 12:42:21.986020 2026] [:error] [pid 47886:tid 47903] [client 158.158.35.144:45393] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeRdLUSe8yiyuPrD7yM4gAAAAM8"]
[Sun Apr 19 12:42:22.766205 2026] [:error] [pid 47773:tid 47820] [client 158.158.35.144:60483] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeRdLuiBHdnCJDuPq9DpsQAAAEQ"]
[Sun Apr 19 12:42:24.540087 2026] [:error] [pid 47775:tid 47862] [client 158.158.35.144:45963] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeRdMLmztjlk9tsmoezKWAAAAJM"]
[Sun Apr 19 12:42:25.691435 2026] [:error] [pid 47772:tid 47794] [client 158.158.35.144:9735] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "aeRdMYc0L16cb4smAz81CgAAAAU"]
[Sun Apr 19 12:42:27.369880 2026] [:error] [pid 15764:tid 15830] [client 158.158.35.144:62941] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeRdM2LL_sqdSHoVp-RtPQAAAkQ"]
[Sun Apr 19 12:42:28.437926 2026] [:error] [pid 47772:tid 47813] [client 158.158.35.144:9391] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeRdNIc0L16cb4smAz81bQAAABg"]
[Sun Apr 19 12:42:28.968252 2026] [:error] [pid 15764:tid 15850] [client 158.158.35.144:9356] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeRdNGLL_sqdSHoVp-RtQwAAAlc"]
[Sun Apr 19 12:42:29.876637 2026] [:error] [pid 47773:tid 47819] [client 158.158.35.144:45421] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "aeRdNeiBHdnCJDuPq9Dp6AAAAEM"]
[Sun Apr 19 12:42:30.486730 2026] [:error] [pid 15763:tid 15799] [client 158.158.35.144:61225] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeRdNrMXv1Y1THOoxaCK9QAAAgM"]
[Sun Apr 19 12:42:31.281360 2026] [:error] [pid 15764:tid 15842] [client 158.158.35.144:9766] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeRdN2LL_sqdSHoVp-RtSgAAAlA"]
[Sun Apr 19 12:42:32.115602 2026] [:error] [pid 15764:tid 15833] [client 158.158.35.144:9791] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeRdOGLL_sqdSHoVp-RtSwAAAkc"]
[Sun Apr 19 12:42:33.217979 2026] [:error] [pid 15764:tid 15827] [client 158.158.35.144:9456] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeRdOWLL_sqdSHoVp-RtTgAAAkE"]
[Sun Apr 19 12:42:34.156516 2026] [:error] [pid 15764:tid 15848] [client 158.158.35.144:9453] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeRdOmLL_sqdSHoVp-RtVAAAAlY"]
[Sun Apr 19 12:42:35.821697 2026] [:error] [pid 15763:tid 15819] [client 158.158.35.144:62970] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeRdO7MXv1Y1THOoxaCK_gAAAhc"]
[Sun Apr 19 12:42:36.448384 2026] [:error] [pid 15694:tid 15734] [client 158.158.35.144:61240] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeRdPLimB-jol1fwqArgRAAAAYg"]
[Sun Apr 19 12:42:37.171852 2026] [:error] [pid 15764:tid 15829] [client 158.158.35.144:60536] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeRdPWLL_sqdSHoVp-RtWgAAAkM"]
[Sun Apr 19 12:42:37.790658 2026] [:error] [pid 15760:tid 15774] [client 158.158.35.144:61216] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeRdPfSdD_XHQMJ_IStKMAAAAcY"]
[Sun Apr 19 12:42:38.446026 2026] [:error] [pid 47775:tid 47857] [client 158.158.35.144:45413] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeRdPrmztjlk9tsmoezKggAAAI4"]
[Sun Apr 19 12:42:39.030517 2026] [:error] [pid 47775:tid 47861] [client 158.158.35.144:60533] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeRdP7mztjlk9tsmoezKhAAAAJI"]
[Sun Apr 19 12:42:39.958901 2026] [:error] [pid 47886:tid 47907] [client 158.158.35.144:9352] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "aeRdP0Se8yiyuPrD7yM4nQAAANM"]
[Sun Apr 19 12:42:40.975055 2026] [:error] [pid 15764:tid 15833] [client 158.158.35.144:47440] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeRdQGLL_sqdSHoVp-RtYAAAAkc"]
[Sun Apr 19 12:42:41.762888 2026] [:error] [pid 15765:tid 15859] [client 158.158.35.144:37651] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeRdQfRqinw-W5EwQ77CUAAAAoY"]
[Sun Apr 19 12:42:42.382550 2026] [:error] [pid 15764:tid 15845] [client 158.158.35.144:62926] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeRdQmLL_sqdSHoVp-RtZgAAAlM"]
[Sun Apr 19 12:42:43.238581 2026] [:error] [pid 15763:tid 15806] [client 158.158.35.144:10062] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "aeRdQ7MXv1Y1THOoxaCLBAAAAgo"]
[Sun Apr 19 12:42:43.887087 2026] [:error] [pid 47773:tid 47826] [client 158.158.35.144:10096] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeRdQ-iBHdnCJDuPq9Dp9AAAAEo"]
[Sun Apr 19 12:42:44.921243 2026] [:error] [pid 47773:tid 47824] [client 158.158.35.144:62414] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeRdROiBHdnCJDuPq9Dp-AAAAEg"]
[Sun Apr 19 12:42:45.801298 2026] [:error] [pid 47775:tid 47863] [client 158.158.35.144:59268] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeRdRbmztjlk9tsmoezKiAAAAJQ"]
[Sun Apr 19 12:42:46.498679 2026] [:error] [pid 15693:tid 15709] [client 158.158.35.144:57922] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "aeRdRsNMD-ccazQlTsk0bgAAAU0"]
[Sun Apr 19 12:42:47.431214 2026] [:error] [pid 47886:tid 47893] [client 158.158.35.144:34539] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aeRdR0Se8yiyuPrD7yM4oQAAAMU"]
[Sun Apr 19 12:42:48.189640 2026] [:error] [pid 15764:tid 15837] [client 158.158.35.144:56667] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aeRdSGLL_sqdSHoVp-RtaAAAAks"]
[Sun Apr 19 12:42:49.118897 2026] [:error] [pid 47775:tid 47846] [client 158.158.35.144:44391] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aeRdSbmztjlk9tsmoezKjAAAAIM"]
[Sun Apr 19 12:42:50.063766 2026] [:error] [pid 15763:tid 15809] [client 158.158.35.144:63722] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aeRdSrMXv1Y1THOoxaCLCAAAAg0"]
[Sun Apr 19 12:42:51.139871 2026] [:error] [pid 15764:tid 15833] [client 158.158.35.144:44364] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeRdS2LL_sqdSHoVp-RtbAAAAkc"]
[Sun Apr 19 12:42:53.549251 2026] [:error] [pid 47775:tid 47857] [client 158.158.35.144:44367] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeRdTbmztjlk9tsmoezKnAAAAI4"]
[Sun Apr 19 12:42:55.036395 2026] [:error] [pid 15765:tid 15877] [client 158.158.35.144:56702] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeRdT_Rqinw-W5EwQ77CUwAAApg"]
[Sun Apr 19 12:42:55.871620 2026] [:error] [pid 15764:tid 15848] [client 158.158.35.144:41800] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeRdT2LL_sqdSHoVp-RtfwAAAlY"]
[Sun Apr 19 12:42:58.045208 2026] [:error] [pid 15764:tid 15846] [client 158.158.35.144:54842] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeRdUmLL_sqdSHoVp-RtiwAAAlQ"]
[Sun Apr 19 12:43:02.003669 2026] [:error] [pid 47773:tid 47827] [client 158.158.35.144:56669] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeRdVuiBHdnCJDuPq9DqBgAAAEs"]
[Sun Apr 19 12:43:04.036548 2026] [:error] [pid 15693:tid 15713] [client 158.158.35.144:54833] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeRdWMNMD-ccazQlTsk0hQAAAVE"]
[Sun Apr 19 12:43:06.128044 2026] [:error] [pid 15764:tid 15840] [client 158.158.35.144:41807] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeRdWmLL_sqdSHoVp-RtmwAAAk4"]
[Sun Apr 19 12:43:07.978292 2026] [:error] [pid 47886:tid 47897] [client 158.158.35.144:63707] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "aeRdW0Se8yiyuPrD7yM4rwAAAMk"]
[Sun Apr 19 12:43:08.895444 2026] [:error] [pid 47886:tid 47904] [client 158.158.35.144:57221] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "aeRdXESe8yiyuPrD7yM4sQAAANA"]
[Sun Apr 19 12:43:10.122706 2026] [:error] [pid 47775:tid 47854] [client 158.158.35.144:59285] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "aeRdXrmztjlk9tsmoezKrQAAAIs"]
[Sun Apr 19 12:43:11.744591 2026] [:error] [pid 15765:tid 15877] [client 158.158.35.144:63696] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class19.php"] [unique_id "aeRdX_Rqinw-W5EwQ77CYAAAApg"]
[Sun Apr 19 12:43:12.964319 2026] [:error] [pid 15764:tid 15832] [client 158.158.35.144:41805] [client 158.158.35.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class20.php"] [unique_id "aeRdYGLL_sqdSHoVp-RtqAAAAkY"]
[Sun Apr 19 12:43:13.930671 2026] [proxy_fcgi:error] [pid 15694:tid 15735] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:14.485599 2026] [proxy_fcgi:error] [pid 15694:tid 15746] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:14.755158 2026] [proxy_fcgi:error] [pid 15694:tid 15726] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:14.997394 2026] [proxy_fcgi:error] [pid 15694:tid 15733] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:15.240685 2026] [proxy_fcgi:error] [pid 15694:tid 15751] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:15.485111 2026] [proxy_fcgi:error] [pid 15694:tid 15737] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:15.729053 2026] [proxy_fcgi:error] [pid 15694:tid 15724] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 12:43:15.972189 2026] [proxy_fcgi:error] [pid 15694:tid 15740] [client 158.158.35.144:63717] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 22:50:47.693995 2026] [:error] [pid 47773:tid 47828] [client 146.70.194.222:43548] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTrx-iBHdnCJDuPq9BWtAAAAEw"]
[Sun Apr 19 23:55:47.969221 2026] [:error] [pid 15760:tid 15792] [client 88.151.33.33:40968] [client 88.151.33.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aeT7A_SdD_XHQMJ_ISt_wAAAAdg"]
[Sun Apr 19 23:55:49.401339 2026] [:error] [pid 15760:tid 15771] [client 88.151.33.33:40978] [client 88.151.33.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "aeT7BfSdD_XHQMJ_ISt_zAAAAcM"]
[Sun Apr 19 23:55:49.741694 2026] [:error] [pid 15763:tid 15816] [client 88.151.33.33:40988] [client 88.151.33.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "aeT7BbMXv1Y1THOoxaAiNAAAAhQ"]
[Sun Apr 19 23:55:49.742094 2026] [:error] [pid 15760:tid 15782] [client 88.151.33.33:41002] [client 88.151.33.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aeT7BfSdD_XHQMJ_ISt_zQAAAc4"]
[Sun Apr 19 23:55:50.077184 2026] [:error] [pid 47772:tid 47793] [client 88.151.33.33:40994] [client 88.151.33.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "aeT7Boc0L16cb4smAz_seAAAAAQ"]
[Mon Apr 20 02:36:37.871654 2026] [proxy_fcgi:error] [pid 47775:tid 47855] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:38.116081 2026] [proxy_fcgi:error] [pid 47775:tid 47849] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:38.356277 2026] [proxy_fcgi:error] [pid 47775:tid 47854] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:38.601359 2026] [proxy_fcgi:error] [pid 47775:tid 47857] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:38.838564 2026] [proxy_fcgi:error] [pid 47775:tid 47863] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:39.082865 2026] [proxy_fcgi:error] [pid 47775:tid 47862] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:39.320987 2026] [proxy_fcgi:error] [pid 47775:tid 47850] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 02:36:39.558370 2026] [proxy_fcgi:error] [pid 47775:tid 47859] [client 172.213.219.48:12064] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:42.324525 2026] [proxy_fcgi:error] [pid 64440:tid 64443] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:42.588773 2026] [proxy_fcgi:error] [pid 64440:tid 64461] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:42.854793 2026] [proxy_fcgi:error] [pid 64440:tid 64453] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:43.118666 2026] [proxy_fcgi:error] [pid 64440:tid 64445] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:43.382055 2026] [proxy_fcgi:error] [pid 64440:tid 64458] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:43.646283 2026] [proxy_fcgi:error] [pid 64440:tid 64459] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:43.910031 2026] [proxy_fcgi:error] [pid 64440:tid 64463] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:12:44.176132 2026] [proxy_fcgi:error] [pid 64440:tid 64454] [client 20.100.174.202:44428] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:12.345325 2026] [proxy_fcgi:error] [pid 64333:tid 64385] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:12.595157 2026] [proxy_fcgi:error] [pid 64333:tid 64380] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:12.845953 2026] [proxy_fcgi:error] [pid 64333:tid 64398] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:13.091022 2026] [proxy_fcgi:error] [pid 64333:tid 64377] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:13.587690 2026] [proxy_fcgi:error] [pid 64333:tid 64387] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:14.255023 2026] [proxy_fcgi:error] [pid 64333:tid 64392] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:14.540967 2026] [proxy_fcgi:error] [pid 64333:tid 64379] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:14.806784 2026] [proxy_fcgi:error] [pid 64333:tid 64381] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:15.060763 2026] [proxy_fcgi:error] [pid 64333:tid 64400] [client 158.158.42.65:11987] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:02:15.744281 2026] [:error] [pid 64333:tid 64395] [client 158.158.42.65:11987] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeWJJ3Zav9wH8wxMd_vBmgAAAFM"]
[Mon Apr 20 10:02:18.352531 2026] [:error] [pid 60072:tid 60080] [client 158.158.42.65:7593] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeWJKvuj5dzu2v3Qr6HGDgAAAcY"]
[Mon Apr 20 10:02:20.950404 2026] [:error] [pid 64333:tid 64391] [client 158.158.42.65:7581] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeWJLHZav9wH8wxMd_vBnwAAAE8"]
[Mon Apr 20 10:02:42.182823 2026] [:error] [pid 64334:tid 64425] [client 158.158.42.65:12592] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeWJQsNh9IxxDqsrPyPTAgAAAJY"]
[Mon Apr 20 10:02:43.420040 2026] [:error] [pid 57636:tid 57649] [client 158.158.42.65:13536] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aeWJQ852DhTnUHRKyRFuOQAAAgs"]
[Mon Apr 20 10:02:51.719621 2026] [:error] [pid 48101:tid 48109] [client 158.158.42.65:18768] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWJS_IgenNbs2bVQGsxqwAAAYU"]
[Mon Apr 20 10:02:54.080648 2026] [:error] [pid 57636:tid 57662] [client 158.158.42.65:17007] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWJTs52DhTnUHRKyRFuSgAAAhc"]
[Mon Apr 20 10:02:56.316074 2026] [:error] [pid 64440:tid 64450] [client 158.158.42.65:13465] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWJUNkVUvTgp8p7mrMNlwAAAMc"]
[Mon Apr 20 10:03:00.807789 2026] [:error] [pid 47731:tid 47755] [client 158.158.42.65:11401] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ihodcrk.php"] [unique_id "aeWJVFOwpc-h7Nzn-iPiiQAAARY"]
[Mon Apr 20 10:03:05.675411 2026] [:error] [pid 64333:tid 64379] [client 158.158.42.65:11402] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeWJWXZav9wH8wxMd_vB3gAAAEM"]
[Mon Apr 20 10:03:13.758469 2026] [:error] [pid 57636:tid 57661] [client 158.158.42.65:11427] [client 158.158.42.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeWJYc52DhTnUHRKyRFuWgAAAhY"]
[Mon Apr 20 10:03:39.345417 2026] [proxy_fcgi:error] [pid 64333:tid 64398] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:39.590154 2026] [proxy_fcgi:error] [pid 64333:tid 64387] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:39.853125 2026] [proxy_fcgi:error] [pid 64333:tid 64397] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:40.111731 2026] [proxy_fcgi:error] [pid 64333:tid 64394] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:40.365356 2026] [proxy_fcgi:error] [pid 64333:tid 64393] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:40.626576 2026] [proxy_fcgi:error] [pid 64333:tid 64400] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:40.870806 2026] [proxy_fcgi:error] [pid 64333:tid 64386] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:41.133244 2026] [proxy_fcgi:error] [pid 64333:tid 64391] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:03:41.379023 2026] [proxy_fcgi:error] [pid 64333:tid 64390] [client 158.158.42.65:11183] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:59:21.625118 2026] [:error] [pid 11352:tid 11417] [client 34.121.253.137:65380] [client 34.121.253.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.253.137, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWWiWl10mhMSfJ7ir88HAAAAIM"]
[Mon Apr 20 10:59:21.637323 2026] [proxy_fcgi:error] [pid 11352:tid 11417] [client 34.121.253.137:65380] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 10:59:24.541982 2026] [:error] [pid 11352:tid 11436] [client 34.121.253.137:65380] [client 34.121.253.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeWWjGl10mhMSfJ7ir88KwAAAJY"]
[Mon Apr 20 10:59:24.937751 2026] [:error] [pid 11350:tid 11376] [client 34.121.253.137:63840] [client 34.121.253.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeWWjP4EoMBgOJuJnT0L9AAAABE"]
[Mon Apr 20 10:59:25.364130 2026] [:error] [pid 11351:tid 11406] [client 34.121.253.137:59045] [client 34.121.253.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeWWjQN8Z1-vktaI_tNdGQAAAFM"]
[Mon Apr 20 10:59:25.759644 2026] [:error] [pid 11350:tid 11372] [client 34.121.253.137:53004] [client 34.121.253.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeWWjf4EoMBgOJuJnT0L9QAAAA0"]
[Mon Apr 20 13:36:11.172851 2026] [:error] [pid 11352:tid 11435] [client 103.65.237.216:50210] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7S2l10mhMSfJ7ir90RQAAAJU"]
[Mon Apr 20 13:36:12.691249 2026] [:error] [pid 11441:tid 11467] [client 103.65.237.216:51318] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW7TMixByFUvmh319D30AAAANg"]
[Mon Apr 20 17:38:10.092053 2026] [:error] [pid 6928:tid 6938] [client 34.44.67.37:55295] [client 34.44.67.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.67.37, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeX0Ah3y7MHq1iB0qYp5PAAAAUg"]
[Mon Apr 20 17:38:10.102284 2026] [proxy_fcgi:error] [pid 6928:tid 6938] [client 34.44.67.37:55295] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 17:38:13.588153 2026] [:error] [pid 6928:tid 6947] [client 34.44.67.37:55295] [client 34.44.67.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeX0BR3y7MHq1iB0qYp5bAAAAVE"]
[Mon Apr 20 17:38:14.058412 2026] [:error] [pid 11350:tid 11373] [client 34.44.67.37:52074] [client 34.44.67.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeX0Bv4EoMBgOJuJnT1VoQAAAA4"]
[Mon Apr 20 17:38:14.549755 2026] [:error] [pid 11351:tid 11390] [client 34.44.67.37:59108] [client 34.44.67.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeX0BgN8Z1-vktaI_tO07wAAAEM"]
[Tue Apr 21 04:00:22.181751 2026] [:error] [pid 35322:tid 35358] [client 185.194.178.38:46359] [client 185.194.178.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.38, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1qPoAfV40BTfVKxofgAAAIE"]
[Tue Apr 21 04:00:22.216347 2026] [proxy_fcgi:error] [pid 35322:tid 35358] [client 185.194.178.38:46359] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:00:14.719221 2026] [:error] [pid 54080:tid 54086] [client 104.236.56.38:51519] [client 104.236.56.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.236.56.38, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aedYvozEbQHHxtmWbaaauQAAAsQ"]
[Tue Apr 21 19:00:14.729286 2026] [proxy_fcgi:error] [pid 54080:tid 54086] [client 104.236.56.38:51519] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:20:57.751302 2026] [:error] [pid 35321:tid 35387] [client 34.60.151.65:62281] [client 34.60.151.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.151.65, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aeddmTeHLhVUuu8cVXxSfwAAAEM"]
[Tue Apr 21 19:20:57.761178 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 34.60.151.65:62281] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:21:00.209218 2026] [:error] [pid 35321:tid 35402] [client 34.60.151.65:62281] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeddnDeHLhVUuu8cVXxStAAAAFI"]
[Tue Apr 21 19:21:00.828046 2026] [:error] [pid 35320:tid 35345] [client 34.60.151.65:51648] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeddnIJW6fdXWO6agMGRAgAAAA8"]
[Tue Apr 21 19:21:01.408306 2026] [:error] [pid 35320:tid 35336] [client 34.60.151.65:53936] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeddnYJW6fdXWO6agMGRBwAAAAY"]
[Tue Apr 21 19:21:02.132908 2026] [:error] [pid 35321:tid 35398] [client 34.60.151.65:56589] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeddnjeHLhVUuu8cVXxSzgAAAE4"]
[Tue Apr 21 19:21:02.887167 2026] [:error] [pid 53731:tid 53757] [client 34.60.151.65:51260] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeddnl2I9THUR-bRVGw-ywAAAhU"]
[Tue Apr 21 19:21:03.720621 2026] [:error] [pid 35321:tid 35390] [client 34.60.151.65:53047] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeddnzeHLhVUuu8cVXxS0gAAAEY"]
[Tue Apr 21 19:21:04.214280 2026] [:error] [pid 35322:tid 35363] [client 34.60.151.65:59464] [client 34.60.151.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeddoKPoAfV40BTfVKzV1gAAAIY"]
[Wed Apr 22 02:19:55.667531 2026] [:error] [pid 35320:tid 35340] [client 142.44.137.218:52224] [client 142.44.137.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.44.137.218, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aee_y4JW6fdXWO6agMGWDQAAAAo"]
[Wed Apr 22 02:19:55.678367 2026] [proxy_fcgi:error] [pid 35320:tid 35340] [client 142.44.137.218:52224] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 02:19:55.713409 2026] [:error] [pid 35320:tid 35332] [client 142.44.137.218:52240] [client 142.44.137.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.44.137.218, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aee_y4JW6fdXWO6agMGWDgAAAAI"]
[Wed Apr 22 02:19:55.718940 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 142.44.137.218:52240] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 02:33:51.467984 2026] [:error] [pid 53978:tid 53989] [client 160.30.179.124:38864] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aefDD51ivsR4hcOSQbaCNQAAAok"]
[Wed Apr 22 09:05:43.401182 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:43.663057 2026] [proxy_fcgi:error] [pid 23041:tid 23059] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:43.923292 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:44.183051 2026] [proxy_fcgi:error] [pid 23041:tid 23067] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:44.457977 2026] [proxy_fcgi:error] [pid 23041:tid 23064] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:44.728044 2026] [proxy_fcgi:error] [pid 23041:tid 23058] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:45.273103 2026] [proxy_fcgi:error] [pid 23041:tid 23048] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:45.540030 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:46.008581 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 20.215.187.59:20924] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:05:46.269188 2026] [:error] [pid 23041:tid 23056] [client 20.215.187.59:20924] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aege6kTXx_lUa7xwAb4mEAAAAQw"]
[Wed Apr 22 09:05:47.442301 2026] [:error] [pid 31949:tid 31956] [client 20.215.187.59:17325] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aege632WtGZh5JfbMUdQ1gAAAwQ"]
[Wed Apr 22 09:05:48.080320 2026] [:error] [pid 31755:tid 31767] [client 20.215.187.59:34036] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aege7Az2mYMkg3X8q1urCQAAAgQ"]
[Wed Apr 22 09:05:48.780712 2026] [:error] [pid 21682:tid 21732] [client 20.215.187.59:24021] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aege7JlXWQZUlmPHS3ouQwAAAEk"]
[Wed Apr 22 09:05:49.574590 2026] [:error] [pid 31755:tid 31783] [client 20.215.187.59:24035] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aege7Qz2mYMkg3X8q1urGAAAAhQ"]
[Wed Apr 22 09:05:50.454777 2026] [:error] [pid 21682:tid 21733] [client 20.215.187.59:40856] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aege7plXWQZUlmPHS3ouRwAAAEo"]
[Wed Apr 22 09:05:51.314400 2026] [:error] [pid 21682:tid 21731] [client 20.215.187.59:17326] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aege75lXWQZUlmPHS3ouTQAAAEg"]
[Wed Apr 22 09:05:52.048102 2026] [:error] [pid 31755:tid 31766] [client 20.215.187.59:52283] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aege8Az2mYMkg3X8q1urIgAAAgM"]
[Wed Apr 22 09:05:52.783465 2026] [:error] [pid 21682:tid 21744] [client 20.215.187.59:52229] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aege8JlXWQZUlmPHS3ouVgAAAFU"]
[Wed Apr 22 09:05:53.397663 2026] [:error] [pid 31844:tid 31861] [client 20.215.187.59:20873] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aege8WtAU9CprTB4b3I7SgAAAo8"]
[Wed Apr 22 09:05:54.007633 2026] [:error] [pid 31756:tid 31797] [client 20.215.187.59:3804] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aege8t_WbkXbHaEfhd32nwAAAkU"]
[Wed Apr 22 09:05:54.732555 2026] [:error] [pid 31949:tid 31971] [client 20.215.187.59:31797] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aege8n2WtGZh5JfbMUdQ2QAAAxM"]
[Wed Apr 22 09:05:55.910549 2026] [:error] [pid 31756:tid 31792] [client 20.215.187.59:20272] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aege89_WbkXbHaEfhd32oQAAAkI"]
[Wed Apr 22 09:05:56.645041 2026] [:error] [pid 23041:tid 23063] [client 20.215.187.59:52284] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aege9ETXx_lUa7xwAb4mEQAAARM"]
[Wed Apr 22 09:05:57.360935 2026] [:error] [pid 32053:tid 32078] [client 20.215.187.59:24018] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aege9QzPjXx_ocfbYhtDTAAAA1c"]
[Wed Apr 22 09:05:58.113206 2026] [:error] [pid 31755:tid 31785] [client 20.215.187.59:40844] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aege9gz2mYMkg3X8q1urNwAAAhY"]
[Wed Apr 22 09:05:59.137071 2026] [:error] [pid 31949:tid 31959] [client 20.215.187.59:40855] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aege932WtGZh5JfbMUdQ2wAAAwc"]
[Wed Apr 22 09:05:59.784560 2026] [:error] [pid 21683:tid 21755] [client 20.215.187.59:52280] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aege91ZBWT-0diZyYyavPwAAAIU"]
[Wed Apr 22 09:06:00.354232 2026] [:error] [pid 31756:tid 31805] [client 20.215.187.59:24323] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aege-N_WbkXbHaEfhd32pgAAAk0"]
[Wed Apr 22 09:06:01.038815 2026] [:error] [pid 31756:tid 31790] [client 20.215.187.59:20925] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aege-d_WbkXbHaEfhd32qAAAAkA"]
[Wed Apr 22 09:06:01.737323 2026] [:error] [pid 31949:tid 31970] [client 20.215.187.59:52254] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aege-X2WtGZh5JfbMUdQ3AAAAxI"]
[Wed Apr 22 09:06:02.334272 2026] [:error] [pid 23041:tid 23056] [client 20.215.187.59:20904] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aege-kTXx_lUa7xwAb4mGAAAAQw"]
[Wed Apr 22 09:06:03.151625 2026] [:error] [pid 23041:tid 23047] [client 20.215.187.59:17304] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aege-0TXx_lUa7xwAb4mGQAAAQM"]
[Wed Apr 22 09:06:03.915208 2026] [:error] [pid 23041:tid 23059] [client 20.215.187.59:30062] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aege-0TXx_lUa7xwAb4mHQAAAQ8"]
[Wed Apr 22 09:06:04.588272 2026] [:error] [pid 23041:tid 23061] [client 20.215.187.59:40846] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aege_ETXx_lUa7xwAb4mIQAAARE"]
[Wed Apr 22 09:06:05.833608 2026] [:error] [pid 31949:tid 31965] [client 20.215.187.59:24675] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aege_X2WtGZh5JfbMUdQ3QAAAw0"]
[Wed Apr 22 09:06:06.742426 2026] [:error] [pid 31755:tid 31768] [client 20.215.187.59:40835] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aege_gz2mYMkg3X8q1urQgAAAgU"]
[Wed Apr 22 09:06:07.919775 2026] [:error] [pid 31949:tid 31968] [client 20.215.187.59:31789] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aege_32WtGZh5JfbMUdQ3wAAAxA"]
[Wed Apr 22 09:06:09.288797 2026] [:error] [pid 31755:tid 31784] [client 20.215.187.59:26279] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aegfAQz2mYMkg3X8q1urRQAAAhU"]
[Wed Apr 22 09:06:11.142029 2026] [:error] [pid 21683:tid 21770] [client 20.215.187.59:21892] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aegfA1ZBWT-0diZyYyavRgAAAJQ"]
[Wed Apr 22 09:06:11.937856 2026] [:error] [pid 23041:tid 23061] [client 20.215.187.59:24679] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aegfA0TXx_lUa7xwAb4mNQAAARE"]
[Wed Apr 22 09:06:12.600561 2026] [:error] [pid 21683:tid 21757] [client 20.215.187.59:3188] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aegfBFZBWT-0diZyYyavSgAAAIc"]
[Wed Apr 22 09:06:13.224983 2026] [:error] [pid 31756:tid 31807] [client 20.215.187.59:20891] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aegfBd_WbkXbHaEfhd32rwAAAk8"]
[Wed Apr 22 09:06:13.892206 2026] [:error] [pid 21683:tid 21759] [client 20.215.187.59:30124] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aegfBVZBWT-0diZyYyavTQAAAIk"]
[Wed Apr 22 09:06:15.091596 2026] [:error] [pid 21683:tid 21756] [client 20.215.187.59:26267] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aegfB1ZBWT-0diZyYyavTwAAAIY"]
[Wed Apr 22 09:06:15.856061 2026] [:error] [pid 32095:tid 32114] [client 20.215.187.59:30142] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aegfB9fu5Cv628YPe5-E1gAAA5A"]
[Wed Apr 22 09:06:16.608327 2026] [:error] [pid 23041:tid 23059] [client 20.215.187.59:17288] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aegfCETXx_lUa7xwAb4mOwAAAQ8"]
[Wed Apr 22 09:06:17.635643 2026] [:error] [pid 31755:tid 31778] [client 20.215.187.59:31777] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aegfCQz2mYMkg3X8q1urWQAAAg8"]
[Wed Apr 22 09:06:18.251824 2026] [:error] [pid 31755:tid 31772] [client 20.215.187.59:24651] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aegfCgz2mYMkg3X8q1urWwAAAgk"]
[Wed Apr 22 09:06:19.172539 2026] [:error] [pid 21682:tid 21723] [client 20.215.187.59:26249] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aegfC5lXWQZUlmPHS3oufgAAAEA"]
[Wed Apr 22 09:06:19.880908 2026] [:error] [pid 31755:tid 31778] [client 20.215.187.59:20896] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aegfCwz2mYMkg3X8q1urZgAAAg8"]
[Wed Apr 22 09:06:20.722952 2026] [:error] [pid 23041:tid 23051] [client 20.215.187.59:31795] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aegfDETXx_lUa7xwAb4mPwAAAQc"]
[Wed Apr 22 09:06:21.530928 2026] [:error] [pid 32053:tid 32074] [client 20.215.187.59:26251] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aegfDQzPjXx_ocfbYhtDYQAAA1M"]
[Wed Apr 22 09:06:22.574934 2026] [:error] [pid 23041:tid 23065] [client 20.215.187.59:24016] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aegfDkTXx_lUa7xwAb4mQQAAARU"]
[Wed Apr 22 09:06:23.553755 2026] [:error] [pid 23041:tid 23062] [client 20.215.187.59:26243] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aegfD0TXx_lUa7xwAb4mSQAAARI"]
[Wed Apr 22 09:06:25.205670 2026] [:error] [pid 31756:tid 31809] [client 20.215.187.59:30091] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aegfEd_WbkXbHaEfhd32uAAAAlE"]
[Wed Apr 22 09:06:26.451158 2026] [:error] [pid 31706:tid 31713] [client 20.215.187.59:24701] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aegfErGSe9Rnd4Q_z1iobgAAAcQ"]
[Wed Apr 22 09:06:27.436579 2026] [:error] [pid 21683:tid 21773] [client 20.215.187.59:3372] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aegfE1ZBWT-0diZyYyavVAAAAJc"]
[Wed Apr 22 09:06:28.181931 2026] [:error] [pid 31755:tid 31778] [client 20.215.187.59:22541] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aegfFAz2mYMkg3X8q1ureQAAAg8"]
[Wed Apr 22 09:06:29.851722 2026] [:error] [pid 31755:tid 31776] [client 20.215.187.59:30112] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aegfFQz2mYMkg3X8q1urfgAAAg0"]
[Wed Apr 22 09:06:30.597401 2026] [:error] [pid 32053:tid 32070] [client 20.215.187.59:3180] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aegfFgzPjXx_ocfbYhtDZwAAA08"]
[Wed Apr 22 09:06:31.272723 2026] [:error] [pid 21683:tid 21767] [client 20.215.187.59:22534] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aegfF1ZBWT-0diZyYyavWQAAAJE"]
[Wed Apr 22 09:06:32.044496 2026] [:error] [pid 31755:tid 31765] [client 20.215.187.59:21839] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aegfGAz2mYMkg3X8q1urhwAAAgI"]
[Wed Apr 22 09:06:33.144050 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:28745] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aegfGQz2mYMkg3X8q1urjwAAAgs"]
[Wed Apr 22 09:06:34.947558 2026] [:error] [pid 31755:tid 31779] [client 20.215.187.59:24265] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aegfGgz2mYMkg3X8q1urmgAAAhA"]
[Wed Apr 22 09:06:35.535102 2026] [:error] [pid 32095:tid 32097] [client 20.215.187.59:28736] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aegfG9fu5Cv628YPe5-E2QAAA4A"]
[Wed Apr 22 09:06:36.089683 2026] [:error] [pid 31949:tid 31955] [client 20.215.187.59:28796] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aegfHH2WtGZh5JfbMUdRBwAAAwM"]
[Wed Apr 22 09:06:36.724006 2026] [:error] [pid 31755:tid 31782] [client 20.215.187.59:21855] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aegfHAz2mYMkg3X8q1urpQAAAhM"]
[Wed Apr 22 09:06:37.326396 2026] [:error] [pid 31756:tid 31815] [client 20.215.187.59:17325] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aegfHd_WbkXbHaEfhd32wQAAAlc"]
[Wed Apr 22 09:06:37.877576 2026] [:error] [pid 31756:tid 31813] [client 20.215.187.59:25492] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aegfHd_WbkXbHaEfhd32wwAAAlU"]
[Wed Apr 22 09:06:38.642103 2026] [:error] [pid 31706:tid 31720] [client 20.215.187.59:24096] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aegfHrGSe9Rnd4Q_z1iocAAAAcs"]
[Wed Apr 22 09:06:39.313644 2026] [:error] [pid 32053:tid 32065] [client 20.215.187.59:26603] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aegfHwzPjXx_ocfbYhtDaQAAA0o"]
[Wed Apr 22 09:06:39.832745 2026] [:error] [pid 21682:tid 21724] [client 20.215.187.59:22537] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aegfH5lXWQZUlmPHS3ouuAAAAEE"]
[Wed Apr 22 09:06:40.752416 2026] [:error] [pid 23041:tid 23057] [client 20.215.187.59:26572] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aegfIETXx_lUa7xwAb4mXQAAAQ0"]
[Wed Apr 22 09:06:41.664249 2026] [:error] [pid 31706:tid 31716] [client 20.215.187.59:52668] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aegfIbGSe9Rnd4Q_z1iocQAAAcc"]
[Wed Apr 22 09:06:42.236751 2026] [:error] [pid 23041:tid 23045] [client 20.215.187.59:25443] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aegfIkTXx_lUa7xwAb4mZAAAAQE"]
[Wed Apr 22 09:06:42.897856 2026] [:error] [pid 21682:tid 21728] [client 20.215.187.59:36748] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aegfIplXWQZUlmPHS3ouvQAAAEU"]
[Wed Apr 22 09:06:43.639516 2026] [:error] [pid 23041:tid 23063] [client 20.215.187.59:24677] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aegfI0TXx_lUa7xwAb4mZQAAARM"]
[Wed Apr 22 09:06:44.325873 2026] [:error] [pid 21683:tid 21765] [client 20.215.187.59:27385] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aegfJFZBWT-0diZyYyavYgAAAI8"]
[Wed Apr 22 09:06:45.092088 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:26609] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aegfJQz2mYMkg3X8q1urwgAAAhg"]
[Wed Apr 22 09:06:45.736119 2026] [:error] [pid 31755:tid 31786] [client 20.215.187.59:25528] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aegfJQz2mYMkg3X8q1urxwAAAhc"]
[Wed Apr 22 09:06:46.418246 2026] [proxy_fcgi:error] [pid 31755:tid 31766] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:46.720662 2026] [proxy_fcgi:error] [pid 31755:tid 31763] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:46.993964 2026] [proxy_fcgi:error] [pid 31755:tid 31769] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:47.606730 2026] [proxy_fcgi:error] [pid 31755:tid 31786] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:47.868251 2026] [proxy_fcgi:error] [pid 31755:tid 31777] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:48.142182 2026] [proxy_fcgi:error] [pid 31755:tid 31785] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:48.404016 2026] [proxy_fcgi:error] [pid 31755:tid 31766] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:48.665977 2026] [proxy_fcgi:error] [pid 31755:tid 31770] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:48.930163 2026] [proxy_fcgi:error] [pid 31755:tid 31773] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:49.191250 2026] [proxy_fcgi:error] [pid 31755:tid 31786] [client 20.215.187.59:22587] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:06:50.971738 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:22587] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aegfKgz2mYMkg3X8q1ur6wAAAhg"]
[Wed Apr 22 09:06:52.013175 2026] [:error] [pid 31755:tid 31780] [client 20.215.187.59:27388] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aegfLAz2mYMkg3X8q1ur8gAAAhE"]
[Wed Apr 22 09:06:52.844117 2026] [:error] [pid 31755:tid 31765] [client 20.215.187.59:25500] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aegfLAz2mYMkg3X8q1ur9wAAAgI"]
[Wed Apr 22 09:06:53.631174 2026] [:error] [pid 31756:tid 31790] [client 20.215.187.59:26564] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file61.php"] [unique_id "aegfLd_WbkXbHaEfhd32ygAAAkA"]
[Wed Apr 22 09:06:54.686547 2026] [:error] [pid 32053:tid 32059] [client 20.215.187.59:51083] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aegfLgzPjXx_ocfbYhtDbAAAA0Q"]
[Wed Apr 22 09:06:56.257202 2026] [:error] [pid 21682:tid 21734] [client 20.215.187.59:28748] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aegfMJlXWQZUlmPHS3ouzgAAAEs"]
[Wed Apr 22 09:06:58.334620 2026] [:error] [pid 23041:tid 23067] [client 20.215.187.59:36773] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aegfMkTXx_lUa7xwAb4mgAAAARc"]
[Wed Apr 22 09:06:59.022563 2026] [:error] [pid 31949:tid 31953] [client 20.215.187.59:15329] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aegfM32WtGZh5JfbMUdRDAAAAwE"]
[Wed Apr 22 09:07:01.318748 2026] [:error] [pid 31755:tid 31767] [client 20.215.187.59:52610] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aegfNQz2mYMkg3X8q1usDgAAAgQ"]
[Wed Apr 22 09:07:02.930685 2026] [:error] [pid 31755:tid 31786] [client 20.215.187.59:50696] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aegfNgz2mYMkg3X8q1usEgAAAhc"]
[Wed Apr 22 09:07:04.383060 2026] [:error] [pid 21682:tid 21737] [client 20.215.187.59:52663] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aegfOJlXWQZUlmPHS3ou2QAAAE4"]
[Wed Apr 22 09:07:05.525853 2026] [:error] [pid 21682:tid 21732] [client 20.215.187.59:27744] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aegfOZlXWQZUlmPHS3ou2gAAAEk"]
[Wed Apr 22 09:07:07.644554 2026] [:error] [pid 23041:tid 23046] [client 20.215.187.59:45368] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aegfO0TXx_lUa7xwAb4mowAAAQI"]
[Wed Apr 22 09:07:09.299137 2026] [:error] [pid 31756:tid 31809] [client 20.215.187.59:47084] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aegfPd_WbkXbHaEfhd321AAAAlE"]
[Wed Apr 22 09:07:10.305028 2026] [:error] [pid 31755:tid 31779] [client 20.215.187.59:27754] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aegfPgz2mYMkg3X8q1usIwAAAhA"]
[Wed Apr 22 09:07:10.994204 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:41966] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aegfPkTXx_lUa7xwAb4mpgAAAQY"]
[Wed Apr 22 09:07:11.919879 2026] [:error] [pid 23041:tid 23061] [client 20.215.187.59:15348] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aegfP0TXx_lUa7xwAb4mqgAAARE"]
[Wed Apr 22 09:07:13.152891 2026] [:error] [pid 31755:tid 31780] [client 20.215.187.59:50705] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aegfQQz2mYMkg3X8q1usLgAAAhE"]
[Wed Apr 22 09:07:13.896335 2026] [:error] [pid 31755:tid 31770] [client 20.215.187.59:50758] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aegfQQz2mYMkg3X8q1usMQAAAgc"]
[Wed Apr 22 09:07:14.491321 2026] [:error] [pid 21683:tid 21752] [client 20.215.187.59:25669] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aegfQlZBWT-0diZyYyavfAAAAII"]
[Wed Apr 22 09:07:15.052743 2026] [:error] [pid 23041:tid 23063] [client 20.215.187.59:25664] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aegfQ0TXx_lUa7xwAb4mrgAAARM"]
[Wed Apr 22 09:07:15.607634 2026] [:error] [pid 32095:tid 32116] [client 20.215.187.59:50809] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aegfQ9fu5Cv628YPe5-E4AAAA5I"]
[Wed Apr 22 09:07:16.208049 2026] [:error] [pid 31756:tid 31805] [client 20.215.187.59:45320] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aegfRN_WbkXbHaEfhd321QAAAk0"]
[Wed Apr 22 09:07:17.018052 2026] [:error] [pid 31755:tid 31766] [client 20.215.187.59:15326] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aegfRQz2mYMkg3X8q1usPQAAAgM"]
[Wed Apr 22 09:07:17.625765 2026] [:error] [pid 21682:tid 21729] [client 20.215.187.59:45350] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aegfRZlXWQZUlmPHS3ou6gAAAEY"]
[Wed Apr 22 09:07:18.310732 2026] [:error] [pid 31706:tid 31719] [client 20.215.187.59:27770] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aegfRrGSe9Rnd4Q_z1ioeAAAAco"]
[Wed Apr 22 09:07:19.425502 2026] [:error] [pid 31756:tid 31815] [client 20.215.187.59:50699] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aegfR9_WbkXbHaEfhd321wAAAlc"]
[Wed Apr 22 09:07:20.193734 2026] [:error] [pid 32095:tid 32106] [client 20.215.187.59:20608] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aegfSNfu5Cv628YPe5-E4QAAA4g"]
[Wed Apr 22 09:07:20.827379 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:41940] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aegfSN_WbkXbHaEfhd322wAAAkY"]
[Wed Apr 22 09:07:21.676958 2026] [:error] [pid 31844:tid 31851] [client 20.215.187.59:19949] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aegfSWtAU9CprTB4b3I7UwAAAoU"]
[Wed Apr 22 09:07:22.379905 2026] [:error] [pid 31756:tid 31816] [client 20.215.187.59:25683] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aegfSt_WbkXbHaEfhd323QAAAlg"]
[Wed Apr 22 09:07:23.268737 2026] [:error] [pid 21682:tid 21728] [client 20.215.187.59:41948] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aegfS5lXWQZUlmPHS3ou8QAAAEU"]
[Wed Apr 22 09:07:23.987219 2026] [:error] [pid 21682:tid 21745] [client 20.215.187.59:47091] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aegfS5lXWQZUlmPHS3ou9gAAAFY"]
[Wed Apr 22 09:07:24.769985 2026] [:error] [pid 31756:tid 31810] [client 20.215.187.59:19964] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aegfTN_WbkXbHaEfhd325QAAAlI"]
[Wed Apr 22 09:07:25.935307 2026] [:error] [pid 31756:tid 31802] [client 20.215.187.59:20671] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aegfTd_WbkXbHaEfhd326gAAAko"]
[Wed Apr 22 09:07:27.010861 2026] [:error] [pid 31755:tid 31784] [client 20.215.187.59:27778] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aegfTwz2mYMkg3X8q1usUAAAAhU"]
[Wed Apr 22 09:07:27.709466 2026] [:error] [pid 31755:tid 31764] [client 20.215.187.59:20654] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aegfTwz2mYMkg3X8q1usVAAAAgE"]
[Wed Apr 22 09:07:28.733057 2026] [:error] [pid 31755:tid 31776] [client 20.215.187.59:47048] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aegfUAz2mYMkg3X8q1usWQAAAg0"]
[Wed Apr 22 09:07:30.166326 2026] [:error] [pid 31755:tid 31769] [client 20.215.187.59:50708] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aegfUgz2mYMkg3X8q1usXgAAAgY"]
[Wed Apr 22 09:07:31.249084 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:50763] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aegfU0TXx_lUa7xwAb4mvAAAAQY"]
[Wed Apr 22 09:07:32.073797 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:25698] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aegfVETXx_lUa7xwAb4mwAAAAQU"]
[Wed Apr 22 09:07:32.686118 2026] [:error] [pid 21682:tid 21741] [client 20.215.187.59:31797] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aegfVJlXWQZUlmPHS3ovDAAAAFI"]
[Wed Apr 22 09:07:33.536962 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:26839] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aegfVQz2mYMkg3X8q1usZQAAAhg"]
[Wed Apr 22 09:07:34.465879 2026] [:error] [pid 31706:tid 31725] [client 20.215.187.59:27805] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aegfVrGSe9Rnd4Q_z1ioegAAAdA"]
[Wed Apr 22 09:07:35.344963 2026] [:error] [pid 21682:tid 21723] [client 20.215.187.59:27803] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aegfV5lXWQZUlmPHS3ovFAAAAEA"]
[Wed Apr 22 09:07:36.054308 2026] [:error] [pid 21682:tid 21729] [client 20.215.187.59:27806] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aegfWJlXWQZUlmPHS3ovGQAAAEY"]
[Wed Apr 22 09:07:37.771797 2026] [:error] [pid 31755:tid 31780] [client 20.215.187.59:26609] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aegfWQz2mYMkg3X8q1uscAAAAhE"]
[Wed Apr 22 09:07:39.440135 2026] [:error] [pid 31756:tid 31807] [client 20.215.187.59:27101] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aegfW9_WbkXbHaEfhd328QAAAk8"]
[Wed Apr 22 09:07:41.336657 2026] [:error] [pid 23041:tid 23048] [client 20.215.187.59:27096] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegfXUTXx_lUa7xwAb4myQAAAQQ"]
[Wed Apr 22 09:07:43.486075 2026] [:error] [pid 23041:tid 23044] [client 20.215.187.59:24500] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegfX0TXx_lUa7xwAb4mywAAAQA"]
[Wed Apr 22 09:07:46.199683 2026] [:error] [pid 23041:tid 23052] [client 20.215.187.59:27075] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegfYkTXx_lUa7xwAb4mzwAAAQg"]
[Wed Apr 22 09:07:48.865484 2026] [:error] [pid 23041:tid 23048] [client 20.215.187.59:50333] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegfZETXx_lUa7xwAb4m0wAAAQQ"]
[Wed Apr 22 09:07:50.037886 2026] [proxy_fcgi:error] [pid 32095:tid 32111] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:50.299078 2026] [proxy_fcgi:error] [pid 32095:tid 32108] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:50.587116 2026] [proxy_fcgi:error] [pid 32095:tid 32121] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:50.848288 2026] [proxy_fcgi:error] [pid 32095:tid 32102] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:51.127880 2026] [proxy_fcgi:error] [pid 32095:tid 32112] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:51.389175 2026] [proxy_fcgi:error] [pid 32095:tid 32104] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:51.654874 2026] [proxy_fcgi:error] [pid 32095:tid 32114] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:51.915755 2026] [proxy_fcgi:error] [pid 32095:tid 32101] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:52.185660 2026] [proxy_fcgi:error] [pid 32095:tid 32120] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:52.450999 2026] [proxy_fcgi:error] [pid 32095:tid 32109] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:52.720095 2026] [proxy_fcgi:error] [pid 32095:tid 32116] [client 20.215.187.59:20803] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:07:52.977766 2026] [:error] [pid 32095:tid 32106] [client 20.215.187.59:20803] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aegfaNfu5Cv628YPe5-E8wAAA4g"]
[Wed Apr 22 09:07:53.835403 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:24762] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aegfaUTXx_lUa7xwAb4m1gAAAQU"]
[Wed Apr 22 09:07:55.207010 2026] [:error] [pid 21683:tid 21762] [client 20.215.187.59:42917] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aegfa1ZBWT-0diZyYyavlAAAAIw"]
[Wed Apr 22 09:07:56.817257 2026] [:error] [pid 31756:tid 31793] [client 20.215.187.59:20819] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aegfbN_WbkXbHaEfhd33EAAAAkM"]
[Wed Apr 22 09:07:59.008833 2026] [:error] [pid 32053:tid 32075] [client 20.215.187.59:26221] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aegfbwzPjXx_ocfbYhtDfAAAA1Q"]
[Wed Apr 22 09:07:59.715461 2026] [:error] [pid 23041:tid 23063] [client 20.215.187.59:24735] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aegfb0TXx_lUa7xwAb4m2QAAARM"]
[Wed Apr 22 09:08:00.939319 2026] [:error] [pid 21682:tid 21723] [client 20.215.187.59:26678] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aegfcJlXWQZUlmPHS3ovKgAAAEA"]
[Wed Apr 22 09:08:02.441644 2026] [:error] [pid 32095:tid 32112] [client 20.215.187.59:24757] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aegfctfu5Cv628YPe5-E_gAAA44"]
[Wed Apr 22 09:08:05.089430 2026] [:error] [pid 31756:tid 31812] [client 20.215.187.59:3940] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aegfdd_WbkXbHaEfhd33HgAAAlQ"]
[Wed Apr 22 09:08:05.987422 2026] [:error] [pid 21682:tid 21737] [client 20.215.187.59:55758] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aegfdZlXWQZUlmPHS3ovLAAAAE4"]
[Wed Apr 22 09:08:07.024407 2026] [:error] [pid 23041:tid 23062] [client 20.215.187.59:47548] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aegfd0TXx_lUa7xwAb4m4QAAARI"]
[Wed Apr 22 09:08:07.968185 2026] [:error] [pid 23041:tid 23061] [client 20.215.187.59:26656] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aegfd0TXx_lUa7xwAb4m4wAAARE"]
[Wed Apr 22 09:08:09.185430 2026] [:error] [pid 21682:tid 21733] [client 20.215.187.59:24714] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aegfeZlXWQZUlmPHS3ovLgAAAEo"]
[Wed Apr 22 09:08:10.355740 2026] [:error] [pid 21682:tid 21745] [client 20.215.187.59:47537] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aegfeplXWQZUlmPHS3ovMwAAAFY"]
[Wed Apr 22 09:08:11.443348 2026] [:error] [pid 31706:tid 31721] [client 20.215.187.59:51897] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aegfe7GSe9Rnd4Q_z1iofAAAAcw"]
[Wed Apr 22 09:08:12.278429 2026] [:error] [pid 21682:tid 21747] [client 20.215.187.59:51844] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aegffJlXWQZUlmPHS3ovNwAAAFg"]
[Wed Apr 22 09:08:12.942783 2026] [:error] [pid 23041:tid 23056] [client 20.215.187.59:26631] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aegffETXx_lUa7xwAb4m6gAAAQw"]
[Wed Apr 22 09:08:14.773553 2026] [:error] [pid 23041:tid 23044] [client 20.215.187.59:47504] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aegffkTXx_lUa7xwAb4m7gAAAQA"]
[Wed Apr 22 09:08:16.340682 2026] [:error] [pid 23041:tid 23045] [client 20.215.187.59:22957] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aegfgETXx_lUa7xwAb4m9AAAAQE"]
[Wed Apr 22 09:08:17.378816 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:22943] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "aegfgUTXx_lUa7xwAb4m-QAAAQU"]
[Wed Apr 22 09:08:19.828371 2026] [:error] [pid 23041:tid 23058] [client 20.215.187.59:21322] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aegfg0TXx_lUa7xwAb4m_gAAAQ4"]
[Wed Apr 22 09:08:21.460539 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:20183] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aegfhUTXx_lUa7xwAb4nAgAAAQY"]
[Wed Apr 22 09:08:23.071759 2026] [:error] [pid 32053:tid 32078] [client 20.215.187.59:21332] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aegfhwzPjXx_ocfbYhtDhwAAA1c"]
[Wed Apr 22 09:08:25.182159 2026] [:error] [pid 21682:tid 21739] [client 20.215.187.59:46525] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "aegfiZlXWQZUlmPHS3ovOwAAAFA"]
[Wed Apr 22 09:08:27.381948 2026] [:error] [pid 21682:tid 21736] [client 20.215.187.59:56366] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aegfi5lXWQZUlmPHS3ovRAAAAE0"]
[Wed Apr 22 09:08:33.888203 2026] [:error] [pid 21682:tid 21731] [client 20.215.187.59:44812] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aegfkZlXWQZUlmPHS3ovRgAAAEg"]
[Wed Apr 22 09:08:34.820545 2026] [:error] [pid 21682:tid 21740] [client 20.215.187.59:41618] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aegfkplXWQZUlmPHS3ovRwAAAFE"]
[Wed Apr 22 09:08:35.828346 2026] [:error] [pid 21682:tid 21725] [client 20.215.187.59:53339] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aegfk5lXWQZUlmPHS3ovSAAAAEI"]
[Wed Apr 22 09:08:37.302734 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:31729] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aegflUTXx_lUa7xwAb4nFQAAAQY"]
[Wed Apr 22 09:08:38.093932 2026] [:error] [pid 23041:tid 23048] [client 20.215.187.59:53342] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aegflkTXx_lUa7xwAb4nGAAAAQQ"]
[Wed Apr 22 09:08:40.201667 2026] [:error] [pid 23041:tid 23058] [client 20.215.187.59:23773] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aegfmETXx_lUa7xwAb4nHAAAAQ4"]
[Wed Apr 22 09:08:41.335011 2026] [:error] [pid 31755:tid 31785] [client 20.215.187.59:55360] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aegfmQz2mYMkg3X8q1usjwAAAhY"]
[Wed Apr 22 09:08:42.230696 2026] [:error] [pid 32095:tid 32121] [client 20.215.187.59:25149] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aegfmtfu5Cv628YPe5-FBwAAA5c"]
[Wed Apr 22 09:08:43.930806 2026] [:error] [pid 31756:tid 31798] [client 20.215.187.59:23807] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aegfm9_WbkXbHaEfhd33RQAAAkY"]
[Wed Apr 22 09:08:45.481610 2026] [:error] [pid 31755:tid 31773] [client 20.215.187.59:19975] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aegfnQz2mYMkg3X8q1uslAAAAgo"]
[Wed Apr 22 09:08:47.869229 2026] [:error] [pid 31755:tid 31786] [client 20.215.187.59:20026] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws88.php"] [unique_id "aegfnwz2mYMkg3X8q1usmQAAAhc"]
[Wed Apr 22 09:08:48.657945 2026] [:error] [pid 31755:tid 31787] [client 20.215.187.59:22500] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adoms.php"] [unique_id "aegfoAz2mYMkg3X8q1usmwAAAhg"]
[Wed Apr 22 09:08:49.721458 2026] [:error] [pid 31755:tid 31764] [client 20.215.187.59:38504] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adoms.php"] [unique_id "aegfoQz2mYMkg3X8q1usoAAAAgE"]
[Wed Apr 22 09:08:51.609951 2026] [:error] [pid 31755:tid 31783] [client 20.215.187.59:40245] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adoms.php"] [unique_id "aegfowz2mYMkg3X8q1uspAAAAhQ"]
[Wed Apr 22 09:08:53.447765 2026] [proxy_fcgi:error] [pid 31755:tid 31775] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:53.723088 2026] [proxy_fcgi:error] [pid 31755:tid 31782] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:54.013316 2026] [proxy_fcgi:error] [pid 31755:tid 31773] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:54.402716 2026] [proxy_fcgi:error] [pid 31755:tid 31783] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:54.673612 2026] [proxy_fcgi:error] [pid 31755:tid 31774] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:55.595807 2026] [proxy_fcgi:error] [pid 31755:tid 31778] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:55.857533 2026] [proxy_fcgi:error] [pid 31755:tid 31772] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:56.124111 2026] [proxy_fcgi:error] [pid 31755:tid 31775] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:56.385934 2026] [proxy_fcgi:error] [pid 31755:tid 31782] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:56.647905 2026] [proxy_fcgi:error] [pid 31755:tid 31765] [client 20.215.187.59:51508] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:08:56.905001 2026] [:error] [pid 31755:tid 31770] [client 20.215.187.59:51508] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aegfqAz2mYMkg3X8q1uswgAAAgc"]
[Wed Apr 22 09:08:58.148283 2026] [:error] [pid 31844:tid 31866] [client 20.215.187.59:29437] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aegfqmtAU9CprTB4b3I7ZQAAApQ"]
[Wed Apr 22 09:08:59.748111 2026] [:error] [pid 31756:tid 31799] [client 20.215.187.59:22205] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aegfq9_WbkXbHaEfhd33TgAAAkc"]
[Wed Apr 22 09:09:02.167673 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:3555] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aegfrgz2mYMkg3X8q1uszQAAAgs"]
[Wed Apr 22 09:09:03.103947 2026] [:error] [pid 21683:tid 21750] [client 20.215.187.59:3520] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegfr1ZBWT-0diZyYyavrgAAAIA"]
[Wed Apr 22 09:09:05.750994 2026] [:error] [pid 31949:tid 31973] [client 20.215.187.59:36678] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegfsX2WtGZh5JfbMUdRNAAAAxU"]
[Wed Apr 22 09:09:07.627492 2026] [:error] [pid 23041:tid 23056] [client 20.215.187.59:34097] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegfs0TXx_lUa7xwAb4nOwAAAQw"]
[Wed Apr 22 09:09:09.131101 2026] [:error] [pid 23041:tid 23050] [client 20.215.187.59:3550] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegftUTXx_lUa7xwAb4nPQAAAQY"]
[Wed Apr 22 09:09:10.480399 2026] [:error] [pid 31755:tid 31763] [client 20.215.187.59:29445] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aegftgz2mYMkg3X8q1us4QAAAgA"]
[Wed Apr 22 09:09:11.660973 2026] [:error] [pid 31755:tid 31772] [client 20.215.187.59:45851] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aegftwz2mYMkg3X8q1us4gAAAgk"]
[Wed Apr 22 09:09:12.350630 2026] [:error] [pid 31755:tid 31786] [client 20.215.187.59:42014] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aegfuAz2mYMkg3X8q1us5QAAAhc"]
[Wed Apr 22 09:09:14.237557 2026] [:error] [pid 31756:tid 31790] [client 20.215.187.59:50376] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aegfut_WbkXbHaEfhd33VAAAAkA"]
[Wed Apr 22 09:09:16.883697 2026] [:error] [pid 31949:tid 31954] [client 20.215.187.59:29425] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aegfvH2WtGZh5JfbMUdRNwAAAwI"]
[Wed Apr 22 09:09:19.382207 2026] [:error] [pid 31755:tid 31769] [client 20.215.187.59:30766] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aegfvwz2mYMkg3X8q1us8gAAAgY"]
[Wed Apr 22 09:09:20.519847 2026] [:error] [pid 23041:tid 23056] [client 20.215.187.59:30726] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aegfwETXx_lUa7xwAb4nQwAAAQw"]
[Wed Apr 22 09:09:21.400058 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:34088] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aegfwQz2mYMkg3X8q1us9wAAAgs"]
[Wed Apr 22 09:09:22.088536 2026] [:error] [pid 32095:tid 32107] [client 20.215.187.59:44904] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aegfwtfu5Cv628YPe5-FCwAAA4k"]
[Wed Apr 22 09:09:22.729028 2026] [:error] [pid 31755:tid 31771] [client 20.215.187.59:31209] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aegfwgz2mYMkg3X8q1us_QAAAgg"]
[Wed Apr 22 09:09:23.688481 2026] [:error] [pid 31949:tid 31968] [client 20.215.187.59:45859] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aegfw32WtGZh5JfbMUdRPAAAAxA"]
[Wed Apr 22 09:09:24.633016 2026] [:error] [pid 31755:tid 31767] [client 20.215.187.59:31187] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aegfxAz2mYMkg3X8q1utCQAAAgQ"]
[Wed Apr 22 09:09:25.453979 2026] [:error] [pid 31949:tid 31956] [client 20.215.187.59:29457] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aegfxX2WtGZh5JfbMUdRPQAAAwQ"]
[Wed Apr 22 09:09:26.870191 2026] [:error] [pid 31755:tid 31765] [client 20.215.187.59:34072] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aegfxgz2mYMkg3X8q1utEAAAAgI"]
[Wed Apr 22 09:09:27.715819 2026] [:error] [pid 31755:tid 31763] [client 20.215.187.59:34055] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aegfxwz2mYMkg3X8q1utEwAAAgA"]
[Wed Apr 22 09:09:28.521889 2026] [:error] [pid 31755:tid 31783] [client 20.215.187.59:44872] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aegfyAz2mYMkg3X8q1utGgAAAhQ"]
[Wed Apr 22 09:09:29.498016 2026] [:error] [pid 23041:tid 23060] [client 20.215.187.59:3742] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aegfyUTXx_lUa7xwAb4nUwAAARA"]
[Wed Apr 22 09:09:30.267176 2026] [:error] [pid 23041:tid 23046] [client 20.215.187.59:17356] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aegfykTXx_lUa7xwAb4nVAAAAQI"]
[Wed Apr 22 09:09:31.638960 2026] [:error] [pid 21683:tid 21773] [client 20.215.187.59:17403] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aegfy1ZBWT-0diZyYyavxQAAAJc"]
[Wed Apr 22 09:09:35.048418 2026] [:error] [pid 31949:tid 31959] [client 20.215.187.59:40131] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aegfz32WtGZh5JfbMUdRRQAAAwc"]
[Wed Apr 22 09:09:38.213002 2026] [:error] [pid 23041:tid 23048] [client 20.215.187.59:41575] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aegf0kTXx_lUa7xwAb4nYgAAAQQ"]
[Wed Apr 22 09:09:39.616941 2026] [:error] [pid 32053:tid 32066] [client 20.215.187.59:29460] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aegf0wzPjXx_ocfbYhtDogAAA0s"]
[Wed Apr 22 09:09:41.716907 2026] [:error] [pid 21683:tid 21755] [client 20.215.187.59:44864] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aegf1VZBWT-0diZyYyavzQAAAIU"]
[Wed Apr 22 09:09:42.616040 2026] [:error] [pid 21682:tid 21744] [client 20.215.187.59:3687] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aegf1plXWQZUlmPHS3ovfAAAAFU"]
[Wed Apr 22 09:09:44.116146 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:3683] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aegf2Az2mYMkg3X8q1utOAAAAgs"]
[Wed Apr 22 09:09:44.953981 2026] [:error] [pid 23041:tid 23044] [client 20.215.187.59:41559] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aegf2ETXx_lUa7xwAb4ncAAAAQA"]
[Wed Apr 22 09:09:46.794295 2026] [:error] [pid 23041:tid 23052] [client 20.215.187.59:37996] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aegf2kTXx_lUa7xwAb4ndAAAAQg"]
[Wed Apr 22 09:09:48.125173 2026] [:error] [pid 31755:tid 31768] [client 20.215.187.59:44916] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aegf3Az2mYMkg3X8q1utTwAAAgU"]
[Wed Apr 22 09:09:49.701757 2026] [:error] [pid 31949:tid 31956] [client 20.215.187.59:37317] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aegf3X2WtGZh5JfbMUdRSgAAAwQ"]
[Wed Apr 22 09:09:54.256620 2026] [:error] [pid 21682:tid 21737] [client 20.215.187.59:3728] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aegf4plXWQZUlmPHS3ovhQAAAE4"]
[Wed Apr 22 09:09:57.189547 2026] [proxy_fcgi:error] [pid 23041:tid 23065] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:57.450305 2026] [proxy_fcgi:error] [pid 23041:tid 23058] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:57.739508 2026] [proxy_fcgi:error] [pid 23041:tid 23054] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:58.015680 2026] [proxy_fcgi:error] [pid 23041:tid 23044] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:58.284030 2026] [proxy_fcgi:error] [pid 23041:tid 23053] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:58.544440 2026] [proxy_fcgi:error] [pid 23041:tid 23050] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:58.847970 2026] [proxy_fcgi:error] [pid 23041:tid 23057] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:59.110640 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:09:59.806989 2026] [proxy_fcgi:error] [pid 23041:tid 23045] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:10:00.068786 2026] [proxy_fcgi:error] [pid 23041:tid 23062] [client 20.215.187.59:23398] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:10:00.327743 2026] [:error] [pid 23041:tid 23051] [client 20.215.187.59:23398] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aegf6ETXx_lUa7xwAb4nhwAAAQc"]
[Wed Apr 22 09:10:01.378563 2026] [:error] [pid 31755:tid 31774] [client 20.215.187.59:3750] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aegf6Qz2mYMkg3X8q1utawAAAgs"]
[Wed Apr 22 09:10:02.988254 2026] [:error] [pid 31755:tid 31773] [client 20.215.187.59:21693] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aegf6gz2mYMkg3X8q1utcQAAAgo"]
[Wed Apr 22 09:10:03.992572 2026] [:error] [pid 21683:tid 21766] [client 20.215.187.59:38002] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aegf61ZBWT-0diZyYyav0QAAAJA"]
[Wed Apr 22 09:10:05.117376 2026] [:error] [pid 31756:tid 31804] [client 20.215.187.59:26933] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aegf7d_WbkXbHaEfhd33fwAAAkw"]
[Wed Apr 22 09:10:06.692983 2026] [:error] [pid 23041:tid 23049] [client 20.215.187.59:52696] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aegf7kTXx_lUa7xwAb4niwAAAQU"]
[Wed Apr 22 09:10:07.522615 2026] [:error] [pid 23041:tid 23046] [client 20.215.187.59:21670] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aegf70TXx_lUa7xwAb4njQAAAQI"]
[Wed Apr 22 09:10:08.827043 2026] [:error] [pid 31755:tid 31781] [client 20.215.187.59:45393] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccs.php"] [unique_id "aegf8Az2mYMkg3X8q1uteAAAAhI"]
[Wed Apr 22 09:10:10.565859 2026] [:error] [pid 31949:tid 31955] [client 20.215.187.59:45391] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aegf8n2WtGZh5JfbMUdRTQAAAwM"]
[Wed Apr 22 09:10:11.396177 2026] [:error] [pid 31755:tid 31775] [client 20.215.187.59:37964] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aegf8wz2mYMkg3X8q1utgQAAAgw"]
[Wed Apr 22 09:10:13.409507 2026] [:error] [pid 21682:tid 21739] [client 20.215.187.59:21664] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aegf9ZlXWQZUlmPHS3ovlAAAAFA"]
[Wed Apr 22 09:10:15.076708 2026] [:error] [pid 31755:tid 31777] [client 20.215.187.59:34021] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/first.php"] [unique_id "aegf9wz2mYMkg3X8q1utjAAAAg4"]
[Wed Apr 22 19:07:58.563012 2026] [proxy_fcgi:error] [pid 6344:tid 6367] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:07:58.820530 2026] [proxy_fcgi:error] [pid 6344:tid 6366] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:07:59.058305 2026] [proxy_fcgi:error] [pid 6344:tid 6359] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:07:59.296177 2026] [proxy_fcgi:error] [pid 6344:tid 6360] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:07:59.547271 2026] [proxy_fcgi:error] [pid 6344:tid 6362] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:07:59.810909 2026] [proxy_fcgi:error] [pid 6344:tid 6357] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:08:00.315885 2026] [proxy_fcgi:error] [pid 6344:tid 6368] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:08:00.553625 2026] [proxy_fcgi:error] [pid 6344:tid 6371] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:08:00.792791 2026] [proxy_fcgi:error] [pid 6344:tid 6351] [client 4.232.188.102:32877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:08:01.026193 2026] [:error] [pid 6344:tid 6355] [client 4.232.188.102:32877] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aeisEUDOTF-pkQnDeUnVEAAAAAY"]
[Wed Apr 22 19:08:01.849607 2026] [:error] [pid 6384:tid 6403] [client 4.232.188.102:30318] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aeisET58M3t15ICeWHUGsQAAANA"]
[Wed Apr 22 19:08:03.184522 2026] [:error] [pid 23776:tid 23799] [client 4.232.188.102:37935] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aeisE7RExf-1pAbSeJvIjgAAAZU"]
[Wed Apr 22 19:08:04.679923 2026] [:error] [pid 6252:tid 6326] [client 4.232.188.102:37183] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wziar1.php"] [unique_id "aeisFOtGYuiYb1nWBpQ62QAAAQ4"]
[Wed Apr 22 19:08:06.591609 2026] [:error] [pid 6344:tid 6356] [client 4.232.188.102:33539] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeisFkDOTF-pkQnDeUnVEwAAAAc"]
[Wed Apr 22 19:08:07.894539 2026] [:error] [pid 9085:tid 9091] [client 4.232.188.102:31408] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeisF9-_-or9vQnlWnoqHAAAAUQ"]
[Wed Apr 22 19:08:08.865076 2026] [:error] [pid 6384:tid 6406] [client 4.232.188.102:37889] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeisGD58M3t15ICeWHUGvAAAANM"]
[Wed Apr 22 19:08:10.509566 2026] [:error] [pid 9085:tid 9096] [client 4.232.188.102:31377] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeisGt-_-or9vQnlWnoqHwAAAUk"]
[Wed Apr 22 19:08:11.287307 2026] [:error] [pid 6344:tid 6373] [client 4.232.188.102:33561] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aeisG0DOTF-pkQnDeUnVFgAAABg"]
[Wed Apr 22 19:08:12.517725 2026] [:error] [pid 6250:tid 6256] [client 4.232.188.102:32360] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aeisHA-iZeQkqmQVfj74MAAAAEI"]
[Wed Apr 22 19:08:13.489898 2026] [:error] [pid 6344:tid 6355] [client 4.232.188.102:36765] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aeisHUDOTF-pkQnDeUnVHAAAAAY"]
[Wed Apr 22 19:08:14.665609 2026] [:error] [pid 6344:tid 6356] [client 4.232.188.102:37211] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7logs.php"] [unique_id "aeisHkDOTF-pkQnDeUnVHwAAAAc"]
[Wed Apr 22 19:08:15.734102 2026] [:error] [pid 23776:tid 23787] [client 4.232.188.102:32376] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeisH7RExf-1pAbSeJvInAAAAYk"]
[Wed Apr 22 19:08:17.156013 2026] [:error] [pid 6384:tid 6399] [client 4.232.188.102:36250] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeisIT58M3t15ICeWHUGxgAAAMw"]
[Wed Apr 22 19:08:18.342906 2026] [:error] [pid 6250:tid 6278] [client 4.232.188.102:31298] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeisIg-iZeQkqmQVfj74OAAAAFg"]
[Wed Apr 22 19:08:19.642181 2026] [:error] [pid 23776:tid 23789] [client 4.232.188.102:37226] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeisI7RExf-1pAbSeJvIoQAAAYs"]
[Wed Apr 22 19:08:20.677447 2026] [:error] [pid 23776:tid 23794] [client 4.232.188.102:31303] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeisJLRExf-1pAbSeJvIowAAAZA"]
[Wed Apr 22 19:08:21.496251 2026] [:error] [pid 6252:tid 6334] [client 4.232.188.102:33485] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeisJetGYuiYb1nWBpQ64AAAARY"]
[Wed Apr 22 19:08:22.416903 2026] [:error] [pid 6344:tid 6357] [client 4.232.188.102:37231] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeisJkDOTF-pkQnDeUnVIgAAAAg"]
[Wed Apr 22 19:08:23.605595 2026] [:error] [pid 6251:tid 6293] [client 4.232.188.102:24171] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/as.php"] [unique_id "aeisJysFAzbyObL-SQ5shQAAAIg"]
[Wed Apr 22 19:08:24.796650 2026] [:error] [pid 6251:tid 6306] [client 4.232.188.102:34572] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aeisKCsFAzbyObL-SQ5siwAAAJU"]
[Wed Apr 22 19:08:25.998380 2026] [:error] [pid 6251:tid 6290] [client 4.232.188.102:33479] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aeisKSsFAzbyObL-SQ5sjgAAAIU"]
[Wed Apr 22 19:08:26.964438 2026] [:error] [pid 9085:tid 9100] [client 4.232.188.102:34617] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aeisKt-_-or9vQnlWnoqJAAAAU0"]
[Wed Apr 22 19:08:28.585779 2026] [:error] [pid 9085:tid 9092] [client 4.232.188.102:36318] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aeisLN-_-or9vQnlWnoqJQAAAUU"]
[Wed Apr 22 19:08:31.139118 2026] [:error] [pid 23776:tid 23780] [client 4.232.188.102:30023] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aeisL7RExf-1pAbSeJvIuQAAAYI"]
[Wed Apr 22 19:08:32.290085 2026] [:error] [pid 23776:tid 23801] [client 4.232.188.102:29328] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aeisMLRExf-1pAbSeJvIuwAAAZc"]
[Wed Apr 22 19:08:33.150718 2026] [:error] [pid 6384:tid 6404] [client 4.232.188.102:24190] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aeisMT58M3t15ICeWHUG4gAAANE"]
[Wed Apr 22 19:08:33.909678 2026] [:error] [pid 6384:tid 6401] [client 4.232.188.102:37184] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lb.php"] [unique_id "aeisMT58M3t15ICeWHUG5gAAAM4"]
[Wed Apr 22 19:08:36.100392 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:31856] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeisND58M3t15ICeWHUG6wAAAMg"]
[Wed Apr 22 19:08:38.679304 2026] [:error] [pid 6250:tid 6270] [client 4.232.188.102:36344] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeisNg-iZeQkqmQVfj74TAAAAFA"]
[Wed Apr 22 19:08:40.624183 2026] [:error] [pid 9085:tid 9106] [client 4.232.188.102:25887] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeisON-_-or9vQnlWnoqmwAAAVM"]
[Wed Apr 22 19:08:43.192173 2026] [:error] [pid 6344:tid 6360] [client 4.232.188.102:25899] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aeisO0DOTF-pkQnDeUnVKgAAAAs"]
[Wed Apr 22 19:08:44.646459 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:30033] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeisPD58M3t15ICeWHUHDwAAAMg"]
[Wed Apr 22 19:08:45.806457 2026] [:error] [pid 6384:tid 6405] [client 4.232.188.102:28249] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeisPT58M3t15ICeWHUHEwAAANI"]
[Wed Apr 22 19:08:46.774618 2026] [:error] [pid 6252:tid 6331] [client 4.232.188.102:28636] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeisPutGYuiYb1nWBpQ65wAAARM"]
[Wed Apr 22 19:08:47.406349 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:30029] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeisP9-_-or9vQnlWnoqpgAAAVE"]
[Wed Apr 22 19:08:49.125294 2026] [:error] [pid 23776:tid 23791] [client 4.232.188.102:28657] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeisQbRExf-1pAbSeJvI0AAAAY0"]
[Wed Apr 22 19:08:50.592828 2026] [:error] [pid 6384:tid 6391] [client 4.232.188.102:30041] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeisQj58M3t15ICeWHUHGwAAAMQ"]
[Wed Apr 22 19:08:52.409392 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:29676] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeisRD58M3t15ICeWHUHIgAAANU"]
[Wed Apr 22 19:08:53.351588 2026] [:error] [pid 9085:tid 9087] [client 4.232.188.102:31822] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aeisRd-_-or9vQnlWnoqswAAAUA"]
[Wed Apr 22 19:08:54.713800 2026] [:error] [pid 9085:tid 9092] [client 4.232.188.102:29336] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "aeisRt-_-or9vQnlWnoqtgAAAUU"]
[Wed Apr 22 19:08:55.910481 2026] [:error] [pid 6252:tid 6323] [client 4.232.188.102:33489] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "aeisR-tGYuiYb1nWBpQ66wAAAQs"]
[Wed Apr 22 19:08:57.462185 2026] [:error] [pid 6344:tid 6354] [client 4.232.188.102:31815] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "aeisSUDOTF-pkQnDeUnVNAAAAAU"]
[Wed Apr 22 19:08:58.119383 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:29644] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/auth.php"] [unique_id "aeisSt-_-or9vQnlWnoqxQAAAVE"]
[Wed Apr 22 19:08:59.003040 2026] [:error] [pid 6384:tid 6393] [client 4.232.188.102:28227] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeisSz58M3t15ICeWHUHMAAAAMY"]
[Wed Apr 22 19:08:59.846059 2026] [:error] [pid 9085:tid 9088] [client 4.232.188.102:30048] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeisS9-_-or9vQnlWnoq1QAAAUE"]
[Wed Apr 22 19:09:00.655964 2026] [proxy_fcgi:error] [pid 6250:tid 6278] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:00.964818 2026] [proxy_fcgi:error] [pid 6250:tid 6260] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:01.357973 2026] [proxy_fcgi:error] [pid 6250:tid 6262] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:01.771989 2026] [proxy_fcgi:error] [pid 6250:tid 6259] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:02.075980 2026] [proxy_fcgi:error] [pid 6250:tid 6272] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:02.638094 2026] [proxy_fcgi:error] [pid 6250:tid 6277] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:02.918010 2026] [proxy_fcgi:error] [pid 6250:tid 6266] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:03.198496 2026] [proxy_fcgi:error] [pid 6250:tid 6255] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:03.479016 2026] [proxy_fcgi:error] [pid 6250:tid 6265] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:03.758121 2026] [proxy_fcgi:error] [pid 6250:tid 6267] [client 4.232.188.102:29659] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:09:04.033589 2026] [:error] [pid 6250:tid 6269] [client 4.232.188.102:29659] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeisUA-iZeQkqmQVfj74ZwAAAE8"]
[Wed Apr 22 19:09:04.740538 2026] [:error] [pid 23776:tid 23779] [client 4.232.188.102:29259] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeisULRExf-1pAbSeJvI3wAAAYE"]
[Wed Apr 22 19:09:05.666579 2026] [:error] [pid 6250:tid 6264] [client 4.232.188.102:28256] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeisUQ-iZeQkqmQVfj74aQAAAEo"]
[Wed Apr 22 19:09:06.318354 2026] [:error] [pid 9085:tid 9106] [client 4.232.188.102:29294] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeisUt-_-or9vQnlWnoq8AAAAVM"]
[Wed Apr 22 19:09:07.081501 2026] [:error] [pid 9085:tid 9096] [client 4.232.188.102:38292] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/userfuns.php"] [unique_id "aeisU9-_-or9vQnlWnoq8QAAAUk"]
[Wed Apr 22 19:09:08.002194 2026] [:error] [pid 9085:tid 9088] [client 4.232.188.102:29294] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/userfuns.php"] [unique_id "aeisVN-_-or9vQnlWnoq9AAAAUE"]
[Wed Apr 22 19:09:08.719474 2026] [:error] [pid 6384:tid 6402] [client 4.232.188.102:28340] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/userfuns.php"] [unique_id "aeisVD58M3t15ICeWHUHOQAAAM8"]
[Wed Apr 22 19:09:09.542146 2026] [:error] [pid 6250:tid 6275] [client 4.232.188.102:29327] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/userfuns.php"] [unique_id "aeisVQ-iZeQkqmQVfj74bAAAAFU"]
[Wed Apr 22 19:09:10.426068 2026] [:error] [pid 6384:tid 6405] [client 4.232.188.102:28280] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "aeisVj58M3t15ICeWHUHQAAAANI"]
[Wed Apr 22 19:09:11.304980 2026] [:error] [pid 6344:tid 6358] [client 4.232.188.102:25898] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "aeisV0DOTF-pkQnDeUnVOwAAAAk"]
[Wed Apr 22 19:09:12.358431 2026] [:error] [pid 6384:tid 6406] [client 4.232.188.102:24184] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "aeisWD58M3t15ICeWHUHRgAAANM"]
[Wed Apr 22 19:09:12.953552 2026] [:error] [pid 6250:tid 6259] [client 4.232.188.102:38279] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/menu.php"] [unique_id "aeisWA-iZeQkqmQVfj74bwAAAEU"]
[Wed Apr 22 19:09:13.743883 2026] [:error] [pid 6384:tid 6389] [client 4.232.188.102:29371] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeisWT58M3t15ICeWHUHSAAAAMI"]
[Wed Apr 22 19:09:14.478967 2026] [:error] [pid 6344:tid 6354] [client 4.232.188.102:29338] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeisWkDOTF-pkQnDeUnVQAAAAAU"]
[Wed Apr 22 19:09:15.330545 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:37213] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeisW9-_-or9vQnlWnorAwAAAUM"]
[Wed Apr 22 19:09:15.980904 2026] [:error] [pid 9085:tid 9110] [client 4.232.188.102:24155] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeisW9-_-or9vQnlWnorCAAAAVc"]
[Wed Apr 22 19:09:16.557981 2026] [:error] [pid 6344:tid 6349] [client 4.232.188.102:36328] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeisXEDOTF-pkQnDeUnVQgAAAAA"]
[Wed Apr 22 19:09:17.216691 2026] [:error] [pid 6252:tid 6336] [client 4.232.188.102:36343] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeisXetGYuiYb1nWBpQ68AAAARg"]
[Wed Apr 22 19:09:18.113013 2026] [:error] [pid 6384:tid 6389] [client 4.232.188.102:37240] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeisXj58M3t15ICeWHUHTgAAAMI"]
[Wed Apr 22 19:09:19.179900 2026] [:error] [pid 6250:tid 6266] [client 4.232.188.102:31299] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeisXw-iZeQkqmQVfj74cQAAAEw"]
[Wed Apr 22 19:09:20.417177 2026] [:error] [pid 23776:tid 23792] [client 4.232.188.102:31923] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeisYLRExf-1pAbSeJvI8QAAAY4"]
[Wed Apr 22 19:09:21.338888 2026] [:error] [pid 23776:tid 23778] [client 4.232.188.102:21489] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeisYbRExf-1pAbSeJvI9QAAAYA"]
[Wed Apr 22 19:09:22.990018 2026] [:error] [pid 6250:tid 6254] [client 4.232.188.102:37505] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeisYg-iZeQkqmQVfj74dwAAAEA"]
[Wed Apr 22 19:09:24.313965 2026] [:error] [pid 6251:tid 6293] [client 4.232.188.102:37981] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeisZCsFAzbyObL-SQ5sngAAAIg"]
[Wed Apr 22 19:09:25.547963 2026] [:error] [pid 6344:tid 6366] [client 4.232.188.102:32412] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeisZUDOTF-pkQnDeUnVSQAAABE"]
[Wed Apr 22 19:09:26.856998 2026] [:error] [pid 6251:tid 6306] [client 4.232.188.102:8714] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeisZisFAzbyObL-SQ5soQAAAJU"]
[Wed Apr 22 19:09:28.112431 2026] [:error] [pid 6250:tid 6259] [client 4.232.188.102:22182] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeisaA-iZeQkqmQVfj74ewAAAEU"]
[Wed Apr 22 19:09:29.376595 2026] [:error] [pid 6251:tid 6287] [client 4.232.188.102:25200] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeisaSsFAzbyObL-SQ5sqgAAAII"]
[Wed Apr 22 19:09:31.600424 2026] [:error] [pid 6250:tid 6256] [client 4.232.188.102:9048] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "aeisaw-iZeQkqmQVfj74fwAAAEI"]
[Wed Apr 22 19:09:32.917492 2026] [:error] [pid 9085:tid 9105] [client 4.232.188.102:22190] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "aeisbN-_-or9vQnlWnorJgAAAVI"]
[Wed Apr 22 19:09:33.763455 2026] [:error] [pid 9085:tid 9108] [client 4.232.188.102:8861] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "aeisbd-_-or9vQnlWnorKQAAAVU"]
[Wed Apr 22 19:09:35.228471 2026] [:error] [pid 6384:tid 6411] [client 4.232.188.102:26780] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "aeisbz58M3t15ICeWHUHZAAAANg"]
[Wed Apr 22 19:09:36.935635 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:21088] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeiscN-_-or9vQnlWnorMQAAAUw"]
[Wed Apr 22 19:09:38.877176 2026] [:error] [pid 6384:tid 6390] [client 4.232.188.102:26798] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeiscj58M3t15ICeWHUHcQAAAMM"]
[Wed Apr 22 19:09:40.289582 2026] [:error] [pid 6384:tid 6398] [client 4.232.188.102:8894] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeisdD58M3t15ICeWHUHdwAAAMs"]
[Wed Apr 22 19:09:41.634106 2026] [:error] [pid 6384:tid 6399] [client 4.232.188.102:8892] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/0x.php"] [unique_id "aeisdT58M3t15ICeWHUHeAAAAMw"]
[Wed Apr 22 19:09:42.928821 2026] [:error] [pid 6251:tid 6309] [client 4.232.188.102:8834] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeisdisFAzbyObL-SQ5swAAAAJg"]
[Wed Apr 22 19:09:44.425021 2026] [:error] [pid 9085:tid 9107] [client 4.232.188.102:8836] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeiseN-_-or9vQnlWnorQgAAAVQ"]
[Wed Apr 22 19:09:45.137424 2026] [:error] [pid 6384:tid 6387] [client 4.232.188.102:42175] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeiseT58M3t15ICeWHUHfgAAAMA"]
[Wed Apr 22 19:09:45.976076 2026] [:error] [pid 6250:tid 6269] [client 4.232.188.102:21079] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeiseQ-iZeQkqmQVfj74gQAAAE8"]
[Wed Apr 22 19:09:49.293170 2026] [:error] [pid 9085:tid 9087] [client 4.232.188.102:40656] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeisfd-_-or9vQnlWnorTQAAAUA"]
[Wed Apr 22 19:09:50.169706 2026] [:error] [pid 6250:tid 6258] [client 4.232.188.102:21051] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeisfg-iZeQkqmQVfj74hAAAAEQ"]
[Wed Apr 22 19:09:51.301825 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:42153] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeisfz58M3t15ICeWHUHjwAAANU"]
[Wed Apr 22 19:09:52.576714 2026] [:error] [pid 6252:tid 6323] [client 4.232.188.102:42187] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "aeisgOtGYuiYb1nWBpQ7DAAAAQs"]
[Wed Apr 22 19:09:53.781005 2026] [:error] [pid 6344:tid 6355] [client 4.232.188.102:42193] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aeisgUDOTF-pkQnDeUnVVwAAAAY"]
[Wed Apr 22 19:09:55.083306 2026] [:error] [pid 6384:tid 6411] [client 4.232.188.102:21059] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aeisgz58M3t15ICeWHUHkQAAANg"]
[Wed Apr 22 19:09:57.627133 2026] [:error] [pid 6344:tid 6353] [client 4.232.188.102:22171] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aeishUDOTF-pkQnDeUnVXAAAAAQ"]
[Wed Apr 22 19:09:59.331913 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:22172] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aeish9-_-or9vQnlWnorXQAAAUw"]
[Wed Apr 22 19:10:00.424534 2026] [:error] [pid 9085:tid 9098] [client 4.232.188.102:42200] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aeisiN-_-or9vQnlWnorZAAAAUs"]
[Wed Apr 22 19:10:01.758683 2026] [:error] [pid 23776:tid 23787] [client 4.232.188.102:38386] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aeisibRExf-1pAbSeJvJLAAAAYk"]
[Wed Apr 22 19:10:02.554925 2026] [:error] [pid 6384:tid 6404] [client 4.232.188.102:42216] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koiy.php"] [unique_id "aeisij58M3t15ICeWHUHoAAAANE"]
[Wed Apr 22 19:10:03.328855 2026] [proxy_fcgi:error] [pid 23776:tid 23782] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:03.566219 2026] [proxy_fcgi:error] [pid 23776:tid 23792] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:03.805280 2026] [proxy_fcgi:error] [pid 23776:tid 23797] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:04.278292 2026] [proxy_fcgi:error] [pid 23776:tid 23802] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:04.548266 2026] [proxy_fcgi:error] [pid 23776:tid 23788] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:04.787039 2026] [proxy_fcgi:error] [pid 23776:tid 23793] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:05.060733 2026] [proxy_fcgi:error] [pid 23776:tid 23781] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:05.317318 2026] [proxy_fcgi:error] [pid 23776:tid 23787] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:05.558485 2026] [proxy_fcgi:error] [pid 23776:tid 23785] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:05.886743 2026] [proxy_fcgi:error] [pid 23776:tid 23782] [client 4.232.188.102:42131] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:10:06.263044 2026] [:error] [pid 23776:tid 23795] [client 4.232.188.102:42131] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "aeisjrRExf-1pAbSeJvJPwAAAZE"]
[Wed Apr 22 19:10:07.282935 2026] [:error] [pid 6384:tid 6393] [client 4.232.188.102:8832] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "aeisjz58M3t15ICeWHUHqwAAAMY"]
[Wed Apr 22 19:10:08.302687 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:21105] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "aeiskN-_-or9vQnlWnorfQAAAUM"]
[Wed Apr 22 19:10:09.072845 2026] [:error] [pid 6251:tid 6294] [client 4.232.188.102:42219] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tfm.php"] [unique_id "aeiskSsFAzbyObL-SQ5sywAAAIk"]
[Wed Apr 22 19:10:09.818317 2026] [:error] [pid 9085:tid 9089] [client 4.232.188.102:42547] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeiskd-_-or9vQnlWnorgQAAAUI"]
[Wed Apr 22 19:10:11.302548 2026] [:error] [pid 9085:tid 9095] [client 4.232.188.102:38340] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeisk9-_-or9vQnlWnorhAAAAUg"]
[Wed Apr 22 19:10:12.320004 2026] [:error] [pid 9085:tid 9089] [client 4.232.188.102:42556] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeislN-_-or9vQnlWnorhwAAAUI"]
[Wed Apr 22 19:10:13.014959 2026] [:error] [pid 6384:tid 6387] [client 4.232.188.102:42188] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aeislT58M3t15ICeWHUHvgAAAMA"]
[Wed Apr 22 19:10:13.725118 2026] [:error] [pid 6344:tid 6367] [client 4.232.188.102:8536] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "aeislUDOTF-pkQnDeUnVbwAAABI"]
[Wed Apr 22 19:10:14.487786 2026] [:error] [pid 6384:tid 6393] [client 4.232.188.102:38387] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "aeislj58M3t15ICeWHUHvwAAAMY"]
[Wed Apr 22 19:10:15.554158 2026] [:error] [pid 6384:tid 6388] [client 4.232.188.102:26790] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "aeislz58M3t15ICeWHUHwgAAAME"]
[Wed Apr 22 19:10:16.297877 2026] [:error] [pid 9085:tid 9088] [client 4.232.188.102:40702] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t00l.php"] [unique_id "aeismN-_-or9vQnlWnormwAAAUE"]
[Wed Apr 22 19:10:17.173782 2026] [:error] [pid 6384:tid 6397] [client 4.232.188.102:21117] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aeismT58M3t15ICeWHUHywAAAMo"]
[Wed Apr 22 19:10:17.958664 2026] [:error] [pid 23776:tid 23787] [client 4.232.188.102:40647] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aeismbRExf-1pAbSeJvJTQAAAYk"]
[Wed Apr 22 19:10:18.547925 2026] [:error] [pid 23776:tid 23779] [client 4.232.188.102:42557] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aeismrRExf-1pAbSeJvJUgAAAYE"]
[Wed Apr 22 19:10:19.984836 2026] [:error] [pid 23776:tid 23797] [client 4.232.188.102:21109] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp1.php"] [unique_id "aeism7RExf-1pAbSeJvJVwAAAZM"]
[Wed Apr 22 19:10:20.779992 2026] [:error] [pid 6344:tid 6371] [client 4.232.188.102:24184] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aeisnEDOTF-pkQnDeUnVfQAAABY"]
[Wed Apr 22 19:10:21.511623 2026] [:error] [pid 9085:tid 9092] [client 4.232.188.102:26767] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aeisnd-_-or9vQnlWnorpAAAAUU"]
[Wed Apr 22 19:10:22.428111 2026] [:error] [pid 9085:tid 9096] [client 4.232.188.102:38369] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aeisnt-_-or9vQnlWnorqQAAAUk"]
[Wed Apr 22 19:10:23.355739 2026] [:error] [pid 9085:tid 9093] [client 4.232.188.102:21069] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acc.php"] [unique_id "aeisn9-_-or9vQnlWnorrQAAAUY"]
[Wed Apr 22 19:10:24.045717 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:8239] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "aeisoN-_-or9vQnlWnorsgAAAUw"]
[Wed Apr 22 19:10:24.775132 2026] [:error] [pid 6250:tid 6262] [client 4.232.188.102:22162] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "aeisoA-iZeQkqmQVfj74lQAAAEg"]
[Wed Apr 22 19:10:25.579026 2026] [:error] [pid 9085:tid 9098] [client 4.232.188.102:42565] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "aeisod-_-or9vQnlWnoruQAAAUs"]
[Wed Apr 22 19:10:26.344330 2026] [:error] [pid 6384:tid 6409] [client 4.232.188.102:42197] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asasx.php"] [unique_id "aeisoj58M3t15ICeWHUH1AAAANY"]
[Wed Apr 22 19:10:27.445114 2026] [:error] [pid 6251:tid 6290] [client 4.232.188.102:8574] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeisoysFAzbyObL-SQ5s1AAAAIU"]
[Wed Apr 22 19:10:28.266864 2026] [:error] [pid 23776:tid 23802] [client 4.232.188.102:21063] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeispLRExf-1pAbSeJvJYgAAAZg"]
[Wed Apr 22 19:10:29.031187 2026] [:error] [pid 6344:tid 6351] [client 4.232.188.102:42230] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeispUDOTF-pkQnDeUnViwAAAAI"]
[Wed Apr 22 19:10:30.071759 2026] [:error] [pid 6251:tid 6307] [client 4.232.188.102:42535] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aeispisFAzbyObL-SQ5s2AAAAJY"]
[Wed Apr 22 19:10:30.760690 2026] [:error] [pid 6384:tid 6392] [client 4.232.188.102:40665] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeispj58M3t15ICeWHUH4QAAAMU"]
[Wed Apr 22 19:10:31.382584 2026] [:error] [pid 9085:tid 9105] [client 4.232.188.102:8555] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeisp9-_-or9vQnlWnoryQAAAVI"]
[Wed Apr 22 19:10:32.649899 2026] [:error] [pid 6252:tid 6334] [client 4.232.188.102:42516] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeisqOtGYuiYb1nWBpQ7HQAAARY"]
[Wed Apr 22 19:10:33.740138 2026] [:error] [pid 6384:tid 6391] [client 4.232.188.102:21081] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aeisqT58M3t15ICeWHUH6AAAAMQ"]
[Wed Apr 22 19:10:34.772708 2026] [:error] [pid 6384:tid 6404] [client 4.232.188.102:42183] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeisqj58M3t15ICeWHUH7gAAANE"]
[Wed Apr 22 19:10:35.702797 2026] [:error] [pid 23776:tid 23798] [client 4.232.188.102:38385] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeisq7RExf-1pAbSeJvJawAAAZQ"]
[Wed Apr 22 19:10:37.258341 2026] [:error] [pid 23776:tid 23799] [client 4.232.188.102:42560] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeisrbRExf-1pAbSeJvJbQAAAZU"]
[Wed Apr 22 19:10:38.894115 2026] [:error] [pid 6250:tid 6255] [client 4.232.188.102:8549] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeisrg-iZeQkqmQVfj74owAAAEE"]
[Wed Apr 22 19:10:40.779557 2026] [:error] [pid 9085:tid 9111] [client 4.232.188.102:21057] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aeissN-_-or9vQnlWnor5AAAAVg"]
[Wed Apr 22 19:10:42.469169 2026] [:error] [pid 9085:tid 9089] [client 4.232.188.102:8529] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aeisst-_-or9vQnlWnor6wAAAUI"]
[Wed Apr 22 19:10:44.073958 2026] [:error] [pid 23776:tid 23797] [client 4.232.188.102:42541] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aeistLRExf-1pAbSeJvJdwAAAZM"]
[Wed Apr 22 19:10:45.302197 2026] [:error] [pid 6384:tid 6401] [client 4.232.188.102:40687] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws78.php"] [unique_id "aeistT58M3t15ICeWHUH8wAAAM4"]
[Wed Apr 22 19:10:46.714579 2026] [:error] [pid 9085:tid 9087] [client 4.232.188.102:21077] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aeistt-_-or9vQnlWnor-gAAAUA"]
[Wed Apr 22 19:10:47.847779 2026] [:error] [pid 6250:tid 6257] [client 4.232.188.102:42169] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aeistw-iZeQkqmQVfj74sAAAAEM"]
[Wed Apr 22 19:10:49.058316 2026] [:error] [pid 23776:tid 23785] [client 4.232.188.102:40695] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aeisubRExf-1pAbSeJvJgAAAAYc"]
[Wed Apr 22 19:10:50.317540 2026] [:error] [pid 6250:tid 6260] [client 4.232.188.102:43015] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/motu.php"] [unique_id "aeisug-iZeQkqmQVfj74tQAAAEY"]
[Wed Apr 22 19:10:51.979904 2026] [:error] [pid 6344:tid 6373] [client 4.232.188.102:43074] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeisu0DOTF-pkQnDeUnVrAAAABg"]
[Wed Apr 22 19:10:53.481469 2026] [:error] [pid 23776:tid 23786] [client 4.232.188.102:38375] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeisvbRExf-1pAbSeJvJiwAAAYg"]
[Wed Apr 22 19:10:54.132587 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:42146] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeisvj58M3t15ICeWHUIAAAAANU"]
[Wed Apr 22 19:10:54.758931 2026] [:error] [pid 6344:tid 6369] [client 4.232.188.102:40698] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeisvkDOTF-pkQnDeUnVsAAAABQ"]
[Wed Apr 22 19:10:55.685490 2026] [:error] [pid 9085:tid 9102] [client 4.232.188.102:40661] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeisv9-_-or9vQnlWnosFQAAAU8"]
[Wed Apr 22 19:10:56.559480 2026] [:error] [pid 6252:tid 6328] [client 4.232.188.102:42572] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeiswOtGYuiYb1nWBpQ7IwAAARA"]
[Wed Apr 22 19:10:57.208015 2026] [:error] [pid 6344:tid 6360] [client 4.232.188.102:23130] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeiswUDOTF-pkQnDeUnVtwAAAAs"]
[Wed Apr 22 19:10:57.898190 2026] [:error] [pid 6384:tid 6396] [client 4.232.188.102:43071] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeiswT58M3t15ICeWHUIAwAAAMk"]
[Wed Apr 22 19:10:58.882005 2026] [:error] [pid 6384:tid 6403] [client 4.232.188.102:43053] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeiswj58M3t15ICeWHUICgAAANA"]
[Wed Apr 22 19:10:59.689366 2026] [:error] [pid 9085:tid 9095] [client 4.232.188.102:43026] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeisw9-_-or9vQnlWnosIAAAAUg"]
[Wed Apr 22 19:11:00.810424 2026] [:error] [pid 6344:tid 6370] [client 4.232.188.102:43043] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeisxEDOTF-pkQnDeUnVvAAAABU"]
[Wed Apr 22 19:11:01.606004 2026] [:error] [pid 6344:tid 6358] [client 4.232.188.102:34945] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeisxUDOTF-pkQnDeUnVvwAAAAk"]
[Wed Apr 22 19:11:02.470481 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:43094] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeisxt-_-or9vQnlWnosLgAAAVE"]
[Wed Apr 22 19:11:03.488856 2026] [:error] [pid 6250:tid 6274] [client 4.232.188.102:43130] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeisxw-iZeQkqmQVfj74uwAAAFQ"]
[Wed Apr 22 19:11:04.204322 2026] [:error] [pid 9085:tid 9103] [client 4.232.188.102:43093] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aeisyN-_-or9vQnlWnosOAAAAVA"]
[Wed Apr 22 19:11:05.414564 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:05.651904 2026] [proxy_fcgi:error] [pid 9085:tid 9105] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:05.899116 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:06.137327 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:06.631320 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:06.871865 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:07.128651 2026] [proxy_fcgi:error] [pid 9085:tid 9087] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:07.366794 2026] [proxy_fcgi:error] [pid 9085:tid 9104] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:07.603624 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:07.883293 2026] [proxy_fcgi:error] [pid 9085:tid 9099] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:08.121650 2026] [proxy_fcgi:error] [pid 9085:tid 9101] [client 4.232.188.102:34990] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 19:11:08.433186 2026] [:error] [pid 9085:tid 9100] [client 4.232.188.102:34990] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeiszN-_-or9vQnlWnosWgAAAU0"]
[Wed Apr 22 19:11:09.247179 2026] [:error] [pid 6384:tid 6397] [client 4.232.188.102:38886] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeiszT58M3t15ICeWHUIFgAAAMo"]
[Wed Apr 22 19:11:10.147790 2026] [:error] [pid 6250:tid 6272] [client 4.232.188.102:26214] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeiszg-iZeQkqmQVfj74wQAAAFI"]
[Wed Apr 22 19:11:10.913842 2026] [:error] [pid 6344:tid 6363] [client 4.232.188.102:8279] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeiszkDOTF-pkQnDeUnVxgAAAA4"]
[Wed Apr 22 19:11:11.955836 2026] [:error] [pid 6384:tid 6407] [client 4.232.188.102:25533] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aeiszz58M3t15ICeWHUIIAAAANQ"]
[Wed Apr 22 19:11:13.184137 2026] [:error] [pid 6250:tid 6269] [client 4.232.188.102:43623] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aeis0Q-iZeQkqmQVfj74xwAAAE8"]
[Wed Apr 22 19:11:14.727360 2026] [:error] [pid 6250:tid 6270] [client 4.232.188.102:26423] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aeis0g-iZeQkqmQVfj74yQAAAFA"]
[Wed Apr 22 19:11:18.319468 2026] [:error] [pid 6250:tid 6273] [client 4.232.188.102:26392] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ai.php"] [unique_id "aeis1g-iZeQkqmQVfj740AAAAFM"]
[Wed Apr 22 19:11:21.587572 2026] [:error] [pid 23776:tid 23801] [client 4.232.188.102:34534] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeis2bRExf-1pAbSeJvJpgAAAZc"]
[Wed Apr 22 19:11:26.996599 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:34086] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeis3t-_-or9vQnlWnosdwAAAUM"]
[Wed Apr 22 19:11:29.276386 2026] [:error] [pid 6251:tid 6290] [client 4.232.188.102:8478] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeis4SsFAzbyObL-SQ5s9gAAAIU"]
[Wed Apr 22 19:11:30.251443 2026] [:error] [pid 23776:tid 23791] [client 4.232.188.102:34507] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeis4rRExf-1pAbSeJvJtQAAAY0"]
[Thu Apr 23 01:40:43.156925 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:43.437361 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:43.701702 2026] [proxy_fcgi:error] [pid 9085:tid 9093] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:43.997718 2026] [proxy_fcgi:error] [pid 9085:tid 9091] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:44.275995 2026] [proxy_fcgi:error] [pid 9085:tid 9090] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:44.767682 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:45.043954 2026] [proxy_fcgi:error] [pid 9085:tid 9110] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:45.310468 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:45.576303 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:45.840401 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 4.235.1.40:35797] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:40:46.214645 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:35797] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aekIHt-_-or9vQnlWnosvAAAAUI"]
[Thu Apr 23 01:40:47.892476 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:65306] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aekIH9-_-or9vQnlWnoswwAAAVA"]
[Thu Apr 23 01:40:49.432562 2026] [:error] [pid 6250:tid 6276] [client 4.235.1.40:65403] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aekIIQ-iZeQkqmQVfj5KGwAAAFY"]
[Thu Apr 23 01:40:50.553021 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:30698] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aekIIt-_-or9vQnlWnosyQAAAUs"]
[Thu Apr 23 01:40:51.984723 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:65323] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aekII9-_-or9vQnlWnoszgAAAUU"]
[Thu Apr 23 01:40:53.669778 2026] [:error] [pid 23776:tid 23798] [client 4.235.1.40:63311] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aekIJbRExf-1pAbSeJtc3AAAAZQ"]
[Thu Apr 23 01:40:54.968714 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:35798] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aekIJj58M3t15ICeWHXNqAAAAMA"]
[Thu Apr 23 01:40:55.725929 2026] [:error] [pid 6344:tid 6358] [client 4.235.1.40:62660] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aekIJ0DOTF-pkQnDeUk8uAAAAAk"]
[Thu Apr 23 01:40:56.448244 2026] [:error] [pid 6384:tid 6401] [client 4.235.1.40:62627] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aekIKD58M3t15ICeWHXNsQAAAM4"]
[Thu Apr 23 01:40:58.352723 2026] [:error] [pid 9085:tid 9104] [client 4.235.1.40:62644] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aekIKt-_-or9vQnlWnos8QAAAVE"]
[Thu Apr 23 01:40:59.722743 2026] [:error] [pid 6251:tid 6295] [client 4.235.1.40:65355] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aekIKysFAzbyObL-SQ6qTAAAAIo"]
[Thu Apr 23 01:41:01.406086 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:35833] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aekILQ-iZeQkqmQVfj5KKAAAAFE"]
[Thu Apr 23 01:41:03.715546 2026] [:error] [pid 6251:tid 6308] [client 4.235.1.40:64725] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aekILysFAzbyObL-SQ6qTwAAAJc"]
[Thu Apr 23 01:41:06.125467 2026] [:error] [pid 6250:tid 6261] [client 4.235.1.40:62131] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aekIMg-iZeQkqmQVfj5KLwAAAEc"]
[Thu Apr 23 01:41:07.885284 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:63233] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aekIM9-_-or9vQnlWnotAwAAAVU"]
[Thu Apr 23 01:41:08.915085 2026] [:error] [pid 9085:tid 9100] [client 4.235.1.40:62603] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aekINN-_-or9vQnlWnotCAAAAU0"]
[Thu Apr 23 01:41:10.483934 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:63339] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aekINt-_-or9vQnlWnotCwAAAUY"]
[Thu Apr 23 01:41:12.455582 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:62131] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aekION-_-or9vQnlWnotEgAAAVU"]
[Thu Apr 23 01:41:14.168277 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:62156] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aekIOt-_-or9vQnlWnotFQAAAUI"]
[Thu Apr 23 01:41:15.421847 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:64651] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "aekIO9-_-or9vQnlWnotGAAAAUo"]
[Thu Apr 23 01:41:16.091806 2026] [:error] [pid 6384:tid 6388] [client 4.235.1.40:63343] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aekIPD58M3t15ICeWHXNxgAAAME"]
[Thu Apr 23 01:41:17.300177 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:35831] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aekIPd-_-or9vQnlWnotIAAAAU4"]
[Thu Apr 23 01:41:18.466149 2026] [:error] [pid 6344:tid 6361] [client 4.235.1.40:63292] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aekIPkDOTF-pkQnDeUk8wgAAAAw"]
[Thu Apr 23 01:41:19.341896 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:30662] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aekIP9-_-or9vQnlWnotJQAAAUU"]
[Thu Apr 23 01:41:20.370720 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:63275] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekIQN-_-or9vQnlWnotKAAAAVg"]
[Thu Apr 23 01:41:21.617205 2026] [:error] [pid 23776:tid 23780] [client 4.235.1.40:64763] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekIQbRExf-1pAbSeJtdAQAAAYI"]
[Thu Apr 23 01:41:22.552302 2026] [:error] [pid 9085:tid 9109] [client 4.235.1.40:62696] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekIQt-_-or9vQnlWnotLQAAAVY"]
[Thu Apr 23 01:41:24.099653 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:63245] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekIRN-_-or9vQnlWnotLwAAAUc"]
[Thu Apr 23 01:41:26.992126 2026] [:error] [pid 6250:tid 6254] [client 4.235.1.40:65371] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekIRg-iZeQkqmQVfj5KNgAAAEA"]
[Thu Apr 23 01:41:28.690053 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:62617] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekISN-_-or9vQnlWnotPQAAAVA"]
[Thu Apr 23 01:41:30.282658 2026] [:error] [pid 6252:tid 6317] [client 4.235.1.40:35801] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekISutGYuiYb1nWBpSCOgAAAQU"]
[Thu Apr 23 01:41:31.587888 2026] [:error] [pid 6344:tid 6366] [client 4.235.1.40:62592] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekIS0DOTF-pkQnDeUk8xgAAABE"]
[Thu Apr 23 01:41:32.894534 2026] [:error] [pid 6384:tid 6411] [client 4.235.1.40:35820] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ganja.php"] [unique_id "aekITD58M3t15ICeWHXNywAAANg"]
[Thu Apr 23 01:41:34.067756 2026] [:error] [pid 6251:tid 6286] [client 4.235.1.40:30673] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ganja.php"] [unique_id "aekITisFAzbyObL-SQ6qVgAAAIE"]
[Thu Apr 23 01:41:34.960696 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:65365] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ganja.php"] [unique_id "aekITt-_-or9vQnlWnotRQAAAUQ"]
[Thu Apr 23 01:41:36.292212 2026] [:error] [pid 9085:tid 9109] [client 4.235.1.40:64683] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ganja.php"] [unique_id "aekIUN-_-or9vQnlWnotRwAAAVY"]
[Thu Apr 23 01:41:37.612458 2026] [:error] [pid 9085:tid 9088] [client 4.235.1.40:63289] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aekIUd-_-or9vQnlWnotSQAAAUE"]
[Thu Apr 23 01:41:38.541360 2026] [:error] [pid 6250:tid 6264] [client 4.235.1.40:62622] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aekIUg-iZeQkqmQVfj5KOQAAAEo"]
[Thu Apr 23 01:41:39.495327 2026] [:error] [pid 23776:tid 23779] [client 4.235.1.40:65379] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aekIU7RExf-1pAbSeJtdBAAAAYE"]
[Thu Apr 23 01:41:43.593360 2026] [:error] [pid 23776:tid 23801] [client 4.235.1.40:63346] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aekIV7RExf-1pAbSeJtdCAAAAZc"]
[Thu Apr 23 01:41:44.551152 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:35818] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sad821.php"] [unique_id "aekIWLRExf-1pAbSeJtdCgAAAYU"]
[Thu Apr 23 01:41:45.672811 2026] [proxy_fcgi:error] [pid 23776:tid 23799] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:45.938577 2026] [proxy_fcgi:error] [pid 23776:tid 23785] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:46.202200 2026] [proxy_fcgi:error] [pid 23776:tid 23789] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:46.479709 2026] [proxy_fcgi:error] [pid 23776:tid 23788] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:46.744115 2026] [proxy_fcgi:error] [pid 23776:tid 23791] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:47.008852 2026] [proxy_fcgi:error] [pid 23776:tid 23781] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:47.280197 2026] [proxy_fcgi:error] [pid 23776:tid 23797] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:47.543692 2026] [proxy_fcgi:error] [pid 23776:tid 23792] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:48.193157 2026] [proxy_fcgi:error] [pid 23776:tid 23796] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:48.483958 2026] [proxy_fcgi:error] [pid 23776:tid 23779] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:48.782650 2026] [proxy_fcgi:error] [pid 23776:tid 23793] [client 4.235.1.40:35823] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:41:49.042004 2026] [:error] [pid 23776:tid 23798] [client 4.235.1.40:35823] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aekIXbRExf-1pAbSeJtdGQAAAZQ"]
[Thu Apr 23 01:41:53.043129 2026] [:error] [pid 9085:tid 9105] [client 4.235.1.40:64765] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aekIYd-_-or9vQnlWnotYwAAAVI"]
[Thu Apr 23 01:41:54.796847 2026] [:error] [pid 6250:tid 6270] [client 4.235.1.40:62105] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aekIYg-iZeQkqmQVfj5KPQAAAFA"]
[Thu Apr 23 01:41:55.580082 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:10688] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aekIYz58M3t15ICeWHXN3wAAAMA"]
[Thu Apr 23 01:41:57.469653 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:62649] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aekIZT58M3t15ICeWHXN4AAAAM8"]
[Thu Apr 23 01:41:58.725279 2026] [:error] [pid 6252:tid 6313] [client 4.235.1.40:35795] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aekIZutGYuiYb1nWBpSCTQAAAQE"]
[Thu Apr 23 01:41:59.550460 2026] [:error] [pid 6384:tid 6400] [client 4.235.1.40:62711] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aekIZz58M3t15ICeWHXN4QAAAM0"]
[Thu Apr 23 01:42:00.833027 2026] [:error] [pid 23776:tid 23796] [client 4.235.1.40:64692] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aekIaLRExf-1pAbSeJtdIgAAAZI"]
[Thu Apr 23 01:42:02.324194 2026] [:error] [pid 23776:tid 23802] [client 4.235.1.40:30666] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "aekIarRExf-1pAbSeJtdJAAAAZg"]
[Thu Apr 23 01:42:04.193996 2026] [:error] [pid 6251:tid 6292] [client 4.235.1.40:65322] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "aekIbCsFAzbyObL-SQ6qWQAAAIc"]
[Thu Apr 23 01:42:05.872157 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:58441] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "aekIbT58M3t15ICeWHXN7AAAAMc"]
[Thu Apr 23 01:42:07.560740 2026] [:error] [pid 6250:tid 6267] [client 4.235.1.40:63300] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "aekIbw-iZeQkqmQVfj5KQwAAAE0"]
[Thu Apr 23 01:42:09.499879 2026] [:error] [pid 6344:tid 6363] [client 4.235.1.40:64723] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "aekIcUDOTF-pkQnDeUk82gAAAA4"]
[Thu Apr 23 01:42:11.632575 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:62103] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "aekIc9-_-or9vQnlWnotfQAAAUQ"]
[Thu Apr 23 01:42:13.247006 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:35811] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "aekIdd-_-or9vQnlWnotgAAAAU8"]
[Thu Apr 23 01:42:16.256789 2026] [:error] [pid 23776:tid 23791] [client 4.235.1.40:30699] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws81.php"] [unique_id "aekIeLRExf-1pAbSeJtdKQAAAY0"]
[Thu Apr 23 01:42:19.852707 2026] [:error] [pid 23776:tid 23796] [client 4.235.1.40:65290] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "aekIe7RExf-1pAbSeJtdKgAAAZI"]
[Thu Apr 23 01:42:21.857938 2026] [:error] [pid 6252:tid 6328] [client 4.235.1.40:62115] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "aekIfetGYuiYb1nWBpSCVAAAARA"]
[Thu Apr 23 01:42:24.322918 2026] [:error] [pid 9085:tid 9105] [client 4.235.1.40:65388] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "aekIgN-_-or9vQnlWnotiwAAAVI"]
[Thu Apr 23 01:42:26.808988 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:63232] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r2.php"] [unique_id "aekIgj58M3t15ICeWHXN-AAAAMA"]
[Thu Apr 23 01:42:29.219317 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:64722] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aekIhd-_-or9vQnlWnotoQAAAUY"]
[Thu Apr 23 01:42:31.225495 2026] [:error] [pid 6344:tid 6358] [client 4.235.1.40:62635] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aekIh0DOTF-pkQnDeUk84QAAAAk"]
[Thu Apr 23 01:42:33.607997 2026] [:error] [pid 23776:tid 23799] [client 4.235.1.40:64654] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aekIibRExf-1pAbSeJtdPwAAAZU"]
[Thu Apr 23 01:42:35.239589 2026] [:error] [pid 6344:tid 6353] [client 4.235.1.40:65375] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aekIi0DOTF-pkQnDeUk85wAAAAQ"]
[Thu Apr 23 01:42:38.042016 2026] [:error] [pid 6384:tid 6407] [client 4.235.1.40:62693] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aekIjj58M3t15ICeWHXN_AAAANQ"]
[Thu Apr 23 01:42:40.945911 2026] [:error] [pid 6384:tid 6401] [client 4.235.1.40:64678] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aekIkD58M3t15ICeWHXN_gAAAM4"]
[Thu Apr 23 01:42:44.225873 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:65361] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aekIlLRExf-1pAbSeJtdSwAAAYc"]
[Thu Apr 23 01:42:47.511390 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:62206] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aekIl9-_-or9vQnlWnotuwAAAUM"]
[Thu Apr 23 01:42:50.848902 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:51.112000 2026] [proxy_fcgi:error] [pid 9085:tid 9093] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:51.404993 2026] [proxy_fcgi:error] [pid 9085:tid 9100] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:51.672745 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:52.146002 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:52.415850 2026] [proxy_fcgi:error] [pid 9085:tid 9099] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:52.678751 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:52.941422 2026] [proxy_fcgi:error] [pid 9085:tid 9104] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:53.233501 2026] [proxy_fcgi:error] [pid 9085:tid 9106] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:53.655683 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:53.957691 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 4.235.1.40:65370] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:42:54.219099 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:65370] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aekInt-_-or9vQnlWnotzwAAAUA"]
[Thu Apr 23 01:42:55.358019 2026] [:error] [pid 23776:tid 23802] [client 4.235.1.40:59708] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aekIn7RExf-1pAbSeJtdUwAAAZg"]
[Thu Apr 23 01:42:56.525070 2026] [:error] [pid 6251:tid 6299] [client 4.235.1.40:65386] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aekIoCsFAzbyObL-SQ6qcwAAAI4"]
[Thu Apr 23 01:42:58.680074 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:62148] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aekIot-_-or9vQnlWnot2gAAAUQ"]
[Thu Apr 23 01:42:59.871287 2026] [:error] [pid 6251:tid 6294] [client 4.235.1.40:65333] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aekIoysFAzbyObL-SQ6qdQAAAIk"]
[Thu Apr 23 01:43:00.760909 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:63338] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aekIpN-_-or9vQnlWnot4gAAAUU"]
[Thu Apr 23 01:43:01.530570 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:62102] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aekIpd-_-or9vQnlWnot5gAAAVQ"]
[Thu Apr 23 01:43:02.238367 2026] [:error] [pid 9085:tid 9105] [client 4.235.1.40:64712] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aekIpt-_-or9vQnlWnot7AAAAVI"]
[Thu Apr 23 01:43:02.834736 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:61540] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekIpt-_-or9vQnlWnot8AAAAVc"]
[Thu Apr 23 01:43:03.642083 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:60296] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekIp7RExf-1pAbSeJtdWQAAAYk"]
[Thu Apr 23 01:43:05.163634 2026] [:error] [pid 6344:tid 6371] [client 4.235.1.40:65335] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekIqUDOTF-pkQnDeUk89gAAABY"]
[Thu Apr 23 01:43:06.127382 2026] [:error] [pid 6384:tid 6395] [client 4.235.1.40:64673] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekIqj58M3t15ICeWHXODQAAAMg"]
[Thu Apr 23 01:43:07.695748 2026] [:error] [pid 23776:tid 23778] [client 4.235.1.40:62126] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aekIq7RExf-1pAbSeJtdWgAAAYA"]
[Thu Apr 23 01:43:08.498820 2026] [:error] [pid 23776:tid 23797] [client 4.235.1.40:10738] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aekIrLRExf-1pAbSeJtdWwAAAZM"]
[Thu Apr 23 01:43:10.031599 2026] [:error] [pid 23776:tid 23781] [client 4.235.1.40:62203] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aekIrrRExf-1pAbSeJtdXgAAAYM"]
[Thu Apr 23 01:43:11.020212 2026] [:error] [pid 6250:tid 6260] [client 4.235.1.40:10697] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aekIrw-iZeQkqmQVfj5KUAAAAEY"]
[Thu Apr 23 01:43:11.706360 2026] [:error] [pid 6344:tid 6361] [client 4.235.1.40:59093] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aekIr0DOTF-pkQnDeUk8-QAAAAw"]
[Thu Apr 23 01:43:12.508847 2026] [:error] [pid 6250:tid 6264] [client 4.235.1.40:30687] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aekIsA-iZeQkqmQVfj5KUQAAAEo"]
[Thu Apr 23 01:43:13.161220 2026] [:error] [pid 6250:tid 6254] [client 4.235.1.40:65359] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aekIsQ-iZeQkqmQVfj5KUgAAAEA"]
[Thu Apr 23 01:43:14.243272 2026] [:error] [pid 6250:tid 6266] [client 4.235.1.40:10691] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aekIsg-iZeQkqmQVfj5KUwAAAEw"]
[Thu Apr 23 01:43:14.914052 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:64702] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "aekIsj58M3t15ICeWHXOEgAAAMc"]
[Thu Apr 23 01:43:15.953466 2026] [:error] [pid 6344:tid 6357] [client 4.235.1.40:62168] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "aekIs0DOTF-pkQnDeUk8-wAAAAg"]
[Thu Apr 23 01:43:18.453464 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:30714] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "aekItt-_-or9vQnlWnot9QAAAVU"]
[Thu Apr 23 01:43:20.784352 2026] [:error] [pid 6384:tid 6389] [client 4.235.1.40:63329] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "aekIuD58M3t15ICeWHXOEwAAAMI"]
[Thu Apr 23 01:43:24.381495 2026] [:error] [pid 6384:tid 6407] [client 4.235.1.40:62182] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aekIvD58M3t15ICeWHXOFQAAANQ"]
[Thu Apr 23 01:43:26.562017 2026] [:error] [pid 23776:tid 23801] [client 4.235.1.40:63318] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aekIvrRExf-1pAbSeJtdfgAAAZc"]
[Thu Apr 23 01:43:28.211194 2026] [:error] [pid 6384:tid 6390] [client 4.235.1.40:35776] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aekIwD58M3t15ICeWHXOGwAAAMM"]
[Thu Apr 23 01:43:30.443299 2026] [:error] [pid 6251:tid 6289] [client 4.235.1.40:62681] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aekIwisFAzbyObL-SQ6qegAAAIQ"]
[Thu Apr 23 01:43:31.993978 2026] [:error] [pid 6384:tid 6403] [client 4.235.1.40:62120] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aekIwz58M3t15ICeWHXOHgAAANA"]
[Thu Apr 23 01:43:32.682495 2026] [:error] [pid 6250:tid 6257] [client 4.235.1.40:58495] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aekIxA-iZeQkqmQVfj5KVAAAAEM"]
[Thu Apr 23 01:43:33.700363 2026] [:error] [pid 23776:tid 23778] [client 4.235.1.40:62685] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aekIxbRExf-1pAbSeJtdhgAAAYA"]
[Thu Apr 23 01:43:34.321282 2026] [:error] [pid 23776:tid 23797] [client 4.235.1.40:64696] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aekIxrRExf-1pAbSeJtdigAAAZM"]
[Thu Apr 23 01:43:34.926042 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:62676] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aekIxrRExf-1pAbSeJtdjAAAAYU"]
[Thu Apr 23 01:43:35.620522 2026] [:error] [pid 6250:tid 6276] [client 4.235.1.40:64756] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aekIxw-iZeQkqmQVfj5KVQAAAFY"]
[Thu Apr 23 01:43:36.315561 2026] [:error] [pid 23776:tid 23795] [client 4.235.1.40:35815] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aekIyLRExf-1pAbSeJtdjwAAAZE"]
[Thu Apr 23 01:43:37.238017 2026] [:error] [pid 6384:tid 6389] [client 4.235.1.40:10703] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/view.php"] [unique_id "aekIyT58M3t15ICeWHXOIQAAAMI"]
[Thu Apr 23 01:43:38.062830 2026] [:error] [pid 6384:tid 6407] [client 4.235.1.40:63317] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aekIyj58M3t15ICeWHXOIwAAANQ"]
[Thu Apr 23 01:43:38.892679 2026] [:error] [pid 6384:tid 6388] [client 4.235.1.40:65339] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aekIyj58M3t15ICeWHXOJQAAAME"]
[Thu Apr 23 01:43:40.367413 2026] [:error] [pid 6384:tid 6401] [client 4.235.1.40:62633] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aekIzD58M3t15ICeWHXOJgAAAM4"]
[Thu Apr 23 01:43:41.046491 2026] [:error] [pid 9085:tid 9095] [client 4.235.1.40:60403] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aekIzd-_-or9vQnlWnouBAAAAUg"]
[Thu Apr 23 01:43:42.071894 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:64766] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aekIzj58M3t15ICeWHXOJwAAANU"]
[Thu Apr 23 01:43:43.087657 2026] [:error] [pid 6252:tid 6325] [client 4.235.1.40:10714] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aekIz-tGYuiYb1nWBpSCagAAAQ0"]
[Thu Apr 23 01:43:44.263220 2026] [:error] [pid 6250:tid 6270] [client 4.235.1.40:64704] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aekI0A-iZeQkqmQVfj5KWgAAAFA"]
[Thu Apr 23 01:43:48.933747 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:62096] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aekI1D58M3t15ICeWHXOLwAAAMo"]
[Thu Apr 23 01:43:58.304764 2026] [proxy_fcgi:error] [pid 9085:tid 9097] [client 4.235.1.40:35806] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:43:58.572164 2026] [proxy_fcgi:error] [pid 9085:tid 9105] [client 4.235.1.40:35806] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:00.262506 2026] [proxy_fcgi:error] [pid 9085:tid 9091] [client 4.235.1.40:35806] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:00.526224 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.235.1.40:35806] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:00.791097 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 4.235.1.40:35806] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:01.051041 2026] [:error] [pid 9085:tid 9096] [client 4.235.1.40:35806] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aekI4d-_-or9vQnlWnouEAAAAUk"]
[Thu Apr 23 01:44:45.039753 2026] [proxy_fcgi:error] [pid 6252:tid 6334] [client 4.235.1.40:62184] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:45.040273 2026] [proxy_fcgi:error] [pid 9085:tid 9094] [client 4.235.1.40:64665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:45.304117 2026] [proxy_fcgi:error] [pid 9085:tid 9106] [client 4.235.1.40:64665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:45.586484 2026] [proxy_fcgi:error] [pid 9085:tid 9089] [client 4.235.1.40:64665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:45.850191 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 4.235.1.40:64665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:46.134997 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 4.235.1.40:64665] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:44:46.394502 2026] [:error] [pid 9085:tid 9096] [client 4.235.1.40:64665] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "aekJDt-_-or9vQnlWnoucAAAAUk"]
[Thu Apr 23 01:44:52.252061 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:63258] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error_log.php"] [unique_id "aekJFD58M3t15ICeWHXOwwAAAM8"]
[Thu Apr 23 01:45:29.329540 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:10705] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aekJObRExf-1pAbSeJtd9wAAAYk"]
[Thu Apr 23 01:45:33.313333 2026] [:error] [pid 6344:tid 6362] [client 4.235.1.40:62602] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws57.php"] [unique_id "aekJPUDOTF-pkQnDeUk9sAAAAA0"]
[Thu Apr 23 01:45:36.388439 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:63348] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aekJQN-_-or9vQnlWnouwAAAAUA"]
[Thu Apr 23 01:45:42.012456 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:30680] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws86.php"] [unique_id "aekJRrRExf-1pAbSeJteCgAAAYQ"]
[Thu Apr 23 01:45:47.963535 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:48.245156 2026] [proxy_fcgi:error] [pid 9085:tid 9109] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:48.537861 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:48.800645 2026] [proxy_fcgi:error] [pid 9085:tid 9087] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:49.063264 2026] [proxy_fcgi:error] [pid 9085:tid 9096] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:49.328520 2026] [proxy_fcgi:error] [pid 9085:tid 9111] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:49.593307 2026] [proxy_fcgi:error] [pid 9085:tid 9092] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:49.855309 2026] [proxy_fcgi:error] [pid 9085:tid 9095] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:50.117623 2026] [proxy_fcgi:error] [pid 9085:tid 9093] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:50.426172 2026] [proxy_fcgi:error] [pid 9085:tid 9090] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:50.690806 2026] [proxy_fcgi:error] [pid 9085:tid 9103] [client 4.235.1.40:35803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:45:51.194722 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:35803] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aekJT9-_-or9vQnlWnou8QAAAUo"]
[Thu Apr 23 01:45:52.453506 2026] [:error] [pid 6250:tid 6267] [client 4.235.1.40:62603] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aekJUA-iZeQkqmQVfj5KhQAAAE0"]
[Thu Apr 23 01:45:54.280962 2026] [:error] [pid 6344:tid 6359] [client 4.235.1.40:65399] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aekJUkDOTF-pkQnDeUk9xgAAAAo"]
[Thu Apr 23 01:45:57.383110 2026] [:error] [pid 6251:tid 6307] [client 4.235.1.40:64686] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sallu.php"] [unique_id "aekJVSsFAzbyObL-SQ6qxwAAAJY"]
[Thu Apr 23 01:45:58.347865 2026] [:error] [pid 6250:tid 6269] [client 4.235.1.40:10741] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aekJVg-iZeQkqmQVfj5KhgAAAE8"]
[Thu Apr 23 01:45:59.819629 2026] [:error] [pid 6344:tid 6352] [client 4.235.1.40:64737] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aekJV0DOTF-pkQnDeUk9zAAAAAM"]
[Thu Apr 23 01:46:02.448837 2026] [:error] [pid 6384:tid 6407] [client 4.235.1.40:60983] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aekJWj58M3t15ICeWHXPbgAAANQ"]
[Thu Apr 23 01:46:04.566876 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:64680] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tiny2.php"] [unique_id "aekJXD58M3t15ICeWHXPdQAAAMA"]
[Thu Apr 23 01:46:05.552954 2026] [:error] [pid 6250:tid 6266] [client 4.235.1.40:10709] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aekJXQ-iZeQkqmQVfj5KjQAAAEw"]
[Thu Apr 23 01:46:07.345515 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:30712] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aekJXz58M3t15ICeWHXPegAAAM8"]
[Thu Apr 23 01:46:08.756020 2026] [:error] [pid 6384:tid 6403] [client 4.235.1.40:63282] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aekJYD58M3t15ICeWHXPfgAAANA"]
[Thu Apr 23 01:46:13.891205 2026] [:error] [pid 6252:tid 6330] [client 4.235.1.40:65292] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aekJZetGYuiYb1nWBpSCtgAAARI"]
[Thu Apr 23 01:46:19.961362 2026] [:error] [pid 6251:tid 6300] [client 4.235.1.40:10745] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aekJaysFAzbyObL-SQ6q1QAAAI8"]
[Thu Apr 23 01:46:27.089794 2026] [:error] [pid 6344:tid 6362] [client 4.235.1.40:61492] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gz.php"] [unique_id "aekJc0DOTF-pkQnDeUk-AAAAAA0"]
[Thu Apr 23 01:46:34.034086 2026] [:error] [pid 6384:tid 6391] [client 4.235.1.40:63352] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aekJej58M3t15ICeWHXPrwAAAMQ"]
[Thu Apr 23 01:46:35.691386 2026] [:error] [pid 6251:tid 6286] [client 4.235.1.40:64707] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aekJeysFAzbyObL-SQ6q4AAAAIE"]
[Thu Apr 23 01:46:36.987253 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:65317] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aekJfN-_-or9vQnlWnovQAAAAVc"]
[Thu Apr 23 01:46:38.272251 2026] [:error] [pid 6251:tid 6309] [client 4.235.1.40:62200] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aekJfisFAzbyObL-SQ6q5AAAAJg"]
[Thu Apr 23 01:46:39.351883 2026] [:error] [pid 6251:tid 6287] [client 4.235.1.40:65317] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aekJfysFAzbyObL-SQ6q5QAAAII"]
[Thu Apr 23 01:46:40.259175 2026] [:error] [pid 6250:tid 6257] [client 4.235.1.40:64755] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aekJgA-iZeQkqmQVfj5KnwAAAEM"]
[Thu Apr 23 01:46:41.305392 2026] [:error] [pid 9085:tid 9088] [client 4.235.1.40:60329] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aekJgd-_-or9vQnlWnovTAAAAUE"]
[Thu Apr 23 01:46:42.090041 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:62659] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gecko.php"] [unique_id "aekJgj58M3t15ICeWHXPtwAAAMc"]
[Thu Apr 23 01:46:42.900601 2026] [:error] [pid 6344:tid 6353] [client 4.235.1.40:62679] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aekJgkDOTF-pkQnDeUk-DQAAAAQ"]
[Thu Apr 23 01:46:43.750276 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:63337] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aekJg9-_-or9vQnlWnovXQAAAVc"]
[Thu Apr 23 01:46:45.539202 2026] [:error] [pid 6384:tid 6411] [client 4.235.1.40:64698] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aekJhT58M3t15ICeWHXPvgAAANg"]
[Thu Apr 23 01:46:46.694921 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:63251] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "aekJht-_-or9vQnlWnovaQAAAVQ"]
[Thu Apr 23 01:46:48.545131 2026] [:error] [pid 6344:tid 6371] [client 4.235.1.40:63262] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aekJiEDOTF-pkQnDeUk-HAAAABY"]
[Thu Apr 23 01:46:51.241740 2026] [proxy_fcgi:error] [pid 6344:tid 6352] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:51.722643 2026] [proxy_fcgi:error] [pid 6344:tid 6365] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:51.987587 2026] [proxy_fcgi:error] [pid 6344:tid 6369] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:53.195558 2026] [proxy_fcgi:error] [pid 6344:tid 6357] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:53.459690 2026] [proxy_fcgi:error] [pid 6344:tid 6355] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:53.750814 2026] [proxy_fcgi:error] [pid 6344:tid 6361] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:54.015297 2026] [proxy_fcgi:error] [pid 6344:tid 6349] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:54.288660 2026] [proxy_fcgi:error] [pid 6344:tid 6350] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 01:46:54.565413 2026] [proxy_fcgi:error] [pid 6344:tid 6373] [client 4.235.1.40:10729] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.355317 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.642008 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:33.949282 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.235160 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.522880 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:34.815694 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.104069 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.394303 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:35.948489 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:36.228338 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:36.500811 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:36.774854 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:37.050926 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:37.367060 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:37.676293 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:37.959947 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:38.235996 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:38.511343 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 185.192.71.38:33985] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:42.446248 2026] [:error] [pid 65000:tid 65042] [client 185.192.71.38:33985] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7Lr6vRb9j6psK2ZbzuwAAAgk"]
[Thu Apr 23 09:51:43.844702 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.11:38443] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7L4V5EysYcTLjmwhsPwAAAdA"]
[Thu Apr 23 09:51:45.341311 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 91.230.225.18:61083] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:46.199625 2026] [:error] [pid 43083:tid 43097] [client 91.230.225.18:61083] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7MjC5hrvNXosL83INAQAAAMw"]
[Thu Apr 23 09:51:48.893321 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 91.230.225.11:32753] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:49.168688 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.11:32753] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7NYV5EysYcTLjmwhspwAAAcs"]
[Thu Apr 23 09:51:49.993851 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 91.230.225.13:49111] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:51.400990 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.13:49111] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7NzC5hrvNXosL83INUAAAANA"]
[Thu Apr 23 09:51:52.242913 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.30:55967] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7ODEP2_5RswrH8bHSggAAAAo"]
[Thu Apr 23 09:51:52.788793 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.24:51139] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7OJXyGZJFeAIDWtmLIwAAAUk"]
[Thu Apr 23 09:51:53.328904 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.200:32779] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7OTC5hrvNXosL83INdgAAAM4"]
[Thu Apr 23 09:51:53.909290 2026] [:error] [pid 25635:tid 25650] [client 185.92.25.113:49715] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7OcRxv6UsgRGKB3LzrQAAAQs"]
[Thu Apr 23 09:51:54.469154 2026] [:error] [pid 59700:tid 59715] [client 185.192.71.40:51659] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7OpXyGZJFeAIDWtmLPgAAAU0"]
[Thu Apr 23 09:51:55.360816 2026] [:error] [pid 43083:tid 43105] [client 91.230.225.21:55341] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7OzC5hrvNXosL83INlwAAANQ"]
[Thu Apr 23 09:51:55.958300 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 185.192.71.23:48035] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:56.512794 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.23:48035] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/filemanager.php"] [unique_id "ael7PDEP2_5RswrH8bHSpAAAABY"]
[Thu Apr 23 09:51:57.647422 2026] [:error] [pid 42971:tid 43010] [client 91.230.225.201:34019] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7PTEP2_5RswrH8bHSugAAABg"]
[Thu Apr 23 09:51:58.461459 2026] [:error] [pid 25635:tid 25642] [client 91.230.225.22:43735] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7PsRxv6UsgRGKB3LzzwAAAQM"]
[Thu Apr 23 09:51:59.051294 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 185.192.71.28:23687] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:51:59.333421 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.28:23687] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7PzEP2_5RswrH8bHSxwAAAAY"]
[Thu Apr 23 09:51:59.903998 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 91.230.225.196:28507] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:00.802292 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.196:28507] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:01.653039 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.196:28507] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7Qb6vRb9j6psK2Zb0aQAAAg0"]
[Thu Apr 23 09:52:02.200974 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 91.230.225.198:54613] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:02.488175 2026] [:error] [pid 64967:tid 64989] [client 91.230.225.198:54613] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7QoAV4GfOOdX8QzopKwAAAZQ"]
[Thu Apr 23 09:52:03.122300 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 185.192.71.28:52381] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:03.723854 2026] [:error] [pid 42972:tid 43028] [client 185.192.71.28:52381] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7Q8OAb-3sOknsk4c7pgAAAEw"]
[Thu Apr 23 09:52:04.611783 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.22:22015] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7RJXyGZJFeAIDWtmLpQAAAUo"]
[Thu Apr 23 09:52:05.500304 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 185.192.71.33:50047] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:05.994580 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 185.192.71.33:50047] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:06.560796 2026] [:error] [pid 42971:tid 42991] [client 185.192.71.33:50047] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7RjEP2_5RswrH8bHS_AAAAAU"]
[Thu Apr 23 09:52:07.564358 2026] [:error] [pid 43083:tid 43088] [client 185.192.71.26:53721] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7RzC5hrvNXosL83IOFgAAAMM"]
[Thu Apr 23 09:52:08.403939 2026] [:error] [pid 42971:tid 43003] [client 91.230.225.195:51239] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7SDEP2_5RswrH8bHTDQAAABE"]
[Thu Apr 23 09:52:08.965150 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.26:33949] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7SIV5EysYcTLjmwhtfQAAAdE"]
[Thu Apr 23 09:52:09.543025 2026] [:error] [pid 64967:tid 64979] [client 185.192.71.25:27361] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7SYAV4GfOOdX8QzopVgAAAYo"]
[Thu Apr 23 09:52:10.667601 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 91.230.225.208:25927] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:10.950195 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.208:25927] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7SpXyGZJFeAIDWtmL8gAAAU4"]
[Thu Apr 23 09:52:11.547145 2026] [:error] [pid 42972:tid 43030] [client 91.230.225.18:52827] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7S8OAb-3sOknsk4c77gAAAE4"]
[Thu Apr 23 09:52:12.466705 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.14:52837] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7TMOAb-3sOknsk4c7_gAAAEE"]
[Thu Apr 23 09:52:13.814440 2026] [proxy_fcgi:error] [pid 42973:tid 43048] [client 185.192.71.36:26321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:14.407280 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 185.192.71.36:26321] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:15.540352 2026] [:error] [pid 42973:tid 43046] [client 185.192.71.36:26321] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7T26I0QqmmmLTHE3rKQAAAIM"]
[Thu Apr 23 09:52:16.997041 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.18:52153] [client 91.230.225.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.18, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7UIV5EysYcTLjmwht1AAAAck"]
[Thu Apr 23 09:52:17.276758 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 91.230.225.18:52153] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:18.750573 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 91.230.225.18:52153] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:19.057076 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 91.230.225.18:52153] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:20.494411 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.18:52153] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7VIV5EysYcTLjmwhuHwAAAco"]
[Thu Apr 23 09:52:21.344648 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 185.92.25.113:25445] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:21.650699 2026] [:error] [pid 64967:tid 64979] [client 185.92.25.113:25445] [client 185.92.25.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.113, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7VYAV4GfOOdX8QzoprwAAAYo"]
[Thu Apr 23 09:52:22.218714 2026] [:error] [pid 64967:tid 64974] [client 185.92.25.113:25445] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7VoAV4GfOOdX8QzopuwAAAYU"]
[Thu Apr 23 09:52:27.466291 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 91.230.225.13:46933] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:28.036313 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.13:46933] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:28.623840 2026] [:error] [pid 59700:tid 59717] [client 91.230.225.13:46933] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7XJXyGZJFeAIDWtmMggAAAU8"]
[Thu Apr 23 09:52:29.171314 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 91.230.225.21:44549] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:30.040326 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 91.230.225.21:44549] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:30.617356 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 91.230.225.21:44549] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:31.230294 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 91.230.225.21:44549] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:31.521203 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.21:44549] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7XzC5hrvNXosL83IO6QAAAM0"]
[Thu Apr 23 09:52:32.087804 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 185.192.71.23:59951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:32.396087 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 185.192.71.23:59951] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:32.679104 2026] [:error] [pid 25635:tid 25656] [client 185.192.71.23:59951] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7YMRxv6UsgRGKB3L0rgAAARE"]
[Thu Apr 23 09:52:33.527290 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 91.230.225.23:23037] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:34.095788 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.23:23037] [client 91.230.225.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.23, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7Yr6vRb9j6psK2Zb1fwAAAg0"]
[Thu Apr 23 09:52:34.392449 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.23:23037] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7Yr6vRb9j6psK2Zb1gwAAAhU"]
[Thu Apr 23 09:52:37.776312 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 91.230.225.204:38379] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:43.483808 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 91.230.225.204:38379] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:43.762956 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.204:38379] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7a4V5EysYcTLjmwhvuAAAAcs"]
[Thu Apr 23 09:52:44.329465 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 185.192.71.37:41189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.262850 2026] [:error] [pid 59700:tid 59714] [client 185.192.71.37:41189] [client 185.192.71.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.37, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7bZXyGZJFeAIDWtmNIwAAAUw"]
[Thu Apr 23 09:52:45.590947 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 185.192.71.37:41189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:45.883303 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 185.192.71.37:41189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:46.176684 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 185.192.71.37:41189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:46.520124 2026] [:error] [pid 59700:tid 59707] [client 185.192.71.37:41189] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7bpXyGZJFeAIDWtmNMQAAAUU"]
[Thu Apr 23 09:52:47.097318 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 185.192.71.35:55751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:47.405857 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.35:55751] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7b26I0QqmmmLTHE3r-wAAAI4"]
[Thu Apr 23 09:53:23.953028 2026] [autoindex:error] [pid 65000:tid 65055] [client 185.192.71.32:23787] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 12:24:56.236017 2026] [:error] [pid 59700:tid 59726] [client 44.243.56.17:56045] [client 44.243.56.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.243.56.17, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aemfGJXyGZJFeAIDWtm97AAAAVg"]
[Thu Apr 23 12:24:56.246223 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 44.243.56.17:56045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:02:21.082983 2026] [proxy_fcgi:error] [pid 43083:tid 43109] [client 20.203.250.186:64210] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:02:21.322150 2026] [proxy_fcgi:error] [pid 43083:tid 43098] [client 20.203.250.186:64210] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:02:21.559196 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 20.203.250.186:64210] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:02:21.794798 2026] [:error] [pid 43083:tid 43102] [client 20.203.250.186:64210] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "aem17TC5hrvNXosL83JCzwAAANE"]
[Thu Apr 23 14:02:22.295918 2026] [:error] [pid 64998:tid 65018] [client 20.203.250.186:35544] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "aem17oV5EysYcTLjmwjMSQAAAdA"]
[Thu Apr 23 14:02:23.034443 2026] [:error] [pid 42973:tid 43046] [client 20.203.250.186:35526] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "aem1726I0QqmmmLTHE1-MAAAAIM"]
[Thu Apr 23 14:02:23.557085 2026] [:error] [pid 46953:tid 46969] [client 20.203.250.186:19058] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "aem170nlpdHh-P6wKbrzgwAAAk0"]
[Thu Apr 23 14:02:24.311072 2026] [:error] [pid 42973:tid 43067] [client 20.203.250.186:42640] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kcs.php"] [unique_id "aem18G6I0QqmmmLTHE1-OAAAAJg"]
[Thu Apr 23 14:02:24.836345 2026] [:error] [pid 42973:tid 43058] [client 20.203.250.186:46127] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kcs.php"] [unique_id "aem18G6I0QqmmmLTHE1-PAAAAI8"]
[Thu Apr 23 14:02:25.388728 2026] [:error] [pid 64998:tid 65020] [client 20.203.250.186:42629] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kcs.php"] [unique_id "aem18YV5EysYcTLjmwjMXQAAAdI"]
[Thu Apr 23 14:02:26.044623 2026] [:error] [pid 42973:tid 43048] [client 20.203.250.186:26638] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kcs.php"] [unique_id "aem18m6I0QqmmmLTHE1-QwAAAIU"]
[Thu Apr 23 14:02:26.691389 2026] [:error] [pid 42972:tid 43026] [client 20.203.250.186:26669] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "aem18sOAb-3sOknsk4eXwgAAAEo"]
[Thu Apr 23 14:02:27.262906 2026] [:error] [pid 42973:tid 43060] [client 20.203.250.186:53792] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "aem1826I0QqmmmLTHE1-SgAAAJE"]
[Thu Apr 23 14:02:27.890660 2026] [:error] [pid 42973:tid 43067] [client 20.203.250.186:50691] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "aem1826I0QqmmmLTHE1-TAAAAJg"]
[Thu Apr 23 14:02:28.524036 2026] [:error] [pid 25635:tid 25645] [client 20.203.250.186:46118] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/404.php"] [unique_id "aem19MRxv6UsgRGKB3IUAQAAAQY"]
[Thu Apr 23 14:02:29.034037 2026] [:error] [pid 42973:tid 43049] [client 20.203.250.186:61130] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aem19W6I0QqmmmLTHE1-WQAAAIY"]
[Thu Apr 23 14:02:29.833413 2026] [:error] [pid 42972:tid 43017] [client 20.203.250.186:61193] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aem19cOAb-3sOknsk4eXzgAAAEE"]
[Thu Apr 23 14:02:30.541523 2026] [:error] [pid 42972:tid 43030] [client 20.203.250.186:35564] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aem19sOAb-3sOknsk4eX0QAAAE4"]
[Thu Apr 23 14:02:31.313815 2026] [:error] [pid 42971:tid 43000] [client 20.203.250.186:41413] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "aem19zEP2_5RswrH8bH9qQAAAA4"]
[Thu Apr 23 14:02:31.813017 2026] [:error] [pid 64998:tid 65009] [client 20.203.250.186:41458] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file2.php"] [unique_id "aem194V5EysYcTLjmwjMewAAAcc"]
[Thu Apr 23 14:02:32.318640 2026] [:error] [pid 65000:tid 65029] [client 20.203.250.186:41460] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file2.php"] [unique_id "aem1-L6vRb9j6psK2ZaMiAAAAgA"]
[Thu Apr 23 14:02:32.853668 2026] [:error] [pid 42972:tid 43037] [client 20.203.250.186:45367] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file2.php"] [unique_id "aem1-MOAb-3sOknsk4eX2QAAAFU"]
[Thu Apr 23 14:02:34.263160 2026] [:error] [pid 59700:tid 59705] [client 20.203.250.186:48475] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file2.php"] [unique_id "aem1-pXyGZJFeAIDWtnP5AAAAUM"]
[Thu Apr 23 14:02:35.896526 2026] [:error] [pid 65000:tid 65032] [client 20.203.250.186:50170] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aem1-76vRb9j6psK2ZaMkAAAAgM"]
[Thu Apr 23 14:02:36.467960 2026] [:error] [pid 59700:tid 59718] [client 20.203.250.186:41434] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aem1_JXyGZJFeAIDWtnP5gAAAVA"]
[Thu Apr 23 14:02:37.218978 2026] [:error] [pid 42971:tid 43002] [client 20.203.250.186:29212] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aem1_TEP2_5RswrH8bH9sQAAABA"]
[Thu Apr 23 14:02:37.808923 2026] [:error] [pid 43083:tid 43091] [client 20.203.250.186:61219] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aem1_TC5hrvNXosL83JC3AAAAMY"]
[Thu Apr 23 14:02:38.405163 2026] [:error] [pid 64998:tid 65004] [client 20.203.250.186:50163] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aem1_oV5EysYcTLjmwjMiQAAAcI"]
[Thu Apr 23 14:02:38.877034 2026] [:error] [pid 42972:tid 43016] [client 20.203.250.186:25712] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aem1_sOAb-3sOknsk4eX5gAAAEA"]
[Thu Apr 23 14:02:39.358307 2026] [:error] [pid 42972:tid 43017] [client 20.203.250.186:61241] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aem1_8OAb-3sOknsk4eX6wAAAEE"]
[Thu Apr 23 14:02:39.865855 2026] [:error] [pid 65000:tid 65042] [client 20.203.250.186:26644] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aem1_76vRb9j6psK2ZaMnQAAAgk"]
[Thu Apr 23 14:02:40.368046 2026] [:error] [pid 42972:tid 43033] [client 20.203.250.186:48480] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aem2AMOAb-3sOknsk4eX8QAAAFE"]
[Thu Apr 23 14:02:40.843106 2026] [:error] [pid 65000:tid 65057] [client 20.203.250.186:53822] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aem2AL6vRb9j6psK2ZaMpAAAAhg"]
[Thu Apr 23 14:02:41.323676 2026] [:error] [pid 65000:tid 65040] [client 20.203.250.186:41469] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aem2Ab6vRb9j6psK2ZaMqgAAAgc"]
[Thu Apr 23 14:02:41.842898 2026] [:error] [pid 65000:tid 65052] [client 20.203.250.186:45368] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aem2Ab6vRb9j6psK2ZaMtgAAAhM"]
[Thu Apr 23 14:02:42.363960 2026] [:error] [pid 59700:tid 59706] [client 20.203.250.186:4908] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aem2ApXyGZJFeAIDWtnP9AAAAUQ"]
[Thu Apr 23 14:02:42.850806 2026] [:error] [pid 42972:tid 43038] [client 20.203.250.186:4890] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aem2AsOAb-3sOknsk4eX-QAAAFY"]
[Thu Apr 23 14:02:43.336716 2026] [:error] [pid 65000:tid 65041] [client 20.203.250.186:42678] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aem2A76vRb9j6psK2ZaMwAAAAgg"]
[Thu Apr 23 14:02:43.844674 2026] [:error] [pid 64967:tid 64975] [client 20.203.250.186:22257] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "aem2A4AV4GfOOdX8QzpMSAAAAYY"]
[Thu Apr 23 14:02:44.390793 2026] [:error] [pid 59700:tid 59722] [client 20.203.250.186:47355] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system_log.php"] [unique_id "aem2BJXyGZJFeAIDWtnP-gAAAVQ"]
[Thu Apr 23 14:02:44.883143 2026] [:error] [pid 65000:tid 65039] [client 20.203.250.186:29243] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system_log.php"] [unique_id "aem2BL6vRb9j6psK2ZaM0gAAAgY"]
[Thu Apr 23 14:02:45.393362 2026] [:error] [pid 65000:tid 65038] [client 20.203.250.186:45332] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system_log.php"] [unique_id "aem2Bb6vRb9j6psK2ZaM1QAAAgU"]
[Thu Apr 23 14:02:45.880485 2026] [:error] [pid 65000:tid 65031] [client 20.203.250.186:45343] [client 20.203.250.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system_log.php"] [unique_id "aem2Bb6vRb9j6psK2ZaM2wAAAgI"]
[Thu Apr 23 19:34:07.032264 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:07.305688 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:07.578899 2026] [proxy_fcgi:error] [pid 42972:tid 43027] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:07.851301 2026] [proxy_fcgi:error] [pid 42972:tid 43025] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:08.124067 2026] [proxy_fcgi:error] [pid 42972:tid 43038] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:08.396383 2026] [proxy_fcgi:error] [pid 42972:tid 43028] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:08.669813 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:08.951548 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:09.231809 2026] [proxy_fcgi:error] [pid 42972:tid 43026] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:09.531307 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 172.161.0.169:36401] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:34:09.808091 2026] [:error] [pid 42972:tid 43032] [client 172.161.0.169:36401] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeoDscOAb-3sOknsk4cPkgAAAFA"]
[Thu Apr 23 19:34:12.044841 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:28266] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeoDtL6vRb9j6psK2ZYzRQAAAhI"]
[Thu Apr 23 19:34:14.258449 2026] [:error] [pid 42971:tid 42992] [client 172.161.0.169:64549] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeoDtjEP2_5RswrH8bEeZAAAAAY"]
[Thu Apr 23 19:34:15.399895 2026] [:error] [pid 42973:tid 43049] [client 172.161.0.169:64542] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeoDt26I0QqmmmLTHE38rQAAAIY"]
[Thu Apr 23 19:34:16.266015 2026] [:error] [pid 42972:tid 43025] [client 172.161.0.169:36411] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeoDuMOAb-3sOknsk4cPnQAAAEk"]
[Thu Apr 23 19:34:19.433580 2026] [:error] [pid 42971:tid 43008] [client 172.161.0.169:64532] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeoDuzEP2_5RswrH8bEeaAAAABY"]
[Thu Apr 23 19:34:20.795213 2026] [:error] [pid 42973:tid 43059] [client 172.161.0.169:52623] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeoDvG6I0QqmmmLTHE38sQAAAJA"]
[Thu Apr 23 19:34:23.298814 2026] [:error] [pid 43083:tid 43101] [client 172.161.0.169:39472] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeoDvzC5hrvNXosL83JpDAAAANA"]
[Thu Apr 23 19:34:25.052998 2026] [:error] [pid 64998:tid 65015] [client 172.161.0.169:65202] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aeoDwYV5EysYcTLjmwhA6AAAAc0"]
[Thu Apr 23 19:34:27.798426 2026] [:error] [pid 43083:tid 43090] [client 172.161.0.169:39048] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aeoDwzC5hrvNXosL83JpEAAAAMU"]
[Thu Apr 23 19:34:29.730883 2026] [:error] [pid 42973:tid 43045] [client 172.161.0.169:24465] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aeoDxW6I0QqmmmLTHE38vAAAAII"]
[Thu Apr 23 19:34:31.230016 2026] [:error] [pid 64998:tid 65003] [client 172.161.0.169:17678] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aeoDx4V5EysYcTLjmwhA8QAAAcE"]
[Thu Apr 23 19:34:33.234929 2026] [:error] [pid 42972:tid 43020] [client 172.161.0.169:64529] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aeoDycOAb-3sOknsk4cPqgAAAEQ"]
[Thu Apr 23 19:34:34.333807 2026] [:error] [pid 42972:tid 43036] [client 172.161.0.169:17696] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aeoDysOAb-3sOknsk4cPrQAAAFQ"]
[Thu Apr 23 19:34:37.761978 2026] [:error] [pid 64998:tid 65014] [client 172.161.0.169:28273] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aeoDzYV5EysYcTLjmwhBMgAAAcw"]
[Thu Apr 23 19:34:39.176358 2026] [:error] [pid 64967:tid 64990] [client 172.161.0.169:28235] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s1.php"] [unique_id "aeoDz4AV4GfOOdX8Qzpq9AAAAZU"]
[Thu Apr 23 19:34:41.652268 2026] [:error] [pid 65000:tid 65052] [client 172.161.0.169:29565] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeoD0b6vRb9j6psK2ZYzdQAAAhM"]
[Thu Apr 23 19:34:44.709273 2026] [:error] [pid 64967:tid 64971] [client 172.161.0.169:44358] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeoD1IAV4GfOOdX8Qzpq9QAAAYI"]
[Thu Apr 23 19:34:46.339285 2026] [:error] [pid 65000:tid 65031] [client 172.161.0.169:44386] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeoD1r6vRb9j6psK2ZYzfgAAAgI"]
[Thu Apr 23 19:34:47.991067 2026] [:error] [pid 59700:tid 59716] [client 172.161.0.169:54052] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aeoD15XyGZJFeAIDWtkRgwAAAU4"]
[Thu Apr 23 19:34:49.232384 2026] [:error] [pid 65000:tid 65043] [client 172.161.0.169:54045] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeoD2b6vRb9j6psK2ZYziAAAAgo"]
[Thu Apr 23 19:34:51.722557 2026] [:error] [pid 42973:tid 43066] [client 172.161.0.169:21759] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeoD226I0QqmmmLTHE380wAAAJc"]
[Thu Apr 23 19:34:53.900306 2026] [:error] [pid 59700:tid 59723] [client 172.161.0.169:19802] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeoD3ZXyGZJFeAIDWtkRiQAAAVU"]
[Thu Apr 23 19:34:57.075111 2026] [:error] [pid 59700:tid 59722] [client 172.161.0.169:62067] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aeoD4ZXyGZJFeAIDWtkRkAAAAVQ"]
[Thu Apr 23 19:34:59.867174 2026] [:error] [pid 65000:tid 65032] [client 172.161.0.169:62037] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeoD476vRb9j6psK2ZYzoQAAAgM"]
[Thu Apr 23 19:35:08.704648 2026] [:error] [pid 42972:tid 43024] [client 172.161.0.169:30839] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aeoD7MOAb-3sOknsk4cP2QAAAEg"]
[Thu Apr 23 19:35:10.066426 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:11.377501 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:11.676729 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:11.952535 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:12.248408 2026] [proxy_fcgi:error] [pid 59700:tid 59703] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:12.529743 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:12.805755 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:13.102226 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:13.378742 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:13.811972 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:14.139484 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 172.161.0.169:40785] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:35:14.413771 2026] [:error] [pid 59700:tid 59721] [client 172.161.0.169:40785] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeoD8pXyGZJFeAIDWtkRsAAAAVM"]
[Thu Apr 23 19:35:15.557455 2026] [:error] [pid 64998:tid 65021] [client 172.161.0.169:7066] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeoD84V5EysYcTLjmwhBWAAAAdM"]
[Thu Apr 23 19:35:16.388847 2026] [:error] [pid 42972:tid 43027] [client 172.161.0.169:40720] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeoD9MOAb-3sOknsk4cP3QAAAEs"]
[Thu Apr 23 19:35:18.418153 2026] [:error] [pid 65000:tid 65037] [client 172.161.0.169:6443] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeoD9r6vRb9j6psK2ZYzxQAAAgQ"]
[Thu Apr 23 19:35:19.205030 2026] [:error] [pid 42972:tid 43035] [client 172.161.0.169:53228] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeoD98OAb-3sOknsk4cP4gAAAFM"]
[Thu Apr 23 19:35:20.335823 2026] [:error] [pid 65000:tid 65029] [client 172.161.0.169:7102] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeoD-L6vRb9j6psK2ZYzygAAAgA"]
[Thu Apr 23 19:35:21.020823 2026] [:error] [pid 43083:tid 43089] [client 172.161.0.169:6761] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeoD-TC5hrvNXosL83JpIwAAAMQ"]
[Thu Apr 23 19:35:22.192446 2026] [:error] [pid 42972:tid 43037] [client 172.161.0.169:14725] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aeoD-sOAb-3sOknsk4cP6QAAAFU"]
[Thu Apr 23 19:35:28.854322 2026] [:error] [pid 42973:tid 43064] [client 172.161.0.169:34561] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeoEAG6I0QqmmmLTHE383AAAAJU"]
[Thu Apr 23 19:35:29.970104 2026] [:error] [pid 43083:tid 43096] [client 172.161.0.169:39142] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeoEATC5hrvNXosL83JpJwAAAMs"]
[Thu Apr 23 19:35:30.657822 2026] [:error] [pid 65000:tid 65032] [client 172.161.0.169:30766] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeoEAr6vRb9j6psK2ZYz4QAAAgM"]
[Thu Apr 23 19:35:31.373747 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:37750] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wps.php"] [unique_id "aeoEA76vRb9j6psK2ZYz4wAAAhI"]
[Thu Apr 23 19:35:32.088424 2026] [:error] [pid 65000:tid 65044] [client 172.161.0.169:35173] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeoEBL6vRb9j6psK2ZYz5QAAAgs"]
[Thu Apr 23 19:35:32.811398 2026] [:error] [pid 42973:tid 43047] [client 172.161.0.169:37702] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeoEBG6I0QqmmmLTHE384gAAAIQ"]
[Thu Apr 23 19:35:33.772486 2026] [:error] [pid 59700:tid 59717] [client 172.161.0.169:35178] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeoEBZXyGZJFeAIDWtkRsgAAAU8"]
[Thu Apr 23 19:35:34.796660 2026] [:error] [pid 42972:tid 43038] [client 172.161.0.169:54120] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeoEBsOAb-3sOknsk4cP8AAAAFY"]
[Thu Apr 23 19:35:35.880522 2026] [:error] [pid 42972:tid 43035] [client 172.161.0.169:33914] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeoEB8OAb-3sOknsk4cP8wAAAFM"]
[Thu Apr 23 19:35:36.797009 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:57120] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeoECL6vRb9j6psK2ZYz7wAAAgk"]
[Thu Apr 23 19:35:37.876001 2026] [:error] [pid 65000:tid 65056] [client 172.161.0.169:57104] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeoECb6vRb9j6psK2ZYz8wAAAhc"]
[Thu Apr 23 19:35:38.588624 2026] [:error] [pid 65000:tid 65043] [client 172.161.0.169:26401] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/12.php"] [unique_id "aeoECr6vRb9j6psK2ZYz9QAAAgo"]
[Thu Apr 23 19:35:39.705186 2026] [:error] [pid 25635:tid 25661] [client 172.161.0.169:36898] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeoEC8Rxv6UsgRGKB3IrUAAAARY"]
[Thu Apr 23 19:35:42.057515 2026] [:error] [pid 46953:tid 46969] [client 172.161.0.169:26412] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeoEDknlpdHh-P6wKbomCQAAAk0"]
[Thu Apr 23 19:35:49.118262 2026] [:error] [pid 42972:tid 43022] [client 172.161.0.169:62067] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeoEFcOAb-3sOknsk4cP-wAAAEY"]
[Thu Apr 23 19:35:52.814812 2026] [:error] [pid 65000:tid 65057] [client 172.161.0.169:31393] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "aeoEGL6vRb9j6psK2ZY0CAAAAhg"]
[Thu Apr 23 19:35:55.876819 2026] [:error] [pid 43083:tid 43088] [client 172.161.0.169:59117] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeoEGzC5hrvNXosL83JpNAAAAMM"]
[Thu Apr 23 19:35:57.519864 2026] [:error] [pid 65000:tid 65030] [client 172.161.0.169:36884] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeoEHb6vRb9j6psK2ZY0EQAAAgE"]
[Thu Apr 23 19:35:59.426792 2026] [:error] [pid 64998:tid 65014] [client 172.161.0.169:35196] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeoEH4V5EysYcTLjmwhBdgAAAcw"]
[Thu Apr 23 19:36:00.784969 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:37653] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/link.php"] [unique_id "aeoEIL6vRb9j6psK2ZY0GQAAAgk"]
[Thu Apr 23 19:36:02.294660 2026] [:error] [pid 42972:tid 43038] [client 172.161.0.169:15826] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeoEIsOAb-3sOknsk4cQDgAAAFY"]
[Thu Apr 23 19:36:02.899277 2026] [:error] [pid 64998:tid 65009] [client 172.161.0.169:41817] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeoEIoV5EysYcTLjmwhBgQAAAcc"]
[Thu Apr 23 19:36:04.195579 2026] [:error] [pid 42972:tid 43026] [client 172.161.0.169:33869] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeoEJMOAb-3sOknsk4cQEQAAAEo"]
[Thu Apr 23 19:36:05.439162 2026] [:error] [pid 25635:tid 25645] [client 172.161.0.169:36866] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dass.php"] [unique_id "aeoEJcRxv6UsgRGKB3IrXAAAAQY"]
[Thu Apr 23 19:36:06.834847 2026] [:error] [pid 42973:tid 43064] [client 172.161.0.169:41853] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeoEJm6I0QqmmmLTHE39BwAAAJU"]
[Thu Apr 23 19:36:08.431009 2026] [:error] [pid 64998:tid 65009] [client 172.161.0.169:15855] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeoEKIV5EysYcTLjmwhBhgAAAcc"]
[Thu Apr 23 19:36:10.008860 2026] [:error] [pid 65000:tid 65049] [client 172.161.0.169:15820] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeoEKr6vRb9j6psK2ZY0HAAAAhA"]
[Thu Apr 23 19:36:10.888657 2026] [:error] [pid 43083:tid 43101] [client 172.161.0.169:35136] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws66.php"] [unique_id "aeoEKjC5hrvNXosL83JpOgAAANA"]
[Thu Apr 23 19:36:13.131282 2026] [:error] [pid 42972:tid 43018] [client 172.161.0.169:60537] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "aeoELcOAb-3sOknsk4cQFwAAAEI"]
[Thu Apr 23 19:36:15.456287 2026] [proxy_fcgi:error] [pid 42972:tid 43034] [client 172.161.0.169:31413] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:15.695799 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 172.161.0.169:31413] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:15.939758 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 172.161.0.169:31413] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:16.179328 2026] [:error] [pid 42972:tid 43025] [client 172.161.0.169:31413] [client 172.161.0.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aeoEMMOAb-3sOknsk4cQHgAAAEk"]
[Thu Apr 23 19:36:17.308123 2026] [proxy_fcgi:error] [pid 46953:tid 46960] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:17.547615 2026] [proxy_fcgi:error] [pid 46953:tid 46978] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:17.784786 2026] [proxy_fcgi:error] [pid 46953:tid 46976] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:18.033050 2026] [proxy_fcgi:error] [pid 46953:tid 46965] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:18.278315 2026] [proxy_fcgi:error] [pid 46953:tid 46981] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:18.515834 2026] [proxy_fcgi:error] [pid 46953:tid 46967] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:18.773350 2026] [proxy_fcgi:error] [pid 46953:tid 46972] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:19.013206 2026] [proxy_fcgi:error] [pid 46953:tid 46980] [client 172.161.0.169:6291] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:36:19.248151 2026] [:error] [pid 46953:tid 46957] [client 172.161.0.169:6291] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeoEM0nlpdHh-P6wKbomGAAAAkE"]
[Thu Apr 23 19:36:20.171621 2026] [:error] [pid 25635:tid 25651] [client 172.161.0.169:51516] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeoENMRxv6UsgRGKB3IrYgAAAQw"]
[Thu Apr 23 19:36:25.917018 2026] [:error] [pid 59700:tid 59704] [client 172.161.0.169:6203] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeoEOZXyGZJFeAIDWtkRvwAAAUI"]
[Thu Apr 23 19:36:30.269382 2026] [:error] [pid 42973:tid 43053] [client 172.161.0.169:37693] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeoEPm6I0QqmmmLTHE39GwAAAIo"]
[Thu Apr 23 19:36:32.622344 2026] [:error] [pid 42973:tid 43054] [client 172.161.0.169:15811] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeoEQG6I0QqmmmLTHE39IgAAAIs"]
[Thu Apr 23 19:36:37.089939 2026] [:error] [pid 59700:tid 59719] [client 172.161.0.169:31378] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeoERZXyGZJFeAIDWtkR0AAAAVE"]
[Thu Apr 23 19:36:40.036504 2026] [:error] [pid 43083:tid 43099] [client 172.161.0.169:21024] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeoESDC5hrvNXosL83JpXQAAAM4"]
[Thu Apr 23 19:36:43.473186 2026] [:error] [pid 59700:tid 59724] [client 172.161.0.169:21004] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeoES5XyGZJFeAIDWtkR1QAAAVY"]
[Thu Apr 23 19:36:46.175369 2026] [:error] [pid 25635:tid 25663] [client 172.161.0.169:59081] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeoETsRxv6UsgRGKB3IrbAAAARg"]
[Thu Apr 23 19:36:46.876058 2026] [:error] [pid 42973:tid 43057] [client 172.161.0.169:21052] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeoETm6I0QqmmmLTHE39LQAAAI4"]
[Thu Apr 23 19:36:50.591475 2026] [:error] [pid 42973:tid 43066] [client 172.161.0.169:15262] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeoEUm6I0QqmmmLTHE39MAAAAJc"]
[Thu Apr 23 19:36:51.181386 2026] [:error] [pid 25635:tid 25640] [client 172.161.0.169:41837] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wglum1.php"] [unique_id "aeoEU8Rxv6UsgRGKB3IrcAAAAQE"]
[Thu Apr 23 19:36:53.118141 2026] [:error] [pid 25635:tid 25642] [client 172.161.0.169:29458] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeoEVcRxv6UsgRGKB3IrdwAAAQM"]
[Thu Apr 23 19:36:54.470132 2026] [:error] [pid 42973:tid 43043] [client 172.161.0.169:15860] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeoEVm6I0QqmmmLTHE39MgAAAIA"]
[Thu Apr 23 19:37:00.266403 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:51504] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeoEXL6vRb9j6psK2ZY0MAAAAhI"]
[Thu Apr 23 19:37:02.565665 2026] [:error] [pid 64998:tid 65020] [client 172.161.0.169:15819] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ng.php"] [unique_id "aeoEXoV5EysYcTLjmwhB3QAAAdI"]
[Thu Apr 23 19:37:05.790170 2026] [:error] [pid 64998:tid 65012] [client 172.161.0.169:37632] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aeoEYYV5EysYcTLjmwhB7AAAAco"]
[Thu Apr 23 19:37:09.615910 2026] [:error] [pid 46953:tid 46971] [client 172.161.0.169:6718] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aeoEZUnlpdHh-P6wKbomKwAAAk8"]
[Thu Apr 23 19:37:10.569806 2026] [:error] [pid 59700:tid 59711] [client 172.161.0.169:6673] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aeoEZpXyGZJFeAIDWtkR4gAAAUk"]
[Thu Apr 23 19:37:11.673558 2026] [:error] [pid 64998:tid 65016] [client 172.161.0.169:31420] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "aeoEZ4V5EysYcTLjmwhB-gAAAc4"]
[Thu Apr 23 19:37:13.065734 2026] [:error] [pid 65000:tid 65048] [client 172.161.0.169:31389] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aeoEab6vRb9j6psK2ZY0RwAAAg8"]
[Thu Apr 23 19:37:14.577867 2026] [:error] [pid 65000:tid 65049] [client 172.161.0.169:36885] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aeoEar6vRb9j6psK2ZY0SwAAAhA"]
[Thu Apr 23 19:37:17.755611 2026] [:error] [pid 42972:tid 43040] [client 172.161.0.169:36882] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aeoEbcOAb-3sOknsk4cQVAAAAFg"]
[Thu Apr 23 19:37:18.828395 2026] [:error] [pid 42972:tid 43033] [client 172.161.0.169:31385] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xynz.php"] [unique_id "aeoEbsOAb-3sOknsk4cQVgAAAFE"]
[Thu Apr 23 19:37:21.596802 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:21.842618 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:22.092605 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:22.345533 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:22.585009 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:22.823320 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:23.061595 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:23.311616 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:23.548881 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:23.786797 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 172.161.0.169:21021] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:37:24.031679 2026] [:error] [pid 59700:tid 59720] [client 172.161.0.169:21021] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeoEdJXyGZJFeAIDWtkR8wAAAVI"]
[Thu Apr 23 19:37:27.612559 2026] [:error] [pid 42973:tid 43061] [client 172.161.0.169:21008] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeoEd26I0QqmmmLTHE39VQAAAJI"]
[Thu Apr 23 19:37:30.342795 2026] [:error] [pid 65000:tid 65051] [client 172.161.0.169:51503] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeoEer6vRb9j6psK2ZY0lwAAAhI"]
[Thu Apr 23 19:37:34.726499 2026] [:error] [pid 65000:tid 65052] [client 172.161.0.169:54130] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeoEfr6vRb9j6psK2ZY0rwAAAhM"]
[Thu Apr 23 19:37:36.555891 2026] [:error] [pid 42973:tid 43051] [client 172.161.0.169:60497] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeoEgG6I0QqmmmLTHE39XgAAAIg"]
[Thu Apr 23 19:37:40.631792 2026] [:error] [pid 59700:tid 59718] [client 172.161.0.169:22273] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeoEhJXyGZJFeAIDWtkSBwAAAVA"]
[Thu Apr 23 19:37:41.550402 2026] [:error] [pid 46953:tid 46980] [client 172.161.0.169:41259] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeoEhUnlpdHh-P6wKbomQwAAAlc"]
[Thu Apr 23 19:37:43.418496 2026] [:error] [pid 65000:tid 65030] [client 172.161.0.169:53145] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aeoEh76vRb9j6psK2ZY07wAAAgE"]
[Thu Apr 23 19:37:44.350832 2026] [:error] [pid 42973:tid 43056] [client 172.161.0.169:43865] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeoEiG6I0QqmmmLTHE39bAAAAI0"]
[Thu Apr 23 19:37:46.132457 2026] [:error] [pid 65000:tid 65046] [client 172.161.0.169:6389] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeoEir6vRb9j6psK2ZY0-gAAAg0"]
[Thu Apr 23 19:37:47.984319 2026] [:error] [pid 42973:tid 43067] [client 172.161.0.169:29556] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeoEi26I0QqmmmLTHE39ggAAAJg"]
[Thu Apr 23 19:37:48.786307 2026] [:error] [pid 42971:tid 42988] [client 172.161.0.169:15799] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeoEjDEP2_5RswrH8bEejwAAAAI"]
[Thu Apr 23 19:37:49.903767 2026] [:error] [pid 42972:tid 43025] [client 172.161.0.169:54070] [client 172.161.0.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeoEjcOAb-3sOknsk4cQewAAAEk"]
[Thu Apr 23 19:37:51.201497 2026] [:error] [pid 42971:tid 43006] [client 172.161.0.169:6353] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "aeoEjzEP2_5RswrH8bEekwAAABQ"]
[Thu Apr 23 19:37:52.623933 2026] [:error] [pid 59700:tid 59711] [client 172.161.0.169:15792] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "aeoEkJXyGZJFeAIDWtkSDgAAAUk"]
[Thu Apr 23 19:37:54.397436 2026] [:error] [pid 46953:tid 46961] [client 172.161.0.169:29533] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "aeoEkknlpdHh-P6wKbomWAAAAkU"]
[Thu Apr 23 19:37:56.397267 2026] [:error] [pid 42972:tid 43035] [client 172.161.0.169:43841] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class.php"] [unique_id "aeoElMOAb-3sOknsk4cQkgAAAFM"]
[Thu Apr 23 19:37:58.440772 2026] [:error] [pid 59700:tid 59710] [client 172.161.0.169:47355] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeoElpXyGZJFeAIDWtkSGwAAAUg"]
[Thu Apr 23 19:38:00.360657 2026] [:error] [pid 64998:tid 65011] [client 172.161.0.169:15758] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeoEmIV5EysYcTLjmwhCHgAAAck"]
[Thu Apr 23 19:38:03.490702 2026] [:error] [pid 42972:tid 43032] [client 172.161.0.169:29521] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeoEm8OAb-3sOknsk4cQxwAAAFA"]
[Thu Apr 23 19:38:05.971613 2026] [:error] [pid 59700:tid 59707] [client 172.161.0.169:62000] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "aeoEnZXyGZJFeAIDWtkSIwAAAUU"]
[Thu Apr 23 19:38:09.295462 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:54016] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeoEob6vRb9j6psK2ZY1MgAAAgk"]
[Thu Apr 23 19:38:10.727585 2026] [:error] [pid 59700:tid 59702] [client 172.161.0.169:43783] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeoEopXyGZJFeAIDWtkSJQAAAUA"]
[Thu Apr 23 19:38:11.722428 2026] [:error] [pid 42972:tid 43027] [client 172.161.0.169:54051] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeoEo8OAb-3sOknsk4cQzwAAAEs"]
[Thu Apr 23 19:38:12.296931 2026] [:error] [pid 42972:tid 43026] [client 172.161.0.169:54025] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws85.php"] [unique_id "aeoEpMOAb-3sOknsk4cQ0AAAAEo"]
[Thu Apr 23 19:38:13.515881 2026] [:error] [pid 42971:tid 43008] [client 172.161.0.169:23647] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "aeoEpTEP2_5RswrH8bEemwAAABY"]
[Thu Apr 23 19:38:18.046730 2026] [:error] [pid 59700:tid 59719] [client 172.161.0.169:6346] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "aeoEqpXyGZJFeAIDWtkSMQAAAVE"]
[Thu Apr 23 19:38:18.959125 2026] [:error] [pid 42972:tid 43026] [client 172.161.0.169:43801] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zogy1.php"] [unique_id "aeoEqsOAb-3sOknsk4cQ2QAAAEo"]
[Thu Apr 23 19:38:24.584462 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:24.822186 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:25.071019 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:25.317224 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:26.783878 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:27.021707 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:27.261727 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:27.499343 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:27.738099 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:27.984416 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:28.229917 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 172.161.0.169:21698] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:38:28.464053 2026] [:error] [pid 65000:tid 65040] [client 172.161.0.169:21698] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeoEtL6vRb9j6psK2ZY1UAAAAgc"]
[Thu Apr 23 19:38:32.861074 2026] [:error] [pid 64998:tid 65002] [client 172.161.0.169:18971] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeoEuIV5EysYcTLjmwhCagAAAcA"]
[Thu Apr 23 19:38:35.021977 2026] [:error] [pid 42972:tid 43034] [client 172.161.0.169:6585] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeoEu8OAb-3sOknsk4cQ7gAAAFI"]
[Thu Apr 23 19:38:37.273321 2026] [:error] [pid 42973:tid 43055] [client 172.161.0.169:40193] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeoEvW6I0QqmmmLTHE39uAAAAIw"]
[Thu Apr 23 19:38:39.151076 2026] [:error] [pid 65000:tid 65055] [client 172.161.0.169:61998] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeoEv76vRb9j6psK2ZY1aQAAAhY"]
[Thu Apr 23 19:38:41.040947 2026] [:error] [pid 65000:tid 65043] [client 172.161.0.169:15785] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeoEwb6vRb9j6psK2ZY1kAAAAgo"]
[Thu Apr 23 19:38:44.140804 2026] [:error] [pid 59700:tid 59710] [client 172.161.0.169:29544] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeoExJXyGZJFeAIDWtkSTQAAAUg"]
[Thu Apr 23 19:38:46.017547 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:6378] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aeoExr6vRb9j6psK2ZY1pQAAAgk"]
[Thu Apr 23 19:38:48.083387 2026] [:error] [pid 42972:tid 43025] [client 172.161.0.169:44414] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeoEyMOAb-3sOknsk4cRAQAAAEk"]
[Thu Apr 23 19:38:51.725633 2026] [:error] [pid 65000:tid 65030] [client 172.161.0.169:44406] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeoEy76vRb9j6psK2ZY1ugAAAgE"]
[Thu Apr 23 19:38:52.651628 2026] [:error] [pid 42972:tid 43023] [client 172.161.0.169:43886] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeoEzMOAb-3sOknsk4cRCgAAAEc"]
[Thu Apr 23 19:38:53.612388 2026] [:error] [pid 42973:tid 43053] [client 172.161.0.169:54031] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a7.php"] [unique_id "aeoEzW6I0QqmmmLTHE394gAAAIo"]
[Thu Apr 23 19:38:55.662058 2026] [:error] [pid 65000:tid 65050] [client 172.161.0.169:43839] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeoEz76vRb9j6psK2ZY1wQAAAhE"]
[Thu Apr 23 19:38:57.316219 2026] [:error] [pid 42973:tid 43061] [client 172.161.0.169:54069] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeoE0W6I0QqmmmLTHE395AAAAJI"]
[Thu Apr 23 19:38:59.780857 2026] [:error] [pid 65000:tid 65047] [client 172.161.0.169:65250] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeoE076vRb9j6psK2ZY11gAAAg4"]
[Thu Apr 23 19:39:04.233481 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:43802] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "aeoE2L6vRb9j6psK2ZY16gAAAgk"]
[Thu Apr 23 19:39:06.577637 2026] [:error] [pid 59700:tid 59723] [client 172.161.0.169:53702] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeoE2pXyGZJFeAIDWtkSXgAAAVU"]
[Thu Apr 23 19:39:08.222484 2026] [:error] [pid 42973:tid 43059] [client 172.161.0.169:6547] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeoE3G6I0QqmmmLTHE397gAAAJA"]
[Thu Apr 23 19:39:11.376391 2026] [:error] [pid 42972:tid 43017] [client 172.161.0.169:43794] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeoE38OAb-3sOknsk4cRKAAAAEE"]
[Thu Apr 23 19:39:13.404578 2026] [:error] [pid 46953:tid 46965] [client 172.161.0.169:65258] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeoE4UnlpdHh-P6wKbomcAAAAkk"]
[Thu Apr 23 19:39:17.034822 2026] [:error] [pid 65000:tid 65042] [client 172.161.0.169:19812] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeoE5b6vRb9j6psK2ZY2CQAAAgk"]
[Thu Apr 23 19:39:21.797503 2026] [:error] [pid 42972:tid 43040] [client 172.161.0.169:47337] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeoE6cOAb-3sOknsk4cROQAAAFg"]
[Thu Apr 23 19:39:23.959576 2026] [:error] [pid 64998:tid 65022] [client 172.161.0.169:61952] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/areak1.php"] [unique_id "aeoE64V5EysYcTLjmwhCxwAAAdQ"]
[Thu Apr 23 19:39:34.089765 2026] [proxy_fcgi:error] [pid 59700:tid 59716] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:34.361907 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:34.632763 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:34.903704 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:35.175372 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:35.447341 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:35.720799 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:36.000246 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:36.284965 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:36.555571 2026] [proxy_fcgi:error] [pid 59700:tid 59719] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:36.826282 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 172.161.0.169:41342] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 19:39:37.097942 2026] [:error] [pid 59700:tid 59718] [client 172.161.0.169:41342] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeoE-ZXyGZJFeAIDWtkSnAAAAVA"]
[Thu Apr 23 19:39:38.558479 2026] [:error] [pid 65000:tid 65032] [client 172.161.0.169:65272] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeoE-r6vRb9j6psK2ZY2IQAAAgM"]
[Thu Apr 23 19:39:40.890539 2026] [:error] [pid 42973:tid 43053] [client 172.161.0.169:44408] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeoE_G6I0QqmmmLTHE3-FQAAAIo"]
[Thu Apr 23 19:39:42.222062 2026] [:error] [pid 46953:tid 46971] [client 172.161.0.169:65237] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aeoE_knlpdHh-P6wKbomiQAAAk8"]
[Thu Apr 23 19:39:45.476581 2026] [:error] [pid 42972:tid 43040] [client 172.161.0.169:43854] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeoFAcOAb-3sOknsk4cRXwAAAFg"]
[Thu Apr 23 19:39:49.576445 2026] [:error] [pid 42973:tid 43049] [client 172.161.0.169:15793] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeoFBW6I0QqmmmLTHE3-KAAAAIY"]
[Thu Apr 23 19:39:51.642293 2026] [:error] [pid 65000:tid 65049] [client 172.161.0.169:6337] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeoFB76vRb9j6psK2ZY2QQAAAhA"]
[Thu Apr 23 19:39:53.661710 2026] [:error] [pid 42972:tid 43035] [client 172.161.0.169:41314] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeoFCcOAb-3sOknsk4cRZgAAAFM"]
[Thu Apr 23 19:39:57.367097 2026] [:error] [pid 64998:tid 65022] [client 172.161.0.169:40241] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeoFDYV5EysYcTLjmwhC7QAAAdQ"]
[Thu Apr 23 19:40:01.974374 2026] [:error] [pid 42972:tid 43017] [client 172.161.0.169:6356] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeoFEcOAb-3sOknsk4cRcgAAAEE"]
[Thu Apr 23 19:40:05.214992 2026] [:error] [pid 64998:tid 65018] [client 172.161.0.169:40211] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeoFFYV5EysYcTLjmwhC_gAAAdA"]
[Thu Apr 23 19:40:07.401113 2026] [:error] [pid 46953:tid 46957] [client 172.161.0.169:15803] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws84.php"] [unique_id "aeoFF0nlpdHh-P6wKbommQAAAkE"]
[Thu Apr 23 19:40:11.718154 2026] [:error] [pid 65000:tid 65045] [client 172.161.0.169:23629] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeoFG76vRb9j6psK2ZY2UQAAAgw"]
[Thu Apr 23 19:40:12.914519 2026] [:error] [pid 64967:tid 64993] [client 172.161.0.169:29522] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeoFHIAV4GfOOdX8QzprSgAAAZg"]
[Thu Apr 23 19:40:14.715500 2026] [:error] [pid 64967:tid 64986] [client 172.161.0.169:47319] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeoFHoAV4GfOOdX8QzprTgAAAZE"]
[Thu Apr 23 19:40:17.747415 2026] [:error] [pid 64998:tid 65018] [client 172.161.0.169:23636] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws61.php"] [unique_id "aeoFIYV5EysYcTLjmwhDDgAAAdA"]
[Thu Apr 23 19:40:19.155197 2026] [:error] [pid 64998:tid 65007] [client 172.161.0.169:62006] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeoFI4V5EysYcTLjmwhDFgAAAcU"]
[Thu Apr 23 19:40:20.400362 2026] [:error] [pid 64998:tid 65021] [client 172.161.0.169:44396] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeoFJIV5EysYcTLjmwhDGwAAAdM"]
[Thu Apr 23 19:40:21.493042 2026] [:error] [pid 64998:tid 65016] [client 172.161.0.169:43862] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeoFJYV5EysYcTLjmwhDHgAAAc4"]
[Thu Apr 23 19:40:22.715810 2026] [:error] [pid 65000:tid 65057] [client 172.161.0.169:54041] [client 172.161.0.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp-image.php"] [unique_id "aeoFJr6vRb9j6psK2ZY2dQAAAhg"]
[Thu Apr 23 23:44:57.651872 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:57.816686 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:57.983902 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.152306 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.319348 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.496777 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.656900 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:58.825978 2026] [proxy_fcgi:error] [pid 64998:tid 65019] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.157304 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.319544 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.485148 2026] [proxy_fcgi:error] [pid 64998:tid 65012] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.645609 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.807346 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:44:59.969950 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:45:00.136048 2026] [proxy_fcgi:error] [pid 64998:tid 65007] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:45:00.301071 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:45:00.465329 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:45:00.691463 2026] [proxy_fcgi:error] [pid 64998:tid 65014] [client 173.239.218.29:29201] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 23:45:03.249713 2026] [:error] [pid 64998:tid 65004] [client 173.239.218.29:29201] [client 173.239.218.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo-f4V5EysYcTLjmwjHOQAAAcI"]
[Thu Apr 23 23:45:31.972991 2026] [autoindex:error] [pid 64998:tid 65021] [client 173.239.218.27:31739] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:56:21.514109 2026] [:error] [pid 65000:tid 65032] [client 74.248.121.178:21789] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepBJb6vRb9j6psK2ZYFFwAAAgM"]
[Thu Apr 23 23:56:24.009773 2026] [:error] [pid 64998:tid 65009] [client 74.248.121.178:21767] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepBKIV5EysYcTLjmwjf0wAAAcc"]
[Thu Apr 23 23:56:27.746905 2026] [:error] [pid 64998:tid 65025] [client 74.248.121.178:20746] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepBK4V5EysYcTLjmwjf4AAAAdc"]
[Thu Apr 23 23:56:30.756805 2026] [:error] [pid 46953:tid 46966] [client 74.248.121.178:10586] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepBLknlpdHh-P6wKbpcIQAAAko"]
[Fri Apr 24 02:21:12.154341 2026] [proxy_fcgi:error] [pid 42972:tid 43040] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:12.418619 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:12.681742 2026] [proxy_fcgi:error] [pid 42972:tid 43036] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:12.945481 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:13.209672 2026] [proxy_fcgi:error] [pid 42972:tid 43031] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:13.474119 2026] [proxy_fcgi:error] [pid 42972:tid 43039] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:21:13.738167 2026] [proxy_fcgi:error] [pid 42972:tid 43032] [client 68.221.139.118:16335] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:39.823838 2026] [proxy_fcgi:error] [pid 46953:tid 46971] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:40.089058 2026] [proxy_fcgi:error] [pid 46953:tid 46960] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:40.362089 2026] [proxy_fcgi:error] [pid 46953:tid 46967] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:40.651345 2026] [proxy_fcgi:error] [pid 46953:tid 46970] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:40.917358 2026] [proxy_fcgi:error] [pid 46953:tid 46965] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:41.181480 2026] [proxy_fcgi:error] [pid 46953:tid 46957] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:41.462012 2026] [proxy_fcgi:error] [pid 46953:tid 46959] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:41.725053 2026] [proxy_fcgi:error] [pid 46953:tid 46961] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:42.005483 2026] [proxy_fcgi:error] [pid 46953:tid 46969] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:42.676027 2026] [proxy_fcgi:error] [pid 46953:tid 46975] [client 158.158.114.84:21915] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:32:42.963888 2026] [:error] [pid 46953:tid 46962] [client 158.158.114.84:21915] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeplyknlpdHh-P6wKbqBeAAAAkY"]
[Fri Apr 24 02:32:45.310042 2026] [:error] [pid 64967:tid 64992] [client 158.158.114.84:30395] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeplzYAV4GfOOdX8QzqdzwAAAZc"]
[Fri Apr 24 02:32:47.365416 2026] [:error] [pid 64967:tid 64981] [client 158.158.114.84:11747] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aeplz4AV4GfOOdX8Qzqd1QAAAYw"]
[Fri Apr 24 02:32:49.015191 2026] [:error] [pid 65000:tid 65055] [client 158.158.114.84:7109] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aepl0b6vRb9j6psK2ZaWbgAAAhY"]
[Fri Apr 24 02:32:52.233873 2026] [:error] [pid 65000:tid 65055] [client 158.158.114.84:11765] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aepl1L6vRb9j6psK2ZaWfgAAAhY"]
[Fri Apr 24 02:32:53.634146 2026] [:error] [pid 43083:tid 43088] [client 158.158.114.84:32231] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aepl1TC5hrvNXosL83K0OQAAAMM"]
[Fri Apr 24 02:32:56.034097 2026] [:error] [pid 64998:tid 65003] [client 158.158.114.84:32238] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aepl2IV5EysYcTLjmwhHOwAAAcE"]
[Fri Apr 24 02:33:02.611057 2026] [:error] [pid 42971:tid 42999] [client 158.158.114.84:7160] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "aepl3jEP2_5RswrH8bFV-wAAAA0"]
[Fri Apr 24 02:33:07.279388 2026] [:error] [pid 42973:tid 43046] [client 158.158.114.84:13742] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aepl426I0QqmmmLTHE2OrQAAAIM"]
[Fri Apr 24 02:33:09.870137 2026] [:error] [pid 64998:tid 65021] [client 158.158.114.84:34819] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aepl5YV5EysYcTLjmwhHWwAAAdM"]
[Fri Apr 24 02:33:12.381040 2026] [:error] [pid 42972:tid 43027] [client 158.158.114.84:34877] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aepl6MOAb-3sOknsk4fSaAAAAEs"]
[Fri Apr 24 02:33:15.359690 2026] [:error] [pid 64998:tid 65024] [client 158.158.114.84:34870] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/zxcs.php"] [unique_id "aepl64V5EysYcTLjmwhHkgAAAdY"]
[Fri Apr 24 02:33:18.843778 2026] [:error] [pid 42972:tid 43038] [client 158.158.114.84:30445] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s1.php"] [unique_id "aepl7sOAb-3sOknsk4fSdwAAAFY"]
[Fri Apr 24 02:33:20.850550 2026] [:error] [pid 65000:tid 65040] [client 158.158.114.84:13751] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s1.php"] [unique_id "aepl8L6vRb9j6psK2ZaW3QAAAgc"]
[Fri Apr 24 02:33:24.210931 2026] [:error] [pid 42972:tid 43021] [client 158.158.114.84:10284] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s1.php"] [unique_id "aepl9MOAb-3sOknsk4fShgAAAEU"]
[Fri Apr 24 02:33:26.176443 2026] [:error] [pid 64967:tid 64988] [client 158.158.114.84:10399] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s1.php"] [unique_id "aepl9oAV4GfOOdX8Qzqd5QAAAZM"]
[Fri Apr 24 02:33:27.529974 2026] [:error] [pid 65000:tid 65037] [client 158.158.114.84:12994] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aepl976vRb9j6psK2ZaW9AAAAgQ"]
[Fri Apr 24 02:33:28.567162 2026] [:error] [pid 25635:tid 25656] [client 158.158.114.84:11885] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aepl-MRxv6UsgRGKB3JVMgAAARE"]
[Fri Apr 24 02:33:29.722596 2026] [:error] [pid 65000:tid 65037] [client 158.158.114.84:10300] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aepl-b6vRb9j6psK2ZaXCAAAAgQ"]
[Fri Apr 24 02:33:30.956119 2026] [:error] [pid 25635:tid 25650] [client 158.158.114.84:30375] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-kz.php"] [unique_id "aepl-sRxv6UsgRGKB3JVNAAAAQs"]
[Fri Apr 24 02:33:32.016742 2026] [:error] [pid 25635:tid 25660] [client 158.158.114.84:11716] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aepl_MRxv6UsgRGKB3JVNQAAARU"]
[Fri Apr 24 02:33:33.822563 2026] [:error] [pid 46953:tid 46965] [client 158.158.114.84:11902] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aepl_UnlpdHh-P6wKbqBkQAAAkk"]
[Fri Apr 24 02:33:34.557303 2026] [:error] [pid 42971:tid 42988] [client 158.158.114.84:10395] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aepl_jEP2_5RswrH8bFWAAAAAAI"]
[Fri Apr 24 02:33:36.161099 2026] [:error] [pid 42971:tid 42987] [client 158.158.114.84:13729] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wmore1.php"] [unique_id "aepmADEP2_5RswrH8bFWAwAAAAE"]
[Fri Apr 24 02:33:38.316507 2026] [:error] [pid 46953:tid 46963] [client 158.158.114.84:34851] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/saorix1.php"] [unique_id "aepmAknlpdHh-P6wKbqBlgAAAkc"]
[Fri Apr 24 02:33:53.460997 2026] [proxy_fcgi:error] [pid 42971:tid 43009] [client 158.158.114.84:17209] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:57.929685 2026] [proxy_fcgi:error] [pid 42971:tid 42992] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:58.281356 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:58.535963 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:58.780296 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:59.025641 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:59.275325 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:33:59.519393 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:34:00.220706 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:34:00.541959 2026] [proxy_fcgi:error] [pid 42971:tid 43007] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:34:02.260008 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 158.158.114.84:21553] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:34:02.507939 2026] [:error] [pid 42971:tid 42987] [client 158.158.114.84:21553] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aepmGjEP2_5RswrH8bFWJQAAAAE"]
[Fri Apr 24 02:34:03.583960 2026] [:error] [pid 59700:tid 59713] [client 158.158.114.84:32175] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aepmG5XyGZJFeAIDWtmAFQAAAUs"]
[Fri Apr 24 02:34:05.144319 2026] [:error] [pid 65000:tid 65045] [client 158.158.114.84:12011] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aepmHb6vRb9j6psK2ZaXPQAAAgw"]
[Fri Apr 24 02:34:06.798903 2026] [:error] [pid 42972:tid 43017] [client 158.158.114.84:32130] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aepmHsOAb-3sOknsk4fSwgAAAEE"]
[Fri Apr 24 02:34:08.465935 2026] [:error] [pid 64998:tid 65014] [client 158.158.114.84:26051] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aepmIIV5EysYcTLjmwhIDgAAAcw"]
[Fri Apr 24 02:34:11.900191 2026] [:error] [pid 59700:tid 59724] [client 158.158.114.84:17831] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aepmI5XyGZJFeAIDWtmAIwAAAVY"]
[Fri Apr 24 02:34:19.668968 2026] [:error] [pid 42973:tid 43046] [client 158.158.114.84:17266] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aepmK26I0QqmmmLTHE2O_wAAAIM"]
[Fri Apr 24 02:34:26.897984 2026] [:error] [pid 65000:tid 65047] [client 158.158.114.84:14134] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "aepmMr6vRb9j6psK2ZaXZAAAAg4"]
[Fri Apr 24 02:34:27.745622 2026] [:error] [pid 42972:tid 43037] [client 158.158.114.84:22737] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "aepmM8OAb-3sOknsk4fS4wAAAFU"]
[Fri Apr 24 02:34:32.059493 2026] [:error] [pid 65000:tid 65048] [client 158.158.114.84:18569] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wps.php"] [unique_id "aepmOL6vRb9j6psK2ZaXgQAAAg8"]
[Fri Apr 24 02:34:50.339645 2026] [:error] [pid 65000:tid 65045] [client 158.158.114.84:7029] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aepmSr6vRb9j6psK2ZaXvQAAAgw"]
[Fri Apr 24 02:34:52.201965 2026] [:error] [pid 42972:tid 43022] [client 158.158.114.84:20767] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aepmTMOAb-3sOknsk4fS-QAAAEY"]
[Fri Apr 24 02:34:55.220803 2026] [:error] [pid 65000:tid 65042] [client 158.158.114.84:34851] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aepmT76vRb9j6psK2ZaXyAAAAgk"]
[Fri Apr 24 02:34:57.259377 2026] [:error] [pid 65000:tid 65044] [client 158.158.114.84:40705] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35.php"] [unique_id "aepmUb6vRb9j6psK2ZaX0QAAAgs"]
[Fri Apr 24 02:34:58.232541 2026] [:error] [pid 65000:tid 65057] [client 158.158.114.84:6222] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/12.php"] [unique_id "aepmUr6vRb9j6psK2ZaX2gAAAhg"]
[Fri Apr 24 02:35:00.176481 2026] [:error] [pid 65000:tid 65054] [client 158.158.114.84:12346] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/12.php"] [unique_id "aepmVL6vRb9j6psK2ZaX4QAAAhU"]
[Fri Apr 24 02:35:01.926883 2026] [:error] [pid 42972:tid 43025] [client 158.158.114.84:20844] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/12.php"] [unique_id "aepmVcOAb-3sOknsk4fTEgAAAEk"]
[Fri Apr 24 02:35:03.575150 2026] [proxy_fcgi:error] [pid 46953:tid 46970] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:03.841134 2026] [proxy_fcgi:error] [pid 46953:tid 46965] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:04.107891 2026] [proxy_fcgi:error] [pid 46953:tid 46981] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:04.449230 2026] [proxy_fcgi:error] [pid 46953:tid 46980] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:05.109790 2026] [proxy_fcgi:error] [pid 46953:tid 46974] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:05.374124 2026] [proxy_fcgi:error] [pid 46953:tid 46957] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:05.638096 2026] [proxy_fcgi:error] [pid 46953:tid 46975] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:05.902436 2026] [proxy_fcgi:error] [pid 46953:tid 46959] [client 158.158.114.84:52229] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:06.196629 2026] [:error] [pid 46953:tid 46969] [client 158.158.114.84:52229] [client 158.158.114.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.quarryspec.com.au"] [uri "/tiny.php"] [unique_id "aepmWknlpdHh-P6wKbqB1AAAAk0"]
[Fri Apr 24 02:35:08.623154 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 158.158.114.84:34932] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:09.839072 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 158.158.114.84:34932] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:10.082738 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 158.158.114.84:34932] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:35:10.337281 2026] [:error] [pid 65000:tid 65044] [client 158.158.114.84:34932] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aepmXr6vRb9j6psK2ZaYAAAAAgs"]
[Fri Apr 24 02:35:13.315812 2026] [:error] [pid 65000:tid 65039] [client 158.158.114.84:34928] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aepmYb6vRb9j6psK2ZaYDgAAAgY"]
[Fri Apr 24 02:35:16.276722 2026] [:error] [pid 59700:tid 59722] [client 158.158.114.84:25682] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aepmZJXyGZJFeAIDWtmAWQAAAVQ"]
[Fri Apr 24 02:35:18.707627 2026] [:error] [pid 65000:tid 65055] [client 158.158.114.84:6212] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/roksad1.php"] [unique_id "aepmZr6vRb9j6psK2ZaYMQAAAhY"]
[Fri Apr 24 02:35:21.006100 2026] [:error] [pid 43083:tid 43089] [client 158.158.114.84:24554] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aepmaTC5hrvNXosL83K0jwAAAMQ"]
[Fri Apr 24 02:35:24.581678 2026] [:error] [pid 59700:tid 59703] [client 158.158.114.84:25670] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aepmbJXyGZJFeAIDWtmAYAAAAUE"]
[Fri Apr 24 02:35:27.142180 2026] [:error] [pid 65000:tid 65055] [client 158.158.114.84:37737] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aepmb76vRb9j6psK2ZaYQwAAAhY"]
[Fri Apr 24 02:35:28.425849 2026] [:error] [pid 65000:tid 65053] [client 158.158.114.84:26828] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fone1.php"] [unique_id "aepmcL6vRb9j6psK2ZaYRwAAAhQ"]
[Fri Apr 24 02:35:30.763465 2026] [:error] [pid 64967:tid 64976] [client 158.158.114.84:12181] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "aepmcoAV4GfOOdX8QzqeVwAAAYc"]
[Fri Apr 24 02:35:32.757552 2026] [:error] [pid 65000:tid 65031] [client 158.158.114.84:25698] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "aepmdL6vRb9j6psK2ZaYUwAAAgI"]
[Fri Apr 24 02:35:34.012194 2026] [:error] [pid 65000:tid 65051] [client 158.158.114.84:22311] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "aepmdr6vRb9j6psK2ZaYWQAAAhI"]
[Fri Apr 24 02:35:35.649308 2026] [:error] [pid 65000:tid 65047] [client 158.158.114.84:25709] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/config.php"] [unique_id "aepmd76vRb9j6psK2ZaYZQAAAg4"]
[Fri Apr 24 02:35:38.267602 2026] [:error] [pid 64998:tid 65003] [client 158.158.114.84:26819] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aepmeoV5EysYcTLjmwhIVQAAAcE"]
[Fri Apr 24 02:35:41.965108 2026] [:error] [pid 43083:tid 43106] [client 158.158.114.84:37709] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aepmfTC5hrvNXosL83K0lAAAANU"]
[Fri Apr 24 02:35:44.827876 2026] [:error] [pid 65000:tid 65048] [client 158.158.114.84:29360] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aepmgL6vRb9j6psK2ZaYjwAAAg8"]
[Fri Apr 24 02:35:50.823794 2026] [:error] [pid 43083:tid 43101] [client 158.158.114.84:15237] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xltt.php"] [unique_id "aepmhjC5hrvNXosL83K0lgAAANA"]
[Fri Apr 24 02:35:52.601415 2026] [:error] [pid 65000:tid 65041] [client 158.158.114.84:37729] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aepmiL6vRb9j6psK2ZaYsgAAAgg"]
[Fri Apr 24 02:35:53.895049 2026] [:error] [pid 43083:tid 43099] [client 158.158.114.84:17466] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aepmiTC5hrvNXosL83K0mAAAAM4"]
[Fri Apr 24 02:35:55.201561 2026] [:error] [pid 42973:tid 43053] [client 158.158.114.84:17442] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aepmi26I0QqmmmLTHE2PSQAAAIo"]
[Fri Apr 24 02:35:56.352722 2026] [:error] [pid 42973:tid 43049] [client 158.158.114.84:18249] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sadcut1.php"] [unique_id "aepmjG6I0QqmmmLTHE2PUQAAAIY"]
[Fri Apr 24 02:35:57.430204 2026] [:error] [pid 42973:tid 43054] [client 158.158.114.84:12111] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aepmjW6I0QqmmmLTHE2PVgAAAIs"]
[Fri Apr 24 02:35:59.343295 2026] [:error] [pid 46953:tid 46981] [client 158.158.114.84:18284] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aepmj0nlpdHh-P6wKbqB8AAAAlg"]
[Fri Apr 24 02:36:03.441858 2026] [:error] [pid 65000:tid 65041] [client 158.158.114.84:29358] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aepmk76vRb9j6psK2ZaY1QAAAgg"]
[Fri Apr 24 02:36:08.574486 2026] [:error] [pid 65000:tid 65049] [client 158.158.114.84:15243] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aepmmL6vRb9j6psK2ZaY4QAAAhA"]
[Fri Apr 24 02:36:12.226814 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:12.486348 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:12.728238 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:12.970462 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:13.246159 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:13.732962 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:14.619320 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:14.863303 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:15.106146 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:15.492123 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 158.158.114.84:15250] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:36:15.732478 2026] [:error] [pid 65000:tid 65029] [client 158.158.114.84:15250] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/view.php"] [unique_id "aepmn76vRb9j6psK2ZaZAAAAAgA"]
[Fri Apr 24 02:36:17.111795 2026] [:error] [pid 64967:tid 64976] [client 158.158.114.84:29315] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/view.php"] [unique_id "aepmoYAV4GfOOdX8QzqeZwAAAYc"]
[Fri Apr 24 02:36:18.418878 2026] [:error] [pid 42972:tid 43032] [client 158.158.114.84:23781] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/view.php"] [unique_id "aepmosOAb-3sOknsk4fTXwAAAFA"]
[Fri Apr 24 02:36:19.490931 2026] [:error] [pid 65000:tid 65043] [client 158.158.114.84:16853] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/view.php"] [unique_id "aepmo76vRb9j6psK2ZaZCQAAAgo"]
[Fri Apr 24 02:36:20.024461 2026] [:error] [pid 59700:tid 59726] [client 158.158.114.84:6186] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aepmpJXyGZJFeAIDWtmAdQAAAVg"]
[Fri Apr 24 02:36:21.091428 2026] [:error] [pid 65000:tid 65029] [client 158.158.114.84:6205] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aepmpb6vRb9j6psK2ZaZEwAAAgA"]
[Fri Apr 24 02:36:22.941672 2026] [:error] [pid 59700:tid 59706] [client 158.158.114.84:23790] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aepmppXyGZJFeAIDWtmAdgAAAUQ"]
[Fri Apr 24 02:36:24.106978 2026] [:error] [pid 59700:tid 59720] [client 158.158.114.84:6147] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cilus.php"] [unique_id "aepmqJXyGZJFeAIDWtmAeAAAAVI"]
[Fri Apr 24 02:36:24.915213 2026] [:error] [pid 42972:tid 43037] [client 158.158.114.84:29331] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aepmqMOAb-3sOknsk4fTbAAAAFU"]
[Fri Apr 24 02:36:25.913758 2026] [:error] [pid 42972:tid 43038] [client 158.158.114.84:49309] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aepmqcOAb-3sOknsk4fTcQAAAFY"]
[Fri Apr 24 02:36:26.736469 2026] [:error] [pid 42972:tid 43037] [client 158.158.114.84:24080] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aepmqsOAb-3sOknsk4fTdwAAAFU"]
[Fri Apr 24 02:36:29.175887 2026] [:error] [pid 42972:tid 43036] [client 158.158.114.84:53417] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aepmrcOAb-3sOknsk4fTfgAAAFQ"]
[Fri Apr 24 02:36:31.380066 2026] [:error] [pid 42973:tid 43060] [client 158.158.114.84:49331] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/doc.php"] [unique_id "aepmr26I0QqmmmLTHE2PcgAAAJE"]
[Fri Apr 24 02:36:33.039157 2026] [:error] [pid 42973:tid 43051] [client 158.158.114.84:6834] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/doc.php"] [unique_id "aepmsW6I0QqmmmLTHE2PeQAAAIg"]
[Fri Apr 24 02:36:34.914646 2026] [:error] [pid 42972:tid 43024] [client 158.158.114.84:53391] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/doc.php"] [unique_id "aepmssOAb-3sOknsk4fTkgAAAEg"]
[Fri Apr 24 02:36:36.013681 2026] [:error] [pid 25635:tid 25654] [client 158.158.114.84:16492] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/doc.php"] [unique_id "aepmtMRxv6UsgRGKB3JVZAAAAQ8"]
[Fri Apr 24 02:36:37.191643 2026] [:error] [pid 25635:tid 25642] [client 158.158.114.84:6845] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aepmtcRxv6UsgRGKB3JVbAAAAQM"]
[Fri Apr 24 02:36:38.297483 2026] [:error] [pid 25635:tid 25648] [client 158.158.114.84:49280] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aepmtsRxv6UsgRGKB3JVdAAAAQk"]
[Fri Apr 24 02:36:39.903532 2026] [:error] [pid 42972:tid 43024] [client 158.158.114.84:16867] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aepmt8OAb-3sOknsk4fTlwAAAEg"]
[Fri Apr 24 02:36:41.369111 2026] [:error] [pid 65000:tid 65054] [client 158.158.114.84:19411] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xper1.php"] [unique_id "aepmub6vRb9j6psK2ZaZJgAAAhU"]
[Fri Apr 24 02:36:42.799413 2026] [:error] [pid 65000:tid 65040] [client 158.158.114.84:52677] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aepmur6vRb9j6psK2ZaZLQAAAgc"]
[Fri Apr 24 02:36:45.149765 2026] [:error] [pid 64998:tid 65020] [client 158.158.114.84:19454] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aepmvYV5EysYcTLjmwhIpAAAAdI"]
[Fri Apr 24 02:36:48.396634 2026] [:error] [pid 65000:tid 65030] [client 158.158.114.84:19451] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aepmwL6vRb9j6psK2ZaZOwAAAgE"]
[Fri Apr 24 02:36:55.158280 2026] [:error] [pid 65000:tid 65041] [client 158.158.114.84:19408] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "aepmx76vRb9j6psK2ZaZSQAAAgg"]
[Fri Apr 24 02:36:57.546128 2026] [:error] [pid 65000:tid 65038] [client 158.158.114.84:52729] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aepmyb6vRb9j6psK2ZaZYAAAAgU"]
[Fri Apr 24 02:36:58.459501 2026] [:error] [pid 65000:tid 65039] [client 158.158.114.84:6179] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aepmyr6vRb9j6psK2ZaZZAAAAgY"]
[Fri Apr 24 02:37:00.482036 2026] [:error] [pid 65000:tid 65048] [client 158.158.114.84:6435] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aepmzL6vRb9j6psK2ZaZagAAAg8"]
[Fri Apr 24 02:37:03.715887 2026] [:error] [pid 59700:tid 59711] [client 158.158.114.84:6163] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aepmz5XyGZJFeAIDWtmAjwAAAUk"]
[Fri Apr 24 02:37:07.462506 2026] [:error] [pid 65000:tid 65047] [client 158.158.114.84:23114] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aepm076vRb9j6psK2ZaZeAAAAg4"]
[Fri Apr 24 02:37:09.905947 2026] [:error] [pid 65000:tid 65049] [client 158.158.114.84:11687] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aepm1b6vRb9j6psK2ZaZgAAAAhA"]
[Fri Apr 24 02:37:11.634989 2026] [:error] [pid 64998:tid 65020] [client 158.158.114.84:10459] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aepm14V5EysYcTLjmwhItAAAAdI"]
[Fri Apr 24 02:37:14.600937 2026] [:error] [pid 43083:tid 43108] [client 158.158.114.84:19431] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aepm2jC5hrvNXosL83K0tAAAANc"]
[Fri Apr 24 02:37:24.490262 2026] [:error] [pid 59700:tid 59715] [client 158.158.114.84:52681] [client 158.158.114.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aepm5JXyGZJFeAIDWtmAoAAAAU0"]
[Fri Apr 24 02:37:27.521879 2026] [proxy_fcgi:error] [pid 25635:tid 25644] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:27.776142 2026] [proxy_fcgi:error] [pid 25635:tid 25645] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:28.018820 2026] [proxy_fcgi:error] [pid 25635:tid 25656] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:28.263179 2026] [proxy_fcgi:error] [pid 25635:tid 25642] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:28.515539 2026] [proxy_fcgi:error] [pid 25635:tid 25650] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:28.758359 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:29.011712 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:29.266394 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:29.530613 2026] [proxy_fcgi:error] [pid 25635:tid 25639] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:29.779800 2026] [proxy_fcgi:error] [pid 25635:tid 25659] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:30.035918 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 158.158.114.84:28646] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:37:30.275286 2026] [:error] [pid 25635:tid 25651] [client 158.158.114.84:28646] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aepm6sRxv6UsgRGKB3JVjQAAAQw"]
[Fri Apr 24 02:37:34.148079 2026] [:error] [pid 59700:tid 59705] [client 158.158.114.84:11525] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aepm7pXyGZJFeAIDWtmApgAAAUM"]
[Fri Apr 24 02:37:39.096862 2026] [:error] [pid 65000:tid 65032] [client 158.158.114.84:21944] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aepm876vRb9j6psK2ZaZswAAAgM"]
[Fri Apr 24 02:37:41.080487 2026] [:error] [pid 65000:tid 65044] [client 158.158.114.84:52209] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/packsin1.php"] [unique_id "aepm9b6vRb9j6psK2ZaZtgAAAgs"]
[Fri Apr 24 02:37:42.194474 2026] [:error] [pid 42973:tid 43054] [client 158.158.114.84:38127] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xs.php"] [unique_id "aepm9m6I0QqmmmLTHE2PpwAAAIs"]
[Fri Apr 24 02:37:44.086318 2026] [:error] [pid 65000:tid 65037] [client 158.158.114.84:23729] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xs.php"] [unique_id "aepm-L6vRb9j6psK2ZaZvQAAAgQ"]
[Fri Apr 24 02:37:45.693781 2026] [:error] [pid 42972:tid 43027] [client 158.158.114.84:11549] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xs.php"] [unique_id "aepm-cOAb-3sOknsk4fT2AAAAEs"]
[Fri Apr 24 02:37:47.733038 2026] [:error] [pid 46953:tid 46964] [client 158.158.114.84:28552] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xs.php"] [unique_id "aepm-0nlpdHh-P6wKbqCFgAAAkg"]
[Fri Apr 24 02:37:48.801374 2026] [:error] [pid 43083:tid 43106] [client 158.158.114.84:19386] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/img.php"] [unique_id "aepm_DC5hrvNXosL83K0xQAAANU"]
[Fri Apr 24 02:37:51.104486 2026] [:error] [pid 64967:tid 64983] [client 158.158.114.84:23329] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/img.php"] [unique_id "aepm_4AV4GfOOdX8QzqeuwAAAY4"]
[Fri Apr 24 02:37:51.961728 2026] [:error] [pid 65000:tid 65032] [client 158.158.114.84:19777] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/img.php"] [unique_id "aepm_76vRb9j6psK2ZaZzQAAAgM"]
[Fri Apr 24 02:37:53.427479 2026] [:error] [pid 42973:tid 43056] [client 158.158.114.84:23699] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/img.php"] [unique_id "aepnAW6I0QqmmmLTHE2PrgAAAI0"]
[Fri Apr 24 02:37:56.120733 2026] [:error] [pid 65000:tid 65029] [client 158.158.114.84:28653] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aepnBL6vRb9j6psK2ZaZ1AAAAgA"]
[Fri Apr 24 02:37:59.188217 2026] [:error] [pid 65000:tid 65030] [client 158.158.114.84:13032] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aepnB76vRb9j6psK2ZaZ2wAAAgE"]
[Fri Apr 24 02:38:01.310471 2026] [:error] [pid 65000:tid 65057] [client 158.158.114.84:22710] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aepnCb6vRb9j6psK2ZaZ4wAAAhg"]
[Fri Apr 24 02:38:16.049507 2026] [:error] [pid 42971:tid 43006] [client 158.158.114.84:17859] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aepnGDEP2_5RswrH8bFWgwAAABQ"]
[Fri Apr 24 02:38:21.016686 2026] [:error] [pid 65000:tid 65047] [client 158.158.114.84:21621] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/maxro.php"] [unique_id "aepnHb6vRb9j6psK2ZaZ9QAAAg4"]
[Fri Apr 24 02:38:26.741348 2026] [:error] [pid 65000:tid 65054] [client 158.158.114.84:21615] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a7.php"] [unique_id "aepnIr6vRb9j6psK2ZaaCAAAAhU"]
[Fri Apr 24 02:38:28.048005 2026] [:error] [pid 46953:tid 46957] [client 158.158.114.84:58925] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a7.php"] [unique_id "aepnJEnlpdHh-P6wKbqCLQAAAkE"]
[Fri Apr 24 02:38:29.540789 2026] [:error] [pid 59700:tid 59716] [client 158.158.114.84:32145] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a7.php"] [unique_id "aepnJZXyGZJFeAIDWtmA7QAAAU4"]
[Fri Apr 24 02:38:31.405606 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:31.661660 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:31.904221 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:32.157975 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:32.401128 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:32.655973 2026] [proxy_fcgi:error] [pid 42973:tid 43058] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:32.908912 2026] [proxy_fcgi:error] [pid 42973:tid 43059] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:33.650660 2026] [proxy_fcgi:error] [pid 42973:tid 43061] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:33.910729 2026] [proxy_fcgi:error] [pid 42973:tid 43044] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:34.627928 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:35.569559 2026] [proxy_fcgi:error] [pid 42973:tid 43055] [client 158.158.114.84:14184] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:38:35.823496 2026] [:error] [pid 42973:tid 43053] [client 158.158.114.84:14184] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aepnK26I0QqmmmLTHE2P2gAAAIo"]
[Fri Apr 24 02:38:45.184877 2026] [:error] [pid 42973:tid 43053] [client 158.158.114.84:53372] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aepnNW6I0QqmmmLTHE2P5QAAAIo"]
[Fri Apr 24 02:38:47.370309 2026] [:error] [pid 64998:tid 65014] [client 158.158.114.84:25991] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aepnN4V5EysYcTLjmwhJHAAAAcw"]
[Fri Apr 24 02:38:49.014513 2026] [:error] [pid 64967:tid 64982] [client 158.158.114.84:18565] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws68.php"] [unique_id "aepnOYAV4GfOOdX8QzqfCQAAAY0"]
[Fri Apr 24 02:38:51.037768 2026] [:error] [pid 65000:tid 65056] [client 158.158.114.84:11619] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aepnO76vRb9j6psK2ZaaPAAAAhc"]
[Fri Apr 24 02:38:51.746859 2026] [:error] [pid 42973:tid 43059] [client 158.158.114.84:59864] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aepnO26I0QqmmmLTHE2P7QAAAJA"]
[Fri Apr 24 02:38:53.656757 2026] [:error] [pid 64998:tid 65007] [client 158.158.114.84:31878] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aepnPYV5EysYcTLjmwhJQQAAAcU"]
[Fri Apr 24 02:38:54.847111 2026] [:error] [pid 59700:tid 59704] [client 158.158.114.84:31929] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/pp.php"] [unique_id "aepnPpXyGZJFeAIDWtmBDgAAAUI"]
[Fri Apr 24 02:38:57.086508 2026] [:error] [pid 65000:tid 65046] [client 158.158.114.84:19025] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aepnQb6vRb9j6psK2ZaaQgAAAg0"]
[Fri Apr 24 02:39:00.976683 2026] [:error] [pid 43083:tid 43101] [client 158.158.114.84:14141] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aepnRDC5hrvNXosL83K01gAAANA"]
[Fri Apr 24 02:39:05.218405 2026] [:error] [pid 42972:tid 43028] [client 158.158.114.84:53339] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aepnScOAb-3sOknsk4fUGwAAAEw"]
[Fri Apr 24 02:39:06.493788 2026] [:error] [pid 42972:tid 43026] [client 158.158.114.84:21192] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aepnSsOAb-3sOknsk4fUIwAAAEo"]
[Fri Apr 24 02:39:07.843849 2026] [:error] [pid 43083:tid 43098] [client 158.158.114.84:18595] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/son1.php"] [unique_id "aepnSzC5hrvNXosL83K03QAAAM0"]
[Fri Apr 24 02:39:09.058709 2026] [:error] [pid 59700:tid 59715] [client 158.158.114.84:21242] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/son1.php"] [unique_id "aepnTZXyGZJFeAIDWtmBGgAAAU0"]
[Fri Apr 24 02:39:11.065272 2026] [:error] [pid 42972:tid 43031] [client 158.158.114.84:14127] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/son1.php"] [unique_id "aepnT8OAb-3sOknsk4fUKAAAAE8"]
[Fri Apr 24 02:39:14.447749 2026] [:error] [pid 59700:tid 59702] [client 158.158.114.84:23373] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/son1.php"] [unique_id "aepnUpXyGZJFeAIDWtmBJgAAAUA"]
[Fri Apr 24 02:39:15.521988 2026] [:error] [pid 46953:tid 46967] [client 158.158.114.84:21193] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aepnU0nlpdHh-P6wKbqCYwAAAks"]
[Fri Apr 24 02:39:18.141571 2026] [:error] [pid 25635:tid 25647] [client 158.158.114.84:14132] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aepnVsRxv6UsgRGKB3JVsAAAAQg"]
[Fri Apr 24 02:39:28.606719 2026] [:error] [pid 64998:tid 65005] [client 158.158.114.84:21235] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tx79.php"] [unique_id "aepnYIV5EysYcTLjmwhJjgAAAcM"]
[Fri Apr 24 02:39:33.072427 2026] [:error] [pid 42972:tid 43029] [client 158.158.114.84:6856] [client 158.158.114.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aepnZcOAb-3sOknsk4fUPgAAAE0"]
[Fri Apr 24 02:39:41.866045 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 158.158.114.84:6995] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:39:42.108432 2026] [proxy_fcgi:error] [pid 64998:tid 65020] [client 158.158.114.84:6995] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:39:42.349614 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 158.158.114.84:6995] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:39:42.604518 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 158.158.114.84:6995] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:27.315930 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:27.580018 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:27.960122 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:28.278617 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:28.543201 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:28.808408 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:29.147378 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:29.526505 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:29.793981 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 20.251.39.123:50135] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:16:30.328147 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:50135] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "aeqMLuKCZKf8_u2LKiA9VAAAAQ8"]
[Fri Apr 24 05:16:30.932106 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:38841] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "aeqMLjQ--M3-tsKAnhGEZQAAAMU"]
[Fri Apr 24 05:16:31.705735 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:45379] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "aeqML-KCZKf8_u2LKiA9WgAAAQo"]
[Fri Apr 24 05:16:32.553172 2026] [:error] [pid 19101:tid 19138] [client 20.251.39.123:53776] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "aeqMMGAHj9bEvrTgbO3BIQAAAEE"]
[Fri Apr 24 05:16:33.164642 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:50075] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqMMeKCZKf8_u2LKiA9XwAAAQs"]
[Fri Apr 24 05:16:33.987376 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:33956] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqMMWAHj9bEvrTgbO3BIgAAAEY"]
[Fri Apr 24 05:16:34.813010 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:27948] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqMMuKCZKf8_u2LKiA9ZgAAAQI"]
[Fri Apr 24 05:16:35.577114 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:33972] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqMM-KCZKf8_u2LKiA9agAAAQE"]
[Fri Apr 24 05:16:36.160344 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:44415] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "aeqMNOKCZKf8_u2LKiA9bAAAARI"]
[Fri Apr 24 05:16:36.753494 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:4142] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "aeqMNOKCZKf8_u2LKiA9bgAAARY"]
[Fri Apr 24 05:16:37.468455 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:57257] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "aeqMNTQ--M3-tsKAnhGEdgAAAMs"]
[Fri Apr 24 05:16:38.024079 2026] [:error] [pid 19102:tid 19182] [client 20.251.39.123:48093] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "aeqMNgDSgrbLEZbkqD6tLQAAAJI"]
[Fri Apr 24 05:16:38.888367 2026] [:error] [pid 19102:tid 19188] [client 20.251.39.123:44388] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "aeqMNgDSgrbLEZbkqD6tNgAAAJg"]
[Fri Apr 24 05:16:39.638371 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:48085] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "aeqMN-KCZKf8_u2LKiA9dQAAARI"]
[Fri Apr 24 05:16:40.425225 2026] [:error] [pid 19102:tid 19170] [client 20.251.39.123:64312] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "aeqMOADSgrbLEZbkqD6tPwAAAIY"]
[Fri Apr 24 05:16:40.990021 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:64298] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "aeqMOADSgrbLEZbkqD6tRAAAAI4"]
[Fri Apr 24 05:16:41.614463 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:41593] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "aeqMOQDSgrbLEZbkqD6tSQAAAIk"]
[Fri Apr 24 05:16:42.268021 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:28896] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "aeqMOgDSgrbLEZbkqD6tUQAAAI0"]
[Fri Apr 24 05:16:42.867008 2026] [:error] [pid 19102:tid 19182] [client 20.251.39.123:36548] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "aeqMOgDSgrbLEZbkqD6tVwAAAJI"]
[Fri Apr 24 05:16:43.444274 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:43252] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "aeqMOwDSgrbLEZbkqD6tXAAAAIk"]
[Fri Apr 24 05:16:44.293455 2026] [:error] [pid 19101:tid 19144] [client 20.251.39.123:60949] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "aeqMPGAHj9bEvrTgbO3BKgAAAEc"]
[Fri Apr 24 05:16:45.272452 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:60961] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "aeqMPeKCZKf8_u2LKiA9fAAAARU"]
[Fri Apr 24 05:16:46.438755 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:24796] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "aeqMPuKCZKf8_u2LKiA9gwAAAQY"]
[Fri Apr 24 05:16:47.112229 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:50063] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "aeqMP-KCZKf8_u2LKiA9hgAAAQ8"]
[Fri Apr 24 05:16:47.713962 2026] [:error] [pid 19200:tid 19211] [client 20.251.39.123:57663] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "aeqMPzQ--M3-tsKAnhGEiQAAAMM"]
[Fri Apr 24 05:16:48.733694 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:36565] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "aeqMQLF_hzQs4Cqbiff8XQAAABU"]
[Fri Apr 24 05:16:49.656582 2026] [:error] [pid 19101:tid 19138] [client 20.251.39.123:58552] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "aeqMQWAHj9bEvrTgbO3BLAAAAEE"]
[Fri Apr 24 05:16:50.397070 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:50067] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "aeqMQuKCZKf8_u2LKiA9jwAAAQU"]
[Fri Apr 24 05:16:51.034887 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:42649] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqMQ-KCZKf8_u2LKiA9kQAAAQE"]
[Fri Apr 24 05:16:51.801376 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:60936] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqMQ-KCZKf8_u2LKiA9lQAAAQg"]
[Fri Apr 24 05:16:52.749337 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:48096] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqMROKCZKf8_u2LKiA9mwAAAQI"]
[Fri Apr 24 05:16:54.131680 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:36578] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqMRgDSgrbLEZbkqD6tlQAAAI4"]
[Fri Apr 24 05:16:55.096536 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:41572] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqMR-KCZKf8_u2LKiA9nwAAAQ4"]
[Fri Apr 24 05:16:56.132538 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:55652] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqMSOKCZKf8_u2LKiA9owAAAQQ"]
[Fri Apr 24 05:16:57.116560 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:41583] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqMSeKCZKf8_u2LKiA9pwAAARE"]
[Fri Apr 24 05:16:57.786102 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:36584] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqMSTQ--M3-tsKAnhGElQAAAMs"]
[Fri Apr 24 05:16:58.749323 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:4899] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqMSuKCZKf8_u2LKiA9qQAAAQ4"]
[Fri Apr 24 05:16:59.696244 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:41556] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqMS-KCZKf8_u2LKiA9qwAAARA"]
[Fri Apr 24 05:17:00.588211 2026] [:error] [pid 19100:tid 19109] [client 20.251.39.123:41555] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqMTLF_hzQs4Cqbiff8aAAAAAA"]
[Fri Apr 24 05:17:01.244681 2026] [:error] [pid 19102:tid 19175] [client 20.251.39.123:43255] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqMTQDSgrbLEZbkqD6ttgAAAIs"]
[Fri Apr 24 05:17:02.322830 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:58523] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeqMTuKCZKf8_u2LKiA9sgAAARc"]
[Fri Apr 24 05:17:02.957460 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:60959] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeqMTuKCZKf8_u2LKiA9tQAAARA"]
[Fri Apr 24 05:17:03.787586 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:40008] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeqMT-KCZKf8_u2LKiA9twAAAQM"]
[Fri Apr 24 05:17:04.859569 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:42713] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "aeqMUDQ--M3-tsKAnhGEpAAAAMQ"]
[Fri Apr 24 05:17:05.943165 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:46470] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "aeqMUeKCZKf8_u2LKiA9wQAAARE"]
[Fri Apr 24 05:17:07.003224 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:58514] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "aeqMU7F_hzQs4Cqbiff8cAAAAAI"]
[Fri Apr 24 05:17:07.849485 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:40023] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "aeqMU2AHj9bEvrTgbO3BOQAAAEo"]
[Fri Apr 24 05:17:08.919897 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:46502] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "aeqMVDQ--M3-tsKAnhGEqwAAANA"]
[Fri Apr 24 05:17:09.874258 2026] [:error] [pid 19200:tid 19232] [client 20.251.39.123:54991] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "aeqMVTQ--M3-tsKAnhGEsQAAANg"]
[Fri Apr 24 05:17:10.973304 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:60984] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "aeqMVjQ--M3-tsKAnhGEswAAANU"]
[Fri Apr 24 05:17:11.882441 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:58542] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "aeqMVzQ--M3-tsKAnhGEtgAAAM8"]
[Fri Apr 24 05:17:12.682626 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:26588] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "aeqMWDQ--M3-tsKAnhGEuAAAANA"]
[Fri Apr 24 05:17:13.450621 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:37077] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "aeqMWTQ--M3-tsKAnhGEuwAAAMc"]
[Fri Apr 24 05:17:15.182267 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:26591] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "aeqMW7F_hzQs4Cqbiff8dAAAABg"]
[Fri Apr 24 05:17:15.939523 2026] [:error] [pid 19101:tid 19139] [client 20.251.39.123:55007] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "aeqMW2AHj9bEvrTgbO3BQgAAAEI"]
[Fri Apr 24 05:17:16.629992 2026] [:error] [pid 19100:tid 19132] [client 20.251.39.123:58531] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "aeqMXLF_hzQs4Cqbiff8eQAAABY"]
[Fri Apr 24 05:17:17.493841 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:40050] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "aeqMXTQ--M3-tsKAnhGEvgAAANA"]
[Fri Apr 24 05:17:18.793713 2026] [:error] [pid 19100:tid 19123] [client 20.251.39.123:37096] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "aeqMXrF_hzQs4Cqbiff8fgAAAA0"]
[Fri Apr 24 05:17:19.768813 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:4424] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "aeqMXwDSgrbLEZbkqD6t0wAAAJY"]
[Fri Apr 24 05:17:20.839769 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:26616] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "aeqMYOKCZKf8_u2LKiA95wAAAQA"]
[Fri Apr 24 05:17:21.998264 2026] [:error] [pid 19200:tid 19217] [client 20.251.39.123:40041] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "aeqMYTQ--M3-tsKAnhGExQAAAMk"]
[Fri Apr 24 05:17:23.654065 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:4416] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "aeqMYzQ--M3-tsKAnhGEzgAAANQ"]
[Fri Apr 24 05:17:27.071570 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:37796] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "aeqMZ-KCZKf8_u2LKiA98wAAARE"]
[Fri Apr 24 05:17:31.808141 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.251.39.123:64944] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:43.370636 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:26561] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:52.113433 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:52.559692 2026] [proxy_fcgi:error] [pid 19200:tid 19217] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:52.895934 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:53.493666 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:53.758042 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:54.023512 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:54.334754 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:54.621684 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:54.912301 2026] [proxy_fcgi:error] [pid 19200:tid 19216] [client 20.251.39.123:43777] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:19:55.209281 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:43777] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeqM-zQ--M3-tsKAnhGGNQAAAMs"]
[Fri Apr 24 05:19:55.898389 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:26592] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeqM-zQ--M3-tsKAnhGGNgAAANQ"]
[Fri Apr 24 05:19:56.575698 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:48556] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeqM_ADSgrbLEZbkqD6uxQAAAJE"]
[Fri Apr 24 05:19:57.149466 2026] [:error] [pid 19200:tid 19226] [client 20.251.39.123:36534] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aeqM_TQ--M3-tsKAnhGGOAAAANI"]
[Fri Apr 24 05:19:57.879298 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:37779] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqM_TQ--M3-tsKAnhGGPAAAAMA"]
[Fri Apr 24 05:19:58.480452 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:56909] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqM_jQ--M3-tsKAnhGGQgAAAMI"]
[Fri Apr 24 05:19:59.192994 2026] [:error] [pid 19101:tid 19160] [client 20.251.39.123:48540] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqM_2AHj9bEvrTgbO3CFgAAAFc"]
[Fri Apr 24 05:19:59.893613 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:4395] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqM_wDSgrbLEZbkqD6uywAAAII"]
[Fri Apr 24 05:20:00.758737 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:26569] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeqNAGAHj9bEvrTgbO3CHAAAAEk"]
[Fri Apr 24 05:20:01.622076 2026] [:error] [pid 19102:tid 19188] [client 20.251.39.123:56925] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeqNAQDSgrbLEZbkqD6uzgAAAJg"]
[Fri Apr 24 05:20:02.614005 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:56925] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeqNAjQ--M3-tsKAnhGGVAAAANU"]
[Fri Apr 24 05:20:03.310341 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:36517] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "aeqNAzQ--M3-tsKAnhGGWAAAAM4"]
[Fri Apr 24 05:20:03.948547 2026] [:error] [pid 19100:tid 19115] [client 20.251.39.123:48571] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeqNA7F_hzQs4Cqbiff9FAAAAAY"]
[Fri Apr 24 05:20:04.651648 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:40029] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeqNBDQ--M3-tsKAnhGGXAAAAMc"]
[Fri Apr 24 05:20:05.394806 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:25316] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeqNBTQ--M3-tsKAnhGGYAAAAMo"]
[Fri Apr 24 05:20:06.150277 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:57282] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "aeqNBuKCZKf8_u2LKiA_xQAAAQs"]
[Fri Apr 24 05:20:06.830662 2026] [:error] [pid 19200:tid 19225] [client 20.251.39.123:30645] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeqNBjQ--M3-tsKAnhGGZAAAANE"]
[Fri Apr 24 05:20:07.416605 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:43778] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeqNBzQ--M3-tsKAnhGGZwAAAMs"]
[Fri Apr 24 05:20:08.034146 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:25316] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeqNCDQ--M3-tsKAnhGGawAAAMc"]
[Fri Apr 24 05:20:08.630079 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:59508] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "aeqNCOKCZKf8_u2LKiA_zgAAAQA"]
[Fri Apr 24 05:20:09.215791 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:28825] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeqNCTQ--M3-tsKAnhGGcQAAAME"]
[Fri Apr 24 05:20:09.874165 2026] [:error] [pid 19101:tid 19159] [client 20.251.39.123:43788] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeqNCWAHj9bEvrTgbO3CKAAAAFY"]
[Fri Apr 24 05:20:10.538928 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:37769] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeqNCuKCZKf8_u2LKiA_0wAAARE"]
[Fri Apr 24 05:20:11.272020 2026] [:error] [pid 19101:tid 19158] [client 20.251.39.123:47045] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "aeqNC2AHj9bEvrTgbO3CKwAAAFU"]
[Fri Apr 24 05:20:11.888994 2026] [:error] [pid 19100:tid 19129] [client 20.251.39.123:38623] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeqNC7F_hzQs4Cqbiff9JQAAABM"]
[Fri Apr 24 05:20:12.497733 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:56942] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeqNDADSgrbLEZbkqD6u3AAAAJE"]
[Fri Apr 24 05:20:13.268279 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:23768] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeqNDTQ--M3-tsKAnhGGdAAAANU"]
[Fri Apr 24 05:20:13.945973 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:30592] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "aeqNDWAHj9bEvrTgbO3CMwAAAFQ"]
[Fri Apr 24 05:20:14.618038 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:30609] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeqNDjQ--M3-tsKAnhGGeQAAANY"]
[Fri Apr 24 05:20:15.168835 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:26586] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeqND-KCZKf8_u2LKiA_2wAAARg"]
[Fri Apr 24 05:20:15.845522 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:56921] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeqNDzQ--M3-tsKAnhGGfAAAAMs"]
[Fri Apr 24 05:20:16.686324 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:37790] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aeqNEGAHj9bEvrTgbO3COgAAAEo"]
[Fri Apr 24 05:20:18.130284 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:28818] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "aeqNEjQ--M3-tsKAnhGGiAAAAMY"]
[Fri Apr 24 05:20:18.822096 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:37070] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "aeqNEjQ--M3-tsKAnhGGjwAAAM8"]
[Fri Apr 24 05:20:19.441768 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:37066] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "aeqNEwDSgrbLEZbkqD6u4wAAAJA"]
[Fri Apr 24 05:20:20.204884 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:23784] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "aeqNFOKCZKf8_u2LKiA_7QAAAQ8"]
[Fri Apr 24 05:20:20.944698 2026] [:error] [pid 19101:tid 19150] [client 20.251.39.123:37807] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqNFGAHj9bEvrTgbO3CPgAAAE0"]
[Fri Apr 24 05:20:21.808659 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:25299] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqNFeKCZKf8_u2LKiA_9gAAAQg"]
[Fri Apr 24 05:20:22.508180 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:41511] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqNFuKCZKf8_u2LKiA_-wAAAQs"]
[Fri Apr 24 05:20:23.530556 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:4468] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqNFwDSgrbLEZbkqD6u5QAAAIE"]
[Fri Apr 24 05:20:24.143305 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:36004] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aeqNGOKCZKf8_u2LKiBAAQAAAQE"]
[Fri Apr 24 05:20:24.753418 2026] [:error] [pid 19100:tid 19109] [client 20.251.39.123:4466] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aeqNGLF_hzQs4Cqbiff9OQAAAAA"]
[Fri Apr 24 05:20:25.403878 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:4462] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aeqNGTQ--M3-tsKAnhGGqQAAANU"]
[Fri Apr 24 05:20:26.309844 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:38655] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "aeqNGuKCZKf8_u2LKiBABgAAARI"]
[Fri Apr 24 05:20:26.894397 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:4458] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqNGuKCZKf8_u2LKiBACgAAAQM"]
[Fri Apr 24 05:20:27.806399 2026] [:error] [pid 19102:tid 19175] [client 20.251.39.123:38631] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqNGwDSgrbLEZbkqD6u7AAAAIs"]
[Fri Apr 24 05:20:28.633787 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:41522] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqNHDQ--M3-tsKAnhGGqgAAAM8"]
[Fri Apr 24 05:20:29.568015 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:26563] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqNHeKCZKf8_u2LKiBAGQAAARc"]
[Fri Apr 24 05:20:30.291927 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:38655] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aeqNHuKCZKf8_u2LKiBAHwAAARQ"]
[Fri Apr 24 05:20:31.029842 2026] [:error] [pid 19102:tid 19167] [client 20.251.39.123:41481] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aeqNHwDSgrbLEZbkqD6u9gAAAIM"]
[Fri Apr 24 05:20:31.573818 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:48520] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aeqNHwDSgrbLEZbkqD6u-AAAAJQ"]
[Fri Apr 24 05:20:32.176528 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:35976] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aeqNIADSgrbLEZbkqD6u_AAAAI0"]
[Fri Apr 24 05:20:32.887281 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:43781] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "aeqNILF_hzQs4Cqbiff9SAAAABA"]
[Fri Apr 24 05:20:33.446054 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:37013] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "aeqNIeKCZKf8_u2LKiBAKwAAARg"]
[Fri Apr 24 05:20:34.223581 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:38620] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "aeqNImAHj9bEvrTgbO3CUgAAAFQ"]
[Fri Apr 24 05:20:34.949725 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:38648] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "aeqNIuKCZKf8_u2LKiBAMgAAARM"]
[Fri Apr 24 05:20:35.638437 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:36011] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aeqNI-KCZKf8_u2LKiBANgAAAQ8"]
[Fri Apr 24 05:20:36.260978 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:40025] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aeqNJOKCZKf8_u2LKiBAPgAAARM"]
[Fri Apr 24 05:20:37.024320 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:25315] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aeqNJeKCZKf8_u2LKiBARQAAAQ0"]
[Fri Apr 24 05:20:37.878628 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:23755] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "aeqNJeKCZKf8_u2LKiBATAAAAQo"]
[Fri Apr 24 05:20:38.582221 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:64025] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeqNJjQ--M3-tsKAnhGGrgAAANc"]
[Fri Apr 24 05:20:39.121630 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:37100] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeqNJzQ--M3-tsKAnhGGrwAAAMA"]
[Fri Apr 24 05:20:39.817353 2026] [:error] [pid 19100:tid 19119] [client 20.251.39.123:64060] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeqNJ7F_hzQs4Cqbiff9WAAAAAk"]
[Fri Apr 24 05:20:40.963992 2026] [:error] [pid 19101:tid 19148] [client 20.251.39.123:47691] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "aeqNKGAHj9bEvrTgbO3CVwAAAEs"]
[Fri Apr 24 05:20:41.589684 2026] [:error] [pid 19101:tid 19151] [client 20.251.39.123:37048] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aeqNKWAHj9bEvrTgbO3CWgAAAE4"]
[Fri Apr 24 05:20:42.563662 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:26576] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aeqNKjQ--M3-tsKAnhGGswAAAMo"]
[Fri Apr 24 05:20:43.445687 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:37092] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aeqNK2AHj9bEvrTgbO3CXgAAAEY"]
[Fri Apr 24 05:20:44.159365 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:47680] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "aeqNLOKCZKf8_u2LKiBAWQAAARg"]
[Fri Apr 24 05:20:45.749930 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:28848] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeqNLQDSgrbLEZbkqD6vAwAAAJA"]
[Fri Apr 24 05:20:46.525376 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:37110] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeqNLgDSgrbLEZbkqD6vCAAAAIo"]
[Fri Apr 24 05:20:47.367418 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:30625] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeqNL-KCZKf8_u2LKiBAXwAAARc"]
[Fri Apr 24 05:20:47.933535 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:35975] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "aeqNLzQ--M3-tsKAnhGGtQAAANQ"]
[Fri Apr 24 05:20:48.489399 2026] [:error] [pid 19200:tid 19211] [client 20.251.39.123:30652] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeqNMDQ--M3-tsKAnhGGtgAAAMM"]
[Fri Apr 24 05:20:49.071825 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:41532] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeqNMQDSgrbLEZbkqD6vDQAAAJY"]
[Fri Apr 24 05:20:49.730510 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:26573] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeqNMeKCZKf8_u2LKiBAYwAAARg"]
[Fri Apr 24 05:20:50.523136 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:47743] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "aeqNMuKCZKf8_u2LKiBAZAAAAQs"]
[Fri Apr 24 05:20:51.224298 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:48524] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeqNM-KCZKf8_u2LKiBAZwAAAQY"]
[Fri Apr 24 05:20:52.075331 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:25828] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeqNNDQ--M3-tsKAnhGGuQAAAME"]
[Fri Apr 24 05:20:52.708757 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:26584] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeqNNADSgrbLEZbkqD6vGQAAAIU"]
[Fri Apr 24 05:20:53.462480 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:47718] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "aeqNNQDSgrbLEZbkqD6vHwAAAI0"]
[Fri Apr 24 05:20:54.065174 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:54.379885 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:54.705091 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:54.989091 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:55.510880 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:56.048917 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:56.328868 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:56.602784 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:56.866774 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:57.330293 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.251.39.123:36029] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:20:57.635611 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:36029] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeqNOTQ--M3-tsKAnhGG2QAAAMs"]
[Fri Apr 24 05:20:58.431876 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:43825] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeqNOuKCZKf8_u2LKiBAdQAAARE"]
[Fri Apr 24 05:20:59.161445 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:43790] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeqNO-KCZKf8_u2LKiBAdgAAAQQ"]
[Fri Apr 24 05:21:00.062386 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:30152] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "aeqNPOKCZKf8_u2LKiBAfAAAARQ"]
[Fri Apr 24 05:21:00.767424 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:38648] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeqNPADSgrbLEZbkqD6vKgAAAII"]
[Fri Apr 24 05:21:02.857349 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:27543] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeqNPuKCZKf8_u2LKiBAiAAAARg"]
[Fri Apr 24 05:21:04.634169 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:27066] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeqNQDQ--M3-tsKAnhGG4gAAANc"]
[Fri Apr 24 05:21:05.345623 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:21141] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "aeqNQeKCZKf8_u2LKiBAlgAAAQ4"]
[Fri Apr 24 05:21:06.454639 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:27525] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeqNQjQ--M3-tsKAnhGG5AAAAM8"]
[Fri Apr 24 05:21:07.147371 2026] [:error] [pid 19200:tid 19232] [client 20.251.39.123:50173] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeqNQzQ--M3-tsKAnhGG5QAAANg"]
[Fri Apr 24 05:21:07.783898 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:53055] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeqNQzQ--M3-tsKAnhGG5wAAANM"]
[Fri Apr 24 05:21:08.539861 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:65392] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "aeqNRADSgrbLEZbkqD6vOAAAAJQ"]
[Fri Apr 24 05:21:09.270449 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:42094] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeqNReKCZKf8_u2LKiBAnAAAARE"]
[Fri Apr 24 05:21:10.155271 2026] [:error] [pid 19100:tid 19129] [client 20.251.39.123:42103] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeqNRrF_hzQs4Cqbiff9ewAAABM"]
[Fri Apr 24 05:21:10.867505 2026] [:error] [pid 19101:tid 19154] [client 20.251.39.123:60336] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeqNRmAHj9bEvrTgbO3CbwAAAFE"]
[Fri Apr 24 05:21:11.780751 2026] [:error] [pid 19101:tid 19142] [client 20.251.39.123:65383] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "aeqNR2AHj9bEvrTgbO3CcgAAAEU"]
[Fri Apr 24 05:21:12.577924 2026] [:error] [pid 19200:tid 19211] [client 20.251.39.123:34881] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeqNSDQ--M3-tsKAnhGG7AAAAMM"]
[Fri Apr 24 05:21:13.411923 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:53424] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeqNSTQ--M3-tsKAnhGG7gAAAMA"]
[Fri Apr 24 05:21:14.232208 2026] [:error] [pid 19101:tid 19140] [client 20.251.39.123:27594] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeqNSmAHj9bEvrTgbO3CdgAAAEM"]
[Fri Apr 24 05:21:15.363732 2026] [:error] [pid 19101:tid 19141] [client 20.251.39.123:60746] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "aeqNS2AHj9bEvrTgbO3CeAAAAEQ"]
[Fri Apr 24 05:21:16.182288 2026] [:error] [pid 19101:tid 19151] [client 20.251.39.123:21559] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeqNTGAHj9bEvrTgbO3CegAAAE4"]
[Fri Apr 24 05:21:17.173062 2026] [:error] [pid 19101:tid 19144] [client 20.251.39.123:49764] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeqNTWAHj9bEvrTgbO3CfQAAAEc"]
[Fri Apr 24 05:21:18.037802 2026] [:error] [pid 19100:tid 19110] [client 20.251.39.123:48924] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeqNTrF_hzQs4Cqbiff9fgAAAAE"]
[Fri Apr 24 05:21:20.921934 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:53421] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "aeqNUADSgrbLEZbkqD6vRwAAAJc"]
[Fri Apr 24 05:21:22.268462 2026] [:error] [pid 19101:tid 19161] [client 20.251.39.123:31023] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqNUmAHj9bEvrTgbO3CgAAAAFg"]
[Fri Apr 24 05:21:23.933809 2026] [:error] [pid 19101:tid 19138] [client 20.251.39.123:38836] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqNU2AHj9bEvrTgbO3CgQAAAEE"]
[Fri Apr 24 05:21:25.382250 2026] [:error] [pid 52129:tid 52145] [client 20.251.39.123:34033] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqNVeKCZKf8_u2LKiBApgAAAQw"]
[Fri Apr 24 05:21:26.064233 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:23719] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqNVuKCZKf8_u2LKiBApwAAAQI"]
[Fri Apr 24 05:21:27.053693 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:48958] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeqNV-KCZKf8_u2LKiBAqgAAARc"]
[Fri Apr 24 05:21:27.711650 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:39262] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeqNVwDSgrbLEZbkqD6vTQAAAJE"]
[Fri Apr 24 05:21:28.488846 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:29362] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeqNWADSgrbLEZbkqD6vTwAAAII"]
[Fri Apr 24 05:21:30.193386 2026] [:error] [pid 19102:tid 19170] [client 20.251.39.123:26188] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "aeqNWgDSgrbLEZbkqD6vUwAAAIY"]
[Fri Apr 24 05:21:31.003154 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:61988] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "aeqNWzQ--M3-tsKAnhGG-wAAAMY"]
[Fri Apr 24 05:21:31.644087 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:23688] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "aeqNW-KCZKf8_u2LKiBArgAAARQ"]
[Fri Apr 24 05:21:32.286453 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:31084] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "aeqNXOKCZKf8_u2LKiBAsQAAAQc"]
[Fri Apr 24 05:21:33.009172 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:63803] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "aeqNXeKCZKf8_u2LKiBAswAAAQs"]
[Fri Apr 24 05:21:33.583132 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:24720] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "aeqNXQDSgrbLEZbkqD6vVQAAAJQ"]
[Fri Apr 24 05:21:36.012479 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:26540] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "aeqNYOKCZKf8_u2LKiBAuAAAAQY"]
[Fri Apr 24 05:21:37.312662 2026] [:error] [pid 19101:tid 19156] [client 20.251.39.123:35243] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "aeqNYWAHj9bEvrTgbO3ChQAAAFM"]
[Fri Apr 24 05:21:38.018322 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:61981] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "aeqNYuKCZKf8_u2LKiBAwAAAAQg"]
[Fri Apr 24 05:21:38.837178 2026] [:error] [pid 19100:tid 19132] [client 20.251.39.123:4500] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeqNYrF_hzQs4Cqbiff9hQAAABY"]
[Fri Apr 24 05:21:39.752443 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:26549] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeqNYwDSgrbLEZbkqD6vWQAAAIA"]
[Fri Apr 24 05:21:40.450487 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:58233] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeqNZDQ--M3-tsKAnhGHDQAAAMI"]
[Fri Apr 24 05:21:41.482040 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:48628] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "aeqNZbF_hzQs4Cqbiff9hwAAABU"]
[Fri Apr 24 05:21:42.265882 2026] [:error] [pid 19101:tid 19142] [client 20.251.39.123:24721] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aeqNZmAHj9bEvrTgbO3CjAAAAEU"]
[Fri Apr 24 05:21:43.389152 2026] [:error] [pid 19102:tid 19171] [client 20.251.39.123:39963] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aeqNZwDSgrbLEZbkqD6vZwAAAIc"]
[Fri Apr 24 05:21:44.954801 2026] [:error] [pid 19100:tid 19112] [client 20.251.39.123:48613] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aeqNaLF_hzQs4Cqbiff9iQAAAAM"]
[Fri Apr 24 05:21:45.712630 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:61598] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "aeqNaeKCZKf8_u2LKiBA2gAAARY"]
[Fri Apr 24 05:21:46.609720 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:61522] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeqNauKCZKf8_u2LKiBA3gAAAQI"]
[Fri Apr 24 05:21:47.379542 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:31090] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeqNa-KCZKf8_u2LKiBA4QAAAQk"]
[Fri Apr 24 05:21:49.202788 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:46467] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "aeqNbeKCZKf8_u2LKiBA5wAAAQ0"]
[Fri Apr 24 05:22:01.388415 2026] [proxy_fcgi:error] [pid 19102:tid 19178] [client 20.251.39.123:46484] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:02.288118 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:02.665489 2026] [proxy_fcgi:error] [pid 19200:tid 19223] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:02.953716 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:03.374159 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:03.654654 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:04.247094 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:04.575915 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:04.841148 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:05.183164 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.251.39.123:48587] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:22:05.443953 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:48587] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqNfTQ--M3-tsKAnhGHTgAAANU"]
[Fri Apr 24 05:22:06.134072 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:61569] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqNfgDSgrbLEZbkqD6v4gAAAJY"]
[Fri Apr 24 05:22:06.873500 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:63979] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqNfjQ--M3-tsKAnhGHVAAAAMc"]
[Fri Apr 24 05:22:07.458401 2026] [:error] [pid 19102:tid 19176] [client 20.251.39.123:4338] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqNfwDSgrbLEZbkqD6v6gAAAIw"]
[Fri Apr 24 05:22:08.241847 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:32949] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeqNgOKCZKf8_u2LKiBA_wAAARU"]
[Fri Apr 24 05:22:09.011770 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:46470] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeqNgeKCZKf8_u2LKiBBBAAAAQE"]
[Fri Apr 24 05:22:09.824667 2026] [:error] [pid 19100:tid 19125] [client 20.251.39.123:43875] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeqNgbF_hzQs4Cqbiff9mAAAAA8"]
[Fri Apr 24 05:22:10.607676 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:4887] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "aeqNgrF_hzQs4Cqbiff9mwAAABg"]
[Fri Apr 24 05:22:11.251537 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:43892] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNgwDSgrbLEZbkqD6v8gAAAJY"]
[Fri Apr 24 05:22:11.974516 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:43852] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNgzQ--M3-tsKAnhGHbgAAANM"]
[Fri Apr 24 05:22:12.871699 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:4865] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNhDQ--M3-tsKAnhGHdgAAAME"]
[Fri Apr 24 05:22:13.612966 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:32957] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNheKCZKf8_u2LKiBBDgAAARI"]
[Fri Apr 24 05:22:14.251841 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:44392] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqNhjQ--M3-tsKAnhGHhAAAAMI"]
[Fri Apr 24 05:22:15.129830 2026] [:error] [pid 19100:tid 19109] [client 20.251.39.123:4342] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqNh7F_hzQs4Cqbiff9nQAAAAA"]
[Fri Apr 24 05:22:15.932899 2026] [:error] [pid 19100:tid 19128] [client 20.251.39.123:4345] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqNh7F_hzQs4Cqbiff9nwAAABI"]
[Fri Apr 24 05:22:16.940878 2026] [:error] [pid 19100:tid 19119] [client 20.251.39.123:60972] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqNiLF_hzQs4Cqbiff9pAAAAAk"]
[Fri Apr 24 05:22:17.924085 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:43873] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeqNiTQ--M3-tsKAnhGHogAAAME"]
[Fri Apr 24 05:22:18.648919 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:4900] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeqNiuKCZKf8_u2LKiBBEgAAAQ8"]
[Fri Apr 24 05:22:19.253433 2026] [:error] [pid 19100:tid 19120] [client 20.251.39.123:42663] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeqNi7F_hzQs4Cqbiff9qgAAAAo"]
[Fri Apr 24 05:22:20.040591 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:43846] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "aeqNjOKCZKf8_u2LKiBBFAAAARY"]
[Fri Apr 24 05:22:20.930917 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:4295] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeqNjOKCZKf8_u2LKiBBFwAAAQA"]
[Fri Apr 24 05:22:21.746039 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:35664] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeqNjeKCZKf8_u2LKiBBGwAAARc"]
[Fri Apr 24 05:22:22.550492 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:36039] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeqNjuKCZKf8_u2LKiBBHwAAAQE"]
[Fri Apr 24 05:22:23.428844 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:4891] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "aeqNjwDSgrbLEZbkqD6wAAAAAJc"]
[Fri Apr 24 05:22:23.978202 2026] [:error] [pid 19101:tid 19142] [client 20.251.39.123:42686] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqNj2AHj9bEvrTgbO3CqgAAAEU"]
[Fri Apr 24 05:22:24.580854 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:36073] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqNkDQ--M3-tsKAnhGHwwAAAMc"]
[Fri Apr 24 05:22:25.303939 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:60960] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqNkQDSgrbLEZbkqD6wAgAAAJE"]
[Fri Apr 24 05:22:25.931903 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:46510] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqNkeKCZKf8_u2LKiBBLgAAAQQ"]
[Fri Apr 24 05:22:26.710835 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:42690] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqNkuKCZKf8_u2LKiBBMQAAAQ0"]
[Fri Apr 24 05:22:27.356131 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:58545] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqNkwDSgrbLEZbkqD6wBgAAAJA"]
[Fri Apr 24 05:22:27.958533 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:58551] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqNkzQ--M3-tsKAnhGHygAAAM8"]
[Fri Apr 24 05:22:29.168738 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:58547] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqNlbF_hzQs4Cqbiff9rwAAAAI"]
[Fri Apr 24 05:22:29.925039 2026] [:error] [pid 19100:tid 19122] [client 20.251.39.123:54984] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeqNlbF_hzQs4Cqbiff9sAAAAAw"]
[Fri Apr 24 05:22:30.969054 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:44352] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeqNluKCZKf8_u2LKiBBNgAAAQQ"]
[Fri Apr 24 05:22:31.709802 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:28919] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeqNlzQ--M3-tsKAnhGH1gAAANM"]
[Fri Apr 24 05:22:32.388528 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:21998] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "aeqNmOKCZKf8_u2LKiBBOgAAARM"]
[Fri Apr 24 05:22:33.193665 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:36072] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeqNmeKCZKf8_u2LKiBBPgAAAQI"]
[Fri Apr 24 05:22:33.843117 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:56835] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeqNmbF_hzQs4Cqbiff9vAAAABU"]
[Fri Apr 24 05:22:34.782790 2026] [:error] [pid 19200:tid 19226] [client 20.251.39.123:21995] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeqNmjQ--M3-tsKAnhGH5wAAANI"]
[Fri Apr 24 05:22:35.511854 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:60958] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "aeqNmzQ--M3-tsKAnhGH6QAAAMQ"]
[Fri Apr 24 05:22:36.217080 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:53779] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqNnDQ--M3-tsKAnhGH8gAAAM8"]
[Fri Apr 24 05:22:36.799703 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:52618] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqNnDQ--M3-tsKAnhGH9gAAAME"]
[Fri Apr 24 05:22:37.473214 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:44829] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqNneKCZKf8_u2LKiBBRwAAAQQ"]
[Fri Apr 24 05:22:38.375956 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:42678] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqNnuKCZKf8_u2LKiBBSwAAAQU"]
[Fri Apr 24 05:22:40.060626 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:36055] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqNoADSgrbLEZbkqD6wEQAAAI0"]
[Fri Apr 24 05:22:42.259406 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:36571] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqNouKCZKf8_u2LKiBBUQAAAQU"]
[Fri Apr 24 05:22:43.294606 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:36565] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqNowDSgrbLEZbkqD6wFwAAAIo"]
[Fri Apr 24 05:22:43.970187 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:28919] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqNozQ--M3-tsKAnhGH_QAAANc"]
[Fri Apr 24 05:22:44.827410 2026] [:error] [pid 19102:tid 19183] [client 20.251.39.123:44813] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNpADSgrbLEZbkqD6wGAAAAJM"]
[Fri Apr 24 05:22:45.558129 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:38552] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNpeKCZKf8_u2LKiBBWAAAARQ"]
[Fri Apr 24 05:22:46.181538 2026] [:error] [pid 19101:tid 19161] [client 20.251.39.123:4299] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNpmAHj9bEvrTgbO3C1AAAAFg"]
[Fri Apr 24 05:22:47.197116 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:55017] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNpwDSgrbLEZbkqD6wHgAAAIU"]
[Fri Apr 24 05:22:48.177660 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:44819] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeqNqOKCZKf8_u2LKiBBYAAAAQA"]
[Fri Apr 24 05:22:48.927881 2026] [:error] [pid 19101:tid 19149] [client 20.251.39.123:42676] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeqNqGAHj9bEvrTgbO3C1wAAAEw"]
[Fri Apr 24 05:22:49.587656 2026] [:error] [pid 19101:tid 19137] [client 20.251.39.123:52611] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeqNqWAHj9bEvrTgbO3C2wAAAEA"]
[Fri Apr 24 05:22:50.336677 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:38563] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "aeqNquKCZKf8_u2LKiBBbQAAAQU"]
[Fri Apr 24 05:22:50.952490 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:58196] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeqNqmAHj9bEvrTgbO3C3QAAAEk"]
[Fri Apr 24 05:22:51.816328 2026] [:error] [pid 52129:tid 52145] [client 20.251.39.123:21993] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeqNq-KCZKf8_u2LKiBBcgAAAQw"]
[Fri Apr 24 05:22:52.525930 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:44825] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeqNrOKCZKf8_u2LKiBBeQAAAQg"]
[Fri Apr 24 05:22:53.135864 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:36584] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "aeqNreKCZKf8_u2LKiBBfgAAARg"]
[Fri Apr 24 05:22:53.982545 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:60928] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNreKCZKf8_u2LKiBBhgAAAQ0"]
[Fri Apr 24 05:22:54.635319 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:36557] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNrjQ--M3-tsKAnhGIAgAAAM4"]
[Fri Apr 24 05:22:55.252067 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:38554] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNrwDSgrbLEZbkqD6wKAAAAII"]
[Fri Apr 24 05:22:55.968696 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:36601] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqNrwDSgrbLEZbkqD6wKwAAAI0"]
[Fri Apr 24 05:22:56.686334 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:52642] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeqNsOKCZKf8_u2LKiBBjwAAAQc"]
[Fri Apr 24 05:22:57.459746 2026] [:error] [pid 19101:tid 19140] [client 20.251.39.123:36562] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeqNsWAHj9bEvrTgbO3C5AAAAEM"]
[Fri Apr 24 05:22:58.145005 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:41537] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeqNsgDSgrbLEZbkqD6wMwAAAIo"]
[Fri Apr 24 05:22:58.906870 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:60934] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "aeqNsjQ--M3-tsKAnhGICwAAANQ"]
[Fri Apr 24 05:22:59.600250 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:36544] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqNswDSgrbLEZbkqD6wNgAAAJc"]
[Fri Apr 24 05:23:00.453617 2026] [:error] [pid 19101:tid 19145] [client 20.251.39.123:38559] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqNtGAHj9bEvrTgbO3C6gAAAEg"]
[Fri Apr 24 05:23:01.347496 2026] [:error] [pid 19101:tid 19152] [client 20.251.39.123:59046] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqNtWAHj9bEvrTgbO3C7gAAAE8"]
[Fri Apr 24 05:23:01.981163 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:52620] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqNteKCZKf8_u2LKiBBlgAAAQs"]
[Fri Apr 24 05:23:02.763929 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:59035] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeqNtjQ--M3-tsKAnhGIFwAAANY"]
[Fri Apr 24 05:23:03.439596 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:53770] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeqNtzQ--M3-tsKAnhGIHAAAAME"]
[Fri Apr 24 05:23:04.138015 2026] [:error] [pid 19100:tid 19120] [client 20.251.39.123:42661] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeqNuLF_hzQs4Cqbiff9-AAAAAo"]
[Fri Apr 24 05:23:04.778863 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:36049] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "aeqNuDQ--M3-tsKAnhGIIwAAAMI"]
[Fri Apr 24 05:23:05.959575 2026] [proxy_fcgi:error] [pid 19101:tid 19155] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:06.344636 2026] [proxy_fcgi:error] [pid 19101:tid 19142] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:06.608253 2026] [proxy_fcgi:error] [pid 19101:tid 19159] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:07.150130 2026] [proxy_fcgi:error] [pid 19101:tid 19147] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:08.188638 2026] [proxy_fcgi:error] [pid 19101:tid 19137] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:08.732702 2026] [proxy_fcgi:error] [pid 19101:tid 19148] [client 20.251.39.123:53776] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:23:08.993647 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:53776] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqNvGAHj9bEvrTgbO3DBAAAAEk"]
[Fri Apr 24 05:23:09.683907 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:38539] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqNveKCZKf8_u2LKiBBpQAAAQY"]
[Fri Apr 24 05:23:10.330076 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:36552] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqNvuKCZKf8_u2LKiBBqQAAAQI"]
[Fri Apr 24 05:23:10.887332 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:59020] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqNvuKCZKf8_u2LKiBBqwAAARU"]
[Fri Apr 24 05:23:11.634719 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:35280] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNv-KCZKf8_u2LKiBBsQAAARQ"]
[Fri Apr 24 05:23:12.344822 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:41575] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNwDQ--M3-tsKAnhGIMQAAAMo"]
[Fri Apr 24 05:23:12.879785 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:56870] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNwOKCZKf8_u2LKiBBuQAAAQQ"]
[Fri Apr 24 05:23:13.561135 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:35266] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "aeqNwQDSgrbLEZbkqD6wTQAAAI4"]
[Fri Apr 24 05:23:14.195283 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:52608] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeqNwuKCZKf8_u2LKiBBvQAAAQM"]
[Fri Apr 24 05:23:14.824932 2026] [:error] [pid 19102:tid 19185] [client 20.251.39.123:58496] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeqNwgDSgrbLEZbkqD6wVAAAAJU"]
[Fri Apr 24 05:23:15.713660 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:60938] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeqNw-KCZKf8_u2LKiBBwQAAAQo"]
[Fri Apr 24 05:23:16.364392 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:38578] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "aeqNxGAHj9bEvrTgbO3DCAAAAEo"]
[Fri Apr 24 05:23:17.024293 2026] [:error] [pid 19102:tid 19172] [client 20.251.39.123:41536] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeqNxQDSgrbLEZbkqD6wXQAAAIg"]
[Fri Apr 24 05:23:17.852310 2026] [:error] [pid 19100:tid 19116] [client 20.251.39.123:38562] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeqNxbF_hzQs4Cqbiff-GAAAAAc"]
[Fri Apr 24 05:23:18.446385 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:35325] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeqNxmAHj9bEvrTgbO3DEAAAAEk"]
[Fri Apr 24 05:23:19.135819 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:38533] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fi.php"] [unique_id "aeqNx-KCZKf8_u2LKiBBzQAAAQ0"]
[Fri Apr 24 05:23:19.748283 2026] [:error] [pid 19101:tid 19144] [client 20.251.39.123:38560] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeqNx2AHj9bEvrTgbO3DEgAAAEc"]
[Fri Apr 24 05:23:20.745026 2026] [:error] [pid 19200:tid 19221] [client 20.251.39.123:42741] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeqNyDQ--M3-tsKAnhGIPwAAAM0"]
[Fri Apr 24 05:23:21.661691 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:25241] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeqNybF_hzQs4Cqbiff-HgAAABU"]
[Fri Apr 24 05:23:22.624377 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:42689] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "aeqNyuKCZKf8_u2LKiBB2gAAARA"]
[Fri Apr 24 05:23:23.268928 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:22008] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeqNyzQ--M3-tsKAnhGIQQAAAMY"]
[Fri Apr 24 05:23:24.123892 2026] [:error] [pid 19102:tid 19171] [client 20.251.39.123:47629] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeqNzADSgrbLEZbkqD6wbgAAAIc"]
[Fri Apr 24 05:23:24.746835 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:21928] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeqNzOKCZKf8_u2LKiBB4wAAAQg"]
[Fri Apr 24 05:23:25.465414 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:53813] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "aeqNzTQ--M3-tsKAnhGIRgAAAMs"]
[Fri Apr 24 05:23:26.347250 2026] [:error] [pid 19101:tid 19156] [client 20.251.39.123:25274] [client 20.251.39.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeqNzmAHj9bEvrTgbO3DHwAAAFM"]
[Fri Apr 24 05:23:27.671033 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:4241] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeqNz-KCZKf8_u2LKiBB7gAAARY"]
[Fri Apr 24 05:23:28.592554 2026] [:error] [pid 19200:tid 19220] [client 20.251.39.123:33488] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeqN0DQ--M3-tsKAnhGITAAAAMw"]
[Fri Apr 24 05:23:29.836366 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:4229] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeqN0eKCZKf8_u2LKiBB-wAAARY"]
[Fri Apr 24 05:23:31.087800 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:4560] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "aeqN0-KCZKf8_u2LKiBCBAAAARc"]
[Fri Apr 24 05:23:32.164788 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:35602] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqN1DQ--M3-tsKAnhGIUAAAAMI"]
[Fri Apr 24 05:23:33.411069 2026] [:error] [pid 19100:tid 19109] [client 20.251.39.123:49341] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqN1bF_hzQs4Cqbiff-NgAAAAA"]
[Fri Apr 24 05:23:34.037003 2026] [:error] [pid 19100:tid 19130] [client 20.251.39.123:54195] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqN1rF_hzQs4Cqbiff-OAAAABQ"]
[Fri Apr 24 05:23:34.702134 2026] [:error] [pid 19100:tid 19124] [client 20.251.39.123:54191] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqN1rF_hzQs4Cqbiff-OwAAAA4"]
[Fri Apr 24 05:23:36.585958 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:34442] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqN2OKCZKf8_u2LKiBCGwAAAQ8"]
[Fri Apr 24 05:23:38.827934 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:54945] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqN2jQ--M3-tsKAnhGIYQAAANY"]
[Fri Apr 24 05:23:39.842441 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:26166] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqN2zQ--M3-tsKAnhGIZgAAAMs"]
[Fri Apr 24 05:23:40.865335 2026] [:error] [pid 19200:tid 19225] [client 20.251.39.123:26142] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqN3DQ--M3-tsKAnhGIaQAAANE"]
[Fri Apr 24 05:23:41.504372 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:21593] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "aeqN3TQ--M3-tsKAnhGIbAAAAMc"]
[Fri Apr 24 05:23:42.231762 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:31893] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "aeqN3gDSgrbLEZbkqD6whwAAAJY"]
[Fri Apr 24 05:23:43.430384 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:26117] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "aeqN3zQ--M3-tsKAnhGIdwAAANU"]
[Fri Apr 24 05:23:44.245625 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:29904] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "aeqN4DQ--M3-tsKAnhGIfwAAAMI"]
[Fri Apr 24 05:23:44.893743 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:46569] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aeqN4ADSgrbLEZbkqD6wjAAAAII"]
[Fri Apr 24 05:23:45.513758 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:27123] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aeqN4eKCZKf8_u2LKiBCMAAAAQI"]
[Fri Apr 24 05:23:46.165451 2026] [:error] [pid 19101:tid 19151] [client 20.251.39.123:29840] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aeqN4mAHj9bEvrTgbO3DNAAAAE4"]
[Fri Apr 24 05:23:46.952698 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:53462] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aeqN4jQ--M3-tsKAnhGIkQAAANM"]
[Fri Apr 24 05:23:47.648284 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:46533] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeqN4wDSgrbLEZbkqD6wlQAAAIk"]
[Fri Apr 24 05:23:48.483137 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:63686] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeqN5OKCZKf8_u2LKiBCPQAAARU"]
[Fri Apr 24 05:23:49.199817 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:44869] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeqN5QDSgrbLEZbkqD6wnQAAAIE"]
[Fri Apr 24 05:23:50.531042 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:23249] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aeqN5uKCZKf8_u2LKiBCRQAAARM"]
[Fri Apr 24 05:23:57.254910 2026] [:error] [pid 19102:tid 19167] [client 20.251.39.123:54932] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeqN7QDSgrbLEZbkqD6wpQAAAIM"]
[Fri Apr 24 05:23:58.096126 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:23186] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeqN7uKCZKf8_u2LKiBCeQAAAQs"]
[Fri Apr 24 05:23:58.936436 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:29882] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeqN7uKCZKf8_u2LKiBCgAAAAQY"]
[Fri Apr 24 05:24:00.036627 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:49716] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "aeqN8OKCZKf8_u2LKiBChQAAARA"]
[Fri Apr 24 05:24:00.647181 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:49697] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeqN8OKCZKf8_u2LKiBCiwAAAQo"]
[Fri Apr 24 05:24:01.350516 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:23231] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeqN8eKCZKf8_u2LKiBCkQAAARY"]
[Fri Apr 24 05:24:01.914301 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:31910] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeqN8eKCZKf8_u2LKiBClwAAAQc"]
[Fri Apr 24 05:24:06.245134 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:28293] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "aeqN9uKCZKf8_u2LKiBCpAAAAQY"]
[Fri Apr 24 05:24:11.449788 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:12.085943 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:12.625969 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:12.891900 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:13.164907 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:13.875730 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:14.141052 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:14.704934 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.251.39.123:49685] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:24:14.966148 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:49685] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeqN_uKCZKf8_u2LKiBC2gAAAQM"]
[Fri Apr 24 05:24:16.195598 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:34461] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeqOALF_hzQs4Cqbiff-WgAAABA"]
[Fri Apr 24 05:24:17.292964 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:23247] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeqOAeKCZKf8_u2LKiBC6AAAARM"]
[Fri Apr 24 05:24:18.442058 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:23287] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "aeqOAuKCZKf8_u2LKiBC8wAAARg"]
[Fri Apr 24 05:24:19.197776 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:59131] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeqOAzQ--M3-tsKAnhGIvAAAAMU"]
[Fri Apr 24 05:24:19.938964 2026] [:error] [pid 19101:tid 19140] [client 20.251.39.123:49715] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeqOA2AHj9bEvrTgbO3DUgAAAEM"]
[Fri Apr 24 05:24:20.688024 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:54922] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeqOBOKCZKf8_u2LKiBC-wAAARU"]
[Fri Apr 24 05:24:21.359710 2026] [:error] [pid 19101:tid 19152] [client 20.251.39.123:49713] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "aeqOBWAHj9bEvrTgbO3DVQAAAE8"]
[Fri Apr 24 05:24:22.321853 2026] [:error] [pid 19100:tid 19116] [client 20.251.39.123:58165] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "aeqOBrF_hzQs4Cqbiff-YwAAAAc"]
[Fri Apr 24 05:24:22.991202 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:23212] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "aeqOBjQ--M3-tsKAnhGIwgAAAMg"]
[Fri Apr 24 05:24:24.577761 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:58164] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "aeqOCDQ--M3-tsKAnhGIyAAAAM8"]
[Fri Apr 24 05:24:25.444195 2026] [:error] [pid 19101:tid 19139] [client 20.251.39.123:45901] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "aeqOCWAHj9bEvrTgbO3DXgAAAEI"]
[Fri Apr 24 05:24:26.401495 2026] [:error] [pid 19100:tid 19122] [client 20.251.39.123:51610] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "aeqOCrF_hzQs4Cqbiff-aQAAAAw"]
[Fri Apr 24 05:24:27.803999 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:45331] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "aeqOCzQ--M3-tsKAnhGI0gAAANM"]
[Fri Apr 24 05:24:28.723204 2026] [:error] [pid 19102:tid 19183] [client 20.251.39.123:51646] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "aeqODADSgrbLEZbkqD6w4QAAAJM"]
[Fri Apr 24 05:24:29.395803 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:36011] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "aeqODWAHj9bEvrTgbO3DYwAAAEo"]
[Fri Apr 24 05:24:30.331973 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:54637] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeqODjQ--M3-tsKAnhGI2gAAANU"]
[Fri Apr 24 05:24:31.116357 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:4227] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeqOD2AHj9bEvrTgbO3DZgAAAEY"]
[Fri Apr 24 05:24:31.851936 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:35646] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeqODwDSgrbLEZbkqD6w6wAAAIE"]
[Fri Apr 24 05:24:32.642087 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:54245] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "aeqOEADSgrbLEZbkqD6w7gAAAIU"]
[Fri Apr 24 05:24:33.385435 2026] [:error] [pid 19200:tid 19211] [client 20.251.39.123:57909] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqOETQ--M3-tsKAnhGI3QAAAMM"]
[Fri Apr 24 05:24:34.037576 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:47619] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqOEjQ--M3-tsKAnhGI4AAAAMg"]
[Fri Apr 24 05:24:34.932252 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:25257] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqOEjQ--M3-tsKAnhGI5gAAAM4"]
[Fri Apr 24 05:24:35.748767 2026] [:error] [pid 19101:tid 19137] [client 20.251.39.123:35276] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqOE2AHj9bEvrTgbO3DagAAAEA"]
[Fri Apr 24 05:24:36.756996 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:38365] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeqOFOKCZKf8_u2LKiBDDQAAAQ4"]
[Fri Apr 24 05:24:37.700015 2026] [:error] [pid 19101:tid 19153] [client 20.251.39.123:58558] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeqOFWAHj9bEvrTgbO3DbgAAAFA"]
[Fri Apr 24 05:24:38.648290 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:28875] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeqOFrF_hzQs4Cqbiff-gQAAABg"]
[Fri Apr 24 05:24:39.314594 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:44840] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "aeqOF7F_hzQs4Cqbiff-gwAAABA"]
[Fri Apr 24 05:51:26.756734 2026] [proxy_fcgi:error] [pid 19102:tid 19173] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:27.035738 2026] [proxy_fcgi:error] [pid 19102:tid 19178] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:27.305073 2026] [proxy_fcgi:error] [pid 19102:tid 19181] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:27.577293 2026] [proxy_fcgi:error] [pid 19102:tid 19170] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:27.840717 2026] [proxy_fcgi:error] [pid 19102:tid 19186] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:28.108569 2026] [proxy_fcgi:error] [pid 19102:tid 19184] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:28.703152 2026] [proxy_fcgi:error] [pid 19102:tid 19175] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:28.975709 2026] [proxy_fcgi:error] [pid 19102:tid 19185] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:29.246828 2026] [proxy_fcgi:error] [pid 19102:tid 19179] [client 74.248.36.12:38764] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:51:29.510358 2026] [:error] [pid 19102:tid 19187] [client 74.248.36.12:38764] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeqUYQDSgrbLEZbkqD69qQAAAJc"]
[Fri Apr 24 05:51:30.169517 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:48202] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeqUYmAHj9bEvrTgbO3KMwAAAFM"]
[Fri Apr 24 05:51:30.821799 2026] [:error] [pid 19100:tid 19120] [client 74.248.36.12:49936] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeqUYrF_hzQs4CqbifcGXAAAAAo"]
[Fri Apr 24 05:51:31.445222 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:37085] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeqUYwDSgrbLEZbkqD69sAAAAIk"]
[Fri Apr 24 05:51:32.112800 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:38775] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeqUZADSgrbLEZbkqD69sgAAAJY"]
[Fri Apr 24 05:51:32.729615 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:37111] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeqUZOKCZKf8_u2LKiBV6wAAAQY"]
[Fri Apr 24 05:51:33.433916 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:49925] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeqUZeKCZKf8_u2LKiBV7gAAARc"]
[Fri Apr 24 05:51:34.101471 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:8117] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeqUZuKCZKf8_u2LKiBV9AAAAQg"]
[Fri Apr 24 05:51:34.716081 2026] [:error] [pid 19101:tid 19157] [client 74.248.36.12:48225] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeqUZmAHj9bEvrTgbO3KPAAAAFQ"]
[Fri Apr 24 05:51:35.457850 2026] [:error] [pid 19100:tid 19127] [client 74.248.36.12:8077] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeqUZ7F_hzQs4CqbifcGYwAAABE"]
[Fri Apr 24 05:51:36.050479 2026] [:error] [pid 19100:tid 19115] [client 74.248.36.12:41178] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeqUaLF_hzQs4CqbifcGZQAAAAY"]
[Fri Apr 24 05:51:36.742493 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:38766] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeqUaDQ--M3-tsKAnhGVqwAAAM4"]
[Fri Apr 24 05:51:37.431854 2026] [:error] [pid 19100:tid 19119] [client 74.248.36.12:37078] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeqUabF_hzQs4CqbifcGaQAAAAk"]
[Fri Apr 24 05:51:38.196212 2026] [:error] [pid 19200:tid 19211] [client 74.248.36.12:49940] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeqUajQ--M3-tsKAnhGVrgAAAMM"]
[Fri Apr 24 05:51:38.936584 2026] [:error] [pid 19100:tid 19125] [client 74.248.36.12:37073] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeqUarF_hzQs4CqbifcGbgAAAA8"]
[Fri Apr 24 05:51:39.542358 2026] [:error] [pid 19102:tid 19183] [client 74.248.36.12:48472] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeqUawDSgrbLEZbkqD69xAAAAJM"]
[Fri Apr 24 05:51:40.357930 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:48240] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeqUbOKCZKf8_u2LKiBWBgAAAQA"]
[Fri Apr 24 05:51:41.068097 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:47213] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeqUbTQ--M3-tsKAnhGVuQAAANE"]
[Fri Apr 24 05:51:41.622204 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:48207] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeqUbeKCZKf8_u2LKiBWCAAAAQY"]
[Fri Apr 24 05:51:42.241992 2026] [:error] [pid 19102:tid 19164] [client 74.248.36.12:8097] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeqUbgDSgrbLEZbkqD69ywAAAIA"]
[Fri Apr 24 05:51:42.918282 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:38454] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeqUbuKCZKf8_u2LKiBWDQAAARY"]
[Fri Apr 24 05:51:43.507543 2026] [:error] [pid 19102:tid 19168] [client 74.248.36.12:8073] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeqUbwDSgrbLEZbkqD690QAAAIQ"]
[Fri Apr 24 05:51:44.223748 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:38754] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeqUcOKCZKf8_u2LKiBWFQAAAQk"]
[Fri Apr 24 05:51:44.873493 2026] [:error] [pid 19200:tid 19227] [client 74.248.36.12:48237] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeqUcDQ--M3-tsKAnhGVwwAAANM"]
[Fri Apr 24 05:51:45.482438 2026] [:error] [pid 19100:tid 19116] [client 74.248.36.12:49920] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeqUcbF_hzQs4CqbifcGdQAAAAc"]
[Fri Apr 24 05:51:46.152898 2026] [:error] [pid 19102:tid 19166] [client 74.248.36.12:47188] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeqUcgDSgrbLEZbkqD692QAAAII"]
[Fri Apr 24 05:51:46.859726 2026] [:error] [pid 19100:tid 19121] [client 74.248.36.12:37105] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeqUcrF_hzQs4CqbifcGegAAAAs"]
[Fri Apr 24 05:51:47.464850 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:41153] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeqUczQ--M3-tsKAnhGVyQAAAMc"]
[Fri Apr 24 05:51:48.044530 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:38428] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeqUdOKCZKf8_u2LKiBWKwAAARU"]
[Fri Apr 24 05:51:48.682907 2026] [:error] [pid 19100:tid 19127] [client 74.248.36.12:49924] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeqUdLF_hzQs4CqbifcGfQAAABE"]
[Fri Apr 24 05:51:49.423474 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:8077] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeqUdQDSgrbLEZbkqD694QAAAI4"]
[Fri Apr 24 05:51:50.044347 2026] [:error] [pid 19200:tid 19210] [client 74.248.36.12:48230] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeqUdjQ--M3-tsKAnhGV0QAAAMI"]
[Fri Apr 24 05:51:50.743327 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:38767] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqUduKCZKf8_u2LKiBWLwAAAQc"]
[Fri Apr 24 05:51:51.390773 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:41160] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqUdzQ--M3-tsKAnhGV1wAAAMA"]
[Fri Apr 24 05:51:52.090980 2026] [:error] [pid 19101:tid 19161] [client 74.248.36.12:49953] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqUeGAHj9bEvrTgbO3KZgAAAFg"]
[Fri Apr 24 05:51:52.684458 2026] [:error] [pid 19101:tid 19150] [client 74.248.36.12:38415] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeqUeGAHj9bEvrTgbO3KawAAAE0"]
[Fri Apr 24 05:51:53.326994 2026] [:error] [pid 19101:tid 19154] [client 74.248.36.12:38724] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeqUeWAHj9bEvrTgbO3KcQAAAFE"]
[Fri Apr 24 05:51:54.036658 2026] [:error] [pid 19101:tid 19144] [client 74.248.36.12:38448] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeqUemAHj9bEvrTgbO3KdAAAAEc"]
[Fri Apr 24 05:51:54.763818 2026] [:error] [pid 19100:tid 19120] [client 74.248.36.12:48219] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeqUerF_hzQs4CqbifcGgwAAAAo"]
[Fri Apr 24 05:51:55.759221 2026] [:error] [pid 19102:tid 19176] [client 74.248.36.12:41184] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeqUewDSgrbLEZbkqD69-AAAAIw"]
[Fri Apr 24 05:51:56.434396 2026] [:error] [pid 19101:tid 19155] [client 74.248.36.12:41198] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeqUfGAHj9bEvrTgbO3KegAAAFI"]
[Fri Apr 24 05:51:57.069584 2026] [:error] [pid 19102:tid 19185] [client 74.248.36.12:8107] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeqUfQDSgrbLEZbkqD6-AgAAAJU"]
[Fri Apr 24 05:51:57.648177 2026] [:error] [pid 19100:tid 19110] [client 74.248.36.12:48457] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeqUfbF_hzQs4CqbifcGjQAAAAE"]
[Fri Apr 24 05:51:58.309770 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:48243] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeqUfuKCZKf8_u2LKiBWWAAAARQ"]
[Fri Apr 24 05:51:58.919457 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:49976] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqUfuKCZKf8_u2LKiBWZAAAAQg"]
[Fri Apr 24 05:51:59.607978 2026] [:error] [pid 19102:tid 19168] [client 74.248.36.12:37080] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqUfwDSgrbLEZbkqD6-CQAAAIQ"]
[Fri Apr 24 05:52:00.256146 2026] [:error] [pid 19102:tid 19183] [client 74.248.36.12:49939] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqUgADSgrbLEZbkqD6-CgAAAJM"]
[Fri Apr 24 05:52:01.026074 2026] [:error] [pid 19101:tid 19141] [client 74.248.36.12:8098] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeqUgWAHj9bEvrTgbO3KhQAAAEQ"]
[Fri Apr 24 05:52:01.650538 2026] [:error] [pid 19101:tid 19154] [client 74.248.36.12:48469] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeqUgWAHj9bEvrTgbO3KhgAAAFE"]
[Fri Apr 24 05:52:02.299164 2026] [:error] [pid 19100:tid 19121] [client 74.248.36.12:49926] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeqUgrF_hzQs4CqbifcGmgAAAAs"]
[Fri Apr 24 05:52:03.006040 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:48252] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeqUg-KCZKf8_u2LKiBWjwAAAQo"]
[Fri Apr 24 05:52:03.707336 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:41169] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeqUg-KCZKf8_u2LKiBWlgAAAQQ"]
[Fri Apr 24 05:52:04.421680 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:37070] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeqUhOKCZKf8_u2LKiBWnQAAAQc"]
[Fri Apr 24 05:52:05.169795 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:48255] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeqUheKCZKf8_u2LKiBWpgAAAQQ"]
[Fri Apr 24 05:52:05.836224 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:38400] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeqUheKCZKf8_u2LKiBWrgAAARI"]
[Fri Apr 24 05:52:06.443558 2026] [:error] [pid 19101:tid 19158] [client 74.248.36.12:41208] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeqUhmAHj9bEvrTgbO3KjQAAAFU"]
[Fri Apr 24 05:52:07.149927 2026] [:error] [pid 19102:tid 19171] [client 74.248.36.12:38433] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeqUhwDSgrbLEZbkqD6-FwAAAIc"]
[Fri Apr 24 05:52:07.809650 2026] [:error] [pid 19100:tid 19132] [client 74.248.36.12:48473] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeqUh7F_hzQs4CqbifcGqQAAABY"]
[Fri Apr 24 05:52:08.559390 2026] [:error] [pid 19100:tid 19115] [client 74.248.36.12:8074] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeqUiLF_hzQs4CqbifcGrAAAAAY"]
[Fri Apr 24 05:52:09.346964 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:38759] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeqUiQDSgrbLEZbkqD6-HgAAAIk"]
[Fri Apr 24 05:52:10.114223 2026] [:error] [pid 19100:tid 19119] [client 74.248.36.12:38773] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeqUirF_hzQs4CqbifcGsQAAAAk"]
[Fri Apr 24 05:52:10.756594 2026] [:error] [pid 19101:tid 19153] [client 74.248.36.12:38458] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeqUimAHj9bEvrTgbO3KlQAAAFA"]
[Fri Apr 24 05:52:11.526277 2026] [:error] [pid 19100:tid 19133] [client 74.248.36.12:49937] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeqUi7F_hzQs4CqbifcGuQAAABc"]
[Fri Apr 24 05:52:12.411938 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:49934] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeqUjDQ--M3-tsKAnhGWAgAAAM4"]
[Fri Apr 24 05:52:13.080619 2026] [:error] [pid 19102:tid 19183] [client 74.248.36.12:8091] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeqUjQDSgrbLEZbkqD6-IwAAAJM"]
[Fri Apr 24 05:52:13.684527 2026] [:error] [pid 52129:tid 52145] [client 74.248.36.12:48214] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeqUjeKCZKf8_u2LKiBW6QAAAQw"]
[Fri Apr 24 05:52:14.382723 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:43670] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeqUjuKCZKf8_u2LKiBW8gAAARQ"]
[Fri Apr 24 05:52:15.044740 2026] [:error] [pid 19101:tid 19138] [client 74.248.36.12:38456] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeqUj2AHj9bEvrTgbO3KnwAAAEE"]
[Fri Apr 24 05:52:15.624368 2026] [:error] [pid 19101:tid 19154] [client 74.248.36.12:48232] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqUj2AHj9bEvrTgbO3KogAAAFE"]
[Fri Apr 24 05:52:16.259605 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:37069] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqUkOKCZKf8_u2LKiBW_QAAAQ0"]
[Fri Apr 24 05:52:16.947452 2026] [:error] [pid 19102:tid 19175] [client 74.248.36.12:47228] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqUkADSgrbLEZbkqD6-JQAAAIs"]
[Fri Apr 24 05:52:17.518767 2026] [:error] [pid 19102:tid 19188] [client 74.248.36.12:47168] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeqUkQDSgrbLEZbkqD6-KQAAAJg"]
[Fri Apr 24 05:52:18.286923 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:8100] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqUkuKCZKf8_u2LKiBXBQAAARM"]
[Fri Apr 24 05:52:18.967153 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:38740] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqUkuKCZKf8_u2LKiBXCgAAARI"]
[Fri Apr 24 05:52:19.648129 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:38762] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqUk-KCZKf8_u2LKiBXEAAAARQ"]
[Fri Apr 24 05:52:20.305274 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:38407] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeqUlOKCZKf8_u2LKiBXFQAAAQc"]
[Fri Apr 24 05:52:21.062643 2026] [:error] [pid 19101:tid 19158] [client 74.248.36.12:42587] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeqUlWAHj9bEvrTgbO3KqwAAAFU"]
[Fri Apr 24 05:52:21.692394 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:41194] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeqUleKCZKf8_u2LKiBXHAAAAQs"]
[Fri Apr 24 05:52:22.569895 2026] [:error] [pid 19101:tid 19148] [client 74.248.36.12:37082] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeqUlmAHj9bEvrTgbO3KsQAAAEs"]
[Fri Apr 24 05:52:23.356910 2026] [:error] [pid 19101:tid 19153] [client 74.248.36.12:8076] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "aeqUl2AHj9bEvrTgbO3KuAAAAFA"]
[Fri Apr 24 05:52:24.196291 2026] [:error] [pid 19102:tid 19184] [client 74.248.36.12:46113] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqUmADSgrbLEZbkqD6-MwAAAJQ"]
[Fri Apr 24 05:52:24.939359 2026] [:error] [pid 19200:tid 19212] [client 74.248.36.12:38738] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqUmDQ--M3-tsKAnhGWFwAAAMQ"]
[Fri Apr 24 05:52:25.728551 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:47224] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqUmeKCZKf8_u2LKiBXMQAAARU"]
[Fri Apr 24 05:52:26.279265 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:42565] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeqUmjQ--M3-tsKAnhGWHQAAAM4"]
[Fri Apr 24 05:52:26.989542 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:7267] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeqUmuKCZKf8_u2LKiBXOgAAAQE"]
[Fri Apr 24 05:52:27.682549 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:37119] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeqUmwDSgrbLEZbkqD6-PQAAAJY"]
[Fri Apr 24 05:52:28.313952 2026] [:error] [pid 19102:tid 19166] [client 74.248.36.12:7282] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aeqUnADSgrbLEZbkqD6-QAAAAII"]
[Fri Apr 24 05:52:29.169682 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:29.459473 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:29.754564 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:30.040835 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:30.327200 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:30.622641 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:30.910418 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:31.198671 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:31.486099 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:31.778157 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:32.072016 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 74.248.36.12:41201] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:52:32.354808 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:41201] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeqUoOKCZKf8_u2LKiBXWwAAAQc"]
[Fri Apr 24 05:52:33.154638 2026] [:error] [pid 19100:tid 19112] [client 74.248.36.12:63759] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeqUobF_hzQs4CqbifcG3AAAAAM"]
[Fri Apr 24 05:52:33.745214 2026] [:error] [pid 52129:tid 52138] [client 74.248.36.12:38404] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeqUoeKCZKf8_u2LKiBXXwAAAQU"]
[Fri Apr 24 05:52:34.355609 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:42611] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeqUojQ--M3-tsKAnhGWJwAAAMk"]
[Fri Apr 24 05:52:35.057644 2026] [:error] [pid 19200:tid 19223] [client 74.248.36.12:38420] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeqUozQ--M3-tsKAnhGWKQAAAM8"]
[Fri Apr 24 05:52:35.715324 2026] [:error] [pid 19101:tid 19159] [client 74.248.36.12:7268] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeqUo2AHj9bEvrTgbO3K7AAAAFY"]
[Fri Apr 24 05:52:36.456762 2026] [:error] [pid 19102:tid 19187] [client 74.248.36.12:42606] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeqUpADSgrbLEZbkqD6-VQAAAJc"]
[Fri Apr 24 05:52:37.060342 2026] [:error] [pid 19101:tid 19152] [client 74.248.36.12:63773] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeqUpWAHj9bEvrTgbO3K-wAAAE8"]
[Fri Apr 24 05:52:37.770285 2026] [:error] [pid 19100:tid 19116] [client 74.248.36.12:47195] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeqUpbF_hzQs4CqbifcG4gAAAAc"]
[Fri Apr 24 05:52:38.352020 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:8083] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeqUpuKCZKf8_u2LKiBXYwAAAQA"]
[Fri Apr 24 05:52:38.966323 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:48736] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeqUpjQ--M3-tsKAnhGWMQAAAM0"]
[Fri Apr 24 05:52:39.598534 2026] [:error] [pid 19102:tid 19184] [client 74.248.36.12:63752] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeqUpwDSgrbLEZbkqD6-WQAAAJQ"]
[Fri Apr 24 05:52:40.230710 2026] [:error] [pid 19102:tid 19175] [client 74.248.36.12:7261] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeqUqADSgrbLEZbkqD6-XwAAAIs"]
[Fri Apr 24 05:52:40.811483 2026] [:error] [pid 19102:tid 19165] [client 74.248.36.12:48709] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeqUqADSgrbLEZbkqD6-ZQAAAIE"]
[Fri Apr 24 05:52:41.635176 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:48763] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeqUqQDSgrbLEZbkqD6-awAAAJA"]
[Fri Apr 24 05:52:42.214930 2026] [:error] [pid 19100:tid 19124] [client 74.248.36.12:51926] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeqUqrF_hzQs4CqbifcG6AAAAA4"]
[Fri Apr 24 05:52:42.947160 2026] [:error] [pid 19102:tid 19170] [client 74.248.36.12:59366] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeqUqgDSgrbLEZbkqD6-egAAAIY"]
[Fri Apr 24 05:52:43.671069 2026] [:error] [pid 19101:tid 19148] [client 74.248.36.12:58170] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeqUq2AHj9bEvrTgbO3LFAAAAEs"]
[Fri Apr 24 05:52:44.394366 2026] [:error] [pid 19200:tid 19227] [client 74.248.36.12:51964] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeqUrDQ--M3-tsKAnhGWPgAAANM"]
[Fri Apr 24 05:52:45.084693 2026] [:error] [pid 19200:tid 19224] [client 74.248.36.12:59334] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeqUrTQ--M3-tsKAnhGWQAAAANA"]
[Fri Apr 24 05:52:45.743189 2026] [:error] [pid 19101:tid 19155] [client 74.248.36.12:7843] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqUrWAHj9bEvrTgbO3LGgAAAFI"]
[Fri Apr 24 05:52:46.358052 2026] [:error] [pid 52129:tid 52136] [client 74.248.36.12:65051] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqUruKCZKf8_u2LKiBXbAAAAQM"]
[Fri Apr 24 05:52:46.998932 2026] [:error] [pid 19102:tid 19176] [client 74.248.36.12:48662] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqUrgDSgrbLEZbkqD6-iwAAAIw"]
[Fri Apr 24 05:52:47.615108 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:7841] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeqUr-KCZKf8_u2LKiBXbQAAAQQ"]
[Fri Apr 24 05:52:48.198148 2026] [:error] [pid 19102:tid 19187] [client 74.248.36.12:45068] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeqUsADSgrbLEZbkqD6-jgAAAJc"]
[Fri Apr 24 05:52:48.892801 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:45104] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeqUsOKCZKf8_u2LKiBXcwAAARM"]
[Fri Apr 24 05:52:49.528906 2026] [:error] [pid 19101:tid 19138] [client 74.248.36.12:45081] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeqUsWAHj9bEvrTgbO3LKQAAAEE"]
[Fri Apr 24 05:52:50.228587 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:64365] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeqUsuKCZKf8_u2LKiBXigAAAQE"]
[Fri Apr 24 05:52:51.043274 2026] [:error] [pid 19200:tid 19218] [client 74.248.36.12:58102] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeqUszQ--M3-tsKAnhGWTQAAAMo"]
[Fri Apr 24 05:52:51.780834 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:42651] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeqUs-KCZKf8_u2LKiBXtgAAAQ0"]
[Fri Apr 24 05:52:52.455720 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:7828] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeqUtDQ--M3-tsKAnhGWUQAAAMc"]
[Fri Apr 24 05:52:53.038815 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:42639] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeqUtTQ--M3-tsKAnhGWVgAAAM4"]
[Fri Apr 24 05:52:53.625384 2026] [:error] [pid 52129:tid 52150] [client 74.248.36.12:7866] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqUteKCZKf8_u2LKiBXywAAARE"]
[Fri Apr 24 05:52:54.228974 2026] [:error] [pid 19200:tid 19209] [client 74.248.36.12:7867] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqUtjQ--M3-tsKAnhGWWwAAAME"]
[Fri Apr 24 05:52:54.795995 2026] [:error] [pid 19102:tid 19166] [client 74.248.36.12:59389] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqUtgDSgrbLEZbkqD6-nAAAAII"]
[Fri Apr 24 05:52:55.390848 2026] [:error] [pid 19200:tid 19212] [client 74.248.36.12:7864] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeqUtzQ--M3-tsKAnhGWXwAAAMQ"]
[Fri Apr 24 05:52:55.953794 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:42626] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeqUt-KCZKf8_u2LKiBX0QAAARY"]
[Fri Apr 24 05:52:56.567574 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:64363] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeqUuADSgrbLEZbkqD6-oAAAAIk"]
[Fri Apr 24 05:52:57.197507 2026] [:error] [pid 52129:tid 52148] [client 74.248.36.12:64369] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeqUueKCZKf8_u2LKiBX4QAAAQ8"]
[Fri Apr 24 05:52:57.817800 2026] [:error] [pid 19200:tid 19229] [client 74.248.36.12:46754] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeqUuTQ--M3-tsKAnhGWagAAANU"]
[Fri Apr 24 05:52:58.398402 2026] [:error] [pid 19200:tid 19217] [client 74.248.36.12:51956] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeqUujQ--M3-tsKAnhGWbwAAAMk"]
[Fri Apr 24 05:52:59.015874 2026] [:error] [pid 19100:tid 19120] [client 74.248.36.12:64427] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeqUu7F_hzQs4CqbifcHBAAAAAo"]
[Fri Apr 24 05:52:59.666208 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:7857] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeqUu2AHj9bEvrTgbO3LSgAAAFM"]
[Fri Apr 24 05:53:00.227844 2026] [:error] [pid 19100:tid 19130] [client 74.248.36.12:7860] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeqUvLF_hzQs4CqbifcHCwAAABQ"]
[Fri Apr 24 05:53:00.812397 2026] [:error] [pid 19200:tid 19226] [client 74.248.36.12:64402] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqUvDQ--M3-tsKAnhGWdAAAANI"]
[Fri Apr 24 05:53:01.509658 2026] [:error] [pid 19101:tid 19147] [client 74.248.36.12:40657] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqUvWAHj9bEvrTgbO3LUwAAAEo"]
[Fri Apr 24 05:53:02.252253 2026] [:error] [pid 19200:tid 19223] [client 74.248.36.12:46756] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqUvjQ--M3-tsKAnhGWeQAAAM8"]
[Fri Apr 24 05:53:02.939508 2026] [:error] [pid 19100:tid 19128] [client 74.248.36.12:64392] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqUvrF_hzQs4CqbifcHGQAAABI"]
[Fri Apr 24 05:53:03.749324 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:40680] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeqUv-KCZKf8_u2LKiBX9gAAAQo"]
[Fri Apr 24 05:53:04.504382 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:58078] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeqUwOKCZKf8_u2LKiBX-wAAAQE"]
[Fri Apr 24 05:53:05.218429 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:39457] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeqUweKCZKf8_u2LKiBYAQAAARU"]
[Fri Apr 24 05:53:05.866209 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:39427] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeqUweKCZKf8_u2LKiBYBgAAAQg"]
[Fri Apr 24 05:53:06.583508 2026] [:error] [pid 19200:tid 19216] [client 74.248.36.12:7488] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeqUwjQ--M3-tsKAnhGWfwAAAMg"]
[Fri Apr 24 05:53:07.238005 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:41750] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeqUw-KCZKf8_u2LKiBYDgAAAQE"]
[Fri Apr 24 05:53:07.842867 2026] [:error] [pid 52129:tid 52150] [client 74.248.36.12:41778] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeqUw-KCZKf8_u2LKiBYEQAAARE"]
[Fri Apr 24 05:53:08.424577 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:8133] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeqUxDQ--M3-tsKAnhGWhQAAAMc"]
[Fri Apr 24 05:53:09.111063 2026] [:error] [pid 19100:tid 19110] [client 74.248.36.12:7551] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeqUxbF_hzQs4CqbifcHHQAAAAE"]
[Fri Apr 24 05:53:09.746884 2026] [:error] [pid 52129:tid 52145] [client 74.248.36.12:64443] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeqUxeKCZKf8_u2LKiBYHQAAAQw"]
[Fri Apr 24 05:53:10.416272 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:8128] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeqUxuKCZKf8_u2LKiBYJAAAARc"]
[Fri Apr 24 05:53:11.098817 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:58943] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeqUx-KCZKf8_u2LKiBYKwAAAQc"]
[Fri Apr 24 05:53:11.680578 2026] [:error] [pid 19102:tid 19170] [client 74.248.36.12:40669] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeqUxwDSgrbLEZbkqD6-rgAAAIY"]
[Fri Apr 24 05:53:12.253313 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:7496] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeqUyADSgrbLEZbkqD6-rwAAAJA"]
[Fri Apr 24 05:53:13.027571 2026] [:error] [pid 19100:tid 19114] [client 74.248.36.12:46733] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeqUybF_hzQs4CqbifcHJAAAAAU"]
[Fri Apr 24 05:53:13.694377 2026] [:error] [pid 19200:tid 19210] [client 74.248.36.12:58939] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeqUyTQ--M3-tsKAnhGWjgAAAMI"]
[Fri Apr 24 05:53:14.284692 2026] [:error] [pid 19200:tid 19216] [client 74.248.36.12:58905] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqUyjQ--M3-tsKAnhGWkAAAAMg"]
[Fri Apr 24 05:53:14.917053 2026] [:error] [pid 52129:tid 52147] [client 74.248.36.12:8152] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqUyuKCZKf8_u2LKiBYPwAAAQ4"]
[Fri Apr 24 05:53:15.601481 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:58925] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqUy-KCZKf8_u2LKiBYQQAAARI"]
[Fri Apr 24 05:53:16.180968 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:49409] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeqUzOKCZKf8_u2LKiBYRgAAAQQ"]
[Fri Apr 24 05:53:16.747757 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:40680] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeqUzOKCZKf8_u2LKiBYSQAAAQc"]
[Fri Apr 24 05:53:17.322699 2026] [:error] [pid 19102:tid 19168] [client 74.248.36.12:58908] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeqUzQDSgrbLEZbkqD6-wwAAAIQ"]
[Fri Apr 24 05:53:17.931638 2026] [:error] [pid 19102:tid 19174] [client 74.248.36.12:41785] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeqUzQDSgrbLEZbkqD6-yAAAAIo"]
[Fri Apr 24 05:53:18.562979 2026] [:error] [pid 19100:tid 19134] [client 74.248.36.12:46692] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeqUzrF_hzQs4CqbifcHNwAAABg"]
[Fri Apr 24 05:53:19.223098 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:46717] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeqUzwDSgrbLEZbkqD6-0wAAAJA"]
[Fri Apr 24 05:53:19.821473 2026] [:error] [pid 19102:tid 19186] [client 74.248.36.12:8145] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeqUzwDSgrbLEZbkqD6-1QAAAJY"]
[Fri Apr 24 05:53:20.393525 2026] [:error] [pid 19101:tid 19146] [client 74.248.36.12:8146] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeqU0GAHj9bEvrTgbO3LdwAAAEk"]
[Fri Apr 24 05:53:20.988818 2026] [:error] [pid 19101:tid 19152] [client 74.248.36.12:39423] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeqU0GAHj9bEvrTgbO3LewAAAE8"]
[Fri Apr 24 05:53:21.822744 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:41745] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqU0WAHj9bEvrTgbO3LfQAAAFM"]
[Fri Apr 24 05:53:22.486532 2026] [:error] [pid 19101:tid 19157] [client 74.248.36.12:49443] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqU0mAHj9bEvrTgbO3LhAAAAFQ"]
[Fri Apr 24 05:53:23.074187 2026] [:error] [pid 19101:tid 19138] [client 74.248.36.12:39393] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqU02AHj9bEvrTgbO3LjwAAAEE"]
[Fri Apr 24 05:53:23.658987 2026] [:error] [pid 19100:tid 19130] [client 74.248.36.12:39390] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeqU07F_hzQs4CqbifcHQgAAABQ"]
[Fri Apr 24 05:53:24.259963 2026] [:error] [pid 19102:tid 19182] [client 74.248.36.12:37841] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aeqU1ADSgrbLEZbkqD6-5QAAAJI"]
[Fri Apr 24 05:53:24.844536 2026] [:error] [pid 19101:tid 19157] [client 74.248.36.12:63318] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aeqU1GAHj9bEvrTgbO3LkwAAAFQ"]
[Fri Apr 24 05:53:25.411091 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:61444] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aeqU1eKCZKf8_u2LKiBYWgAAAQg"]
[Fri Apr 24 05:53:25.990293 2026] [:error] [pid 19100:tid 19114] [client 74.248.36.12:62790] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "aeqU1bF_hzQs4CqbifcHSgAAAAU"]
[Fri Apr 24 05:53:26.570434 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:49464] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqU1jQ--M3-tsKAnhGWpgAAAMc"]
[Fri Apr 24 05:53:27.146656 2026] [:error] [pid 19200:tid 19231] [client 74.248.36.12:49516] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqU1zQ--M3-tsKAnhGWqQAAANc"]
[Fri Apr 24 05:53:27.754004 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:45515] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqU1wDSgrbLEZbkqD6-8QAAAJA"]
[Fri Apr 24 05:53:28.371861 2026] [:error] [pid 19102:tid 19178] [client 74.248.36.12:45561] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "aeqU2ADSgrbLEZbkqD6-9gAAAI4"]
[Fri Apr 24 05:53:28.976411 2026] [:error] [pid 19100:tid 19116] [client 74.248.36.12:49468] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeqU2LF_hzQs4CqbifcHUwAAAAc"]
[Fri Apr 24 05:53:29.572626 2026] [:error] [pid 19100:tid 19113] [client 74.248.36.12:61483] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeqU2bF_hzQs4CqbifcHVQAAAAQ"]
[Fri Apr 24 05:53:30.104472 2026] [:error] [pid 19100:tid 19127] [client 74.248.36.12:39400] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeqU2rF_hzQs4CqbifcHWQAAABE"]
[Fri Apr 24 05:53:30.812871 2026] [:error] [pid 19101:tid 19147] [client 74.248.36.12:61441] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "aeqU2mAHj9bEvrTgbO3LmQAAAEo"]
[Fri Apr 24 05:53:31.484529 2026] [:error] [pid 19100:tid 19121] [client 74.248.36.12:37831] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mini.php"] [unique_id "aeqU27F_hzQs4CqbifcHXAAAAAs"]
[Fri Apr 24 05:53:32.063224 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:32.350680 2026] [proxy_fcgi:error] [pid 19200:tid 19232] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:32.636412 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:32.963981 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:33.251171 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:33.557483 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:33.853282 2026] [proxy_fcgi:error] [pid 19200:tid 19223] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:34.159667 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:34.457017 2026] [proxy_fcgi:error] [pid 19200:tid 19218] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:34.743199 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:35.029609 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 74.248.36.12:45532] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:53:35.325405 2026] [:error] [pid 19200:tid 19222] [client 74.248.36.12:45532] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqU3zQ--M3-tsKAnhGWwgAAAM4"]
[Fri Apr 24 05:53:35.951072 2026] [:error] [pid 19200:tid 19232] [client 74.248.36.12:60340] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqU3zQ--M3-tsKAnhGWxQAAANg"]
[Fri Apr 24 05:53:36.570466 2026] [:error] [pid 19200:tid 19209] [client 74.248.36.12:37827] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqU4DQ--M3-tsKAnhGWywAAAME"]
[Fri Apr 24 05:53:37.120837 2026] [:error] [pid 19101:tid 19149] [client 74.248.36.12:54760] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqU4WAHj9bEvrTgbO3LoQAAAEw"]
[Fri Apr 24 05:53:37.798002 2026] [:error] [pid 19102:tid 19169] [client 74.248.36.12:39382] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeqU4QDSgrbLEZbkqD6_HAAAAIU"]
[Fri Apr 24 05:53:38.462414 2026] [:error] [pid 19101:tid 19140] [client 74.248.36.12:54720] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeqU4mAHj9bEvrTgbO3LpQAAAEM"]
[Fri Apr 24 05:53:39.128316 2026] [:error] [pid 19102:tid 19176] [client 74.248.36.12:62839] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeqU4wDSgrbLEZbkqD6_IAAAAIw"]
[Fri Apr 24 05:53:39.678916 2026] [:error] [pid 19101:tid 19145] [client 74.248.36.12:41237] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeqU42AHj9bEvrTgbO3LqAAAAEg"]
[Fri Apr 24 05:53:40.279347 2026] [:error] [pid 19101:tid 19161] [client 74.248.36.12:54762] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeqU5GAHj9bEvrTgbO3LqwAAAFg"]
[Fri Apr 24 05:53:41.057219 2026] [:error] [pid 19102:tid 19172] [client 74.248.36.12:41224] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeqU5QDSgrbLEZbkqD6_JwAAAIg"]
[Fri Apr 24 05:53:41.637339 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:54736] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeqU5QDSgrbLEZbkqD6_KgAAAIk"]
[Fri Apr 24 05:53:42.233570 2026] [:error] [pid 19100:tid 19111] [client 74.248.36.12:42994] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeqU5rF_hzQs4CqbifcHcgAAAAI"]
[Fri Apr 24 05:53:42.948452 2026] [:error] [pid 19100:tid 19119] [client 74.248.36.12:48302] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeqU5rF_hzQs4CqbifcHdAAAAAk"]
[Fri Apr 24 05:53:43.557340 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:47264] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeqU5-KCZKf8_u2LKiBYiAAAARQ"]
[Fri Apr 24 05:53:44.108703 2026] [:error] [pid 52129:tid 52149] [client 74.248.36.12:46289] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeqU6OKCZKf8_u2LKiBYjgAAARA"]
[Fri Apr 24 05:53:44.803246 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:47282] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeqU6OKCZKf8_u2LKiBYkQAAAQ0"]
[Fri Apr 24 05:53:45.541312 2026] [:error] [pid 52129:tid 52147] [client 74.248.36.12:46331] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeqU6eKCZKf8_u2LKiBYlwAAAQ4"]
[Fri Apr 24 05:53:46.154488 2026] [:error] [pid 52129:tid 52155] [client 74.248.36.12:62871] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeqU6uKCZKf8_u2LKiBYnwAAARY"]
[Fri Apr 24 05:53:46.889270 2026] [:error] [pid 52129:tid 52134] [client 74.248.36.12:47250] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeqU6uKCZKf8_u2LKiBYpgAAAQE"]
[Fri Apr 24 05:53:47.613590 2026] [:error] [pid 19102:tid 19188] [client 74.248.36.12:48284] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeqU6wDSgrbLEZbkqD6_OQAAAJg"]
[Fri Apr 24 05:53:48.460113 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:62903] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeqU7OKCZKf8_u2LKiBYsQAAARM"]
[Fri Apr 24 05:53:49.030343 2026] [:error] [pid 52129:tid 52138] [client 74.248.36.12:48296] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeqU7eKCZKf8_u2LKiBYtgAAAQU"]
[Fri Apr 24 05:53:49.738603 2026] [:error] [pid 52129:tid 52135] [client 74.248.36.12:47286] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeqU7eKCZKf8_u2LKiBYuwAAAQI"]
[Fri Apr 24 05:53:50.364563 2026] [:error] [pid 52129:tid 52148] [client 74.248.36.12:38831] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeqU7uKCZKf8_u2LKiBYvwAAAQ8"]
[Fri Apr 24 05:53:51.129411 2026] [:error] [pid 52129:tid 52145] [client 74.248.36.12:7739] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeqU7-KCZKf8_u2LKiBYxQAAAQw"]
[Fri Apr 24 05:53:51.693086 2026] [:error] [pid 19102:tid 19170] [client 74.248.36.12:38787] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeqU7wDSgrbLEZbkqD6_QAAAAIY"]
[Fri Apr 24 05:53:52.243888 2026] [:error] [pid 19102:tid 19175] [client 74.248.36.12:62849] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeqU8ADSgrbLEZbkqD6_QQAAAIs"]
[Fri Apr 24 05:53:52.821411 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:7461] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeqU8OKCZKf8_u2LKiBY0AAAAQg"]
[Fri Apr 24 05:53:53.486182 2026] [:error] [pid 52129:tid 52151] [client 74.248.36.12:38792] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqU8eKCZKf8_u2LKiBY0gAAARI"]
[Fri Apr 24 05:53:54.012067 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:7434] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqU8uKCZKf8_u2LKiBY1QAAAQ0"]
[Fri Apr 24 05:53:54.588683 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:7425] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqU8uKCZKf8_u2LKiBY2QAAARU"]
[Fri Apr 24 05:53:55.201418 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:7448] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeqU8-KCZKf8_u2LKiBY3wAAAQg"]
[Fri Apr 24 05:53:55.778345 2026] [:error] [pid 19200:tid 19221] [client 74.248.36.12:51888] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeqU8zQ--M3-tsKAnhGW6QAAAM0"]
[Fri Apr 24 05:53:56.412770 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:7475] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeqU9OKCZKf8_u2LKiBY6gAAAQo"]
[Fri Apr 24 05:53:57.000193 2026] [:error] [pid 19102:tid 19166] [client 74.248.36.12:46345] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeqU9ADSgrbLEZbkqD6_UAAAAII"]
[Fri Apr 24 05:53:57.600438 2026] [:error] [pid 52129:tid 52150] [client 74.248.36.12:7371] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeqU9eKCZKf8_u2LKiBY8QAAARE"]
[Fri Apr 24 05:53:58.487717 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:65020] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeqU9jQ--M3-tsKAnhGW7wAAAMA"]
[Fri Apr 24 05:53:59.212507 2026] [:error] [pid 19200:tid 19230] [client 74.248.36.12:7400] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeqU9zQ--M3-tsKAnhGW8QAAANY"]
[Fri Apr 24 05:54:00.044662 2026] [:error] [pid 19200:tid 19228] [client 74.248.36.12:46283] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeqU-DQ--M3-tsKAnhGW9AAAANQ"]
[Fri Apr 24 05:54:00.710487 2026] [:error] [pid 52129:tid 52146] [client 74.248.36.12:7684] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeqU-OKCZKf8_u2LKiBY_gAAAQ0"]
[Fri Apr 24 05:54:01.377506 2026] [:error] [pid 52129:tid 52136] [client 74.248.36.12:64987] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeqU-eKCZKf8_u2LKiBZAgAAAQM"]
[Fri Apr 24 05:54:02.076485 2026] [:error] [pid 52129:tid 52140] [client 74.248.36.12:40053] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeqU-uKCZKf8_u2LKiBZBQAAAQc"]
[Fri Apr 24 05:54:02.880291 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:7468] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeqU-mAHj9bEvrTgbO3LtQAAAFM"]
[Fri Apr 24 05:54:03.547336 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:7486] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeqU-zQ--M3-tsKAnhGW9wAAAMc"]
[Fri Apr 24 05:54:04.199577 2026] [:error] [pid 19101:tid 19145] [client 74.248.36.12:7430] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeqU_GAHj9bEvrTgbO3LugAAAEg"]
[Fri Apr 24 05:54:04.897171 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:7734] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeqU_OKCZKf8_u2LKiBZEAAAARU"]
[Fri Apr 24 05:54:05.520547 2026] [:error] [pid 52129:tid 52142] [client 74.248.36.12:7715] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeqU_eKCZKf8_u2LKiBZFAAAAQk"]
[Fri Apr 24 05:54:06.272361 2026] [:error] [pid 52129:tid 52148] [client 74.248.36.12:50605] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeqU_uKCZKf8_u2LKiBZGAAAAQ8"]
[Fri Apr 24 05:54:07.002431 2026] [:error] [pid 19200:tid 19208] [client 74.248.36.12:7379] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeqU_zQ--M3-tsKAnhGW_gAAAMA"]
[Fri Apr 24 05:54:07.643203 2026] [:error] [pid 19100:tid 19119] [client 74.248.36.12:59406] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeqU_7F_hzQs4CqbifcHlwAAAAk"]
[Fri Apr 24 05:54:08.428658 2026] [:error] [pid 52129:tid 52141] [client 74.248.36.12:44253] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeqVAOKCZKf8_u2LKiBZKwAAAQg"]
[Fri Apr 24 05:54:08.991355 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:59435] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeqVAOKCZKf8_u2LKiBZMgAAAQs"]
[Fri Apr 24 05:54:09.585589 2026] [:error] [pid 19200:tid 19229] [client 74.248.36.12:50604] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeqVATQ--M3-tsKAnhGXAgAAANU"]
[Fri Apr 24 05:54:10.181037 2026] [:error] [pid 52129:tid 52138] [client 74.248.36.12:51860] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeqVAuKCZKf8_u2LKiBZQQAAAQU"]
[Fri Apr 24 05:54:10.721131 2026] [:error] [pid 52129:tid 52157] [client 74.248.36.12:40018] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeqVAuKCZKf8_u2LKiBZSQAAARg"]
[Fri Apr 24 05:54:11.248500 2026] [:error] [pid 52129:tid 52154] [client 74.248.36.12:51851] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeqVA-KCZKf8_u2LKiBZTgAAARU"]
[Fri Apr 24 05:54:11.801091 2026] [:error] [pid 19200:tid 19213] [client 74.248.36.12:40063] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeqVAzQ--M3-tsKAnhGXDQAAAMU"]
[Fri Apr 24 05:54:12.455355 2026] [:error] [pid 19100:tid 19110] [client 74.248.36.12:59441] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeqVBLF_hzQs4CqbifcHmgAAAAE"]
[Fri Apr 24 05:54:13.114345 2026] [:error] [pid 52129:tid 52137] [client 74.248.36.12:59408] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeqVBeKCZKf8_u2LKiBZXQAAAQQ"]
[Fri Apr 24 05:54:13.890184 2026] [:error] [pid 19101:tid 19157] [client 74.248.36.12:59416] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeqVBWAHj9bEvrTgbO3L0QAAAFQ"]
[Fri Apr 24 05:54:14.544530 2026] [:error] [pid 52129:tid 52139] [client 74.248.36.12:44226] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeqVBuKCZKf8_u2LKiBZYwAAAQY"]
[Fri Apr 24 05:54:15.313255 2026] [:error] [pid 19200:tid 19220] [client 74.248.36.12:37161] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeqVBzQ--M3-tsKAnhGXFQAAAMw"]
[Fri Apr 24 05:54:16.047607 2026] [:error] [pid 19100:tid 19131] [client 74.248.36.12:43037] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeqVCLF_hzQs4CqbifcHnQAAABU"]
[Fri Apr 24 05:54:16.781491 2026] [:error] [pid 19102:tid 19188] [client 74.248.36.12:44234] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeqVCADSgrbLEZbkqD6_owAAAJg"]
[Fri Apr 24 05:54:17.611629 2026] [:error] [pid 19200:tid 19213] [client 74.248.36.12:43018] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeqVCTQ--M3-tsKAnhGXGQAAAMU"]
[Fri Apr 24 05:54:18.402309 2026] [:error] [pid 19100:tid 19130] [client 74.248.36.12:59404] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeqVCrF_hzQs4CqbifcHoAAAABQ"]
[Fri Apr 24 05:54:19.020912 2026] [:error] [pid 19200:tid 19210] [client 74.248.36.12:44273] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeqVCzQ--M3-tsKAnhGXIAAAAMI"]
[Fri Apr 24 05:54:19.711362 2026] [:error] [pid 52129:tid 52149] [client 74.248.36.12:44266] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeqVC-KCZKf8_u2LKiBZggAAARA"]
[Fri Apr 24 05:54:20.307934 2026] [:error] [pid 19200:tid 19215] [client 74.248.36.12:37146] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqVDDQ--M3-tsKAnhGXTgAAAMc"]
[Fri Apr 24 05:54:20.889869 2026] [:error] [pid 52129:tid 52152] [client 74.248.36.12:40019] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqVDOKCZKf8_u2LKiBZhQAAARM"]
[Fri Apr 24 05:54:21.582485 2026] [:error] [pid 19200:tid 19225] [client 74.248.36.12:50567] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqVDTQ--M3-tsKAnhGXYAAAANE"]
[Fri Apr 24 05:54:22.517221 2026] [:error] [pid 19200:tid 19219] [client 74.248.36.12:43640] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqVDjQ--M3-tsKAnhGXeAAAAMs"]
[Fri Apr 24 05:54:23.248118 2026] [:error] [pid 19200:tid 19218] [client 74.248.36.12:50563] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeqVDzQ--M3-tsKAnhGXggAAAMo"]
[Fri Apr 24 05:54:23.846026 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:57261] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeqVD-KCZKf8_u2LKiBZigAAAQo"]
[Fri Apr 24 05:54:24.559778 2026] [:error] [pid 19101:tid 19140] [client 74.248.36.12:8024] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeqVEGAHj9bEvrTgbO3L4AAAAEM"]
[Fri Apr 24 05:54:25.382421 2026] [:error] [pid 19100:tid 19133] [client 74.248.36.12:50583] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeqVEbF_hzQs4CqbifcHpgAAABc"]
[Fri Apr 24 05:54:26.308113 2026] [:error] [pid 19102:tid 19180] [client 74.248.36.12:57227] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeqVEgDSgrbLEZbkqD6_3AAAAJA"]
[Fri Apr 24 05:54:27.169356 2026] [:error] [pid 19102:tid 19173] [client 74.248.36.12:58836] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeqVEwDSgrbLEZbkqD6_4AAAAIk"]
[Fri Apr 24 05:54:28.048335 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:43038] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeqVFOKCZKf8_u2LKiBZmAAAAQo"]
[Fri Apr 24 05:54:28.788571 2026] [:error] [pid 52129:tid 52144] [client 74.248.36.12:43641] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeqVFOKCZKf8_u2LKiBZoAAAAQs"]
[Fri Apr 24 05:54:29.386685 2026] [:error] [pid 19101:tid 19147] [client 74.248.36.12:8030] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "aeqVFWAHj9bEvrTgbO3L5AAAAEo"]
[Fri Apr 24 05:54:30.162399 2026] [:error] [pid 52129:tid 52143] [client 74.248.36.12:51317] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "aeqVFuKCZKf8_u2LKiBZpwAAAQo"]
[Fri Apr 24 05:54:30.883069 2026] [:error] [pid 52129:tid 52133] [client 74.248.36.12:59418] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "aeqVFuKCZKf8_u2LKiBZrAAAAQA"]
[Fri Apr 24 05:54:31.589344 2026] [:error] [pid 52129:tid 52153] [client 74.248.36.12:58827] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "aeqVF-KCZKf8_u2LKiBZsAAAARQ"]
[Fri Apr 24 05:54:32.276706 2026] [:error] [pid 19102:tid 19166] [client 74.248.36.12:57244] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeqVGADSgrbLEZbkqD6_6QAAAII"]
[Fri Apr 24 05:54:33.162057 2026] [:error] [pid 52129:tid 52147] [client 74.248.36.12:43607] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeqVGeKCZKf8_u2LKiBZugAAAQ4"]
[Fri Apr 24 05:54:33.913349 2026] [:error] [pid 19101:tid 19156] [client 74.248.36.12:37166] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeqVGWAHj9bEvrTgbO3L7AAAAFM"]
[Fri Apr 24 05:54:34.785176 2026] [:error] [pid 52129:tid 52156] [client 74.248.36.12:51312] [client 74.248.36.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aeqVGuKCZKf8_u2LKiBZvwAAARc"]
[Fri Apr 24 05:54:35.564077 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:35.827007 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:36.140374 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:36.410826 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:36.673590 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:36.937422 2026] [proxy_fcgi:error] [pid 52129:tid 52133] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:54:37.320822 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 74.248.36.12:57219] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:53.996103 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:54.267030 2026] [proxy_fcgi:error] [pid 19101:tid 19155] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:54.536150 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:54.805391 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:55.072071 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:55.341886 2026] [proxy_fcgi:error] [pid 19101:tid 19153] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:55.608640 2026] [proxy_fcgi:error] [pid 19101:tid 19149] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:56.103072 2026] [proxy_fcgi:error] [pid 19101:tid 19137] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:56.367824 2026] [proxy_fcgi:error] [pid 19101:tid 19157] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:56.638722 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 20.251.36.110:35040] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:15:56.900314 2026] [:error] [pid 19101:tid 19146] [client 20.251.36.110:35040] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "aerETGAHj9bEvrTgbO0tEQAAAEk"]
[Fri Apr 24 09:15:58.023325 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:35055] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "aerETuKCZKf8_u2LKiA4vgAAAQU"]
[Fri Apr 24 09:15:58.938278 2026] [:error] [pid 19200:tid 19232] [client 20.251.36.110:59972] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "aerETjQ--M3-tsKAnhE2zgAAANg"]
[Fri Apr 24 09:15:59.638476 2026] [:error] [pid 52129:tid 52151] [client 20.251.36.110:48618] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "aerET-KCZKf8_u2LKiA4xQAAARI"]
[Fri Apr 24 09:16:00.650642 2026] [:error] [pid 19200:tid 19219] [client 20.251.36.110:56963] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj11.php"] [unique_id "aerEUDQ--M3-tsKAnhE20gAAAMs"]
[Fri Apr 24 09:16:01.436827 2026] [:error] [pid 19101:tid 19140] [client 20.251.36.110:24713] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj11.php"] [unique_id "aerEUWAHj9bEvrTgbO0tJwAAAEM"]
[Fri Apr 24 09:16:02.063782 2026] [:error] [pid 19200:tid 19221] [client 20.251.36.110:48634] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj11.php"] [unique_id "aerEUjQ--M3-tsKAnhE22gAAAM0"]
[Fri Apr 24 09:16:03.189888 2026] [:error] [pid 19200:tid 19223] [client 20.251.36.110:51703] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aj11.php"] [unique_id "aerEUzQ--M3-tsKAnhE23AAAAM8"]
[Fri Apr 24 09:16:03.892534 2026] [:error] [pid 19200:tid 19232] [client 20.251.36.110:48604] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "aerEUzQ--M3-tsKAnhE25QAAANg"]
[Fri Apr 24 09:16:04.785900 2026] [:error] [pid 19200:tid 19223] [client 20.251.36.110:62600] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "aerEVDQ--M3-tsKAnhE26wAAAM8"]
[Fri Apr 24 09:16:05.899447 2026] [:error] [pid 52129:tid 52141] [client 20.251.36.110:24803] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "aerEVeKCZKf8_u2LKiA46QAAAQg"]
[Fri Apr 24 09:16:07.307442 2026] [:error] [pid 19102:tid 19169] [client 20.251.36.110:56384] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "aerEVwDSgrbLEZbkqD48vAAAAIU"]
[Fri Apr 24 09:16:08.435436 2026] [:error] [pid 19101:tid 19140] [client 20.251.36.110:24797] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xroot.php"] [unique_id "aerEWGAHj9bEvrTgbO0tTgAAAEM"]
[Fri Apr 24 09:16:09.876793 2026] [:error] [pid 19102:tid 19167] [client 20.251.36.110:56965] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xroot.php"] [unique_id "aerEWQDSgrbLEZbkqD48wgAAAIM"]
[Fri Apr 24 09:16:10.667151 2026] [:error] [pid 19100:tid 19126] [client 20.251.36.110:56419] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xroot.php"] [unique_id "aerEWrF_hzQs4CqbifdhoAAAABA"]
[Fri Apr 24 09:16:12.041247 2026] [:error] [pid 19102:tid 19183] [client 20.251.36.110:26699] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xroot.php"] [unique_id "aerEXADSgrbLEZbkqD48zAAAAJM"]
[Fri Apr 24 09:16:12.915845 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:26699] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aerEXOKCZKf8_u2LKiA5AgAAARU"]
[Fri Apr 24 09:16:14.103915 2026] [:error] [pid 19102:tid 19185] [client 20.251.36.110:26688] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aerEXgDSgrbLEZbkqD481gAAAJU"]
[Fri Apr 24 09:16:15.616619 2026] [:error] [pid 52129:tid 52144] [client 20.251.36.110:57033] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aerEX-KCZKf8_u2LKiA5EAAAAQs"]
[Fri Apr 24 09:16:17.361450 2026] [:error] [pid 52129:tid 52149] [client 20.251.36.110:65377] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "aerEYeKCZKf8_u2LKiA5GgAAARA"]
[Fri Apr 24 09:16:17.988334 2026] [:error] [pid 19101:tid 19156] [client 20.251.36.110:65392] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "aerEYWAHj9bEvrTgbO0tYwAAAFM"]
[Fri Apr 24 09:16:18.911469 2026] [:error] [pid 19200:tid 19214] [client 20.251.36.110:57013] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "aerEYjQ--M3-tsKAnhE3JgAAAMY"]
[Fri Apr 24 09:16:20.139869 2026] [:error] [pid 19101:tid 19144] [client 20.251.36.110:60022] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "aerEZGAHj9bEvrTgbO0tZgAAAEc"]
[Fri Apr 24 09:16:21.151369 2026] [:error] [pid 52129:tid 52153] [client 20.251.36.110:57023] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "aerEZeKCZKf8_u2LKiA5NAAAARQ"]
[Fri Apr 24 09:16:21.811558 2026] [:error] [pid 52129:tid 52149] [client 20.251.36.110:57020] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aerEZeKCZKf8_u2LKiA5NgAAARA"]
[Fri Apr 24 09:16:22.638974 2026] [:error] [pid 19100:tid 19130] [client 20.251.36.110:43291] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aerEZrF_hzQs4Cqbifdh0QAAABQ"]
[Fri Apr 24 09:16:23.407391 2026] [:error] [pid 19101:tid 19149] [client 20.251.36.110:20638] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aerEZ2AHj9bEvrTgbO0tagAAAEw"]
[Fri Apr 24 09:16:24.538437 2026] [:error] [pid 19101:tid 19145] [client 20.251.36.110:51702] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aerEaGAHj9bEvrTgbO0tcgAAAEg"]
[Fri Apr 24 09:16:25.667300 2026] [:error] [pid 19200:tid 19221] [client 20.251.36.110:65407] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "aerEaTQ--M3-tsKAnhE3OwAAAM0"]
[Fri Apr 24 09:16:27.016783 2026] [:error] [pid 19100:tid 19113] [client 20.251.36.110:51655] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "aerEa7F_hzQs4Cqbifdh7QAAAAQ"]
[Fri Apr 24 09:16:27.982715 2026] [:error] [pid 19101:tid 19143] [client 20.251.36.110:57056] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "aerEa2AHj9bEvrTgbO0tgQAAAEY"]
[Fri Apr 24 09:16:28.745103 2026] [:error] [pid 19100:tid 19112] [client 20.251.36.110:24761] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "aerEbLF_hzQs4Cqbifdh7wAAAAM"]
[Fri Apr 24 09:16:30.318583 2026] [:error] [pid 19100:tid 19110] [client 20.251.36.110:56385] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "aerEbrF_hzQs4Cqbifdh8wAAAAE"]
[Fri Apr 24 09:16:32.162990 2026] [:error] [pid 19100:tid 19114] [client 20.251.36.110:60005] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "aerEcLF_hzQs4Cqbifdh9QAAAAU"]
[Fri Apr 24 09:16:33.376938 2026] [:error] [pid 19200:tid 19218] [client 20.251.36.110:59977] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "aerEcTQ--M3-tsKAnhE3VQAAAMo"]
[Fri Apr 24 09:16:34.206918 2026] [:error] [pid 19101:tid 19145] [client 20.251.36.110:24774] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/006.php"] [unique_id "aerEcmAHj9bEvrTgbO0tlQAAAEg"]
[Fri Apr 24 09:16:35.552912 2026] [:error] [pid 52129:tid 52155] [client 20.251.36.110:56994] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aerEc-KCZKf8_u2LKiA5TAAAARY"]
[Fri Apr 24 09:16:36.826815 2026] [:error] [pid 52129:tid 52133] [client 20.251.36.110:56411] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aerEdOKCZKf8_u2LKiA5UgAAAQA"]
[Fri Apr 24 09:16:37.843505 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:24741] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aerEdeKCZKf8_u2LKiA5VQAAAQo"]
[Fri Apr 24 09:16:39.971772 2026] [:error] [pid 52129:tid 52137] [client 20.251.36.110:57067] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "aerEd-KCZKf8_u2LKiA5WwAAAQQ"]
[Fri Apr 24 09:16:42.250424 2026] [:error] [pid 52129:tid 52134] [client 20.251.36.110:48603] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aerEeuKCZKf8_u2LKiA5agAAAQE"]
[Fri Apr 24 09:16:43.531790 2026] [:error] [pid 19200:tid 19231] [client 20.251.36.110:26742] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aerEezQ--M3-tsKAnhE3YwAAANc"]
[Fri Apr 24 09:16:44.713870 2026] [:error] [pid 19200:tid 19223] [client 20.251.36.110:43327] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aerEfDQ--M3-tsKAnhE3bAAAAM8"]
[Fri Apr 24 09:16:45.657016 2026] [:error] [pid 19200:tid 19212] [client 20.251.36.110:26697] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "aerEfTQ--M3-tsKAnhE3eAAAAMQ"]
[Fri Apr 24 09:16:47.109537 2026] [:error] [pid 19101:tid 19148] [client 20.251.36.110:24813] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aerEf2AHj9bEvrTgbO0tsQAAAEs"]
[Fri Apr 24 09:16:48.029332 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:35070] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aerEgDQ--M3-tsKAnhE3jwAAAMA"]
[Fri Apr 24 09:16:49.918845 2026] [:error] [pid 52129:tid 52140] [client 20.251.36.110:20612] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aerEgeKCZKf8_u2LKiA5kgAAAQc"]
[Fri Apr 24 09:16:51.790429 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:48639] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "aerEgzQ--M3-tsKAnhE3nAAAANQ"]
[Fri Apr 24 09:16:53.425730 2026] [:error] [pid 19200:tid 19214] [client 20.251.36.110:51662] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aerEhTQ--M3-tsKAnhE3qgAAAMY"]
[Fri Apr 24 09:16:54.916869 2026] [:error] [pid 19200:tid 19224] [client 20.251.36.110:20613] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aerEhjQ--M3-tsKAnhE3rwAAANA"]
[Fri Apr 24 09:16:55.671966 2026] [:error] [pid 19101:tid 19146] [client 20.251.36.110:65345] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amxloxxr.php"] [unique_id "aerEh2AHj9bEvrTgbO0txAAAAEk"]
[Fri Apr 24 09:16:56.874847 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:57.140052 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:57.414901 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:57.691038 2026] [proxy_fcgi:error] [pid 52129:tid 52135] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:57.956695 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:58.224677 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:58.486938 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:58.752480 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:59.016796 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:59.281360 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:59.549877 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 20.251.36.110:57043] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:16:59.814878 2026] [:error] [pid 52129:tid 52134] [client 20.251.36.110:57043] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aerEi-KCZKf8_u2LKiA54QAAAQE"]
[Fri Apr 24 09:17:01.609710 2026] [:error] [pid 19101:tid 19155] [client 20.251.36.110:56396] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aerEjWAHj9bEvrTgbO0tzQAAAFI"]
[Fri Apr 24 09:17:03.593887 2026] [:error] [pid 19200:tid 19214] [client 20.251.36.110:51650] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aerEjzQ--M3-tsKAnhE31AAAAMY"]
[Fri Apr 24 09:17:05.120796 2026] [:error] [pid 19200:tid 19232] [client 20.251.36.110:20635] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/de.php"] [unique_id "aerEkTQ--M3-tsKAnhE33wAAANg"]
[Fri Apr 24 09:17:06.911215 2026] [:error] [pid 52129:tid 52140] [client 20.251.36.110:56961] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/insta.php"] [unique_id "aerEkuKCZKf8_u2LKiA55AAAAQc"]
[Fri Apr 24 09:17:08.148610 2026] [:error] [pid 19102:tid 19184] [client 20.251.36.110:43281] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/insta.php"] [unique_id "aerElADSgrbLEZbkqD49VwAAAJQ"]
[Fri Apr 24 09:17:09.334869 2026] [:error] [pid 19101:tid 19155] [client 20.251.36.110:62609] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/insta.php"] [unique_id "aerElWAHj9bEvrTgbO0t3AAAAFI"]
[Fri Apr 24 09:17:10.990015 2026] [:error] [pid 19101:tid 19142] [client 20.251.36.110:51690] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/insta.php"] [unique_id "aerElmAHj9bEvrTgbO0t5AAAAEU"]
[Fri Apr 24 09:17:12.375247 2026] [:error] [pid 19101:tid 19139] [client 20.251.36.110:56447] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aerEmGAHj9bEvrTgbO0t6QAAAEI"]
[Fri Apr 24 09:17:13.263342 2026] [:error] [pid 52129:tid 52145] [client 20.251.36.110:20670] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aerEmeKCZKf8_u2LKiA58QAAAQw"]
[Fri Apr 24 09:17:14.081276 2026] [:error] [pid 52129:tid 52141] [client 20.251.36.110:48617] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aerEmuKCZKf8_u2LKiA59gAAAQg"]
[Fri Apr 24 09:17:15.623745 2026] [:error] [pid 19200:tid 19230] [client 20.251.36.110:35018] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpxl.php"] [unique_id "aerEmzQ--M3-tsKAnhE3-wAAANY"]
[Fri Apr 24 09:17:16.924702 2026] [:error] [pid 52129:tid 52152] [client 20.251.36.110:24823] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aerEnOKCZKf8_u2LKiA6BQAAARM"]
[Fri Apr 24 09:17:17.986857 2026] [:error] [pid 52129:tid 52148] [client 20.251.36.110:62603] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aerEneKCZKf8_u2LKiA6DAAAAQ8"]
[Fri Apr 24 09:17:20.008398 2026] [:error] [pid 19101:tid 19160] [client 20.251.36.110:26728] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aerEoGAHj9bEvrTgbO0uEAAAAFc"]
[Fri Apr 24 09:17:22.097443 2026] [:error] [pid 52129:tid 52149] [client 20.251.36.110:51678] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aerEouKCZKf8_u2LKiA6HgAAARA"]
[Fri Apr 24 09:17:23.565488 2026] [:error] [pid 52129:tid 52135] [client 20.251.36.110:60019] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f5.php"] [unique_id "aerEo-KCZKf8_u2LKiA6KAAAAQI"]
[Fri Apr 24 09:17:24.934676 2026] [:error] [pid 19102:tid 19185] [client 20.251.36.110:35009] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f5.php"] [unique_id "aerEpADSgrbLEZbkqD49gwAAAJU"]
[Fri Apr 24 09:17:26.206082 2026] [:error] [pid 52129:tid 52137] [client 20.251.36.110:43326] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f5.php"] [unique_id "aerEpuKCZKf8_u2LKiA6MgAAAQQ"]
[Fri Apr 24 09:17:27.383838 2026] [:error] [pid 52129:tid 52139] [client 20.251.36.110:60000] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f5.php"] [unique_id "aerEp-KCZKf8_u2LKiA6OgAAAQY"]
[Fri Apr 24 09:17:29.011166 2026] [:error] [pid 19100:tid 19132] [client 20.251.36.110:26734] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptanf.php"] [unique_id "aerEqbF_hzQs4CqbifdiOQAAABY"]
[Fri Apr 24 09:17:30.700908 2026] [:error] [pid 19101:tid 19161] [client 20.251.36.110:48605] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptanf.php"] [unique_id "aerEqmAHj9bEvrTgbO0uSQAAAFg"]
[Fri Apr 24 09:17:31.546537 2026] [:error] [pid 52129:tid 52148] [client 20.251.36.110:51666] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptanf.php"] [unique_id "aerEq-KCZKf8_u2LKiA6TwAAAQ8"]
[Fri Apr 24 09:17:32.584046 2026] [:error] [pid 52129:tid 52144] [client 20.251.36.110:62611] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ptanf.php"] [unique_id "aerErOKCZKf8_u2LKiA6VQAAAQs"]
[Fri Apr 24 09:17:34.114795 2026] [:error] [pid 52129:tid 52142] [client 20.251.36.110:51651] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aerEruKCZKf8_u2LKiA6XgAAAQk"]
[Fri Apr 24 09:17:35.065884 2026] [:error] [pid 19102:tid 19184] [client 20.251.36.110:24757] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aerErwDSgrbLEZbkqD49kAAAAJQ"]
[Fri Apr 24 09:17:35.986648 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:35063] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aerErzQ--M3-tsKAnhE4iwAAANQ"]
[Fri Apr 24 09:17:36.983980 2026] [:error] [pid 52129:tid 52142] [client 20.251.36.110:64731] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ctex1.php"] [unique_id "aerEsOKCZKf8_u2LKiA6aAAAAQk"]
[Fri Apr 24 09:17:37.880729 2026] [:error] [pid 19200:tid 19216] [client 20.251.36.110:51649] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aerEsTQ--M3-tsKAnhE4kgAAAMg"]
[Fri Apr 24 09:17:38.766674 2026] [:error] [pid 19200:tid 19218] [client 20.251.36.110:65394] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aerEsjQ--M3-tsKAnhE4mQAAAMo"]
[Fri Apr 24 09:17:39.503870 2026] [:error] [pid 52129:tid 52150] [client 20.251.36.110:20652] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aerEs-KCZKf8_u2LKiA6cQAAARE"]
[Fri Apr 24 09:17:41.395656 2026] [:error] [pid 19200:tid 19220] [client 20.251.36.110:28569] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelio1.php"] [unique_id "aerEtTQ--M3-tsKAnhE4qQAAAMw"]
[Fri Apr 24 09:17:43.198948 2026] [:error] [pid 19101:tid 19155] [client 20.251.36.110:60017] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aerEt2AHj9bEvrTgbO0uZgAAAFI"]
[Fri Apr 24 09:17:45.100536 2026] [:error] [pid 19101:tid 19156] [client 20.251.36.110:56445] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aerEuWAHj9bEvrTgbO0ubQAAAFM"]
[Fri Apr 24 09:17:46.527356 2026] [:error] [pid 52129:tid 52156] [client 20.251.36.110:57049] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aerEuuKCZKf8_u2LKiA6ggAAARc"]
[Fri Apr 24 09:17:47.871569 2026] [:error] [pid 19101:tid 19152] [client 20.251.36.110:35048] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "aerEu2AHj9bEvrTgbO0uewAAAE8"]
[Fri Apr 24 09:17:48.567387 2026] [:error] [pid 19100:tid 19134] [client 20.251.36.110:20661] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aerEvLF_hzQs4CqbifdiSwAAABg"]
[Fri Apr 24 09:17:50.454885 2026] [:error] [pid 19101:tid 19142] [client 20.251.36.110:43285] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aerEvmAHj9bEvrTgbO0ugAAAAEU"]
[Fri Apr 24 09:17:52.537438 2026] [:error] [pid 19100:tid 19113] [client 20.251.36.110:56988] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aerEwLF_hzQs4CqbifdiTwAAAAQ"]
[Fri Apr 24 09:17:53.794514 2026] [:error] [pid 19200:tid 19226] [client 20.251.36.110:65359] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w.php"] [unique_id "aerEwTQ--M3-tsKAnhE4wAAAANI"]
[Fri Apr 24 09:17:54.594898 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:51685] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axe.php"] [unique_id "aerEwjQ--M3-tsKAnhE4wgAAANQ"]
[Fri Apr 24 09:17:55.557046 2026] [:error] [pid 52129:tid 52148] [client 20.251.36.110:26739] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axe.php"] [unique_id "aerEw-KCZKf8_u2LKiA6lAAAAQ8"]
[Fri Apr 24 09:17:56.632890 2026] [:error] [pid 52129:tid 52140] [client 20.251.36.110:60006] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axe.php"] [unique_id "aerExOKCZKf8_u2LKiA6lwAAAQc"]
[Fri Apr 24 09:17:57.717726 2026] [:error] [pid 52129:tid 52153] [client 20.251.36.110:28567] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axe.php"] [unique_id "aerExeKCZKf8_u2LKiA6nAAAARQ"]
[Fri Apr 24 09:17:59.287161 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:17:59.551578 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:17:59.823104 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:00.092307 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:00.359324 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:00.632602 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:00.898170 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:01.172645 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:01.439911 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:01.711152 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:03.528079 2026] [proxy_fcgi:error] [pid 52129:tid 52135] [client 20.251.36.110:64759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:18:03.789816 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:64759] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerEy-KCZKf8_u2LKiA61gAAAQo"]
[Fri Apr 24 09:18:04.608146 2026] [:error] [pid 19102:tid 19169] [client 20.251.36.110:51699] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerEzADSgrbLEZbkqD493wAAAIU"]
[Fri Apr 24 09:18:05.215204 2026] [:error] [pid 19102:tid 19166] [client 20.251.36.110:43310] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerEzQDSgrbLEZbkqD495AAAAII"]
[Fri Apr 24 09:18:05.789286 2026] [:error] [pid 19102:tid 19178] [client 20.251.36.110:65401] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerEzQDSgrbLEZbkqD495wAAAI4"]
[Fri Apr 24 09:18:06.393965 2026] [:error] [pid 19100:tid 19132] [client 20.251.36.110:20615] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vv.php"] [unique_id "aerEzrF_hzQs4CqbifdiXwAAABY"]
[Fri Apr 24 09:18:07.008774 2026] [:error] [pid 52129:tid 52144] [client 20.251.36.110:35014] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vv.php"] [unique_id "aerEz-KCZKf8_u2LKiA65AAAAQs"]
[Fri Apr 24 09:18:07.547212 2026] [:error] [pid 52129:tid 52150] [client 20.251.36.110:43302] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vv.php"] [unique_id "aerEz-KCZKf8_u2LKiA66gAAARE"]
[Fri Apr 24 09:18:08.119979 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:40018] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vv.php"] [unique_id "aerE0OKCZKf8_u2LKiA68QAAAQU"]
[Fri Apr 24 09:18:08.747804 2026] [:error] [pid 19101:tid 19157] [client 20.251.36.110:64707] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpconf.php"] [unique_id "aerE0GAHj9bEvrTgbO0uoQAAAFQ"]
[Fri Apr 24 09:18:09.285468 2026] [:error] [pid 19200:tid 19216] [client 20.251.36.110:58925] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpconf.php"] [unique_id "aerE0TQ--M3-tsKAnhE4zgAAAMg"]
[Fri Apr 24 09:18:09.906300 2026] [:error] [pid 19102:tid 19185] [client 20.251.36.110:65404] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpconf.php"] [unique_id "aerE0QDSgrbLEZbkqD4-AwAAAJU"]
[Fri Apr 24 09:18:10.466916 2026] [:error] [pid 52129:tid 52157] [client 20.251.36.110:24706] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpconf.php"] [unique_id "aerE0uKCZKf8_u2LKiA6_QAAARg"]
[Fri Apr 24 09:18:11.102205 2026] [:error] [pid 19102:tid 19186] [client 20.251.36.110:28604] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aerE0wDSgrbLEZbkqD4-BwAAAJY"]
[Fri Apr 24 09:18:11.767909 2026] [:error] [pid 19102:tid 19183] [client 20.251.36.110:35050] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aerE0wDSgrbLEZbkqD4-CwAAAJM"]
[Fri Apr 24 09:18:12.416320 2026] [:error] [pid 19100:tid 19114] [client 20.251.36.110:64747] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aerE1LF_hzQs4CqbifdiiwAAAAU"]
[Fri Apr 24 09:18:13.060179 2026] [:error] [pid 19102:tid 19167] [client 20.251.36.110:35065] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "aerE1QDSgrbLEZbkqD4-FAAAAIM"]
[Fri Apr 24 09:18:13.648434 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:58931] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-zx.php"] [unique_id "aerE1eKCZKf8_u2LKiA7BwAAAQo"]
[Fri Apr 24 09:18:14.457733 2026] [:error] [pid 19100:tid 19132] [client 20.251.36.110:20614] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-zx.php"] [unique_id "aerE1rF_hzQs4CqbifdijwAAABY"]
[Fri Apr 24 09:18:15.118196 2026] [:error] [pid 19100:tid 19128] [client 20.251.36.110:56402] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-zx.php"] [unique_id "aerE17F_hzQs4CqbifdilAAAABI"]
[Fri Apr 24 09:18:15.824787 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:43292] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-zx.php"] [unique_id "aerE1-KCZKf8_u2LKiA7DgAAAQU"]
[Fri Apr 24 09:18:16.670781 2026] [:error] [pid 19102:tid 19169] [client 20.251.36.110:51681] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "aerE2ADSgrbLEZbkqD4-IQAAAIU"]
[Fri Apr 24 09:18:17.481443 2026] [:error] [pid 19200:tid 19216] [client 20.251.36.110:65368] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "aerE2TQ--M3-tsKAnhE47AAAAMg"]
[Fri Apr 24 09:18:18.279940 2026] [:error] [pid 19101:tid 19146] [client 20.251.36.110:35011] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "aerE2mAHj9bEvrTgbO0uqwAAAEk"]
[Fri Apr 24 09:18:19.121466 2026] [:error] [pid 19200:tid 19212] [client 20.251.36.110:51689] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/000.php"] [unique_id "aerE2zQ--M3-tsKAnhE49gAAAMQ"]
[Fri Apr 24 09:18:20.143936 2026] [:error] [pid 19200:tid 19220] [client 20.251.36.110:65288] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mar.php"] [unique_id "aerE3DQ--M3-tsKAnhE4_AAAAMw"]
[Fri Apr 24 09:18:21.350766 2026] [:error] [pid 19102:tid 19177] [client 20.251.36.110:56429] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mar.php"] [unique_id "aerE3QDSgrbLEZbkqD4-LQAAAI0"]
[Fri Apr 24 09:18:22.010424 2026] [:error] [pid 52129:tid 52153] [client 20.251.36.110:28601] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mar.php"] [unique_id "aerE3uKCZKf8_u2LKiA7KQAAARQ"]
[Fri Apr 24 09:18:22.720597 2026] [:error] [pid 19100:tid 19129] [client 20.251.36.110:51693] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mar.php"] [unique_id "aerE3rF_hzQs4CqbifdiuwAAABM"]
[Fri Apr 24 09:18:23.351792 2026] [:error] [pid 19102:tid 19184] [client 20.251.36.110:57019] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "aerE3wDSgrbLEZbkqD4-MwAAAJQ"]
[Fri Apr 24 09:18:24.037664 2026] [:error] [pid 19200:tid 19220] [client 20.251.36.110:51663] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "aerE4DQ--M3-tsKAnhE5AQAAAMw"]
[Fri Apr 24 09:18:24.747909 2026] [:error] [pid 19102:tid 19175] [client 20.251.36.110:65378] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "aerE4ADSgrbLEZbkqD4-OgAAAIs"]
[Fri Apr 24 09:18:25.597444 2026] [:error] [pid 19102:tid 19167] [client 20.251.36.110:65365] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "aerE4QDSgrbLEZbkqD4-RAAAAIM"]
[Fri Apr 24 09:18:26.372566 2026] [:error] [pid 19102:tid 19180] [client 20.251.36.110:35053] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jodohghi.php"] [unique_id "aerE4gDSgrbLEZbkqD4-SgAAAJA"]
[Fri Apr 24 09:18:27.201954 2026] [:error] [pid 19102:tid 19173] [client 20.251.36.110:56421] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jodohghi.php"] [unique_id "aerE4wDSgrbLEZbkqD4-UAAAAIk"]
[Fri Apr 24 09:18:27.951338 2026] [:error] [pid 19102:tid 19167] [client 20.251.36.110:60014] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jodohghi.php"] [unique_id "aerE4wDSgrbLEZbkqD4-VQAAAIM"]
[Fri Apr 24 09:18:28.697569 2026] [:error] [pid 19200:tid 19216] [client 20.251.36.110:65355] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jodohghi.php"] [unique_id "aerE5DQ--M3-tsKAnhE5CAAAAMg"]
[Fri Apr 24 09:18:29.432137 2026] [:error] [pid 52129:tid 52155] [client 20.251.36.110:56426] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "aerE5eKCZKf8_u2LKiA7QgAAARY"]
[Fri Apr 24 09:18:30.798962 2026] [:error] [pid 52129:tid 52137] [client 20.251.36.110:58882] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "aerE5uKCZKf8_u2LKiA7RwAAAQQ"]
[Fri Apr 24 09:18:31.543250 2026] [:error] [pid 19200:tid 19219] [client 20.251.36.110:65397] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "aerE5zQ--M3-tsKAnhE5GQAAAMs"]
[Fri Apr 24 09:18:32.350068 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:20671] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "aerE6OKCZKf8_u2LKiA7UAAAAQU"]
[Fri Apr 24 09:18:33.291551 2026] [:error] [pid 19100:tid 19126] [client 20.251.36.110:58915] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rivasqup.php"] [unique_id "aerE6bF_hzQs4Cqbifdi-wAAABA"]
[Fri Apr 24 09:18:34.141668 2026] [:error] [pid 19200:tid 19211] [client 20.251.36.110:56964] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rivasqup.php"] [unique_id "aerE6jQ--M3-tsKAnhE5JAAAAMM"]
[Fri Apr 24 09:18:34.839661 2026] [:error] [pid 19200:tid 19219] [client 20.251.36.110:51671] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rivasqup.php"] [unique_id "aerE6jQ--M3-tsKAnhE5KgAAAMs"]
[Fri Apr 24 09:18:35.431542 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:57005] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rivasqup.php"] [unique_id "aerE6-KCZKf8_u2LKiA7ZgAAAQo"]
[Fri Apr 24 09:18:36.806312 2026] [:error] [pid 19200:tid 19225] [client 20.251.36.110:56989] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "aerE7DQ--M3-tsKAnhE5PAAAANE"]
[Fri Apr 24 09:18:37.773375 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:55844] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "aerE7TQ--M3-tsKAnhE5RwAAANQ"]
[Fri Apr 24 09:18:38.489782 2026] [:error] [pid 19200:tid 19214] [client 20.251.36.110:20618] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "aerE7jQ--M3-tsKAnhE5XQAAAMY"]
[Fri Apr 24 09:18:39.133094 2026] [:error] [pid 19102:tid 19185] [client 20.251.36.110:28571] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mga.php"] [unique_id "aerE7wDSgrbLEZbkqD4-eAAAAJU"]
[Fri Apr 24 09:18:40.069496 2026] [:error] [pid 19102:tid 19180] [client 20.251.36.110:20651] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dshtv.php"] [unique_id "aerE8ADSgrbLEZbkqD4-ewAAAJA"]
[Fri Apr 24 09:18:40.849827 2026] [:error] [pid 52129:tid 52149] [client 20.251.36.110:20659] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dshtv.php"] [unique_id "aerE8OKCZKf8_u2LKiA7jwAAARA"]
[Fri Apr 24 09:18:41.476320 2026] [:error] [pid 19200:tid 19221] [client 20.251.36.110:55832] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dshtv.php"] [unique_id "aerE8TQ--M3-tsKAnhE5dwAAAM0"]
[Fri Apr 24 09:18:42.522485 2026] [:error] [pid 52129:tid 52157] [client 20.251.36.110:40027] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dshtv.php"] [unique_id "aerE8uKCZKf8_u2LKiA7pAAAARg"]
[Fri Apr 24 09:18:43.239250 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:55848] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sym403.php"] [unique_id "aerE8zQ--M3-tsKAnhE5egAAAMA"]
[Fri Apr 24 09:18:44.047828 2026] [:error] [pid 52129:tid 52134] [client 20.251.36.110:56423] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sym403.php"] [unique_id "aerE9OKCZKf8_u2LKiA7rQAAAQE"]
[Fri Apr 24 09:18:45.460588 2026] [:error] [pid 52129:tid 52147] [client 20.251.36.110:59997] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sym403.php"] [unique_id "aerE9eKCZKf8_u2LKiA7ugAAAQ4"]
[Fri Apr 24 09:18:46.372689 2026] [:error] [pid 19101:tid 19144] [client 20.251.36.110:52325] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sym403.php"] [unique_id "aerE9mAHj9bEvrTgbO0vHQAAAEc"]
[Fri Apr 24 09:18:47.530904 2026] [:error] [pid 19102:tid 19165] [client 20.251.36.110:60545] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/temp1.php"] [unique_id "aerE9wDSgrbLEZbkqD4-jAAAAIE"]
[Fri Apr 24 09:18:48.417115 2026] [:error] [pid 19200:tid 19210] [client 20.251.36.110:49776] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/temp1.php"] [unique_id "aerE-DQ--M3-tsKAnhE5iAAAAMI"]
[Fri Apr 24 09:18:49.320845 2026] [:error] [pid 52129:tid 52148] [client 20.251.36.110:43342] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/temp1.php"] [unique_id "aerE-eKCZKf8_u2LKiA7ywAAAQ8"]
[Fri Apr 24 09:18:50.544892 2026] [:error] [pid 19101:tid 19158] [client 20.251.36.110:60570] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/temp1.php"] [unique_id "aerE-mAHj9bEvrTgbO0vJgAAAFU"]
[Fri Apr 24 09:18:51.699548 2026] [:error] [pid 19101:tid 19155] [client 20.251.36.110:54892] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aerE-2AHj9bEvrTgbO0vLwAAAFI"]
[Fri Apr 24 09:18:52.868812 2026] [:error] [pid 19100:tid 19120] [client 20.251.36.110:60558] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aerE_LF_hzQs4CqbifdjGwAAAAo"]
[Fri Apr 24 09:18:54.801313 2026] [:error] [pid 19101:tid 19142] [client 20.251.36.110:33126] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aerE_mAHj9bEvrTgbO0vPwAAAEU"]
[Fri Apr 24 09:18:55.952599 2026] [:error] [pid 19102:tid 19168] [client 20.251.36.110:41965] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aerE_wDSgrbLEZbkqD4-mAAAAIQ"]
[Fri Apr 24 09:18:56.816436 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:21990] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aerFAOKCZKf8_u2LKiA76AAAARU"]
[Fri Apr 24 09:18:57.560336 2026] [:error] [pid 19100:tid 19120] [client 20.251.36.110:47944] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aerFAbF_hzQs4CqbifdjLQAAAAo"]
[Fri Apr 24 09:18:58.670182 2026] [:error] [pid 19102:tid 19180] [client 20.251.36.110:34962] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aerFAgDSgrbLEZbkqD4-pAAAAJA"]
[Fri Apr 24 09:18:59.413989 2026] [:error] [pid 19200:tid 19220] [client 20.251.36.110:61030] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "aerFAzQ--M3-tsKAnhE5nwAAAMw"]
[Fri Apr 24 09:19:00.500571 2026] [:error] [pid 19102:tid 19164] [client 20.251.36.110:55917] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aerFBADSgrbLEZbkqD4-rQAAAIA"]
[Fri Apr 24 09:19:01.973405 2026] [:error] [pid 19102:tid 19182] [client 20.251.36.110:22640] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aerFBQDSgrbLEZbkqD4-sQAAAJI"]
[Fri Apr 24 09:19:02.974008 2026] [:error] [pid 19100:tid 19122] [client 20.251.36.110:61046] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "aerFBrF_hzQs4CqbifdjLwAAAAw"]
[Fri Apr 24 09:19:03.535295 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:03.803254 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:04.068752 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:04.334684 2026] [proxy_fcgi:error] [pid 19200:tid 19223] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:04.599634 2026] [proxy_fcgi:error] [pid 19200:tid 19217] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:04.869663 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:05.134054 2026] [proxy_fcgi:error] [pid 19200:tid 19209] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:05.408166 2026] [proxy_fcgi:error] [pid 19200:tid 19224] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:05.673509 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:05.940936 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:06.205479 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 20.251.36.110:27310] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:19:06.466968 2026] [:error] [pid 19200:tid 19221] [client 20.251.36.110:27310] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tiroto.php"] [unique_id "aerFCjQ--M3-tsKAnhE5vwAAAM0"]
[Fri Apr 24 09:19:07.624331 2026] [:error] [pid 52129:tid 52141] [client 20.251.36.110:21927] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tiroto.php"] [unique_id "aerFC-KCZKf8_u2LKiA8BQAAAQg"]
[Fri Apr 24 09:19:08.771616 2026] [:error] [pid 52129:tid 52139] [client 20.251.36.110:2284] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tiroto.php"] [unique_id "aerFDOKCZKf8_u2LKiA8CgAAAQY"]
[Fri Apr 24 09:19:09.845763 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:21951] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-tiroto.php"] [unique_id "aerFDeKCZKf8_u2LKiA8EAAAAQU"]
[Fri Apr 24 09:19:11.455948 2026] [:error] [pid 19102:tid 19175] [client 20.251.36.110:21950] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son.php"] [unique_id "aerFDwDSgrbLEZbkqD4-xAAAAIs"]
[Fri Apr 24 09:19:13.098510 2026] [:error] [pid 19100:tid 19113] [client 20.251.36.110:2243] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son.php"] [unique_id "aerFEbF_hzQs4CqbifdjPgAAAAQ"]
[Fri Apr 24 09:19:14.108784 2026] [:error] [pid 19102:tid 19168] [client 20.251.36.110:3054] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son.php"] [unique_id "aerFEgDSgrbLEZbkqD4-xgAAAIQ"]
[Fri Apr 24 09:19:15.420562 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:41918] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/son.php"] [unique_id "aerFEzQ--M3-tsKAnhE52AAAANQ"]
[Fri Apr 24 09:19:17.271544 2026] [:error] [pid 19102:tid 19186] [client 20.251.36.110:45792] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aerFFQDSgrbLEZbkqD4-zAAAAJY"]
[Fri Apr 24 09:19:18.341653 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:41261] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aerFFuKCZKf8_u2LKiA8IwAAAQo"]
[Fri Apr 24 09:19:19.894599 2026] [:error] [pid 19200:tid 19213] [client 20.251.36.110:53610] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aerFFzQ--M3-tsKAnhE54wAAAMU"]
[Fri Apr 24 09:19:20.738399 2026] [:error] [pid 19102:tid 19183] [client 20.251.36.110:39376] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "aerFGADSgrbLEZbkqD4-0wAAAJM"]
[Fri Apr 24 09:19:21.914956 2026] [:error] [pid 19200:tid 19219] [client 20.251.36.110:39394] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/99.php"] [unique_id "aerFGTQ--M3-tsKAnhE56wAAAMs"]
[Fri Apr 24 09:19:23.124974 2026] [:error] [pid 52129:tid 52144] [client 20.251.36.110:19348] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/99.php"] [unique_id "aerFG-KCZKf8_u2LKiA8NQAAAQs"]
[Fri Apr 24 09:19:24.501463 2026] [:error] [pid 19102:tid 19186] [client 20.251.36.110:46771] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/99.php"] [unique_id "aerFHADSgrbLEZbkqD4-3QAAAJY"]
[Fri Apr 24 09:19:25.764460 2026] [:error] [pid 52129:tid 52136] [client 20.251.36.110:45123] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/99.php"] [unique_id "aerFHeKCZKf8_u2LKiA8QAAAAQM"]
[Fri Apr 24 09:19:26.558514 2026] [:error] [pid 19100:tid 19123] [client 20.251.36.110:19392] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aerFHrF_hzQs4CqbifdjUgAAAA0"]
[Fri Apr 24 09:19:28.730680 2026] [:error] [pid 52129:tid 52152] [client 20.251.36.110:46738] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aerFIOKCZKf8_u2LKiA8SgAAARM"]
[Fri Apr 24 09:19:31.130451 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:26652] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aerFI-KCZKf8_u2LKiA8UwAAARU"]
[Fri Apr 24 09:19:31.749426 2026] [:error] [pid 19100:tid 19125] [client 20.251.36.110:33113] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "aerFI7F_hzQs4CqbifdjWQAAAA8"]
[Fri Apr 24 09:19:32.689827 2026] [:error] [pid 19102:tid 19183] [client 20.251.36.110:45132] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filefuns.php"] [unique_id "aerFJADSgrbLEZbkqD4-8QAAAJM"]
[Fri Apr 24 09:19:33.656530 2026] [:error] [pid 52129:tid 52153] [client 20.251.36.110:58168] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filefuns.php"] [unique_id "aerFJeKCZKf8_u2LKiA8XwAAARQ"]
[Fri Apr 24 09:19:35.645921 2026] [:error] [pid 52129:tid 52147] [client 20.251.36.110:2207] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filefuns.php"] [unique_id "aerFJ-KCZKf8_u2LKiA8bwAAAQ4"]
[Fri Apr 24 09:19:36.757899 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:61953] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/filefuns.php"] [unique_id "aerFKOKCZKf8_u2LKiA8dQAAAQo"]
[Fri Apr 24 09:19:37.830068 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:45144] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aerFKeKCZKf8_u2LKiA8egAAARU"]
[Fri Apr 24 09:19:38.623709 2026] [:error] [pid 19200:tid 19210] [client 20.251.36.110:64252] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aerFKjQ--M3-tsKAnhE6CgAAAMI"]
[Fri Apr 24 09:19:40.851275 2026] [:error] [pid 52129:tid 52155] [client 20.251.36.110:36306] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aerFLOKCZKf8_u2LKiA8iAAAARY"]
[Fri Apr 24 09:19:42.090563 2026] [:error] [pid 19101:tid 19140] [client 20.251.36.110:46750] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aerFLmAHj9bEvrTgbO0vnQAAAEM"]
[Fri Apr 24 09:19:43.654883 2026] [:error] [pid 19102:tid 19164] [client 20.251.36.110:46765] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options.php"] [unique_id "aerFLwDSgrbLEZbkqD4_GQAAAIA"]
[Fri Apr 24 09:19:45.000978 2026] [:error] [pid 19102:tid 19175] [client 20.251.36.110:63682] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options.php"] [unique_id "aerFMADSgrbLEZbkqD4_HwAAAIs"]
[Fri Apr 24 09:19:46.393734 2026] [:error] [pid 52129:tid 52141] [client 20.251.36.110:56368] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options.php"] [unique_id "aerFMuKCZKf8_u2LKiA8nwAAAQg"]
[Fri Apr 24 09:19:48.190770 2026] [:error] [pid 19101:tid 19152] [client 20.251.36.110:61975] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/options.php"] [unique_id "aerFNGAHj9bEvrTgbO0vpQAAAE8"]
[Fri Apr 24 09:19:49.921164 2026] [:error] [pid 19200:tid 19212] [client 20.251.36.110:33124] [client 20.251.36.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aerFNTQ--M3-tsKAnhE6GAAAAMQ"]
[Fri Apr 24 09:19:52.330208 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:35603] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aerFOOKCZKf8_u2LKiA8tQAAARU"]
[Fri Apr 24 09:19:54.497337 2026] [:error] [pid 19200:tid 19228] [client 20.251.36.110:33151] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aerFOjQ--M3-tsKAnhE6IwAAANQ"]
[Fri Apr 24 09:19:57.089736 2026] [:error] [pid 19200:tid 19215] [client 20.251.36.110:33686] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aerFPTQ--M3-tsKAnhE6KgAAAMc"]
[Fri Apr 24 09:19:57.700639 2026] [:error] [pid 19102:tid 19187] [client 20.251.36.110:56378] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/d.php"] [unique_id "aerFPQDSgrbLEZbkqD4_LwAAAJc"]
[Fri Apr 24 09:19:58.481445 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:33707] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1a.php"] [unique_id "aerFPjQ--M3-tsKAnhE6MQAAAMA"]
[Fri Apr 24 09:20:01.945605 2026] [:error] [pid 19100:tid 19131] [client 20.251.36.110:64210] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1a.php"] [unique_id "aerFQbF_hzQs4CqbifdjeQAAABU"]
[Fri Apr 24 09:20:03.237835 2026] [:error] [pid 19100:tid 19113] [client 20.251.36.110:33667] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1a.php"] [unique_id "aerFQ7F_hzQs4CqbifdjfwAAAAQ"]
[Fri Apr 24 09:20:04.357164 2026] [:error] [pid 19200:tid 19212] [client 20.251.36.110:46342] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1a.php"] [unique_id "aerFRDQ--M3-tsKAnhE6OQAAAMQ"]
[Fri Apr 24 09:20:05.495056 2026] [:error] [pid 52129:tid 52147] [client 20.251.36.110:56349] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rh.php"] [unique_id "aerFReKCZKf8_u2LKiA86AAAAQ4"]
[Fri Apr 24 09:20:07.126764 2026] [proxy_fcgi:error] [pid 19101:tid 19146] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:07.391319 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:07.655484 2026] [proxy_fcgi:error] [pid 19101:tid 19148] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:07.921013 2026] [proxy_fcgi:error] [pid 19101:tid 19144] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:08.188282 2026] [proxy_fcgi:error] [pid 19101:tid 19150] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:08.458309 2026] [proxy_fcgi:error] [pid 19101:tid 19154] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:08.729658 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:09.018308 2026] [proxy_fcgi:error] [pid 19101:tid 19151] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:09.284426 2026] [proxy_fcgi:error] [pid 19101:tid 19149] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:09.549979 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:09.817118 2026] [proxy_fcgi:error] [pid 19101:tid 19158] [client 20.251.36.110:56342] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:20:10.078336 2026] [:error] [pid 19101:tid 19138] [client 20.251.36.110:56342] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zdd.php"] [unique_id "aerFSmAHj9bEvrTgbO0v1QAAAEE"]
[Fri Apr 24 09:20:11.114274 2026] [:error] [pid 52129:tid 52155] [client 20.251.36.110:39954] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zdd.php"] [unique_id "aerFS-KCZKf8_u2LKiA8-gAAARY"]
[Fri Apr 24 09:20:11.913934 2026] [:error] [pid 52129:tid 52138] [client 20.251.36.110:25368] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zdd.php"] [unique_id "aerFS-KCZKf8_u2LKiA8_QAAAQU"]
[Fri Apr 24 09:20:13.584612 2026] [:error] [pid 19101:tid 19152] [client 20.251.36.110:61997] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zdd.php"] [unique_id "aerFTWAHj9bEvrTgbO0v2AAAAE8"]
[Fri Apr 24 09:20:16.531612 2026] [:error] [pid 19200:tid 19218] [client 20.251.36.110:21252] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "aerFUDQ--M3-tsKAnhE6VQAAAMo"]
[Fri Apr 24 09:20:18.189879 2026] [:error] [pid 19100:tid 19110] [client 20.251.36.110:25361] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "aerFUrF_hzQs4CqbifdjlwAAAAE"]
[Fri Apr 24 09:20:19.779473 2026] [:error] [pid 19200:tid 19231] [client 20.251.36.110:60014] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "aerFUzQ--M3-tsKAnhE6XgAAANc"]
[Fri Apr 24 09:20:21.032402 2026] [:error] [pid 19102:tid 19182] [client 20.251.36.110:39986] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/133.php"] [unique_id "aerFVQDSgrbLEZbkqD4_TAAAAJI"]
[Fri Apr 24 09:20:26.047299 2026] [:error] [pid 19100:tid 19121] [client 20.251.36.110:50324] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aerFWrF_hzQs4CqbifdjrQAAAAs"]
[Fri Apr 24 09:20:30.600631 2026] [:error] [pid 19100:tid 19115] [client 20.251.36.110:50338] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aerFXrF_hzQs4CqbifdjuQAAAAY"]
[Fri Apr 24 09:20:31.407274 2026] [:error] [pid 19100:tid 19123] [client 20.251.36.110:2504] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aerFX7F_hzQs4CqbifdjvwAAAA0"]
[Fri Apr 24 09:20:34.673099 2026] [:error] [pid 19100:tid 19121] [client 20.251.36.110:38223] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jq.php"] [unique_id "aerFYrF_hzQs4CqbifdjxgAAAAs"]
[Fri Apr 24 09:20:37.468081 2026] [:error] [pid 52129:tid 52152] [client 20.251.36.110:44429] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cro.php"] [unique_id "aerFZeKCZKf8_u2LKiA9IwAAARM"]
[Fri Apr 24 09:20:40.293376 2026] [:error] [pid 19100:tid 19114] [client 20.251.36.110:20715] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cro.php"] [unique_id "aerFaLF_hzQs4CqbifdjygAAAAU"]
[Fri Apr 24 09:20:44.413718 2026] [:error] [pid 52129:tid 52136] [client 20.251.36.110:38796] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cro.php"] [unique_id "aerFbOKCZKf8_u2LKiA9PAAAAQM"]
[Fri Apr 24 09:20:45.819359 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:58915] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cro.php"] [unique_id "aerFbTQ--M3-tsKAnhE6kAAAAMA"]
[Fri Apr 24 09:20:47.610295 2026] [:error] [pid 52129:tid 52154] [client 20.251.36.110:25393] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwx.php"] [unique_id "aerFb-KCZKf8_u2LKiA9SAAAARU"]
[Fri Apr 24 09:20:48.936906 2026] [:error] [pid 52129:tid 52141] [client 20.251.36.110:44464] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwx.php"] [unique_id "aerFcOKCZKf8_u2LKiA9VAAAAQg"]
[Fri Apr 24 09:20:50.434811 2026] [:error] [pid 52129:tid 52145] [client 20.251.36.110:39990] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwx.php"] [unique_id "aerFcuKCZKf8_u2LKiA9XwAAAQw"]
[Fri Apr 24 09:20:51.319149 2026] [:error] [pid 19100:tid 19120] [client 20.251.36.110:51586] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wwx.php"] [unique_id "aerFc7F_hzQs4Cqbifdj1QAAAAo"]
[Fri Apr 24 09:20:54.130800 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:44476] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aerFdjQ--M3-tsKAnhE6nQAAAMA"]
[Fri Apr 24 09:20:56.397779 2026] [:error] [pid 19200:tid 19226] [client 20.251.36.110:49229] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aerFeDQ--M3-tsKAnhE6ogAAANI"]
[Fri Apr 24 09:20:57.589689 2026] [:error] [pid 52129:tid 52136] [client 20.251.36.110:2533] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aerFeeKCZKf8_u2LKiA9mQAAAQM"]
[Fri Apr 24 09:20:58.958882 2026] [:error] [pid 19100:tid 19116] [client 20.251.36.110:51595] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/trx24.php"] [unique_id "aerFerF_hzQs4Cqbifdj3QAAAAc"]
[Fri Apr 24 09:20:59.603633 2026] [:error] [pid 19200:tid 19221] [client 20.251.36.110:46841] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aerFezQ--M3-tsKAnhE6qwAAAM0"]
[Fri Apr 24 09:21:00.657324 2026] [:error] [pid 19200:tid 19213] [client 20.251.36.110:49251] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aerFfDQ--M3-tsKAnhE6rgAAAMU"]
[Fri Apr 24 09:21:02.372902 2026] [:error] [pid 52129:tid 52134] [client 20.251.36.110:20712] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aerFfuKCZKf8_u2LKiA90AAAAQE"]
[Fri Apr 24 09:21:04.287131 2026] [:error] [pid 52129:tid 52140] [client 20.251.36.110:25358] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "aerFgOKCZKf8_u2LKiA97QAAAQc"]
[Fri Apr 24 09:21:05.963970 2026] [:error] [pid 19102:tid 19174] [client 20.251.36.110:37526] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/berax.php"] [unique_id "aerFgQDSgrbLEZbkqD4_kQAAAIo"]
[Fri Apr 24 09:21:08.643540 2026] [:error] [pid 19102:tid 19164] [client 20.251.36.110:37527] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/berax.php"] [unique_id "aerFhADSgrbLEZbkqD4_lQAAAIA"]
[Fri Apr 24 09:21:10.073894 2026] [proxy_fcgi:error] [pid 19100:tid 19126] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:10.356503 2026] [proxy_fcgi:error] [pid 19100:tid 19113] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:10.623956 2026] [proxy_fcgi:error] [pid 19100:tid 19131] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:10.888632 2026] [proxy_fcgi:error] [pid 19100:tid 19119] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:11.169661 2026] [proxy_fcgi:error] [pid 19100:tid 19132] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:11.441247 2026] [proxy_fcgi:error] [pid 19100:tid 19109] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:11.705972 2026] [proxy_fcgi:error] [pid 19100:tid 19116] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:11.981656 2026] [proxy_fcgi:error] [pid 19100:tid 19134] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:12.251844 2026] [proxy_fcgi:error] [pid 19100:tid 19118] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:12.519363 2026] [proxy_fcgi:error] [pid 19100:tid 19112] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:12.791314 2026] [proxy_fcgi:error] [pid 19100:tid 19120] [client 20.251.36.110:38255] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:21:13.051315 2026] [:error] [pid 19100:tid 19114] [client 20.251.36.110:38255] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzgf5.php"] [unique_id "aerFibF_hzQs4Cqbifdj7gAAAAU"]
[Fri Apr 24 09:21:14.075198 2026] [:error] [pid 19200:tid 19218] [client 20.251.36.110:44442] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzgf5.php"] [unique_id "aerFijQ--M3-tsKAnhE63wAAAMo"]
[Fri Apr 24 09:21:14.855606 2026] [:error] [pid 19102:tid 19177] [client 20.251.36.110:38790] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzgf5.php"] [unique_id "aerFigDSgrbLEZbkqD4_pQAAAI0"]
[Fri Apr 24 09:21:16.152256 2026] [:error] [pid 19102:tid 19182] [client 20.251.36.110:38236] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzgf5.php"] [unique_id "aerFjADSgrbLEZbkqD4_rQAAAJI"]
[Fri Apr 24 09:21:18.216496 2026] [:error] [pid 19101:tid 19158] [client 20.251.36.110:50329] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzw9t.php"] [unique_id "aerFjmAHj9bEvrTgbO0wRQAAAFU"]
[Fri Apr 24 09:21:19.611824 2026] [:error] [pid 52129:tid 52143] [client 20.251.36.110:46837] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzw9t.php"] [unique_id "aerFj-KCZKf8_u2LKiA-ZgAAAQo"]
[Fri Apr 24 09:21:20.484801 2026] [:error] [pid 19100:tid 19119] [client 20.251.36.110:2538] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzw9t.php"] [unique_id "aerFkLF_hzQs4Cqbifdj9wAAAAk"]
[Fri Apr 24 09:21:21.710668 2026] [:error] [pid 19101:tid 19157] [client 20.251.36.110:50364] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/saxzw9t.php"] [unique_id "aerFkWAHj9bEvrTgbO0wXAAAAFQ"]
[Fri Apr 24 09:21:24.762090 2026] [:error] [pid 19102:tid 19172] [client 20.251.36.110:2555] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sder5252u.php"] [unique_id "aerFlADSgrbLEZbkqD4_xgAAAIg"]
[Fri Apr 24 09:21:25.673405 2026] [:error] [pid 52129:tid 52133] [client 20.251.36.110:56334] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sder5252u.php"] [unique_id "aerFleKCZKf8_u2LKiA-dAAAAQA"]
[Fri Apr 24 09:21:27.064853 2026] [:error] [pid 19100:tid 19126] [client 20.251.36.110:25375] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sder5252u.php"] [unique_id "aerFl7F_hzQs4Cqbifdj_gAAABA"]
[Fri Apr 24 09:21:28.773859 2026] [:error] [pid 52129:tid 52145] [client 20.251.36.110:46821] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sder5252u.php"] [unique_id "aerFmOKCZKf8_u2LKiA-gwAAAQw"]
[Fri Apr 24 09:21:30.692695 2026] [:error] [pid 19200:tid 19225] [client 20.251.36.110:38818] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sderty5u.php"] [unique_id "aerFmjQ--M3-tsKAnhE7CgAAANE"]
[Fri Apr 24 09:21:32.371526 2026] [:error] [pid 19200:tid 19229] [client 20.251.36.110:25360] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sderty5u.php"] [unique_id "aerFnDQ--M3-tsKAnhE7FQAAANU"]
[Fri Apr 24 09:21:35.418470 2026] [:error] [pid 52129:tid 52148] [client 20.251.36.110:20732] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sderty5u.php"] [unique_id "aerFn-KCZKf8_u2LKiA-kwAAAQ8"]
[Fri Apr 24 09:21:38.162806 2026] [:error] [pid 52129:tid 52152] [client 20.251.36.110:20687] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sderty5u.php"] [unique_id "aerFouKCZKf8_u2LKiA-lwAAARM"]
[Fri Apr 24 09:21:39.876557 2026] [:error] [pid 19100:tid 19118] [client 20.251.36.110:46805] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hilk.php"] [unique_id "aerFo7F_hzQs4CqbifdkDAAAAAg"]
[Fri Apr 24 09:21:42.218709 2026] [:error] [pid 52129:tid 52133] [client 20.251.36.110:50351] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hilk.php"] [unique_id "aerFpuKCZKf8_u2LKiA-qgAAAQA"]
[Fri Apr 24 09:21:44.847844 2026] [:error] [pid 19102:tid 19165] [client 20.251.36.110:50310] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hilk.php"] [unique_id "aerFqADSgrbLEZbkqD4_5AAAAIE"]
[Fri Apr 24 09:21:45.665607 2026] [:error] [pid 19102:tid 19168] [client 20.251.36.110:51636] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hilk.php"] [unique_id "aerFqQDSgrbLEZbkqD4_6AAAAIQ"]
[Fri Apr 24 09:21:46.454252 2026] [:error] [pid 19200:tid 19217] [client 20.251.36.110:46838] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aerFqjQ--M3-tsKAnhE7SgAAAMk"]
[Fri Apr 24 09:21:47.131277 2026] [:error] [pid 19101:tid 19161] [client 20.251.36.110:48566] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aerFq2AHj9bEvrTgbO0whwAAAFg"]
[Fri Apr 24 09:21:47.910461 2026] [:error] [pid 19102:tid 19174] [client 20.251.36.110:50339] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aerFqwDSgrbLEZbkqD4_7gAAAIo"]
[Fri Apr 24 09:21:48.582664 2026] [:error] [pid 52129:tid 52137] [client 20.251.36.110:38812] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/miso.php"] [unique_id "aerFrOKCZKf8_u2LKiA-ywAAAQQ"]
[Fri Apr 24 09:21:49.430954 2026] [:error] [pid 19200:tid 19222] [client 20.251.36.110:38258] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aerFrTQ--M3-tsKAnhE7UwAAAM4"]
[Fri Apr 24 09:21:50.425800 2026] [:error] [pid 19102:tid 19168] [client 20.251.36.110:25383] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aerFrgDSgrbLEZbkqD4_8gAAAIQ"]
[Fri Apr 24 09:21:51.703996 2026] [:error] [pid 19100:tid 19110] [client 20.251.36.110:37536] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aerFr7F_hzQs4CqbifdkJQAAAAE"]
[Fri Apr 24 09:21:53.077367 2026] [:error] [pid 52129:tid 52134] [client 20.251.36.110:38788] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yuzuru1.php"] [unique_id "aerFseKCZKf8_u2LKiA-1AAAAQE"]
[Fri Apr 24 09:21:55.015767 2026] [:error] [pid 19200:tid 19232] [client 20.251.36.110:48512] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/checkout.php"] [unique_id "aerFszQ--M3-tsKAnhE7ZAAAANg"]
[Fri Apr 24 09:21:56.749019 2026] [:error] [pid 19101:tid 19147] [client 20.251.36.110:2525] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/checkout.php"] [unique_id "aerFtGAHj9bEvrTgbO0wjAAAAEo"]
[Fri Apr 24 09:21:58.139043 2026] [:error] [pid 19100:tid 19125] [client 20.251.36.110:48573] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/checkout.php"] [unique_id "aerFtrF_hzQs4CqbifdkQAAAAA8"]
[Fri Apr 24 09:22:00.350781 2026] [:error] [pid 19200:tid 19224] [client 20.251.36.110:38238] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/checkout.php"] [unique_id "aerFuDQ--M3-tsKAnhE7dQAAANA"]
[Fri Apr 24 09:22:02.043447 2026] [:error] [pid 19101:tid 19138] [client 20.251.36.110:48556] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fictioner.php"] [unique_id "aerFumAHj9bEvrTgbO0wkQAAAEE"]
[Fri Apr 24 09:22:03.039152 2026] [:error] [pid 19101:tid 19144] [client 20.251.36.110:38832] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fictioner.php"] [unique_id "aerFu2AHj9bEvrTgbO0wlgAAAEc"]
[Fri Apr 24 09:22:04.040677 2026] [:error] [pid 19100:tid 19116] [client 20.251.36.110:38264] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fictioner.php"] [unique_id "aerFvLF_hzQs4CqbifdkUQAAAAc"]
[Fri Apr 24 09:22:05.157559 2026] [:error] [pid 19102:tid 19166] [client 20.251.36.110:49221] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fictioner.php"] [unique_id "aerFvQDSgrbLEZbkqD5ADQAAAII"]
[Fri Apr 24 09:22:05.957986 2026] [:error] [pid 19102:tid 19177] [client 20.251.36.110:37540] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aerFvQDSgrbLEZbkqD5ADwAAAI0"]
[Fri Apr 24 09:22:06.711076 2026] [:error] [pid 19102:tid 19178] [client 20.251.36.110:38243] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aerFvgDSgrbLEZbkqD5AEgAAAI4"]
[Fri Apr 24 09:22:07.878159 2026] [:error] [pid 19200:tid 19231] [client 20.251.36.110:51611] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aerFvzQ--M3-tsKAnhE7kAAAANc"]
[Fri Apr 24 09:22:08.729804 2026] [:error] [pid 52129:tid 52152] [client 20.251.36.110:49216] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ortasekerli1.php"] [unique_id "aerFwOKCZKf8_u2LKiA-5QAAARM"]
[Fri Apr 24 09:22:09.536750 2026] [:error] [pid 19200:tid 19227] [client 20.251.36.110:25375] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aerFwTQ--M3-tsKAnhE7mAAAANM"]
[Fri Apr 24 09:22:10.782093 2026] [:error] [pid 19200:tid 19208] [client 20.251.36.110:39953] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxa.php"] [unique_id "aerFwjQ--M3-tsKAnhE7oAAAAMA"]
[Fri Apr 24 09:22:13.006116 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:13.272094 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:13.547351 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:13.825490 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:14.097449 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:14.370324 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:14.641523 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:14.911729 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:15.219816 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:15.486972 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:15.788575 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.251.36.110:49276] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 09:22:16.049908 2026] [:error] [pid 52129:tid 52135] [client 20.251.36.110:49276] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerFyOKCZKf8_u2LKiA_AAAAAQI"]
[Fri Apr 24 09:22:17.575549 2026] [:error] [pid 19200:tid 19230] [client 20.251.36.110:39969] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerFyTQ--M3-tsKAnhE7vAAAANY"]
[Fri Apr 24 09:22:19.542770 2026] [:error] [pid 19101:tid 19152] [client 20.251.36.110:37518] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerFy2AHj9bEvrTgbO0wqAAAAE8"]
[Fri Apr 24 09:22:20.469886 2026] [:error] [pid 19101:tid 19149] [client 20.251.36.110:48521] [client 20.251.36.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aerFzGAHj9bEvrTgbO0wrgAAAEw"]
[Fri Apr 24 17:58:37.881444 2026] [:error] [pid 17808:tid 17814] [client 34.58.239.158:59303] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "aes-zearbOEFI8qshvL7SwAAAEQ"]
[Fri Apr 24 17:58:38.544001 2026] [:error] [pid 4177:tid 4193] [client 34.58.239.158:52066] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "aes-zn2asKnvdrSe0x6mnAAAAYg"]
[Fri Apr 24 17:58:39.152682 2026] [:error] [pid 4177:tid 4191] [client 34.58.239.158:52534] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aes-z32asKnvdrSe0x6mqAAAAYY"]
[Fri Apr 24 17:58:39.697825 2026] [:error] [pid 17720:tid 17754] [client 34.58.239.158:60599] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aes-z-hlUs6BS3Ng7_Va-gAAAMA"]
[Fri Apr 24 17:58:40.490279 2026] [:error] [pid 17808:tid 17832] [client 34.58.239.158:49561] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aes-0OarbOEFI8qshvL7VQAAAFY"]
[Fri Apr 24 17:58:41.037876 2026] [:error] [pid 4177:tid 4203] [client 34.58.239.158:64319] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aes-0X2asKnvdrSe0x6mzwAAAZI"]
[Fri Apr 24 17:58:41.671005 2026] [:error] [pid 4177:tid 4204] [client 34.58.239.158:53125] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aes-0X2asKnvdrSe0x6m2gAAAZM"]
[Fri Apr 24 20:14:14.797734 2026] [:error] [pid 17808:tid 17816] [client 217.142.185.108:55403] [client 217.142.185.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "aeteluarbOEFI8qshvIsqgAAAEY"]
[Fri Apr 24 20:34:53.857329 2026] [proxy_fcgi:error] [pid 17719:tid 17728] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:54.129055 2026] [proxy_fcgi:error] [pid 17719:tid 17743] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:54.390991 2026] [proxy_fcgi:error] [pid 17719:tid 17732] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:54.652751 2026] [proxy_fcgi:error] [pid 17719:tid 17736] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:54.914649 2026] [proxy_fcgi:error] [pid 17719:tid 17751] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:55.187802 2026] [proxy_fcgi:error] [pid 17719:tid 17742] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:55.730186 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:56.012060 2026] [proxy_fcgi:error] [pid 17719:tid 17728] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:56.274174 2026] [proxy_fcgi:error] [pid 17719:tid 17747] [client 74.248.100.218:53175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:34:56.539009 2026] [:error] [pid 17719:tid 17732] [client 74.248.100.218:53175] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "aetjcMTZ9gzEyL1BkPqofQAAAIU"]
[Fri Apr 24 20:34:59.799134 2026] [:error] [pid 17721:tid 17784] [client 74.248.100.218:33860] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "aetjc-FXXkLeyDnfk_84ygAAAAM"]
[Fri Apr 24 20:35:01.520049 2026] [:error] [pid 17720:tid 17765] [client 74.248.100.218:37757] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "aetjdehlUs6BS3Ng7_WgiQAAAMs"]
[Fri Apr 24 20:35:02.705749 2026] [:error] [pid 22114:tid 22139] [client 74.248.100.218:34571] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/166.php"] [unique_id "aetjdoAuWGz3WlMQjofplQAAARY"]
[Fri Apr 24 20:35:03.963705 2026] [:error] [pid 17719:tid 17748] [client 74.248.100.218:33859] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/term.php"] [unique_id "aetjd8TZ9gzEyL1BkPqokQAAAJU"]
[Fri Apr 24 20:35:05.506003 2026] [:error] [pid 17719:tid 17728] [client 74.248.100.218:34613] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/term.php"] [unique_id "aetjecTZ9gzEyL1BkPqomwAAAIE"]
[Fri Apr 24 20:35:10.330553 2026] [:error] [pid 17720:tid 17764] [client 74.248.100.218:33887] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/term.php"] [unique_id "aetjfuhlUs6BS3Ng7_WgnAAAAMo"]
[Fri Apr 24 20:35:11.466060 2026] [:error] [pid 4177:tid 4197] [client 74.248.100.218:37606] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/term.php"] [unique_id "aetjf32asKnvdrSe0x4GlwAAAYw"]
[Fri Apr 24 20:35:12.085655 2026] [:error] [pid 4177:tid 4205] [client 74.248.100.218:53149] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "aetjgH2asKnvdrSe0x4GmwAAAZQ"]
[Fri Apr 24 20:35:13.729633 2026] [:error] [pid 17808:tid 17827] [client 74.248.100.218:49260] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "aetjgearbOEFI8qshvIyzgAAAFE"]
[Fri Apr 24 20:35:19.677976 2026] [:error] [pid 4177:tid 4207] [client 74.248.100.218:63158] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "aetjh32asKnvdrSe0x4GtgAAAZY"]
[Fri Apr 24 20:35:22.876594 2026] [:error] [pid 17720:tid 17775] [client 74.248.100.218:33451] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/666.php"] [unique_id "aetjiuhlUs6BS3Ng7_WgwQAAANU"]
[Fri Apr 24 20:35:24.776104 2026] [:error] [pid 4177:tid 4194] [client 74.248.100.218:37011] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "aetjjH2asKnvdrSe0x4G-AAAAYk"]
[Fri Apr 24 20:35:26.658565 2026] [:error] [pid 17720:tid 17774] [client 74.248.100.218:37677] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "aetjjuhlUs6BS3Ng7_Wg0AAAANQ"]
[Fri Apr 24 20:35:28.832679 2026] [:error] [pid 17721:tid 17797] [client 74.248.100.218:63128] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "aetjkOFXXkLeyDnfk_841QAAABA"]
[Fri Apr 24 20:35:30.377658 2026] [:error] [pid 4177:tid 4198] [client 74.248.100.218:59022] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tt.php"] [unique_id "aetjkn2asKnvdrSe0x4HAAAAAY0"]
[Fri Apr 24 20:35:33.335288 2026] [:error] [pid 14531:tid 14539] [client 74.248.100.218:32839] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aetjlXfLU2gw-6KR-GbGEAAAAUY"]
[Fri Apr 24 20:35:35.933129 2026] [:error] [pid 4177:tid 4208] [client 74.248.100.218:57082] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aetjl32asKnvdrSe0x4HDQAAAZc"]
[Fri Apr 24 20:35:37.766643 2026] [:error] [pid 17720:tid 17769] [client 74.248.100.218:5801] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aetjmehlUs6BS3Ng7_Wg8AAAAM8"]
[Fri Apr 24 20:35:39.165786 2026] [:error] [pid 17808:tid 17811] [client 74.248.100.218:36755] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aetjm-arbOEFI8qshvIy9wAAAEE"]
[Fri Apr 24 20:35:44.514719 2026] [:error] [pid 17808:tid 17833] [client 74.248.100.218:25686] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "aetjoOarbOEFI8qshvIy_QAAAFc"]
[Fri Apr 24 20:35:48.970091 2026] [:error] [pid 4177:tid 4199] [client 74.248.100.218:41028] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "aetjpH2asKnvdrSe0x4HMAAAAY4"]
[Fri Apr 24 20:35:51.940928 2026] [:error] [pid 17721:tid 17784] [client 74.248.100.218:60698] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/66.php"] [unique_id "aetjp-FXXkLeyDnfk_844QAAAAM"]
[Fri Apr 24 20:35:55.811126 2026] [:error] [pid 22114:tid 22138] [client 74.248.100.218:35431] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aetjq4AuWGz3WlMQjofptAAAARU"]
[Fri Apr 24 20:35:58.059831 2026] [proxy_fcgi:error] [pid 22114:tid 22140] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:58.319761 2026] [proxy_fcgi:error] [pid 22114:tid 22125] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:58.578750 2026] [proxy_fcgi:error] [pid 22114:tid 22132] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:58.867096 2026] [proxy_fcgi:error] [pid 22114:tid 22131] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:59.126693 2026] [proxy_fcgi:error] [pid 22114:tid 22126] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:59.664292 2026] [proxy_fcgi:error] [pid 22114:tid 22127] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:35:59.923979 2026] [proxy_fcgi:error] [pid 22114:tid 22120] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:36:00.185055 2026] [proxy_fcgi:error] [pid 22114:tid 22133] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:36:00.729945 2026] [proxy_fcgi:error] [pid 22114:tid 22118] [client 74.248.100.218:44517] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:36:00.987470 2026] [:error] [pid 22114:tid 22129] [client 74.248.100.218:44517] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aetjsIAuWGz3WlMQjofpxAAAAQw"]
[Fri Apr 24 20:36:03.534566 2026] [:error] [pid 14531:tid 14546] [client 74.248.100.218:60772] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aetjs3fLU2gw-6KR-GbGJwAAAU0"]
[Fri Apr 24 20:36:05.680568 2026] [:error] [pid 14531:tid 14550] [client 74.248.100.218:31306] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aetjtXfLU2gw-6KR-GbGLwAAAVE"]
[Fri Apr 24 20:36:09.036049 2026] [:error] [pid 17721:tid 17785] [client 74.248.100.218:31313] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aetjueFXXkLeyDnfk_849QAAAAQ"]
[Fri Apr 24 20:36:12.200600 2026] [:error] [pid 17808:tid 17821] [client 74.248.100.218:35039] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "aetjvOarbOEFI8qshvIzLQAAAEs"]
[Fri Apr 24 20:36:14.707829 2026] [:error] [pid 17721:tid 17788] [client 74.248.100.218:34533] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "aetjvuFXXkLeyDnfk_85AwAAAAc"]
[Fri Apr 24 20:36:16.145128 2026] [:error] [pid 17808:tid 17831] [client 74.248.100.218:41366] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "aetjwOarbOEFI8qshvIzMwAAAFU"]
[Fri Apr 24 20:36:18.840494 2026] [:error] [pid 17808:tid 17816] [client 74.248.100.218:37220] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/shell.php"] [unique_id "aetjwuarbOEFI8qshvIzPQAAAEY"]
[Fri Apr 24 20:36:22.527108 2026] [:error] [pid 17720:tid 17774] [client 74.248.100.218:41373] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "aetjxuhlUs6BS3Ng7_WhBAAAANQ"]
[Fri Apr 24 20:36:24.823846 2026] [:error] [pid 17720:tid 17759] [client 74.248.100.218:31844] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "aetjyOhlUs6BS3Ng7_WhCgAAAMU"]
[Fri Apr 24 20:36:27.010800 2026] [:error] [pid 17720:tid 17761] [client 74.248.100.218:35082] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "aetjy-hlUs6BS3Ng7_WhEgAAAMc"]
[Fri Apr 24 20:36:29.090758 2026] [:error] [pid 4177:tid 4201] [client 74.248.100.218:62313] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/new.php"] [unique_id "aetjzX2asKnvdrSe0x4HlQAAAZA"]
[Fri Apr 24 20:36:31.155380 2026] [:error] [pid 4177:tid 4199] [client 74.248.100.218:41092] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetjz32asKnvdrSe0x4HmgAAAY4"]
[Fri Apr 24 20:36:33.056954 2026] [:error] [pid 17720:tid 17757] [client 74.248.100.218:35101] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetj0ehlUs6BS3Ng7_WhJAAAAMM"]
[Fri Apr 24 20:36:35.490922 2026] [:error] [pid 17719:tid 17745] [client 74.248.100.218:46254] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetj08TZ9gzEyL1BkPqo6wAAAJI"]
[Fri Apr 24 20:36:37.067571 2026] [:error] [pid 4177:tid 4202] [client 74.248.100.218:31810] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetj1X2asKnvdrSe0x4HpwAAAZE"]
[Fri Apr 24 20:36:40.879533 2026] [:error] [pid 17720:tid 17761] [client 74.248.100.218:58234] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aetj2OhlUs6BS3Ng7_WhMAAAAMc"]
[Fri Apr 24 20:36:43.024150 2026] [:error] [pid 17720:tid 17764] [client 74.248.100.218:62279] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aetj2-hlUs6BS3Ng7_WhNgAAAMo"]
[Fri Apr 24 20:36:45.264204 2026] [:error] [pid 17808:tid 17811] [client 74.248.100.218:36467] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aetj3earbOEFI8qshvIzaAAAAEE"]
[Fri Apr 24 20:36:46.720777 2026] [:error] [pid 17720:tid 17768] [client 74.248.100.218:33710] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws48.php"] [unique_id "aetj3uhlUs6BS3Ng7_WhOwAAAM4"]
[Fri Apr 24 20:36:51.200192 2026] [:error] [pid 17808:tid 17825] [client 74.248.100.218:53457] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "aetj4-arbOEFI8qshvIzdQAAAE8"]
[Fri Apr 24 20:36:52.590493 2026] [:error] [pid 17719:tid 17728] [client 74.248.100.218:60080] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "aetj5MTZ9gzEyL1BkPqo8AAAAIE"]
[Fri Apr 24 20:36:56.106370 2026] [:error] [pid 17720:tid 17756] [client 74.248.100.218:60042] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "aetj6OhlUs6BS3Ng7_WhTwAAAMI"]
[Fri Apr 24 20:36:57.733559 2026] [:error] [pid 17720:tid 17754] [client 74.248.100.218:53432] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/8.php"] [unique_id "aetj6ehlUs6BS3Ng7_WhVAAAAMA"]
[Fri Apr 24 20:37:01.120626 2026] [proxy_fcgi:error] [pid 17721:tid 17800] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:01.385802 2026] [proxy_fcgi:error] [pid 17721:tid 17805] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:01.653095 2026] [proxy_fcgi:error] [pid 17721:tid 17792] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:01.915316 2026] [proxy_fcgi:error] [pid 17721:tid 17791] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:02.184823 2026] [proxy_fcgi:error] [pid 17721:tid 17789] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:02.446427 2026] [proxy_fcgi:error] [pid 17721:tid 17797] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:02.717290 2026] [proxy_fcgi:error] [pid 17721:tid 17798] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:02.976807 2026] [proxy_fcgi:error] [pid 17721:tid 17787] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:03.238772 2026] [proxy_fcgi:error] [pid 17721:tid 17790] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:03.500353 2026] [proxy_fcgi:error] [pid 17721:tid 17799] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:03.763627 2026] [proxy_fcgi:error] [pid 17721:tid 17803] [client 74.248.100.218:57237] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:37:04.166348 2026] [:error] [pid 17721:tid 17796] [client 74.248.100.218:57237] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mh.php"] [unique_id "aetj8OFXXkLeyDnfk_85UAAAAA8"]
[Fri Apr 24 20:37:05.216441 2026] [:error] [pid 17721:tid 17785] [client 74.248.100.218:41664] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mh.php"] [unique_id "aetj8eFXXkLeyDnfk_85UgAAAAQ"]
[Fri Apr 24 20:37:06.262496 2026] [:error] [pid 17721:tid 17783] [client 74.248.100.218:56964] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mh.php"] [unique_id "aetj8uFXXkLeyDnfk_85VQAAAAI"]
[Fri Apr 24 20:37:07.344436 2026] [:error] [pid 17721:tid 17792] [client 74.248.100.218:5502] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mh.php"] [unique_id "aetj8-FXXkLeyDnfk_85WQAAAAs"]
[Fri Apr 24 20:37:08.455865 2026] [:error] [pid 17808:tid 17810] [client 74.248.100.218:57278] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aetj9OarbOEFI8qshvIzlgAAAEA"]
[Fri Apr 24 20:37:10.050817 2026] [:error] [pid 17808:tid 17832] [client 74.248.100.218:50724] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aetj9uarbOEFI8qshvIznQAAAFY"]
[Fri Apr 24 20:37:10.816924 2026] [:error] [pid 4177:tid 4203] [client 74.248.100.218:39042] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aetj9n2asKnvdrSe0x4H9gAAAZI"]
[Fri Apr 24 20:37:12.337899 2026] [:error] [pid 17808:tid 17818] [client 74.248.100.218:53673] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aetj-OarbOEFI8qshvIzogAAAEg"]
[Fri Apr 24 20:37:18.780781 2026] [:error] [pid 17808:tid 17830] [client 74.248.100.218:5483] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "aetj_uarbOEFI8qshvIztAAAAFQ"]
[Fri Apr 24 20:37:21.107298 2026] [:error] [pid 17720:tid 17757] [client 74.248.100.218:37304] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "aetkAehlUs6BS3Ng7_WhcQAAAMM"]
[Fri Apr 24 20:37:23.783465 2026] [:error] [pid 17720:tid 17766] [client 74.248.100.218:38429] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "aetkA-hlUs6BS3Ng7_WheAAAAMw"]
[Fri Apr 24 20:37:25.712739 2026] [:error] [pid 17720:tid 17771] [client 74.248.100.218:5286] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abc.php"] [unique_id "aetkBehlUs6BS3Ng7_WhfQAAANE"]
[Fri Apr 24 20:37:27.300726 2026] [:error] [pid 14531:tid 14544] [client 74.248.100.218:37257] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aetkB3fLU2gw-6KR-GbGfgAAAUs"]
[Fri Apr 24 20:37:30.908430 2026] [:error] [pid 4177:tid 4187] [client 74.248.100.218:53639] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aetkCn2asKnvdrSe0x4IJgAAAYI"]
[Fri Apr 24 20:37:33.977066 2026] [:error] [pid 17719:tid 17746] [client 74.248.100.218:35588] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aetkDcTZ9gzEyL1BkPqpBAAAAJM"]
[Fri Apr 24 20:37:35.640790 2026] [:error] [pid 17808:tid 17822] [client 74.248.100.218:38143] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aetkD-arbOEFI8qshvIzwQAAAEw"]
[Fri Apr 24 20:37:36.454902 2026] [:error] [pid 17808:tid 17821] [client 74.248.100.218:57288] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aetkEOarbOEFI8qshvIzxwAAAEs"]
[Fri Apr 24 20:37:37.082707 2026] [:error] [pid 17808:tid 17812] [client 74.248.100.218:38124] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aetkEearbOEFI8qshvIzzAAAAEI"]
[Fri Apr 24 20:37:38.291642 2026] [:error] [pid 17720:tid 17754] [client 74.248.100.218:57865] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aetkEuhlUs6BS3Ng7_WhigAAAMA"]
[Fri Apr 24 20:37:39.159784 2026] [:error] [pid 17719:tid 17746] [client 74.248.100.218:56747] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aetkE8TZ9gzEyL1BkPqpEQAAAJM"]
[Fri Apr 24 20:37:39.956749 2026] [:error] [pid 4177:tid 4208] [client 74.248.100.218:58994] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aetkE32asKnvdrSe0x4INwAAAZc"]
[Fri Apr 24 20:37:41.121891 2026] [:error] [pid 22114:tid 22117] [client 74.248.100.218:37088] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aetkFYAuWGz3WlMQjofp7gAAAQA"]
[Fri Apr 24 20:37:42.740527 2026] [:error] [pid 17808:tid 17814] [client 74.248.100.218:38433] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aetkFuarbOEFI8qshvIz0gAAAEQ"]
[Fri Apr 24 20:37:43.785181 2026] [:error] [pid 17721:tid 17794] [client 74.248.100.218:50794] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aetkF-FXXkLeyDnfk_85cAAAAA0"]
[Fri Apr 24 20:37:45.032752 2026] [:error] [pid 14531:tid 14555] [client 74.248.100.218:56148] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetkGXfLU2gw-6KR-GbGigAAAVY"]
[Fri Apr 24 20:37:48.321020 2026] [:error] [pid 17721:tid 17798] [client 74.248.100.218:38363] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetkHOFXXkLeyDnfk_85fAAAABE"]
[Fri Apr 24 20:37:49.951574 2026] [:error] [pid 17808:tid 17827] [client 74.248.100.218:6754] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetkHearbOEFI8qshvIz3gAAAFE"]
[Fri Apr 24 20:37:51.302853 2026] [:error] [pid 17720:tid 17767] [client 74.248.100.218:35642] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetkH-hlUs6BS3Ng7_WhsQAAAM0"]
[Fri Apr 24 20:37:53.683767 2026] [:error] [pid 17720:tid 17764] [client 74.248.100.218:57326] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s.php"] [unique_id "aetkIehlUs6BS3Ng7_WhyQAAAMo"]
[Fri Apr 24 20:37:57.324407 2026] [:error] [pid 14531:tid 14547] [client 74.248.100.218:53231] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/s.php"] [unique_id "aetkJXfLU2gw-6KR-GbGkQAAAU4"]
[Fri Apr 24 20:38:03.064298 2026] [proxy_fcgi:error] [pid 22114:tid 22138] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:03.328209 2026] [proxy_fcgi:error] [pid 22114:tid 22135] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:03.591019 2026] [proxy_fcgi:error] [pid 22114:tid 22122] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:03.853060 2026] [proxy_fcgi:error] [pid 22114:tid 22125] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:04.127865 2026] [proxy_fcgi:error] [pid 22114:tid 22134] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:04.389856 2026] [proxy_fcgi:error] [pid 22114:tid 22131] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:04.682878 2026] [proxy_fcgi:error] [pid 22114:tid 22130] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:04.945724 2026] [proxy_fcgi:error] [pid 22114:tid 22127] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:05.207863 2026] [proxy_fcgi:error] [pid 22114:tid 22139] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:05.481448 2026] [proxy_fcgi:error] [pid 22114:tid 22117] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:05.742676 2026] [proxy_fcgi:error] [pid 22114:tid 22129] [client 74.248.100.218:52869] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:38:06.009380 2026] [:error] [pid 22114:tid 22121] [client 74.248.100.218:52869] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jk.php"] [unique_id "aetkLoAuWGz3WlMQjofqDgAAAQQ"]
[Fri Apr 24 20:38:07.172125 2026] [:error] [pid 17808:tid 17817] [client 74.248.100.218:60395] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jk.php"] [unique_id "aetkL-arbOEFI8qshvIz7wAAAEc"]
[Fri Apr 24 20:38:09.913464 2026] [:error] [pid 17719:tid 17729] [client 74.248.100.218:36270] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jk.php"] [unique_id "aetkMcTZ9gzEyL1BkPqpLQAAAII"]
[Fri Apr 24 20:38:12.147351 2026] [:error] [pid 4177:tid 4203] [client 74.248.100.218:36364] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/jk.php"] [unique_id "aetkNH2asKnvdrSe0x4IZAAAAZI"]
[Fri Apr 24 20:38:21.394387 2026] [:error] [pid 17720:tid 17758] [client 74.248.100.218:34445] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aetkPehlUs6BS3Ng7_WiFgAAAMQ"]
[Fri Apr 24 20:38:22.959369 2026] [:error] [pid 22114:tid 22126] [client 74.248.100.218:37519] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aetkPoAuWGz3WlMQjofqEwAAAQk"]
[Fri Apr 24 20:38:24.877318 2026] [:error] [pid 4177:tid 4188] [client 74.248.100.218:34458] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aetkQH2asKnvdrSe0x4IkwAAAYM"]
[Fri Apr 24 20:38:26.104148 2026] [:error] [pid 4177:tid 4190] [client 74.248.100.218:36109] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "aetkQn2asKnvdrSe0x4InAAAAYU"]
[Fri Apr 24 20:38:28.480672 2026] [:error] [pid 17721:tid 17796] [client 74.248.100.218:36287] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aetkROFXXkLeyDnfk_85mwAAAA8"]
[Fri Apr 24 20:38:30.472875 2026] [:error] [pid 17720:tid 17778] [client 74.248.100.218:36120] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aetkRuhlUs6BS3Ng7_WiGwAAANg"]
[Fri Apr 24 20:38:31.677965 2026] [:error] [pid 17720:tid 17772] [client 74.248.100.218:36127] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aetkR-hlUs6BS3Ng7_WiIQAAANI"]
[Fri Apr 24 20:38:32.701170 2026] [:error] [pid 4177:tid 4193] [client 74.248.100.218:60979] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aa.php"] [unique_id "aetkSH2asKnvdrSe0x4IqwAAAYg"]
[Fri Apr 24 20:38:33.783567 2026] [:error] [pid 14531:tid 14541] [client 74.248.100.218:38534] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mini.php"] [unique_id "aetkSXfLU2gw-6KR-GbGpAAAAUg"]
[Fri Apr 24 20:38:35.985150 2026] [:error] [pid 22114:tid 22133] [client 74.248.100.218:41917] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mini.php"] [unique_id "aetkS4AuWGz3WlMQjofqFgAAARA"]
[Fri Apr 24 20:38:41.113867 2026] [:error] [pid 22114:tid 22140] [client 74.248.100.218:37788] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mini.php"] [unique_id "aetkUYAuWGz3WlMQjofqHgAAARc"]
[Fri Apr 24 20:38:42.898739 2026] [:error] [pid 17719:tid 17733] [client 74.248.100.218:5743] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mini.php"] [unique_id "aetkUsTZ9gzEyL1BkPqpTwAAAIY"]
[Fri Apr 24 20:38:44.985853 2026] [:error] [pid 17721:tid 17783] [client 74.248.100.218:36391] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "aetkVOFXXkLeyDnfk_85sQAAAAI"]
[Fri Apr 24 20:38:47.640201 2026] [:error] [pid 17720:tid 17773] [client 74.248.100.218:36158] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "aetkV-hlUs6BS3Ng7_WiPAAAANM"]
[Fri Apr 24 20:38:50.364447 2026] [:error] [pid 17721:tid 17796] [client 74.248.100.218:34435] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "aetkWuFXXkLeyDnfk_85tgAAAA8"]
[Fri Apr 24 20:38:52.617420 2026] [:error] [pid 4177:tid 4208] [client 74.248.100.218:60385] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fs.php"] [unique_id "aetkXH2asKnvdrSe0x4IuAAAAZc"]
[Fri Apr 24 20:38:53.548960 2026] [:error] [pid 17721:tid 17786] [client 74.248.100.218:36403] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "aetkXeFXXkLeyDnfk_85ugAAAAU"]
[Fri Apr 24 20:38:56.384576 2026] [:error] [pid 4177:tid 4193] [client 74.248.100.218:33497] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "aetkYH2asKnvdrSe0x4IvgAAAYg"]
[Fri Apr 24 20:38:59.114663 2026] [:error] [pid 4177:tid 4208] [client 74.248.100.218:56286] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "aetkY32asKnvdrSe0x4IxAAAAZc"]
[Fri Apr 24 20:39:01.234016 2026] [:error] [pid 4177:tid 4193] [client 74.248.100.218:56295] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "aetkZX2asKnvdrSe0x4IxwAAAYg"]
[Fri Apr 24 20:39:02.204305 2026] [:error] [pid 4177:tid 4204] [client 74.248.100.218:56298] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aetkZn2asKnvdrSe0x4IyQAAAZM"]
[Fri Apr 24 20:39:03.732987 2026] [:error] [pid 22114:tid 22138] [client 74.248.100.218:56294] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "aetkZ4AuWGz3WlMQjofqKAAAARU"]
[Fri Apr 24 20:39:06.432815 2026] [proxy_fcgi:error] [pid 17721:tid 17790] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:06.694517 2026] [proxy_fcgi:error] [pid 17721:tid 17801] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:06.956885 2026] [proxy_fcgi:error] [pid 17721:tid 17787] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:07.217592 2026] [proxy_fcgi:error] [pid 17721:tid 17786] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:07.493000 2026] [proxy_fcgi:error] [pid 17721:tid 17792] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:09.037559 2026] [proxy_fcgi:error] [pid 17721:tid 17788] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:09.301653 2026] [proxy_fcgi:error] [pid 17721:tid 17803] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:09.565204 2026] [proxy_fcgi:error] [pid 17721:tid 17783] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:10.089167 2026] [proxy_fcgi:error] [pid 17721:tid 17794] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:10.352899 2026] [proxy_fcgi:error] [pid 17721:tid 17798] [client 74.248.100.218:38419] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:39:10.976420 2026] [:error] [pid 17721:tid 17793] [client 74.248.100.218:38419] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "aetkbuFXXkLeyDnfk_852QAAAAw"]
[Fri Apr 24 20:39:15.361208 2026] [:error] [pid 17719:tid 17748] [client 74.248.100.218:5490] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "aetkc8TZ9gzEyL1BkPqpYAAAAJU"]
[Fri Apr 24 20:39:18.515915 2026] [:error] [pid 14531:tid 14537] [client 74.248.100.218:35261] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "aetkdnfLU2gw-6KR-GbGuQAAAUQ"]
[Fri Apr 24 20:39:19.759714 2026] [:error] [pid 4177:tid 4193] [client 74.248.100.218:35498] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kj.php"] [unique_id "aetkd32asKnvdrSe0x4JBAAAAYg"]
[Fri Apr 24 20:39:22.164732 2026] [:error] [pid 17720:tid 17762] [client 74.248.100.218:37368] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aetkeuhlUs6BS3Ng7_WiSAAAAMg"]
[Fri Apr 24 20:39:23.316456 2026] [:error] [pid 14531:tid 14557] [client 74.248.100.218:63840] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aetke3fLU2gw-6KR-GbGwAAAAVg"]
[Fri Apr 24 20:39:24.274819 2026] [:error] [pid 4177:tid 4191] [client 74.248.100.218:63561] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aetkfH2asKnvdrSe0x4JDQAAAYY"]
[Fri Apr 24 20:39:25.979509 2026] [:error] [pid 17808:tid 17813] [client 74.248.100.218:58262] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aetkfearbOEFI8qshvI0QgAAAEM"]
[Fri Apr 24 20:39:29.904167 2026] [:error] [pid 4177:tid 4197] [client 74.248.100.218:30914] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aetkgX2asKnvdrSe0x4JJQAAAYw"]
[Fri Apr 24 20:39:32.734706 2026] [:error] [pid 4177:tid 4196] [client 74.248.100.218:62292] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aetkhH2asKnvdrSe0x4JNgAAAYs"]
[Fri Apr 24 20:39:34.113063 2026] [:error] [pid 4177:tid 4201] [client 74.248.100.218:60645] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aetkhn2asKnvdrSe0x4JOQAAAZA"]
[Fri Apr 24 20:39:36.017685 2026] [:error] [pid 17720:tid 17771] [client 74.248.100.218:31758] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aetkiOhlUs6BS3Ng7_WiVAAAANE"]
[Fri Apr 24 20:39:37.456530 2026] [:error] [pid 17720:tid 17766] [client 74.248.100.218:60673] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "aetkiehlUs6BS3Ng7_WiWQAAAMw"]
[Fri Apr 24 20:39:40.900424 2026] [:error] [pid 17808:tid 17822] [client 74.248.100.218:60773] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "aetkjOarbOEFI8qshvI0cQAAAEw"]
[Fri Apr 24 20:39:44.545004 2026] [:error] [pid 17720:tid 17765] [client 74.248.100.218:35437] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "aetkkOhlUs6BS3Ng7_WiaAAAAMs"]
[Fri Apr 24 20:39:48.883992 2026] [:error] [pid 4177:tid 4189] [client 74.248.100.218:36502] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "aetklH2asKnvdrSe0x4JUgAAAYQ"]
[Fri Apr 24 20:39:50.712493 2026] [:error] [pid 17808:tid 17826] [client 74.248.100.218:25713] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetkluarbOEFI8qshvI0igAAAFA"]
[Fri Apr 24 20:39:53.025401 2026] [:error] [pid 17720:tid 17761] [client 74.248.100.218:57493] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetkmehlUs6BS3Ng7_WicAAAAMc"]
[Fri Apr 24 20:39:53.822736 2026] [:error] [pid 14531:tid 14557] [client 74.248.100.218:45188] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetkmXfLU2gw-6KR-GbG1gAAAVg"]
[Fri Apr 24 20:39:54.741127 2026] [:error] [pid 17721:tid 17802] [client 74.248.100.218:63146] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetkmuFXXkLeyDnfk_859gAAABU"]
[Fri Apr 24 20:39:55.765529 2026] [:error] [pid 17720:tid 17763] [client 74.248.100.218:32858] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "aetkm-hlUs6BS3Ng7_WidAAAAMk"]
[Fri Apr 24 20:39:57.301136 2026] [:error] [pid 17721:tid 17790] [client 74.248.100.218:37600] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "aetkneFXXkLeyDnfk_85-AAAAAk"]
[Fri Apr 24 20:39:58.161437 2026] [:error] [pid 4177:tid 4185] [client 74.248.100.218:8745] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "aetknn2asKnvdrSe0x4JYgAAAYA"]
[Fri Apr 24 20:39:59.639216 2026] [:error] [pid 17721:tid 17805] [client 74.248.100.218:38310] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tool.php"] [unique_id "aetkn-FXXkLeyDnfk_85-wAAABg"]
[Fri Apr 24 20:40:01.505583 2026] [:error] [pid 4177:tid 4191] [client 74.248.100.218:8713] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aetkoX2asKnvdrSe0x4JaQAAAYY"]
[Fri Apr 24 20:40:02.869472 2026] [:error] [pid 17720:tid 17754] [client 74.248.100.218:38320] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aetkouhlUs6BS3Ng7_WiiAAAAMA"]
[Fri Apr 24 20:40:04.532087 2026] [:error] [pid 4177:tid 4189] [client 74.248.100.218:44939] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aetkpH2asKnvdrSe0x4JeQAAAYQ"]
[Fri Apr 24 20:40:08.982153 2026] [:error] [pid 17720:tid 17777] [client 74.248.100.218:50002] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aetkqOhlUs6BS3Ng7_WikQAAANc"]
[Fri Apr 24 20:40:10.983614 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:11.289843 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:11.575482 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:11.861715 2026] [proxy_fcgi:error] [pid 17720:tid 17757] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:12.162609 2026] [proxy_fcgi:error] [pid 17720:tid 17771] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:12.731144 2026] [proxy_fcgi:error] [pid 17720:tid 17773] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:13.017129 2026] [proxy_fcgi:error] [pid 17720:tid 17759] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:13.361468 2026] [proxy_fcgi:error] [pid 17720:tid 17755] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:13.647289 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:14.345288 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 74.248.100.218:38429] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:40:14.642008 2026] [:error] [pid 17720:tid 17764] [client 74.248.100.218:38429] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aetkruhlUs6BS3Ng7_WirgAAAMo"]
[Fri Apr 24 20:40:17.990400 2026] [:error] [pid 17808:tid 17825] [client 74.248.100.218:32578] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aetksearbOEFI8qshvI0zgAAAE8"]
[Fri Apr 24 20:40:19.613915 2026] [:error] [pid 17719:tid 17749] [client 74.248.100.218:53172] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aetks8TZ9gzEyL1BkPqpgwAAAJY"]
[Fri Apr 24 20:40:22.811646 2026] [:error] [pid 22114:tid 22135] [client 74.248.100.218:33928] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xxx.php"] [unique_id "aetktoAuWGz3WlMQjofqRwAAARI"]
[Fri Apr 24 20:40:27.051882 2026] [:error] [pid 17808:tid 17823] [client 74.248.100.218:34724] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "aetku-arbOEFI8qshvI05QAAAE0"]
[Fri Apr 24 20:40:29.157550 2026] [:error] [pid 17720:tid 17773] [client 74.248.100.218:49176] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "aetkvehlUs6BS3Ng7_WitwAAANM"]
[Fri Apr 24 20:40:33.582067 2026] [:error] [pid 17721:tid 17788] [client 74.248.100.218:36556] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "aetkweFXXkLeyDnfk_86JQAAAAc"]
[Fri Apr 24 20:40:36.024309 2026] [:error] [pid 4177:tid 4209] [client 74.248.100.218:37009] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/b.php"] [unique_id "aetkxH2asKnvdrSe0x4J1gAAAZg"]
[Fri Apr 24 20:40:41.173652 2026] [:error] [pid 17720:tid 17762] [client 74.248.100.218:35147] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aetkyehlUs6BS3Ng7_WiwgAAAMg"]
[Fri Apr 24 20:40:43.911822 2026] [:error] [pid 14531:tid 14544] [client 74.248.100.218:33925] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aetky3fLU2gw-6KR-GbG8wAAAUs"]
[Fri Apr 24 20:40:47.098171 2026] [:error] [pid 17808:tid 17813] [client 74.248.100.218:56507] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aetkz-arbOEFI8qshvI09QAAAEM"]
[Fri Apr 24 20:40:51.348886 2026] [:error] [pid 17721:tid 17793] [client 74.248.100.218:53154] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "aetk0-FXXkLeyDnfk_86RQAAAAw"]
[Fri Apr 24 20:40:52.515061 2026] [:error] [pid 17808:tid 17816] [client 74.248.100.218:34571] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "aetk1OarbOEFI8qshvI0_AAAAEY"]
[Fri Apr 24 20:40:55.445818 2026] [:error] [pid 4177:tid 4190] [client 74.248.100.218:38051] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "aetk132asKnvdrSe0x4KMAAAAYU"]
[Fri Apr 24 20:40:56.831840 2026] [:error] [pid 22114:tid 22137] [client 74.248.100.218:35184] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "aetk2IAuWGz3WlMQjofqWgAAARQ"]
[Fri Apr 24 20:40:57.828480 2026] [:error] [pid 4177:tid 4209] [client 74.248.100.218:36202] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "aetk2X2asKnvdrSe0x4KOwAAAZg"]
[Fri Apr 24 20:41:01.195739 2026] [:error] [pid 22114:tid 22134] [client 74.248.100.218:32629] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aetk3YAuWGz3WlMQjofqZAAAARE"]
[Fri Apr 24 20:41:02.323843 2026] [:error] [pid 17808:tid 17834] [client 74.248.100.218:52303] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aetk3uarbOEFI8qshvI1AQAAAFg"]
[Fri Apr 24 20:41:03.326742 2026] [:error] [pid 17720:tid 17768] [client 74.248.100.218:52318] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aetk3-hlUs6BS3Ng7_Wi3gAAAM4"]
[Fri Apr 24 20:41:05.817284 2026] [:error] [pid 4177:tid 4206] [client 74.248.100.218:33972] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bolt.php"] [unique_id "aetk4X2asKnvdrSe0x4KYAAAAZU"]
[Fri Apr 24 20:41:09.033552 2026] [:error] [pid 17808:tid 17823] [client 74.248.100.218:49609] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aetk5earbOEFI8qshvI1CAAAAE0"]
[Fri Apr 24 20:41:13.627785 2026] [:error] [pid 22114:tid 22125] [client 74.248.100.218:53123] [client 74.248.100.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gifclass.php"] [unique_id "aetk6YAuWGz3WlMQjofqZgAAAQg"]
[Fri Apr 24 20:41:17.466151 2026] [proxy_fcgi:error] [pid 17721:tid 17789] [client 74.248.100.218:33970] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:17.726047 2026] [proxy_fcgi:error] [pid 17721:tid 17788] [client 74.248.100.218:33970] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:18.009220 2026] [proxy_fcgi:error] [pid 17721:tid 17790] [client 74.248.100.218:33970] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:17.468900 2026] [proxy_fcgi:error] [pid 42852:tid 42867] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:17.731452 2026] [proxy_fcgi:error] [pid 42852:tid 42869] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:17.994546 2026] [proxy_fcgi:error] [pid 42852:tid 42879] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:18.259043 2026] [proxy_fcgi:error] [pid 42852:tid 42871] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:18.523045 2026] [proxy_fcgi:error] [pid 42852:tid 42861] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:18.786037 2026] [proxy_fcgi:error] [pid 42852:tid 42873] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:19.314309 2026] [proxy_fcgi:error] [pid 42852:tid 42875] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:19.575366 2026] [proxy_fcgi:error] [pid 42852:tid 42866] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:19.843920 2026] [proxy_fcgi:error] [pid 42852:tid 42856] [client 4.235.104.4:10751] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:18:20.103684 2026] [:error] [pid 42852:tid 42865] [client 4.235.104.4:10751] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeuz7DMEwxhhak_EhMKtBwAAAko"]
[Sat Apr 25 02:18:20.732022 2026] [:error] [pid 42792:tid 42829] [client 4.235.104.4:5176] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeuz7NNi9qR4GtafpfHskwAAAgc"]
[Sat Apr 25 02:18:21.368303 2026] [:error] [pid 42755:tid 42779] [client 4.235.104.4:14971] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeuz7dH7__k0j6aa600SqAAAAJY"]
[Sat Apr 25 02:18:21.938219 2026] [:error] [pid 14989:tid 15011] [client 4.235.104.4:15910] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/166.php"] [unique_id "aeuz7XhRYjsAsZTO4EO6MQAAABQ"]
[Sat Apr 25 02:18:22.526594 2026] [:error] [pid 42852:tid 42859] [client 4.235.104.4:4201] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeuz7jMEwxhhak_EhMKtDwAAAkQ"]
[Sat Apr 25 02:18:23.056940 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:14929] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeuz7zMEwxhhak_EhMKtEwAAAkg"]
[Sat Apr 25 02:18:23.660492 2026] [:error] [pid 42852:tid 42879] [client 4.235.104.4:13496] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeuz7zMEwxhhak_EhMKtGQAAAlg"]
[Sat Apr 25 02:18:24.306931 2026] [:error] [pid 42852:tid 42873] [client 4.235.104.4:15675] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/term.php"] [unique_id "aeuz8DMEwxhhak_EhMKtHgAAAlI"]
[Sat Apr 25 02:18:24.971960 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:12927] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeuz8HhRYjsAsZTO4EO6OQAAABY"]
[Sat Apr 25 02:18:25.567177 2026] [:error] [pid 14989:tid 15000] [client 4.235.104.4:11481] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeuz8XhRYjsAsZTO4EO6OwAAAAk"]
[Sat Apr 25 02:18:26.119673 2026] [:error] [pid 14989:tid 15004] [client 4.235.104.4:12888] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeuz8nhRYjsAsZTO4EO6QAAAAA0"]
[Sat Apr 25 02:18:27.661916 2026] [:error] [pid 42755:tid 42776] [client 4.235.104.4:15782] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/666.php"] [unique_id "aeuz89H7__k0j6aa600StQAAAJM"]
[Sat Apr 25 02:18:28.849246 2026] [:error] [pid 14989:tid 14991] [client 4.235.104.4:7290] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeuz9HhRYjsAsZTO4EO6SgAAAAA"]
[Sat Apr 25 02:18:29.611720 2026] [:error] [pid 42792:tid 42833] [client 4.235.104.4:8840] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeuz9dNi9qR4GtafpfHsnAAAAgs"]
[Sat Apr 25 02:18:30.418470 2026] [:error] [pid 42792:tid 42825] [client 4.235.104.4:12864] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeuz9tNi9qR4GtafpfHsoAAAAgM"]
[Sat Apr 25 02:18:31.093179 2026] [:error] [pid 42755:tid 42781] [client 4.235.104.4:7291] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tt.php"] [unique_id "aeuz99H7__k0j6aa600SuAAAAJg"]
[Sat Apr 25 02:18:31.834731 2026] [:error] [pid 42755:tid 42760] [client 4.235.104.4:11460] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeuz99H7__k0j6aa600SvAAAAIM"]
[Sat Apr 25 02:18:32.642697 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:11637] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeuz-DMEwxhhak_EhMKtMAAAAkg"]
[Sat Apr 25 02:18:33.266597 2026] [:error] [pid 42852:tid 42860] [client 4.235.104.4:8863] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeuz-TMEwxhhak_EhMKtMwAAAkU"]
[Sat Apr 25 02:18:33.936099 2026] [:error] [pid 42791:tid 42808] [client 4.235.104.4:15928] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "aeuz-bKmN9doraCEWKX-vgAAAc0"]
[Sat Apr 25 02:18:34.677733 2026] [:error] [pid 42791:tid 42795] [client 4.235.104.4:4137] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeuz-rKmN9doraCEWKX-vwAAAcA"]
[Sat Apr 25 02:18:35.337774 2026] [:error] [pid 42791:tid 42798] [client 4.235.104.4:5296] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeuz-7KmN9doraCEWKX-wAAAAcM"]
[Sat Apr 25 02:18:35.987144 2026] [:error] [pid 42792:tid 42845] [client 4.235.104.4:5276] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeuz-9Ni9qR4GtafpfHsqgAAAhc"]
[Sat Apr 25 02:18:36.705030 2026] [:error] [pid 42852:tid 42866] [client 4.235.104.4:15875] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "aeuz_DMEwxhhak_EhMKtQAAAAks"]
[Sat Apr 25 02:18:37.331298 2026] [:error] [pid 42791:tid 42803] [client 4.235.104.4:7222] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeuz_bKmN9doraCEWKX-wwAAAcg"]
[Sat Apr 25 02:18:37.970944 2026] [:error] [pid 42852:tid 42857] [client 4.235.104.4:15907] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeuz_TMEwxhhak_EhMKtRQAAAkI"]
[Sat Apr 25 02:18:38.566701 2026] [:error] [pid 42852:tid 42861] [client 4.235.104.4:5258] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeuz_jMEwxhhak_EhMKtRwAAAkY"]
[Sat Apr 25 02:18:39.666684 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:8886] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "aeuz_3hRYjsAsZTO4EO6WAAAABY"]
[Sat Apr 25 02:18:40.529467 2026] [:error] [pid 42852:tid 42872] [client 4.235.104.4:15746] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeu0ADMEwxhhak_EhMKtTQAAAlE"]
[Sat Apr 25 02:18:41.459018 2026] [:error] [pid 42852:tid 42865] [client 4.235.104.4:5310] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeu0ATMEwxhhak_EhMKtUAAAAko"]
[Sat Apr 25 02:18:42.389871 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:7263] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeu0AjMEwxhhak_EhMKtVgAAAkg"]
[Sat Apr 25 02:18:43.231970 2026] [:error] [pid 42792:tid 42824] [client 4.235.104.4:7219] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jga.php"] [unique_id "aeu0A9Ni9qR4GtafpfHsvAAAAgI"]
[Sat Apr 25 02:18:43.905864 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:8833] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeu0A3hRYjsAsZTO4EO6dAAAABY"]
[Sat Apr 25 02:18:44.515152 2026] [:error] [pid 42792:tid 42822] [client 4.235.104.4:15745] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeu0BNNi9qR4GtafpfHswAAAAgA"]
[Sat Apr 25 02:18:45.421282 2026] [:error] [pid 42791:tid 42809] [client 4.235.104.4:15751] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeu0BbKmN9doraCEWKX-yAAAAc4"]
[Sat Apr 25 02:18:46.008703 2026] [:error] [pid 42792:tid 42839] [client 4.235.104.4:13502] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeu0BtNi9qR4GtafpfHsxAAAAhE"]
[Sat Apr 25 02:18:46.918196 2026] [:error] [pid 42755:tid 42761] [client 4.235.104.4:2162] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeu0BtH7__k0j6aa600S0QAAAIQ"]
[Sat Apr 25 02:18:47.523091 2026] [:error] [pid 14989:tid 15008] [client 4.235.104.4:7257] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeu0B3hRYjsAsZTO4EO6fgAAABE"]
[Sat Apr 25 02:18:48.290462 2026] [:error] [pid 14989:tid 14995] [client 4.235.104.4:2151] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeu0CHhRYjsAsZTO4EO6gAAAAAQ"]
[Sat Apr 25 02:18:48.973396 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:7264] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bmi.php"] [unique_id "aeu0CHhRYjsAsZTO4EO6ggAAABA"]
[Sat Apr 25 02:18:50.352414 2026] [:error] [pid 42791:tid 42795] [client 4.235.104.4:5308] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeu0CrKmN9doraCEWKX-zwAAAcA"]
[Sat Apr 25 02:18:51.683964 2026] [:error] [pid 42852:tid 42868] [client 4.235.104.4:5304] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeu0CzMEwxhhak_EhMKtZwAAAk0"]
[Sat Apr 25 02:18:52.382143 2026] [:error] [pid 42852:tid 42876] [client 4.235.104.4:2122] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeu0DDMEwxhhak_EhMKtbQAAAlU"]
[Sat Apr 25 02:18:53.537291 2026] [:error] [pid 42852:tid 42866] [client 4.235.104.4:11636] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byypas.php"] [unique_id "aeu0DTMEwxhhak_EhMKtdwAAAks"]
[Sat Apr 25 02:18:54.298718 2026] [:error] [pid 14989:tid 14991] [client 4.235.104.4:15897] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeu0DnhRYjsAsZTO4EO6jAAAAAA"]
[Sat Apr 25 02:18:55.025876 2026] [:error] [pid 42792:tid 42846] [client 4.235.104.4:4108] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeu0D9Ni9qR4GtafpfHsywAAAhg"]
[Sat Apr 25 02:18:55.844772 2026] [:error] [pid 42792:tid 42830] [client 4.235.104.4:13453] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeu0D9Ni9qR4GtafpfHszAAAAgg"]
[Sat Apr 25 02:18:56.738008 2026] [:error] [pid 42852:tid 42873] [client 4.235.104.4:15803] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeu0EDMEwxhhak_EhMKtiwAAAlI"]
[Sat Apr 25 02:18:57.455305 2026] [:error] [pid 42791:tid 42811] [client 4.235.104.4:8286] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeu0EbKmN9doraCEWKX-1wAAAdA"]
[Sat Apr 25 02:18:58.754500 2026] [:error] [pid 42791:tid 42816] [client 4.235.104.4:2120] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeu0ErKmN9doraCEWKX-2QAAAdU"]
[Sat Apr 25 02:18:59.933409 2026] [:error] [pid 42792:tid 42824] [client 4.235.104.4:2124] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeu0E9Ni9qR4GtafpfHs1gAAAgI"]
[Sat Apr 25 02:19:00.592305 2026] [:error] [pid 42791:tid 42795] [client 4.235.104.4:7169] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-png.php"] [unique_id "aeu0FLKmN9doraCEWKX-3wAAAcA"]
[Sat Apr 25 02:19:01.191102 2026] [:error] [pid 42791:tid 42801] [client 4.235.104.4:13473] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeu0FbKmN9doraCEWKX-4QAAAcY"]
[Sat Apr 25 02:19:01.833460 2026] [:error] [pid 42852:tid 42856] [client 4.235.104.4:7285] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeu0FTMEwxhhak_EhMKtmQAAAkE"]
[Sat Apr 25 02:19:02.441780 2026] [:error] [pid 42791:tid 42819] [client 4.235.104.4:15805] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeu0FrKmN9doraCEWKX-5QAAAdg"]
[Sat Apr 25 02:19:03.164225 2026] [:error] [pid 42792:tid 42829] [client 4.235.104.4:8873] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wen.php"] [unique_id "aeu0F9Ni9qR4GtafpfHs2AAAAgc"]
[Sat Apr 25 02:19:03.787565 2026] [:error] [pid 42755:tid 42772] [client 4.235.104.4:2134] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeu0F9H7__k0j6aa600S4AAAAI8"]
[Sat Apr 25 02:19:04.518834 2026] [:error] [pid 42791:tid 42808] [client 4.235.104.4:7194] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeu0GLKmN9doraCEWKX-6wAAAc0"]
[Sat Apr 25 02:19:05.184243 2026] [:error] [pid 42755:tid 42767] [client 4.235.104.4:8839] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeu0GdH7__k0j6aa600S4wAAAIo"]
[Sat Apr 25 02:19:05.896945 2026] [:error] [pid 42755:tid 42780] [client 4.235.104.4:5261] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "aeu0GdH7__k0j6aa600S5AAAAJc"]
[Sat Apr 25 02:19:06.678247 2026] [:error] [pid 42792:tid 42828] [client 4.235.104.4:11594] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeu0GtNi9qR4GtafpfHs4AAAAgY"]
[Sat Apr 25 02:19:07.526079 2026] [:error] [pid 42852:tid 42860] [client 4.235.104.4:11603] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeu0GzMEwxhhak_EhMKtoAAAAkU"]
[Sat Apr 25 02:19:08.205245 2026] [:error] [pid 42791:tid 42806] [client 4.235.104.4:2123] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeu0HLKmN9doraCEWKX-9AAAAcs"]
[Sat Apr 25 02:19:09.280448 2026] [:error] [pid 14989:tid 15000] [client 4.235.104.4:4127] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeu0HXhRYjsAsZTO4EO6lAAAAAk"]
[Sat Apr 25 02:19:10.085446 2026] [:error] [pid 14989:tid 15014] [client 4.235.104.4:7231] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeu0HnhRYjsAsZTO4EO6lgAAABc"]
[Sat Apr 25 02:19:10.703430 2026] [:error] [pid 42791:tid 42816] [client 4.235.104.4:11647] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeu0HrKmN9doraCEWKX_AAAAAdU"]
[Sat Apr 25 02:19:11.748366 2026] [:error] [pid 42791:tid 42797] [client 4.235.104.4:5271] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeu0H7KmN9doraCEWKX_AQAAAcI"]
[Sat Apr 25 02:19:12.614682 2026] [:error] [pid 14989:tid 15015] [client 4.235.104.4:7290] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeu0IHhRYjsAsZTO4EO6mwAAABg"]
[Sat Apr 25 02:19:13.384643 2026] [:error] [pid 42791:tid 42807] [client 4.235.104.4:7217] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeu0IbKmN9doraCEWKX_BAAAAcw"]
[Sat Apr 25 02:19:14.256030 2026] [:error] [pid 42791:tid 42808] [client 4.235.104.4:8869] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeu0IrKmN9doraCEWKX_BQAAAc0"]
[Sat Apr 25 02:19:15.084847 2026] [:error] [pid 42755:tid 42775] [client 4.235.104.4:7288] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeu0I9H7__k0j6aa600S7QAAAJI"]
[Sat Apr 25 02:19:15.911302 2026] [:error] [pid 42792:tid 42841] [client 4.235.104.4:8296] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "aeu0I9Ni9qR4GtafpfHs5wAAAhM"]
[Sat Apr 25 02:19:16.823597 2026] [:error] [pid 42792:tid 42828] [client 4.235.104.4:1028] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeu0JNNi9qR4GtafpfHs6wAAAgY"]
[Sat Apr 25 02:19:17.569190 2026] [:error] [pid 14989:tid 15011] [client 4.235.104.4:8874] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeu0JXhRYjsAsZTO4EO6ogAAABQ"]
[Sat Apr 25 02:19:18.680526 2026] [:error] [pid 14989:tid 14994] [client 4.235.104.4:11589] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "aeu0JnhRYjsAsZTO4EO6pwAAAAM"]
[Sat Apr 25 02:19:19.724205 2026] [proxy_fcgi:error] [pid 42755:tid 42777] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:21.276455 2026] [proxy_fcgi:error] [pid 42755:tid 42762] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:21.814422 2026] [proxy_fcgi:error] [pid 42755:tid 42760] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:22.079915 2026] [proxy_fcgi:error] [pid 42755:tid 42765] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:22.343001 2026] [proxy_fcgi:error] [pid 42755:tid 42772] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:22.609530 2026] [proxy_fcgi:error] [pid 42755:tid 42767] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:22.874710 2026] [proxy_fcgi:error] [pid 42755:tid 42766] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:23.137663 2026] [proxy_fcgi:error] [pid 42755:tid 42779] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:23.401216 2026] [proxy_fcgi:error] [pid 42755:tid 42771] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:23.670412 2026] [proxy_fcgi:error] [pid 42755:tid 42761] [client 4.235.104.4:11622] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:19:23.930993 2026] [:error] [pid 42755:tid 42768] [client 4.235.104.4:11622] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeu0K9H7__k0j6aa600TAAAAAIs"]
[Sat Apr 25 02:19:24.592881 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:7170] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeu0LHhRYjsAsZTO4EO60wAAABA"]
[Sat Apr 25 02:19:25.119887 2026] [:error] [pid 42755:tid 42776] [client 4.235.104.4:4149] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeu0LdH7__k0j6aa600TAQAAAJM"]
[Sat Apr 25 02:19:25.882512 2026] [:error] [pid 14989:tid 15009] [client 4.235.104.4:15777] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asd.php"] [unique_id "aeu0LXhRYjsAsZTO4EO62AAAABI"]
[Sat Apr 25 02:19:26.836821 2026] [:error] [pid 42755:tid 42775] [client 4.235.104.4:1666] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aeu0LtH7__k0j6aa600TBQAAAJI"]
[Sat Apr 25 02:19:27.761398 2026] [:error] [pid 42792:tid 42832] [client 4.235.104.4:2149] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aeu0L9Ni9qR4GtafpfHs-wAAAgo"]
[Sat Apr 25 02:19:28.606331 2026] [:error] [pid 14989:tid 14991] [client 4.235.104.4:15767] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aeu0MHhRYjsAsZTO4EO66AAAAAA"]
[Sat Apr 25 02:19:29.243502 2026] [:error] [pid 42792:tid 42846] [client 4.235.104.4:4131] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xx.php"] [unique_id "aeu0MdNi9qR4GtafpfHs_QAAAhg"]
[Sat Apr 25 02:19:29.857187 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:1087] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeu0MbKmN9doraCEWKX_FgAAAc8"]
[Sat Apr 25 02:19:30.578485 2026] [:error] [pid 42852:tid 42870] [client 4.235.104.4:2140] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeu0MjMEwxhhak_EhMKtswAAAk8"]
[Sat Apr 25 02:19:31.193989 2026] [:error] [pid 42792:tid 42838] [client 4.235.104.4:8287] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeu0M9Ni9qR4GtafpfHtAgAAAhA"]
[Sat Apr 25 02:19:31.945820 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:15926] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "aeu0M3hRYjsAsZTO4EO6_AAAABY"]
[Sat Apr 25 02:19:32.557536 2026] [:error] [pid 42852:tid 42859] [client 4.235.104.4:15995] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeu0NDMEwxhhak_EhMKttQAAAkQ"]
[Sat Apr 25 02:19:33.742440 2026] [:error] [pid 42792:tid 42823] [client 4.235.104.4:7186] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeu0NdNi9qR4GtafpfHtBQAAAgE"]
[Sat Apr 25 02:19:34.344761 2026] [:error] [pid 42852:tid 42873] [client 4.235.104.4:8305] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeu0NjMEwxhhak_EhMKtuAAAAlI"]
[Sat Apr 25 02:19:35.155300 2026] [:error] [pid 42755:tid 42768] [client 4.235.104.4:1672] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cu.php"] [unique_id "aeu0N9H7__k0j6aa600TDwAAAIs"]
[Sat Apr 25 02:19:35.862453 2026] [:error] [pid 14989:tid 14995] [client 4.235.104.4:15951] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeu0N3hRYjsAsZTO4EO7BQAAAAQ"]
[Sat Apr 25 02:19:36.876587 2026] [:error] [pid 42852:tid 42868] [client 4.235.104.4:7249] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeu0ODMEwxhhak_EhMKtugAAAk0"]
[Sat Apr 25 02:19:37.547311 2026] [:error] [pid 42755:tid 42770] [client 4.235.104.4:5277] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeu0OdH7__k0j6aa600TEgAAAI0"]
[Sat Apr 25 02:19:38.213859 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:8882] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amax.php"] [unique_id "aeu0OjMEwxhhak_EhMKtwgAAAkg"]
[Sat Apr 25 02:19:38.807519 2026] [:error] [pid 14989:tid 15008] [client 4.235.104.4:15769] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeu0OnhRYjsAsZTO4EO7BwAAABE"]
[Sat Apr 25 02:19:39.470294 2026] [:error] [pid 42792:tid 42823] [client 4.235.104.4:15964] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeu0O9Ni9qR4GtafpfHtFAAAAgE"]
[Sat Apr 25 02:19:40.208172 2026] [:error] [pid 42792:tid 42827] [client 4.235.104.4:1698] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeu0PNNi9qR4GtafpfHtGQAAAgU"]
[Sat Apr 25 02:19:40.905631 2026] [:error] [pid 42755:tid 42774] [client 4.235.104.4:2148] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mh.php"] [unique_id "aeu0PNH7__k0j6aa600TGgAAAJE"]
[Sat Apr 25 02:19:41.641477 2026] [:error] [pid 42791:tid 42804] [client 4.235.104.4:1072] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeu0PbKmN9doraCEWKX_LAAAAck"]
[Sat Apr 25 02:19:42.414348 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:5294] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeu0PnhRYjsAsZTO4EO7DQAAABY"]
[Sat Apr 25 02:19:43.060369 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:7208] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeu0P7KmN9doraCEWKX_MQAAAc8"]
[Sat Apr 25 02:19:43.731451 2026] [:error] [pid 42791:tid 42801] [client 4.235.104.4:15978] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Jcrop.php"] [unique_id "aeu0P7KmN9doraCEWKX_NgAAAcY"]
[Sat Apr 25 02:19:44.378111 2026] [:error] [pid 42755:tid 42764] [client 4.235.104.4:2142] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeu0QNH7__k0j6aa600TJAAAAIc"]
[Sat Apr 25 02:19:45.069547 2026] [:error] [pid 42755:tid 42774] [client 4.235.104.4:7272] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeu0QdH7__k0j6aa600TJwAAAJE"]
[Sat Apr 25 02:19:45.804166 2026] [:error] [pid 42852:tid 42871] [client 4.235.104.4:2156] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeu0QTMEwxhhak_EhMKtyAAAAlA"]
[Sat Apr 25 02:19:46.652419 2026] [:error] [pid 42791:tid 42804] [client 4.235.104.4:7215] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abc.php"] [unique_id "aeu0QrKmN9doraCEWKX_PgAAAck"]
[Sat Apr 25 02:19:47.443284 2026] [:error] [pid 42791:tid 42797] [client 4.235.104.4:11585] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeu0Q7KmN9doraCEWKX_QAAAAcI"]
[Sat Apr 25 02:19:48.088607 2026] [:error] [pid 42792:tid 42836] [client 4.235.104.4:11584] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeu0RNNi9qR4GtafpfHtLQAAAg4"]
[Sat Apr 25 02:19:48.734353 2026] [:error] [pid 42755:tid 42767] [client 4.235.104.4:7214] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeu0RNH7__k0j6aa600TLQAAAIo"]
[Sat Apr 25 02:19:49.345468 2026] [:error] [pid 14989:tid 14996] [client 4.235.104.4:5257] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "aeu0RXhRYjsAsZTO4EO7HgAAAAU"]
[Sat Apr 25 02:19:50.135389 2026] [:error] [pid 42852:tid 42862] [client 4.235.104.4:1696] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeu0RjMEwxhhak_EhMKtzgAAAkc"]
[Sat Apr 25 02:19:50.716395 2026] [:error] [pid 14989:tid 15009] [client 4.235.104.4:2128] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeu0RnhRYjsAsZTO4EO7IQAAABI"]
[Sat Apr 25 02:19:51.337568 2026] [:error] [pid 42852:tid 42873] [client 4.235.104.4:15968] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeu0RzMEwxhhak_EhMKt1AAAAlI"]
[Sat Apr 25 02:19:52.035893 2026] [:error] [pid 42852:tid 42861] [client 4.235.104.4:1679] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "aeu0SDMEwxhhak_EhMKt1wAAAkY"]
[Sat Apr 25 02:19:52.686880 2026] [:error] [pid 42852:tid 42871] [client 4.235.104.4:7200] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeu0SDMEwxhhak_EhMKt3gAAAlA"]
[Sat Apr 25 02:19:53.264438 2026] [:error] [pid 42852:tid 42874] [client 4.235.104.4:11615] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeu0STMEwxhhak_EhMKt4gAAAlM"]
[Sat Apr 25 02:19:53.855933 2026] [:error] [pid 14989:tid 15001] [client 4.235.104.4:8304] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeu0SXhRYjsAsZTO4EO7JAAAAAo"]
[Sat Apr 25 02:19:54.503521 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:7256] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws80.php"] [unique_id "aeu0SrKmN9doraCEWKX_RQAAAc8"]
[Sat Apr 25 02:19:55.079286 2026] [:error] [pid 14989:tid 14992] [client 4.235.104.4:7289] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeu0S3hRYjsAsZTO4EO7JwAAAAE"]
[Sat Apr 25 02:19:56.077197 2026] [:error] [pid 14989:tid 14994] [client 4.235.104.4:7216] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeu0THhRYjsAsZTO4EO7LAAAAAM"]
[Sat Apr 25 02:19:56.668488 2026] [:error] [pid 14989:tid 15001] [client 4.235.104.4:7265] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeu0THhRYjsAsZTO4EO7LgAAAAo"]
[Sat Apr 25 02:19:57.313017 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:5248] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeu0TXhRYjsAsZTO4EO7NwAAABA"]
[Sat Apr 25 02:19:57.942031 2026] [:error] [pid 42792:tid 42832] [client 4.235.104.4:4158] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeu0TdNi9qR4GtafpfHtNAAAAgo"]
[Sat Apr 25 02:19:58.574952 2026] [:error] [pid 42792:tid 42835] [client 4.235.104.4:7213] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeu0TtNi9qR4GtafpfHtNQAAAg0"]
[Sat Apr 25 02:19:59.209303 2026] [:error] [pid 14989:tid 15000] [client 4.235.104.4:8268] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeu0T3hRYjsAsZTO4EO7PQAAAAk"]
[Sat Apr 25 02:19:59.851649 2026] [:error] [pid 42852:tid 42872] [client 4.235.104.4:1689] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/s.php"] [unique_id "aeu0TzMEwxhhak_EhMKt8gAAAlE"]
[Sat Apr 25 02:20:00.566713 2026] [:error] [pid 42792:tid 42830] [client 4.235.104.4:5286] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeu0UNNi9qR4GtafpfHtOAAAAgg"]
[Sat Apr 25 02:20:01.135982 2026] [:error] [pid 42792:tid 42833] [client 4.235.104.4:8307] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeu0UdNi9qR4GtafpfHtPAAAAgs"]
[Sat Apr 25 02:20:01.793529 2026] [:error] [pid 42852:tid 42864] [client 4.235.104.4:7191] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeu0UTMEwxhhak_EhMKt9gAAAkk"]
[Sat Apr 25 02:20:02.327377 2026] [:error] [pid 42791:tid 42802] [client 4.235.104.4:4146] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tymn.php"] [unique_id "aeu0UrKmN9doraCEWKX_TQAAAcc"]
[Sat Apr 25 02:20:02.946188 2026] [:error] [pid 42852:tid 42871] [client 4.235.104.4:7281] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeu0UjMEwxhhak_EhMKt-QAAAlA"]
[Sat Apr 25 02:20:03.493834 2026] [:error] [pid 42852:tid 42876] [client 4.235.104.4:15925] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeu0UzMEwxhhak_EhMKt_QAAAlU"]
[Sat Apr 25 02:20:04.158502 2026] [:error] [pid 42791:tid 42805] [client 4.235.104.4:7240] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeu0VLKmN9doraCEWKX_TwAAAco"]
[Sat Apr 25 02:20:04.771044 2026] [:error] [pid 42755:tid 42764] [client 4.235.104.4:4148] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeu0VNH7__k0j6aa600TRQAAAIc"]
[Sat Apr 25 02:20:05.456155 2026] [:error] [pid 42755:tid 42759] [client 4.235.104.4:5287] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeu0VdH7__k0j6aa600TRgAAAII"]
[Sat Apr 25 02:20:06.074459 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:11488] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeu0VrKmN9doraCEWKX_VgAAAc8"]
[Sat Apr 25 02:20:06.668507 2026] [:error] [pid 42852:tid 42856] [client 4.235.104.4:4138] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeu0VjMEwxhhak_EhMKuAQAAAkE"]
[Sat Apr 25 02:20:07.228418 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:8273] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp5.php"] [unique_id "aeu0VzMEwxhhak_EhMKuBAAAAkg"]
[Sat Apr 25 02:20:07.847919 2026] [:error] [pid 42792:tid 42833] [client 4.235.104.4:4114] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeu0V9Ni9qR4GtafpfHtSAAAAgs"]
[Sat Apr 25 02:20:08.548294 2026] [:error] [pid 42792:tid 42838] [client 4.235.104.4:7251] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeu0WNNi9qR4GtafpfHtTAAAAhA"]
[Sat Apr 25 02:20:09.187425 2026] [:error] [pid 42791:tid 42800] [client 4.235.104.4:5259] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeu0WbKmN9doraCEWKX_WQAAAcU"]
[Sat Apr 25 02:20:09.749233 2026] [:error] [pid 14989:tid 15012] [client 4.235.104.4:5281] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms.php"] [unique_id "aeu0WXhRYjsAsZTO4EO7SgAAABU"]
[Sat Apr 25 02:20:10.375786 2026] [:error] [pid 42792:tid 42845] [client 4.235.104.4:5305] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeu0WtNi9qR4GtafpfHtUgAAAhc"]
[Sat Apr 25 02:20:11.057313 2026] [:error] [pid 42852:tid 42855] [client 4.235.104.4:1572] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeu0WzMEwxhhak_EhMKuCQAAAkA"]
[Sat Apr 25 02:20:11.656911 2026] [:error] [pid 14989:tid 15000] [client 4.235.104.4:7260] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeu0W3hRYjsAsZTO4EO7UAAAAAk"]
[Sat Apr 25 02:20:12.451289 2026] [:error] [pid 14989:tid 15011] [client 4.235.104.4:1086] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "aeu0XHhRYjsAsZTO4EO7WAAAABQ"]
[Sat Apr 25 02:20:13.113794 2026] [:error] [pid 42852:tid 42858] [client 4.235.104.4:7360] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeu0XTMEwxhhak_EhMKuCwAAAkM"]
[Sat Apr 25 02:20:13.928551 2026] [:error] [pid 14989:tid 15003] [client 4.235.104.4:5267] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeu0XXhRYjsAsZTO4EO7XQAAAAw"]
[Sat Apr 25 02:20:14.560530 2026] [:error] [pid 42792:tid 42826] [client 4.235.104.4:2136] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeu0XtNi9qR4GtafpfHtWgAAAgQ"]
[Sat Apr 25 02:20:15.209142 2026] [:error] [pid 14989:tid 14997] [client 4.235.104.4:8297] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeu0X3hRYjsAsZTO4EO7YQAAAAY"]
[Sat Apr 25 02:20:15.814341 2026] [:error] [pid 42755:tid 42770] [client 4.235.104.4:4099] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeu0X9H7__k0j6aa600TUQAAAI0"]
[Sat Apr 25 02:20:16.409774 2026] [:error] [pid 42791:tid 42815] [client 4.235.104.4:7370] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeu0YLKmN9doraCEWKX_ZQAAAdQ"]
[Sat Apr 25 02:20:17.121356 2026] [:error] [pid 42755:tid 42771] [client 4.235.104.4:7398] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeu0YdH7__k0j6aa600TUwAAAI4"]
[Sat Apr 25 02:20:17.716154 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:4116] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "aeu0YbKmN9doraCEWKX_aQAAAc8"]
[Sat Apr 25 02:20:18.358293 2026] [:error] [pid 14989:tid 14997] [client 4.235.104.4:12873] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeu0YnhRYjsAsZTO4EO7bAAAAAY"]
[Sat Apr 25 02:20:18.974455 2026] [:error] [pid 14989:tid 14991] [client 4.235.104.4:4110] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeu0YnhRYjsAsZTO4EO7bQAAAAA"]
[Sat Apr 25 02:20:19.580242 2026] [:error] [pid 42755:tid 42780] [client 4.235.104.4:8264] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeu0Y9H7__k0j6aa600TXQAAAJc"]
[Sat Apr 25 02:20:20.166179 2026] [:error] [pid 42755:tid 42761] [client 4.235.104.4:1054] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/press.php"] [unique_id "aeu0ZNH7__k0j6aa600TYAAAAIQ"]
[Sat Apr 25 02:20:20.775903 2026] [:error] [pid 14989:tid 15002] [client 4.235.104.4:8293] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeu0ZHhRYjsAsZTO4EO7dwAAAAs"]
[Sat Apr 25 02:20:21.445075 2026] [:error] [pid 42791:tid 42818] [client 4.235.104.4:15958] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeu0ZbKmN9doraCEWKX_bQAAAdc"]
[Sat Apr 25 02:20:21.995839 2026] [:error] [pid 42792:tid 42834] [client 4.235.104.4:4132] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeu0ZdNi9qR4GtafpfHtYQAAAgw"]
[Sat Apr 25 02:20:22.570689 2026] [:error] [pid 14989:tid 15015] [client 4.235.104.4:8281] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/900.php"] [unique_id "aeu0ZnhRYjsAsZTO4EO7gQAAABg"]
[Sat Apr 25 02:20:23.226254 2026] [proxy_fcgi:error] [pid 42852:tid 42878] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:23.491076 2026] [proxy_fcgi:error] [pid 42852:tid 42870] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:23.754063 2026] [proxy_fcgi:error] [pid 42852:tid 42874] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:24.017993 2026] [proxy_fcgi:error] [pid 42852:tid 42868] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:24.289224 2026] [proxy_fcgi:error] [pid 42852:tid 42858] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:24.552778 2026] [proxy_fcgi:error] [pid 42852:tid 42859] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:26.534492 2026] [proxy_fcgi:error] [pid 42852:tid 42869] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:26.797312 2026] [proxy_fcgi:error] [pid 42852:tid 42879] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:27.060636 2026] [proxy_fcgi:error] [pid 42852:tid 42861] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:27.325371 2026] [proxy_fcgi:error] [pid 42852:tid 42873] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:27.594485 2026] [proxy_fcgi:error] [pid 42852:tid 42874] [client 4.235.104.4:1081] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:20:27.856557 2026] [:error] [pid 42852:tid 42855] [client 4.235.104.4:1081] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "aeu0azMEwxhhak_EhMKuMAAAAkA"]
[Sat Apr 25 02:20:28.418466 2026] [:error] [pid 42755:tid 42774] [client 4.235.104.4:15946] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "aeu0bNH7__k0j6aa600TegAAAJE"]
[Sat Apr 25 02:20:28.959062 2026] [:error] [pid 42791:tid 42803] [client 4.235.104.4:8288] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "aeu0bLKmN9doraCEWKX_fAAAAcg"]
[Sat Apr 25 02:20:29.506006 2026] [:error] [pid 42755:tid 42780] [client 4.235.104.4:5289] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "aeu0bdH7__k0j6aa600TfAAAAJc"]
[Sat Apr 25 02:20:30.093197 2026] [:error] [pid 14989:tid 15014] [client 4.235.104.4:2153] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeu0bnhRYjsAsZTO4EO7lQAAABc"]
[Sat Apr 25 02:20:30.671989 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:15975] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeu0bnhRYjsAsZTO4EO7nAAAABY"]
[Sat Apr 25 02:20:31.297919 2026] [:error] [pid 14989:tid 14995] [client 4.235.104.4:1728] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeu0b3hRYjsAsZTO4EO7nwAAAAQ"]
[Sat Apr 25 02:20:31.859251 2026] [:error] [pid 14989:tid 15005] [client 4.235.104.4:1037] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8573.php"] [unique_id "aeu0b3hRYjsAsZTO4EO7owAAAA4"]
[Sat Apr 25 02:20:32.396637 2026] [:error] [pid 42852:tid 42871] [client 4.235.104.4:1703] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aeu0cDMEwxhhak_EhMKuQgAAAlA"]
[Sat Apr 25 02:20:32.942950 2026] [:error] [pid 42852:tid 42876] [client 4.235.104.4:8279] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aeu0cDMEwxhhak_EhMKuSAAAAlU"]
[Sat Apr 25 02:20:33.509422 2026] [:error] [pid 14989:tid 15013] [client 4.235.104.4:15991] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aeu0cXhRYjsAsZTO4EO7rgAAABY"]
[Sat Apr 25 02:20:34.070482 2026] [:error] [pid 42792:tid 42832] [client 4.235.104.4:1039] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an.php"] [unique_id "aeu0ctNi9qR4GtafpfHteAAAAgo"]
[Sat Apr 25 02:20:34.634545 2026] [:error] [pid 42792:tid 42844] [client 4.235.104.4:2133] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeu0ctNi9qR4GtafpfHtegAAAhY"]
[Sat Apr 25 02:20:35.262049 2026] [:error] [pid 14989:tid 15015] [client 4.235.104.4:5270] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeu0c3hRYjsAsZTO4EO7vwAAABg"]
[Sat Apr 25 02:20:35.866845 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:8311] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeu0c3hRYjsAsZTO4EO7yAAAABA"]
[Sat Apr 25 02:20:36.475641 2026] [:error] [pid 42792:tid 42840] [client 4.235.104.4:7409] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t.php"] [unique_id "aeu0dNNi9qR4GtafpfHtfwAAAhI"]
[Sat Apr 25 02:20:37.046331 2026] [:error] [pid 42852:tid 42855] [client 4.235.104.4:5288] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeu0dTMEwxhhak_EhMKuTQAAAkA"]
[Sat Apr 25 02:20:37.766281 2026] [:error] [pid 42852:tid 42877] [client 4.235.104.4:7361] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeu0dTMEwxhhak_EhMKuVAAAAlY"]
[Sat Apr 25 02:20:38.328204 2026] [:error] [pid 42852:tid 42879] [client 4.235.104.4:15967] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeu0djMEwxhhak_EhMKuWQAAAlg"]
[Sat Apr 25 02:20:38.938016 2026] [:error] [pid 42792:tid 42832] [client 4.235.104.4:12904] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeu0dtNi9qR4GtafpfHthAAAAgo"]
[Sat Apr 25 02:20:39.625407 2026] [:error] [pid 42792:tid 42833] [client 4.235.104.4:1740] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeu0d9Ni9qR4GtafpfHthwAAAgs"]
[Sat Apr 25 02:20:40.276734 2026] [:error] [pid 14989:tid 15003] [client 4.235.104.4:1741] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeu0eHhRYjsAsZTO4EO76QAAAAw"]
[Sat Apr 25 02:20:40.897549 2026] [:error] [pid 42852:tid 42868] [client 4.235.104.4:1667] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeu0eDMEwxhhak_EhMKuYQAAAk0"]
[Sat Apr 25 02:20:41.447317 2026] [:error] [pid 14989:tid 15006] [client 4.235.104.4:1758] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "aeu0eXhRYjsAsZTO4EO7-AAAAA8"]
[Sat Apr 25 02:20:42.023160 2026] [:error] [pid 42791:tid 42800] [client 4.235.104.4:1050] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeu0erKmN9doraCEWKX_lAAAAcU"]
[Sat Apr 25 02:20:42.597577 2026] [:error] [pid 42791:tid 42809] [client 4.235.104.4:1770] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeu0erKmN9doraCEWKX_lQAAAc4"]
[Sat Apr 25 02:20:43.436567 2026] [:error] [pid 42792:tid 42843] [client 4.235.104.4:2141] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeu0e9Ni9qR4GtafpfHtiwAAAhU"]
[Sat Apr 25 02:20:44.188223 2026] [:error] [pid 42792:tid 42825] [client 4.235.104.4:1828] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gaza.php"] [unique_id "aeu0fNNi9qR4GtafpfHtkQAAAgM"]
[Sat Apr 25 02:20:44.855988 2026] [:error] [pid 42852:tid 42867] [client 4.235.104.4:4140] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeu0fDMEwxhhak_EhMKucAAAAkw"]
[Sat Apr 25 02:20:45.535673 2026] [:error] [pid 42852:tid 42874] [client 4.235.104.4:1670] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeu0fTMEwxhhak_EhMKudQAAAlM"]
[Sat Apr 25 02:20:46.196321 2026] [:error] [pid 42755:tid 42768] [client 4.235.104.4:1775] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeu0ftH7__k0j6aa600TrgAAAIs"]
[Sat Apr 25 02:20:46.866571 2026] [:error] [pid 42755:tid 42781] [client 4.235.104.4:1855] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kj.php"] [unique_id "aeu0ftH7__k0j6aa600TsAAAAJg"]
[Sat Apr 25 02:20:47.476943 2026] [:error] [pid 14989:tid 15011] [client 4.235.104.4:1818] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeu0f3hRYjsAsZTO4EO8KgAAABQ"]
[Sat Apr 25 02:20:48.155441 2026] [:error] [pid 42791:tid 42810] [client 4.235.104.4:15993] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeu0gLKmN9doraCEWKX_mQAAAc8"]
[Sat Apr 25 02:20:48.813246 2026] [:error] [pid 42852:tid 42856] [client 4.235.104.4:1754] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeu0gDMEwxhhak_EhMKugAAAAkE"]
[Sat Apr 25 02:20:49.430637 2026] [:error] [pid 42852:tid 42858] [client 4.235.104.4:1766] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aboute.php"] [unique_id "aeu0gTMEwxhhak_EhMKuhgAAAkM"]
[Sat Apr 25 02:20:50.139352 2026] [:error] [pid 42792:tid 42841] [client 4.235.104.4:1836] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeu0gtNi9qR4GtafpfHtmQAAAhM"]
[Sat Apr 25 02:20:50.727048 2026] [:error] [pid 42791:tid 42808] [client 4.235.104.4:1826] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeu0grKmN9doraCEWKX_mwAAAc0"]
[Sat Apr 25 02:20:51.344646 2026] [:error] [pid 14989:tid 14994] [client 4.235.104.4:1714] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeu0g3hRYjsAsZTO4EO8NQAAAAM"]
[Sat Apr 25 02:20:51.969339 2026] [:error] [pid 42791:tid 42796] [client 4.235.104.4:1760] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ws82.php"] [unique_id "aeu0g7KmN9doraCEWKX_oAAAAcE"]
[Sat Apr 25 02:20:52.615449 2026] [:error] [pid 14989:tid 14993] [client 4.235.104.4:1075] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeu0hHhRYjsAsZTO4EO8PwAAAAI"]
[Sat Apr 25 02:20:53.244884 2026] [:error] [pid 14989:tid 15010] [client 4.235.104.4:1693] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeu0hXhRYjsAsZTO4EO8QgAAABM"]
[Sat Apr 25 02:20:53.862608 2026] [:error] [pid 42755:tid 42779] [client 4.235.104.4:15944] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeu0hdH7__k0j6aa600TuAAAAJY"]
[Sat Apr 25 02:20:54.413595 2026] [:error] [pid 42792:tid 42823] [client 4.235.104.4:1771] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "aeu0htNi9qR4GtafpfHtngAAAgE"]
[Sat Apr 25 02:20:55.025831 2026] [:error] [pid 14989:tid 15006] [client 4.235.104.4:2117] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeu0h3hRYjsAsZTO4EO8TAAAAA8"]
[Sat Apr 25 02:20:55.674768 2026] [:error] [pid 14989:tid 15004] [client 4.235.104.4:7413] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeu0h3hRYjsAsZTO4EO8UQAAAA0"]
[Sat Apr 25 02:20:56.310639 2026] [:error] [pid 42755:tid 42758] [client 4.235.104.4:1787] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeu0iNH7__k0j6aa600TuwAAAIE"]
[Sat Apr 25 02:20:56.888526 2026] [:error] [pid 42755:tid 42770] [client 4.235.104.4:8260] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeu0iNH7__k0j6aa600TvQAAAI0"]
[Sat Apr 25 02:20:57.490356 2026] [:error] [pid 42755:tid 42764] [client 4.235.104.4:8267] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeu0idH7__k0j6aa600TwgAAAIc"]
[Sat Apr 25 02:20:58.215510 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:15750] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeu0inhRYjsAsZTO4EO8WQAAABA"]
[Sat Apr 25 02:20:58.820181 2026] [:error] [pid 14989:tid 14993] [client 4.235.104.4:1765] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeu0inhRYjsAsZTO4EO8XgAAAAI"]
[Sat Apr 25 02:20:59.461218 2026] [:error] [pid 14989:tid 14994] [client 4.235.104.4:1746] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tool.php"] [unique_id "aeu0i3hRYjsAsZTO4EO8ZAAAAAM"]
[Sat Apr 25 02:21:00.126911 2026] [:error] [pid 14989:tid 15007] [client 4.235.104.4:2125] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeu0jHhRYjsAsZTO4EO8aQAAABA"]
[Sat Apr 25 02:21:00.790463 2026] [:error] [pid 14989:tid 15004] [client 4.235.104.4:7221] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeu0jHhRYjsAsZTO4EO8bAAAAA0"]
[Sat Apr 25 02:21:01.480551 2026] [:error] [pid 42755:tid 42773] [client 4.235.104.4:8867] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeu0jdH7__k0j6aa600TzQAAAJA"]
[Sat Apr 25 02:21:02.173113 2026] [:error] [pid 42755:tid 42763] [client 4.235.104.4:1837] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "aeu0jtH7__k0j6aa600T0AAAAIY"]
[Sat Apr 25 02:21:02.716866 2026] [:error] [pid 42791:tid 42819] [client 4.235.104.4:1033] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeu0jrKmN9doraCEWKX_qAAAAdg"]
[Sat Apr 25 02:21:03.423483 2026] [:error] [pid 42791:tid 42796] [client 4.235.104.4:2164] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeu0j7KmN9doraCEWKX_qgAAAcE"]
[Sat Apr 25 02:21:04.126263 2026] [:error] [pid 14989:tid 14998] [client 4.235.104.4:1683] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeu0kHhRYjsAsZTO4EO8ewAAAAc"]
[Sat Apr 25 02:21:04.708564 2026] [:error] [pid 42791:tid 42805] [client 4.235.104.4:5275] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "aeu0kLKmN9doraCEWKX_rgAAAco"]
[Sat Apr 25 02:21:05.371369 2026] [:error] [pid 42755:tid 42778] [client 4.235.104.4:15876] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeu0kdH7__k0j6aa600T1QAAAJU"]
[Sat Apr 25 02:21:06.018600 2026] [:error] [pid 42852:tid 42871] [client 4.235.104.4:7403] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeu0kjMEwxhhak_EhMKurwAAAlA"]
[Sat Apr 25 02:21:06.591472 2026] [:error] [pid 42791:tid 42809] [client 4.235.104.4:8269] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeu0krKmN9doraCEWKX_tAAAAc4"]
[Sat Apr 25 02:21:07.333189 2026] [:error] [pid 42852:tid 42861] [client 4.235.104.4:11617] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "aeu0kzMEwxhhak_EhMKusgAAAkY"]
[Sat Apr 25 02:21:07.963638 2026] [:error] [pid 42852:tid 42864] [client 4.235.104.4:1797] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeu0kzMEwxhhak_EhMKutQAAAkk"]
[Sat Apr 25 02:21:08.689473 2026] [:error] [pid 42852:tid 42876] [client 4.235.104.4:1681] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeu0lDMEwxhhak_EhMKutgAAAlU"]
[Sat Apr 25 02:21:09.477470 2026] [:error] [pid 42792:tid 42833] [client 4.235.104.4:7295] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeu0ldNi9qR4GtafpfHtwgAAAgs"]
[Sat Apr 25 02:21:10.212429 2026] [:error] [pid 42852:tid 42868] [client 4.235.104.4:7367] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mk.php"] [unique_id "aeu0ljMEwxhhak_EhMKuugAAAk0"]
[Sat Apr 25 02:21:10.868274 2026] [:error] [pid 42852:tid 42862] [client 4.235.104.4:5259] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeu0ljMEwxhhak_EhMKuvgAAAkc"]
[Sat Apr 25 02:21:11.506820 2026] [:error] [pid 14989:tid 14997] [client 4.235.104.4:1816] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeu0l3hRYjsAsZTO4EO8igAAAAY"]
[Sat Apr 25 02:21:12.387215 2026] [:error] [pid 42792:tid 42822] [client 4.235.104.4:13485] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeu0mNNi9qR4GtafpfHtxQAAAgA"]
[Sat Apr 25 02:21:12.986916 2026] [:error] [pid 42792:tid 42828] [client 4.235.104.4:7387] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "aeu0mNNi9qR4GtafpfHtzAAAAgY"]
[Sat Apr 25 02:21:13.584004 2026] [:error] [pid 42852:tid 42875] [client 4.235.104.4:13532] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeu0mTMEwxhhak_EhMKuwQAAAlQ"]
[Sat Apr 25 02:21:14.140036 2026] [:error] [pid 14989:tid 14995] [client 4.235.104.4:8299] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeu0mnhRYjsAsZTO4EO8kAAAAAQ"]
[Sat Apr 25 02:21:14.746737 2026] [:error] [pid 14989:tid 14991] [client 4.235.104.4:7400] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeu0mnhRYjsAsZTO4EO8kwAAAAA"]
[Sat Apr 25 02:21:15.342099 2026] [:error] [pid 14989:tid 15008] [client 4.235.104.4:1694] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a4.php"] [unique_id "aeu0m3hRYjsAsZTO4EO8lAAAABE"]
[Sat Apr 25 02:21:15.900533 2026] [:error] [pid 42852:tid 42857] [client 4.235.104.4:2113] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeu0mzMEwxhhak_EhMKuwwAAAkI"]
[Sat Apr 25 02:21:16.479043 2026] [:error] [pid 42852:tid 42859] [client 4.235.104.4:1806] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeu0nDMEwxhhak_EhMKuxQAAAkQ"]
[Sat Apr 25 02:21:17.048489 2026] [:error] [pid 42852:tid 42866] [client 4.235.104.4:1831] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeu0nTMEwxhhak_EhMKuxwAAAks"]
[Sat Apr 25 02:21:17.653547 2026] [:error] [pid 42755:tid 42757] [client 4.235.104.4:8842] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/retu11.PhP7"] [unique_id "aeu0ndH7__k0j6aa600T5QAAAIA"]
[Sat Apr 25 02:21:18.431490 2026] [:error] [pid 42852:tid 42862] [client 4.235.104.4:15960] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeu0njMEwxhhak_EhMKuyQAAAkc"]
[Sat Apr 25 02:21:19.027714 2026] [:error] [pid 14989:tid 14994] [client 4.235.104.4:4136] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeu0n3hRYjsAsZTO4EO8mgAAAAM"]
[Sat Apr 25 02:21:19.779401 2026] [:error] [pid 42792:tid 42831] [client 4.235.104.4:4128] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeu0n9Ni9qR4GtafpfHt1gAAAgk"]
[Sat Apr 25 02:21:20.537103 2026] [:error] [pid 14989:tid 15005] [client 4.235.104.4:4104] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rip.php"] [unique_id "aeu0oHhRYjsAsZTO4EO8mwAAAA4"]
[Sat Apr 25 02:21:21.187677 2026] [:error] [pid 42852:tid 42876] [client 4.235.104.4:4113] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeu0oTMEwxhhak_EhMKuzwAAAlU"]
[Sat Apr 25 02:21:21.747914 2026] [:error] [pid 42755:tid 42766] [client 4.235.104.4:13562] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeu0odH7__k0j6aa600T6wAAAIk"]
[Sat Apr 25 02:21:22.316787 2026] [:error] [pid 42852:tid 42860] [client 4.235.104.4:1688] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeu0ojMEwxhhak_EhMKu0gAAAkU"]
[Sat Apr 25 02:21:22.946776 2026] [:error] [pid 42755:tid 42773] [client 4.235.104.4:1042] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "aeu0otH7__k0j6aa600T7gAAAJA"]
[Sat Apr 25 02:21:23.532250 2026] [:error] [pid 42852:tid 42863] [client 4.235.104.4:1732] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeu0ozMEwxhhak_EhMKu1AAAAkg"]
[Sat Apr 25 02:21:24.069700 2026] [:error] [pid 42852:tid 42862] [client 4.235.104.4:1734] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeu0pDMEwxhhak_EhMKu1wAAAkc"]
[Sat Apr 25 02:21:24.643961 2026] [:error] [pid 14989:tid 15006] [client 4.235.104.4:1800] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeu0pHhRYjsAsZTO4EO8pQAAAA8"]
[Sat Apr 25 02:21:25.285966 2026] [:error] [pid 14989:tid 14997] [client 4.235.104.4:1708] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoo.php"] [unique_id "aeu0pXhRYjsAsZTO4EO8qgAAAAY"]
[Sat Apr 25 02:21:25.873035 2026] [:error] [pid 42792:tid 42824] [client 4.235.104.4:7410] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeu0pdNi9qR4GtafpfHt3AAAAgI"]
[Sat Apr 25 02:21:26.432189 2026] [:error] [pid 42852:tid 42868] [client 4.235.104.4:2130] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeu0pjMEwxhhak_EhMKu3gAAAk0"]
[Sat Apr 25 02:21:26.984445 2026] [:error] [pid 42852:tid 42878] [client 4.235.104.4:13535] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admlo.php"] [unique_id "aeu0pjMEwxhhak_EhMKu4QAAAlc"]
[Sat Apr 25 02:21:27.547511 2026] [proxy_fcgi:error] [pid 42852:tid 42879] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:27.810808 2026] [proxy_fcgi:error] [pid 42852:tid 42862] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:28.073355 2026] [proxy_fcgi:error] [pid 42852:tid 42858] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:28.355052 2026] [proxy_fcgi:error] [pid 42852:tid 42871] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:28.618782 2026] [proxy_fcgi:error] [pid 42852:tid 42856] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:28.884502 2026] [proxy_fcgi:error] [pid 42852:tid 42855] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:29.167621 2026] [proxy_fcgi:error] [pid 42852:tid 42857] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:29.433452 2026] [proxy_fcgi:error] [pid 42852:tid 42868] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:29.698003 2026] [proxy_fcgi:error] [pid 42852:tid 42878] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 02:21:29.963996 2026] [proxy_fcgi:error] [pid 42852:tid 42873] [client 4.235.104.4:11461] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:25.477441 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:25.717931 2026] [proxy_fcgi:error] [pid 46083:tid 46097] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:26.130478 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:26.461594 2026] [proxy_fcgi:error] [pid 46083:tid 46111] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:26.702729 2026] [proxy_fcgi:error] [pid 46083:tid 46099] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:27.077485 2026] [proxy_fcgi:error] [pid 46083:tid 46107] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:27.777163 2026] [proxy_fcgi:error] [pid 46083:tid 46090] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:28.161929 2026] [proxy_fcgi:error] [pid 46083:tid 46112] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:28.624490 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:29.055491 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 40.89.132.50:45899] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:34:29.429101 2026] [:error] [pid 46083:tid 46109] [client 40.89.132.50:45899] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pinfo.php"] [unique_id "aevT1Txw_Zq74vWdjmn7EAAAARU"]
[Sat Apr 25 04:34:30.232047 2026] [:error] [pid 46083:tid 46110] [client 40.89.132.50:50078] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pinfo.php"] [unique_id "aevT1jxw_Zq74vWdjmn7EwAAARY"]
[Sat Apr 25 04:34:31.030547 2026] [:error] [pid 44321:tid 44395] [client 40.89.132.50:43737] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pinfo.php"] [unique_id "aevT141b5lV-asWa_Y4OvAAAAIw"]
[Sat Apr 25 04:34:32.370731 2026] [:error] [pid 44425:tid 44427] [client 40.89.132.50:52153] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pinfo.php"] [unique_id "aevT2CUl-VlItvY2tR_dqgAAAMA"]
[Sat Apr 25 04:34:33.291466 2026] [:error] [pid 44425:tid 44444] [client 40.89.132.50:52665] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/litespeed.php"] [unique_id "aevT2SUl-VlItvY2tR_drgAAANE"]
[Sat Apr 25 04:34:34.353016 2026] [:error] [pid 44425:tid 44433] [client 40.89.132.50:45944] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/litespeed.php"] [unique_id "aevT2iUl-VlItvY2tR_dsgAAAMY"]
[Sat Apr 25 04:34:35.281316 2026] [:error] [pid 44425:tid 44449] [client 40.89.132.50:48124] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/litespeed.php"] [unique_id "aevT2yUl-VlItvY2tR_dtAAAANY"]
[Sat Apr 25 04:34:36.191314 2026] [:error] [pid 44425:tid 44427] [client 40.89.132.50:58766] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/litespeed.php"] [unique_id "aevT3CUl-VlItvY2tR_dtwAAAMA"]
[Sat Apr 25 04:34:36.986630 2026] [:error] [pid 44320:tid 44362] [client 40.89.132.50:43749] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environments.php"] [unique_id "aevT3DmFqSpku_dij8hecwAAAEY"]
[Sat Apr 25 04:34:37.832273 2026] [:error] [pid 46083:tid 46108] [client 40.89.132.50:37319] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environments.php"] [unique_id "aevT3Txw_Zq74vWdjmn7JAAAARQ"]
[Sat Apr 25 04:34:38.830811 2026] [:error] [pid 46083:tid 46088] [client 40.89.132.50:51635] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environments.php"] [unique_id "aevT3jxw_Zq74vWdjmn7JwAAAQE"]
[Sat Apr 25 04:34:40.486246 2026] [:error] [pid 46083:tid 46089] [client 40.89.132.50:51645] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environments.php"] [unique_id "aevT4Dxw_Zq74vWdjmn7LgAAAQI"]
[Sat Apr 25 04:34:41.526751 2026] [:error] [pid 44319:tid 44332] [client 40.89.132.50:45916] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/raf.php"] [unique_id "aevT4czJPAVLUb2pWtI-KgAAAAM"]
[Sat Apr 25 04:34:42.302641 2026] [:error] [pid 44319:tid 44351] [client 40.89.132.50:43716] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/raf.php"] [unique_id "aevT4szJPAVLUb2pWtI-KwAAABY"]
[Sat Apr 25 04:34:43.158191 2026] [:error] [pid 46083:tid 46097] [client 40.89.132.50:45890] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/raf.php"] [unique_id "aevT4zxw_Zq74vWdjmn7NgAAAQo"]
[Sat Apr 25 04:34:44.016390 2026] [:error] [pid 44425:tid 44442] [client 40.89.132.50:51588] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/raf.php"] [unique_id "aevT5CUl-VlItvY2tR_dygAAAM8"]
[Sat Apr 25 04:34:45.655872 2026] [:error] [pid 46083:tid 46101] [client 40.89.132.50:44422] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aevT5Txw_Zq74vWdjmn7QgAAAQ4"]
[Sat Apr 25 04:34:49.441739 2026] [:error] [pid 46083:tid 46103] [client 40.89.132.50:51616] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aevT6Txw_Zq74vWdjmn7UQAAARA"]
[Sat Apr 25 04:34:50.687288 2026] [:error] [pid 44425:tid 44432] [client 40.89.132.50:44462] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aevT6iUl-VlItvY2tR_d3QAAAMU"]
[Sat Apr 25 04:34:53.637341 2026] [:error] [pid 44320:tid 44370] [client 40.89.132.50:45891] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ayk.php"] [unique_id "aevT7TmFqSpku_dij8hehAAAAE4"]
[Sat Apr 25 04:34:55.536144 2026] [:error] [pid 46083:tid 46109] [client 40.89.132.50:52639] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infos.php"] [unique_id "aevT7zxw_Zq74vWdjmn7UwAAARU"]
[Sat Apr 25 04:34:58.034998 2026] [:error] [pid 44321:tid 44389] [client 40.89.132.50:51633] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infos.php"] [unique_id "aevT8o1b5lV-asWa_Y4O5wAAAIY"]
[Sat Apr 25 04:35:01.307648 2026] [:error] [pid 46083:tid 46091] [client 40.89.132.50:44461] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infos.php"] [unique_id "aevT9Txw_Zq74vWdjmn7bAAAAQQ"]
[Sat Apr 25 04:35:04.951349 2026] [:error] [pid 44319:tid 44331] [client 40.89.132.50:58771] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infos.php"] [unique_id "aevT-MzJPAVLUb2pWtI-NwAAAAI"]
[Sat Apr 25 04:35:06.618205 2026] [:error] [pid 46083:tid 46111] [client 40.89.132.50:45913] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aws.php"] [unique_id "aevT-jxw_Zq74vWdjmn7fgAAARc"]
[Sat Apr 25 04:35:08.371903 2026] [:error] [pid 46083:tid 46090] [client 40.89.132.50:37328] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aws.php"] [unique_id "aevT_Dxw_Zq74vWdjmn7hwAAAQM"]
[Sat Apr 25 04:35:11.945006 2026] [:error] [pid 46083:tid 46112] [client 40.89.132.50:37366] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aws.php"] [unique_id "aevT_zxw_Zq74vWdjmn7lwAAARg"]
[Sat Apr 25 04:35:13.956248 2026] [:error] [pid 44321:tid 44397] [client 40.89.132.50:41094] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aws.php"] [unique_id "aevUAY1b5lV-asWa_Y4O9QAAAI4"]
[Sat Apr 25 04:35:15.294558 2026] [:error] [pid 44321:tid 44391] [client 40.89.132.50:37322] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/embed.php"] [unique_id "aevUA41b5lV-asWa_Y4O9wAAAIg"]
[Sat Apr 25 04:35:16.392209 2026] [:error] [pid 44321:tid 44401] [client 40.89.132.50:58789] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/embed.php"] [unique_id "aevUBI1b5lV-asWa_Y4O-QAAAJI"]
[Sat Apr 25 04:35:17.735522 2026] [:error] [pid 46083:tid 46093] [client 40.89.132.50:45919] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/embed.php"] [unique_id "aevUBTxw_Zq74vWdjmn7pAAAAQY"]
[Sat Apr 25 04:35:18.325897 2026] [:error] [pid 46083:tid 46096] [client 40.89.132.50:45902] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/embed.php"] [unique_id "aevUBjxw_Zq74vWdjmn7pwAAAQk"]
[Sat Apr 25 04:35:18.915506 2026] [:error] [pid 44319:tid 44337] [client 40.89.132.50:50084] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/stat.php"] [unique_id "aevUBszJPAVLUb2pWtI-QgAAAAg"]
[Sat Apr 25 04:35:19.503119 2026] [:error] [pid 44425:tid 44429] [client 40.89.132.50:51115] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/stat.php"] [unique_id "aevUByUl-VlItvY2tR_eBwAAAMI"]
[Sat Apr 25 04:35:20.193347 2026] [:error] [pid 44425:tid 44437] [client 40.89.132.50:37318] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/stat.php"] [unique_id "aevUCCUl-VlItvY2tR_eCQAAAMo"]
[Sat Apr 25 04:35:21.194435 2026] [:error] [pid 44319:tid 44344] [client 40.89.132.50:51640] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/stat.php"] [unique_id "aevUCczJPAVLUb2pWtI-RgAAAA8"]
[Sat Apr 25 04:35:21.788584 2026] [:error] [pid 46083:tid 46104] [client 40.89.132.50:52099] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/setup.php"] [unique_id "aevUCTxw_Zq74vWdjmn7qwAAARE"]
[Sat Apr 25 04:35:22.332281 2026] [:error] [pid 44425:tid 44431] [client 40.89.132.50:52157] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/setup.php"] [unique_id "aevUCiUl-VlItvY2tR_eDwAAAMQ"]
[Sat Apr 25 04:35:22.844880 2026] [:error] [pid 44425:tid 44442] [client 40.89.132.50:51085] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/setup.php"] [unique_id "aevUCiUl-VlItvY2tR_eEQAAAM8"]
[Sat Apr 25 04:35:23.583381 2026] [:error] [pid 44321:tid 44385] [client 40.89.132.50:43773] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/setup.php"] [unique_id "aevUC41b5lV-asWa_Y4O_wAAAII"]
[Sat Apr 25 04:35:24.076111 2026] [:error] [pid 44321:tid 44389] [client 40.89.132.50:45893] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/development.php"] [unique_id "aevUDI1b5lV-asWa_Y4PAQAAAIY"]
[Sat Apr 25 04:35:24.600843 2026] [:error] [pid 44425:tid 44451] [client 40.89.132.50:51074] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/development.php"] [unique_id "aevUDCUl-VlItvY2tR_eFgAAANg"]
[Sat Apr 25 04:35:25.240056 2026] [:error] [pid 44319:tid 44338] [client 40.89.132.50:45915] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/development.php"] [unique_id "aevUDczJPAVLUb2pWtI-SgAAAAk"]
[Sat Apr 25 04:35:25.767425 2026] [:error] [pid 44319:tid 44352] [client 40.89.132.50:58765] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/development.php"] [unique_id "aevUDczJPAVLUb2pWtI-UAAAABc"]
[Sat Apr 25 04:35:26.398993 2026] [:error] [pid 44321:tid 44397] [client 40.89.132.50:37325] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environment.php"] [unique_id "aevUDo1b5lV-asWa_Y4PAwAAAI4"]
[Sat Apr 25 04:35:26.892833 2026] [:error] [pid 44321:tid 44391] [client 40.89.132.50:37317] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environment.php"] [unique_id "aevUDo1b5lV-asWa_Y4PBgAAAIg"]
[Sat Apr 25 04:35:27.719003 2026] [:error] [pid 46083:tid 46103] [client 40.89.132.50:58777] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environment.php"] [unique_id "aevUDzxw_Zq74vWdjmn7sQAAARA"]
[Sat Apr 25 04:35:28.696362 2026] [:error] [pid 44319:tid 44335] [client 40.89.132.50:48098] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/environment.php"] [unique_id "aevUEMzJPAVLUb2pWtI-VQAAAAY"]
[Sat Apr 25 04:35:29.451694 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:29.690680 2026] [proxy_fcgi:error] [pid 44425:tid 44445] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:29.987617 2026] [proxy_fcgi:error] [pid 44425:tid 44428] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:30.227147 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:30.466914 2026] [proxy_fcgi:error] [pid 44425:tid 44440] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:30.767531 2026] [proxy_fcgi:error] [pid 44425:tid 44450] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:31.008937 2026] [proxy_fcgi:error] [pid 44425:tid 44443] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:31.259811 2026] [proxy_fcgi:error] [pid 44425:tid 44438] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:31.501869 2026] [proxy_fcgi:error] [pid 44425:tid 44446] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:33.188784 2026] [proxy_fcgi:error] [pid 44425:tid 44428] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:33.447026 2026] [proxy_fcgi:error] [pid 44425:tid 44436] [client 40.89.132.50:51103] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 04:35:33.682995 2026] [:error] [pid 44425:tid 44442] [client 40.89.132.50:51103] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.inc.php"] [unique_id "aevUFSUl-VlItvY2tR_eNgAAAM8"]
[Sat Apr 25 04:35:35.252082 2026] [:error] [pid 46083:tid 46104] [client 40.89.132.50:45945] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.inc.php"] [unique_id "aevUFzxw_Zq74vWdjmn7swAAARE"]
[Sat Apr 25 04:35:35.968404 2026] [:error] [pid 44321:tid 44397] [client 40.89.132.50:52640] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.inc.php"] [unique_id "aevUF41b5lV-asWa_Y4PIQAAAI4"]
[Sat Apr 25 04:35:36.635438 2026] [:error] [pid 44321:tid 44398] [client 40.89.132.50:51585] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/config.inc.php"] [unique_id "aevUGI1b5lV-asWa_Y4PJQAAAI8"]
[Sat Apr 25 04:35:37.169839 2026] [:error] [pid 44321:tid 44396] [client 40.89.132.50:41143] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "aevUGY1b5lV-asWa_Y4PJwAAAI0"]
[Sat Apr 25 04:35:37.840192 2026] [:error] [pid 46083:tid 46112] [client 40.89.132.50:48116] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "aevUGTxw_Zq74vWdjmn7vAAAARg"]
[Sat Apr 25 04:35:38.435831 2026] [:error] [pid 46083:tid 46103] [client 40.89.132.50:58760] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "aevUGjxw_Zq74vWdjmn7wAAAARA"]
[Sat Apr 25 04:35:39.013554 2026] [:error] [pid 44425:tid 44430] [client 40.89.132.50:44460] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "aevUGyUl-VlItvY2tR_ePQAAAMM"]
[Sat Apr 25 04:35:39.638861 2026] [:error] [pid 46083:tid 46102] [client 40.89.132.50:48102] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asus.php"] [unique_id "aevUGzxw_Zq74vWdjmn7yAAAAQ8"]
[Sat Apr 25 04:35:40.273523 2026] [:error] [pid 44425:tid 44439] [client 40.89.132.50:44470] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asus.php"] [unique_id "aevUHCUl-VlItvY2tR_ePgAAAMw"]
[Sat Apr 25 04:35:40.768347 2026] [:error] [pid 44321:tid 44390] [client 40.89.132.50:51077] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asus.php"] [unique_id "aevUHI1b5lV-asWa_Y4PKQAAAIc"]
[Sat Apr 25 04:35:41.402283 2026] [:error] [pid 46083:tid 46087] [client 40.89.132.50:50051] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asus.php"] [unique_id "aevUHTxw_Zq74vWdjmn70QAAAQA"]
[Sat Apr 25 04:35:43.671311 2026] [:error] [pid 46083:tid 46097] [client 40.89.132.50:51120] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/php_version.php"] [unique_id "aevUHzxw_Zq74vWdjmn71QAAAQo"]
[Sat Apr 25 04:35:45.584385 2026] [:error] [pid 46083:tid 46101] [client 40.89.132.50:50061] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/php_version.php"] [unique_id "aevUITxw_Zq74vWdjmn72AAAAQ4"]
[Sat Apr 25 04:35:47.540021 2026] [:error] [pid 44425:tid 44436] [client 40.89.132.50:48085] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/php_version.php"] [unique_id "aevUIyUl-VlItvY2tR_eUwAAAMk"]
[Sat Apr 25 04:35:49.585395 2026] [:error] [pid 44425:tid 44431] [client 40.89.132.50:37364] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/php_version.php"] [unique_id "aevUJSUl-VlItvY2tR_eVwAAAMQ"]
[Sat Apr 25 04:35:50.626720 2026] [:error] [pid 44425:tid 44429] [client 40.89.132.50:44423] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abouts.php"] [unique_id "aevUJiUl-VlItvY2tR_eWgAAAMI"]
[Sat Apr 25 04:35:52.186508 2026] [:error] [pid 46083:tid 46103] [client 40.89.132.50:50095] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abouts.php"] [unique_id "aevUKDxw_Zq74vWdjmn73gAAARA"]
[Sat Apr 25 04:35:52.909721 2026] [:error] [pid 46083:tid 46095] [client 40.89.132.50:52619] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abouts.php"] [unique_id "aevUKDxw_Zq74vWdjmn73wAAAQg"]
[Sat Apr 25 04:35:53.455048 2026] [:error] [pid 46083:tid 46110] [client 40.89.132.50:51627] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abouts.php"] [unique_id "aevUKTxw_Zq74vWdjmn74gAAARY"]
[Sat Apr 25 04:35:54.346298 2026] [:error] [pid 44319:tid 44331] [client 40.89.132.50:58811] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profmanage.php"] [unique_id "aevUKszJPAVLUb2pWtI-eQAAAAI"]
[Sat Apr 25 04:35:55.740696 2026] [:error] [pid 46083:tid 46107] [client 40.89.132.50:44433] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profmanage.php"] [unique_id "aevUKzxw_Zq74vWdjmn75AAAARM"]
[Sat Apr 25 04:35:56.523705 2026] [:error] [pid 46083:tid 46100] [client 40.89.132.50:43746] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profmanage.php"] [unique_id "aevULDxw_Zq74vWdjmn75QAAAQ0"]
[Sat Apr 25 04:35:57.412317 2026] [:error] [pid 46083:tid 46093] [client 40.89.132.50:52609] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profmanage.php"] [unique_id "aevULTxw_Zq74vWdjmn76gAAAQY"]
[Sat Apr 25 04:35:57.931634 2026] [:error] [pid 44425:tid 44440] [client 40.89.132.50:48096] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makecvs.php"] [unique_id "aevULSUl-VlItvY2tR_eagAAAM0"]
[Sat Apr 25 04:35:58.626895 2026] [:error] [pid 46083:tid 46090] [client 40.89.132.50:52654] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makecvs.php"] [unique_id "aevULjxw_Zq74vWdjmn77gAAAQM"]
[Sat Apr 25 04:35:59.231252 2026] [:error] [pid 44319:tid 44335] [client 40.89.132.50:37354] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makecvs.php"] [unique_id "aevUL8zJPAVLUb2pWtI-fgAAAAY"]
[Sat Apr 25 04:35:59.859151 2026] [:error] [pid 44425:tid 44434] [client 40.89.132.50:37339] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makecvs.php"] [unique_id "aevULyUl-VlItvY2tR_ecgAAAMc"]
[Sat Apr 25 04:36:00.432722 2026] [:error] [pid 44425:tid 44430] [client 40.89.132.50:52110] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevUMCUl-VlItvY2tR_ecwAAAMM"]
[Sat Apr 25 04:36:00.980155 2026] [:error] [pid 44319:tid 44337] [client 40.89.132.50:50082] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevUMMzJPAVLUb2pWtI-ggAAAAg"]
[Sat Apr 25 04:36:01.577379 2026] [:error] [pid 46083:tid 46100] [client 40.89.132.50:50091] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevUMTxw_Zq74vWdjmn79gAAAQ0"]
[Sat Apr 25 04:36:02.394936 2026] [:error] [pid 44425:tid 44439] [client 40.89.132.50:5087] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpreleaseinfo.php"] [unique_id "aevUMiUl-VlItvY2tR_edgAAAMw"]
[Sat Apr 25 04:36:02.991227 2026] [:error] [pid 44425:tid 44431] [client 40.89.132.50:45949] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "aevUMiUl-VlItvY2tR_eeQAAAMQ"]
[Sat Apr 25 04:36:03.713055 2026] [:error] [pid 44320:tid 44378] [client 40.89.132.50:51112] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "aevUMzmFqSpku_dij8hepwAAAFY"]
[Sat Apr 25 04:36:04.658066 2026] [:error] [pid 44321:tid 44396] [client 40.89.132.50:52614] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "aevUNI1b5lV-asWa_Y4PRAAAAI0"]
[Sat Apr 25 04:36:05.299051 2026] [:error] [pid 44321:tid 44398] [client 40.89.132.50:50054] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "aevUNY1b5lV-asWa_Y4PRwAAAI8"]
[Sat Apr 25 04:36:06.021547 2026] [:error] [pid 46083:tid 46098] [client 40.89.132.50:51128] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aevUNjxw_Zq74vWdjmn8AAAAAQs"]
[Sat Apr 25 04:36:06.833211 2026] [:error] [pid 46083:tid 46108] [client 40.89.132.50:52115] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aevUNjxw_Zq74vWdjmn8AQAAARQ"]
[Sat Apr 25 04:36:07.505952 2026] [:error] [pid 46083:tid 46096] [client 40.89.132.50:58756] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aevUNzxw_Zq74vWdjmn8BQAAAQk"]
[Sat Apr 25 04:36:08.145152 2026] [:error] [pid 44425:tid 44449] [client 40.89.132.50:51597] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ay.php"] [unique_id "aevUOCUl-VlItvY2tR_efgAAANY"]
[Sat Apr 25 04:36:09.383049 2026] [:error] [pid 46083:tid 46107] [client 40.89.132.50:58762] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevUOTxw_Zq74vWdjmn8CQAAARM"]
[Sat Apr 25 04:36:10.082031 2026] [:error] [pid 46083:tid 46096] [client 40.89.132.50:42359] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevUOjxw_Zq74vWdjmn8DgAAAQk"]
[Sat Apr 25 04:36:10.832881 2026] [:error] [pid 46083:tid 46094] [client 40.89.132.50:43732] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevUOjxw_Zq74vWdjmn8EAAAAQc"]
[Sat Apr 25 04:36:11.392809 2026] [:error] [pid 44321:tid 44387] [client 40.89.132.50:37321] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hkvkjguw.php"] [unique_id "aevUO41b5lV-asWa_Y4PTgAAAIQ"]
[Sat Apr 25 04:36:12.331186 2026] [:error] [pid 44320:tid 44373] [client 40.89.132.50:37323] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Black.php"] [unique_id "aevUPDmFqSpku_dij8hesgAAAFE"]
[Sat Apr 25 04:36:12.963267 2026] [:error] [pid 44320:tid 44368] [client 40.89.132.50:52615] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Black.php"] [unique_id "aevUPDmFqSpku_dij8heswAAAEw"]
[Sat Apr 25 04:36:13.851815 2026] [:error] [pid 44319:tid 44344] [client 40.89.132.50:51603] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Black.php"] [unique_id "aevUPczJPAVLUb2pWtI-iQAAAA8"]
[Sat Apr 25 04:36:14.571016 2026] [:error] [pid 44425:tid 44432] [client 40.89.132.50:42347] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Black.php"] [unique_id "aevUPiUl-VlItvY2tR_ehQAAAMU"]
[Sat Apr 25 04:36:16.096722 2026] [:error] [pid 44321:tid 44403] [client 40.89.132.50:44454] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infoinfo.php"] [unique_id "aevUQI1b5lV-asWa_Y4PVAAAAJQ"]
[Sat Apr 25 04:36:17.524002 2026] [:error] [pid 44321:tid 44402] [client 40.89.132.50:50089] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infoinfo.php"] [unique_id "aevUQY1b5lV-asWa_Y4PVQAAAJM"]
[Sat Apr 25 04:36:18.550299 2026] [:error] [pid 46083:tid 46108] [client 40.89.132.50:45942] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infoinfo.php"] [unique_id "aevUQjxw_Zq74vWdjmn8GgAAARQ"]
[Sat Apr 25 04:36:19.524681 2026] [:error] [pid 46083:tid 46096] [client 40.89.132.50:50058] [client 40.89.132.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/infoinfo.php"] [unique_id "aevUQzxw_Zq74vWdjmn8GwAAAQk"]
[Sat Apr 25 12:32:25.923764 2026] [proxy_fcgi:error] [pid 44321:tid 44383] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:26.206722 2026] [proxy_fcgi:error] [pid 44321:tid 44388] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:26.490074 2026] [proxy_fcgi:error] [pid 44321:tid 44407] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:26.772948 2026] [proxy_fcgi:error] [pid 44321:tid 44390] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:27.055584 2026] [proxy_fcgi:error] [pid 44321:tid 44403] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:27.338644 2026] [proxy_fcgi:error] [pid 44321:tid 44406] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:27.624524 2026] [proxy_fcgi:error] [pid 44321:tid 44391] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:32:27.908091 2026] [proxy_fcgi:error] [pid 44321:tid 44398] [client 74.248.149.197:21674] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:35:47.110365 2026] [proxy_fcgi:error] [pid 59898:tid 59975] [client 74.249.155.150:8174] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:35:47.542409 2026] [:error] [pid 59898:tid 59955] [client 74.249.155.150:8174] [client 74.249.155.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.249.155.150, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae0Jgx-4vImxb0kbdzftBgAAAME"]
[Sun Apr 26 02:35:47.736267 2026] [proxy_fcgi:error] [pid 59898:tid 59965] [client 74.249.155.150:8174] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:35:48.614568 2026] [proxy_fcgi:error] [pid 59898:tid 59967] [client 74.249.155.150:8174] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:35:49.281177 2026] [proxy_fcgi:error] [pid 59898:tid 59959] [client 74.249.155.150:8174] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 02:35:49.466930 2026] [:error] [pid 59898:tid 59962] [client 74.249.155.150:8174] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae0JhR-4vImxb0kbdzftFwAAAMg"]
[Sun Apr 26 02:35:50.600023 2026] [:error] [pid 59896:tid 59920] [client 74.249.155.150:8180] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae0JhrLLzhtkd-OXUgBuQAAAAFQ"]
[Sun Apr 26 02:35:51.889243 2026] [:error] [pid 59896:tid 59911] [client 74.249.155.150:8172] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae0Jh7LLzhtkd-OXUgBuQgAAAEs"]
[Sun Apr 26 02:35:54.356284 2026] [:error] [pid 59898:tid 59968] [client 74.249.155.150:7820] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae0Jih-4vImxb0kbdzftHAAAAM4"]
[Sun Apr 26 05:30:53.045083 2026] [proxy_fcgi:error] [pid 8390:tid 8456] [client 52.236.68.31:4127] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:30:53.319086 2026] [proxy_fcgi:error] [pid 8390:tid 8471] [client 52.236.68.31:4127] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 10:48:50.661870 2026] [proxy_fcgi:error] [pid 8385:tid 8446] [client 158.158.45.110:23196] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 10:48:50.925807 2026] [proxy_fcgi:error] [pid 8385:tid 8436] [client 158.158.45.110:23196] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 10:48:51.198482 2026] [proxy_fcgi:error] [pid 8385:tid 8434] [client 158.158.45.110:23196] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 10:48:51.461691 2026] [proxy_fcgi:error] [pid 8385:tid 8433] [client 158.158.45.110:23196] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 11:56:57.973499 2026] [:error] [pid 22573:tid 22627] [client 143.198.111.49:49490] [client 143.198.111.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "ae2NCXB3EmQlD4yKUt-A7gAAAZQ"]
[Mon Apr 27 04:14:53.266908 2026] [:error] [pid 22645:tid 22656] [client 20.48.152.115:22573] [client 20.48.152.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae5yPX-Pq2r302zQbMaDCgAAAAE"]
[Mon Apr 27 04:14:53.802742 2026] [:error] [pid 22646:tid 22707] [client 20.48.152.115:22557] [client 20.48.152.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae5yPYk_HyZhTP6AYadkdAAAAFg"]
[Mon Apr 27 04:14:54.276130 2026] [:error] [pid 22645:tid 22666] [client 20.48.152.115:22546] [client 20.48.152.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae5yPn-Pq2r302zQbMaDDwAAAAs"]
[Mon Apr 27 04:14:54.697048 2026] [:error] [pid 22647:tid 22734] [client 20.48.152.115:22528] [client 20.48.152.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae5yPmjfVULTjnk5SzNomAAAAJg"]
[Mon Apr 27 07:46:11.126271 2026] [proxy_fcgi:error] [pid 36789:tid 36815] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:11.482786 2026] [proxy_fcgi:error] [pid 36789:tid 36805] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:11.757443 2026] [proxy_fcgi:error] [pid 36789:tid 36804] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:12.030738 2026] [proxy_fcgi:error] [pid 36789:tid 36800] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:12.298115 2026] [proxy_fcgi:error] [pid 36789:tid 36814] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:12.566510 2026] [proxy_fcgi:error] [pid 36789:tid 36796] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:12.836363 2026] [proxy_fcgi:error] [pid 36789:tid 36813] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:13.102199 2026] [proxy_fcgi:error] [pid 36789:tid 36792] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:13.379342 2026] [proxy_fcgi:error] [pid 36789:tid 36793] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:13.660178 2026] [proxy_fcgi:error] [pid 36789:tid 36802] [client 72.146.42.142:22469] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:46:13.924181 2026] [:error] [pid 36789:tid 36801] [client 72.146.42.142:22469] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmpls.php"] [unique_id "ae6jxdnrZBzXPaJGSeLwTQAAAMo"]
[Mon Apr 27 07:46:14.489759 2026] [:error] [pid 36789:tid 36797] [client 72.146.42.142:22406] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmpls.php"] [unique_id "ae6jxtnrZBzXPaJGSeLwUQAAAMY"]
[Mon Apr 27 07:46:15.016357 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22465] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmpls.php"] [unique_id "ae6jx9nrZBzXPaJGSeLwVwAAANE"]
[Mon Apr 27 07:46:15.553129 2026] [:error] [pid 36789:tid 36794] [client 72.146.42.142:22506] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmpls.php"] [unique_id "ae6jx9nrZBzXPaJGSeLwXAAAAMM"]
[Mon Apr 27 07:46:16.040580 2026] [:error] [pid 36489:tid 36529] [client 72.146.42.142:22514] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3.php"] [unique_id "ae6jyI6sRkW8OfGv18q6QgAAAEg"]
[Mon Apr 27 07:46:16.593624 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22520] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3.php"] [unique_id "ae6jyLeGZIkifrMjcl9SrgAAAQQ"]
[Mon Apr 27 07:46:17.123321 2026] [:error] [pid 36489:tid 36528] [client 72.146.42.142:22481] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3.php"] [unique_id "ae6jyY6sRkW8OfGv18q6SQAAAEc"]
[Mon Apr 27 07:46:17.661974 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22477] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/n3.php"] [unique_id "ae6jydnrZBzXPaJGSeLwZwAAANM"]
[Mon Apr 27 07:46:18.147845 2026] [:error] [pid 36489:tid 36527] [client 72.146.42.142:22485] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6jyo6sRkW8OfGv18q6SwAAAEY"]
[Mon Apr 27 07:46:18.617294 2026] [:error] [pid 36488:tid 36515] [client 72.146.42.142:22484] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6jysIA2VZgjxmwXxP8igAAABY"]
[Mon Apr 27 07:46:19.147487 2026] [:error] [pid 36575:tid 36587] [client 72.146.42.142:22511] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6jy7eGZIkifrMjcl9StQAAAQo"]
[Mon Apr 27 07:46:19.640509 2026] [:error] [pid 36575:tid 36578] [client 72.146.42.142:22400] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6jy7eGZIkifrMjcl9StwAAAQE"]
[Mon Apr 27 07:46:20.148319 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22404] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6jzNnrZBzXPaJGSeLwcAAAANc"]
[Mon Apr 27 07:46:20.661302 2026] [:error] [pid 36575:tid 36588] [client 72.146.42.142:22412] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6jzLeGZIkifrMjcl9SvgAAAQs"]
[Mon Apr 27 07:46:21.402941 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22509] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6jzbeGZIkifrMjcl9SxAAAAQY"]
[Mon Apr 27 07:46:21.952103 2026] [:error] [pid 36789:tid 36807] [client 72.146.42.142:22516] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6jzdnrZBzXPaJGSeLwdwAAANA"]
[Mon Apr 27 07:46:22.540519 2026] [:error] [pid 36489:tid 36531] [client 72.146.42.142:22507] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mo.php"] [unique_id "ae6jzo6sRkW8OfGv18q6VQAAAEo"]
[Mon Apr 27 07:46:23.047489 2026] [:error] [pid 36575:tid 36601] [client 72.146.42.142:22410] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mo.php"] [unique_id "ae6jz7eGZIkifrMjcl9SywAAARg"]
[Mon Apr 27 07:46:23.615544 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22420] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mo.php"] [unique_id "ae6jz7eGZIkifrMjcl9SzgAAAQY"]
[Mon Apr 27 07:46:24.889673 2026] [:error] [pid 36489:tid 36537] [client 72.146.42.142:22408] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mo.php"] [unique_id "ae6j0I6sRkW8OfGv18q6WwAAAFA"]
[Mon Apr 27 07:46:25.622954 2026] [:error] [pid 36490:tid 36555] [client 72.146.42.142:22414] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ae6j0UxiWa1s9LPhuWK6awAAAIc"]
[Mon Apr 27 07:46:26.145408 2026] [:error] [pid 36488:tid 36502] [client 72.146.42.142:22483] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ae6j0sIA2VZgjxmwXxP8kgAAAAk"]
[Mon Apr 27 07:46:26.716772 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22524] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ae6j0kxiWa1s9LPhuWK6bQAAAIg"]
[Mon Apr 27 07:46:27.385851 2026] [:error] [pid 36488:tid 36507] [client 72.146.42.142:22443] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ae6j08IA2VZgjxmwXxP8lwAAAA4"]
[Mon Apr 27 07:46:28.206876 2026] [:error] [pid 36789:tid 36804] [client 72.146.42.142:22467] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6j1NnrZBzXPaJGSeLwggAAAM0"]
[Mon Apr 27 07:46:28.717166 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:22474] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6j1I6sRkW8OfGv18q6YwAAAEk"]
[Mon Apr 27 07:46:29.338383 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22402] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6j1Y6sRkW8OfGv18q6ZgAAAFc"]
[Mon Apr 27 07:46:29.938670 2026] [:error] [pid 36489:tid 36523] [client 72.146.42.142:22499] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6j1Y6sRkW8OfGv18q6aQAAAEI"]
[Mon Apr 27 07:46:30.444091 2026] [:error] [pid 36789:tid 36802] [client 72.146.42.142:22337] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6j1tnrZBzXPaJGSeLwiAAAAMs"]
[Mon Apr 27 07:46:31.292858 2026] [:error] [pid 36489:tid 36533] [client 72.146.42.142:22468] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6j146sRkW8OfGv18q6bwAAAEw"]
[Mon Apr 27 07:46:31.805187 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22522] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6j19nrZBzXPaJGSeLwjQAAAM8"]
[Mon Apr 27 07:46:32.304184 2026] [:error] [pid 36489:tid 36539] [client 72.146.42.142:22454] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6j2I6sRkW8OfGv18q6cAAAAFI"]
[Mon Apr 27 07:46:32.887245 2026] [:error] [pid 36575:tid 36591] [client 72.146.42.142:22432] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ae6j2LeGZIkifrMjcl9S1QAAAQ4"]
[Mon Apr 27 07:46:33.392230 2026] [:error] [pid 36789:tid 36792] [client 72.146.42.142:22488] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ae6j2dnrZBzXPaJGSeLwlwAAAME"]
[Mon Apr 27 07:46:34.011615 2026] [:error] [pid 36488:tid 36514] [client 72.146.42.142:22445] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ae6j2sIA2VZgjxmwXxP8mwAAABU"]
[Mon Apr 27 07:46:34.555706 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22382] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wdone1.php"] [unique_id "ae6j2tnrZBzXPaJGSeLwnQAAAM8"]
[Mon Apr 27 07:46:35.083957 2026] [:error] [pid 36789:tid 36797] [client 72.146.42.142:22526] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "ae6j29nrZBzXPaJGSeLwoAAAAMY"]
[Mon Apr 27 07:46:35.551637 2026] [:error] [pid 36575:tid 36585] [client 72.146.42.142:22419] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "ae6j27eGZIkifrMjcl9S1wAAAQg"]
[Mon Apr 27 07:46:36.102249 2026] [:error] [pid 36575:tid 36598] [client 72.146.42.142:22475] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "ae6j3LeGZIkifrMjcl9S2AAAARU"]
[Mon Apr 27 07:46:36.600030 2026] [:error] [pid 36488:tid 36508] [client 72.146.42.142:22476] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "ae6j3MIA2VZgjxmwXxP8nQAAAA8"]
[Mon Apr 27 07:46:37.082039 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22431] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "ae6j3Y6sRkW8OfGv18q6eAAAAEE"]
[Mon Apr 27 07:46:37.577490 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:22492] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "ae6j3dnrZBzXPaJGSeLwqQAAAMA"]
[Mon Apr 27 07:46:38.083967 2026] [:error] [pid 36575:tid 36589] [client 72.146.42.142:22344] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "ae6j3reGZIkifrMjcl9S2wAAAQw"]
[Mon Apr 27 07:46:38.578939 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:22435] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "ae6j3tnrZBzXPaJGSeLwswAAAMg"]
[Mon Apr 27 07:46:39.189058 2026] [:error] [pid 36490:tid 36565] [client 72.146.42.142:22518] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "ae6j30xiWa1s9LPhuWK6hAAAAJE"]
[Mon Apr 27 07:46:39.705923 2026] [:error] [pid 36489:tid 36538] [client 72.146.42.142:22472] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "ae6j346sRkW8OfGv18q6fQAAAFE"]
[Mon Apr 27 07:46:40.251528 2026] [:error] [pid 36489:tid 36529] [client 72.146.42.142:22491] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "ae6j4I6sRkW8OfGv18q6fgAAAEg"]
[Mon Apr 27 07:46:40.774579 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:22345] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/blox.php"] [unique_id "ae6j4I6sRkW8OfGv18q6gQAAAEk"]
[Mon Apr 27 07:46:41.246926 2026] [:error] [pid 36489:tid 36545] [client 72.146.42.142:22401] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ae6j4Y6sRkW8OfGv18q6hgAAAFg"]
[Mon Apr 27 07:46:41.740826 2026] [:error] [pid 36488:tid 36502] [client 72.146.42.142:22482] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ae6j4cIA2VZgjxmwXxP8qgAAAAk"]
[Mon Apr 27 07:46:42.206152 2026] [:error] [pid 36488:tid 36507] [client 72.146.42.142:22348] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ae6j4sIA2VZgjxmwXxP8rwAAAA4"]
[Mon Apr 27 07:46:42.760351 2026] [:error] [pid 36488:tid 36493] [client 72.146.42.142:22413] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wgift1.php"] [unique_id "ae6j4sIA2VZgjxmwXxP8tAAAAAE"]
[Mon Apr 27 07:46:43.266516 2026] [:error] [pid 36488:tid 36505] [client 72.146.42.142:22460] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "ae6j48IA2VZgjxmwXxP8uAAAAAw"]
[Mon Apr 27 07:46:43.807888 2026] [:error] [pid 36489:tid 36536] [client 72.146.42.142:22434] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "ae6j446sRkW8OfGv18q6jAAAAE8"]
[Mon Apr 27 07:46:44.314069 2026] [:error] [pid 36489:tid 36537] [client 72.146.42.142:22515] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "ae6j5I6sRkW8OfGv18q6jwAAAFA"]
[Mon Apr 27 07:46:44.950101 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22389] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zwso.php"] [unique_id "ae6j5NnrZBzXPaJGSeLwugAAANc"]
[Mon Apr 27 07:46:45.453401 2026] [:error] [pid 36488:tid 36502] [client 72.146.42.142:22428] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelap.php"] [unique_id "ae6j5cIA2VZgjxmwXxP8vwAAAAk"]
[Mon Apr 27 07:46:46.107016 2026] [:error] [pid 36488:tid 36496] [client 72.146.42.142:22466] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelap.php"] [unique_id "ae6j5sIA2VZgjxmwXxP8wwAAAAM"]
[Mon Apr 27 07:46:46.708839 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:22486] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelap.php"] [unique_id "ae6j5tnrZBzXPaJGSeLwwAAAANQ"]
[Mon Apr 27 07:46:47.176250 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:22504] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gelap.php"] [unique_id "ae6j59nrZBzXPaJGSeLwxwAAAMw"]
[Mon Apr 27 07:46:47.665905 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22497] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1vx.php"] [unique_id "ae6j59nrZBzXPaJGSeLwzAAAANU"]
[Mon Apr 27 07:46:48.153068 2026] [:error] [pid 36789:tid 36805] [client 72.146.42.142:22411] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1vx.php"] [unique_id "ae6j6NnrZBzXPaJGSeLw0QAAAM4"]
[Mon Apr 27 07:46:48.649430 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22493] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1vx.php"] [unique_id "ae6j6NnrZBzXPaJGSeLw2QAAANI"]
[Mon Apr 27 07:46:49.128767 2026] [:error] [pid 36789:tid 36802] [client 72.146.42.142:22353] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1vx.php"] [unique_id "ae6j6dnrZBzXPaJGSeLw3gAAAMs"]
[Mon Apr 27 07:46:49.655923 2026] [:error] [pid 36789:tid 36801] [client 72.146.42.142:22470] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae6j6dnrZBzXPaJGSeLw4wAAAMo"]
[Mon Apr 27 07:46:50.130702 2026] [:error] [pid 36575:tid 36591] [client 72.146.42.142:22417] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae6j6reGZIkifrMjcl9S4AAAAQ4"]
[Mon Apr 27 07:46:50.607893 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22427] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae6j6tnrZBzXPaJGSeLw6AAAANg"]
[Mon Apr 27 07:46:51.086724 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22377] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae6j69nrZBzXPaJGSeLw7QAAANM"]
[Mon Apr 27 07:46:51.568780 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22336] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "ae6j646sRkW8OfGv18q6mwAAAFc"]
[Mon Apr 27 07:46:52.071670 2026] [:error] [pid 36488:tid 36499] [client 72.146.42.142:22527] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "ae6j7MIA2VZgjxmwXxP8yQAAAAY"]
[Mon Apr 27 07:46:52.697223 2026] [:error] [pid 36489:tid 36534] [client 72.146.42.142:22362] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "ae6j7I6sRkW8OfGv18q6owAAAE0"]
[Mon Apr 27 07:46:53.207829 2026] [:error] [pid 36489:tid 36525] [client 72.146.42.142:22502] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "ae6j7Y6sRkW8OfGv18q6pAAAAEQ"]
[Mon Apr 27 07:46:53.757856 2026] [:error] [pid 36789:tid 36805] [client 72.146.42.142:22510] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae6j7dnrZBzXPaJGSeLw-wAAAM4"]
[Mon Apr 27 07:46:54.238936 2026] [:error] [pid 36488:tid 36503] [client 72.146.42.142:22513] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae6j7sIA2VZgjxmwXxP8zAAAAAo"]
[Mon Apr 27 07:46:54.771832 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:22479] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae6j7tnrZBzXPaJGSeLxAgAAAMU"]
[Mon Apr 27 07:46:55.300630 2026] [:error] [pid 36488:tid 36496] [client 72.146.42.142:22279] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae6j78IA2VZgjxmwXxP8zQAAAAM"]
[Mon Apr 27 07:46:55.878192 2026] [:error] [pid 36488:tid 36509] [client 72.146.42.142:22496] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oylki.php"] [unique_id "ae6j78IA2VZgjxmwXxP8zwAAABA"]
[Mon Apr 27 07:46:56.425653 2026] [:error] [pid 36488:tid 36508] [client 72.146.42.142:22436] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oylki.php"] [unique_id "ae6j8MIA2VZgjxmwXxP80QAAAA8"]
[Mon Apr 27 07:46:56.929192 2026] [:error] [pid 36489:tid 36539] [client 72.146.42.142:22440] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oylki.php"] [unique_id "ae6j8I6sRkW8OfGv18q6tAAAAFI"]
[Mon Apr 27 07:46:57.405461 2026] [:error] [pid 36490:tid 36554] [client 72.146.42.142:22429] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/oylki.php"] [unique_id "ae6j8UxiWa1s9LPhuWK6lAAAAIY"]
[Mon Apr 27 07:46:57.882865 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22519] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about25.php"] [unique_id "ae6j8dnrZBzXPaJGSeLxDgAAANY"]
[Mon Apr 27 07:46:58.380561 2026] [:error] [pid 36575:tid 36582] [client 72.146.42.142:22352] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about25.php"] [unique_id "ae6j8reGZIkifrMjcl9S5gAAAQU"]
[Mon Apr 27 07:46:58.915524 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22478] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about25.php"] [unique_id "ae6j8tnrZBzXPaJGSeLxEAAAANc"]
[Mon Apr 27 07:46:59.566443 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22415] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about25.php"] [unique_id "ae6j87eGZIkifrMjcl9S7wAAAQY"]
[Mon Apr 27 07:47:00.185157 2026] [:error] [pid 36789:tid 36792] [client 72.146.42.142:22356] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "ae6j9NnrZBzXPaJGSeLxFwAAAME"]
[Mon Apr 27 07:47:00.747372 2026] [:error] [pid 36789:tid 36802] [client 72.146.42.142:22407] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "ae6j9NnrZBzXPaJGSeLxHgAAAMs"]
[Mon Apr 27 07:47:01.376201 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:22489] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "ae6j9dnrZBzXPaJGSeLxJAAAAMA"]
[Mon Apr 27 07:47:02.066408 2026] [:error] [pid 36789:tid 36804] [client 72.146.42.142:22290] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/path.php"] [unique_id "ae6j9tnrZBzXPaJGSeLxMAAAAM0"]
[Mon Apr 27 07:47:02.657799 2026] [:error] [pid 36789:tid 36801] [client 72.146.42.142:22346] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r4f_1.php"] [unique_id "ae6j9tnrZBzXPaJGSeLxOAAAAMo"]
[Mon Apr 27 07:47:03.236596 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22517] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r4f_1.php"] [unique_id "ae6j99nrZBzXPaJGSeLxPwAAANg"]
[Mon Apr 27 07:47:03.767901 2026] [:error] [pid 36489:tid 36526] [client 72.146.42.142:22361] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r4f_1.php"] [unique_id "ae6j946sRkW8OfGv18q6twAAAEU"]
[Mon Apr 27 07:47:04.390179 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22385] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/r4f_1.php"] [unique_id "ae6j-NnrZBzXPaJGSeLxSQAAANI"]
[Mon Apr 27 07:47:05.133231 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:22508] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ae6j-dnrZBzXPaJGSeLxUAAAAMA"]
[Mon Apr 27 07:47:05.691419 2026] [:error] [pid 36488:tid 36501] [client 72.146.42.142:22439] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ae6j-cIA2VZgjxmwXxP81QAAAAg"]
[Mon Apr 27 07:47:06.172501 2026] [:error] [pid 36575:tid 36582] [client 72.146.42.142:22447] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ae6j-reGZIkifrMjcl9S-QAAAQU"]
[Mon Apr 27 07:47:06.826576 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22403] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "ae6j-tnrZBzXPaJGSeLxUwAAAM8"]
[Mon Apr 27 07:47:07.354999 2026] [:error] [pid 36575:tid 36601] [client 72.146.42.142:22388] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/33.php"] [unique_id "ae6j-7eGZIkifrMjcl9S_QAAARg"]
[Mon Apr 27 07:47:07.844501 2026] [:error] [pid 36575:tid 36577] [client 72.146.42.142:22525] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/33.php"] [unique_id "ae6j-7eGZIkifrMjcl9S_wAAAQA"]
[Mon Apr 27 07:47:08.346267 2026] [:error] [pid 36489:tid 36532] [client 72.146.42.142:22373] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/33.php"] [unique_id "ae6j_I6sRkW8OfGv18q6wwAAAEs"]
[Mon Apr 27 07:47:08.856636 2026] [:error] [pid 36490:tid 36567] [client 72.146.42.142:22459] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/33.php"] [unique_id "ae6j_ExiWa1s9LPhuWK6qAAAAJM"]
[Mon Apr 27 07:47:09.459500 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22340] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "ae6j_dnrZBzXPaJGSeLxVwAAANY"]
[Mon Apr 27 07:47:09.937930 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22418] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "ae6j_dnrZBzXPaJGSeLxWgAAANE"]
[Mon Apr 27 07:47:10.421916 2026] [:error] [pid 36789:tid 36804] [client 72.146.42.142:22365] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "ae6j_tnrZBzXPaJGSeLxYQAAAM0"]
[Mon Apr 27 07:47:10.905619 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:22421] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "ae6j_tnrZBzXPaJGSeLxZQAAAMw"]
[Mon Apr 27 07:47:11.380273 2026] [:error] [pid 36490:tid 36563] [client 72.146.42.142:22368] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "ae6j_0xiWa1s9LPhuWK6rgAAAI8"]
[Mon Apr 27 07:47:11.876131 2026] [:error] [pid 36490:tid 36570] [client 72.146.42.142:22503] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "ae6j_0xiWa1s9LPhuWK6rwAAAJY"]
[Mon Apr 27 07:47:12.465493 2026] [:error] [pid 36490:tid 36568] [client 72.146.42.142:22505] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "ae6kAExiWa1s9LPhuWK6sgAAAJQ"]
[Mon Apr 27 07:47:13.047279 2026] [proxy_fcgi:error] [pid 36575:tid 36588] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:13.317187 2026] [proxy_fcgi:error] [pid 36575:tid 36592] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:13.611892 2026] [proxy_fcgi:error] [pid 36575:tid 36586] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:13.847171 2026] [proxy_fcgi:error] [pid 36575:tid 36593] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:14.087759 2026] [proxy_fcgi:error] [pid 36575:tid 36600] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:14.340854 2026] [proxy_fcgi:error] [pid 36575:tid 36597] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:14.579472 2026] [proxy_fcgi:error] [pid 36575:tid 36585] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:14.816724 2026] [proxy_fcgi:error] [pid 36575:tid 36589] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:15.060700 2026] [proxy_fcgi:error] [pid 36575:tid 36580] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:15.314455 2026] [proxy_fcgi:error] [pid 36575:tid 36581] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:15.567884 2026] [proxy_fcgi:error] [pid 36575:tid 36583] [client 72.146.42.142:22448] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:47:15.807024 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22448] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ae6kA7eGZIkifrMjcl9THQAAAQk"]
[Mon Apr 27 07:47:16.287753 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22284] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ae6kBNnrZBzXPaJGSeLxeQAAANI"]
[Mon Apr 27 07:47:16.864990 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22495] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ae6kBNnrZBzXPaJGSeLxewAAANU"]
[Mon Apr 27 07:47:17.372290 2026] [:error] [pid 36490:tid 36555] [client 72.146.42.142:22383] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "ae6kBUxiWa1s9LPhuWK6uwAAAIc"]
[Mon Apr 27 07:47:17.881292 2026] [:error] [pid 36490:tid 36570] [client 72.146.42.142:22490] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ae6kBUxiWa1s9LPhuWK6vQAAAJY"]
[Mon Apr 27 07:47:18.458576 2026] [:error] [pid 36789:tid 36793] [client 72.146.42.142:22423] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ae6kBtnrZBzXPaJGSeLxhgAAAMI"]
[Mon Apr 27 07:47:18.994752 2026] [:error] [pid 36490:tid 36553] [client 72.146.42.142:22342] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ae6kBkxiWa1s9LPhuWK6xAAAAIU"]
[Mon Apr 27 07:47:19.512207 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22471] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "ae6kB9nrZBzXPaJGSeLxjQAAAM8"]
[Mon Apr 27 07:47:20.083122 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22329] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/X57.php"] [unique_id "ae6kCNnrZBzXPaJGSeLxlAAAANU"]
[Mon Apr 27 07:47:20.567472 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22426] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/X57.php"] [unique_id "ae6kCNnrZBzXPaJGSeLxlQAAANM"]
[Mon Apr 27 07:47:21.059087 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22442] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/X57.php"] [unique_id "ae6kCdnrZBzXPaJGSeLxngAAANg"]
[Mon Apr 27 07:47:21.527560 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:22324] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/X57.php"] [unique_id "ae6kCdnrZBzXPaJGSeLxogAAAMU"]
[Mon Apr 27 07:47:22.016930 2026] [:error] [pid 36489:tid 36542] [client 72.146.42.142:22458] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ae6kCo6sRkW8OfGv18q60QAAAFU"]
[Mon Apr 27 07:47:22.621982 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22339] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ae6kCkxiWa1s9LPhuWK6zwAAAIg"]
[Mon Apr 27 07:47:23.106658 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22461] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ae6kC9nrZBzXPaJGSeLxrgAAANU"]
[Mon Apr 27 07:47:23.731947 2026] [:error] [pid 36575:tid 36591] [client 72.146.42.142:22333] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "ae6kC7eGZIkifrMjcl9TLQAAAQ4"]
[Mon Apr 27 07:47:24.246644 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22360] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "ae6kDNnrZBzXPaJGSeLyCAAAAMk"]
[Mon Apr 27 07:47:24.800110 2026] [:error] [pid 36488:tid 36505] [client 72.146.42.142:22409] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "ae6kDMIA2VZgjxmwXxP84gAAAAw"]
[Mon Apr 27 07:47:25.296798 2026] [:error] [pid 36575:tid 36577] [client 72.146.42.142:22405] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "ae6kDbeGZIkifrMjcl9TLgAAAQA"]
[Mon Apr 27 07:47:25.786035 2026] [:error] [pid 36490:tid 36560] [client 72.146.42.142:22283] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/grsiuk.php"] [unique_id "ae6kDUxiWa1s9LPhuWK7DwAAAIw"]
[Mon Apr 27 07:47:26.280642 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22361] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "ae6kDtnrZBzXPaJGSeLyJwAAANU"]
[Mon Apr 27 07:47:26.859218 2026] [:error] [pid 36575:tid 36589] [client 72.146.42.142:22347] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "ae6kDreGZIkifrMjcl9TMwAAAQw"]
[Mon Apr 27 07:47:27.355578 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22376] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "ae6kD7eGZIkifrMjcl9TNwAAAQQ"]
[Mon Apr 27 07:47:27.878658 2026] [:error] [pid 36789:tid 36794] [client 72.146.42.142:22425] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "ae6kD9nrZBzXPaJGSeLyKwAAAMM"]
[Mon Apr 27 07:47:28.554319 2026] [:error] [pid 36488:tid 36516] [client 72.146.42.142:22293] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "ae6kEMIA2VZgjxmwXxP86AAAABc"]
[Mon Apr 27 07:47:29.081895 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22272] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "ae6kEbeGZIkifrMjcl9TQAAAAQk"]
[Mon Apr 27 07:47:29.719291 2026] [:error] [pid 36575:tid 36584] [client 72.146.42.142:22357] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "ae6kEbeGZIkifrMjcl9TQwAAAQc"]
[Mon Apr 27 07:47:30.212325 2026] [:error] [pid 36575:tid 36590] [client 72.146.42.142:22371] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "ae6kEreGZIkifrMjcl9TSAAAAQ0"]
[Mon Apr 27 07:47:30.799970 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22355] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "ae6kEo6sRkW8OfGv18q62gAAAFc"]
[Mon Apr 27 07:47:31.516414 2026] [:error] [pid 36488:tid 36513] [client 72.146.42.142:22386] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "ae6kE8IA2VZgjxmwXxP87gAAABQ"]
[Mon Apr 27 07:47:32.181088 2026] [:error] [pid 36789:tid 36805] [client 72.146.42.142:22308] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "ae6kFNnrZBzXPaJGSeLyPAAAAM4"]
[Mon Apr 27 07:47:32.674854 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22330] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sk25_1.php"] [unique_id "ae6kFNnrZBzXPaJGSeLyQAAAAM8"]
[Mon Apr 27 07:47:33.247399 2026] [:error] [pid 36490:tid 36555] [client 72.146.42.142:22359] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/usep.php"] [unique_id "ae6kFUxiWa1s9LPhuWK7HAAAAIc"]
[Mon Apr 27 07:47:33.785962 2026] [:error] [pid 36490:tid 36570] [client 72.146.42.142:22450] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/usep.php"] [unique_id "ae6kFUxiWa1s9LPhuWK7IQAAAJY"]
[Mon Apr 27 07:47:34.265622 2026] [:error] [pid 36489:tid 36531] [client 72.146.42.142:22441] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/usep.php"] [unique_id "ae6kFo6sRkW8OfGv18q63wAAAEo"]
[Mon Apr 27 07:47:34.999405 2026] [:error] [pid 36489:tid 36528] [client 72.146.42.142:22452] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/usep.php"] [unique_id "ae6kFo6sRkW8OfGv18q65gAAAEc"]
[Mon Apr 27 07:47:35.469503 2026] [:error] [pid 36488:tid 36505] [client 72.146.42.142:22501] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "ae6kF8IA2VZgjxmwXxP89gAAAAw"]
[Mon Apr 27 07:47:35.985523 2026] [:error] [pid 36488:tid 36512] [client 72.146.42.142:22392] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "ae6kF8IA2VZgjxmwXxP89wAAABM"]
[Mon Apr 27 07:47:36.508470 2026] [:error] [pid 36489:tid 36529] [client 72.146.42.142:22374] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "ae6kGI6sRkW8OfGv18q68QAAAEg"]
[Mon Apr 27 07:47:37.012041 2026] [:error] [pid 36575:tid 36585] [client 72.146.42.142:22451] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vx.php"] [unique_id "ae6kGbeGZIkifrMjcl9TVgAAAQg"]
[Mon Apr 27 07:47:37.503814 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22457] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ae6kGdnrZBzXPaJGSeLyTQAAANY"]
[Mon Apr 27 07:47:37.981011 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:22255] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ae6kGdnrZBzXPaJGSeLyUgAAAMU"]
[Mon Apr 27 07:47:38.451571 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22277] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ae6kGo6sRkW8OfGv18q6-AAAAFc"]
[Mon Apr 27 07:47:38.936732 2026] [:error] [pid 36489:tid 36542] [client 72.146.42.142:22317] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v4.php"] [unique_id "ae6kGo6sRkW8OfGv18q6-wAAAFU"]
[Mon Apr 27 07:47:39.481341 2026] [:error] [pid 36789:tid 36812] [client 72.146.42.142:22438] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp4.php"] [unique_id "ae6kG9nrZBzXPaJGSeLyWwAAANU"]
[Mon Apr 27 07:47:40.091726 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22331] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp4.php"] [unique_id "ae6kHExiWa1s9LPhuWK7JAAAAIg"]
[Mon Apr 27 07:47:40.587003 2026] [:error] [pid 36489:tid 36545] [client 72.146.42.142:22455] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp4.php"] [unique_id "ae6kHI6sRkW8OfGv18q7BgAAAFg"]
[Mon Apr 27 07:47:41.312544 2026] [:error] [pid 36490:tid 36565] [client 72.146.42.142:22384] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp4.php"] [unique_id "ae6kHUxiWa1s9LPhuWK7JQAAAJE"]
[Mon Apr 27 07:47:41.834988 2026] [:error] [pid 36490:tid 36557] [client 72.146.42.142:22370] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kHUxiWa1s9LPhuWK7JwAAAIk"]
[Mon Apr 27 07:47:42.361066 2026] [:error] [pid 36489:tid 36525] [client 72.146.42.142:22288] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kHo6sRkW8OfGv18q7FAAAAEQ"]
[Mon Apr 27 07:47:42.833925 2026] [:error] [pid 36789:tid 36795] [client 72.146.42.142:22480] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kHtnrZBzXPaJGSeLybgAAAMQ"]
[Mon Apr 27 07:47:43.400650 2026] [:error] [pid 36789:tid 36792] [client 72.146.42.142:22453] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kH9nrZBzXPaJGSeLydAAAAME"]
[Mon Apr 27 07:47:43.995478 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22367] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mamzi.php"] [unique_id "ae6kH9nrZBzXPaJGSeLydgAAANY"]
[Mon Apr 27 07:47:44.513766 2026] [:error] [pid 36789:tid 36801] [client 72.146.42.142:22216] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mamzi.php"] [unique_id "ae6kINnrZBzXPaJGSeLyewAAAMo"]
[Mon Apr 27 07:47:45.089702 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:22463] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mamzi.php"] [unique_id "ae6kIdnrZBzXPaJGSeLyfQAAAMU"]
[Mon Apr 27 07:47:45.666396 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22375] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mamzi.php"] [unique_id "ae6kIdnrZBzXPaJGSeLygQAAANY"]
[Mon Apr 27 07:47:46.177620 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:22498] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "ae6kItnrZBzXPaJGSeLyhQAAAMw"]
[Mon Apr 27 07:47:46.783987 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:22350] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "ae6kIo6sRkW8OfGv18q7HwAAAEk"]
[Mon Apr 27 07:47:47.271779 2026] [:error] [pid 36490:tid 36567] [client 72.146.42.142:22307] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "ae6kI0xiWa1s9LPhuWK7LQAAAJM"]
[Mon Apr 27 07:47:47.819640 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22287] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wpls.php"] [unique_id "ae6kI46sRkW8OfGv18q7IQAAAFc"]
[Mon Apr 27 07:47:48.439385 2026] [:error] [pid 36489:tid 36538] [client 72.146.42.142:22521] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xrp.php"] [unique_id "ae6kJI6sRkW8OfGv18q7JQAAAFE"]
[Mon Apr 27 07:47:48.978202 2026] [:error] [pid 36489:tid 36527] [client 72.146.42.142:22304] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xrp.php"] [unique_id "ae6kJI6sRkW8OfGv18q7KAAAAEY"]
[Mon Apr 27 07:47:49.484105 2026] [:error] [pid 36489:tid 36532] [client 72.146.42.142:22424] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xrp.php"] [unique_id "ae6kJY6sRkW8OfGv18q7LwAAAEs"]
[Mon Apr 27 07:47:50.240946 2026] [:error] [pid 36489:tid 36540] [client 72.146.42.142:22430] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xrp.php"] [unique_id "ae6kJo6sRkW8OfGv18q7MwAAAFM"]
[Mon Apr 27 07:47:50.759874 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22523] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "ae6kJtnrZBzXPaJGSeLymwAAANM"]
[Mon Apr 27 07:47:51.255238 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22335] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "ae6kJ9nrZBzXPaJGSeLyngAAANY"]
[Mon Apr 27 07:47:51.788099 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22434] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "ae6kJ9nrZBzXPaJGSeLypAAAANc"]
[Mon Apr 27 07:47:52.260960 2026] [:error] [pid 36575:tid 36590] [client 72.146.42.142:22313] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v2.php"] [unique_id "ae6kKLeGZIkifrMjcl9TWgAAAQ0"]
[Mon Apr 27 07:47:52.758442 2026] [:error] [pid 36488:tid 36503] [client 72.146.42.142:22273] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "ae6kKMIA2VZgjxmwXxP8_wAAAAo"]
[Mon Apr 27 07:47:53.296447 2026] [:error] [pid 36488:tid 36504] [client 72.146.42.142:22456] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "ae6kKcIA2VZgjxmwXxP9AgAAAAs"]
[Mon Apr 27 07:47:53.774544 2026] [:error] [pid 36490:tid 36549] [client 72.146.42.142:22433] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "ae6kKUxiWa1s9LPhuWK7MQAAAIE"]
[Mon Apr 27 07:47:54.260948 2026] [:error] [pid 36489:tid 36542] [client 72.146.42.142:22396] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "ae6kKo6sRkW8OfGv18q7OwAAAFU"]
[Mon Apr 27 07:47:54.765334 2026] [:error] [pid 36489:tid 36521] [client 72.146.42.142:22341] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ae6kKo6sRkW8OfGv18q7PAAAAEA"]
[Mon Apr 27 07:47:55.263139 2026] [:error] [pid 36789:tid 36805] [client 72.146.42.142:22390] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ae6kK9nrZBzXPaJGSeLysgAAAM4"]
[Mon Apr 27 07:47:55.893095 2026] [:error] [pid 36489:tid 36528] [client 72.146.42.142:22265] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ae6kK46sRkW8OfGv18q7RAAAAEc"]
[Mon Apr 27 07:47:56.389775 2026] [:error] [pid 36489:tid 36524] [client 72.146.42.142:22300] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "ae6kLI6sRkW8OfGv18q7RwAAAEM"]
[Mon Apr 27 07:47:57.003459 2026] [:error] [pid 36489:tid 36539] [client 72.146.42.142:22236] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/031.php"] [unique_id "ae6kLY6sRkW8OfGv18q7TwAAAFI"]
[Mon Apr 27 07:47:57.496513 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22369] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/031.php"] [unique_id "ae6kLdnrZBzXPaJGSeLytQAAANI"]
[Mon Apr 27 07:47:58.033755 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:22303] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/031.php"] [unique_id "ae6kLtnrZBzXPaJGSeLyuAAAAMg"]
[Mon Apr 27 07:47:58.546716 2026] [:error] [pid 36490:tid 36549] [client 72.146.42.142:22298] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/031.php"] [unique_id "ae6kLkxiWa1s9LPhuWK7QQAAAIE"]
[Mon Apr 27 07:47:59.123250 2026] [:error] [pid 36789:tid 36798] [client 72.146.42.142:22292] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6kL9nrZBzXPaJGSeLywQAAAMc"]
[Mon Apr 27 07:47:59.847946 2026] [:error] [pid 36789:tid 36804] [client 72.146.42.142:22269] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6kL9nrZBzXPaJGSeLyxQAAAM0"]
[Mon Apr 27 07:48:00.629946 2026] [:error] [pid 36789:tid 36792] [client 72.146.42.142:22269] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6kMNnrZBzXPaJGSeLyzAAAAME"]
[Mon Apr 27 07:48:01.350647 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22349] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6kMY6sRkW8OfGv18q7WAAAAEE"]
[Mon Apr 27 07:48:02.147626 2026] [:error] [pid 36489:tid 36539] [client 72.146.42.142:22512] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "ae6kMo6sRkW8OfGv18q7WgAAAFI"]
[Mon Apr 27 07:48:02.848896 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22494] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "ae6kMtnrZBzXPaJGSeLy1AAAANc"]
[Mon Apr 27 07:48:03.650652 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22363] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "ae6kM9nrZBzXPaJGSeLy2QAAAMk"]
[Mon Apr 27 07:48:04.206360 2026] [:error] [pid 36488:tid 36499] [client 72.146.42.142:22446] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "ae6kNMIA2VZgjxmwXxP9BgAAAAY"]
[Mon Apr 27 07:48:04.972289 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:22229] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testo.php"] [unique_id "ae6kNNnrZBzXPaJGSeLy3QAAANQ"]
[Mon Apr 27 07:48:05.508913 2026] [:error] [pid 36490:tid 36553] [client 72.146.42.142:22378] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testo.php"] [unique_id "ae6kNUxiWa1s9LPhuWK7UAAAAIU"]
[Mon Apr 27 07:48:06.146526 2026] [:error] [pid 36489:tid 36544] [client 72.146.42.142:22358] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testo.php"] [unique_id "ae6kNo6sRkW8OfGv18q7bgAAAFc"]
[Mon Apr 27 07:48:06.672029 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22211] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/testo.php"] [unique_id "ae6kNo6sRkW8OfGv18q7dQAAAEE"]
[Mon Apr 27 07:48:07.213102 2026] [:error] [pid 36575:tid 36601] [client 72.146.42.142:22399] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/row.php"] [unique_id "ae6kN7eGZIkifrMjcl9TYQAAARg"]
[Mon Apr 27 07:48:07.770823 2026] [:error] [pid 36488:tid 36498] [client 72.146.42.142:22380] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/row.php"] [unique_id "ae6kN8IA2VZgjxmwXxP9CwAAAAU"]
[Mon Apr 27 07:48:08.305118 2026] [:error] [pid 36490:tid 36551] [client 72.146.42.142:22275] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/row.php"] [unique_id "ae6kOExiWa1s9LPhuWK7VAAAAIM"]
[Mon Apr 27 07:48:08.918294 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:22310] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/row.php"] [unique_id "ae6kONnrZBzXPaJGSeLy5QAAANQ"]
[Mon Apr 27 07:48:09.454837 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22395] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "ae6kOY6sRkW8OfGv18q7hQAAAEE"]
[Mon Apr 27 07:48:09.979518 2026] [:error] [pid 36488:tid 36500] [client 72.146.42.142:22397] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "ae6kOcIA2VZgjxmwXxP9DAAAAAc"]
[Mon Apr 27 07:48:10.532778 2026] [:error] [pid 36490:tid 36558] [client 72.146.42.142:22354] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "ae6kOkxiWa1s9LPhuWK7WAAAAIo"]
[Mon Apr 27 07:48:11.079615 2026] [:error] [pid 36490:tid 36571] [client 72.146.42.142:22444] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "ae6kO0xiWa1s9LPhuWK7WgAAAJc"]
[Mon Apr 27 07:48:11.614725 2026] [:error] [pid 36490:tid 36569] [client 72.146.42.142:22297] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "ae6kO0xiWa1s9LPhuWK7XQAAAJU"]
[Mon Apr 27 07:48:12.108034 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22464] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "ae6kPExiWa1s9LPhuWK7XgAAAIg"]
[Mon Apr 27 07:48:12.603644 2026] [:error] [pid 36488:tid 36492] [client 72.146.42.142:22314] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "ae6kPMIA2VZgjxmwXxP9EQAAAAA"]
[Mon Apr 27 07:48:13.127894 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:22289] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "ae6kPY6sRkW8OfGv18q7lgAAAEk"]
[Mon Apr 27 07:48:13.709273 2026] [:error] [pid 36488:tid 36514] [client 72.146.42.142:22294] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ae6kPcIA2VZgjxmwXxP9FAAAABU"]
[Mon Apr 27 07:48:14.200962 2026] [:error] [pid 36489:tid 36540] [client 72.146.42.142:22343] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ae6kPo6sRkW8OfGv18q7mwAAAFM"]
[Mon Apr 27 07:48:14.678218 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22351] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xqq.php"] [unique_id "ae6kPreGZIkifrMjcl9TaQAAAQQ"]
[Mon Apr 27 07:48:15.161537 2026] [proxy_fcgi:error] [pid 36489:tid 36526] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:15.407107 2026] [proxy_fcgi:error] [pid 36489:tid 36522] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:15.645208 2026] [proxy_fcgi:error] [pid 36489:tid 36534] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:15.894191 2026] [proxy_fcgi:error] [pid 36489:tid 36528] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:16.131928 2026] [proxy_fcgi:error] [pid 36489:tid 36530] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:16.368472 2026] [proxy_fcgi:error] [pid 36489:tid 36525] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:16.612696 2026] [proxy_fcgi:error] [pid 36489:tid 36542] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:16.861788 2026] [proxy_fcgi:error] [pid 36489:tid 36521] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:17.105426 2026] [proxy_fcgi:error] [pid 36489:tid 36543] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:17.347854 2026] [proxy_fcgi:error] [pid 36489:tid 36531] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:17.585157 2026] [proxy_fcgi:error] [pid 36489:tid 36523] [client 72.146.42.142:22379] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:48:17.821478 2026] [:error] [pid 36489:tid 36526] [client 72.146.42.142:22379] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ae6kQY6sRkW8OfGv18q7sQAAAEU"]
[Mon Apr 27 07:48:18.303561 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22258] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ae6kQo6sRkW8OfGv18q7sgAAAEE"]
[Mon Apr 27 07:48:18.803939 2026] [:error] [pid 36490:tid 36565] [client 72.146.42.142:22226] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ae6kQkxiWa1s9LPhuWK7ZAAAAJE"]
[Mon Apr 27 07:48:19.272684 2026] [:error] [pid 36490:tid 36553] [client 72.146.42.142:22391] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/444.php"] [unique_id "ae6kQ0xiWa1s9LPhuWK7ZQAAAIU"]
[Mon Apr 27 07:48:19.889209 2026] [:error] [pid 36575:tid 36596] [client 72.146.42.142:22422] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ae6kQ7eGZIkifrMjcl9TdgAAARM"]
[Mon Apr 27 07:48:20.390759 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:22416] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ae6kRI6sRkW8OfGv18q7tQAAAEk"]
[Mon Apr 27 07:48:20.933958 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22315] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ae6kRLeGZIkifrMjcl9TeQAAAQQ"]
[Mon Apr 27 07:48:21.450480 2026] [:error] [pid 36789:tid 36798] [client 72.146.42.142:22218] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bnm.php"] [unique_id "ae6kRdnrZBzXPaJGSeLy9AAAAMc"]
[Mon Apr 27 07:48:21.963067 2026] [:error] [pid 36490:tid 36557] [client 72.146.42.142:22473] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/himu.php"] [unique_id "ae6kRUxiWa1s9LPhuWK7bgAAAIk"]
[Mon Apr 27 07:48:22.469720 2026] [:error] [pid 36490:tid 36552] [client 72.146.42.142:22230] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/himu.php"] [unique_id "ae6kRkxiWa1s9LPhuWK7bwAAAIQ"]
[Mon Apr 27 07:48:22.967287 2026] [:error] [pid 36789:tid 36802] [client 72.146.42.142:22312] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/himu.php"] [unique_id "ae6kRtnrZBzXPaJGSeLy9wAAAMs"]
[Mon Apr 27 07:48:23.447478 2026] [:error] [pid 36575:tid 36577] [client 72.146.42.142:22249] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/himu.php"] [unique_id "ae6kR7eGZIkifrMjcl9TgQAAAQA"]
[Mon Apr 27 07:48:23.956859 2026] [:error] [pid 36575:tid 36587] [client 72.146.42.142:22320] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ae6kR7eGZIkifrMjcl9ThQAAAQo"]
[Mon Apr 27 07:48:24.455088 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22280] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ae6kSI6sRkW8OfGv18q7xQAAAEE"]
[Mon Apr 27 07:48:24.964561 2026] [:error] [pid 36488:tid 36510] [client 72.146.42.142:22245] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ae6kSMIA2VZgjxmwXxP9HgAAABE"]
[Mon Apr 27 07:48:25.503036 2026] [:error] [pid 36575:tid 36596] [client 72.146.42.142:22246] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ae6kSbeGZIkifrMjcl9TjQAAARM"]
[Mon Apr 27 07:48:25.981451 2026] [:error] [pid 36490:tid 36568] [client 72.146.42.142:22211] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "ae6kSUxiWa1s9LPhuWK7cgAAAJQ"]
[Mon Apr 27 07:48:26.600787 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22256] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "ae6kSreGZIkifrMjcl9TjwAAARE"]
[Mon Apr 27 07:48:27.089485 2026] [:error] [pid 36575:tid 36592] [client 72.146.42.142:22487] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "ae6kS7eGZIkifrMjcl9TkwAAAQ8"]
[Mon Apr 27 07:48:27.666563 2026] [:error] [pid 36575:tid 36584] [client 72.146.42.142:22262] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "ae6kS7eGZIkifrMjcl9TlQAAAQc"]
[Mon Apr 27 07:48:28.273470 2026] [:error] [pid 36789:tid 36794] [client 72.146.42.142:22394] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "ae6kTNnrZBzXPaJGSeLzBAAAAMM"]
[Mon Apr 27 07:48:28.774360 2026] [:error] [pid 36789:tid 36792] [client 72.146.42.142:22372] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "ae6kTNnrZBzXPaJGSeLzCAAAAME"]
[Mon Apr 27 07:48:29.429876 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22250] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "ae6kTdnrZBzXPaJGSeLzCgAAAMk"]
[Mon Apr 27 07:48:29.918825 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:22244] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hans.php"] [unique_id "ae6kTdnrZBzXPaJGSeLzDQAAANQ"]
[Mon Apr 27 07:48:30.499447 2026] [:error] [pid 36789:tid 36798] [client 72.146.42.142:22247] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lgr.php"] [unique_id "ae6kTtnrZBzXPaJGSeLzEQAAAMc"]
[Mon Apr 27 07:48:31.002225 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:22295] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lgr.php"] [unique_id "ae6kT9nrZBzXPaJGSeLzEwAAAMg"]
[Mon Apr 27 07:48:31.470253 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22500] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lgr.php"] [unique_id "ae6kT9nrZBzXPaJGSeLzFwAAANg"]
[Mon Apr 27 07:48:31.951685 2026] [:error] [pid 36575:tid 36596] [client 72.146.42.142:22276] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lgr.php"] [unique_id "ae6kT7eGZIkifrMjcl9TnQAAARM"]
[Mon Apr 27 07:48:32.444977 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22210] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ae6kUNnrZBzXPaJGSeLzGQAAANI"]
[Mon Apr 27 07:48:33.006780 2026] [:error] [pid 36575:tid 36579] [client 72.146.42.142:22257] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ae6kUbeGZIkifrMjcl9TpAAAAQI"]
[Mon Apr 27 07:48:33.479314 2026] [:error] [pid 36490:tid 36571] [client 72.146.42.142:22214] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ae6kUUxiWa1s9LPhuWK7fgAAAJc"]
[Mon Apr 27 07:48:34.005312 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22181] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/an7.php"] [unique_id "ae6kUtnrZBzXPaJGSeLzHQAAANE"]
[Mon Apr 27 07:48:34.485057 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:22149] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "ae6kUtnrZBzXPaJGSeLzIAAAAMg"]
[Mon Apr 27 07:48:34.996242 2026] [:error] [pid 36488:tid 36507] [client 72.146.42.142:22387] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "ae6kUsIA2VZgjxmwXxP9IQAAAA4"]
[Mon Apr 27 07:48:35.497411 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22237] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "ae6kU9nrZBzXPaJGSeLzJgAAAMk"]
[Mon Apr 27 07:48:36.091736 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22215] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file1.php"] [unique_id "ae6kVNnrZBzXPaJGSeLzJwAAANE"]
[Mon Apr 27 07:48:36.630537 2026] [:error] [pid 36575:tid 36597] [client 72.146.42.142:22316] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luxe.php"] [unique_id "ae6kVLeGZIkifrMjcl9TrQAAARQ"]
[Mon Apr 27 07:48:37.442717 2026] [:error] [pid 36575:tid 36592] [client 72.146.42.142:22467] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luxe.php"] [unique_id "ae6kVbeGZIkifrMjcl9TswAAAQ8"]
[Mon Apr 27 07:48:38.014625 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22278] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luxe.php"] [unique_id "ae6kVtnrZBzXPaJGSeLzLgAAANI"]
[Mon Apr 27 07:48:38.501874 2026] [:error] [pid 36575:tid 36580] [client 72.146.42.142:22398] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/luxe.php"] [unique_id "ae6kVreGZIkifrMjcl9TtQAAAQM"]
[Mon Apr 27 07:48:39.075982 2026] [:error] [pid 36575:tid 36579] [client 72.146.42.142:22254] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "ae6kV7eGZIkifrMjcl9TuQAAAQI"]
[Mon Apr 27 07:48:39.565687 2026] [:error] [pid 36789:tid 36807] [client 72.146.42.142:22241] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "ae6kV9nrZBzXPaJGSeLzNAAAANA"]
[Mon Apr 27 07:48:40.108578 2026] [:error] [pid 36575:tid 36598] [client 72.146.42.142:22305] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "ae6kWLeGZIkifrMjcl9TvwAAARU"]
[Mon Apr 27 07:48:40.647695 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22159] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "ae6kWNnrZBzXPaJGSeLzOAAAANE"]
[Mon Apr 27 07:48:41.113349 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22444] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae6kWdnrZBzXPaJGSeLzPAAAAMk"]
[Mon Apr 27 07:48:41.611219 2026] [:error] [pid 36789:tid 36813] [client 72.146.42.142:22364] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae6kWdnrZBzXPaJGSeLzPgAAANY"]
[Mon Apr 27 07:48:42.108877 2026] [:error] [pid 36789:tid 36797] [client 72.146.42.142:22338] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae6kWtnrZBzXPaJGSeLzQQAAAMY"]
[Mon Apr 27 07:48:42.618790 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22233] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae6kWtnrZBzXPaJGSeLzRAAAANc"]
[Mon Apr 27 07:48:43.233906 2026] [:error] [pid 36490:tid 36567] [client 72.146.42.142:22253] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "ae6kW0xiWa1s9LPhuWK7hgAAAJM"]
[Mon Apr 27 07:48:43.736125 2026] [:error] [pid 36488:tid 36513] [client 72.146.42.142:22240] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "ae6kW8IA2VZgjxmwXxP9JAAAABQ"]
[Mon Apr 27 07:48:44.243068 2026] [:error] [pid 36488:tid 36508] [client 72.146.42.142:22223] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "ae6kXMIA2VZgjxmwXxP9JQAAAA8"]
[Mon Apr 27 07:48:44.916498 2026] [:error] [pid 36488:tid 36499] [client 72.146.42.142:22225] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inde.php"] [unique_id "ae6kXMIA2VZgjxmwXxP9JwAAAAY"]
[Mon Apr 27 07:48:45.412418 2026] [:error] [pid 36575:tid 36587] [client 72.146.42.142:22243] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "ae6kXbeGZIkifrMjcl9TygAAAQo"]
[Mon Apr 27 07:48:45.894680 2026] [:error] [pid 36490:tid 36563] [client 72.146.42.142:22177] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "ae6kXUxiWa1s9LPhuWK7kQAAAI8"]
[Mon Apr 27 07:48:46.510324 2026] [:error] [pid 36488:tid 36510] [client 72.146.42.142:22188] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "ae6kXsIA2VZgjxmwXxP9KgAAABE"]
[Mon Apr 27 07:48:47.056512 2026] [:error] [pid 36488:tid 36498] [client 72.146.42.142:22154] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xtt.php"] [unique_id "ae6kX8IA2VZgjxmwXxP9LwAAAAU"]
[Mon Apr 27 07:48:47.544303 2026] [:error] [pid 36575:tid 36580] [client 72.146.42.142:22319] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae6kX7eGZIkifrMjcl9T0QAAAQM"]
[Mon Apr 27 07:48:48.035391 2026] [:error] [pid 36488:tid 36509] [client 72.146.42.142:22381] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae6kYMIA2VZgjxmwXxP9MQAAABA"]
[Mon Apr 27 07:48:48.573479 2026] [:error] [pid 36489:tid 36535] [client 72.146.42.142:22213] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae6kYI6sRkW8OfGv18q77wAAAE4"]
[Mon Apr 27 07:48:49.043670 2026] [:error] [pid 36490:tid 36560] [client 72.146.42.142:22270] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae6kYUxiWa1s9LPhuWK7mQAAAIw"]
[Mon Apr 27 07:48:49.584690 2026] [:error] [pid 36488:tid 36504] [client 72.146.42.142:22285] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ae6kYcIA2VZgjxmwXxP9MgAAAAs"]
[Mon Apr 27 07:48:50.066642 2026] [:error] [pid 36490:tid 36549] [client 72.146.42.142:22334] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ae6kYkxiWa1s9LPhuWK7nAAAAIE"]
[Mon Apr 27 07:48:50.549592 2026] [:error] [pid 36490:tid 36569] [client 72.146.42.142:22190] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ae6kYkxiWa1s9LPhuWK7oAAAAJU"]
[Mon Apr 27 07:48:51.125126 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22235] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we2.php"] [unique_id "ae6kY7eGZIkifrMjcl9T2QAAAQQ"]
[Mon Apr 27 07:48:51.598983 2026] [:error] [pid 36575:tid 36600] [client 72.146.42.142:22306] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zicgg.php"] [unique_id "ae6kY7eGZIkifrMjcl9T3QAAARc"]
[Mon Apr 27 07:48:52.094884 2026] [:error] [pid 36575:tid 36584] [client 72.146.42.142:22449] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zicgg.php"] [unique_id "ae6kZLeGZIkifrMjcl9T4QAAAQc"]
[Mon Apr 27 07:48:52.560700 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22301] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zicgg.php"] [unique_id "ae6kZLeGZIkifrMjcl9T4wAAAQk"]
[Mon Apr 27 07:48:53.048953 2026] [:error] [pid 36490:tid 36570] [client 72.146.42.142:22178] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zicgg.php"] [unique_id "ae6kZUxiWa1s9LPhuWK7qwAAAJY"]
[Mon Apr 27 07:48:53.517781 2026] [:error] [pid 36575:tid 36581] [client 72.146.42.142:22185] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pouhg.php"] [unique_id "ae6kZbeGZIkifrMjcl9T6AAAAQQ"]
[Mon Apr 27 07:48:53.985819 2026] [:error] [pid 36490:tid 36561] [client 72.146.42.142:22217] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pouhg.php"] [unique_id "ae6kZUxiWa1s9LPhuWK7sQAAAI0"]
[Mon Apr 27 07:48:54.579872 2026] [:error] [pid 36489:tid 36533] [client 72.146.42.142:22437] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pouhg.php"] [unique_id "ae6kZo6sRkW8OfGv18q79wAAAEw"]
[Mon Apr 27 07:48:55.141330 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22366] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pouhg.php"] [unique_id "ae6kZ7eGZIkifrMjcl9T7QAAARE"]
[Mon Apr 27 07:48:55.628675 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:22321] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ae6kZ9nrZBzXPaJGSeLzVgAAANQ"]
[Mon Apr 27 07:48:56.142265 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22311] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ae6kaNnrZBzXPaJGSeLzXAAAANc"]
[Mon Apr 27 07:48:56.669484 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22248] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ae6kaNnrZBzXPaJGSeLzXgAAANg"]
[Mon Apr 27 07:48:57.149465 2026] [:error] [pid 36575:tid 36578] [client 72.146.42.142:22222] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "ae6kabeGZIkifrMjcl9T9gAAAQE"]
[Mon Apr 27 07:48:57.681383 2026] [:error] [pid 36488:tid 36514] [client 72.146.42.142:22232] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenon1337.php"] [unique_id "ae6kacIA2VZgjxmwXxP9PgAAABU"]
[Mon Apr 27 07:48:58.164473 2026] [:error] [pid 36575:tid 36598] [client 72.146.42.142:22299] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenon1337.php"] [unique_id "ae6kareGZIkifrMjcl9T-wAAARU"]
[Mon Apr 27 07:48:58.672155 2026] [:error] [pid 36489:tid 36528] [client 72.146.42.142:22318] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenon1337.php"] [unique_id "ae6kao6sRkW8OfGv18q7_QAAAEc"]
[Mon Apr 27 07:48:59.162717 2026] [:error] [pid 36490:tid 36548] [client 72.146.42.142:22182] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xenon1337.php"] [unique_id "ae6ka0xiWa1s9LPhuWK7wAAAAIA"]
[Mon Apr 27 07:48:59.746297 2026] [:error] [pid 36489:tid 36534] [client 72.146.42.142:22219] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "ae6ka46sRkW8OfGv18q8AAAAAE0"]
[Mon Apr 27 07:49:00.344404 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22199] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "ae6kbNnrZBzXPaJGSeLzaAAAANc"]
[Mon Apr 27 07:49:00.868466 2026] [:error] [pid 36490:tid 36557] [client 72.146.42.142:22204] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "ae6kbExiWa1s9LPhuWK7xgAAAIk"]
[Mon Apr 27 07:49:01.408845 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22207] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "ae6kbdnrZBzXPaJGSeLzbAAAAMk"]
[Mon Apr 27 07:49:01.927668 2026] [:error] [pid 36575:tid 36584] [client 72.146.42.142:22148] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae6kbbeGZIkifrMjcl9UBQAAAQc"]
[Mon Apr 27 07:49:02.405289 2026] [:error] [pid 36489:tid 36529] [client 72.146.42.142:22146] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae6kbo6sRkW8OfGv18q8BQAAAEg"]
[Mon Apr 27 07:49:02.872010 2026] [:error] [pid 36575:tid 36585] [client 72.146.42.142:22327] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae6kbreGZIkifrMjcl9UCAAAAQg"]
[Mon Apr 27 07:49:03.367398 2026] [:error] [pid 36575:tid 36579] [client 72.146.42.142:22208] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae6kb7eGZIkifrMjcl9UCQAAAQI"]
[Mon Apr 27 07:49:03.849656 2026] [:error] [pid 36575:tid 36580] [client 72.146.42.142:22259] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kb7eGZIkifrMjcl9UCgAAAQM"]
[Mon Apr 27 07:49:04.340453 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22174] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kcLeGZIkifrMjcl9UCwAAARE"]
[Mon Apr 27 07:49:04.820340 2026] [:error] [pid 36575:tid 36584] [client 72.146.42.142:22326] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kcLeGZIkifrMjcl9UDAAAAQc"]
[Mon Apr 27 07:49:05.290402 2026] [:error] [pid 36490:tid 36550] [client 72.146.42.142:21844] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae6kcUxiWa1s9LPhuWK70AAAAII"]
[Mon Apr 27 07:49:05.778130 2026] [:error] [pid 36575:tid 36591] [client 72.146.42.142:22302] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "ae6kcbeGZIkifrMjcl9UEQAAAQ4"]
[Mon Apr 27 07:49:06.258196 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:22239] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "ae6kctnrZBzXPaJGSeLzhQAAAMU"]
[Mon Apr 27 07:49:06.816489 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:22267] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "ae6kctnrZBzXPaJGSeLzhgAAANE"]
[Mon Apr 27 07:49:07.302613 2026] [:error] [pid 36789:tid 36802] [client 72.146.42.142:22224] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cache.php"] [unique_id "ae6kc9nrZBzXPaJGSeLziQAAAMs"]
[Mon Apr 27 07:49:07.888594 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22171] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error.php"] [unique_id "ae6kc9nrZBzXPaJGSeLzjAAAANM"]
[Mon Apr 27 07:49:08.372868 2026] [:error] [pid 36575:tid 36577] [client 72.146.42.142:22291] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error.php"] [unique_id "ae6kdLeGZIkifrMjcl9UGgAAAQA"]
[Mon Apr 27 07:49:08.857486 2026] [:error] [pid 36488:tid 36511] [client 72.146.42.142:22184] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error.php"] [unique_id "ae6kdMIA2VZgjxmwXxP9RAAAABI"]
[Mon Apr 27 07:49:09.343496 2026] [:error] [pid 36489:tid 36534] [client 72.146.42.142:22274] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/error.php"] [unique_id "ae6kdY6sRkW8OfGv18q8DAAAAE0"]
[Mon Apr 27 07:49:09.855965 2026] [:error] [pid 36489:tid 36542] [client 72.146.42.142:22147] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file32.php"] [unique_id "ae6kdY6sRkW8OfGv18q8DgAAAFU"]
[Mon Apr 27 07:49:10.335614 2026] [:error] [pid 36575:tid 36588] [client 72.146.42.142:22192] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file32.php"] [unique_id "ae6kdreGZIkifrMjcl9UIAAAAQs"]
[Mon Apr 27 07:49:10.839869 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22212] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file32.php"] [unique_id "ae6kdkxiWa1s9LPhuWK74AAAAIg"]
[Mon Apr 27 07:49:11.320447 2026] [:error] [pid 36488:tid 36507] [client 72.146.42.142:22227] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file32.php"] [unique_id "ae6kd8IA2VZgjxmwXxP9SQAAAA4"]
[Mon Apr 27 07:49:11.852040 2026] [:error] [pid 36489:tid 36529] [client 72.146.42.142:22189] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvrvk.php"] [unique_id "ae6kd46sRkW8OfGv18q8FAAAAEg"]
[Mon Apr 27 07:49:12.321282 2026] [:error] [pid 36490:tid 36551] [client 72.146.42.142:21826] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvrvk.php"] [unique_id "ae6keExiWa1s9LPhuWK75QAAAIM"]
[Mon Apr 27 07:49:12.848604 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22168] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvrvk.php"] [unique_id "ae6keLeGZIkifrMjcl9UJgAAARE"]
[Mon Apr 27 07:49:13.331068 2026] [:error] [pid 36490:tid 36563] [client 72.146.42.142:22231] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cvrvk.php"] [unique_id "ae6keUxiWa1s9LPhuWK76AAAAI8"]
[Mon Apr 27 07:49:13.879665 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22296] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ae6kebeGZIkifrMjcl9UKQAAAQk"]
[Mon Apr 27 07:49:14.386194 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22158] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ae6kekxiWa1s9LPhuWK78AAAAIg"]
[Mon Apr 27 07:49:14.882604 2026] [:error] [pid 36490:tid 36558] [client 72.146.42.142:22167] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ae6kekxiWa1s9LPhuWK78QAAAIo"]
[Mon Apr 27 07:49:15.443453 2026] [:error] [pid 36488:tid 36498] [client 72.146.42.142:22180] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ae6ke8IA2VZgjxmwXxP9TQAAAAU"]
[Mon Apr 27 07:49:15.982591 2026] [:error] [pid 36488:tid 36509] [client 72.146.42.142:22264] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "ae6ke8IA2VZgjxmwXxP9TwAAABA"]
[Mon Apr 27 07:49:16.519939 2026] [:error] [pid 36488:tid 36492] [client 72.146.42.142:22169] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "ae6kfMIA2VZgjxmwXxP9UgAAAAA"]
[Mon Apr 27 07:49:17.059213 2026] [proxy_fcgi:error] [pid 36490:tid 36557] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:17.305523 2026] [proxy_fcgi:error] [pid 36490:tid 36569] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:17.548026 2026] [proxy_fcgi:error] [pid 36490:tid 36554] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:17.801791 2026] [proxy_fcgi:error] [pid 36490:tid 36560] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:18.038189 2026] [proxy_fcgi:error] [pid 36490:tid 36570] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:18.292001 2026] [proxy_fcgi:error] [pid 36490:tid 36571] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:18.543364 2026] [proxy_fcgi:error] [pid 36490:tid 36572] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:18.784564 2026] [proxy_fcgi:error] [pid 36490:tid 36563] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:19.024849 2026] [proxy_fcgi:error] [pid 36490:tid 36561] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:19.264034 2026] [proxy_fcgi:error] [pid 36490:tid 36550] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:19.512081 2026] [proxy_fcgi:error] [pid 36490:tid 36548] [client 72.146.42.142:22173] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:49:19.759149 2026] [:error] [pid 36490:tid 36552] [client 72.146.42.142:22173] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/app.php"] [unique_id "ae6kf0xiWa1s9LPhuWK8BwAAAIQ"]
[Mon Apr 27 07:49:20.257654 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22179] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/app.php"] [unique_id "ae6kgLeGZIkifrMjcl9UPAAAAQY"]
[Mon Apr 27 07:49:20.754520 2026] [:error] [pid 36575:tid 36582] [client 72.146.42.142:22150] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/app.php"] [unique_id "ae6kgLeGZIkifrMjcl9UPwAAAQU"]
[Mon Apr 27 07:49:21.298947 2026] [:error] [pid 36575:tid 36592] [client 72.146.42.142:22304] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/app.php"] [unique_id "ae6kgbeGZIkifrMjcl9UQwAAAQ8"]
[Mon Apr 27 07:49:21.798100 2026] [:error] [pid 36488:tid 36493] [client 72.146.42.142:21834] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "ae6kgcIA2VZgjxmwXxP9VgAAAAE"]
[Mon Apr 27 07:49:22.264727 2026] [:error] [pid 36489:tid 36527] [client 72.146.42.142:21836] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "ae6kgo6sRkW8OfGv18q8GwAAAEY"]
[Mon Apr 27 07:49:22.779739 2026] [:error] [pid 36490:tid 36570] [client 72.146.42.142:21825] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "ae6kgkxiWa1s9LPhuWK8DQAAAJY"]
[Mon Apr 27 07:49:23.246615 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22251] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "ae6kg7eGZIkifrMjcl9URgAAAQY"]
[Mon Apr 27 07:49:23.752892 2026] [:error] [pid 36575:tid 36601] [client 72.146.42.142:22263] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "ae6kg7eGZIkifrMjcl9USAAAARg"]
[Mon Apr 27 07:49:24.250384 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:21830] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "ae6khNnrZBzXPaJGSeLzmQAAAMg"]
[Mon Apr 27 07:49:24.747359 2026] [:error] [pid 36488:tid 36511] [client 72.146.42.142:21878] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "ae6khMIA2VZgjxmwXxP9WQAAABI"]
[Mon Apr 27 07:49:25.265988 2026] [:error] [pid 36489:tid 36536] [client 72.146.42.142:22325] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "ae6khY6sRkW8OfGv18q8IQAAAE8"]
[Mon Apr 27 07:49:25.792940 2026] [:error] [pid 36789:tid 36801] [client 72.146.42.142:21838] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae6khdnrZBzXPaJGSeLznAAAAMo"]
[Mon Apr 27 07:49:26.285086 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22328] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae6khreGZIkifrMjcl9UTAAAARE"]
[Mon Apr 27 07:49:26.783516 2026] [:error] [pid 36789:tid 36811] [client 72.146.42.142:21839] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae6khtnrZBzXPaJGSeLzoQAAANQ"]
[Mon Apr 27 07:49:27.313945 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22209] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae6kh9nrZBzXPaJGSeLzowAAANc"]
[Mon Apr 27 07:49:27.858982 2026] [:error] [pid 36490:tid 36565] [client 72.146.42.142:22286] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ae6kh0xiWa1s9LPhuWK8FQAAAJE"]
[Mon Apr 27 07:49:28.385425 2026] [:error] [pid 36489:tid 36532] [client 72.146.42.142:21833] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ae6kiI6sRkW8OfGv18q8JwAAAEs"]
[Mon Apr 27 07:49:28.978689 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:22195] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ae6kiNnrZBzXPaJGSeLzqgAAAMw"]
[Mon Apr 27 07:49:29.498189 2026] [:error] [pid 36490:tid 36554] [client 72.146.42.142:22152] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "ae6kiUxiWa1s9LPhuWK8FwAAAIY"]
[Mon Apr 27 07:49:30.016229 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:22238] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mws.php"] [unique_id "ae6kitnrZBzXPaJGSeLzqwAAAMA"]
[Mon Apr 27 07:49:30.485727 2026] [:error] [pid 36489:tid 36543] [client 72.146.42.142:22156] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mws.php"] [unique_id "ae6kio6sRkW8OfGv18q8MQAAAFY"]
[Mon Apr 27 07:49:31.024642 2026] [:error] [pid 36789:tid 36799] [client 72.146.42.142:22194] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mws.php"] [unique_id "ae6ki9nrZBzXPaJGSeLzsAAAAMg"]
[Mon Apr 27 07:49:31.564640 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22191] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mws.php"] [unique_id "ae6ki9nrZBzXPaJGSeLzswAAANM"]
[Mon Apr 27 07:49:32.116307 2026] [:error] [pid 36490:tid 36553] [client 72.146.42.142:22393] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ae6kjExiWa1s9LPhuWK8HAAAAIU"]
[Mon Apr 27 07:49:32.668481 2026] [:error] [pid 36489:tid 36522] [client 72.146.42.142:22162] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ae6kjI6sRkW8OfGv18q8OAAAAEE"]
[Mon Apr 27 07:49:33.150183 2026] [:error] [pid 36490:tid 36548] [client 72.146.42.142:21848] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ae6kjUxiWa1s9LPhuWK8HwAAAIA"]
[Mon Apr 27 07:49:33.687567 2026] [:error] [pid 36490:tid 36560] [client 72.146.42.142:22151] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "ae6kjUxiWa1s9LPhuWK8IQAAAIw"]
[Mon Apr 27 07:49:34.380382 2026] [:error] [pid 36575:tid 36580] [client 72.146.42.142:21832] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ae6kjreGZIkifrMjcl9UUQAAAQM"]
[Mon Apr 27 07:49:34.988381 2026] [:error] [pid 36489:tid 36541] [client 72.146.42.142:22228] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ae6kjo6sRkW8OfGv18q8QAAAAFQ"]
[Mon Apr 27 07:49:35.516518 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22462] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ae6kj9nrZBzXPaJGSeLzvAAAANI"]
[Mon Apr 27 07:49:36.038985 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:21835] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "ae6kkNnrZBzXPaJGSeLzvwAAAMw"]
[Mon Apr 27 07:49:36.541071 2026] [:error] [pid 36575:tid 36579] [client 72.146.42.142:22260] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "ae6kkLeGZIkifrMjcl9UUwAAAQI"]
[Mon Apr 27 07:49:37.104627 2026] [:error] [pid 36575:tid 36583] [client 72.146.42.142:22332] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "ae6kkbeGZIkifrMjcl9UVQAAAQY"]
[Mon Apr 27 07:49:37.622334 2026] [:error] [pid 36575:tid 36577] [client 72.146.42.142:21831] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "ae6kkbeGZIkifrMjcl9UWQAAAQA"]
[Mon Apr 27 07:49:38.114043 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22271] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/doc.php"] [unique_id "ae6kktnrZBzXPaJGSeLzwwAAAM8"]
[Mon Apr 27 07:49:38.677812 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22085] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "ae6kkreGZIkifrMjcl9UXQAAAQk"]
[Mon Apr 27 07:49:39.171899 2026] [:error] [pid 36575:tid 36595] [client 72.146.42.142:21841] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "ae6kk7eGZIkifrMjcl9UXwAAARI"]
[Mon Apr 27 07:49:39.682272 2026] [:error] [pid 36490:tid 36548] [client 72.146.42.142:21824] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "ae6kk0xiWa1s9LPhuWK8LwAAAIA"]
[Mon Apr 27 07:49:40.158226 2026] [:error] [pid 36789:tid 36815] [client 72.146.42.142:22165] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "ae6klNnrZBzXPaJGSeLzyQAAANg"]
[Mon Apr 27 07:49:40.661765 2026] [:error] [pid 36789:tid 36796] [client 72.146.42.142:21843] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "ae6klNnrZBzXPaJGSeLzygAAAMU"]
[Mon Apr 27 07:49:41.138696 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:21847] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "ae6kldnrZBzXPaJGSeLzzwAAAMA"]
[Mon Apr 27 07:49:41.685473 2026] [:error] [pid 36789:tid 36814] [client 72.146.42.142:22234] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "ae6kldnrZBzXPaJGSeLz0QAAANc"]
[Mon Apr 27 07:49:42.164923 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22186] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "ae6kltnrZBzXPaJGSeLz0wAAAM8"]
[Mon Apr 27 07:49:42.671728 2026] [:error] [pid 36575:tid 36588] [client 72.146.42.142:22309] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "ae6klreGZIkifrMjcl9UZgAAAQs"]
[Mon Apr 27 07:49:43.211720 2026] [:error] [pid 36488:tid 36499] [client 72.146.42.142:21854] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "ae6kl8IA2VZgjxmwXxP9aQAAAAY"]
[Mon Apr 27 07:49:43.754087 2026] [:error] [pid 36575:tid 36587] [client 72.146.42.142:22170] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "ae6kl7eGZIkifrMjcl9UaAAAAQo"]
[Mon Apr 27 07:49:44.399438 2026] [:error] [pid 36488:tid 36500] [client 72.146.42.142:21850] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "ae6kmMIA2VZgjxmwXxP9awAAAAc"]
[Mon Apr 27 07:49:44.949328 2026] [:error] [pid 36490:tid 36561] [client 72.146.42.142:21862] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owl.php"] [unique_id "ae6kmExiWa1s9LPhuWK8NwAAAI0"]
[Mon Apr 27 07:49:45.498580 2026] [:error] [pid 36575:tid 36578] [client 72.146.42.142:22155] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owl.php"] [unique_id "ae6kmbeGZIkifrMjcl9UbAAAAQE"]
[Mon Apr 27 07:49:46.085339 2026] [:error] [pid 36489:tid 36542] [client 72.146.42.142:22095] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owl.php"] [unique_id "ae6kmo6sRkW8OfGv18q8RQAAAFU"]
[Mon Apr 27 07:49:46.576639 2026] [:error] [pid 36490:tid 36569] [client 72.146.42.142:21865] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/owl.php"] [unique_id "ae6kmkxiWa1s9LPhuWK8PwAAAJU"]
[Mon Apr 27 07:49:47.052523 2026] [:error] [pid 36490:tid 36553] [client 72.146.42.142:21842] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "ae6km0xiWa1s9LPhuWK8QQAAAIU"]
[Mon Apr 27 07:49:47.604990 2026] [:error] [pid 36488:tid 36514] [client 72.146.42.142:22160] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "ae6km8IA2VZgjxmwXxP9bwAAABU"]
[Mon Apr 27 07:49:48.097580 2026] [:error] [pid 36488:tid 36492] [client 72.146.42.142:22164] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "ae6knMIA2VZgjxmwXxP9cwAAAAA"]
[Mon Apr 27 07:49:48.581977 2026] [:error] [pid 36489:tid 36534] [client 72.146.42.142:22153] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "ae6knI6sRkW8OfGv18q8RwAAAE0"]
[Mon Apr 27 07:49:49.081268 2026] [:error] [pid 36789:tid 36793] [client 72.146.42.142:22322] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "ae6kndnrZBzXPaJGSeLz3gAAAMI"]
[Mon Apr 27 07:49:49.573313 2026] [:error] [pid 36488:tid 36501] [client 72.146.42.142:21845] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "ae6kncIA2VZgjxmwXxP9dgAAAAg"]
[Mon Apr 27 07:49:50.113765 2026] [:error] [pid 36490:tid 36552] [client 72.146.42.142:21871] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "ae6knkxiWa1s9LPhuWK8TQAAAIQ"]
[Mon Apr 27 07:49:50.751451 2026] [:error] [pid 36488:tid 36498] [client 72.146.42.142:21860] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "ae6knsIA2VZgjxmwXxP9egAAAAU"]
[Mon Apr 27 07:49:51.289900 2026] [:error] [pid 36789:tid 36800] [client 72.146.42.142:22105] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "ae6kn9nrZBzXPaJGSeLz5AAAAMk"]
[Mon Apr 27 07:49:51.808194 2026] [:error] [pid 36488:tid 36492] [client 72.146.42.142:22108] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "ae6kn8IA2VZgjxmwXxP9gAAAAAA"]
[Mon Apr 27 07:49:52.329518 2026] [:error] [pid 36489:tid 36526] [client 72.146.42.142:22187] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "ae6koI6sRkW8OfGv18q8TAAAAEU"]
[Mon Apr 27 07:49:52.807773 2026] [:error] [pid 36490:tid 36571] [client 72.146.42.142:22266] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "ae6koExiWa1s9LPhuWK8UQAAAJc"]
[Mon Apr 27 07:49:53.383252 2026] [:error] [pid 36490:tid 36568] [client 72.146.42.142:22203] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ae6koUxiWa1s9LPhuWK8VAAAAJQ"]
[Mon Apr 27 07:49:53.896869 2026] [:error] [pid 36490:tid 36548] [client 72.146.42.142:22206] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ae6koUxiWa1s9LPhuWK8WAAAAIA"]
[Mon Apr 27 07:49:54.406272 2026] [:error] [pid 36490:tid 36566] [client 72.146.42.142:22113] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ae6kokxiWa1s9LPhuWK8WwAAAJI"]
[Mon Apr 27 07:49:54.901605 2026] [:error] [pid 36490:tid 36561] [client 72.146.42.142:22323] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "ae6kokxiWa1s9LPhuWK8YQAAAI0"]
[Mon Apr 27 07:49:55.381195 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22198] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "ae6ko7eGZIkifrMjcl9UbQAAARE"]
[Mon Apr 27 07:49:55.906063 2026] [:error] [pid 36488:tid 36502] [client 72.146.42.142:22161] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "ae6ko8IA2VZgjxmwXxP9kQAAAAk"]
[Mon Apr 27 07:49:56.383974 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22163] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "ae6kpNnrZBzXPaJGSeLz7QAAANM"]
[Mon Apr 27 07:49:56.867532 2026] [:error] [pid 36575:tid 36588] [client 72.146.42.142:22505] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "ae6kpLeGZIkifrMjcl9UbgAAAQs"]
[Mon Apr 27 07:49:57.407577 2026] [:error] [pid 36575:tid 36597] [client 72.146.42.142:22117] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ae6kpbeGZIkifrMjcl9UbwAAARQ"]
[Mon Apr 27 07:49:57.940919 2026] [:error] [pid 36490:tid 36554] [client 72.146.42.142:22196] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ae6kpUxiWa1s9LPhuWK8aQAAAIY"]
[Mon Apr 27 07:49:58.419541 2026] [:error] [pid 36488:tid 36504] [client 72.146.42.142:22221] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ae6kpsIA2VZgjxmwXxP9kwAAAAs"]
[Mon Apr 27 07:49:59.029454 2026] [:error] [pid 36490:tid 36549] [client 72.146.42.142:22144] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "ae6kp0xiWa1s9LPhuWK8bAAAAIE"]
[Mon Apr 27 07:49:59.625420 2026] [:error] [pid 36789:tid 36793] [client 72.146.42.142:21828] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "ae6kp9nrZBzXPaJGSeLz9gAAAMI"]
[Mon Apr 27 07:50:00.146632 2026] [:error] [pid 36789:tid 36810] [client 72.146.42.142:22084] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "ae6kqNnrZBzXPaJGSeLz-QAAANM"]
[Mon Apr 27 07:50:00.783667 2026] [:error] [pid 36490:tid 36557] [client 72.146.42.142:22106] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "ae6kqExiWa1s9LPhuWK8bwAAAIk"]
[Mon Apr 27 07:50:01.257866 2026] [:error] [pid 36490:tid 36564] [client 72.146.42.142:22252] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "ae6kqUxiWa1s9LPhuWK8cQAAAJA"]
[Mon Apr 27 07:50:01.880019 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22201] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lo.php"] [unique_id "ae6kqdnrZBzXPaJGSeLz_QAAAM8"]
[Mon Apr 27 07:50:02.362839 2026] [:error] [pid 36575:tid 36582] [client 72.146.42.142:21883] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lo.php"] [unique_id "ae6kqreGZIkifrMjcl9UegAAAQU"]
[Mon Apr 27 07:50:02.877246 2026] [:error] [pid 36490:tid 36556] [client 72.146.42.142:22202] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lo.php"] [unique_id "ae6kqkxiWa1s9LPhuWK8dQAAAIg"]
[Mon Apr 27 07:50:03.351527 2026] [:error] [pid 36490:tid 36550] [client 72.146.42.142:21846] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lo.php"] [unique_id "ae6kq0xiWa1s9LPhuWK8egAAAII"]
[Mon Apr 27 07:50:03.884636 2026] [:error] [pid 36490:tid 36568] [client 72.146.42.142:21876] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ae6kq0xiWa1s9LPhuWK8fQAAAJQ"]
[Mon Apr 27 07:50:04.363386 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22080] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ae6krLeGZIkifrMjcl9UewAAARE"]
[Mon Apr 27 07:50:04.830271 2026] [:error] [pid 36488:tid 36508] [client 72.146.42.142:21872] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ae6krMIA2VZgjxmwXxP9lAAAAA8"]
[Mon Apr 27 07:50:05.314382 2026] [:error] [pid 36489:tid 36534] [client 72.146.42.142:21869] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "ae6krY6sRkW8OfGv18q8VQAAAE0"]
[Mon Apr 27 07:50:05.798324 2026] [:error] [pid 36490:tid 36562] [client 72.146.42.142:22100] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "ae6krUxiWa1s9LPhuWK8ggAAAI4"]
[Mon Apr 27 07:50:06.293033 2026] [:error] [pid 36789:tid 36806] [client 72.146.42.142:22261] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "ae6krtnrZBzXPaJGSeL0BAAAAM8"]
[Mon Apr 27 07:50:06.845063 2026] [:error] [pid 36489:tid 36530] [client 72.146.42.142:21864] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "ae6kro6sRkW8OfGv18q8WAAAAEk"]
[Mon Apr 27 07:50:07.345720 2026] [:error] [pid 36575:tid 36596] [client 72.146.42.142:21870] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bless5.php"] [unique_id "ae6kr7eGZIkifrMjcl9UhAAAARM"]
[Mon Apr 27 07:50:07.860098 2026] [:error] [pid 36575:tid 36594] [client 72.146.42.142:22128] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae6kr7eGZIkifrMjcl9UhwAAARE"]
[Mon Apr 27 07:50:08.458598 2026] [:error] [pid 36575:tid 36586] [client 72.146.42.142:22037] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae6ksLeGZIkifrMjcl9UigAAAQk"]
[Mon Apr 27 07:50:08.943465 2026] [:error] [pid 36575:tid 36600] [client 72.146.42.142:21856] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae6ksLeGZIkifrMjcl9UjQAAARc"]
[Mon Apr 27 07:50:09.427222 2026] [:error] [pid 36575:tid 36597] [client 72.146.42.142:22282] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae6ksbeGZIkifrMjcl9UkQAAARQ"]
[Mon Apr 27 07:50:09.928847 2026] [:error] [pid 36789:tid 36791] [client 72.146.42.142:21879] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae6ksdnrZBzXPaJGSeL0CAAAAMA"]
[Mon Apr 27 07:50:10.520702 2026] [:error] [pid 36490:tid 36548] [client 72.146.42.142:22197] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae6kskxiWa1s9LPhuWK8hwAAAIA"]
[Mon Apr 27 07:50:11.000955 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22101] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae6kstnrZBzXPaJGSeL0DAAAANI"]
[Mon Apr 27 07:50:11.677584 2026] [:error] [pid 36489:tid 36537] [client 72.146.42.142:22040] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae6ks46sRkW8OfGv18q8ZAAAAFA"]
[Mon Apr 27 07:50:12.266662 2026] [:error] [pid 36575:tid 36580] [client 72.146.42.142:21866] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ae6ktLeGZIkifrMjcl9UkgAAAQM"]
[Mon Apr 27 07:50:12.787922 2026] [:error] [pid 36575:tid 36592] [client 72.146.42.142:22282] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ae6ktLeGZIkifrMjcl9UkwAAAQ8"]
[Mon Apr 27 07:50:13.271471 2026] [:error] [pid 36488:tid 36511] [client 72.146.42.142:21849] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ae6ktcIA2VZgjxmwXxP9lgAAABI"]
[Mon Apr 27 07:50:13.795104 2026] [:error] [pid 36789:tid 36809] [client 72.146.42.142:22124] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "ae6ktdnrZBzXPaJGSeL0GAAAANI"]
[Mon Apr 27 07:50:14.327956 2026] [:error] [pid 36488:tid 36512] [client 72.146.42.142:21956] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "ae6ktsIA2VZgjxmwXxP9mwAAABM"]
[Mon Apr 27 07:50:14.849138 2026] [:error] [pid 36789:tid 36797] [client 72.146.42.142:22092] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "ae6kttnrZBzXPaJGSeL0HQAAAMY"]
[Mon Apr 27 07:50:15.362195 2026] [:error] [pid 36490:tid 36557] [client 72.146.42.142:22193] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "ae6kt0xiWa1s9LPhuWK8kgAAAIk"]
[Mon Apr 27 07:50:15.881858 2026] [:error] [pid 36488:tid 36492] [client 72.146.42.142:22103] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "ae6kt8IA2VZgjxmwXxP9nAAAAAA"]
[Mon Apr 27 07:50:16.436016 2026] [:error] [pid 36789:tid 36808] [client 72.146.42.142:21886] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ae6kuNnrZBzXPaJGSeL0IgAAANE"]
[Mon Apr 27 07:50:16.919414 2026] [:error] [pid 36490:tid 36551] [client 72.146.42.142:21861] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ae6kuExiWa1s9LPhuWK8mgAAAIM"]
[Mon Apr 27 07:50:17.436986 2026] [:error] [pid 36789:tid 36794] [client 72.146.42.142:22120] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ae6kudnrZBzXPaJGSeL0JQAAAMM"]
[Mon Apr 27 07:50:17.942371 2026] [:error] [pid 36789:tid 36803] [client 72.146.42.142:21829] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "ae6kudnrZBzXPaJGSeL0JwAAAMw"]
[Mon Apr 27 07:50:18.425426 2026] [:error] [pid 36789:tid 36805] [client 72.146.42.142:22127] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae6kutnrZBzXPaJGSeL0KgAAAM4"]
[Mon Apr 27 07:50:18.934898 2026] [:error] [pid 36490:tid 36550] [client 72.146.42.142:22082] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae6kukxiWa1s9LPhuWK8nwAAAII"]
[Mon Apr 27 07:50:19.416348 2026] [proxy_fcgi:error] [pid 36789:tid 36810] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:19.654105 2026] [proxy_fcgi:error] [pid 36789:tid 36792] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:19.894990 2026] [proxy_fcgi:error] [pid 36789:tid 36811] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:20.131646 2026] [proxy_fcgi:error] [pid 36789:tid 36799] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:20.371202 2026] [proxy_fcgi:error] [pid 36789:tid 36805] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:20.624375 2026] [proxy_fcgi:error] [pid 36789:tid 36808] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:20.873670 2026] [proxy_fcgi:error] [pid 36789:tid 36807] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:21.111449 2026] [proxy_fcgi:error] [pid 36789:tid 36810] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:21.382765 2026] [proxy_fcgi:error] [pid 36789:tid 36813] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:21.625409 2026] [proxy_fcgi:error] [pid 36789:tid 36811] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:21.862429 2026] [proxy_fcgi:error] [pid 36789:tid 36794] [client 72.146.42.142:21859] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:50:22.096941 2026] [:error] [pid 36789:tid 36795] [client 72.146.42.142:21859] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "ae6kvtnrZBzXPaJGSeL0QgAAAMQ"]
[Mon Apr 27 07:50:25.625059 2026] [:error] [pid 50861:tid 50866] [client 72.146.42.142:21884] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "ae6kwWCmVQOCiCZfqR5ejwAAAAE"]
[Mon Apr 27 07:50:26.157314 2026] [:error] [pid 50863:tid 50919] [client 72.146.42.142:22094] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "ae6kwnPaUAmshuFrBc8qiwAAAMA"]
[Mon Apr 27 07:50:26.630455 2026] [:error] [pid 50951:tid 50954] [client 72.146.42.142:22145] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "ae6kwl2pquA9BEfFXTgXnwAAAUE"]
[Mon Apr 27 07:50:27.100403 2026] [:error] [pid 50862:tid 50896] [client 72.146.42.142:22506] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "ae6kw0tKr9IOeW7InlW-sQAAAIQ"]
[Mon Apr 27 07:50:27.569065 2026] [:error] [pid 50862:tid 50900] [client 72.146.42.142:22081] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "ae6kw0tKr9IOeW7InlW-tAAAAIg"]
[Mon Apr 27 07:50:28.064781 2026] [:error] [pid 50951:tid 50956] [client 72.146.42.142:22119] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "ae6kxF2pquA9BEfFXTgXogAAAUM"]
[Mon Apr 27 07:50:28.542897 2026] [:error] [pid 50863:tid 50922] [client 72.146.42.142:22268] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "ae6kxHPaUAmshuFrBc8qjgAAAMM"]
[Mon Apr 27 07:50:29.078816 2026] [:error] [pid 50863:tid 50927] [client 72.146.42.142:22111] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "ae6kxXPaUAmshuFrBc8qjwAAAMg"]
[Mon Apr 27 07:50:29.607313 2026] [:error] [pid 50863:tid 50929] [client 72.146.42.142:22029] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "ae6kxXPaUAmshuFrBc8qkgAAAMo"]
[Mon Apr 27 07:50:30.125442 2026] [:error] [pid 50951:tid 50960] [client 72.146.42.142:22096] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "ae6kxl2pquA9BEfFXTgXpQAAAUc"]
[Mon Apr 27 07:50:30.625075 2026] [:error] [pid 50951:tid 50963] [client 72.146.42.142:22088] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "ae6kxl2pquA9BEfFXTgXpgAAAUo"]
[Mon Apr 27 07:50:31.091948 2026] [:error] [pid 50862:tid 50907] [client 72.146.42.142:22121] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "ae6kx0tKr9IOeW7InlW-vAAAAI8"]
[Mon Apr 27 07:50:31.655398 2026] [:error] [pid 50862:tid 50911] [client 72.146.42.142:22400] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "ae6kx0tKr9IOeW7InlW-vgAAAJM"]
[Mon Apr 27 07:50:32.254499 2026] [:error] [pid 50862:tid 50913] [client 72.146.42.142:22408] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "ae6kyEtKr9IOeW7InlW-vwAAAJU"]
[Mon Apr 27 07:50:32.891483 2026] [:error] [pid 50862:tid 50892] [client 72.146.42.142:22404] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "ae6kyEtKr9IOeW7InlW-wQAAAIA"]
[Mon Apr 27 07:50:33.376360 2026] [:error] [pid 50863:tid 50941] [client 72.146.42.142:22123] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "ae6kyXPaUAmshuFrBc8qmgAAANY"]
[Mon Apr 27 07:50:33.870322 2026] [:error] [pid 50862:tid 50907] [client 72.146.42.142:22016] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "ae6kyUtKr9IOeW7InlW-xAAAAI8"]
[Mon Apr 27 07:50:34.462542 2026] [:error] [pid 50863:tid 50926] [client 72.146.42.142:21874] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "ae6kynPaUAmshuFrBc8qnQAAAMc"]
[Mon Apr 27 07:50:34.997636 2026] [:error] [pid 50862:tid 50911] [client 72.146.42.142:22157] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new4.php"] [unique_id "ae6kyktKr9IOeW7InlW-xgAAAJM"]
[Mon Apr 27 07:50:35.613214 2026] [:error] [pid 50862:tid 50912] [client 72.146.42.142:22469] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ae6ky0tKr9IOeW7InlW-yAAAAJQ"]
[Mon Apr 27 07:50:36.185585 2026] [:error] [pid 50951:tid 50958] [client 72.146.42.142:22110] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ae6kzF2pquA9BEfFXTgXrQAAAUU"]
[Mon Apr 27 07:50:36.664525 2026] [:error] [pid 50861:tid 50868] [client 72.146.42.142:22242] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ae6kzGCmVQOCiCZfqR5esgAAAAM"]
[Mon Apr 27 07:50:37.176530 2026] [:error] [pid 50862:tid 50896] [client 72.146.42.142:22420] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "ae6kzUtKr9IOeW7InlW-ywAAAIQ"]
[Mon Apr 27 07:50:37.663923 2026] [:error] [pid 50863:tid 50933] [client 72.146.42.142:22485] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "ae6kzXPaUAmshuFrBc8qrQAAAM4"]
[Mon Apr 27 07:50:38.270942 2026] [:error] [pid 50951:tid 50964] [client 72.146.42.142:21867] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "ae6kzl2pquA9BEfFXTgXsAAAAUs"]
[Mon Apr 27 07:50:38.800751 2026] [:error] [pid 50951:tid 50967] [client 72.146.42.142:22511] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "ae6kzl2pquA9BEfFXTgXsQAAAU4"]
[Mon Apr 27 07:50:39.350474 2026] [:error] [pid 50861:tid 50876] [client 72.146.42.142:22036] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "ae6kz2CmVQOCiCZfqR5etQAAAAs"]
[Mon Apr 27 07:50:39.890549 2026] [:error] [pid 50863:tid 50932] [client 72.146.42.142:22499] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "ae6kz3PaUAmshuFrBc8qswAAAM0"]
[Mon Apr 27 07:50:40.526857 2026] [:error] [pid 50951:tid 50955] [client 72.146.42.142:21855] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "ae6k0F2pquA9BEfFXTgXuAAAAUI"]
[Mon Apr 27 07:50:41.101121 2026] [:error] [pid 50951:tid 50956] [client 72.146.42.142:22474] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "ae6k0V2pquA9BEfFXTgXuwAAAUM"]
[Mon Apr 27 07:50:41.710832 2026] [:error] [pid 50861:tid 50884] [client 72.146.42.142:22522] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "ae6k0WCmVQOCiCZfqR5etgAAABM"]
[Mon Apr 27 07:50:42.187654 2026] [:error] [pid 50862:tid 50914] [client 72.146.42.142:22134] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ae6k0ktKr9IOeW7InlW-0wAAAJY"]
[Mon Apr 27 07:50:42.720917 2026] [:error] [pid 50951:tid 50972] [client 72.146.42.142:22412] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ae6k0l2pquA9BEfFXTgXvgAAAVM"]
[Mon Apr 27 07:50:43.206414 2026] [:error] [pid 50951:tid 50975] [client 72.146.42.142:21852] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ae6k012pquA9BEfFXTgXwQAAAVY"]
[Mon Apr 27 07:50:43.796653 2026] [:error] [pid 50951:tid 50953] [client 72.146.42.142:22406] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "ae6k012pquA9BEfFXTgXxQAAAUA"]
[Mon Apr 27 07:50:44.340895 2026] [:error] [pid 50863:tid 50932] [client 72.146.42.142:22443] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolv2.php"] [unique_id "ae6k1HPaUAmshuFrBc8qtgAAAM0"]
[Mon Apr 27 07:50:44.900764 2026] [:error] [pid 50863:tid 50927] [client 72.146.42.142:22102] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolv2.php"] [unique_id "ae6k1HPaUAmshuFrBc8quAAAAMg"]
[Mon Apr 27 07:50:45.372249 2026] [:error] [pid 50863:tid 50929] [client 72.146.42.142:22044] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolv2.php"] [unique_id "ae6k1XPaUAmshuFrBc8qugAAAMo"]
[Mon Apr 27 07:50:46.203036 2026] [:error] [pid 50861:tid 50868] [client 72.146.42.142:22205] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wolv2.php"] [unique_id "ae6k1mCmVQOCiCZfqR5euQAAAAM"]
[Mon Apr 27 07:50:46.738345 2026] [:error] [pid 50951:tid 50953] [client 72.146.42.142:22281] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "ae6k1l2pquA9BEfFXTgXzwAAAUA"]
[Mon Apr 27 07:50:47.237865 2026] [:error] [pid 50863:tid 50928] [client 72.146.42.142:22114] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "ae6k13PaUAmshuFrBc8qvQAAAMk"]
[Mon Apr 27 07:50:47.865660 2026] [:error] [pid 50951:tid 50968] [client 72.146.42.142:21837] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "ae6k112pquA9BEfFXTgX1AAAAU8"]
[Mon Apr 27 07:50:48.337405 2026] [:error] [pid 50863:tid 50939] [client 72.146.42.142:22445] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "ae6k2HPaUAmshuFrBc8qvwAAANQ"]
[Mon Apr 27 07:50:48.903765 2026] [:error] [pid 50951:tid 50962] [client 72.146.42.142:22401] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "ae6k2F2pquA9BEfFXTgX2AAAAUk"]
[Mon Apr 27 07:50:49.408693 2026] [:error] [pid 50951:tid 50963] [client 72.146.42.142:21851] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "ae6k2V2pquA9BEfFXTgX2gAAAUo"]
[Mon Apr 27 07:50:50.135347 2026] [:error] [pid 50862:tid 50899] [client 72.146.42.142:22488] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "ae6k2ktKr9IOeW7InlW-4wAAAIc"]
[Mon Apr 27 07:50:50.665428 2026] [:error] [pid 50951:tid 50964] [client 72.146.42.142:21840] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "ae6k2l2pquA9BEfFXTgX3QAAAUs"]
[Mon Apr 27 07:50:51.234686 2026] [:error] [pid 50951:tid 50971] [client 72.146.42.142:22018] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xml.php"] [unique_id "ae6k212pquA9BEfFXTgX4AAAAVI"]
[Mon Apr 27 07:50:51.777230 2026] [:error] [pid 50863:tid 50923] [client 72.146.42.142:22435] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xml.php"] [unique_id "ae6k23PaUAmshuFrBc8qyQAAAMQ"]
[Mon Apr 27 07:50:52.265864 2026] [:error] [pid 50951:tid 50977] [client 72.146.42.142:22465] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xml.php"] [unique_id "ae6k3F2pquA9BEfFXTgX6AAAAVg"]
[Mon Apr 27 07:50:52.746752 2026] [:error] [pid 50951:tid 50974] [client 72.146.42.142:22087] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xml.php"] [unique_id "ae6k3F2pquA9BEfFXTgX6wAAAVU"]
[Mon Apr 27 07:50:53.311622 2026] [:error] [pid 50861:tid 50874] [client 72.146.42.142:22345] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon3.php"] [unique_id "ae6k3WCmVQOCiCZfqR5evgAAAAk"]
[Mon Apr 27 07:50:53.797545 2026] [:error] [pid 50863:tid 50928] [client 72.146.42.142:22414] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon3.php"] [unique_id "ae6k3XPaUAmshuFrBc8qzAAAAMk"]
[Mon Apr 27 07:50:54.289470 2026] [:error] [pid 50951:tid 50956] [client 72.146.42.142:22520] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon3.php"] [unique_id "ae6k3l2pquA9BEfFXTgX7wAAAUM"]
[Mon Apr 27 07:50:54.789012 2026] [:error] [pid 50951:tid 50957] [client 72.146.42.142:22483] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/moon3.php"] [unique_id "ae6k3l2pquA9BEfFXTgX8wAAAUQ"]
[Mon Apr 27 07:50:55.289989 2026] [:error] [pid 50863:tid 50938] [client 72.146.42.142:22402] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ae6k33PaUAmshuFrBc8qzQAAANM"]
[Mon Apr 27 07:50:55.787800 2026] [:error] [pid 50863:tid 50921] [client 72.146.42.142:22468] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ae6k33PaUAmshuFrBc8qzwAAAMI"]
[Mon Apr 27 07:50:56.272414 2026] [:error] [pid 50951:tid 50968] [client 72.146.42.142:22413] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ae6k4F2pquA9BEfFXTgX9gAAAU8"]
[Mon Apr 27 07:50:56.964056 2026] [:error] [pid 50951:tid 50977] [client 72.146.42.142:22411] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "ae6k4F2pquA9BEfFXTgX-QAAAVg"]
[Mon Apr 27 07:50:57.471860 2026] [:error] [pid 50951:tid 50972] [client 72.146.42.142:22077] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ae6k4V2pquA9BEfFXTgX_AAAAVM"]
[Mon Apr 27 07:50:57.956618 2026] [:error] [pid 50862:tid 50902] [client 72.146.42.142:22051] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ae6k4UtKr9IOeW7InlW-6wAAAIo"]
[Mon Apr 27 07:50:58.474091 2026] [:error] [pid 50863:tid 50925] [client 72.146.42.142:22410] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ae6k4nPaUAmshuFrBc8q1AAAAMY"]
[Mon Apr 27 07:50:58.997426 2026] [:error] [pid 50861:tid 50883] [client 72.146.42.142:22020] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "ae6k4mCmVQOCiCZfqR5ewwAAABI"]
[Mon Apr 27 07:50:59.490764 2026] [:error] [pid 50862:tid 50904] [client 72.146.42.142:22476] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "ae6k40tKr9IOeW7InlW-7wAAAIw"]
[Mon Apr 27 07:51:00.013395 2026] [:error] [pid 50861:tid 50881] [client 72.146.42.142:22090] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "ae6k5GCmVQOCiCZfqR5exgAAABA"]
[Mon Apr 27 07:51:00.535036 2026] [:error] [pid 50861:tid 50887] [client 72.146.42.142:22518] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "ae6k5GCmVQOCiCZfqR5eyAAAABY"]
[Mon Apr 27 07:51:01.122617 2026] [:error] [pid 50863:tid 50921] [client 72.146.42.142:22183] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "ae6k5XPaUAmshuFrBc8q2gAAAMI"]
[Mon Apr 27 07:51:01.609632 2026] [:error] [pid 50951:tid 50973] [client 72.146.42.142:22089] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "ae6k5V2pquA9BEfFXTgYBQAAAVQ"]
[Mon Apr 27 07:51:02.136134 2026] [:error] [pid 50861:tid 50876] [client 72.146.42.142:22493] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "ae6k5mCmVQOCiCZfqR5eywAAAAs"]
[Mon Apr 27 07:51:02.653139 2026] [:error] [pid 50951:tid 50963] [client 72.146.42.142:22389] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "ae6k5l2pquA9BEfFXTgYCQAAAUo"]
[Mon Apr 27 07:51:03.155272 2026] [:error] [pid 50951:tid 50967] [client 72.146.42.142:22093] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "ae6k512pquA9BEfFXTgYCgAAAU4"]
[Mon Apr 27 07:51:03.689956 2026] [:error] [pid 50862:tid 50897] [client 72.146.42.142:22116] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "ae6k50tKr9IOeW7InlW-8AAAAIU"]
[Mon Apr 27 07:51:04.220249 2026] [:error] [pid 50863:tid 50928] [client 72.146.42.142:22516] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "ae6k6HPaUAmshuFrBc8q4QAAAMk"]
[Mon Apr 27 07:51:04.761195 2026] [:error] [pid 50861:tid 50882] [client 72.146.42.142:22057] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "ae6k6GCmVQOCiCZfqR5e0AAAABE"]
[Mon Apr 27 07:51:05.292604 2026] [:error] [pid 50951:tid 50963] [client 72.146.42.142:22510] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "ae6k6V2pquA9BEfFXTgYEgAAAUo"]
[Mon Apr 27 07:51:06.377991 2026] [:error] [pid 50861:tid 50880] [client 72.146.42.142:22491] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ae6k6mCmVQOCiCZfqR5e1AAAAA8"]
[Mon Apr 27 07:51:07.010109 2026] [:error] [pid 50861:tid 50867] [client 72.146.42.142:22475] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ae6k62CmVQOCiCZfqR5e1wAAAAI"]
[Mon Apr 27 07:51:07.618904 2026] [:error] [pid 50862:tid 50912] [client 72.146.42.142:22507] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ae6k60tKr9IOeW7InlW-9QAAAJQ"]
[Mon Apr 27 07:51:08.141592 2026] [:error] [pid 50862:tid 50900] [client 72.146.42.142:22141] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "ae6k7EtKr9IOeW7InlW-9wAAAIg"]
[Mon Apr 27 07:51:08.679293 2026] [:error] [pid 50862:tid 50902] [client 72.146.42.142:22524] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "ae6k7EtKr9IOeW7InlW--AAAAIo"]
[Mon Apr 27 07:51:09.189370 2026] [:error] [pid 50863:tid 50927] [client 72.146.42.142:22382] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "ae6k7XPaUAmshuFrBc8q5wAAAMg"]
[Mon Apr 27 07:51:09.742666 2026] [:error] [pid 50951:tid 50974] [client 72.146.42.142:22099] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "ae6k7V2pquA9BEfFXTgYHAAAAVU"]
[Mon Apr 27 07:51:10.261252 2026] [:error] [pid 50951:tid 50955] [client 72.146.42.142:22482] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "ae6k7l2pquA9BEfFXTgYHgAAAUI"]
[Mon Apr 27 07:51:10.865637 2026] [:error] [pid 50951:tid 50970] [client 72.146.42.142:22486] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "ae6k7l2pquA9BEfFXTgYIAAAAVE"]
[Mon Apr 27 07:51:11.408452 2026] [:error] [pid 50861:tid 50872] [client 72.146.42.142:22362] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "ae6k72CmVQOCiCZfqR5e3wAAAAc"]
[Mon Apr 27 07:51:12.074915 2026] [:error] [pid 50863:tid 50923] [client 72.146.42.142:22337] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "ae6k8HPaUAmshuFrBc8q6wAAAMQ"]
[Mon Apr 27 07:51:12.594027 2026] [:error] [pid 50951:tid 50959] [client 72.146.42.142:22200] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "ae6k8F2pquA9BEfFXTgYJwAAAUY"]
[Mon Apr 27 07:51:13.102336 2026] [:error] [pid 50951:tid 50972] [client 72.146.42.142:21868] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.1.php"] [unique_id "ae6k8V2pquA9BEfFXTgYKAAAAVM"]
[Mon Apr 27 07:51:13.902641 2026] [:error] [pid 50951:tid 50966] [client 72.146.42.142:22353] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.1.php"] [unique_id "ae6k8V2pquA9BEfFXTgYKgAAAU0"]
[Mon Apr 27 07:51:14.415575 2026] [:error] [pid 50951:tid 50961] [client 72.146.42.142:22336] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.1.php"] [unique_id "ae6k8l2pquA9BEfFXTgYLQAAAUg"]
[Mon Apr 27 07:51:15.039795 2026] [:error] [pid 50861:tid 50877] [client 72.146.42.142:22436] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.1.php"] [unique_id "ae6k82CmVQOCiCZfqR5e4wAAAAw"]
[Mon Apr 27 07:51:15.600765 2026] [:error] [pid 50861:tid 50869] [client 72.146.42.142:22429] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae6k82CmVQOCiCZfqR5e5wAAAAQ"]
[Mon Apr 27 07:51:16.175858 2026] [:error] [pid 50861:tid 50872] [client 72.146.42.142:22417] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae6k9GCmVQOCiCZfqR5e6gAAAAc"]
[Mon Apr 27 07:51:16.756705 2026] [:error] [pid 50951:tid 50960] [client 72.146.42.142:22439] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae6k9F2pquA9BEfFXTgYMQAAAUc"]
[Mon Apr 27 07:51:17.274062 2026] [:error] [pid 50951:tid 50962] [client 72.146.42.142:22102] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae6k9V2pquA9BEfFXTgYNAAAAUk"]
[Mon Apr 27 07:51:17.830125 2026] [:error] [pid 50861:tid 50875] [client 72.146.42.142:22039] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/academy.php"] [unique_id "ae6k9WCmVQOCiCZfqR5e8QAAAAo"]
[Mon Apr 27 07:51:18.408154 2026] [:error] [pid 50951:tid 50968] [client 72.146.42.142:22496] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/academy.php"] [unique_id "ae6k9l2pquA9BEfFXTgYNQAAAU8"]
[Mon Apr 27 07:51:19.060629 2026] [:error] [pid 50951:tid 50963] [client 72.146.42.142:22525] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/academy.php"] [unique_id "ae6k912pquA9BEfFXTgYOAAAAUo"]
[Mon Apr 27 07:51:19.575902 2026] [:error] [pid 50862:tid 50902] [client 72.146.42.142:22279] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/academy.php"] [unique_id "ae6k90tKr9IOeW7InlW_AAAAAIo"]
[Mon Apr 27 07:51:20.250835 2026] [:error] [pid 50861:tid 50879] [client 72.146.42.142:22459] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xml.php"] [unique_id "ae6k-GCmVQOCiCZfqR5e-QAAAA4"]
[Mon Apr 27 07:51:20.778971 2026] [:error] [pid 50861:tid 50880] [client 72.146.42.142:22508] [client 72.146.42.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xml.php"] [unique_id "ae6k-GCmVQOCiCZfqR5e-wAAAA8"]
[Mon Apr 27 07:51:21.427225 2026] [proxy_fcgi:error] [pid 50863:tid 50938] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:21.721122 2026] [proxy_fcgi:error] [pid 50863:tid 50931] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:21.967948 2026] [proxy_fcgi:error] [pid 50863:tid 50943] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:22.213123 2026] [proxy_fcgi:error] [pid 50863:tid 50924] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:22.451925 2026] [proxy_fcgi:error] [pid 50863:tid 50935] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:22.700709 2026] [proxy_fcgi:error] [pid 50863:tid 50926] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 07:51:22.938314 2026] [proxy_fcgi:error] [pid 50863:tid 50936] [client 72.146.42.142:22030] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:51:52.015089 2026] [:error] [pid 62511:tid 62580] [client 34.55.86.97:57550] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75eLBjE-jhU4FY4HhzYwAAAUY"]
[Tue Apr 28 05:53:10.021781 2026] [proxy_fcgi:error] [pid 14578:tid 14634] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:10.260746 2026] [proxy_fcgi:error] [pid 14578:tid 14618] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:10.498470 2026] [proxy_fcgi:error] [pid 14578:tid 14623] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:10.735729 2026] [proxy_fcgi:error] [pid 14578:tid 14635] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:10.972248 2026] [proxy_fcgi:error] [pid 14578:tid 14620] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:11.207817 2026] [proxy_fcgi:error] [pid 14578:tid 14637] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:11.444382 2026] [proxy_fcgi:error] [pid 14578:tid 14636] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:11.681287 2026] [proxy_fcgi:error] [pid 14578:tid 14631] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:11.920540 2026] [proxy_fcgi:error] [pid 14578:tid 14627] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:12.156925 2026] [proxy_fcgi:error] [pid 14578:tid 14630] [client 4.232.90.232:12996] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:53:12.390456 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:12996] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae_ayOngo3AwIJgfSHH9NwAAAEI"]
[Tue Apr 28 05:53:13.133006 2026] [:error] [pid 14579:tid 14659] [client 4.232.90.232:13018] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae_ayRrUiOG83qKKuuDucQAAAJM"]
[Tue Apr 28 05:53:13.650894 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:11942] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae_ayRrUiOG83qKKuuDucwAAAIg"]
[Tue Apr 28 05:53:14.285270 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:26206] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ae_ayhrUiOG83qKKuuDudAAAAJY"]
[Tue Apr 28 05:53:15.035994 2026] [:error] [pid 14579:tid 14653] [client 4.232.90.232:36539] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/77.php"] [unique_id "ae_ayxrUiOG83qKKuuDudQAAAI0"]
[Tue Apr 28 05:53:15.551886 2026] [:error] [pid 14686:tid 14701] [client 4.232.90.232:36512] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/77.php"] [unique_id "ae_ay--YPF1Xm7uiWQ4rYgAAAMw"]
[Tue Apr 28 05:53:16.156982 2026] [:error] [pid 14686:tid 14709] [client 4.232.90.232:12997] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/77.php"] [unique_id "ae_azO-YPF1Xm7uiWQ4rYwAAANQ"]
[Tue Apr 28 05:53:17.213591 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:62030] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/77.php"] [unique_id "ae_aze-YPF1Xm7uiWQ4rZQAAANI"]
[Tue Apr 28 05:53:17.900779 2026] [:error] [pid 14686:tid 14710] [client 4.232.90.232:26203] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ae_aze-YPF1Xm7uiWQ4rZwAAANU"]
[Tue Apr 28 05:53:18.504160 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:63402] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ae_azungo3AwIJgfSHH9PQAAAFc"]
[Tue Apr 28 05:53:19.069345 2026] [:error] [pid 14686:tid 14712] [client 4.232.90.232:11916] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ae_az--YPF1Xm7uiWQ4raAAAANc"]
[Tue Apr 28 05:53:19.711478 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:63368] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ae_azyzBH-jwzlgiBdGwBQAAAAc"]
[Tue Apr 28 05:53:20.365591 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:63378] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoko.php"] [unique_id "ae_a0Ongo3AwIJgfSHH9QAAAAFI"]
[Tue Apr 28 05:53:21.006903 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:7313] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoko.php"] [unique_id "ae_a0engo3AwIJgfSHH9QgAAAEg"]
[Tue Apr 28 05:53:21.735247 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:13053] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoko.php"] [unique_id "ae_a0fCwhMxzNW_lZSwwPQAAAQQ"]
[Tue Apr 28 05:53:22.406780 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:36510] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/zoko.php"] [unique_id "ae_a0vCwhMxzNW_lZSwwPgAAARg"]
[Tue Apr 28 05:53:22.978252 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:13055] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solo1.php"] [unique_id "ae_a0vCwhMxzNW_lZSwwPwAAARQ"]
[Tue Apr 28 05:53:23.486755 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:62019] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solo1.php"] [unique_id "ae_a0xrUiOG83qKKuuDudwAAAI4"]
[Tue Apr 28 05:53:24.273470 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:7317] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solo1.php"] [unique_id "ae_a1PCwhMxzNW_lZSwwQQAAAQs"]
[Tue Apr 28 05:53:24.926015 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:63397] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/solo1.php"] [unique_id "ae_a1PCwhMxzNW_lZSwwQwAAARE"]
[Tue Apr 28 05:53:25.511823 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:36540] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/locales.php"] [unique_id "ae_a1RrUiOG83qKKuuDueQAAAJY"]
[Tue Apr 28 05:53:26.136301 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:13023] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/locales.php"] [unique_id "ae_a1vCwhMxzNW_lZSwwRwAAAQk"]
[Tue Apr 28 05:53:26.759055 2026] [:error] [pid 14579:tid 14643] [client 4.232.90.232:13034] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/locales.php"] [unique_id "ae_a1hrUiOG83qKKuuDuegAAAIM"]
[Tue Apr 28 05:53:27.368638 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:63412] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/locales.php"] [unique_id "ae_a1_CwhMxzNW_lZSwwSQAAAQI"]
[Tue Apr 28 05:53:28.129829 2026] [:error] [pid 14686:tid 14701] [client 4.232.90.232:7348] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "ae_a2O-YPF1Xm7uiWQ4rcAAAAMw"]
[Tue Apr 28 05:53:28.652378 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:36498] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "ae_a2Ongo3AwIJgfSHH9VAAAAFU"]
[Tue Apr 28 05:53:29.174521 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:13025] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "ae_a2engo3AwIJgfSHH9VgAAAEM"]
[Tue Apr 28 05:53:29.732629 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:26222] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "ae_a2RrUiOG83qKKuuDufAAAAIo"]
[Tue Apr 28 05:53:30.393649 2026] [:error] [pid 14579:tid 14653] [client 4.232.90.232:13012] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "ae_a2hrUiOG83qKKuuDufQAAAI0"]
[Tue Apr 28 05:53:31.091017 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:13552] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "ae_a2_CwhMxzNW_lZSwwTgAAARg"]
[Tue Apr 28 05:53:31.601354 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:13521] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "ae_a2_CwhMxzNW_lZSwwTwAAAQ0"]
[Tue Apr 28 05:53:32.235058 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:13002] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "ae_a3BrUiOG83qKKuuDugAAAAI8"]
[Tue Apr 28 05:53:33.052064 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:26230] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_a3SzBH-jwzlgiBdGwDwAAAAc"]
[Tue Apr 28 05:53:33.630085 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:26182] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_a3RrUiOG83qKKuuDuggAAAJE"]
[Tue Apr 28 05:53:34.683291 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:7539] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_a3hrUiOG83qKKuuDuhgAAAJQ"]
[Tue Apr 28 05:53:35.829826 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:14998] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "ae_a3_CwhMxzNW_lZSwwUwAAARM"]
[Tue Apr 28 05:53:36.308526 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:13526] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "ae_a4Ongo3AwIJgfSHH9WgAAAFA"]
[Tue Apr 28 05:53:36.900966 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:13010] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "ae_a4Ongo3AwIJgfSHH9WwAAAEk"]
[Tue Apr 28 05:53:37.845628 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:63385] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "ae_a4engo3AwIJgfSHH9XgAAAE4"]
[Tue Apr 28 05:53:38.494513 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:63370] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "ae_a4ungo3AwIJgfSHH9YAAAAEg"]
[Tue Apr 28 05:53:39.068967 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:13039] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_a4-ngo3AwIJgfSHH9YgAAAFU"]
[Tue Apr 28 05:53:39.606453 2026] [:error] [pid 14578:tid 14632] [client 4.232.90.232:36484] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_a4-ngo3AwIJgfSHH9ZQAAAFM"]
[Tue Apr 28 05:53:40.134938 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:13022] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_a5PCwhMxzNW_lZSwwVQAAARI"]
[Tue Apr 28 05:53:40.649561 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:26234] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae_a5CzBH-jwzlgiBdGwEQAAAA0"]
[Tue Apr 28 05:53:41.237283 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:13561] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "ae_a5RrUiOG83qKKuuDuiQAAAJc"]
[Tue Apr 28 05:53:41.725787 2026] [:error] [pid 14686:tid 14691] [client 4.232.90.232:11960] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "ae_a5e-YPF1Xm7uiWQ4rcwAAAMI"]
[Tue Apr 28 05:53:42.286184 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:13050] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "ae_a5ungo3AwIJgfSHH9ZgAAAEU"]
[Tue Apr 28 05:53:42.789325 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:62057] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "ae_a5ungo3AwIJgfSHH9ZwAAAEo"]
[Tue Apr 28 05:53:43.297073 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:7333] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "ae_a5_CwhMxzNW_lZSwwVwAAAQ0"]
[Tue Apr 28 05:53:43.835974 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:33803] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "ae_a5_CwhMxzNW_lZSwwWAAAARQ"]
[Tue Apr 28 05:53:44.392931 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:13008] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "ae_a6O-YPF1Xm7uiWQ4rdQAAANg"]
[Tue Apr 28 05:53:44.939673 2026] [:error] [pid 56602:tid 56609] [client 4.232.90.232:62040] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "ae_a6PCwhMxzNW_lZSwwWQAAAQU"]
[Tue Apr 28 05:53:45.449212 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:36523] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no20.php"] [unique_id "ae_a6SzBH-jwzlgiBdGwFAAAAAY"]
[Tue Apr 28 05:53:46.091424 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:11939] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no20.php"] [unique_id "ae_a6hrUiOG83qKKuuDuiwAAAI8"]
[Tue Apr 28 05:53:46.614535 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:7309] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no20.php"] [unique_id "ae_a6izBH-jwzlgiBdGwFQAAAAE"]
[Tue Apr 28 05:53:47.246083 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:62021] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no20.php"] [unique_id "ae_a6--YPF1Xm7uiWQ4rewAAAMg"]
[Tue Apr 28 05:53:47.925230 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:36529] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "ae_a6--YPF1Xm7uiWQ4rfAAAANM"]
[Tue Apr 28 05:53:48.406142 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:26178] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "ae_a7PCwhMxzNW_lZSwwXQAAAQo"]
[Tue Apr 28 05:53:49.069852 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:33851] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "ae_a7fCwhMxzNW_lZSwwXgAAAQI"]
[Tue Apr 28 05:53:49.659708 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:12437] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasnu.php"] [unique_id "ae_a7fCwhMxzNW_lZSwwYQAAAQ4"]
[Tue Apr 28 05:53:50.461046 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:62035] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sl.php"] [unique_id "ae_a7vCwhMxzNW_lZSwwYgAAAQA"]
[Tue Apr 28 05:53:51.047125 2026] [:error] [pid 14577:tid 14603] [client 4.232.90.232:36515] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sl.php"] [unique_id "ae_a7yzBH-jwzlgiBdGwGgAAABE"]
[Tue Apr 28 05:53:51.608601 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:7320] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sl.php"] [unique_id "ae_a7_CwhMxzNW_lZSwwZAAAARI"]
[Tue Apr 28 05:53:52.156572 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:12994] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sl.php"] [unique_id "ae_a8BrUiOG83qKKuuDulgAAAJY"]
[Tue Apr 28 05:53:52.675102 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:7312] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "ae_a8PCwhMxzNW_lZSwwZgAAAQw"]
[Tue Apr 28 05:53:53.175970 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:12423] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "ae_a8fCwhMxzNW_lZSwwZwAAAQQ"]
[Tue Apr 28 05:53:53.890936 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:11915] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "ae_a8engo3AwIJgfSHH9aAAAAFg"]
[Tue Apr 28 05:53:54.417742 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:36481] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "ae_a8vCwhMxzNW_lZSwwbQAAARc"]
[Tue Apr 28 05:53:54.938622 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:13052] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "ae_a8vCwhMxzNW_lZSwwcAAAAQk"]
[Tue Apr 28 05:53:55.499135 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:36488] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "ae_a8xrUiOG83qKKuuDumgAAAJg"]
[Tue Apr 28 05:53:56.061274 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:26221] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "ae_a9BrUiOG83qKKuuDumwAAAJc"]
[Tue Apr 28 05:53:56.613414 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:13531] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "ae_a9BrUiOG83qKKuuDunAAAAJE"]
[Tue Apr 28 05:53:57.169940 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:7326] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_a9fCwhMxzNW_lZSwwdgAAARc"]
[Tue Apr 28 05:53:57.783702 2026] [:error] [pid 14579:tid 14651] [client 4.232.90.232:13563] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_a9RrUiOG83qKKuuDunQAAAIs"]
[Tue Apr 28 05:53:58.305716 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:26229] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_a9vCwhMxzNW_lZSwwdwAAAQk"]
[Tue Apr 28 05:53:58.788685 2026] [:error] [pid 14579:tid 14644] [client 4.232.90.232:11935] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae_a9hrUiOG83qKKuuDungAAAIQ"]
[Tue Apr 28 05:53:59.324299 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:13513] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_a9yzBH-jwzlgiBdGwGwAAABM"]
[Tue Apr 28 05:53:59.995175 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:13000] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_a9-ngo3AwIJgfSHH9aQAAAEk"]
[Tue Apr 28 05:54:00.602747 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:26204] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_a-CzBH-jwzlgiBdGwHAAAAAw"]
[Tue Apr 28 05:54:01.144635 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:13543] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae_a-RrUiOG83qKKuuDunwAAAIg"]
[Tue Apr 28 05:54:01.850844 2026] [:error] [pid 14579:tid 14659] [client 4.232.90.232:13566] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "ae_a-RrUiOG83qKKuuDuoAAAAJM"]
[Tue Apr 28 05:54:02.340287 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:63392] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "ae_a-hrUiOG83qKKuuDuoQAAAIY"]
[Tue Apr 28 05:54:03.068714 2026] [:error] [pid 14686:tid 14710] [client 4.232.90.232:62017] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "ae_a---YPF1Xm7uiWQ4rggAAANU"]
[Tue Apr 28 05:54:03.619633 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:7345] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "ae_a-_CwhMxzNW_lZSwwewAAAQs"]
[Tue Apr 28 05:54:04.226007 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:36536] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "ae_a_O-YPF1Xm7uiWQ4rhAAAAMo"]
[Tue Apr 28 05:54:04.760775 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:63399] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "ae_a_PCwhMxzNW_lZSwwfQAAAQA"]
[Tue Apr 28 05:54:05.327906 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:36495] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "ae_a_RrUiOG83qKKuuDupAAAAJY"]
[Tue Apr 28 05:54:06.090585 2026] [:error] [pid 14577:tid 14606] [client 4.232.90.232:13535] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "ae_a_izBH-jwzlgiBdGwHQAAABQ"]
[Tue Apr 28 05:54:07.095104 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:63400] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "ae_a_--YPF1Xm7uiWQ4rhgAAANg"]
[Tue Apr 28 05:54:07.650999 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:26215] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "ae_a_-ngo3AwIJgfSHH9awAAAEc"]
[Tue Apr 28 05:54:08.224771 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:11918] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "ae_bACzBH-jwzlgiBdGwHgAAAAs"]
[Tue Apr 28 05:54:08.750355 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:11906] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "ae_bACzBH-jwzlgiBdGwHwAAAAg"]
[Tue Apr 28 05:54:09.391895 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:7320] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "ae_bAe-YPF1Xm7uiWQ4riAAAAMs"]
[Tue Apr 28 05:54:09.934813 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:11933] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "ae_bAe-YPF1Xm7uiWQ4riwAAAMg"]
[Tue Apr 28 05:54:10.838787 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:7321] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "ae_bAungo3AwIJgfSHH9bQAAAEg"]
[Tue Apr 28 05:54:11.420523 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:7331] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "ae_bA-ngo3AwIJgfSHH9bwAAAFQ"]
[Tue Apr 28 05:54:11.959865 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:62066] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "ae_bA_CwhMxzNW_lZSwwfwAAAQw"]
[Tue Apr 28 05:54:12.486962 2026] [proxy_fcgi:error] [pid 14578:tid 14630] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:12.723345 2026] [proxy_fcgi:error] [pid 14578:tid 14628] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:12.967724 2026] [proxy_fcgi:error] [pid 14578:tid 14615] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:13.229868 2026] [proxy_fcgi:error] [pid 14578:tid 14634] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:13.467987 2026] [proxy_fcgi:error] [pid 14578:tid 14632] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:13.954678 2026] [proxy_fcgi:error] [pid 14578:tid 14613] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:14.191203 2026] [proxy_fcgi:error] [pid 14578:tid 14619] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:14.427545 2026] [proxy_fcgi:error] [pid 14578:tid 14626] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:14.675270 2026] [proxy_fcgi:error] [pid 14578:tid 14624] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:14.927513 2026] [proxy_fcgi:error] [pid 14578:tid 14625] [client 4.232.90.232:11936] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:54:15.177139 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:11936] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "ae_bB-ngo3AwIJgfSHH9ewAAAFY"]
[Tue Apr 28 05:54:15.809096 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:37581] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "ae_bB_CwhMxzNW_lZSwwgQAAARA"]
[Tue Apr 28 05:54:16.329077 2026] [:error] [pid 14579:tid 14651] [client 4.232.90.232:36531] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "ae_bCBrUiOG83qKKuuDurAAAAIs"]
[Tue Apr 28 05:54:16.820768 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:33811] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "ae_bCOngo3AwIJgfSHH9fwAAAE4"]
[Tue Apr 28 05:54:17.387674 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:33834] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ae_bCengo3AwIJgfSHH9gAAAAFI"]
[Tue Apr 28 05:54:17.894649 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:63396] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ae_bCengo3AwIJgfSHH9ggAAAEQ"]
[Tue Apr 28 05:54:18.367606 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:13020] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ae_bCizBH-jwzlgiBdGwIgAAAAo"]
[Tue Apr 28 05:54:18.930359 2026] [:error] [pid 14579:tid 14659] [client 4.232.90.232:63389] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ae_bChrUiOG83qKKuuDurQAAAJM"]
[Tue Apr 28 05:54:19.539368 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:13539] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ae_bCxrUiOG83qKKuuDurwAAAI4"]
[Tue Apr 28 05:54:20.029160 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:63406] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ae_bDBrUiOG83qKKuuDusAAAAJY"]
[Tue Apr 28 05:54:20.541662 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:11908] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ae_bDBrUiOG83qKKuuDusQAAAIk"]
[Tue Apr 28 05:54:21.030962 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:7529] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "ae_bDfCwhMxzNW_lZSwwhQAAARU"]
[Tue Apr 28 05:54:21.544809 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:63384] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ae_bDSzBH-jwzlgiBdGwJwAAABc"]
[Tue Apr 28 05:54:22.182780 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:36500] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ae_bDu-YPF1Xm7uiWQ4rkAAAAMo"]
[Tue Apr 28 05:54:22.698108 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:62036] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ae_bDizBH-jwzlgiBdGwKgAAAAA"]
[Tue Apr 28 05:54:23.171930 2026] [:error] [pid 14578:tid 14616] [client 4.232.90.232:14977] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "ae_bD-ngo3AwIJgfSHH9hAAAAEM"]
[Tue Apr 28 05:54:23.687323 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:62036] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ae_bD_CwhMxzNW_lZSwwhgAAARM"]
[Tue Apr 28 05:54:24.201686 2026] [:error] [pid 14686:tid 14703] [client 4.232.90.232:11913] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ae_bEO-YPF1Xm7uiWQ4rkgAAAM4"]
[Tue Apr 28 05:54:24.689839 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:13035] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ae_bEPCwhMxzNW_lZSwwiQAAARg"]
[Tue Apr 28 05:54:25.221454 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:63390] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/awa.php"] [unique_id "ae_bESzBH-jwzlgiBdGwLgAAABA"]
[Tue Apr 28 05:54:25.867900 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:13516] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae_bEfCwhMxzNW_lZSwwjAAAAQg"]
[Tue Apr 28 05:54:26.395033 2026] [:error] [pid 14578:tid 14619] [client 4.232.90.232:12472] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae_bEungo3AwIJgfSHH9hgAAAEY"]
[Tue Apr 28 05:54:26.894117 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:11945] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae_bEungo3AwIJgfSHH9hwAAAE0"]
[Tue Apr 28 05:54:27.389493 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:36541] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "ae_bE-ngo3AwIJgfSHH9iAAAAEU"]
[Tue Apr 28 05:54:27.860447 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:12999] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ae_bE-ngo3AwIJgfSHH9iQAAAEs"]
[Tue Apr 28 05:54:28.523751 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:11947] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ae_bFOngo3AwIJgfSHH9igAAAEo"]
[Tue Apr 28 05:54:29.047847 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:12458] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ae_bFe-YPF1Xm7uiWQ4rlAAAAMQ"]
[Tue Apr 28 05:54:29.540426 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:63393] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "ae_bFSzBH-jwzlgiBdGwLwAAAAE"]
[Tue Apr 28 05:54:30.023354 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:26214] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ae_bFhrUiOG83qKKuuDuswAAAJg"]
[Tue Apr 28 05:54:30.738091 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:13529] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ae_bFhrUiOG83qKKuuDutAAAAIo"]
[Tue Apr 28 05:54:31.350155 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:63410] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ae_bF--YPF1Xm7uiWQ4rlQAAAMk"]
[Tue Apr 28 05:54:31.932894 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:13527] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ae_bF_CwhMxzNW_lZSwwjgAAAQY"]
[Tue Apr 28 05:54:33.002779 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:26213] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ae_bGSzBH-jwzlgiBdGwMQAAABg"]
[Tue Apr 28 05:54:33.842873 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:7519] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ae_bGSzBH-jwzlgiBdGwMgAAAAM"]
[Tue Apr 28 05:54:34.587419 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:36522] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ae_bGizBH-jwzlgiBdGwMwAAABc"]
[Tue Apr 28 05:54:35.246015 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:13051] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ae_bG--YPF1Xm7uiWQ4rlgAAAMg"]
[Tue Apr 28 05:54:35.783151 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:36493] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_bG--YPF1Xm7uiWQ4rmAAAANY"]
[Tue Apr 28 05:54:36.540698 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:13564] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_bHBrUiOG83qKKuuDuuAAAAI8"]
[Tue Apr 28 05:54:37.165934 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:11924] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_bHengo3AwIJgfSHH9jQAAAEQ"]
[Tue Apr 28 05:54:38.023945 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:62055] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae_bHizBH-jwzlgiBdGwOQAAABA"]
[Tue Apr 28 05:54:38.616353 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:62022] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ae_bHungo3AwIJgfSHH9jgAAAFA"]
[Tue Apr 28 05:54:39.478228 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:63364] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ae_bH-ngo3AwIJgfSHH9kAAAAEE"]
[Tue Apr 28 05:54:40.484787 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:11951] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ae_bIO-YPF1Xm7uiWQ4rmgAAANM"]
[Tue Apr 28 05:54:41.262799 2026] [:error] [pid 14577:tid 14607] [client 4.232.90.232:13011] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "ae_bISzBH-jwzlgiBdGwOwAAABU"]
[Tue Apr 28 05:54:41.837932 2026] [:error] [pid 14577:tid 14587] [client 4.232.90.232:13021] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ae_bISzBH-jwzlgiBdGwPQAAAAE"]
[Tue Apr 28 05:54:42.672958 2026] [:error] [pid 14686:tid 14706] [client 4.232.90.232:16525] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ae_bIu-YPF1Xm7uiWQ4rmwAAANE"]
[Tue Apr 28 05:54:43.438657 2026] [:error] [pid 14686:tid 14701] [client 4.232.90.232:13518] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ae_bI--YPF1Xm7uiWQ4rnAAAAMw"]
[Tue Apr 28 05:54:44.198673 2026] [:error] [pid 14579:tid 14653] [client 4.232.90.232:63381] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "ae_bJBrUiOG83qKKuuDuugAAAI0"]
[Tue Apr 28 05:54:44.912430 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:11963] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ae_bJBrUiOG83qKKuuDuvAAAAIY"]
[Tue Apr 28 05:54:45.595503 2026] [:error] [pid 14579:tid 14660] [client 4.232.90.232:11943] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ae_bJRrUiOG83qKKuuDuvwAAAJQ"]
[Tue Apr 28 05:54:46.195006 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:33815] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ae_bJvCwhMxzNW_lZSwwkAAAAQI"]
[Tue Apr 28 05:54:46.839842 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:13551] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "ae_bJvCwhMxzNW_lZSwwkQAAARU"]
[Tue Apr 28 05:54:47.582739 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:16540] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ae_bJ_CwhMxzNW_lZSwwkwAAARY"]
[Tue Apr 28 05:54:48.400454 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:63374] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ae_bKPCwhMxzNW_lZSwwlQAAAQ8"]
[Tue Apr 28 05:54:49.187562 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:12436] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ae_bKfCwhMxzNW_lZSwwlwAAAQ4"]
[Tue Apr 28 05:54:49.965102 2026] [:error] [pid 14577:tid 14601] [client 4.232.90.232:16526] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "ae_bKSzBH-jwzlgiBdGwRwAAAA8"]
[Tue Apr 28 05:54:50.701098 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:16546] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ae_bKvCwhMxzNW_lZSwwmQAAAQg"]
[Tue Apr 28 05:54:51.597278 2026] [:error] [pid 14686:tid 14705] [client 4.232.90.232:63360] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ae_bK--YPF1Xm7uiWQ4roAAAANA"]
[Tue Apr 28 05:54:52.301482 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:62060] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ae_bLPCwhMxzNW_lZSwwmwAAAQk"]
[Tue Apr 28 05:54:53.820164 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:26202] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "ae_bLRrUiOG83qKKuuDuwgAAAIo"]
[Tue Apr 28 05:54:54.852864 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:16556] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ae_bLhrUiOG83qKKuuDuwwAAAIw"]
[Tue Apr 28 05:54:55.820650 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:13519] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ae_bLxrUiOG83qKKuuDuxAAAAII"]
[Tue Apr 28 05:54:56.401058 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:11928] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ae_bMPCwhMxzNW_lZSwwnwAAARY"]
[Tue Apr 28 05:54:57.097299 2026] [:error] [pid 14686:tid 14689] [client 4.232.90.232:16572] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "ae_bMe-YPF1Xm7uiWQ4roQAAAMA"]
[Tue Apr 28 05:54:57.740132 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:36502] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ae_bMfCwhMxzNW_lZSwwoQAAARM"]
[Tue Apr 28 05:54:58.679012 2026] [:error] [pid 14578:tid 14623] [client 4.232.90.232:36513] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ae_bMungo3AwIJgfSHH9lgAAAEo"]
[Tue Apr 28 05:55:00.105311 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:62033] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ae_bNO-YPF1Xm7uiWQ4rogAAAMk"]
[Tue Apr 28 05:55:00.740727 2026] [:error] [pid 14578:tid 14622] [client 4.232.90.232:63395] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "ae_bNOngo3AwIJgfSHH9mAAAAEk"]
[Tue Apr 28 05:55:01.448801 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:11283] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ae_bNengo3AwIJgfSHH9mQAAAFc"]
[Tue Apr 28 05:55:02.103202 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:36538] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ae_bNhrUiOG83qKKuuDuywAAAIY"]
[Tue Apr 28 05:55:02.734604 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:11326] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ae_bNvCwhMxzNW_lZSwwqgAAAQo"]
[Tue Apr 28 05:55:03.287513 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:16544] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "ae_bNxrUiOG83qKKuuDuzAAAAJY"]
[Tue Apr 28 05:55:03.886914 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:26211] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ae_bN_CwhMxzNW_lZSwwrAAAAQI"]
[Tue Apr 28 05:55:04.477439 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:16530] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ae_bOPCwhMxzNW_lZSwwrgAAARU"]
[Tue Apr 28 05:55:05.058966 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:11297] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ae_bOfCwhMxzNW_lZSwwrwAAARM"]
[Tue Apr 28 05:55:05.654846 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:13038] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "ae_bOe-YPF1Xm7uiWQ4rpAAAAMs"]
[Tue Apr 28 05:55:06.345699 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:15033] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ae_bOungo3AwIJgfSHH9mgAAAE4"]
[Tue Apr 28 05:55:06.847517 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:62016] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ae_bOu-YPF1Xm7uiWQ4rpQAAANY"]
[Tue Apr 28 05:55:07.524963 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:36453] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ae_bO-ngo3AwIJgfSHH9mwAAAFI"]
[Tue Apr 28 05:55:08.079934 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:16551] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "ae_bPOngo3AwIJgfSHH9nAAAAFA"]
[Tue Apr 28 05:55:08.671765 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:16527] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ae_bPBrUiOG83qKKuuDu0AAAAII"]
[Tue Apr 28 05:55:09.173805 2026] [:error] [pid 14579:tid 14655] [client 4.232.90.232:36436] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ae_bPRrUiOG83qKKuuDu0gAAAI8"]
[Tue Apr 28 05:55:09.767448 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:33845] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ae_bPRrUiOG83qKKuuDu0wAAAIE"]
[Tue Apr 28 05:55:10.268035 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:36538] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "ae_bPhrUiOG83qKKuuDu1QAAAJc"]
[Tue Apr 28 05:55:10.880030 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:11937] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ae_bPu-YPF1Xm7uiWQ4rpwAAANM"]
[Tue Apr 28 05:55:11.361488 2026] [:error] [pid 14686:tid 14694] [client 4.232.90.232:11314] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ae_bP--YPF1Xm7uiWQ4rqAAAAMU"]
[Tue Apr 28 05:55:11.881519 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:36422] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ae_bP_CwhMxzNW_lZSwwtAAAARc"]
[Tue Apr 28 05:55:12.456496 2026] [:error] [pid 14577:tid 14591] [client 4.232.90.232:11932] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "ae_bQCzBH-jwzlgiBdGwTgAAAAU"]
[Tue Apr 28 05:55:12.981479 2026] [:error] [pid 14686:tid 14709] [client 4.232.90.232:11318] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ae_bQO-YPF1Xm7uiWQ4rqgAAANQ"]
[Tue Apr 28 05:55:13.456361 2026] [:error] [pid 14579:tid 14648] [client 4.232.90.232:36446] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ae_bQRrUiOG83qKKuuDu1wAAAIg"]
[Tue Apr 28 05:55:13.928513 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:63386] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "ae_bQfCwhMxzNW_lZSwwtQAAAQc"]
[Tue Apr 28 05:55:14.407160 2026] [proxy_fcgi:error] [pid 56602:tid 56620] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:14.644954 2026] [proxy_fcgi:error] [pid 56602:tid 56613] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:15.154301 2026] [proxy_fcgi:error] [pid 56602:tid 56610] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:15.402141 2026] [proxy_fcgi:error] [pid 56602:tid 56606] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:15.636337 2026] [proxy_fcgi:error] [pid 56602:tid 56625] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:15.873715 2026] [proxy_fcgi:error] [pid 56602:tid 56623] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:16.210558 2026] [proxy_fcgi:error] [pid 56602:tid 56617] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:16.447163 2026] [proxy_fcgi:error] [pid 56602:tid 56618] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:16.830078 2026] [proxy_fcgi:error] [pid 56602:tid 56615] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:17.067773 2026] [proxy_fcgi:error] [pid 56602:tid 56626] [client 4.232.90.232:11949] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:55:17.300552 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:11949] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ae_bRfCwhMxzNW_lZSwwwgAAAQM"]
[Tue Apr 28 05:55:17.864564 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:36462] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ae_bRfCwhMxzNW_lZSwwxQAAAQg"]
[Tue Apr 28 05:55:18.576591 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:11854] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ae_bRu-YPF1Xm7uiWQ4rrQAAANI"]
[Tue Apr 28 05:55:19.163521 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:11897] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "ae_bR_CwhMxzNW_lZSwwxwAAAQw"]
[Tue Apr 28 05:55:19.907684 2026] [:error] [pid 56602:tid 56622] [client 4.232.90.232:15573] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ae_bR_CwhMxzNW_lZSwwyAAAARI"]
[Tue Apr 28 05:55:20.403707 2026] [:error] [pid 56602:tid 56605] [client 4.232.90.232:63312] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ae_bSPCwhMxzNW_lZSwwygAAAQE"]
[Tue Apr 28 05:55:20.876890 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:63314] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ae_bSPCwhMxzNW_lZSwwywAAAQc"]
[Tue Apr 28 05:55:21.443457 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:40567] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inege.php"] [unique_id "ae_bSfCwhMxzNW_lZSwwzwAAAQY"]
[Tue Apr 28 05:55:22.090714 2026] [:error] [pid 14577:tid 14604] [client 4.232.90.232:40556] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ae_bSizBH-jwzlgiBdGwUgAAABI"]
[Tue Apr 28 05:55:22.672932 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:11889] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ae_bSvCwhMxzNW_lZSww0QAAARU"]
[Tue Apr 28 05:55:23.173856 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:11716] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ae_bS_CwhMxzNW_lZSww0gAAARM"]
[Tue Apr 28 05:55:23.678261 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:63324] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uuu.php"] [unique_id "ae_bS_CwhMxzNW_lZSww0wAAAQ0"]
[Tue Apr 28 05:55:24.210200 2026] [:error] [pid 14579:tid 14658] [client 4.232.90.232:11860] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ae_bTBrUiOG83qKKuuDu3QAAAJI"]
[Tue Apr 28 05:55:24.691860 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:11761] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ae_bTBrUiOG83qKKuuDu3gAAAIo"]
[Tue Apr 28 05:55:25.272324 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:22682] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ae_bTRrUiOG83qKKuuDu4AAAAJg"]
[Tue Apr 28 05:55:25.795986 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:22681] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ae_bTfCwhMxzNW_lZSww1gAAARQ"]
[Tue Apr 28 05:55:26.297689 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:18156] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ae_bTvCwhMxzNW_lZSww1wAAAQw"]
[Tue Apr 28 05:55:26.814585 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:63325] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ae_bTungo3AwIJgfSHH9pAAAAEw"]
[Tue Apr 28 05:55:27.358970 2026] [:error] [pid 14578:tid 14635] [client 4.232.90.232:11857] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ae_bT-ngo3AwIJgfSHH9pgAAAFY"]
[Tue Apr 28 05:55:27.869765 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:7239] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/w2025.php"] [unique_id "ae_bT_CwhMxzNW_lZSww2wAAARA"]
[Tue Apr 28 05:55:28.421957 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:18133] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ae_bUPCwhMxzNW_lZSww3gAAAQ0"]
[Tue Apr 28 05:55:28.894849 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:63359] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ae_bUPCwhMxzNW_lZSww4wAAAQM"]
[Tue Apr 28 05:55:29.419037 2026] [:error] [pid 56602:tid 56604] [client 4.232.90.232:18139] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ae_bUfCwhMxzNW_lZSww6QAAAQA"]
[Tue Apr 28 05:55:29.968541 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:42414] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "ae_bURrUiOG83qKKuuDu5AAAAJE"]
[Tue Apr 28 05:55:30.466570 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:18114] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ae_bUungo3AwIJgfSHH9pwAAAFA"]
[Tue Apr 28 05:55:30.947283 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:34824] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ae_bUvCwhMxzNW_lZSww7gAAARA"]
[Tue Apr 28 05:55:31.477976 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:11423] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ae_bU-ngo3AwIJgfSHH9qAAAAEE"]
[Tue Apr 28 05:55:32.006775 2026] [:error] [pid 14579:tid 14654] [client 4.232.90.232:18158] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a2.php"] [unique_id "ae_bVBrUiOG83qKKuuDu6AAAAI4"]
[Tue Apr 28 05:55:32.499307 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:18171] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae_bVPCwhMxzNW_lZSww8AAAARM"]
[Tue Apr 28 05:55:33.139867 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:34847] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae_bVRrUiOG83qKKuuDu6gAAAIk"]
[Tue Apr 28 05:55:33.669685 2026] [:error] [pid 56602:tid 56607] [client 4.232.90.232:7294] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae_bVfCwhMxzNW_lZSww8wAAAQM"]
[Tue Apr 28 05:55:34.207067 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:17133] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "ae_bVhrUiOG83qKKuuDu6wAAAJA"]
[Tue Apr 28 05:55:35.425375 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:11424] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_bVyzBH-jwzlgiBdGwVAAAAAY"]
[Tue Apr 28 05:55:35.951884 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:18143] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_bVxrUiOG83qKKuuDu7QAAAJg"]
[Tue Apr 28 05:55:36.440663 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:11416] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_bWO-YPF1Xm7uiWQ4rsAAAAME"]
[Tue Apr 28 05:55:37.086857 2026] [:error] [pid 14686:tid 14694] [client 4.232.90.232:41416] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "ae_bWe-YPF1Xm7uiWQ4rtQAAAMU"]
[Tue Apr 28 05:55:37.557652 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:11420] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_bWengo3AwIJgfSHH9qQAAAEc"]
[Tue Apr 28 05:55:38.213589 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:34879] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_bWvCwhMxzNW_lZSww_AAAARg"]
[Tue Apr 28 05:55:38.729105 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:18127] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_bWu-YPF1Xm7uiWQ4rwgAAAMQ"]
[Tue Apr 28 05:55:39.251477 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:34853] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_bW--YPF1Xm7uiWQ4rxQAAAME"]
[Tue Apr 28 05:55:39.765762 2026] [:error] [pid 14686:tid 14698] [client 4.232.90.232:11740] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ae_bW--YPF1Xm7uiWQ4rxgAAAMk"]
[Tue Apr 28 05:55:40.531960 2026] [:error] [pid 56602:tid 56608] [client 4.232.90.232:7246] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ae_bXPCwhMxzNW_lZSwxAAAAAQQ"]
[Tue Apr 28 05:55:41.081561 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:11713] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ae_bXRrUiOG83qKKuuDu-gAAAIY"]
[Tue Apr 28 05:55:41.687904 2026] [:error] [pid 14579:tid 14661] [client 4.232.90.232:17138] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "ae_bXRrUiOG83qKKuuDu_AAAAJU"]
[Tue Apr 28 05:55:42.203951 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:11432] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ae_bXhrUiOG83qKKuuDu_QAAAJA"]
[Tue Apr 28 05:55:42.757907 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:34825] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ae_bXvCwhMxzNW_lZSwxAQAAAQg"]
[Tue Apr 28 05:55:43.262273 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:41470] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ae_bX_CwhMxzNW_lZSwxAgAAARU"]
[Tue Apr 28 05:55:43.774574 2026] [:error] [pid 14686:tid 14697] [client 4.232.90.232:34841] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ae_bX--YPF1Xm7uiWQ4ryAAAAMg"]
[Tue Apr 28 05:55:44.360563 2026] [:error] [pid 14577:tid 14610] [client 4.232.90.232:11415] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ae_bYCzBH-jwzlgiBdGwVQAAABg"]
[Tue Apr 28 05:55:44.934546 2026] [:error] [pid 14577:tid 14589] [client 4.232.90.232:7245] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ae_bYCzBH-jwzlgiBdGwVgAAAAM"]
[Tue Apr 28 05:55:45.533457 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:63305] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ae_bYSzBH-jwzlgiBdGwVwAAAAA"]
[Tue Apr 28 05:55:46.039836 2026] [:error] [pid 14578:tid 14628] [client 4.232.90.232:18118] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "ae_bYungo3AwIJgfSHH9rwAAAE8"]
[Tue Apr 28 05:55:46.719968 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:41434] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ae_bYungo3AwIJgfSHH9sAAAAFE"]
[Tue Apr 28 05:55:47.212159 2026] [:error] [pid 56602:tid 56609] [client 4.232.90.232:11714] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ae_bY_CwhMxzNW_lZSwxDwAAAQU"]
[Tue Apr 28 05:55:47.681535 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:11443] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ae_bY-ngo3AwIJgfSHH9sgAAAEA"]
[Tue Apr 28 05:55:48.196800 2026] [:error] [pid 14579:tid 14647] [client 4.232.90.232:11735] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ae_bZBrUiOG83qKKuuDvBQAAAIc"]
[Tue Apr 28 05:55:48.662290 2026] [:error] [pid 14686:tid 14706] [client 4.232.90.232:11729] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ae_bZO-YPF1Xm7uiWQ4ryQAAANE"]
[Tue Apr 28 05:55:49.216473 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:7234] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ae_bZfCwhMxzNW_lZSwxEAAAARE"]
[Tue Apr 28 05:55:49.758863 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:18148] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ae_bZengo3AwIJgfSHH9swAAAEU"]
[Tue Apr 28 05:55:50.331391 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:17130] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "ae_bZungo3AwIJgfSHH9tAAAAE0"]
[Tue Apr 28 05:55:50.950250 2026] [:error] [pid 14578:tid 14627] [client 4.232.90.232:11719] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_bZungo3AwIJgfSHH9tQAAAE4"]
[Tue Apr 28 05:55:51.618087 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:34858] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_bZ_CwhMxzNW_lZSwxEQAAAQ0"]
[Tue Apr 28 05:55:52.209669 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:41448] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_baPCwhMxzNW_lZSwxFAAAAQw"]
[Tue Apr 28 05:55:52.944825 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:41419] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_baPCwhMxzNW_lZSwxFgAAAQ8"]
[Tue Apr 28 05:55:53.486371 2026] [:error] [pid 14686:tid 14696] [client 4.232.90.232:37161] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_bae-YPF1Xm7uiWQ4rywAAAMc"]
[Tue Apr 28 05:55:54.043500 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:17092] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_bau-YPF1Xm7uiWQ4rzAAAANI"]
[Tue Apr 28 05:55:54.657610 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:7249] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_bavCwhMxzNW_lZSwxGAAAAQc"]
[Tue Apr 28 05:55:55.413277 2026] [:error] [pid 14579:tid 14649] [client 4.232.90.232:11418] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ae_baxrUiOG83qKKuuDvCAAAAIk"]
[Tue Apr 28 05:55:56.023135 2026] [:error] [pid 56602:tid 56606] [client 4.232.90.232:18151] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae_bbPCwhMxzNW_lZSwxHwAAAQI"]
[Tue Apr 28 05:55:56.798633 2026] [:error] [pid 14686:tid 14703] [client 4.232.90.232:7243] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae_bbO-YPF1Xm7uiWQ4r0AAAAM4"]
[Tue Apr 28 05:55:57.279045 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:37181] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae_bbe-YPF1Xm7uiWQ4r0gAAAMQ"]
[Tue Apr 28 05:55:57.895717 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:37166] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "ae_bbfCwhMxzNW_lZSwxIQAAARM"]
[Tue Apr 28 05:55:58.708714 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:34854] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_bbvCwhMxzNW_lZSwxIwAAAQk"]
[Tue Apr 28 05:55:59.197647 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:37126] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_bbyzBH-jwzlgiBdGwWQAAABc"]
[Tue Apr 28 05:55:59.720864 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:11450] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_bb_CwhMxzNW_lZSwxJQAAAQw"]
[Tue Apr 28 05:56:00.386935 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:41435] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ae_bcO-YPF1Xm7uiWQ4r0wAAAMs"]
[Tue Apr 28 05:56:00.892453 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:18135] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_bcO-YPF1Xm7uiWQ4r1AAAAME"]
[Tue Apr 28 05:56:01.433408 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:18150] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_bcSzBH-jwzlgiBdGwXAAAAAs"]
[Tue Apr 28 05:56:01.958050 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:11419] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_bcRrUiOG83qKKuuDvCQAAAJY"]
[Tue Apr 28 05:56:02.469904 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:34851] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ae_bchrUiOG83qKKuuDvCgAAAJA"]
[Tue Apr 28 05:56:02.965844 2026] [:error] [pid 14578:tid 14629] [client 4.232.90.232:41413] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ae_bcungo3AwIJgfSHH9twAAAFA"]
[Tue Apr 28 05:56:03.539014 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:11768] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ae_bc-ngo3AwIJgfSHH9uAAAAEE"]
[Tue Apr 28 05:56:04.076667 2026] [:error] [pid 14686:tid 14706] [client 4.232.90.232:17093] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ae_bdO-YPF1Xm7uiWQ4r2AAAANE"]
[Tue Apr 28 05:56:04.598059 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:11399] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "ae_bdOngo3AwIJgfSHH9uQAAAEc"]
[Tue Apr 28 05:56:05.155580 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:17111] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae_bdRrUiOG83qKKuuDvCwAAAJc"]
[Tue Apr 28 05:56:05.672036 2026] [:error] [pid 14578:tid 14617] [client 4.232.90.232:11888] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae_bdengo3AwIJgfSHH9ugAAAEQ"]
[Tue Apr 28 05:56:06.281930 2026] [:error] [pid 14577:tid 14594] [client 4.232.90.232:15607] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae_bdizBH-jwzlgiBdGwXgAAAAg"]
[Tue Apr 28 05:56:06.838738 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:34837] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ae_bdungo3AwIJgfSHH9uwAAAEI"]
[Tue Apr 28 05:56:07.396128 2026] [:error] [pid 14686:tid 14707] [client 4.232.90.232:63315] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_bd--YPF1Xm7uiWQ4r2wAAANI"]
[Tue Apr 28 05:56:07.999357 2026] [:error] [pid 14578:tid 14637] [client 4.232.90.232:63335] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_bd-ngo3AwIJgfSHH9vAAAAFg"]
[Tue Apr 28 05:56:08.590080 2026] [:error] [pid 14686:tid 14713] [client 4.232.90.232:11732] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_beO-YPF1Xm7uiWQ4r3AAAANg"]
[Tue Apr 28 05:56:09.166692 2026] [:error] [pid 14577:tid 14590] [client 4.232.90.232:34875] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ae_beSzBH-jwzlgiBdGwYAAAAAQ"]
[Tue Apr 28 05:56:09.685887 2026] [:error] [pid 14578:tid 14633] [client 4.232.90.232:18119] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_beengo3AwIJgfSHH9vQAAAFQ"]
[Tue Apr 28 05:56:10.190192 2026] [:error] [pid 14686:tid 14702] [client 4.232.90.232:11746] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_beu-YPF1Xm7uiWQ4r3QAAAM0"]
[Tue Apr 28 05:56:10.741881 2026] [:error] [pid 14578:tid 14634] [client 4.232.90.232:37127] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_beungo3AwIJgfSHH9vwAAAFU"]
[Tue Apr 28 05:56:11.247606 2026] [:error] [pid 14577:tid 14592] [client 4.232.90.232:7286] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae_beyzBH-jwzlgiBdGwYwAAAAY"]
[Tue Apr 28 05:56:11.844388 2026] [:error] [pid 14577:tid 14586] [client 4.232.90.232:37132] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ae_beyzBH-jwzlgiBdGwZAAAAAA"]
[Tue Apr 28 05:56:12.328625 2026] [:error] [pid 14577:tid 14588] [client 4.232.90.232:37124] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ae_bfCzBH-jwzlgiBdGwZQAAAAI"]
[Tue Apr 28 05:56:12.804838 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:11715] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ae_bfOngo3AwIJgfSHH9wQAAAEA"]
[Tue Apr 28 05:56:13.381418 2026] [:error] [pid 14578:tid 14618] [client 4.232.90.232:17115] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ae_bfengo3AwIJgfSHH9wgAAAEU"]
[Tue Apr 28 05:56:13.946554 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:37143] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ae_bffCwhMxzNW_lZSwxKAAAARA"]
[Tue Apr 28 05:56:14.505754 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:17110] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ae_bfvCwhMxzNW_lZSwxKwAAAQk"]
[Tue Apr 28 05:56:15.072464 2026] [:error] [pid 14578:tid 14626] [client 4.232.90.232:7250] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ae_bf-ngo3AwIJgfSHH9wwAAAE0"]
[Tue Apr 28 05:56:15.544759 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:34848] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ae_bfxrUiOG83qKKuuDvDQAAAJg"]
[Tue Apr 28 05:56:16.027003 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:11878] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ae_bgBrUiOG83qKKuuDvDgAAAIw"]
[Tue Apr 28 05:56:16.546037 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:11451] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ae_bgOngo3AwIJgfSHH9xAAAAEw"]
[Tue Apr 28 05:56:17.166509 2026] [proxy_fcgi:error] [pid 14686:tid 14697] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:17.404325 2026] [proxy_fcgi:error] [pid 14686:tid 14704] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:17.655905 2026] [proxy_fcgi:error] [pid 14686:tid 14709] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:18.128512 2026] [proxy_fcgi:error] [pid 14686:tid 14707] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:19.007612 2026] [proxy_fcgi:error] [pid 14686:tid 14701] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:19.244040 2026] [proxy_fcgi:error] [pid 14686:tid 14711] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:19.721764 2026] [proxy_fcgi:error] [pid 14686:tid 14705] [client 4.232.90.232:34865] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:56:21.398047 2026] [:error] [pid 14686:tid 14694] [client 4.232.90.232:34865] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_bhe-YPF1Xm7uiWQ4r9QAAAMU"]
[Tue Apr 28 05:56:21.895363 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:34828] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_bhRrUiOG83qKKuuDvEAAAAIE"]
[Tue Apr 28 05:56:22.421358 2026] [:error] [pid 14686:tid 14706] [client 4.232.90.232:11747] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_bhu-YPF1Xm7uiWQ4r-QAAANE"]
[Tue Apr 28 05:56:22.981798 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:11428] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae_bhungo3AwIJgfSHH9yQAAAFI"]
[Tue Apr 28 05:56:23.500476 2026] [:error] [pid 14686:tid 14693] [client 4.232.90.232:7281] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae_bh--YPF1Xm7uiWQ4sAwAAAMQ"]
[Tue Apr 28 05:56:24.052931 2026] [:error] [pid 14686:tid 14705] [client 4.232.90.232:41438] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae_biO-YPF1Xm7uiWQ4sCQAAANA"]
[Tue Apr 28 05:56:24.619585 2026] [:error] [pid 14578:tid 14621] [client 4.232.90.232:17106] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae_biOngo3AwIJgfSHH9ygAAAEg"]
[Tue Apr 28 05:56:25.514582 2026] [:error] [pid 14577:tid 14602] [client 4.232.90.232:41460] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ae_biSzBH-jwzlgiBdGwaQAAABA"]
[Tue Apr 28 05:56:26.323798 2026] [:error] [pid 14579:tid 14646] [client 4.232.90.232:41432] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_bihrUiOG83qKKuuDvFAAAAIY"]
[Tue Apr 28 05:56:26.955773 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:17134] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_bihrUiOG83qKKuuDvGgAAAJY"]
[Tue Apr 28 05:56:28.011647 2026] [:error] [pid 14579:tid 14656] [client 4.232.90.232:37149] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_bjBrUiOG83qKKuuDvGwAAAJA"]
[Tue Apr 28 05:56:28.872811 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:11446] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ae_bjPCwhMxzNW_lZSwxSgAAAQ8"]
[Tue Apr 28 05:56:29.869084 2026] [:error] [pid 56602:tid 56618] [client 4.232.90.232:37183] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae_bjfCwhMxzNW_lZSwxSwAAAQ4"]
[Tue Apr 28 05:56:30.416897 2026] [:error] [pid 14579:tid 14650] [client 4.232.90.232:41415] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae_bjhrUiOG83qKKuuDvHQAAAIo"]
[Tue Apr 28 05:56:30.992005 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:7244] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae_bjhrUiOG83qKKuuDvHwAAAII"]
[Tue Apr 28 05:56:31.827094 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:18113] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fe5.php"] [unique_id "ae_bj_CwhMxzNW_lZSwxTQAAAQc"]
[Tue Apr 28 05:56:32.515489 2026] [:error] [pid 56602:tid 56609] [client 4.232.90.232:34818] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_bkPCwhMxzNW_lZSwxTwAAAQU"]
[Tue Apr 28 05:56:33.314924 2026] [:error] [pid 56602:tid 56625] [client 4.232.90.232:11421] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_bkfCwhMxzNW_lZSwxUgAAARU"]
[Tue Apr 28 05:56:34.099408 2026] [:error] [pid 14577:tid 14596] [client 4.232.90.232:41424] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_bkizBH-jwzlgiBdGwbwAAAAo"]
[Tue Apr 28 05:56:34.857726 2026] [:error] [pid 14578:tid 14624] [client 4.232.90.232:22705] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ae_bkungo3AwIJgfSHH91QAAAEs"]
[Tue Apr 28 05:56:35.473862 2026] [:error] [pid 14578:tid 14636] [client 4.232.90.232:11429] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_bk-ngo3AwIJgfSHH92AAAAFc"]
[Tue Apr 28 05:56:36.057899 2026] [:error] [pid 14579:tid 14662] [client 4.232.90.232:11434] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_blBrUiOG83qKKuuDvKAAAAJY"]
[Tue Apr 28 05:56:36.981553 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:18164] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_blBrUiOG83qKKuuDvLgAAAII"]
[Tue Apr 28 05:56:37.742689 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:34817] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ae_blengo3AwIJgfSHH94AAAAEE"]
[Tue Apr 28 05:56:38.635033 2026] [:error] [pid 56602:tid 56610] [client 4.232.90.232:17129] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ae_blvCwhMxzNW_lZSwxXQAAAQY"]
[Tue Apr 28 05:56:39.444558 2026] [:error] [pid 56602:tid 56612] [client 4.232.90.232:34862] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ae_bl_CwhMxzNW_lZSwxXwAAAQg"]
[Tue Apr 28 05:56:40.163148 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:17114] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ae_bmO-YPF1Xm7uiWQ4sJQAAAMo"]
[Tue Apr 28 05:56:41.133238 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:41422] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ae_bmengo3AwIJgfSHH95QAAAEA"]
[Tue Apr 28 05:56:42.099858 2026] [:error] [pid 14577:tid 14606] [client 4.232.90.232:17097] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ae_bmizBH-jwzlgiBdGwcgAAABQ"]
[Tue Apr 28 05:56:42.952551 2026] [:error] [pid 14577:tid 14609] [client 4.232.90.232:40550] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ae_bmizBH-jwzlgiBdGwcwAAABc"]
[Tue Apr 28 05:56:43.898088 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:37174] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ae_bmyzBH-jwzlgiBdGwdgAAABM"]
[Tue Apr 28 05:56:44.808008 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:11431] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ae_bnCzBH-jwzlgiBdGwdwAAAAc"]
[Tue Apr 28 05:56:45.431960 2026] [:error] [pid 14577:tid 14599] [client 4.232.90.232:11764] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ae_bnSzBH-jwzlgiBdGwegAAAA0"]
[Tue Apr 28 05:56:46.033043 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:18152] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ae_bnvCwhMxzNW_lZSwxYwAAAQs"]
[Tue Apr 28 05:56:46.521200 2026] [:error] [pid 56602:tid 56623] [client 4.232.90.232:34863] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ae_bnvCwhMxzNW_lZSwxZAAAARM"]
[Tue Apr 28 05:56:47.044460 2026] [:error] [pid 14578:tid 14613] [client 4.232.90.232:37158] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "ae_bn-ngo3AwIJgfSHH96gAAAEA"]
[Tue Apr 28 05:56:47.618764 2026] [:error] [pid 14686:tid 14695] [client 4.232.90.232:41467] [client 4.232.90.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae_bn--YPF1Xm7uiWQ4sJwAAAMY"]
[Tue Apr 28 05:56:48.096201 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:40575] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ae_boBrUiOG83qKKuuDvMQAAAIE"]
[Tue Apr 28 05:56:48.662315 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:17128] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ae_boBrUiOG83qKKuuDvNAAAAJg"]
[Tue Apr 28 05:56:49.193864 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:18122] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ae_bofCwhMxzNW_lZSwxZwAAARQ"]
[Tue Apr 28 05:56:49.730069 2026] [:error] [pid 14579:tid 14657] [client 4.232.90.232:41453] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ae_boRrUiOG83qKKuuDvNwAAAJE"]
[Tue Apr 28 05:56:50.325387 2026] [:error] [pid 14579:tid 14647] [client 4.232.90.232:41440] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_bohrUiOG83qKKuuDvOQAAAIc"]
[Tue Apr 28 05:56:50.822312 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:11760] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_bou-YPF1Xm7uiWQ4sLAAAAME"]
[Tue Apr 28 05:56:51.291134 2026] [:error] [pid 14578:tid 14625] [client 4.232.90.232:17100] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_bo-ngo3AwIJgfSHH97QAAAEw"]
[Tue Apr 28 05:56:51.910463 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:37134] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ae_bo--YPF1Xm7uiWQ4sLwAAAM8"]
[Tue Apr 28 05:56:52.488719 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:17144] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_bpPCwhMxzNW_lZSwxaQAAARA"]
[Tue Apr 28 05:56:53.097494 2026] [:error] [pid 56602:tid 56615] [client 4.232.90.232:16011] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_bpfCwhMxzNW_lZSwxcgAAAQs"]
[Tue Apr 28 05:56:53.577126 2026] [:error] [pid 56602:tid 56626] [client 4.232.90.232:11441] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_bpfCwhMxzNW_lZSwxhQAAARY"]
[Tue Apr 28 05:56:54.176343 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:18125] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae_bpvCwhMxzNW_lZSwxjAAAARQ"]
[Tue Apr 28 05:56:54.725601 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:18120] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ae_bpu-YPF1Xm7uiWQ4sMQAAAMo"]
[Tue Apr 28 05:56:55.310029 2026] [:error] [pid 56602:tid 56628] [client 4.232.90.232:11742] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ae_bp_CwhMxzNW_lZSwxkAAAARg"]
[Tue Apr 28 05:56:55.913756 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:18121] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ae_bp_CwhMxzNW_lZSwxkwAAARc"]
[Tue Apr 28 05:56:56.406586 2026] [:error] [pid 56602:tid 56614] [client 4.232.90.232:11398] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "ae_bqPCwhMxzNW_lZSwxlAAAAQo"]
[Tue Apr 28 05:56:56.944937 2026] [:error] [pid 14686:tid 14703] [client 4.232.90.232:11750] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ae_bqO-YPF1Xm7uiWQ4sMwAAAM4"]
[Tue Apr 28 05:56:57.518998 2026] [:error] [pid 14577:tid 14598] [client 4.232.90.232:11406] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ae_bqSzBH-jwzlgiBdGwfQAAAAw"]
[Tue Apr 28 05:56:58.014415 2026] [:error] [pid 14577:tid 14605] [client 4.232.90.232:41410] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ae_bqizBH-jwzlgiBdGwfgAAABM"]
[Tue Apr 28 05:56:58.570565 2026] [:error] [pid 14579:tid 14663] [client 4.232.90.232:41466] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "ae_bqhrUiOG83qKKuuDvPQAAAJc"]
[Tue Apr 28 05:56:59.050697 2026] [:error] [pid 14579:tid 14641] [client 4.232.90.232:11734] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ae_bqxrUiOG83qKKuuDvPgAAAIE"]
[Tue Apr 28 05:56:59.525345 2026] [:error] [pid 14579:tid 14664] [client 4.232.90.232:11718] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ae_bqxrUiOG83qKKuuDvPwAAAJg"]
[Tue Apr 28 05:57:00.082831 2026] [:error] [pid 14579:tid 14642] [client 4.232.90.232:11717] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ae_brBrUiOG83qKKuuDvQAAAAII"]
[Tue Apr 28 05:57:00.583178 2026] [:error] [pid 14577:tid 14595] [client 4.232.90.232:11870] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "ae_brCzBH-jwzlgiBdGwfwAAAAk"]
[Tue Apr 28 05:57:01.249857 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:41425] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ae_brengo3AwIJgfSHH98AAAAEE"]
[Tue Apr 28 05:57:01.807311 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:34860] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ae_brengo3AwIJgfSHH98gAAAFE"]
[Tue Apr 28 05:57:02.411623 2026] [:error] [pid 14686:tid 14690] [client 4.232.90.232:11767] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ae_bru-YPF1Xm7uiWQ4sPAAAAME"]
[Tue Apr 28 05:57:02.935265 2026] [:error] [pid 14577:tid 14593] [client 4.232.90.232:34822] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "ae_brizBH-jwzlgiBdGwgAAAAAc"]
[Tue Apr 28 05:57:03.466465 2026] [:error] [pid 14686:tid 14708] [client 4.232.90.232:17140] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_br--YPF1Xm7uiWQ4sPQAAANM"]
[Tue Apr 28 05:57:03.965913 2026] [:error] [pid 14577:tid 14597] [client 4.232.90.232:11748] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_bryzBH-jwzlgiBdGwgQAAAAs"]
[Tue Apr 28 05:57:04.434428 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:28686] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_bsO-YPF1Xm7uiWQ4sPwAAAM8"]
[Tue Apr 28 05:57:04.997864 2026] [:error] [pid 56602:tid 56611] [client 4.232.90.232:34843] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae_bsPCwhMxzNW_lZSwxnwAAAQc"]
[Tue Apr 28 05:57:05.531321 2026] [:error] [pid 56602:tid 56624] [client 4.232.90.232:22670] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ae_bsfCwhMxzNW_lZSwxoAAAARQ"]
[Tue Apr 28 05:57:06.049420 2026] [:error] [pid 14578:tid 14631] [client 4.232.90.232:37165] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ae_bsungo3AwIJgfSHH9_AAAAFI"]
[Tue Apr 28 05:57:06.674637 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:41441] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ae_bsvCwhMxzNW_lZSwxoQAAAQ0"]
[Tue Apr 28 05:57:07.333618 2026] [:error] [pid 14578:tid 14620] [client 4.232.90.232:11452] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "ae_bs-ngo3AwIJgfSHH9_gAAAEc"]
[Tue Apr 28 05:57:07.891412 2026] [:error] [pid 14578:tid 14615] [client 4.232.90.232:17147] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_bs-ngo3AwIJgfSHH9_wAAAEI"]
[Tue Apr 28 05:57:08.377925 2026] [:error] [pid 14578:tid 14614] [client 4.232.90.232:34823] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_btOngo3AwIJgfSHH-AAAAAEE"]
[Tue Apr 28 05:57:08.892807 2026] [:error] [pid 14579:tid 14651] [client 4.232.90.232:11402] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_btBrUiOG83qKKuuDvUQAAAIs"]
[Tue Apr 28 05:57:09.506817 2026] [:error] [pid 14578:tid 14630] [client 4.232.90.232:41462] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae_btengo3AwIJgfSHH-AQAAAFE"]
[Tue Apr 28 05:57:10.109802 2026] [:error] [pid 56602:tid 56621] [client 4.232.90.232:28703] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ae_btvCwhMxzNW_lZSwxowAAARE"]
[Tue Apr 28 05:57:10.777933 2026] [:error] [pid 56602:tid 56613] [client 4.232.90.232:37171] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ae_btvCwhMxzNW_lZSwxpAAAAQk"]
[Tue Apr 28 05:57:11.356043 2026] [:error] [pid 14686:tid 14696] [client 4.232.90.232:34855] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ae_bt--YPF1Xm7uiWQ4sQwAAAMc"]
[Tue Apr 28 05:57:11.914305 2026] [:error] [pid 14686:tid 14712] [client 4.232.90.232:11407] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "ae_bt--YPF1Xm7uiWQ4sRAAAANc"]
[Tue Apr 28 05:57:12.478709 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:42402] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ae_buPCwhMxzNW_lZSwxpgAAAQw"]
[Tue Apr 28 05:57:13.110343 2026] [:error] [pid 14686:tid 14711] [client 4.232.90.232:11723] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ae_bue-YPF1Xm7uiWQ4sRgAAANY"]
[Tue Apr 28 05:57:13.750519 2026] [:error] [pid 56602:tid 56620] [client 4.232.90.232:37151] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ae_bufCwhMxzNW_lZSwxqAAAARA"]
[Tue Apr 28 05:57:14.357009 2026] [:error] [pid 14686:tid 14700] [client 4.232.90.232:18166] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "ae_buu-YPF1Xm7uiWQ4sRwAAAMs"]
[Tue Apr 28 05:57:14.904550 2026] [:error] [pid 14686:tid 14705] [client 4.232.90.232:63357] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae_buu-YPF1Xm7uiWQ4sSAAAANA"]
[Tue Apr 28 05:57:15.525779 2026] [:error] [pid 56602:tid 56627] [client 4.232.90.232:34873] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae_bu_CwhMxzNW_lZSwxtwAAARc"]
[Tue Apr 28 05:57:16.305058 2026] [:error] [pid 56602:tid 56616] [client 4.232.90.232:28674] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae_bvPCwhMxzNW_lZSwxuQAAAQw"]
[Tue Apr 28 05:57:17.009563 2026] [:error] [pid 14686:tid 14704] [client 4.232.90.232:17142] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "ae_bve-YPF1Xm7uiWQ4sSgAAAM8"]
[Tue Apr 28 05:57:17.878457 2026] [:error] [pid 56602:tid 56619] [client 4.232.90.232:17142] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "ae_bvfCwhMxzNW_lZSwxvAAAAQ8"]
[Tue Apr 28 05:57:18.481356 2026] [:error] [pid 14686:tid 14699] [client 4.232.90.232:28677] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "ae_bvu-YPF1Xm7uiWQ4sTwAAAMo"]
[Tue Apr 28 05:57:19.232474 2026] [:error] [pid 56602:tid 56617] [client 4.232.90.232:28698] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "ae_bv_CwhMxzNW_lZSwxwwAAAQ0"]
[Tue Apr 28 05:57:20.135392 2026] [:error] [pid 14579:tid 14652] [client 4.232.90.232:34821] [client 4.232.90.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "ae_bwBrUiOG83qKKuuDvUgAAAIw"]
[Tue Apr 28 05:57:21.600098 2026] [proxy_fcgi:error] [pid 56602:tid 56626] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:21.838379 2026] [proxy_fcgi:error] [pid 56602:tid 56614] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:22.173947 2026] [proxy_fcgi:error] [pid 56602:tid 56612] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:22.412036 2026] [proxy_fcgi:error] [pid 56602:tid 56615] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:22.649681 2026] [proxy_fcgi:error] [pid 56602:tid 56610] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:22.887314 2026] [proxy_fcgi:error] [pid 56602:tid 56624] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 05:57:24.710975 2026] [proxy_fcgi:error] [pid 56602:tid 56628] [client 4.232.90.232:11863] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:50:24.929395 2026] [proxy_fcgi:error] [pid 33777:tid 33850] [client 20.78.158.176:2806] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:50:25.171167 2026] [:error] [pid 33777:tid 33847] [client 20.78.158.176:2806] [client 20.78.158.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.78.158.176, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "afAgcbXUCFWqmordGGL55AAAAQw"]
[Tue Apr 28 10:50:25.298088 2026] [proxy_fcgi:error] [pid 33777:tid 33849] [client 20.78.158.176:2806] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:50:25.788753 2026] [proxy_fcgi:error] [pid 33777:tid 33835] [client 20.78.158.176:2806] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:50:26.169999 2026] [proxy_fcgi:error] [pid 33777:tid 33836] [client 20.78.158.176:2806] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 10:50:26.289327 2026] [:error] [pid 33777:tid 33846] [client 20.78.158.176:2806] [client 20.78.158.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "afAgcrXUCFWqmordGGL57gAAAQs"]
[Tue Apr 28 10:50:26.836110 2026] [:error] [pid 50889:tid 50895] [client 20.78.158.176:12787] [client 20.78.158.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "afAgcozszBr00txEzGi9fAAAAAM"]
[Tue Apr 28 10:50:27.388923 2026] [:error] [pid 50889:tid 50892] [client 20.78.158.176:2753] [client 20.78.158.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "afAgc4zszBr00txEzGi9fgAAAAA"]
[Tue Apr 28 10:50:27.932485 2026] [:error] [pid 33776:tid 33832] [client 20.78.158.176:15508] [client 20.78.158.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "afAgc1-bEJ2CKP3iKADdHgAAAFg"]
[Tue Apr 28 14:59:33.529095 2026] [:error] [pid 33775:tid 33788] [client 93.123.109.79:52071] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "afBa1ZsYOcoQrq88YbUKzgAAAMk"]
[Tue Apr 28 14:59:34.505834 2026] [:error] [pid 33864:tid 33871] [client 93.123.109.79:52071] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "afBa1jXchLGZ4QggCsnp-QAAAIU"]
[Tue Apr 28 16:26:16.921395 2026] [:error] [pid 2741:tid 2753] [client 209.141.55.159:6786] [client 209.141.55.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.55.159, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "afBvKPp92FeOz1h6ILy0XAAAAUc"]
[Tue Apr 28 16:26:16.933398 2026] [proxy_fcgi:error] [pid 2741:tid 2753] [client 209.141.55.159:6786] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 06:34:59.700363 2026] [:error] [pid 56863:tid 56881] [client 94.247.172.129:16487] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.quarryspec.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.quarryspec.com.au"] [uri "/"] [unique_id "afE2E2QQTEnvYCOsiwLZOgAAANA"]
[Wed Apr 29 15:25:11.071178 2026] [:error] [pid 44860:tid 44886] [client 45.119.85.39:55288] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyV0Q82el2g7ESJ16GkAAAAlg"], referer: https://www.google.com
[Wed Apr 29 15:25:11.071299 2026] [:error] [pid 44860:tid 44886] [client 45.119.85.39:55288] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 37"] [hostname "quarryspec.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyV0Q82el2g7ESJ16GkAAAAlg"], referer: https://www.google.com
[Wed Apr 29 15:45:05.017145 2026] [:error] [pid 2604:tid 2616] [client 45.119.85.39:52657] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3ARx5WQMU1W68tTYj9wAAAEo"], referer: https://www.google.com
[Wed Apr 29 15:45:05.017259 2026] [:error] [pid 2604:tid 2616] [client 45.119.85.39:52657] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 211"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3ARx5WQMU1W68tTYj9wAAAEo"], referer: https://www.google.com
[Fri May 01 03:42:20.635823 2026] [:error] [pid 11852:tid 11918] [client 104.28.214.115:11073] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "afOwnPUF_Rpk1NrBiNth9AAAAIg"]
[Fri May 01 04:56:40.512802 2026] [:error] [pid 38015:tid 38067] [client 92.53.64.155:58383] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "afPCCMNJWoh41gYMCSVpUgAAAFA"]
[Fri May 01 13:22:17.238430 2026] [:error] [pid 25085:tid 25107] [client 34.87.21.143:55912] [client 34.87.21.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "afQ4ifuD8fWRiE0RX0GjQgAAAVA"]
[Fri May 01 17:24:30.942430 2026] [:error] [pid 33791:tid 33814] [client 34.138.204.104:61201] [client 34.138.204.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.204.104, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "afRxTm9ixd-moLycM9DN0wAAABQ"]
[Fri May 01 17:24:30.951462 2026] [proxy_fcgi:error] [pid 33791:tid 33814] [client 34.138.204.104:61201] AH01071: Got error 'Primary script unknown'
[Fri May 01 17:24:33.737779 2026] [:error] [pid 33791:tid 33807] [client 34.138.204.104:61201] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afRxUW9ixd-moLycM9DN4wAAAA0"]
[Fri May 01 17:24:34.234908 2026] [:error] [pid 24995:tid 25007] [client 34.138.204.104:60936] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afRxUudJG9WB_Q_ne0uZywAAAEg"]
[Fri May 01 17:24:34.732935 2026] [:error] [pid 33791:tid 33817] [client 34.138.204.104:54653] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afRxUm9ixd-moLycM9DN5gAAABc"]
[Fri May 01 17:24:35.206470 2026] [:error] [pid 33791:tid 33796] [client 34.138.204.104:51782] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afRxU29ixd-moLycM9DN6QAAAAI"]
[Fri May 01 17:24:35.709951 2026] [:error] [pid 33791:tid 33795] [client 34.138.204.104:60064] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afRxU29ixd-moLycM9DN6wAAAAE"]
[Fri May 01 17:24:36.198735 2026] [:error] [pid 24996:tid 25038] [client 34.138.204.104:53726] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afRxVCDBq9mMfUWQQeo74wAAAIo"]
[Fri May 01 17:24:36.691576 2026] [:error] [pid 33791:tid 33810] [client 34.138.204.104:60072] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afRxVG9ixd-moLycM9DN7gAAABA"]
[Sat May 02 12:35:12.741388 2026] [:error] [pid 52012:tid 52085] [client 192.96.159.129:59819] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "afV_AEzSWr-8cpS83mhWWwAAA0g"]
[Sun May 03 00:28:14.087969 2026] [:error] [pid 52012:tid 52084] [client 136.110.56.125:37128] [client 136.110.56.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "afYmHkzSWr-8cpS83mj8twAAA0c"]
[Sun May 03 05:02:52.529345 2026] [proxy_fcgi:error] [pid 21934:tid 21941] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:52.745845 2026] [proxy_fcgi:error] [pid 21934:tid 21936] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:52.956118 2026] [proxy_fcgi:error] [pid 21934:tid 21950] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:53.165539 2026] [proxy_fcgi:error] [pid 21934:tid 21948] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:53.375831 2026] [proxy_fcgi:error] [pid 21934:tid 21946] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:53.598665 2026] [proxy_fcgi:error] [pid 21934:tid 21958] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:53.811310 2026] [proxy_fcgi:error] [pid 21934:tid 21940] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:54.021532 2026] [proxy_fcgi:error] [pid 21934:tid 21952] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:54.230769 2026] [proxy_fcgi:error] [pid 21934:tid 21947] [client 20.43.1.132:53833] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:02:54.660706 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:53833] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afZmfnWfIjnWjXCxeM4aTgAAAQU"]
[Sun May 03 05:02:55.369344 2026] [:error] [pid 40639:tid 40725] [client 20.43.1.132:54526] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afZmf69rkyoICq7qxvFafQAAAJg"]
[Sun May 03 05:02:55.961292 2026] [:error] [pid 40639:tid 40702] [client 20.43.1.132:54505] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afZmf69rkyoICq7qxvFagQAAAIE"]
[Sun May 03 05:02:57.038251 2026] [:error] [pid 21934:tid 21947] [client 20.43.1.132:53831] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afZmgXWfIjnWjXCxeM4aVwAAAQs"]
[Sun May 03 05:02:57.921356 2026] [:error] [pid 40638:tid 40680] [client 20.43.1.132:54514] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZmgfh3VcFjJ7H1mBaheQAAAEY"]
[Sun May 03 05:02:58.545082 2026] [:error] [pid 40638:tid 40678] [client 20.43.1.132:55093] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZmgvh3VcFjJ7H1mBahegAAAEQ"]
[Sun May 03 05:02:59.566643 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:54415] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZmg_1lQrIvlEdzcVcI4wAAAMk"]
[Sun May 03 05:03:00.851094 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:53800] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZmhHWfIjnWjXCxeM4aWQAAAQc"]
[Sun May 03 05:03:01.746702 2026] [:error] [pid 40732:tid 40759] [client 20.43.1.132:53828] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afZmhf1lQrIvlEdzcVcI5gAAAM8"]
[Sun May 03 05:03:02.308898 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:55074] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afZmhnWfIjnWjXCxeM4aXAAAARE"]
[Sun May 03 05:03:02.879504 2026] [:error] [pid 40639:tid 40722] [client 20.43.1.132:54410] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afZmhq9rkyoICq7qxvFanwAAAJU"]
[Sun May 03 05:03:03.413729 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:53857] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afZmh3WfIjnWjXCxeM4aZAAAAQ0"]
[Sun May 03 05:03:03.972316 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:55142] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afZmh69rkyoICq7qxvFapQAAAI4"]
[Sun May 03 05:03:04.610545 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:55054] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afZmiK9rkyoICq7qxvFaqgAAAIY"]
[Sun May 03 05:03:05.175421 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:53864] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afZmiXWfIjnWjXCxeM4aagAAARE"]
[Sun May 03 05:03:06.024881 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55145] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afZminWfIjnWjXCxeM4aawAAAQQ"]
[Sun May 03 05:03:06.532460 2026] [:error] [pid 21934:tid 21937] [client 20.43.1.132:54427] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "afZminWfIjnWjXCxeM4abgAAAQE"]
[Sun May 03 05:03:07.010036 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:54484] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "afZmi3WfIjnWjXCxeM4acgAAAQw"]
[Sun May 03 05:03:07.560940 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:55110] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "afZmi3WfIjnWjXCxeM4adgAAARM"]
[Sun May 03 05:03:07.996910 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:54439] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sw.php"] [unique_id "afZmi3WfIjnWjXCxeM4adwAAARI"]
[Sun May 03 05:03:08.456135 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:54488] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afZmjHWfIjnWjXCxeM4afgAAAQg"]
[Sun May 03 05:03:09.019741 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:54494] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afZmjXWfIjnWjXCxeM4agQAAARE"]
[Sun May 03 05:03:09.479909 2026] [:error] [pid 21934:tid 21937] [client 20.43.1.132:54438] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afZmjXWfIjnWjXCxeM4ahQAAAQE"]
[Sun May 03 05:03:09.975077 2026] [:error] [pid 40639:tid 40705] [client 20.43.1.132:55157] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afZmja9rkyoICq7qxvFavQAAAIQ"]
[Sun May 03 05:03:10.588456 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:55043] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afZmjq9rkyoICq7qxvFawAAAAIY"]
[Sun May 03 05:03:11.171696 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:55085] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afZmj3WfIjnWjXCxeM4ajAAAARE"]
[Sun May 03 05:03:11.692349 2026] [:error] [pid 21934:tid 21937] [client 20.43.1.132:55112] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afZmj3WfIjnWjXCxeM4ajgAAAQE"]
[Sun May 03 05:03:12.222740 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:53829] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afZmkPh3VcFjJ7H1mBahqgAAAFE"]
[Sun May 03 05:03:12.768927 2026] [:error] [pid 40638:tid 40696] [client 20.43.1.132:53762] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afZmkPh3VcFjJ7H1mBahrAAAAFY"]
[Sun May 03 05:03:13.350263 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:55057] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afZmkXWfIjnWjXCxeM4alAAAAQ0"]
[Sun May 03 05:03:13.907615 2026] [:error] [pid 21934:tid 21956] [client 20.43.1.132:54509] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afZmkXWfIjnWjXCxeM4amAAAARQ"]
[Sun May 03 05:03:14.504758 2026] [:error] [pid 40639:tid 40703] [client 20.43.1.132:55138] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afZmkq9rkyoICq7qxvFazwAAAII"]
[Sun May 03 05:03:15.329884 2026] [:error] [pid 40638:tid 40682] [client 20.43.1.132:53852] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZmk_h3VcFjJ7H1mBahsgAAAEg"]
[Sun May 03 05:03:15.969940 2026] [:error] [pid 21934:tid 21952] [client 20.43.1.132:53830] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZmk3WfIjnWjXCxeM4aoQAAARA"]
[Sun May 03 05:03:16.513039 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:53829] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZmlHWfIjnWjXCxeM4apAAAAQc"]
[Sun May 03 05:03:17.037010 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:55102] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZmlfh3VcFjJ7H1mBahtQAAAFE"]
[Sun May 03 05:03:17.539322 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:55167] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZmlXWfIjnWjXCxeM4arQAAAQ4"]
[Sun May 03 05:03:18.136106 2026] [:error] [pid 21934:tid 21942] [client 20.43.1.132:54416] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZmlnWfIjnWjXCxeM4asQAAAQY"]
[Sun May 03 05:03:19.160355 2026] [:error] [pid 40732:tid 40768] [client 20.43.1.132:54401] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZml_1lQrIvlEdzcVcI9QAAANg"]
[Sun May 03 05:03:20.029816 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:55075] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZmmHWfIjnWjXCxeM4auQAAAQc"]
[Sun May 03 05:03:21.182831 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:55053] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afZmmXWfIjnWjXCxeM4avwAAAQ8"]
[Sun May 03 05:03:22.188566 2026] [:error] [pid 40732:tid 40766] [client 20.43.1.132:54428] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afZmmv1lQrIvlEdzcVcI-wAAANY"]
[Sun May 03 05:03:22.879265 2026] [:error] [pid 21934:tid 21945] [client 20.43.1.132:54418] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afZmmnWfIjnWjXCxeM4axgAAAQk"]
[Sun May 03 05:03:23.420521 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55104] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afZmm3WfIjnWjXCxeM4ayAAAAQQ"]
[Sun May 03 05:03:23.949051 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:55094] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afZmm3WfIjnWjXCxeM4ayQAAARI"]
[Sun May 03 05:03:24.516990 2026] [:error] [pid 40638:tid 40683] [client 20.43.1.132:54482] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afZmnPh3VcFjJ7H1mBahugAAAEk"]
[Sun May 03 05:03:24.997911 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:54406] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afZmnP1lQrIvlEdzcVcI_gAAAMU"]
[Sun May 03 05:03:26.357795 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:53767] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afZmnnWfIjnWjXCxeM4azwAAAQ4"]
[Sun May 03 05:03:27.525706 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:55050] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afZmn3WfIjnWjXCxeM4a0wAAARg"]
[Sun May 03 05:03:28.193934 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:53862] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afZmoPh3VcFjJ7H1mBahvAAAAEw"]
[Sun May 03 05:03:28.747072 2026] [:error] [pid 40637:tid 40670] [client 20.43.1.132:54517] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afZmoJB-U30YNJ6CyVg12AAAABc"]
[Sun May 03 05:03:29.350091 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:55137] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afZmoZB-U30YNJ6CyVg12gAAAA4"]
[Sun May 03 05:03:30.480612 2026] [:error] [pid 40638:tid 40685] [client 20.43.1.132:55065] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "afZmovh3VcFjJ7H1mBahvgAAAEs"]
[Sun May 03 05:03:31.202745 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:55064] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "afZmo_h3VcFjJ7H1mBahwQAAAE0"]
[Sun May 03 05:03:31.981005 2026] [:error] [pid 40732:tid 40768] [client 20.43.1.132:55133] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "afZmo_1lQrIvlEdzcVcJCwAAANg"]
[Sun May 03 05:03:32.439811 2026] [:error] [pid 40638:tid 40692] [client 20.43.1.132:54443] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ref.php"] [unique_id "afZmpPh3VcFjJ7H1mBahxgAAAFI"]
[Sun May 03 05:03:32.970518 2026] [:error] [pid 40639:tid 40725] [client 20.43.1.132:55087] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afZmpK9rkyoICq7qxvFa7gAAAJg"]
[Sun May 03 05:03:33.689842 2026] [:error] [pid 40638:tid 40682] [client 20.43.1.132:53867] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afZmpfh3VcFjJ7H1mBahzAAAAEg"]
[Sun May 03 05:03:34.138763 2026] [:error] [pid 21934:tid 21956] [client 20.43.1.132:54493] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afZmpnWfIjnWjXCxeM4a2wAAARQ"]
[Sun May 03 05:03:34.558952 2026] [:error] [pid 40638:tid 40680] [client 20.43.1.132:55163] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afZmpvh3VcFjJ7H1mBahzgAAAEY"]
[Sun May 03 05:03:35.057253 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:54521] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afZmp_h3VcFjJ7H1mBah0gAAAFE"]
[Sun May 03 05:03:35.522938 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:54485] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afZmp_h3VcFjJ7H1mBah1AAAAE0"]
[Sun May 03 05:03:35.991676 2026] [:error] [pid 40637:tid 40665] [client 20.43.1.132:55081] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afZmp5B-U30YNJ6CyVg15QAAABI"]
[Sun May 03 05:03:36.489349 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:55123] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afZmqHWfIjnWjXCxeM4a3wAAAQ4"]
[Sun May 03 05:03:37.006031 2026] [:error] [pid 40639:tid 40713] [client 20.43.1.132:54524] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afZmqa9rkyoICq7qxvFa7wAAAIw"]
[Sun May 03 05:03:37.602207 2026] [:error] [pid 40638:tid 40674] [client 20.43.1.132:55109] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afZmqfh3VcFjJ7H1mBah2AAAAEA"]
[Sun May 03 05:03:38.153193 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:54423] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afZmqnWfIjnWjXCxeM4a4gAAAQU"]
[Sun May 03 05:03:38.721516 2026] [:error] [pid 40639:tid 40718] [client 20.43.1.132:54419] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afZmqq9rkyoICq7qxvFa8gAAAJE"]
[Sun May 03 05:03:39.576224 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:54411] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "afZmq_1lQrIvlEdzcVcJFwAAAMw"]
[Sun May 03 05:03:40.031889 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:55151] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "afZmrK9rkyoICq7qxvFa9QAAAIY"]
[Sun May 03 05:03:40.806567 2026] [:error] [pid 40638:tid 40677] [client 20.43.1.132:55051] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "afZmrPh3VcFjJ7H1mBah3wAAAEM"]
[Sun May 03 05:03:41.491130 2026] [:error] [pid 40639:tid 40706] [client 20.43.1.132:54498] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mode.php"] [unique_id "afZmra9rkyoICq7qxvFa-AAAAIU"]
[Sun May 03 05:03:41.980506 2026] [:error] [pid 40637:tid 40662] [client 20.43.1.132:55116] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afZmrZB-U30YNJ6CyVg16QAAAA8"]
[Sun May 03 05:03:42.437505 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:55071] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afZmrvh3VcFjJ7H1mBah5QAAAE0"]
[Sun May 03 05:03:42.921839 2026] [:error] [pid 40639:tid 40712] [client 20.43.1.132:54450] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afZmrq9rkyoICq7qxvFa-gAAAIs"]
[Sun May 03 05:03:43.902758 2026] [:error] [pid 40637:tid 40656] [client 20.43.1.132:54497] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afZmr5B-U30YNJ6CyVg16wAAAAk"]
[Sun May 03 05:03:44.408415 2026] [:error] [pid 40639:tid 40717] [client 20.43.1.132:54425] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afZmsK9rkyoICq7qxvFa_gAAAJA"]
[Sun May 03 05:03:44.860669 2026] [:error] [pid 40732:tid 40760] [client 20.43.1.132:54403] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afZmsP1lQrIvlEdzcVcJGwAAANA"]
[Sun May 03 05:03:45.493910 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:54519] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afZmsf1lQrIvlEdzcVcJHAAAAMU"]
[Sun May 03 05:03:46.170041 2026] [:error] [pid 40638:tid 40697] [client 20.43.1.132:54434] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afZmsvh3VcFjJ7H1mBah6QAAAFc"]
[Sun May 03 05:03:46.714739 2026] [:error] [pid 40638:tid 40690] [client 20.43.1.132:54421] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2468.php"] [unique_id "afZmsvh3VcFjJ7H1mBah6wAAAFA"]
[Sun May 03 05:03:47.277838 2026] [:error] [pid 40639:tid 40722] [client 20.43.1.132:53159] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2468.php"] [unique_id "afZms69rkyoICq7qxvFbBgAAAJU"]
[Sun May 03 05:03:47.953369 2026] [:error] [pid 40637:tid 40658] [client 20.43.1.132:55046] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2468.php"] [unique_id "afZms5B-U30YNJ6CyVg17QAAAAs"]
[Sun May 03 05:03:48.429742 2026] [:error] [pid 40639:tid 40701] [client 20.43.1.132:53197] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2468.php"] [unique_id "afZmtK9rkyoICq7qxvFbCQAAAIA"]
[Sun May 03 05:03:49.062192 2026] [:error] [pid 40638:tid 40678] [client 20.43.1.132:53826] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZmtfh3VcFjJ7H1mBah8QAAAEQ"]
[Sun May 03 05:03:50.040074 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:55058] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZmtnWfIjnWjXCxeM4a6gAAAQw"]
[Sun May 03 05:03:50.925162 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:54511] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZmtvh3VcFjJ7H1mBah-wAAAFE"]
[Sun May 03 05:03:51.494955 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:53816] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afZmt_1lQrIvlEdzcVcJMAAAAMU"]
[Sun May 03 05:03:51.966622 2026] [:error] [pid 40732:tid 40746] [client 20.43.1.132:54523] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "afZmt_1lQrIvlEdzcVcJOwAAAMI"]
[Sun May 03 05:03:52.391621 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:54437] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "afZmuP1lQrIvlEdzcVcJPQAAANc"]
[Sun May 03 05:03:52.894180 2026] [:error] [pid 40639:tid 40704] [client 20.43.1.132:54471] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "afZmuK9rkyoICq7qxvFbNwAAAIM"]
[Sun May 03 05:03:53.384082 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55149] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "afZmuXWfIjnWjXCxeM4a9wAAAQQ"]
[Sun May 03 05:03:53.835177 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:54499] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "afZmuXWfIjnWjXCxeM4a-gAAAQg"]
[Sun May 03 05:03:54.397655 2026] [proxy_fcgi:error] [pid 21934:tid 21953] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:54.604936 2026] [proxy_fcgi:error] [pid 21934:tid 21958] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:54.818788 2026] [proxy_fcgi:error] [pid 21934:tid 21949] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:55.057751 2026] [proxy_fcgi:error] [pid 21934:tid 21955] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:55.293385 2026] [proxy_fcgi:error] [pid 21934:tid 21940] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:55.502659 2026] [proxy_fcgi:error] [pid 21934:tid 21939] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:55.711345 2026] [proxy_fcgi:error] [pid 21934:tid 21954] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:55.919746 2026] [proxy_fcgi:error] [pid 21934:tid 21958] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:56.147394 2026] [proxy_fcgi:error] [pid 21934:tid 21942] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:56.356668 2026] [proxy_fcgi:error] [pid 21934:tid 21951] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:56.622551 2026] [proxy_fcgi:error] [pid 21934:tid 21946] [client 20.43.1.132:55084] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:03:56.829466 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:55084] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "afZmvHWfIjnWjXCxeM4bEwAAARg"]
[Sun May 03 05:03:57.383734 2026] [:error] [pid 40639:tid 40712] [client 20.43.1.132:53137] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "afZmva9rkyoICq7qxvFbPgAAAIs"]
[Sun May 03 05:03:57.877545 2026] [:error] [pid 40639:tid 40720] [client 20.43.1.132:54436] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "afZmva9rkyoICq7qxvFbPwAAAJM"]
[Sun May 03 05:03:58.388720 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:55154] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/13.php"] [unique_id "afZmvnWfIjnWjXCxeM4bGAAAAQg"]
[Sun May 03 05:03:59.289178 2026] [:error] [pid 40639:tid 40719] [client 20.43.1.132:53851] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "afZmv69rkyoICq7qxvFbRAAAAJI"]
[Sun May 03 05:03:59.751578 2026] [:error] [pid 40639:tid 40701] [client 20.43.1.132:55097] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "afZmv69rkyoICq7qxvFbRQAAAIA"]
[Sun May 03 05:04:00.180092 2026] [:error] [pid 40639:tid 40718] [client 20.43.1.132:53872] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "afZmwK9rkyoICq7qxvFbRwAAAJE"]
[Sun May 03 05:04:00.616946 2026] [:error] [pid 40639:tid 40705] [client 20.43.1.132:54503] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "afZmwK9rkyoICq7qxvFbSgAAAIQ"]
[Sun May 03 05:04:01.104604 2026] [:error] [pid 40639:tid 40716] [client 20.43.1.132:53865] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "afZmwa9rkyoICq7qxvFbTAAAAI8"]
[Sun May 03 05:04:01.532597 2026] [:error] [pid 40732:tid 40751] [client 20.43.1.132:55121] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "afZmwf1lQrIvlEdzcVcJQwAAAMc"]
[Sun May 03 05:04:02.012289 2026] [:error] [pid 40638:tid 40688] [client 20.43.1.132:53817] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "afZmwvh3VcFjJ7H1mBaiCAAAAE4"]
[Sun May 03 05:04:02.435178 2026] [:error] [pid 40637:tid 40662] [client 20.43.1.132:54457] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "afZmwpB-U30YNJ6CyVg1-QAAAA8"]
[Sun May 03 05:04:02.870625 2026] [:error] [pid 40637:tid 40670] [client 20.43.1.132:53832] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZmwpB-U30YNJ6CyVg1-wAAABc"]
[Sun May 03 05:04:03.294672 2026] [:error] [pid 40637:tid 40666] [client 20.43.1.132:54501] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZmw5B-U30YNJ6CyVg1_AAAABM"]
[Sun May 03 05:04:03.729370 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:53856] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZmw_1lQrIvlEdzcVcJRQAAANc"]
[Sun May 03 05:04:04.212624 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:54483] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZmxP1lQrIvlEdzcVcJRwAAAMU"]
[Sun May 03 05:04:04.695801 2026] [:error] [pid 40732:tid 40748] [client 20.43.1.132:55091] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afZmxP1lQrIvlEdzcVcJSwAAAMQ"]
[Sun May 03 05:04:05.127957 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:53814] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afZmxZB-U30YNJ6CyVg1_QAAAA4"]
[Sun May 03 05:04:05.564738 2026] [:error] [pid 21934:tid 21936] [client 20.43.1.132:55078] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afZmxXWfIjnWjXCxeM4bHwAAAQA"]
[Sun May 03 05:04:06.026426 2026] [:error] [pid 40637:tid 40658] [client 20.43.1.132:55086] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afZmxpB-U30YNJ6CyVg1_gAAAAs"]
[Sun May 03 05:04:06.543161 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:54422] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "afZmxnWfIjnWjXCxeM4bJQAAAQQ"]
[Sun May 03 05:04:06.995409 2026] [:error] [pid 40638:tid 40681] [client 20.43.1.132:54412] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "afZmxvh3VcFjJ7H1mBaiFgAAAEc"]
[Sun May 03 05:04:07.448961 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:54492] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "afZmx_h3VcFjJ7H1mBaiGAAAAE0"]
[Sun May 03 05:04:07.870663 2026] [:error] [pid 40637:tid 40654] [client 20.43.1.132:53866] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell.php"] [unique_id "afZmx5B-U30YNJ6CyVg2AAAAAAc"]
[Sun May 03 05:04:08.342647 2026] [:error] [pid 40638:tid 40690] [client 20.43.1.132:55069] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "afZmyPh3VcFjJ7H1mBaiGwAAAFA"]
[Sun May 03 05:04:08.840187 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:54459] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "afZmyPh3VcFjJ7H1mBaiHgAAAEw"]
[Sun May 03 05:04:09.314468 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:54402] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "afZmyXWfIjnWjXCxeM4bNQAAARM"]
[Sun May 03 05:04:09.793425 2026] [:error] [pid 40637:tid 40659] [client 20.43.1.132:53855] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tea.php"] [unique_id "afZmyZB-U30YNJ6CyVg2AwAAAAw"]
[Sun May 03 05:04:10.237506 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:54432] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "afZmynWfIjnWjXCxeM4bQgAAAQ4"]
[Sun May 03 05:04:10.754696 2026] [:error] [pid 40732:tid 40764] [client 20.43.1.132:53788] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "afZmyv1lQrIvlEdzcVcJVwAAANQ"]
[Sun May 03 05:04:11.275590 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:55047] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "afZmy_1lQrIvlEdzcVcJWwAAAMw"]
[Sun May 03 05:04:11.704542 2026] [:error] [pid 40638:tid 40675] [client 20.43.1.132:55140] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "afZmy_h3VcFjJ7H1mBaiIQAAAEE"]
[Sun May 03 05:04:12.194567 2026] [:error] [pid 40638:tid 40698] [client 20.43.1.132:54448] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "afZmzPh3VcFjJ7H1mBaiJQAAAFg"]
[Sun May 03 05:04:12.682968 2026] [:error] [pid 40637:tid 40662] [client 20.43.1.132:53182] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "afZmzJB-U30YNJ6CyVg2CAAAAA8"]
[Sun May 03 05:04:13.178517 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:53210] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "afZmzZB-U30YNJ6CyVg2CwAAAA4"]
[Sun May 03 05:04:13.692079 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:54527] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "afZmza9rkyoICq7qxvFbVgAAAIo"]
[Sun May 03 05:04:14.165312 2026] [:error] [pid 40639:tid 40719] [client 20.43.1.132:54460] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "afZmzq9rkyoICq7qxvFbWAAAAJI"]
[Sun May 03 05:04:14.597094 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:55119] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "afZmznWfIjnWjXCxeM4bXgAAAQc"]
[Sun May 03 05:04:15.064897 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:54491] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "afZmz_1lQrIvlEdzcVcJYwAAAMw"]
[Sun May 03 05:04:15.488756 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:53863] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "afZmz3WfIjnWjXCxeM4bZwAAAQ8"]
[Sun May 03 05:04:15.960697 2026] [:error] [pid 21934:tid 21952] [client 20.43.1.132:54400] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "afZmz3WfIjnWjXCxeM4bbAAAARA"]
[Sun May 03 05:04:16.400120 2026] [:error] [pid 40638:tid 40684] [client 20.43.1.132:54435] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "afZm0Ph3VcFjJ7H1mBaiKAAAAEo"]
[Sun May 03 05:04:16.870462 2026] [:error] [pid 40638:tid 40685] [client 20.43.1.132:55077] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "afZm0Ph3VcFjJ7H1mBaiKwAAAEs"]
[Sun May 03 05:04:17.287168 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:55072] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "afZm0fh3VcFjJ7H1mBaiLQAAAFE"]
[Sun May 03 05:04:17.736553 2026] [:error] [pid 40637:tid 40654] [client 20.43.1.132:53139] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "afZm0ZB-U30YNJ6CyVg2EgAAAAc"]
[Sun May 03 05:04:18.186728 2026] [:error] [pid 40732:tid 40766] [client 20.43.1.132:55067] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "afZm0v1lQrIvlEdzcVcJZwAAANY"]
[Sun May 03 05:04:18.614660 2026] [:error] [pid 40637:tid 40669] [client 20.43.1.132:53201] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "afZm0pB-U30YNJ6CyVg2EwAAABY"]
[Sun May 03 05:04:19.086916 2026] [:error] [pid 40639:tid 40704] [client 20.43.1.132:54458] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "afZm069rkyoICq7qxvFbYgAAAIM"]
[Sun May 03 05:04:19.548332 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:54463] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "afZm05B-U30YNJ6CyVg2FQAAAA4"]
[Sun May 03 05:04:20.007913 2026] [:error] [pid 21934:tid 21946] [client 20.43.1.132:53815] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "afZm1HWfIjnWjXCxeM4bhQAAAQo"]
[Sun May 03 05:04:20.477601 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:54455] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "afZm1P1lQrIvlEdzcVcJaAAAAM0"]
[Sun May 03 05:04:20.943635 2026] [:error] [pid 40638:tid 40692] [client 20.43.1.132:53872] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "afZm1Ph3VcFjJ7H1mBaiNAAAAFI"]
[Sun May 03 05:04:21.418452 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:53804] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "afZm1fh3VcFjJ7H1mBaiNgAAAEw"]
[Sun May 03 05:04:21.868507 2026] [:error] [pid 40639:tid 40719] [client 20.43.1.132:55161] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "afZm1a9rkyoICq7qxvFbaAAAAJI"]
[Sun May 03 05:04:22.289866 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:54474] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "afZm1nWfIjnWjXCxeM4bkgAAAQU"]
[Sun May 03 05:04:22.717088 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:53190] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "afZm1nWfIjnWjXCxeM4blwAAARU"]
[Sun May 03 05:04:23.154172 2026] [:error] [pid 21934:tid 21942] [client 20.43.1.132:55055] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "afZm13WfIjnWjXCxeM4bmwAAAQY"]
[Sun May 03 05:04:23.600681 2026] [:error] [pid 40732:tid 40761] [client 20.43.1.132:54430] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "afZm1_1lQrIvlEdzcVcJdAAAANE"]
[Sun May 03 05:04:24.056018 2026] [:error] [pid 40732:tid 40747] [client 20.43.1.132:54405] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "afZm2P1lQrIvlEdzcVcJdgAAAMM"]
[Sun May 03 05:04:24.540597 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:53233] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "afZm2P1lQrIvlEdzcVcJeAAAAM0"]
[Sun May 03 05:04:24.995023 2026] [:error] [pid 40732:tid 40748] [client 20.43.1.132:54487] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "afZm2P1lQrIvlEdzcVcJewAAAMQ"]
[Sun May 03 05:04:25.420941 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55134] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "afZm2XWfIjnWjXCxeM4bswAAAQQ"]
[Sun May 03 05:04:25.857384 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:54478] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "afZm2f1lQrIvlEdzcVcJgAAAAMU"]
[Sun May 03 05:04:26.283442 2026] [:error] [pid 40637:tid 40671] [client 20.43.1.132:53789] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "afZm2pB-U30YNJ6CyVg2GgAAABg"]
[Sun May 03 05:04:26.723786 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:55131] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "afZm2nWfIjnWjXCxeM4bwwAAAQI"]
[Sun May 03 05:04:27.272531 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:55041] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "afZm2_1lQrIvlEdzcVcJjwAAANc"]
[Sun May 03 05:04:27.770318 2026] [:error] [pid 40732:tid 40760] [client 20.43.1.132:54470] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "afZm2_1lQrIvlEdzcVcJkgAAANA"]
[Sun May 03 05:04:28.195376 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:52267] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/9.php"] [unique_id "afZm3HWfIjnWjXCxeM4bzwAAARE"]
[Sun May 03 05:04:28.682369 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:54496] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "afZm3HWfIjnWjXCxeM4b1gAAAQQ"]
[Sun May 03 05:04:29.145872 2026] [:error] [pid 40732:tid 40752] [client 20.43.1.132:54481] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "afZm3f1lQrIvlEdzcVcJnQAAAMg"]
[Sun May 03 05:04:29.558413 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:55124] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "afZm3XWfIjnWjXCxeM4b3QAAAQ0"]
[Sun May 03 05:04:29.984561 2026] [:error] [pid 21934:tid 21947] [client 20.43.1.132:54447] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/10.php"] [unique_id "afZm3XWfIjnWjXCxeM4b4gAAAQs"]
[Sun May 03 05:04:30.406854 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:53869] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "afZm3nWfIjnWjXCxeM4b5gAAAQg"]
[Sun May 03 05:04:30.835364 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:53217] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "afZm3pB-U30YNJ6CyVg2KQAAAA4"]
[Sun May 03 05:04:31.276478 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:54461] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "afZm33WfIjnWjXCxeM4b7wAAARU"]
[Sun May 03 05:04:31.707358 2026] [:error] [pid 40638:tid 40680] [client 20.43.1.132:54413] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/100.php"] [unique_id "afZm3_h3VcFjJ7H1mBaiQgAAAEY"]
[Sun May 03 05:04:32.181645 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:54433] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZm4HWfIjnWjXCxeM4b-AAAARI"]
[Sun May 03 05:04:32.650700 2026] [:error] [pid 40637:tid 40650] [client 20.43.1.132:52339] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZm4JB-U30YNJ6CyVg2LAAAAAM"]
[Sun May 03 05:04:33.087306 2026] [:error] [pid 40637:tid 40658] [client 20.43.1.132:54510] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZm4ZB-U30YNJ6CyVg2LQAAAAs"]
[Sun May 03 05:04:33.507582 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:53881] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afZm4XWfIjnWjXCxeM4cAwAAARg"]
[Sun May 03 05:04:33.946989 2026] [:error] [pid 21934:tid 21939] [client 20.43.1.132:55141] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afZm4XWfIjnWjXCxeM4cBgAAAQM"]
[Sun May 03 05:04:34.364599 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:54449] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afZm4vh3VcFjJ7H1mBaiRAAAAE0"]
[Sun May 03 05:04:34.856167 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:54417] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afZm4nWfIjnWjXCxeM4cDgAAAQw"]
[Sun May 03 05:04:35.319250 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:55127] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afZm43WfIjnWjXCxeM4cEgAAARE"]
[Sun May 03 05:04:35.738190 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:54513] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afZm4_1lQrIvlEdzcVcJqQAAAM0"]
[Sun May 03 05:04:36.163664 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:55107] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afZm5HWfIjnWjXCxeM4cGQAAAQI"]
[Sun May 03 05:04:36.582272 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:53780] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afZm5HWfIjnWjXCxeM4cHgAAAQc"]
[Sun May 03 05:04:37.020778 2026] [:error] [pid 40639:tid 40706] [client 20.43.1.132:54440] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afZm5a9rkyoICq7qxvFbkgAAAIU"]
[Sun May 03 05:04:37.449757 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:55150] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "afZm5a9rkyoICq7qxvFbkwAAAI4"]
[Sun May 03 05:04:37.864001 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55159] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "afZm5XWfIjnWjXCxeM4cLAAAAQQ"]
[Sun May 03 05:04:38.306434 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:55042] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "afZm5nWfIjnWjXCxeM4cMgAAARM"]
[Sun May 03 05:04:38.725476 2026] [:error] [pid 40637:tid 40664] [client 20.43.1.132:53215] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/111.php"] [unique_id "afZm5pB-U30YNJ6CyVg2MgAAABE"]
[Sun May 03 05:04:39.146140 2026] [:error] [pid 40637:tid 40651] [client 20.43.1.132:54466] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afZm55B-U30YNJ6CyVg2MwAAAAQ"]
[Sun May 03 05:04:39.593301 2026] [:error] [pid 40732:tid 40750] [client 20.43.1.132:55092] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afZm5_1lQrIvlEdzcVcJrQAAAMY"]
[Sun May 03 05:04:40.010803 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:53181] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afZm6HWfIjnWjXCxeM4cOAAAARc"]
[Sun May 03 05:04:40.459035 2026] [:error] [pid 40638:tid 40694] [client 20.43.1.132:55066] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afZm6Ph3VcFjJ7H1mBaiSgAAAFQ"]
[Sun May 03 05:04:40.875106 2026] [:error] [pid 40732:tid 40765] [client 20.43.1.132:53876] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afZm6P1lQrIvlEdzcVcJsAAAANU"]
[Sun May 03 05:04:41.333305 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:54441] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afZm6fh3VcFjJ7H1mBaiTAAAAEw"]
[Sun May 03 05:04:41.804696 2026] [:error] [pid 40638:tid 40690] [client 20.43.1.132:53805] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afZm6fh3VcFjJ7H1mBaiTQAAAFA"]
[Sun May 03 05:04:42.244710 2026] [:error] [pid 40637:tid 40658] [client 20.43.1.132:51659] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afZm6pB-U30YNJ6CyVg2NwAAAAs"]
[Sun May 03 05:04:42.695869 2026] [:error] [pid 40732:tid 40747] [client 20.43.1.132:54474] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afZm6v1lQrIvlEdzcVcJtwAAAMM"]
[Sun May 03 05:04:43.134592 2026] [:error] [pid 40732:tid 40751] [client 20.43.1.132:53237] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afZm6_1lQrIvlEdzcVcJuQAAAMc"]
[Sun May 03 05:04:43.562676 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:55108] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afZm6_1lQrIvlEdzcVcJugAAAM0"]
[Sun May 03 05:04:44.100991 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:53801] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afZm7Ph3VcFjJ7H1mBaiUQAAAE0"]
[Sun May 03 05:04:44.558038 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:55139] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afZm7HWfIjnWjXCxeM4cOwAAAQQ"]
[Sun May 03 05:04:44.990388 2026] [:error] [pid 40637:tid 40665] [client 20.43.1.132:53760] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afZm7JB-U30YNJ6CyVg2OwAAABI"]
[Sun May 03 05:04:45.501767 2026] [:error] [pid 40638:tid 40693] [client 20.43.1.132:53216] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afZm7fh3VcFjJ7H1mBaiVQAAAFM"]
[Sun May 03 05:04:45.957521 2026] [:error] [pid 40637:tid 40669] [client 20.43.1.132:53135] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afZm7ZB-U30YNJ6CyVg2PQAAABY"]
[Sun May 03 05:04:46.416823 2026] [:error] [pid 40638:tid 40688] [client 20.43.1.132:53873] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "afZm7vh3VcFjJ7H1mBaiVwAAAE4"]
[Sun May 03 05:04:46.869029 2026] [:error] [pid 21934:tid 21939] [client 20.43.1.132:55048] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "afZm7nWfIjnWjXCxeM4cPQAAAQM"]
[Sun May 03 05:04:47.353418 2026] [:error] [pid 40732:tid 40747] [client 20.43.1.132:54454] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "afZm7_1lQrIvlEdzcVcJwgAAAMM"]
[Sun May 03 05:04:47.836974 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:54462] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ass.php"] [unique_id "afZm7_1lQrIvlEdzcVcJxAAAAM0"]
[Sun May 03 05:04:48.271866 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:55068] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "afZm8P1lQrIvlEdzcVcJxQAAAMo"]
[Sun May 03 05:04:48.711343 2026] [:error] [pid 40639:tid 40724] [client 20.43.1.132:53836] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "afZm8K9rkyoICq7qxvFbmgAAAJc"]
[Sun May 03 05:04:49.209140 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:54469] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "afZm8XWfIjnWjXCxeM4cPgAAAQ0"]
[Sun May 03 05:04:49.787701 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:55056] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "afZm8f1lQrIvlEdzcVcJyQAAAMU"]
[Sun May 03 05:04:50.260272 2026] [:error] [pid 40639:tid 40701] [client 20.43.1.132:53834] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "afZm8q9rkyoICq7qxvFbnAAAAIA"]
[Sun May 03 05:04:50.704093 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:55089] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "afZm8nWfIjnWjXCxeM4cRQAAAQ8"]
[Sun May 03 05:04:51.199009 2026] [:error] [pid 40638:tid 40681] [client 20.43.1.132:55099] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "afZm8_h3VcFjJ7H1mBaiXQAAAEc"]
[Sun May 03 05:04:51.644802 2026] [:error] [pid 40732:tid 40765] [client 20.43.1.132:53875] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no18.php"] [unique_id "afZm8_1lQrIvlEdzcVcJygAAANU"]
[Sun May 03 05:04:52.140870 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:52329] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "afZm9HWfIjnWjXCxeM4cSAAAARg"]
[Sun May 03 05:04:52.599813 2026] [:error] [pid 21934:tid 21958] [client 20.43.1.132:53871] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "afZm9HWfIjnWjXCxeM4cSgAAARY"]
[Sun May 03 05:04:53.011785 2026] [:error] [pid 40637:tid 40671] [client 20.43.1.132:55114] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "afZm9ZB-U30YNJ6CyVg2QwAAABg"]
[Sun May 03 05:04:53.494697 2026] [:error] [pid 40637:tid 40665] [client 20.43.1.132:53822] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fine.php"] [unique_id "afZm9ZB-U30YNJ6CyVg2RAAAABI"]
[Sun May 03 05:04:54.018966 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:54467] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afZm9vh3VcFjJ7H1mBaiYgAAAFE"]
[Sun May 03 05:04:54.564729 2026] [:error] [pid 40637:tid 40668] [client 20.43.1.132:53208] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afZm9pB-U30YNJ6CyVg2RwAAABU"]
[Sun May 03 05:04:55.008864 2026] [:error] [pid 40639:tid 40712] [client 20.43.1.132:53141] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afZm969rkyoICq7qxvFbowAAAIs"]
[Sun May 03 05:04:55.458410 2026] [:error] [pid 40639:tid 40704] [client 20.43.1.132:55135] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afZm969rkyoICq7qxvFbpgAAAIM"]
[Sun May 03 05:04:55.906462 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:55049] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "afZm93WfIjnWjXCxeM4cTQAAAQ0"]
[Sun May 03 05:04:56.411466 2026] [proxy_fcgi:error] [pid 40732:tid 40744] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:56.620868 2026] [proxy_fcgi:error] [pid 40732:tid 40765] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:56.846502 2026] [proxy_fcgi:error] [pid 40732:tid 40763] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:57.083674 2026] [proxy_fcgi:error] [pid 40732:tid 40753] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:57.329578 2026] [proxy_fcgi:error] [pid 40732:tid 40756] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:57.552912 2026] [proxy_fcgi:error] [pid 40732:tid 40759] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:57.767085 2026] [proxy_fcgi:error] [pid 40732:tid 40746] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:58.000715 2026] [proxy_fcgi:error] [pid 40732:tid 40747] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:58.211270 2026] [proxy_fcgi:error] [pid 40732:tid 40761] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:58.423505 2026] [proxy_fcgi:error] [pid 40732:tid 40751] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:58.633810 2026] [proxy_fcgi:error] [pid 40732:tid 40745] [client 20.43.1.132:53203] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:04:58.840298 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:53203] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZm-v1lQrIvlEdzcVcJ4AAAAMo"]
[Sun May 03 05:04:59.283322 2026] [:error] [pid 40638:tid 40696] [client 20.43.1.132:53853] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZm-_h3VcFjJ7H1mBaiZwAAAFY"]
[Sun May 03 05:04:59.785975 2026] [:error] [pid 40638:tid 40684] [client 20.43.1.132:55101] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZm-_h3VcFjJ7H1mBaiaQAAAEo"]
[Sun May 03 05:05:00.272149 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:55061] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZm_HWfIjnWjXCxeM4cWwAAARc"]
[Sun May 03 05:05:00.741791 2026] [:error] [pid 40639:tid 40714] [client 20.43.1.132:55153] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "afZm_K9rkyoICq7qxvFbsAAAAI0"]
[Sun May 03 05:05:01.195199 2026] [:error] [pid 40639:tid 40703] [client 20.43.1.132:53239] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "afZm_a9rkyoICq7qxvFbsQAAAII"]
[Sun May 03 05:05:01.717978 2026] [:error] [pid 21934:tid 21952] [client 20.43.1.132:53870] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "afZm_XWfIjnWjXCxeM4cXgAAARA"]
[Sun May 03 05:05:02.157502 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:52299] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/66.php"] [unique_id "afZm_nWfIjnWjXCxeM4cYAAAAQg"]
[Sun May 03 05:05:02.623309 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:53771] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "afZm_nWfIjnWjXCxeM4cYgAAARg"]
[Sun May 03 05:05:03.136614 2026] [:error] [pid 40639:tid 40721] [client 20.43.1.132:53765] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "afZm_69rkyoICq7qxvFbuQAAAJQ"]
[Sun May 03 05:05:03.623168 2026] [:error] [pid 40732:tid 40758] [client 20.43.1.132:55144] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "afZm__1lQrIvlEdzcVcJ7QAAAM4"]
[Sun May 03 05:05:04.100724 2026] [:error] [pid 40732:tid 40760] [client 20.43.1.132:53193] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "afZnAP1lQrIvlEdzcVcJ8QAAANA"]
[Sun May 03 05:05:04.587748 2026] [:error] [pid 40638:tid 40679] [client 20.43.1.132:55147] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "afZnAPh3VcFjJ7H1mBaibAAAAEU"]
[Sun May 03 05:05:05.007796 2026] [:error] [pid 40637:tid 40670] [client 20.43.1.132:53175] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "afZnAZB-U30YNJ6CyVg2SwAAABc"]
[Sun May 03 05:05:05.482564 2026] [:error] [pid 21934:tid 21942] [client 20.43.1.132:53171] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "afZnAXWfIjnWjXCxeM4cZgAAAQY"]
[Sun May 03 05:05:05.941884 2026] [:error] [pid 40637:tid 40655] [client 20.43.1.132:53796] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ol.php"] [unique_id "afZnAZB-U30YNJ6CyVg2TQAAAAg"]
[Sun May 03 05:05:06.382044 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:54468] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "afZnAnWfIjnWjXCxeM4caQAAARg"]
[Sun May 03 05:05:06.869883 2026] [:error] [pid 40639:tid 40705] [client 20.43.1.132:53790] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "afZnAq9rkyoICq7qxvFbvQAAAIQ"]
[Sun May 03 05:05:07.341551 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:54426] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "afZnA_1lQrIvlEdzcVcJ8wAAAMw"]
[Sun May 03 05:05:07.760730 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:55148] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "afZnA3WfIjnWjXCxeM4cbgAAAQ8"]
[Sun May 03 05:05:08.245294 2026] [:error] [pid 21934:tid 21942] [client 20.43.1.132:55162] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "afZnBHWfIjnWjXCxeM4ccgAAAQY"]
[Sun May 03 05:05:08.703467 2026] [:error] [pid 21934:tid 21952] [client 20.43.1.132:52241] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "afZnBHWfIjnWjXCxeM4cdQAAARA"]
[Sun May 03 05:05:09.203002 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:54476] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "afZnBXWfIjnWjXCxeM4ceQAAARU"]
[Sun May 03 05:05:09.643559 2026] [:error] [pid 40637:tid 40659] [client 20.43.1.132:53838] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "afZnBZB-U30YNJ6CyVg2UwAAAAw"]
[Sun May 03 05:05:10.102838 2026] [:error] [pid 40639:tid 40722] [client 20.43.1.132:53149] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "afZnBq9rkyoICq7qxvFbwwAAAJU"]
[Sun May 03 05:05:10.610887 2026] [:error] [pid 40639:tid 40701] [client 20.43.1.132:54489] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "afZnBq9rkyoICq7qxvFbxQAAAIA"]
[Sun May 03 05:05:11.034731 2026] [:error] [pid 40639:tid 40721] [client 20.43.1.132:55083] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "afZnB69rkyoICq7qxvFbyAAAAJQ"]
[Sun May 03 05:05:11.548795 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:54505] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/style.php"] [unique_id "afZnB3WfIjnWjXCxeM4chAAAARc"]
[Sun May 03 05:05:12.024363 2026] [:error] [pid 21934:tid 21939] [client 20.43.1.132:53777] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "afZnCHWfIjnWjXCxeM4ciQAAAQM"]
[Sun May 03 05:05:12.533895 2026] [:error] [pid 40639:tid 40709] [client 20.43.1.132:54507] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "afZnCK9rkyoICq7qxvFbyQAAAIg"]
[Sun May 03 05:05:13.042527 2026] [:error] [pid 40732:tid 40764] [client 20.43.1.132:55143] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "afZnCf1lQrIvlEdzcVcJ-QAAANQ"]
[Sun May 03 05:05:13.517945 2026] [:error] [pid 40732:tid 40763] [client 20.43.1.132:53236] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "afZnCf1lQrIvlEdzcVcJ-wAAANM"]
[Sun May 03 05:05:14.014268 2026] [:error] [pid 40732:tid 40761] [client 20.43.1.132:53213] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZnCv1lQrIvlEdzcVcJ_wAAANE"]
[Sun May 03 05:05:14.501081 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:54477] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZnCnWfIjnWjXCxeM4clgAAAQw"]
[Sun May 03 05:05:14.922356 2026] [:error] [pid 40638:tid 40677] [client 20.43.1.132:53846] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZnCvh3VcFjJ7H1mBaidAAAAEM"]
[Sun May 03 05:05:15.335895 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:52240] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZnC3WfIjnWjXCxeM4cmAAAARg"]
[Sun May 03 05:05:15.819976 2026] [:error] [pid 40732:tid 40758] [client 20.43.1.132:53764] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "afZnC_1lQrIvlEdzcVcKBAAAAM4"]
[Sun May 03 05:05:16.275803 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:55128] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "afZnDHWfIjnWjXCxeM4cngAAARE"]
[Sun May 03 05:05:16.865828 2026] [:error] [pid 21934:tid 21958] [client 20.43.1.132:55165] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "afZnDHWfIjnWjXCxeM4cowAAARY"]
[Sun May 03 05:05:17.418049 2026] [:error] [pid 40732:tid 40764] [client 20.43.1.132:54410] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-act.php"] [unique_id "afZnDf1lQrIvlEdzcVcKCAAAANQ"]
[Sun May 03 05:05:17.862857 2026] [:error] [pid 40732:tid 40749] [client 20.43.1.132:53835] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afZnDf1lQrIvlEdzcVcKCwAAAMU"]
[Sun May 03 05:05:18.317931 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:53825] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afZnDnWfIjnWjXCxeM4cpwAAARU"]
[Sun May 03 05:05:18.430838 2026] [:error] [pid 40637:tid 40653] [client 20.43.1.132:11639] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZnDpB-U30YNJ6CyVg2XAAAAAY"]
[Sun May 03 05:05:18.797131 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:53124] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afZnDv1lQrIvlEdzcVcKDQAAAMw"]
[Sun May 03 05:05:18.887397 2026] [:error] [pid 40732:tid 40746] [client 20.43.1.132:11611] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZnDv1lQrIvlEdzcVcKDgAAAMI"]
[Sun May 03 05:05:19.333633 2026] [:error] [pid 40639:tid 40714] [client 20.43.1.132:11610] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZnD69rkyoICq7qxvFbzAAAAI0"]
[Sun May 03 05:05:19.754694 2026] [:error] [pid 40637:tid 40659] [client 20.43.1.132:59525] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afZnD5B-U30YNJ6CyVg2YQAAAAw"]
[Sun May 03 05:05:19.818949 2026] [:error] [pid 40637:tid 40664] [client 20.43.1.132:52301] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afZnD5B-U30YNJ6CyVg2YgAAABE"]
[Sun May 03 05:05:20.297378 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:51596] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afZnEK9rkyoICq7qxvFb0gAAAI4"]
[Sun May 03 05:05:22.008085 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:53178] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afZnEv1lQrIvlEdzcVcKEQAAANc"]
[Sun May 03 05:05:22.704083 2026] [:error] [pid 40732:tid 40766] [client 20.43.1.132:53136] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afZnEv1lQrIvlEdzcVcKFwAAANY"]
[Sun May 03 05:05:23.245809 2026] [:error] [pid 21934:tid 21958] [client 20.43.1.132:52337] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afZnE3WfIjnWjXCxeM4csgAAARY"]
[Sun May 03 05:05:23.979652 2026] [:error] [pid 40638:tid 40695] [client 20.43.1.132:53247] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZnE_h3VcFjJ7H1mBaigQAAAFU"]
[Sun May 03 05:05:24.482373 2026] [:error] [pid 40637:tid 40661] [client 20.43.1.132:53859] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZnFJB-U30YNJ6CyVg2ZgAAAA4"]
[Sun May 03 05:05:25.062317 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:53196] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZnFXWfIjnWjXCxeM4ctgAAARc"]
[Sun May 03 05:05:25.484271 2026] [:error] [pid 40639:tid 40722] [client 20.43.1.132:52304] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZnFa9rkyoICq7qxvFb2QAAAJU"]
[Sun May 03 05:05:26.014799 2026] [:error] [pid 40639:tid 40719] [client 20.43.1.132:55156] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afZnFq9rkyoICq7qxvFb3QAAAJI"]
[Sun May 03 05:05:26.471657 2026] [:error] [pid 21934:tid 21946] [client 20.43.1.132:53220] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afZnFnWfIjnWjXCxeM4cuAAAAQo"]
[Sun May 03 05:05:26.970017 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:54500] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afZnFq9rkyoICq7qxvFb4QAAAIY"]
[Sun May 03 05:05:27.416965 2026] [:error] [pid 40638:tid 40675] [client 20.43.1.132:53247] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afZnF_h3VcFjJ7H1mBaihwAAAEE"]
[Sun May 03 05:05:27.857223 2026] [:error] [pid 40639:tid 40704] [client 20.43.1.132:53860] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afZnF69rkyoICq7qxvFb5AAAAIM"]
[Sun May 03 05:05:28.285954 2026] [:error] [pid 40638:tid 40692] [client 20.43.1.132:54479] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afZnGPh3VcFjJ7H1mBaiiQAAAFI"]
[Sun May 03 05:05:28.779636 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:53131] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afZnGHWfIjnWjXCxeM4cvAAAARE"]
[Sun May 03 05:05:29.205547 2026] [:error] [pid 40639:tid 40713] [client 20.43.1.132:54407] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afZnGa9rkyoICq7qxvFb6QAAAIw"]
[Sun May 03 05:05:29.654306 2026] [:error] [pid 40639:tid 40706] [client 20.43.1.132:53845] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZnGa9rkyoICq7qxvFb6wAAAIU"]
[Sun May 03 05:05:30.085959 2026] [:error] [pid 40639:tid 40721] [client 20.43.1.132:53161] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZnGq9rkyoICq7qxvFb7gAAAJQ"]
[Sun May 03 05:05:30.618373 2026] [:error] [pid 40639:tid 40704] [client 20.43.1.132:54464] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZnGq9rkyoICq7qxvFb8AAAAIM"]
[Sun May 03 05:05:31.236294 2026] [:error] [pid 40639:tid 40710] [client 20.43.1.132:53811] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZnG69rkyoICq7qxvFb8gAAAIk"]
[Sun May 03 05:05:31.738389 2026] [:error] [pid 40637:tid 40657] [client 20.43.1.132:53206] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZnG5B-U30YNJ6CyVg2bwAAAAo"]
[Sun May 03 05:05:32.166387 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:53820] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZnHHWfIjnWjXCxeM4cwAAAAQg"]
[Sun May 03 05:05:32.584913 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:54525] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZnHHWfIjnWjXCxeM4cxAAAAQ4"]
[Sun May 03 05:05:33.748687 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:55063] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZnHf1lQrIvlEdzcVcKGwAAAMk"]
[Sun May 03 05:05:34.255957 2026] [:error] [pid 40732:tid 40747] [client 20.43.1.132:55160] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnHv1lQrIvlEdzcVcKHgAAAMM"]
[Sun May 03 05:05:34.680441 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:53199] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnHnWfIjnWjXCxeM4czgAAAQI"]
[Sun May 03 05:05:35.176580 2026] [:error] [pid 40732:tid 40756] [client 20.43.1.132:53123] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnH_1lQrIvlEdzcVcKIQAAAMw"]
[Sun May 03 05:05:35.654139 2026] [:error] [pid 21934:tid 21958] [client 20.43.1.132:54424] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnH3WfIjnWjXCxeM4c0gAAARY"]
[Sun May 03 05:05:36.097624 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:55117] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afZnIK9rkyoICq7qxvFb9wAAAIo"]
[Sun May 03 05:05:36.515409 2026] [:error] [pid 40732:tid 40761] [client 20.43.1.132:54429] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afZnIP1lQrIvlEdzcVcKJgAAANE"]
[Sun May 03 05:05:36.949605 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:53792] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afZnIHWfIjnWjXCxeM4c1gAAAQU"]
[Sun May 03 05:05:37.478347 2026] [:error] [pid 40637:tid 40662] [client 20.43.1.132:53763] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afZnIZB-U30YNJ6CyVg2dgAAAA8"]
[Sun May 03 05:05:37.986252 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:52226] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnIXWfIjnWjXCxeM4c2gAAARc"]
[Sun May 03 05:05:38.424938 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:53773] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnInWfIjnWjXCxeM4c2wAAAQI"]
[Sun May 03 05:05:38.967795 2026] [:error] [pid 40638:tid 40692] [client 20.43.1.132:52345] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnIvh3VcFjJ7H1mBaikQAAAFI"]
[Sun May 03 05:05:39.411884 2026] [:error] [pid 40732:tid 40755] [client 20.43.1.132:53839] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afZnI_1lQrIvlEdzcVcKNAAAAMs"]
[Sun May 03 05:05:39.873398 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:53769] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "afZnI_1lQrIvlEdzcVcKNgAAAMk"]
[Sun May 03 05:05:40.312967 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:53854] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "afZnJHWfIjnWjXCxeM4c3wAAARU"]
[Sun May 03 05:05:40.739773 2026] [:error] [pid 40732:tid 40747] [client 20.43.1.132:53880] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "afZnJP1lQrIvlEdzcVcKOwAAAMM"]
[Sun May 03 05:05:41.211609 2026] [:error] [pid 21934:tid 21939] [client 20.43.1.132:53198] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "afZnJXWfIjnWjXCxeM4c4wAAAQM"]
[Sun May 03 05:05:41.696150 2026] [:error] [pid 40637:tid 40666] [client 20.43.1.132:54404] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZnJZB-U30YNJ6CyVg2ewAAABM"]
[Sun May 03 05:05:42.141286 2026] [:error] [pid 40732:tid 40746] [client 20.43.1.132:53761] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZnJv1lQrIvlEdzcVcKPwAAAMI"]
[Sun May 03 05:05:42.596800 2026] [:error] [pid 40638:tid 40683] [client 20.43.1.132:53164] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZnJvh3VcFjJ7H1mBailQAAAEk"]
[Sun May 03 05:05:43.038705 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:54512] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZnJ_1lQrIvlEdzcVcKRQAAAMk"]
[Sun May 03 05:05:43.525561 2026] [:error] [pid 40732:tid 40760] [client 20.43.1.132:54508] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "afZnJ_1lQrIvlEdzcVcKRwAAANA"]
[Sun May 03 05:05:43.987988 2026] [:error] [pid 40732:tid 40745] [client 20.43.1.132:53806] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "afZnJ_1lQrIvlEdzcVcKSgAAAME"]
[Sun May 03 05:05:44.476841 2026] [:error] [pid 40638:tid 40678] [client 20.43.1.132:55080] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "afZnKPh3VcFjJ7H1mBainAAAAEQ"]
[Sun May 03 05:05:44.929216 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:52327] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "afZnKP1lQrIvlEdzcVcKTAAAAMo"]
[Sun May 03 05:05:45.424772 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:51625] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnKa9rkyoICq7qxvFb-gAAAI4"]
[Sun May 03 05:05:45.907705 2026] [:error] [pid 40638:tid 40681] [client 20.43.1.132:54520] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnKfh3VcFjJ7H1mBaingAAAEc"]
[Sun May 03 05:05:46.362558 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:53224] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnKq9rkyoICq7qxvFb_gAAAIY"]
[Sun May 03 05:05:46.835618 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:53882] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnKq9rkyoICq7qxvFb_wAAAIo"]
[Sun May 03 05:05:47.273018 2026] [:error] [pid 40732:tid 40765] [client 20.43.1.132:53150] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "afZnK_1lQrIvlEdzcVcKVgAAANU"]
[Sun May 03 05:05:47.683981 2026] [:error] [pid 21934:tid 21939] [client 20.43.1.132:53772] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "afZnK3WfIjnWjXCxeM4c5wAAAQM"]
[Sun May 03 05:05:48.122364 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:53234] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "afZnLHWfIjnWjXCxeM4c6QAAAQw"]
[Sun May 03 05:05:48.583598 2026] [:error] [pid 40732:tid 40768] [client 20.43.1.132:55044] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/we.php"] [unique_id "afZnLP1lQrIvlEdzcVcKXAAAANg"]
[Sun May 03 05:05:49.541652 2026] [:error] [pid 40638:tid 40695] [client 20.43.1.132:52342] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afZnLfh3VcFjJ7H1mBaipQAAAFU"]
[Sun May 03 05:05:50.049414 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:52249] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afZnLnWfIjnWjXCxeM4c7QAAAQ8"]
[Sun May 03 05:05:50.595425 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:51689] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afZnLnWfIjnWjXCxeM4c8QAAAQI"]
[Sun May 03 05:05:51.111098 2026] [:error] [pid 40639:tid 40723] [client 20.43.1.132:55164] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afZnL69rkyoICq7qxvFcBAAAAJY"]
[Sun May 03 05:05:51.545653 2026] [:error] [pid 21934:tid 21952] [client 20.43.1.132:52317] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afZnL3WfIjnWjXCxeM4c-AAAARA"]
[Sun May 03 05:05:52.076730 2026] [:error] [pid 40637:tid 40649] [client 20.43.1.132:54506] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afZnMJB-U30YNJ6CyVg2gAAAAAI"]
[Sun May 03 05:05:52.499418 2026] [:error] [pid 40637:tid 40669] [client 20.43.1.132:52248] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afZnMJB-U30YNJ6CyVg2ggAAABY"]
[Sun May 03 05:05:52.936373 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:53174] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afZnMHWfIjnWjXCxeM4c-gAAARM"]
[Sun May 03 05:05:53.434666 2026] [:error] [pid 21934:tid 21936] [client 20.43.1.132:53848] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZnMXWfIjnWjXCxeM4c_QAAAQA"]
[Sun May 03 05:05:53.950284 2026] [:error] [pid 40639:tid 40714] [client 20.43.1.132:55040] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZnMa9rkyoICq7qxvFcDgAAAI0"]
[Sun May 03 05:05:54.453949 2026] [:error] [pid 21934:tid 21938] [client 20.43.1.132:53797] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZnMnWfIjnWjXCxeM4c_wAAAQI"]
[Sun May 03 05:05:54.952392 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:54472] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZnMq9rkyoICq7qxvFcEAAAAIo"]
[Sun May 03 05:05:56.326532 2026] [:error] [pid 21934:tid 21953] [client 20.43.1.132:53883] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZnNHWfIjnWjXCxeM4dCwAAARE"]
[Sun May 03 05:05:56.880793 2026] [:error] [pid 40732:tid 40748] [client 20.43.1.132:53241] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZnNP1lQrIvlEdzcVcKYQAAAMQ"]
[Sun May 03 05:05:57.393135 2026] [:error] [pid 40639:tid 40712] [client 20.43.1.132:53874] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZnNa9rkyoICq7qxvFcEQAAAIs"]
[Sun May 03 05:05:57.847296 2026] [:error] [pid 40732:tid 40746] [client 20.43.1.132:51016] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afZnNf1lQrIvlEdzcVcKYgAAAMI"]
[Sun May 03 05:05:59.064401 2026] [proxy_fcgi:error] [pid 40639:tid 40706] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:05:59.794636 2026] [proxy_fcgi:error] [pid 40639:tid 40718] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:06:00.255041 2026] [proxy_fcgi:error] [pid 40639:tid 40724] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:06:00.550751 2026] [proxy_fcgi:error] [pid 40639:tid 40707] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:06:00.796595 2026] [proxy_fcgi:error] [pid 40639:tid 40713] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:06:01.026293 2026] [proxy_fcgi:error] [pid 40639:tid 40723] [client 20.43.1.132:52320] AH01071: Got error 'Primary script unknown'
[Sun May 03 05:06:01.474760 2026] [:error] [pid 40639:tid 40720] [client 20.43.1.132:52320] [client 20.43.1.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afZnOa9rkyoICq7qxvFcJgAAAJM"]
[Sun May 03 05:06:01.952505 2026] [:error] [pid 40639:tid 40717] [client 20.43.1.132:53809] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "afZnOa9rkyoICq7qxvFcJwAAAJA"]
[Sun May 03 05:06:02.388947 2026] [:error] [pid 40639:tid 40701] [client 20.43.1.132:53244] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "afZnOq9rkyoICq7qxvFcKQAAAIA"]
[Sun May 03 05:06:02.886792 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:53785] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "afZnOq9rkyoICq7qxvFcKgAAAI4"]
[Sun May 03 05:06:03.310990 2026] [:error] [pid 40639:tid 40714] [client 20.43.1.132:53821] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "afZnO69rkyoICq7qxvFcLAAAAI0"]
[Sun May 03 05:06:03.835258 2026] [:error] [pid 40638:tid 40677] [client 20.43.1.132:51635] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZnO_h3VcFjJ7H1mBairgAAAEM"]
[Sun May 03 05:06:04.285938 2026] [:error] [pid 40638:tid 40679] [client 20.43.1.132:55096] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZnPPh3VcFjJ7H1mBairwAAAEU"]
[Sun May 03 05:06:04.726773 2026] [:error] [pid 40639:tid 40708] [client 20.43.1.132:52302] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZnPK9rkyoICq7qxvFcNAAAAIc"]
[Sun May 03 05:06:05.382227 2026] [:error] [pid 40638:tid 40685] [client 20.43.1.132:54473] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZnPfh3VcFjJ7H1mBaitAAAAEs"]
[Sun May 03 05:06:05.840464 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:53861] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZnPfh3VcFjJ7H1mBaitgAAAEw"]
[Sun May 03 05:06:06.278047 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:53812] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZnPnWfIjnWjXCxeM4dFgAAARc"]
[Sun May 03 05:06:06.815244 2026] [:error] [pid 40732:tid 40759] [client 20.43.1.132:53212] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZnPv1lQrIvlEdzcVcKaQAAAM8"]
[Sun May 03 05:06:07.231436 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:52314] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZnP69rkyoICq7qxvFcOQAAAIo"]
[Sun May 03 05:06:07.680813 2026] [:error] [pid 40637:tid 40650] [client 20.43.1.132:52238] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "afZnP5B-U30YNJ6CyVg2nAAAAAM"]
[Sun May 03 05:06:08.138528 2026] [:error] [pid 40638:tid 40674] [client 20.43.1.132:52228] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "afZnQPh3VcFjJ7H1mBaiuAAAAEA"]
[Sun May 03 05:06:08.579755 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:53778] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "afZnQP1lQrIvlEdzcVcKawAAAMo"]
[Sun May 03 05:06:09.031760 2026] [:error] [pid 40732:tid 40758] [client 20.43.1.132:53219] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/k.php"] [unique_id "afZnQf1lQrIvlEdzcVcKbAAAAM4"]
[Sun May 03 05:06:09.517279 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:55095] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "afZnQXWfIjnWjXCxeM4dGQAAAQU"]
[Sun May 03 05:06:10.008462 2026] [:error] [pid 40732:tid 40766] [client 20.43.1.132:53179] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "afZnQv1lQrIvlEdzcVcKbwAAANY"]
[Sun May 03 05:06:10.454150 2026] [:error] [pid 40732:tid 40760] [client 20.43.1.132:52311] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "afZnQv1lQrIvlEdzcVcKcQAAANA"]
[Sun May 03 05:06:10.881397 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:53162] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev.php"] [unique_id "afZnQnWfIjnWjXCxeM4dHgAAAQg"]
[Sun May 03 05:06:11.336522 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:52284] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "afZnQ3WfIjnWjXCxeM4dHwAAAQ8"]
[Sun May 03 05:06:11.781521 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:55076] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "afZnQ3WfIjnWjXCxeM4dIwAAARc"]
[Sun May 03 05:06:12.250771 2026] [:error] [pid 40637:tid 40669] [client 20.43.1.132:52234] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "afZnRJB-U30YNJ6CyVg2oAAAABY"]
[Sun May 03 05:06:12.703048 2026] [:error] [pid 40637:tid 40671] [client 20.43.1.132:52311] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bal.php"] [unique_id "afZnRJB-U30YNJ6CyVg2oQAAABg"]
[Sun May 03 05:06:13.153988 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:53153] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "afZnRf1lQrIvlEdzcVcKcgAAANc"]
[Sun May 03 05:06:13.615442 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:53879] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "afZnRXWfIjnWjXCxeM4dJwAAARU"]
[Sun May 03 05:06:14.242779 2026] [:error] [pid 40637:tid 40670] [client 20.43.1.132:54451] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "afZnRpB-U30YNJ6CyVg2pgAAABc"]
[Sun May 03 05:06:14.774710 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:53235] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/in.php"] [unique_id "afZnRnWfIjnWjXCxeM4dKgAAAQ0"]
[Sun May 03 05:06:15.476028 2026] [:error] [pid 40637:tid 40665] [client 20.43.1.132:52288] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "afZnR5B-U30YNJ6CyVg2qAAAABI"]
[Sun May 03 05:06:15.999215 2026] [:error] [pid 40637:tid 40651] [client 20.43.1.132:55045] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "afZnR5B-U30YNJ6CyVg2qwAAAAQ"]
[Sun May 03 05:06:16.449916 2026] [:error] [pid 21934:tid 21937] [client 20.43.1.132:53140] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "afZnSHWfIjnWjXCxeM4dLgAAAQE"]
[Sun May 03 05:06:16.955802 2026] [:error] [pid 40637:tid 40663] [client 20.43.1.132:53148] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gssdd.php"] [unique_id "afZnSJB-U30YNJ6CyVg2rAAAABA"]
[Sun May 03 05:06:17.419706 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:53776] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZnSXWfIjnWjXCxeM4dMAAAARM"]
[Sun May 03 05:06:17.851778 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:53158] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZnSXWfIjnWjXCxeM4dMQAAAQw"]
[Sun May 03 05:06:18.280618 2026] [:error] [pid 40638:tid 40693] [client 20.43.1.132:52328] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZnSvh3VcFjJ7H1mBaiuwAAAFM"]
[Sun May 03 05:06:18.910989 2026] [:error] [pid 40732:tid 40758] [client 20.43.1.132:54452] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZnSv1lQrIvlEdzcVcKeAAAAM4"]
[Sun May 03 05:06:19.387554 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:53824] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "afZnS_1lQrIvlEdzcVcKeQAAAMk"]
[Sun May 03 05:06:19.874496 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:54442] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "afZnS3WfIjnWjXCxeM4dNgAAARI"]
[Sun May 03 05:06:20.530044 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:53209] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "afZnTHWfIjnWjXCxeM4dOwAAAQ8"]
[Sun May 03 05:06:21.257428 2026] [:error] [pid 40638:tid 40687] [client 20.43.1.132:52225] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "afZnTfh3VcFjJ7H1mBaivwAAAE0"]
[Sun May 03 05:06:21.721111 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:52350] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZnTXWfIjnWjXCxeM4dPAAAAQ0"]
[Sun May 03 05:06:22.486308 2026] [:error] [pid 40639:tid 40709] [client 20.43.1.132:53238] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZnTq9rkyoICq7qxvFcQQAAAIg"]
[Sun May 03 05:06:23.039900 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:55098] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZnT_1lQrIvlEdzcVcKgwAAAM0"]
[Sun May 03 05:06:23.672243 2026] [:error] [pid 21934:tid 21948] [client 20.43.1.132:52268] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZnT3WfIjnWjXCxeM4dRwAAAQw"]
[Sun May 03 05:06:24.152493 2026] [:error] [pid 21934:tid 21958] [client 20.43.1.132:53232] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "afZnUHWfIjnWjXCxeM4dSwAAARY"]
[Sun May 03 05:06:24.677714 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:53129] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "afZnUHWfIjnWjXCxeM4dTQAAAQg"]
[Sun May 03 05:06:25.139346 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:55158] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "afZnUXWfIjnWjXCxeM4dUAAAARI"]
[Sun May 03 05:06:25.634658 2026] [:error] [pid 40637:tid 40667] [client 20.43.1.132:53827] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/axx.php"] [unique_id "afZnUZB-U30YNJ6CyVg2swAAABQ"]
[Sun May 03 05:06:26.081845 2026] [:error] [pid 40639:tid 40703] [client 20.43.1.132:53782] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afZnUq9rkyoICq7qxvFcRwAAAII"]
[Sun May 03 05:06:26.525599 2026] [:error] [pid 40639:tid 40724] [client 20.43.1.132:53130] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afZnUq9rkyoICq7qxvFcSgAAAJc"]
[Sun May 03 05:06:26.986217 2026] [:error] [pid 40639:tid 40707] [client 20.43.1.132:52321] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afZnUq9rkyoICq7qxvFcTAAAAIY"]
[Sun May 03 05:06:27.491607 2026] [:error] [pid 40638:tid 40678] [client 20.43.1.132:52272] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afZnU_h3VcFjJ7H1mBaiwQAAAEQ"]
[Sun May 03 05:06:27.980417 2026] [:error] [pid 21934:tid 21936] [client 20.43.1.132:53166] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afZnU3WfIjnWjXCxeM4dVgAAAQA"]
[Sun May 03 05:06:28.427131 2026] [:error] [pid 40639:tid 40723] [client 20.43.1.132:54420] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afZnVK9rkyoICq7qxvFcTwAAAJY"]
[Sun May 03 05:06:28.857060 2026] [:error] [pid 21934:tid 21954] [client 20.43.1.132:54445] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afZnVHWfIjnWjXCxeM4dWAAAARI"]
[Sun May 03 05:06:29.357647 2026] [:error] [pid 40637:tid 40648] [client 20.43.1.132:52348] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afZnVZB-U30YNJ6CyVg2uAAAAAE"]
[Sun May 03 05:06:29.772800 2026] [:error] [pid 40637:tid 40671] [client 20.43.1.132:53799] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afZnVZB-U30YNJ6CyVg2ugAAABg"]
[Sun May 03 05:06:30.199098 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:52294] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afZnVq9rkyoICq7qxvFcUAAAAI4"]
[Sun May 03 05:06:30.633844 2026] [:error] [pid 40638:tid 40696] [client 20.43.1.132:53122] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afZnVvh3VcFjJ7H1mBaiwwAAAFY"]
[Sun May 03 05:06:31.092942 2026] [:error] [pid 40638:tid 40684] [client 20.43.1.132:52326] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afZnV_h3VcFjJ7H1mBaixQAAAEo"]
[Sun May 03 05:06:31.525658 2026] [:error] [pid 40638:tid 40691] [client 20.43.1.132:53169] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "afZnV_h3VcFjJ7H1mBaixgAAAFE"]
[Sun May 03 05:06:31.956342 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:53221] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "afZnV_1lQrIvlEdzcVcKjgAAAMo"]
[Sun May 03 05:06:32.393290 2026] [:error] [pid 21934:tid 21956] [client 20.43.1.132:53120] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "afZnWHWfIjnWjXCxeM4dWQAAARQ"]
[Sun May 03 05:06:32.849091 2026] [:error] [pid 40638:tid 40686] [client 20.43.1.132:53143] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file48.php"] [unique_id "afZnWPh3VcFjJ7H1mBaiyQAAAEw"]
[Sun May 03 05:06:33.266062 2026] [:error] [pid 40637:tid 40653] [client 20.43.1.132:53802] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "afZnWZB-U30YNJ6CyVg2vwAAAAY"]
[Sun May 03 05:06:33.695425 2026] [:error] [pid 40639:tid 40716] [client 20.43.1.132:51656] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "afZnWa9rkyoICq7qxvFcUgAAAI8"]
[Sun May 03 05:06:34.131423 2026] [:error] [pid 21934:tid 21943] [client 20.43.1.132:53841] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "afZnWnWfIjnWjXCxeM4dXAAAAQc"]
[Sun May 03 05:06:34.582183 2026] [:error] [pid 40638:tid 40698] [client 20.43.1.132:53202] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/g.php"] [unique_id "afZnWvh3VcFjJ7H1mBaiygAAAFg"]
[Sun May 03 05:06:35.024058 2026] [:error] [pid 21934:tid 21944] [client 20.43.1.132:54516] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnW3WfIjnWjXCxeM4dXwAAAQg"]
[Sun May 03 05:06:35.475800 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:54456] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afZnW3WfIjnWjXCxeM4dYQAAAQU"]
[Sun May 03 05:06:35.989251 2026] [:error] [pid 40638:tid 40697] [client 20.43.1.132:52283] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "afZnW_h3VcFjJ7H1mBaizAAAAFc"]
[Sun May 03 05:06:36.443509 2026] [:error] [pid 40732:tid 40753] [client 20.43.1.132:52331] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "afZnXP1lQrIvlEdzcVcKkAAAAMk"]
[Sun May 03 05:06:36.894195 2026] [:error] [pid 40638:tid 40683] [client 20.43.1.132:51649] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "afZnXPh3VcFjJ7H1mBaizgAAAEk"]
[Sun May 03 05:06:37.376476 2026] [:error] [pid 40732:tid 40767] [client 20.43.1.132:53844] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "afZnXf1lQrIvlEdzcVcKkgAAANc"]
[Sun May 03 05:06:37.969232 2026] [:error] [pid 21934:tid 21942] [client 20.43.1.132:55125] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "afZnXXWfIjnWjXCxeM4daQAAAQY"]
[Sun May 03 05:06:38.443930 2026] [:error] [pid 40639:tid 40719] [client 20.43.1.132:51645] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "afZnXq9rkyoICq7qxvFcVwAAAJI"]
[Sun May 03 05:06:38.903338 2026] [:error] [pid 21934:tid 21955] [client 20.43.1.132:53200] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "afZnXnWfIjnWjXCxeM4dbAAAARM"]
[Sun May 03 05:06:39.458102 2026] [:error] [pid 21934:tid 21941] [client 20.43.1.132:52271] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ew.php"] [unique_id "afZnX3WfIjnWjXCxeM4dbwAAAQU"]
[Sun May 03 05:06:39.950182 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:53144] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "afZnX3WfIjnWjXCxeM4dcwAAAQ4"]
[Sun May 03 05:06:40.414624 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:51630] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "afZnYHWfIjnWjXCxeM4degAAARg"]
[Sun May 03 05:06:40.952604 2026] [:error] [pid 21934:tid 21951] [client 20.43.1.132:53227] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "afZnYHWfIjnWjXCxeM4dfgAAAQ8"]
[Sun May 03 05:06:41.463010 2026] [:error] [pid 40639:tid 40715] [client 20.43.1.132:53231] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file21.php"] [unique_id "afZnYa9rkyoICq7qxvFcWQAAAI4"]
[Sun May 03 05:06:41.881051 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:52239] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afZnYXWfIjnWjXCxeM4dhgAAARc"]
[Sun May 03 05:06:42.368722 2026] [:error] [pid 21934:tid 21940] [client 20.43.1.132:52230] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afZnYnWfIjnWjXCxeM4digAAAQQ"]
[Sun May 03 05:06:42.799325 2026] [:error] [pid 40732:tid 40748] [client 20.43.1.132:55059] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afZnYv1lQrIvlEdzcVcKlQAAAMQ"]
[Sun May 03 05:06:43.243436 2026] [:error] [pid 40637:tid 40665] [client 20.43.1.132:53157] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afZnY5B-U30YNJ6CyVg2wgAAABI"]
[Sun May 03 05:06:43.661287 2026] [:error] [pid 40638:tid 40678] [client 20.43.1.132:55103] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "afZnY_h3VcFjJ7H1mBai0AAAAEQ"]
[Sun May 03 05:06:44.081108 2026] [:error] [pid 40637:tid 40663] [client 20.43.1.132:55073] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "afZnZJB-U30YNJ6CyVg2wwAAABA"]
[Sun May 03 05:06:44.515402 2026] [:error] [pid 40638:tid 40692] [client 20.43.1.132:52264] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "afZnZPh3VcFjJ7H1mBai0QAAAFI"]
[Sun May 03 05:06:44.953515 2026] [:error] [pid 40732:tid 40754] [client 20.43.1.132:52335] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file18.php"] [unique_id "afZnZP1lQrIvlEdzcVcKmgAAAMo"]
[Sun May 03 05:06:45.376757 2026] [:error] [pid 40639:tid 40724] [client 20.43.1.132:54409] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afZnZa9rkyoICq7qxvFcYAAAAJc"]
[Sun May 03 05:06:45.828341 2026] [:error] [pid 21934:tid 21949] [client 20.43.1.132:51586] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afZnZXWfIjnWjXCxeM4dnwAAAQ0"]
[Sun May 03 05:06:46.275696 2026] [:error] [pid 40639:tid 40711] [client 20.43.1.132:52233] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afZnZq9rkyoICq7qxvFcYQAAAIo"]
[Sun May 03 05:06:46.740901 2026] [:error] [pid 21934:tid 21937] [client 20.43.1.132:54504] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afZnZnWfIjnWjXCxeM4dqAAAAQE"]
[Sun May 03 05:06:47.190034 2026] [:error] [pid 21934:tid 21957] [client 20.43.1.132:52297] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZnZ3WfIjnWjXCxeM4drAAAARU"]
[Sun May 03 05:06:47.631825 2026] [:error] [pid 21934:tid 21950] [client 20.43.1.132:54430] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZnZ3WfIjnWjXCxeM4dsAAAAQ4"]
[Sun May 03 05:06:48.056792 2026] [:error] [pid 21934:tid 21960] [client 20.43.1.132:53858] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZnaHWfIjnWjXCxeM4dtAAAARg"]
[Sun May 03 05:06:48.483755 2026] [:error] [pid 40732:tid 40744] [client 20.43.1.132:52310] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZnaP1lQrIvlEdzcVcKnAAAAMA"]
[Sun May 03 05:06:48.923969 2026] [:error] [pid 21934:tid 21946] [client 20.43.1.132:52273] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afZnaHWfIjnWjXCxeM4dugAAAQo"]
[Sun May 03 05:06:49.359550 2026] [:error] [pid 40732:tid 40763] [client 20.43.1.132:51652] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afZnaf1lQrIvlEdzcVcKnwAAANM"]
[Sun May 03 05:06:49.812785 2026] [:error] [pid 40732:tid 40757] [client 20.43.1.132:52334] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afZnaf1lQrIvlEdzcVcKoQAAAM0"]
[Sun May 03 05:06:50.265572 2026] [:error] [pid 21934:tid 21959] [client 20.43.1.132:54446] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afZnanWfIjnWjXCxeM4dwgAAARc"]
[Sun May 03 15:26:20.398665 2026] [proxy_fcgi:error] [pid 40422:tid 40448] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:20.615891 2026] [proxy_fcgi:error] [pid 40422:tid 40447] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:20.825808 2026] [proxy_fcgi:error] [pid 40422:tid 40441] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:21.041155 2026] [proxy_fcgi:error] [pid 40422:tid 40446] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:21.287891 2026] [proxy_fcgi:error] [pid 40422:tid 40442] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:21.496518 2026] [proxy_fcgi:error] [pid 40422:tid 40429] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:21.707749 2026] [proxy_fcgi:error] [pid 40422:tid 40430] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:21.936681 2026] [proxy_fcgi:error] [pid 40422:tid 40445] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:22.146367 2026] [proxy_fcgi:error] [pid 40422:tid 40427] [client 20.43.1.132:65317] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:26:22.573948 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:65317] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afb4nkHBbBLrXh6PBusgKQAAAVU"]
[Sun May 03 15:26:22.999077 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:65287] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afb4nkHBbBLrXh6PBusgKwAAAVE"]
[Sun May 03 15:26:23.474020 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:65366] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afb4n0HBbBLrXh6PBusgLQAAAUg"]
[Sun May 03 15:26:23.921352 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:65288] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "afb4n0HBbBLrXh6PBusgLwAAAUM"]
[Sun May 03 15:26:24.368112 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:65297] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afb4oPR_A42N-LtDyrsRpgAAABQ"]
[Sun May 03 15:26:24.849882 2026] [:error] [pid 34432:tid 34457] [client 20.43.1.132:65371] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afb4oJ73JKVQ0wlof4IeUwAAAdc"]
[Sun May 03 15:26:25.292865 2026] [:error] [pid 37130:tid 37226] [client 20.43.1.132:65357] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afb4oaIu7bmXKXicRk9ybAAAAI0"]
[Sun May 03 15:26:25.819799 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:65395] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afb4ofR_A42N-LtDyrsRqAAAAA8"]
[Sun May 03 15:26:26.306373 2026] [:error] [pid 37126:tid 37174] [client 20.43.1.132:65302] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afb4ovR_A42N-LtDyrsRqQAAABU"]
[Sun May 03 15:26:26.765507 2026] [:error] [pid 34432:tid 34453] [client 20.43.1.132:65309] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afb4op73JKVQ0wlof4IeWAAAAdM"]
[Sun May 03 15:26:27.212660 2026] [:error] [pid 40456:tid 40459] [client 20.43.1.132:65388] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afb4ozSujTvwdzEkjSc2QQAAAYE"]
[Sun May 03 15:26:27.667413 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:65283] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.tmb/"] [unique_id "afb4ozSujTvwdzEkjSc2RAAAAYU"]
[Sun May 03 15:26:28.096892 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:65401] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afb4pPR_A42N-LtDyrsRrQAAABQ"]
[Sun May 03 15:26:28.555653 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:65338] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afb4pDSujTvwdzEkjSc2SgAAAYw"]
[Sun May 03 15:26:28.996951 2026] [:error] [pid 37130:tid 37216] [client 20.43.1.132:64748] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afb4pKIu7bmXKXicRk9ybgAAAIM"]
[Sun May 03 15:26:29.419088 2026] [:error] [pid 40386:tid 40397] [client 20.43.1.132:65336] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.admin.php"] [unique_id "afb4pVHJDYRXUf3IbRQUWgAAAMk"]
[Sun May 03 15:26:29.881724 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:64708] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sw.php"] [unique_id "afb4paIu7bmXKXicRk9ycAAAAI8"]
[Sun May 03 15:26:30.329080 2026] [:error] [pid 37130:tid 37227] [client 20.43.1.132:65398] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sw.php"] [unique_id "afb4pqIu7bmXKXicRk9ycQAAAI4"]
[Sun May 03 15:26:30.767384 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:65286] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sw.php"] [unique_id "afb4pkHBbBLrXh6PBusgNgAAAUM"]
[Sun May 03 15:26:31.235521 2026] [:error] [pid 40422:tid 40450] [client 20.43.1.132:65389] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sw.php"] [unique_id "afb4p0HBbBLrXh6PBusgNwAAAVg"]
[Sun May 03 15:26:31.708349 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:65360] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afb4p_R_A42N-LtDyrsRsQAAAA8"]
[Sun May 03 15:26:32.344213 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:65393] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afb4qEHBbBLrXh6PBusgOgAAAUQ"]
[Sun May 03 15:26:32.781072 2026] [:error] [pid 34432:tid 34441] [client 20.43.1.132:65321] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afb4qJ73JKVQ0wlof4IeWgAAAcc"]
[Sun May 03 15:26:33.200948 2026] [:error] [pid 34432:tid 34458] [client 20.43.1.132:65314] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/vuln.php"] [unique_id "afb4qZ73JKVQ0wlof4IeXQAAAdg"]
[Sun May 03 15:26:33.692014 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:64747] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afb4qThvYFGNwhnPamrzqwAAARI"]
[Sun May 03 15:26:34.117490 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:65303] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afb4qjSujTvwdzEkjSc2TwAAAYY"]
[Sun May 03 15:26:34.549890 2026] [:error] [pid 37126:tid 37159] [client 20.43.1.132:65378] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afb4qvR_A42N-LtDyrsRtQAAAAY"]
[Sun May 03 15:26:34.997539 2026] [:error] [pid 37130:tid 37213] [client 20.43.1.132:65342] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-temp.php"] [unique_id "afb4qqIu7bmXKXicRk9ydwAAAIA"]
[Sun May 03 15:26:35.424545 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:65319] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afb4q_R_A42N-LtDyrsRugAAAAo"]
[Sun May 03 15:26:35.857891 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:65370] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afb4q_R_A42N-LtDyrsRvQAAAAA"]
[Sun May 03 15:26:36.313278 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:65369] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afb4rPR_A42N-LtDyrsRwgAAABI"]
[Sun May 03 15:26:36.752116 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:65326] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sxdfrt.php"] [unique_id "afb4rPR_A42N-LtDyrsRxQAAAAI"]
[Sun May 03 15:26:37.165945 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:65397] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afb4rThvYFGNwhnPamrzrgAAAQg"]
[Sun May 03 15:26:37.580899 2026] [:error] [pid 37246:tid 37252] [client 20.43.1.132:65316] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afb4rThvYFGNwhnPamrzsAAAAQQ"]
[Sun May 03 15:26:37.995506 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:65331] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afb4rfR_A42N-LtDyrsRygAAAAA"]
[Sun May 03 15:26:38.427678 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:65353] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afb4rjhvYFGNwhnPamrztAAAAQ4"]
[Sun May 03 15:26:38.845773 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:65289] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afb4rvR_A42N-LtDyrsRzAAAABc"]
[Sun May 03 15:26:39.259186 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:65344] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afb4rzSujTvwdzEkjSc2UQAAAYQ"]
[Sun May 03 15:26:39.758422 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:65349] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afb4rzSujTvwdzEkjSc2UwAAAYs"]
[Sun May 03 15:26:40.244312 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:65290] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afb4sDSujTvwdzEkjSc2VAAAAZY"]
[Sun May 03 15:26:40.706065 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:65352] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afb4sDhvYFGNwhnPamrzvAAAAQ8"]
[Sun May 03 15:26:41.203712 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:65375] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afb4sfR_A42N-LtDyrsRzwAAAA8"]
[Sun May 03 15:26:41.680099 2026] [:error] [pid 37246:tid 37263] [client 20.43.1.132:64739] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afb4sThvYFGNwhnPamrzwAAAAQ0"]
[Sun May 03 15:26:42.125181 2026] [:error] [pid 37127:tid 37210] [client 20.43.1.132:64734] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/class-bda.php"] [unique_id "afb4sv8khJXb5O5aWVUqlgAAAFg"]
[Sun May 03 15:26:42.599088 2026] [:error] [pid 37127:tid 37199] [client 20.43.1.132:64749] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afb4sv8khJXb5O5aWVUqmAAAAE4"]
[Sun May 03 15:26:43.169946 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:65335] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afb4s_R_A42N-LtDyrsR0gAAABQ"]
[Sun May 03 15:26:43.591061 2026] [:error] [pid 37246:tid 37274] [client 20.43.1.132:65373] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afb4szhvYFGNwhnPamrzxAAAARg"]
[Sun May 03 15:26:44.077325 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:64724] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/bhm.php"] [unique_id "afb4tPR_A42N-LtDyrsR1QAAABA"]
[Sun May 03 15:26:44.524005 2026] [:error] [pid 37126:tid 37159] [client 20.43.1.132:65341] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afb4tPR_A42N-LtDyrsR1gAAAAY"]
[Sun May 03 15:26:44.985222 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:65385] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afb4tDhvYFGNwhnPamrzxwAAAQ8"]
[Sun May 03 15:26:45.437793 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:64758] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afb4tfR_A42N-LtDyrsR2AAAAAo"]
[Sun May 03 15:26:45.898170 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:64743] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmu.php"] [unique_id "afb4tfR_A42N-LtDyrsR3AAAABY"]
[Sun May 03 15:26:46.335627 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:65396] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ref.php"] [unique_id "afb4tvR_A42N-LtDyrsR4AAAAAw"]
[Sun May 03 15:26:46.825059 2026] [:error] [pid 40386:tid 40406] [client 20.43.1.132:65329] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ref.php"] [unique_id "afb4tlHJDYRXUf3IbRQUYgAAANI"]
[Sun May 03 15:26:47.278886 2026] [:error] [pid 37126:tid 37156] [client 20.43.1.132:64712] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ref.php"] [unique_id "afb4t_R_A42N-LtDyrsR4gAAAAM"]
[Sun May 03 15:26:47.735615 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:65381] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ref.php"] [unique_id "afb4t_R_A42N-LtDyrsR4wAAABc"]
[Sun May 03 15:26:48.195305 2026] [:error] [pid 37126:tid 37152] [client 20.43.1.132:64693] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afb4uPR_A42N-LtDyrsR5QAAAAE"]
[Sun May 03 15:26:48.643398 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:65323] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afb4uEHBbBLrXh6PBusgPwAAAVI"]
[Sun May 03 15:26:49.176938 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64760] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afb4ufR_A42N-LtDyrsR6gAAAAI"]
[Sun May 03 15:26:49.636076 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:64705] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-xme.php"] [unique_id "afb4uThvYFGNwhnPamrzyQAAAQo"]
[Sun May 03 15:26:50.096359 2026] [:error] [pid 37130:tid 37224] [client 20.43.1.132:65285] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afb4uqIu7bmXKXicRk9yegAAAIs"]
[Sun May 03 15:26:50.554387 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:65368] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afb4uvR_A42N-LtDyrsR7QAAAAA"]
[Sun May 03 15:26:50.980823 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:65357] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afb4ujhvYFGNwhnPamrzygAAARY"]
[Sun May 03 15:26:51.439979 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:64644] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminer.php"] [unique_id "afb4u_R_A42N-LtDyrsR8QAAAAk"]
[Sun May 03 15:26:51.979653 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:65330] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afb4u_R_A42N-LtDyrsR8wAAABA"]
[Sun May 03 15:26:52.429123 2026] [:error] [pid 37126:tid 37159] [client 20.43.1.132:64657] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afb4vPR_A42N-LtDyrsR9QAAAAY"]
[Sun May 03 15:26:52.896315 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:65384] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afb4vPR_A42N-LtDyrsR9gAAAAA"]
[Sun May 03 15:26:53.346826 2026] [:error] [pid 37126:tid 37174] [client 20.43.1.132:65301] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ktfow.php"] [unique_id "afb4vfR_A42N-LtDyrsR-AAAABU"]
[Sun May 03 15:26:53.794115 2026] [:error] [pid 37130:tid 37227] [client 20.43.1.132:65387] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "afb4vaIu7bmXKXicRk9yfAAAAI4"]
[Sun May 03 15:26:54.242723 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:64754] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "afb4vv8khJXb5O5aWVUqnAAAAEY"]
[Sun May 03 15:26:54.664175 2026] [:error] [pid 34432:tid 34434] [client 20.43.1.132:65402] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "afb4vp73JKVQ0wlof4IeZAAAAcA"]
[Sun May 03 15:26:55.086189 2026] [:error] [pid 34432:tid 34447] [client 20.43.1.132:65306] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mode.php"] [unique_id "afb4v573JKVQ0wlof4IeZQAAAc0"]
[Sun May 03 15:26:55.542541 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:65346] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afb4v_R_A42N-LtDyrsR-wAAABI"]
[Sun May 03 15:26:55.983391 2026] [:error] [pid 34432:tid 34451] [client 20.43.1.132:65392] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afb4v573JKVQ0wlof4IeZwAAAdE"]
[Sun May 03 15:26:56.438603 2026] [:error] [pid 34432:tid 34448] [client 20.43.1.132:64745] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afb4wJ73JKVQ0wlof4IeaAAAAc4"]
[Sun May 03 15:26:56.998636 2026] [:error] [pid 34432:tid 34450] [client 20.43.1.132:65339] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/Xx.php"] [unique_id "afb4wJ73JKVQ0wlof4IeaQAAAdA"]
[Sun May 03 15:26:57.460822 2026] [:error] [pid 34432:tid 34436] [client 20.43.1.132:65334] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afb4wZ73JKVQ0wlof4IeagAAAcI"]
[Sun May 03 15:26:57.932143 2026] [:error] [pid 34432:tid 34458] [client 20.43.1.132:65399] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afb4wZ73JKVQ0wlof4IebAAAAdg"]
[Sun May 03 15:26:58.354784 2026] [:error] [pid 37130:tid 37213] [client 20.43.1.132:64704] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afb4wqIu7bmXKXicRk9yggAAAIA"]
[Sun May 03 15:26:58.783280 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:65363] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xmini.php"] [unique_id "afb4wjSujTvwdzEkjSc2YwAAAY4"]
[Sun May 03 15:26:59.215663 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:64672] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2468.php"] [unique_id "afb4w_R_A42N-LtDyrsR_wAAAAg"]
[Sun May 03 15:26:59.629003 2026] [:error] [pid 37126:tid 37166] [client 20.43.1.132:64709] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2468.php"] [unique_id "afb4w_R_A42N-LtDyrsSAgAAAA0"]
[Sun May 03 15:27:00.077673 2026] [:error] [pid 37126:tid 37156] [client 20.43.1.132:65310] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2468.php"] [unique_id "afb4xPR_A42N-LtDyrsSAwAAAAM"]
[Sun May 03 15:27:00.554706 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:64649] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2468.php"] [unique_id "afb4xDhvYFGNwhnPamrzzgAAAQw"]
[Sun May 03 15:27:00.996124 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:64736] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afb4xEHBbBLrXh6PBusgQAAAAUg"]
[Sun May 03 15:27:01.426750 2026] [:error] [pid 37126:tid 37160] [client 20.43.1.132:65337] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afb4xfR_A42N-LtDyrsSBwAAAAc"]
[Sun May 03 15:27:01.849282 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:65322] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afb4xfR_A42N-LtDyrsSCAAAABA"]
[Sun May 03 15:27:02.265052 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:64720] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afb4xvR_A42N-LtDyrsSCwAAAAo"]
[Sun May 03 15:27:02.703221 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:64767] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb4xlHJDYRXUf3IbRQUaAAAANQ"]
[Sun May 03 15:27:03.121383 2026] [:error] [pid 37127:tid 37189] [client 20.43.1.132:64752] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb4x_8khJXb5O5aWVUqngAAAEU"]
[Sun May 03 15:27:03.540757 2026] [:error] [pid 37127:tid 37187] [client 20.43.1.132:64755] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb4x_8khJXb5O5aWVUqnwAAAEM"]
[Sun May 03 15:27:03.959535 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:65313] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb4xzSujTvwdzEkjSc2aAAAAYs"]
[Sun May 03 15:27:04.376061 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:64763] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amdin.php"] [unique_id "afb4yEHBbBLrXh6PBusgRQAAAUQ"]
[Sun May 03 15:27:04.825030 2026] [:error] [pid 40422:tid 40428] [client 20.43.1.132:64762] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amdin.php"] [unique_id "afb4yEHBbBLrXh6PBusgSAAAAUI"]
[Sun May 03 15:27:05.241083 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:65340] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amdin.php"] [unique_id "afb4yaIu7bmXKXicRk9yhwAAAI8"]
[Sun May 03 15:27:05.668297 2026] [:error] [pid 37130:tid 37231] [client 20.43.1.132:65348] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/amdin.php"] [unique_id "afb4yaIu7bmXKXicRk9yiQAAAJI"]
[Sun May 03 15:27:06.086952 2026] [:error] [pid 34432:tid 34437] [client 20.43.1.132:65390] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/huya.php"] [unique_id "afb4yp73JKVQ0wlof4IecAAAAcM"]
[Sun May 03 15:27:06.512532 2026] [:error] [pid 40386:tid 40412] [client 20.43.1.132:64690] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/huya.php"] [unique_id "afb4ylHJDYRXUf3IbRQUagAAANg"]
[Sun May 03 15:27:06.936011 2026] [:error] [pid 34432:tid 34434] [client 20.43.1.132:64694] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/huya.php"] [unique_id "afb4yp73JKVQ0wlof4IecgAAAcA"]
[Sun May 03 15:27:07.352922 2026] [:error] [pid 34432:tid 34436] [client 20.43.1.132:65404] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/huya.php"] [unique_id "afb4y573JKVQ0wlof4IedQAAAcI"]
[Sun May 03 15:27:07.789909 2026] [:error] [pid 34432:tid 34458] [client 20.43.1.132:65308] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/puc.php"] [unique_id "afb4y573JKVQ0wlof4IedgAAAdg"]
[Sun May 03 15:27:08.204865 2026] [:error] [pid 37130:tid 37213] [client 20.43.1.132:65300] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/puc.php"] [unique_id "afb4zKIu7bmXKXicRk9yjgAAAIA"]
[Sun May 03 15:27:08.621233 2026] [:error] [pid 34432:tid 34454] [client 20.43.1.132:64713] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/puc.php"] [unique_id "afb4zJ73JKVQ0wlof4IeewAAAdQ"]
[Sun May 03 15:27:09.050497 2026] [:error] [pid 34432:tid 34456] [client 20.43.1.132:65343] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/puc.php"] [unique_id "afb4zZ73JKVQ0wlof4IefQAAAdY"]
[Sun May 03 15:27:09.464698 2026] [:error] [pid 34432:tid 34455] [client 20.43.1.132:65292] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/themes.php"] [unique_id "afb4zZ73JKVQ0wlof4IefwAAAdU"]
[Sun May 03 15:27:09.886208 2026] [:error] [pid 40422:tid 40426] [client 20.43.1.132:64707] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/themes.php"] [unique_id "afb4zUHBbBLrXh6PBusgTgAAAUA"]
[Sun May 03 15:27:10.300192 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:61504] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/themes.php"] [unique_id "afb4zkHBbBLrXh6PBusgTwAAAUQ"]
[Sun May 03 15:27:10.724214 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:65280] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/themes.php"] [unique_id "afb4zjhvYFGNwhnPamrzzwAAAQg"]
[Sun May 03 15:27:11.138181 2026] [:error] [pid 37130:tid 37215] [client 20.43.1.132:65315] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewp.php"] [unique_id "afb4z6Iu7bmXKXicRk9yjwAAAII"]
[Sun May 03 15:27:11.557869 2026] [:error] [pid 40386:tid 40398] [client 20.43.1.132:65296] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewp.php"] [unique_id "afb4z1HJDYRXUf3IbRQUbAAAAMo"]
[Sun May 03 15:27:11.979691 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:64756] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewp.php"] [unique_id "afb4zzSujTvwdzEkjSc2bQAAAZQ"]
[Sun May 03 15:27:12.405407 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:61548] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ewp.php"] [unique_id "afb40DSujTvwdzEkjSc2bgAAAZA"]
[Sun May 03 15:27:12.851844 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:65372] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afb40FHJDYRXUf3IbRQUcAAAAMU"]
[Sun May 03 15:27:13.277706 2026] [:error] [pid 40456:tid 40476] [client 20.43.1.132:61543] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afb40TSujTvwdzEkjSc2cQAAAZI"]
[Sun May 03 15:27:13.696680 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:65282] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afb40TSujTvwdzEkjSc2cwAAAZY"]
[Sun May 03 15:27:14.116787 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:65355] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afb40kHBbBLrXh6PBusgVAAAAUU"]
[Sun May 03 15:27:14.531770 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:65305] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb40jhvYFGNwhnPamrz0AAAAQE"]
[Sun May 03 15:27:14.955516 2026] [:error] [pid 37246:tid 37255] [client 20.43.1.132:65291] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb40jhvYFGNwhnPamrz0QAAAQc"]
[Sun May 03 15:27:15.377107 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:64679] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb400HBbBLrXh6PBusgWAAAAUo"]
[Sun May 03 15:27:15.827015 2026] [:error] [pid 37126:tid 37152] [client 20.43.1.132:64680] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dx.php"] [unique_id "afb40_R_A42N-LtDyrsSDgAAAAE"]
[Sun May 03 15:27:16.244925 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:65365] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "afb41PR_A42N-LtDyrsSEAAAABA"]
[Sun May 03 15:27:16.693491 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:61514] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "afb41DhvYFGNwhnPamrz1AAAARE"]
[Sun May 03 15:27:17.113587 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:65281] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "afb41fR_A42N-LtDyrsSFQAAAAo"]
[Sun May 03 15:27:17.528978 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:65394] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xff.php"] [unique_id "afb41fR_A42N-LtDyrsSGQAAABM"]
[Sun May 03 15:27:17.980355 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:65345] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "afb41VHJDYRXUf3IbRQUdAAAANQ"]
[Sun May 03 15:27:18.447692 2026] [:error] [pid 37126:tid 37156] [client 20.43.1.132:65312] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "afb41vR_A42N-LtDyrsSHAAAAAM"]
[Sun May 03 15:27:18.917691 2026] [:error] [pid 37130:tid 37215] [client 20.43.1.132:65405] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "afb41qIu7bmXKXicRk9ylgAAAII"]
[Sun May 03 15:27:19.338435 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:65325] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/lupo.php"] [unique_id "afb41zSujTvwdzEkjSc2dQAAAZM"]
[Sun May 03 15:27:19.768660 2026] [:error] [pid 37126:tid 37164] [client 20.43.1.132:65407] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "afb41_R_A42N-LtDyrsSHwAAAAs"]
[Sun May 03 15:27:20.205210 2026] [:error] [pid 34432:tid 34455] [client 20.43.1.132:64654] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "afb42J73JKVQ0wlof4IehQAAAdU"]
[Sun May 03 15:27:20.630563 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:65318] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "afb42PR_A42N-LtDyrsSIQAAABc"]
[Sun May 03 15:27:21.088320 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64725] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/awa.php"] [unique_id "afb42fR_A42N-LtDyrsSIwAAAAI"]
[Sun May 03 15:27:21.541846 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:61520] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "afb42fR_A42N-LtDyrsSJQAAAAA"]
[Sun May 03 15:27:21.993095 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:65328] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/popo.php"] [unique_id "afb42fR_A42N-LtDyrsSJwAAAAg"]
[Sun May 03 15:27:22.456192 2026] [proxy_fcgi:error] [pid 37246:tid 37271] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:22.667297 2026] [proxy_fcgi:error] [pid 37246:tid 37266] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:22.878387 2026] [proxy_fcgi:error] [pid 37246:tid 37270] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:23.090918 2026] [proxy_fcgi:error] [pid 37246:tid 37265] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:23.516972 2026] [proxy_fcgi:error] [pid 37246:tid 37251] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:23.729220 2026] [proxy_fcgi:error] [pid 37246:tid 37250] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:23.938927 2026] [proxy_fcgi:error] [pid 37246:tid 37262] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:24.148505 2026] [proxy_fcgi:error] [pid 37246:tid 37256] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:24.359852 2026] [proxy_fcgi:error] [pid 37246:tid 37249] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:24.575429 2026] [proxy_fcgi:error] [pid 37246:tid 37269] [client 20.43.1.132:65324] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:27:24.782624 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:65324] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "afb43DhvYFGNwhnPamrz4wAAARE"]
[Sun May 03 15:27:25.234813 2026] [:error] [pid 34432:tid 34458] [client 20.43.1.132:64723] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "afb43Z73JKVQ0wlof4IeigAAAdg"]
[Sun May 03 15:27:25.684627 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:65383] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "afb43fR_A42N-LtDyrsSMAAAABM"]
[Sun May 03 15:27:26.163606 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:65379] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/1.php"] [unique_id "afb43qIu7bmXKXicRk9ymQAAAI8"]
[Sun May 03 15:27:26.591917 2026] [:error] [pid 37126:tid 37166] [client 20.43.1.132:64663] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "afb43vR_A42N-LtDyrsSMQAAAA0"]
[Sun May 03 15:27:27.060100 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:65380] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "afb43_R_A42N-LtDyrsSMwAAABQ"]
[Sun May 03 15:27:27.477540 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:64683] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "afb43zhvYFGNwhnPamrz5AAAAQo"]
[Sun May 03 15:27:27.901650 2026] [:error] [pid 37126:tid 37160] [client 20.43.1.132:64703] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2.php"] [unique_id "afb43_R_A42N-LtDyrsSNQAAAAc"]
[Sun May 03 15:27:28.337940 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:64746] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "afb44DhvYFGNwhnPamrz5gAAAQs"]
[Sun May 03 15:27:28.768162 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:65295] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "afb44DhvYFGNwhnPamrz5wAAAQ4"]
[Sun May 03 15:27:29.200552 2026] [:error] [pid 37246:tid 37253] [client 20.43.1.132:61445] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "afb44ThvYFGNwhnPamrz6AAAAQU"]
[Sun May 03 15:27:29.619839 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:65299] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/3.php"] [unique_id "afb44TSujTvwdzEkjSc2fwAAAYM"]
[Sun May 03 15:27:30.041119 2026] [:error] [pid 34432:tid 34438] [client 20.43.1.132:64765] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "afb44p73JKVQ0wlof4IeiwAAAcQ"]
[Sun May 03 15:27:30.492154 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:64658] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "afb44jSujTvwdzEkjSc2gQAAAYU"]
[Sun May 03 15:27:30.930358 2026] [:error] [pid 40386:tid 40412] [client 20.43.1.132:64668] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "afb44lHJDYRXUf3IbRQUdQAAANg"]
[Sun May 03 15:27:31.382755 2026] [:error] [pid 34432:tid 34455] [client 20.43.1.132:64717] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/4.php"] [unique_id "afb44573JKVQ0wlof4IekwAAAdU"]
[Sun May 03 15:27:31.817442 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:64741] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "afb440HBbBLrXh6PBusgYwAAAVY"]
[Sun May 03 15:27:32.281693 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:65359] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "afb45EHBbBLrXh6PBusgZwAAAUc"]
[Sun May 03 15:27:32.728458 2026] [:error] [pid 40422:tid 40435] [client 20.43.1.132:64646] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "afb45EHBbBLrXh6PBusgaQAAAUk"]
[Sun May 03 15:27:33.178646 2026] [:error] [pid 37126:tid 37158] [client 20.43.1.132:64729] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/5.php"] [unique_id "afb45fR_A42N-LtDyrsSOQAAAAU"]
[Sun May 03 15:27:33.670550 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:61537] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "afb45UHBbBLrXh6PBusgbwAAAUw"]
[Sun May 03 15:27:34.106014 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64653] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "afb45vR_A42N-LtDyrsSPAAAAAI"]
[Sun May 03 15:27:34.564829 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:64753] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "afb45kHBbBLrXh6PBusgcgAAAVc"]
[Sun May 03 15:27:35.007504 2026] [:error] [pid 40386:tid 40396] [client 20.43.1.132:64643] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/6.php"] [unique_id "afb451HJDYRXUf3IbRQUdgAAAMg"]
[Sun May 03 15:27:35.461693 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:65304] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "afb45zSujTvwdzEkjSc2hAAAAZA"]
[Sun May 03 15:27:35.895761 2026] [:error] [pid 40422:tid 40450] [client 20.43.1.132:61509] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "afb450HBbBLrXh6PBusgdgAAAVg"]
[Sun May 03 15:27:36.345217 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:61532] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "afb46DhvYFGNwhnPamrz6wAAAQw"]
[Sun May 03 15:27:36.772200 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:64701] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/9.php"] [unique_id "afb46DSujTvwdzEkjSc2hQAAAZY"]
[Sun May 03 15:27:37.211204 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:65354] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "afb46fR_A42N-LtDyrsSRAAAABQ"]
[Sun May 03 15:27:37.663556 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:64722] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "afb46ThvYFGNwhnPamrz7wAAARE"]
[Sun May 03 15:27:38.126065 2026] [:error] [pid 37126:tid 37164] [client 20.43.1.132:65293] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "afb46vR_A42N-LtDyrsSRQAAAAs"]
[Sun May 03 15:27:38.569776 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:61546] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/10.php"] [unique_id "afb46vR_A42N-LtDyrsSRwAAAA4"]
[Sun May 03 15:27:38.994824 2026] [:error] [pid 37127:tid 37209] [client 20.43.1.132:64761] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "afb46v8khJXb5O5aWVUqpAAAAFc"]
[Sun May 03 15:27:39.418627 2026] [:error] [pid 37127:tid 37201] [client 20.43.1.132:64744] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "afb46_8khJXb5O5aWVUqpQAAAFA"]
[Sun May 03 15:27:39.855422 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:65403] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "afb46_8khJXb5O5aWVUqpgAAAEs"]
[Sun May 03 15:27:40.273198 2026] [:error] [pid 37130:tid 37220] [client 20.43.1.132:64645] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/100.php"] [unique_id "afb47KIu7bmXKXicRk9yoAAAAIc"]
[Sun May 03 15:27:40.734875 2026] [:error] [pid 37130:tid 37222] [client 20.43.1.132:61540] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afb47KIu7bmXKXicRk9yoQAAAIk"]
[Sun May 03 15:27:41.181908 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:64648] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afb47fR_A42N-LtDyrsSSwAAABI"]
[Sun May 03 15:27:41.750841 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:64731] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afb47fR_A42N-LtDyrsSTQAAABg"]
[Sun May 03 15:27:42.211331 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:64735] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afb47vR_A42N-LtDyrsSUQAAABA"]
[Sun May 03 15:27:42.715498 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:64732] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afb47vR_A42N-LtDyrsSUwAAAA8"]
[Sun May 03 15:27:43.156861 2026] [:error] [pid 37126:tid 37159] [client 20.43.1.132:61538] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afb47_R_A42N-LtDyrsSVwAAAAY"]
[Sun May 03 15:27:43.658453 2026] [:error] [pid 37126:tid 37166] [client 20.43.1.132:61527] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afb47_R_A42N-LtDyrsSWwAAAA0"]
[Sun May 03 15:27:44.096454 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:65358] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/f35_S.php"] [unique_id "afb48PR_A42N-LtDyrsSXAAAABE"]
[Sun May 03 15:27:44.562988 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:65307] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afb48PR_A42N-LtDyrsSXwAAAAk"]
[Sun May 03 15:27:45.009489 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:64651] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afb48fR_A42N-LtDyrsSYgAAABQ"]
[Sun May 03 15:27:45.436458 2026] [:error] [pid 37126:tid 37164] [client 20.43.1.132:64647] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afb48fR_A42N-LtDyrsSZAAAAAs"]
[Sun May 03 15:27:45.871707 2026] [:error] [pid 37246:tid 37254] [client 20.43.1.132:59220] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/2026w.php"] [unique_id "afb48ThvYFGNwhnPamrz9gAAAQY"]
[Sun May 03 15:27:46.298940 2026] [:error] [pid 37127:tid 37202] [client 20.43.1.132:65376] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/111.php"] [unique_id "afb48v8khJXb5O5aWVUqqAAAAFE"]
[Sun May 03 15:27:46.760304 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:61506] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/111.php"] [unique_id "afb48jhvYFGNwhnPamrz-QAAAQo"]
[Sun May 03 15:27:47.187958 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:61512] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/111.php"] [unique_id "afb48zhvYFGNwhnPamrz-wAAAQ4"]
[Sun May 03 15:27:47.631447 2026] [:error] [pid 34432:tid 34445] [client 20.43.1.132:64730] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/111.php"] [unique_id "afb48573JKVQ0wlof4IelwAAAcs"]
[Sun May 03 15:27:48.061633 2026] [:error] [pid 34432:tid 34452] [client 20.43.1.132:61502] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afb49J73JKVQ0wlof4IemQAAAdI"]
[Sun May 03 15:27:48.483031 2026] [:error] [pid 34432:tid 34451] [client 20.43.1.132:61554] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afb49J73JKVQ0wlof4IenQAAAdE"]
[Sun May 03 15:27:48.905814 2026] [:error] [pid 34432:tid 34439] [client 20.43.1.132:64660] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afb49J73JKVQ0wlof4IengAAAcU"]
[Sun May 03 15:27:49.368308 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:65311] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp1.php"] [unique_id "afb49UHBbBLrXh6PBusggAAAAVI"]
[Sun May 03 15:27:49.966148 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:64664] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afb49UHBbBLrXh6PBusggQAAAUw"]
[Sun May 03 15:27:50.395710 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:64696] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afb49kHBbBLrXh6PBusghAAAAUo"]
[Sun May 03 15:27:50.858801 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:64706] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afb49jSujTvwdzEkjSc2iAAAAZM"]
[Sun May 03 15:27:51.365894 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:65284] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aligk.php"] [unique_id "afb496Iu7bmXKXicRk9yqwAAAI8"]
[Sun May 03 15:27:51.808437 2026] [:error] [pid 40422:tid 40427] [client 20.43.1.132:64685] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afb490HBbBLrXh6PBusgigAAAUE"]
[Sun May 03 15:27:52.363895 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:61515] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afb4-EHBbBLrXh6PBusgiwAAAVU"]
[Sun May 03 15:27:52.893634 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64738] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afb4-PR_A42N-LtDyrsSbAAAAAI"]
[Sun May 03 15:27:53.377026 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:64759] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/byrgo.php"] [unique_id "afb4-fR_A42N-LtDyrsSbgAAAA4"]
[Sun May 03 15:27:53.891495 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:61450] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afb4-fR_A42N-LtDyrsScAAAABc"]
[Sun May 03 15:27:54.481476 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:61507] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afb4-vR_A42N-LtDyrsSdAAAABM"]
[Sun May 03 15:27:54.944150 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:64733] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afb4-kHBbBLrXh6PBusgkQAAAUw"]
[Sun May 03 15:27:55.384139 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:65351] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "afb4-zhvYFGNwhnPamrz_gAAAQg"]
[Sun May 03 15:27:55.865563 2026] [:error] [pid 40422:tid 40426] [client 20.43.1.132:64673] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "afb4-0HBbBLrXh6PBusgkgAAAUA"]
[Sun May 03 15:27:56.355795 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:61497] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "afb4_FHJDYRXUf3IbRQUegAAAMU"]
[Sun May 03 15:27:56.818375 2026] [:error] [pid 40422:tid 40428] [client 20.43.1.132:64710] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "afb4_EHBbBLrXh6PBusglAAAAUI"]
[Sun May 03 15:27:57.285105 2026] [:error] [pid 37246:tid 37254] [client 20.43.1.132:61519] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ass.php"] [unique_id "afb4_ThvYFGNwhnPamr0AgAAAQY"]
[Sun May 03 15:27:57.718057 2026] [:error] [pid 40386:tid 40388] [client 20.43.1.132:64740] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "afb4_VHJDYRXUf3IbRQUewAAAMA"]
[Sun May 03 15:27:58.143615 2026] [:error] [pid 37127:tid 37193] [client 20.43.1.132:64764] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "afb4_v8khJXb5O5aWVUqqwAAAEk"]
[Sun May 03 15:27:58.575024 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:64737] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "afb4_kHBbBLrXh6PBusglgAAAUg"]
[Sun May 03 15:27:59.014275 2026] [:error] [pid 40386:tid 40395] [client 20.43.1.132:61524] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/about.php"] [unique_id "afb4_1HJDYRXUf3IbRQUfQAAAMc"]
[Sun May 03 15:27:59.450971 2026] [:error] [pid 40386:tid 40402] [client 20.43.1.132:64674] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "afb4_1HJDYRXUf3IbRQUfgAAAM4"]
[Sun May 03 15:27:59.879034 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:61565] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "afb4_1HJDYRXUf3IbRQUfwAAAME"]
[Sun May 03 15:28:00.338573 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:61440] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "afb5ADhvYFGNwhnPamr0AwAAARM"]
[Sun May 03 15:28:00.789584 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:64750] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no18.php"] [unique_id "afb5ADSujTvwdzEkjSc2jAAAAY4"]
[Sun May 03 15:28:01.255802 2026] [:error] [pid 37246:tid 37270] [client 20.43.1.132:61544] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "afb5AThvYFGNwhnPamr0BwAAARQ"]
[Sun May 03 15:28:01.678104 2026] [:error] [pid 37130:tid 37234] [client 20.43.1.132:61525] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "afb5AaIu7bmXKXicRk9ysQAAAJU"]
[Sun May 03 15:28:02.214910 2026] [:error] [pid 37130:tid 37233] [client 20.43.1.132:64682] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "afb5AqIu7bmXKXicRk9ysgAAAJQ"]
[Sun May 03 15:28:02.642300 2026] [:error] [pid 37127:tid 37196] [client 20.43.1.132:65350] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fine.php"] [unique_id "afb5Av8khJXb5O5aWVUqrAAAAEw"]
[Sun May 03 15:28:03.164467 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:65298] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afb5A0HBbBLrXh6PBusgnAAAAUo"]
[Sun May 03 15:28:03.614021 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:61513] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afb5AzhvYFGNwhnPamr0CQAAAQE"]
[Sun May 03 15:28:04.081943 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:61529] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afb5BEHBbBLrXh6PBusgoAAAAVY"]
[Sun May 03 15:28:04.713990 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:64667] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hplfuns.php"] [unique_id "afb5BDSujTvwdzEkjSc2kQAAAYQ"]
[Sun May 03 15:28:05.194574 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:65333] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "afb5BTSujTvwdzEkjSc2kwAAAYs"]
[Sun May 03 15:28:05.670831 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:61528] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "afb5BTSujTvwdzEkjSc2lQAAAYM"]
[Sun May 03 15:28:06.317867 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:64659] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "afb5BkHBbBLrXh6PBusgowAAAUY"]
[Sun May 03 15:28:06.761360 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:64757] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xa.php"] [unique_id "afb5BlHJDYRXUf3IbRQUgQAAANQ"]
[Sun May 03 15:28:07.312872 2026] [:error] [pid 34432:tid 34443] [client 20.43.1.132:59215] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "afb5B573JKVQ0wlof4IeqgAAAck"]
[Sun May 03 15:28:07.814493 2026] [:error] [pid 40386:tid 40412] [client 20.43.1.132:61443] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "afb5B1HJDYRXUf3IbRQUhAAAANg"]
[Sun May 03 15:28:08.325462 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:64695] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "afb5CDhvYFGNwhnPamr0CwAAARM"]
[Sun May 03 15:28:08.781323 2026] [:error] [pid 37130:tid 37227] [client 20.43.1.132:61516] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin.php"] [unique_id "afb5CKIu7bmXKXicRk9yuQAAAI4"]
[Sun May 03 15:28:09.224970 2026] [:error] [pid 37130:tid 37221] [client 20.43.1.132:61447] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "afb5CaIu7bmXKXicRk9yvQAAAIg"]
[Sun May 03 15:28:09.671061 2026] [:error] [pid 37130:tid 37213] [client 20.43.1.132:61474] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "afb5CaIu7bmXKXicRk9yvwAAAIA"]
[Sun May 03 15:28:10.149704 2026] [:error] [pid 40422:tid 40435] [client 20.43.1.132:59230] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "afb5CkHBbBLrXh6PBusgpgAAAUk"]
[Sun May 03 15:28:10.584681 2026] [:error] [pid 37127:tid 37203] [client 20.43.1.132:65361] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/inege.php"] [unique_id "afb5Cv8khJXb5O5aWVUqsQAAAFI"]
[Sun May 03 15:28:11.133703 2026] [:error] [pid 37127:tid 37186] [client 20.43.1.132:64676] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5C_8khJXb5O5aWVUqsgAAAEI"]
[Sun May 03 15:28:11.618507 2026] [:error] [pid 40386:tid 40406] [client 20.43.1.132:64728] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5C1HJDYRXUf3IbRQUhQAAANI"]
[Sun May 03 15:28:12.089907 2026] [:error] [pid 40386:tid 40398] [client 20.43.1.132:64726] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5DFHJDYRXUf3IbRQUhwAAAMo"]
[Sun May 03 15:28:12.552365 2026] [:error] [pid 37127:tid 37194] [client 20.43.1.132:61503] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5DP8khJXb5O5aWVUqtQAAAEo"]
[Sun May 03 15:28:13.051170 2026] [:error] [pid 37130:tid 37218] [client 20.43.1.132:64700] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "afb5DaIu7bmXKXicRk9ywgAAAIU"]
[Sun May 03 15:28:13.635896 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:64656] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "afb5DVHJDYRXUf3IbRQUiQAAAMU"]
[Sun May 03 15:28:14.257910 2026] [:error] [pid 40386:tid 40388] [client 20.43.1.132:65332] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "afb5DlHJDYRXUf3IbRQUigAAAMA"]
[Sun May 03 15:28:14.726589 2026] [:error] [pid 37130:tid 37227] [client 20.43.1.132:64691] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uuu.php"] [unique_id "afb5DqIu7bmXKXicRk9yxgAAAI4"]
[Sun May 03 15:28:15.245402 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:61511] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "afb5DzhvYFGNwhnPamr0EgAAAQg"]
[Sun May 03 15:28:15.667818 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:61465] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "afb5D_R_A42N-LtDyrsSdgAAAAk"]
[Sun May 03 15:28:16.112929 2026] [:error] [pid 37130:tid 37219] [client 20.43.1.132:59217] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "afb5EKIu7bmXKXicRk9yxwAAAIY"]
[Sun May 03 15:28:16.581722 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:61460] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/no1.php"] [unique_id "afb5EDSujTvwdzEkjSc2nwAAAY4"]
[Sun May 03 15:28:17.024822 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:64742] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "afb5EfR_A42N-LtDyrsSewAAAAg"]
[Sun May 03 15:28:17.455373 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:59206] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "afb5EfR_A42N-LtDyrsSfAAAABA"]
[Sun May 03 15:28:17.916426 2026] [:error] [pid 37246:tid 37252] [client 20.43.1.132:64766] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "afb5EThvYFGNwhnPamr0FAAAAQQ"]
[Sun May 03 15:28:18.415649 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:61549] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/w2025.php"] [unique_id "afb5EjhvYFGNwhnPamr0FQAAAQA"]
[Sun May 03 15:28:18.839008 2026] [:error] [pid 37246:tid 37263] [client 20.43.1.132:64684] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "afb5EjhvYFGNwhnPamr0FgAAAQ0"]
[Sun May 03 15:28:19.267294 2026] [:error] [pid 37127:tid 37208] [client 20.43.1.132:65294] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "afb5E_8khJXb5O5aWVUqugAAAFY"]
[Sun May 03 15:28:19.687892 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:65406] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "afb5E_R_A42N-LtDyrsSfwAAABg"]
[Sun May 03 15:28:20.133863 2026] [:error] [pid 37126:tid 37174] [client 20.43.1.132:64698] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "afb5FPR_A42N-LtDyrsSgQAAABU"]
[Sun May 03 15:28:20.562542 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64718] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "afb5FPR_A42N-LtDyrsSgwAAAAI"]
[Sun May 03 15:28:20.989612 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:64669] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "afb5FDhvYFGNwhnPamr0FwAAAQs"]
[Sun May 03 15:28:21.414297 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:64716] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "afb5FTSujTvwdzEkjSc2pAAAAZM"]
[Sun May 03 15:28:21.843146 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:61442] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a2.php"] [unique_id "afb5FUHBbBLrXh6PBusgrAAAAUg"]
[Sun May 03 15:28:22.259680 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:64655] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "afb5FlHJDYRXUf3IbRQUjwAAAMQ"]
[Sun May 03 15:28:22.682925 2026] [:error] [pid 34432:tid 34442] [client 20.43.1.132:61530] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "afb5Fp73JKVQ0wlof4IesgAAAcg"]
[Sun May 03 15:28:23.102733 2026] [:error] [pid 34432:tid 34441] [client 20.43.1.132:61510] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "afb5F573JKVQ0wlof4IetAAAAcc"]
[Sun May 03 15:28:23.539346 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:59228] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/edit.php"] [unique_id "afb5FzhvYFGNwhnPamr0HQAAAQ8"]
[Sun May 03 15:28:23.957363 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:61467] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ioxi-o.php"] [unique_id "afb5FzSujTvwdzEkjSc2pQAAAYY"]
[Sun May 03 15:28:24.413497 2026] [proxy_fcgi:error] [pid 37130:tid 37222] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:24.842543 2026] [proxy_fcgi:error] [pid 37130:tid 37217] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:25.053746 2026] [proxy_fcgi:error] [pid 37130:tid 37233] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:25.270381 2026] [proxy_fcgi:error] [pid 37130:tid 37218] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:25.485599 2026] [proxy_fcgi:error] [pid 37130:tid 37237] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:25.697677 2026] [proxy_fcgi:error] [pid 37130:tid 37235] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:25.910056 2026] [proxy_fcgi:error] [pid 37130:tid 37216] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:26.121120 2026] [proxy_fcgi:error] [pid 37130:tid 37215] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:26.555046 2026] [proxy_fcgi:error] [pid 37130:tid 37229] [client 20.43.1.132:61526] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:28:26.773320 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:61526] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afb5GqIu7bmXKXicRk9y1wAAAI8"]
[Sun May 03 15:28:27.249785 2026] [:error] [pid 34432:tid 34448] [client 20.43.1.132:64688] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afb5G573JKVQ0wlof4IeugAAAc4"]
[Sun May 03 15:28:27.714512 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:61534] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afb5G_R_A42N-LtDyrsShgAAAAo"]
[Sun May 03 15:28:28.187292 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:61552] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/aaa.php"] [unique_id "afb5HPR_A42N-LtDyrsSiQAAAAw"]
[Sun May 03 15:28:28.634303 2026] [:error] [pid 37126:tid 37160] [client 20.43.1.132:61541] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afb5HPR_A42N-LtDyrsSigAAAAc"]
[Sun May 03 15:28:29.074180 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:61521] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afb5HfR_A42N-LtDyrsSjQAAABE"]
[Sun May 03 15:28:29.552644 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:64665] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afb5HfR_A42N-LtDyrsSjwAAABc"]
[Sun May 03 15:28:30.014620 2026] [:error] [pid 34432:tid 34445] [client 20.43.1.132:59154] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "afb5Hp73JKVQ0wlof4IeuwAAAcs"]
[Sun May 03 15:28:30.459081 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:61531] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afb5HkHBbBLrXh6PBusgswAAAVY"]
[Sun May 03 15:28:30.887089 2026] [:error] [pid 34432:tid 34456] [client 20.43.1.132:59162] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afb5Hp73JKVQ0wlof4IevQAAAdY"]
[Sun May 03 15:28:31.339708 2026] [:error] [pid 34432:tid 34452] [client 20.43.1.132:61550] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afb5H573JKVQ0wlof4IevwAAAdI"]
[Sun May 03 15:28:31.775148 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:61545] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afb5HzhvYFGNwhnPamr0MQAAARM"]
[Sun May 03 15:28:32.200033 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:61505] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afb5IEHBbBLrXh6PBusgtAAAAUM"]
[Sun May 03 15:28:32.667405 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:64683] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afb5IEHBbBLrXh6PBusgtwAAAVA"]
[Sun May 03 15:28:33.130143 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:65377] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afb5If8khJXb5O5aWVUqzwAAAEs"]
[Sun May 03 15:28:33.598156 2026] [:error] [pid 37130:tid 37214] [client 20.43.1.132:61518] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afb5IaIu7bmXKXicRk9y3QAAAIE"]
[Sun May 03 15:28:34.028489 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:59246] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afb5IvR_A42N-LtDyrsSkQAAABQ"]
[Sun May 03 15:28:34.497115 2026] [:error] [pid 37126:tid 37164] [client 20.43.1.132:64711] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afb5IvR_A42N-LtDyrsSkwAAAAs"]
[Sun May 03 15:28:34.929565 2026] [:error] [pid 40386:tid 40407] [client 20.43.1.132:61469] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afb5IlHJDYRXUf3IbRQUkQAAANM"]
[Sun May 03 15:28:35.356344 2026] [:error] [pid 37127:tid 37203] [client 20.43.1.132:59219] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afb5I_8khJXb5O5aWVUq0gAAAFI"]
[Sun May 03 15:28:35.802597 2026] [:error] [pid 34432:tid 34436] [client 20.43.1.132:61491] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afb5I573JKVQ0wlof4IewgAAAcI"]
[Sun May 03 15:28:36.229603 2026] [:error] [pid 34432:tid 34458] [client 20.43.1.132:65367] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afb5JJ73JKVQ0wlof4IewwAAAdg"]
[Sun May 03 15:28:36.659048 2026] [:error] [pid 34432:tid 34457] [client 20.43.1.132:59263] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afb5JJ73JKVQ0wlof4IexAAAAdc"]
[Sun May 03 15:28:37.099533 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:64662] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afb5JUHBbBLrXh6PBusguwAAAUU"]
[Sun May 03 15:28:37.540841 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:64675] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afb5JUHBbBLrXh6PBusgvAAAAUo"]
[Sun May 03 15:28:37.988331 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:61563] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afb5JThvYFGNwhnPamr0NgAAAQ8"]
[Sun May 03 15:28:38.426638 2026] [:error] [pid 34432:tid 34437] [client 20.43.1.132:59218] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afb5Jp73JKVQ0wlof4IexgAAAcM"]
[Sun May 03 15:28:38.882200 2026] [:error] [pid 37130:tid 37234] [client 20.43.1.132:58580] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "afb5JqIu7bmXKXicRk9y4QAAAJU"]
[Sun May 03 15:28:39.406291 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:61452] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5J0HBbBLrXh6PBusgwAAAAUY"]
[Sun May 03 15:28:39.924315 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:61508] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5J0HBbBLrXh6PBusgxAAAAVQ"]
[Sun May 03 15:28:40.464708 2026] [:error] [pid 37130:tid 37233] [client 20.43.1.132:65391] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5KKIu7bmXKXicRk9y4wAAAJQ"]
[Sun May 03 15:28:41.025425 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:59247] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5KfR_A42N-LtDyrsSlAAAAAA"]
[Sun May 03 15:28:41.511295 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:61475] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afb5KUHBbBLrXh6PBusgxQAAAU0"]
[Sun May 03 15:28:42.006565 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:59159] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afb5KkHBbBLrXh6PBusgxgAAAUo"]
[Sun May 03 15:28:42.488215 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:61542] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afb5KjSujTvwdzEkjSc2vgAAAYs"]
[Sun May 03 15:28:43.013469 2026] [:error] [pid 37130:tid 37229] [client 20.43.1.132:61557] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "afb5K6Iu7bmXKXicRk9y5gAAAJA"]
[Sun May 03 15:28:43.449271 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:65382] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5KzSujTvwdzEkjSc2vwAAAYk"]
[Sun May 03 15:28:43.937447 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:61485] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5KzhvYFGNwhnPamr0OwAAARI"]
[Sun May 03 15:28:44.378570 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:61449] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5LDSujTvwdzEkjSc2wQAAAYY"]
[Sun May 03 15:28:44.898767 2026] [:error] [pid 40456:tid 40482] [client 20.43.1.132:61524] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "afb5LDSujTvwdzEkjSc2wgAAAZg"]
[Sun May 03 15:28:45.394517 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:59175] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "afb5Lf8khJXb5O5aWVUq2QAAAFU"]
[Sun May 03 15:28:45.888168 2026] [:error] [pid 37127:tid 37209] [client 20.43.1.132:61477] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "afb5Lf8khJXb5O5aWVUq2wAAAFc"]
[Sun May 03 15:28:46.448369 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:65320] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "afb5LjSujTvwdzEkjSc2xAAAAYI"]
[Sun May 03 15:28:46.962121 2026] [:error] [pid 37127:tid 37206] [client 20.43.1.132:65400] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/222.php"] [unique_id "afb5Lv8khJXb5O5aWVUq3AAAAFQ"]
[Sun May 03 15:28:47.414057 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:64681] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afb5LzhvYFGNwhnPamr0PwAAAQM"]
[Sun May 03 15:28:47.979724 2026] [:error] [pid 37127:tid 37187] [client 20.43.1.132:61455] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afb5L_8khJXb5O5aWVUq3QAAAEM"]
[Sun May 03 15:28:48.485341 2026] [:error] [pid 34432:tid 34437] [client 20.43.1.132:64642] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afb5MJ73JKVQ0wlof4IezAAAAcM"]
[Sun May 03 15:28:48.958145 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:64671] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afb5MDhvYFGNwhnPamr0QwAAARM"]
[Sun May 03 15:28:49.416724 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:61456] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "afb5MThvYFGNwhnPamr0RAAAARc"]
[Sun May 03 15:28:49.837122 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:61459] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "afb5MTSujTvwdzEkjSc2xwAAAYw"]
[Sun May 03 15:28:50.288561 2026] [:error] [pid 34432:tid 34445] [client 20.43.1.132:61458] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "afb5Mp73JKVQ0wlof4IezgAAAcs"]
[Sun May 03 15:28:50.719801 2026] [:error] [pid 40456:tid 40471] [client 20.43.1.132:59249] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fff.php"] [unique_id "afb5MjSujTvwdzEkjSc2yAAAAY0"]
[Sun May 03 15:28:51.173931 2026] [:error] [pid 37126:tid 37174] [client 20.43.1.132:65327] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5M_R_A42N-LtDyrsSlQAAABU"]
[Sun May 03 15:28:51.601945 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:61446] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5MzSujTvwdzEkjSc2ywAAAYs"]
[Sun May 03 15:28:52.060615 2026] [:error] [pid 37130:tid 37237] [client 20.43.1.132:65313] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5NKIu7bmXKXicRk9y7QAAAJg"]
[Sun May 03 15:28:52.494624 2026] [:error] [pid 34432:tid 34456] [client 20.43.1.132:64727] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5NJ73JKVQ0wlof4Ie0QAAAdY"]
[Sun May 03 15:28:52.970017 2026] [:error] [pid 37246:tid 37263] [client 20.43.1.132:61551] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "afb5NDhvYFGNwhnPamr0RwAAAQ0"]
[Sun May 03 15:28:53.404553 2026] [:error] [pid 37246:tid 37266] [client 20.43.1.132:61558] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "afb5NThvYFGNwhnPamr0SAAAARA"]
[Sun May 03 15:28:53.837346 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:64661] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "afb5NUHBbBLrXh6PBusgzgAAAVY"]
[Sun May 03 15:28:54.285585 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:59241] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/we.php"] [unique_id "afb5NjhvYFGNwhnPamr0SwAAAQ8"]
[Sun May 03 15:28:54.758231 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:59227] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afb5NjhvYFGNwhnPamr0TAAAAQg"]
[Sun May 03 15:28:55.370047 2026] [:error] [pid 34432:tid 34442] [client 20.43.1.132:59202] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afb5N573JKVQ0wlof4Ie0wAAAcg"]
[Sun May 03 15:28:55.815018 2026] [:error] [pid 34432:tid 34451] [client 20.43.1.132:59226] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afb5N573JKVQ0wlof4Ie1AAAAdE"]
[Sun May 03 15:28:56.354879 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:59240] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "afb5ODhvYFGNwhnPamr0TgAAAQM"]
[Sun May 03 15:28:56.808911 2026] [:error] [pid 40386:tid 40412] [client 20.43.1.132:59200] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afb5OFHJDYRXUf3IbRQUmQAAANg"]
[Sun May 03 15:28:57.371887 2026] [:error] [pid 40456:tid 40458] [client 20.43.1.132:61561] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afb5OTSujTvwdzEkjSc2zwAAAYA"]
[Sun May 03 15:28:57.810265 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:64641] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afb5OfR_A42N-LtDyrsSlwAAABY"]
[Sun May 03 15:28:58.306789 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:64692] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin1.php"] [unique_id "afb5OvR_A42N-LtDyrsSmAAAABA"]
[Sun May 03 15:28:58.876977 2026] [:error] [pid 37126:tid 37152] [client 20.43.1.132:61555] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afb5OvR_A42N-LtDyrsSmwAAAAE"]
[Sun May 03 15:28:59.349928 2026] [:error] [pid 37130:tid 37221] [client 20.43.1.132:61539] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afb5O6Iu7bmXKXicRk9y8QAAAIg"]
[Sun May 03 15:28:59.855053 2026] [:error] [pid 34432:tid 34445] [client 20.43.1.132:59195] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afb5O573JKVQ0wlof4Ie2QAAAcs"]
[Sun May 03 15:29:00.432723 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:59252] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afb5PPR_A42N-LtDyrsSngAAABg"]
[Sun May 03 15:29:00.896172 2026] [:error] [pid 34432:tid 34456] [client 20.43.1.132:59232] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afb5PJ73JKVQ0wlof4Ie2wAAAdY"]
[Sun May 03 15:29:01.356957 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:59236] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afb5PfR_A42N-LtDyrsSoQAAAAw"]
[Sun May 03 15:29:01.857637 2026] [:error] [pid 40386:tid 40396] [client 20.43.1.132:58574] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afb5PVHJDYRXUf3IbRQUmgAAAMg"]
[Sun May 03 15:29:02.369750 2026] [:error] [pid 40386:tid 40403] [client 20.43.1.132:61547] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "afb5PlHJDYRXUf3IbRQUmwAAAM8"]
[Sun May 03 15:29:02.824978 2026] [:error] [pid 40386:tid 40406] [client 20.43.1.132:61480] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afb5PlHJDYRXUf3IbRQUnAAAANI"]
[Sun May 03 15:29:03.301348 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:64697] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afb5P_R_A42N-LtDyrsSpQAAABc"]
[Sun May 03 15:29:03.790828 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:61444] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afb5P_R_A42N-LtDyrsSpwAAAAA"]
[Sun May 03 15:29:04.321009 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:64751] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afb5QEHBbBLrXh6PBusg0wAAAVc"]
[Sun May 03 15:29:04.882559 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:65364] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "afb5QDSujTvwdzEkjSc20gAAAYo"]
[Sun May 03 15:29:05.399563 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:59140] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "afb5QTSujTvwdzEkjSc20wAAAYQ"]
[Sun May 03 15:29:05.957054 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:61566] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "afb5QfR_A42N-LtDyrsSrAAAABg"]
[Sun May 03 15:29:06.498512 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:61493] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "afb5QvR_A42N-LtDyrsSrgAAAAo"]
[Sun May 03 15:29:07.004731 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:64652] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "afb5Q_R_A42N-LtDyrsSsQAAABE"]
[Sun May 03 15:29:07.601198 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:61471] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "afb5Q_R_A42N-LtDyrsSswAAABI"]
[Sun May 03 15:29:08.292834 2026] [:error] [pid 37126:tid 37158] [client 20.43.1.132:64686] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "afb5RPR_A42N-LtDyrsStgAAAAU"]
[Sun May 03 15:29:08.937316 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:61476] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp.php"] [unique_id "afb5RPR_A42N-LtDyrsSuAAAAAw"]
[Sun May 03 15:29:09.793965 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:58562] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afb5RfR_A42N-LtDyrsSuQAAABE"]
[Sun May 03 15:29:10.342762 2026] [:error] [pid 40422:tid 40445] [client 20.43.1.132:59216] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afb5RkHBbBLrXh6PBusg2QAAAVM"]
[Sun May 03 15:29:10.998671 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:61562] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afb5RjSujTvwdzEkjSc21gAAAZY"]
[Sun May 03 15:29:11.445880 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:59164] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afb5RzhvYFGNwhnPamr0UgAAARU"]
[Sun May 03 15:29:12.019777 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:59145] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5SPR_A42N-LtDyrsSvwAAAAk"]
[Sun May 03 15:29:12.508666 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:61564] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5SDhvYFGNwhnPamr0UwAAAQg"]
[Sun May 03 15:29:13.046203 2026] [:error] [pid 37130:tid 37217] [client 20.43.1.132:61470] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5SaIu7bmXKXicRk9y9gAAAIQ"]
[Sun May 03 15:29:13.593546 2026] [:error] [pid 40422:tid 40441] [client 20.43.1.132:61457] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fe5.php"] [unique_id "afb5SUHBbBLrXh6PBusg3gAAAU8"]
[Sun May 03 15:29:14.031993 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:61478] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afb5SvR_A42N-LtDyrsSwwAAAAI"]
[Sun May 03 15:29:14.502923 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:61489] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afb5SvR_A42N-LtDyrsSxAAAABY"]
[Sun May 03 15:29:14.957102 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:61483] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afb5SlHJDYRXUf3IbRQUngAAAMU"]
[Sun May 03 15:29:15.415809 2026] [:error] [pid 37126:tid 37158] [client 20.43.1.132:59203] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afb5S_R_A42N-LtDyrsSxgAAAAU"]
[Sun May 03 15:29:16.001412 2026] [:error] [pid 37130:tid 37237] [client 20.43.1.132:59150] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "afb5TKIu7bmXKXicRk9y9wAAAJg"]
[Sun May 03 15:29:16.488289 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:61464] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "afb5TPR_A42N-LtDyrsSygAAAAw"]
[Sun May 03 15:29:17.080619 2026] [:error] [pid 37127:tid 37199] [client 20.43.1.132:61488] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "afb5Tf8khJXb5O5aWVUq6AAAAE4"]
[Sun May 03 15:29:17.568568 2026] [:error] [pid 37127:tid 37191] [client 20.43.1.132:59207] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/av.php"] [unique_id "afb5Tf8khJXb5O5aWVUq6QAAAEc"]
[Sun May 03 15:29:18.111649 2026] [:error] [pid 37127:tid 37208] [client 20.43.1.132:59261] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "afb5Tv8khJXb5O5aWVUq6gAAAFY"]
[Sun May 03 15:29:18.611868 2026] [:error] [pid 34432:tid 34450] [client 20.43.1.132:61559] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "afb5Tp73JKVQ0wlof4Ie4AAAAdA"]
[Sun May 03 15:29:19.201894 2026] [:error] [pid 34432:tid 34446] [client 20.43.1.132:59256] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "afb5T573JKVQ0wlof4Ie4QAAAcw"]
[Sun May 03 15:29:19.716486 2026] [:error] [pid 37126:tid 37166] [client 20.43.1.132:61499] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/abcd.php"] [unique_id "afb5T_R_A42N-LtDyrsSzAAAAA0"]
[Sun May 03 15:29:20.197855 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:61484] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "afb5UP8khJXb5O5aWVUq7AAAAEs"]
[Sun May 03 15:29:20.766486 2026] [:error] [pid 34432:tid 34455] [client 20.43.1.132:58561] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "afb5UJ73JKVQ0wlof4Ie5QAAAdU"]
[Sun May 03 15:29:21.472166 2026] [:error] [pid 40422:tid 40427] [client 20.43.1.132:61487] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "afb5UUHBbBLrXh6PBusg4wAAAUE"]
[Sun May 03 15:29:21.997841 2026] [:error] [pid 40456:tid 40473] [client 20.43.1.132:59185] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/fi.php"] [unique_id "afb5UTSujTvwdzEkjSc22AAAAY8"]
[Sun May 03 15:29:22.440534 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:59189] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "afb5UvR_A42N-LtDyrsS0wAAABA"]
[Sun May 03 15:29:22.942003 2026] [:error] [pid 37126:tid 37156] [client 20.43.1.132:59139] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "afb5UvR_A42N-LtDyrsS1AAAAAM"]
[Sun May 03 15:29:23.429836 2026] [:error] [pid 37126:tid 37157] [client 20.43.1.132:61473] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "afb5U_R_A42N-LtDyrsS1wAAAAQ"]
[Sun May 03 15:29:23.868362 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:64670] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/a1.php"] [unique_id "afb5UzhvYFGNwhnPamr0WAAAAQA"]
[Sun May 03 15:29:24.299981 2026] [:error] [pid 37246:tid 37263] [client 20.43.1.132:61535] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "afb5VDhvYFGNwhnPamr0WQAAAQ0"]
[Sun May 03 15:29:24.718054 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:58587] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "afb5VDhvYFGNwhnPamr0XAAAARY"]
[Sun May 03 15:29:25.172729 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:61501] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "afb5VThvYFGNwhnPamr0XQAAAQ8"]
[Sun May 03 15:29:25.717804 2026] [:error] [pid 37130:tid 37230] [client 20.43.1.132:59210] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/update/f35.php"] [unique_id "afb5VaIu7bmXKXicRk9y-QAAAJE"]
[Sun May 03 15:29:26.210819 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:64719] [client 20.43.1.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afb5VjhvYFGNwhnPamr0XgAAARU"]
[Sun May 03 15:29:26.652168 2026] [proxy_fcgi:error] [pid 37246:tid 37259] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:27.282622 2026] [proxy_fcgi:error] [pid 37246:tid 37250] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:27.492411 2026] [proxy_fcgi:error] [pid 37246:tid 37254] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:27.747112 2026] [proxy_fcgi:error] [pid 37246:tid 37269] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:27.964656 2026] [proxy_fcgi:error] [pid 37246:tid 37267] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:28.175466 2026] [proxy_fcgi:error] [pid 37246:tid 37273] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:28.593712 2026] [proxy_fcgi:error] [pid 37246:tid 37257] [client 20.43.1.132:59211] AH01071: Got error 'Primary script unknown'
[Sun May 03 15:29:29.009743 2026] [:error] [pid 37246:tid 37274] [client 20.43.1.132:59211] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "afb5WThvYFGNwhnPamr0awAAARg"]
[Sun May 03 15:29:29.445362 2026] [:error] [pid 37246:tid 37270] [client 20.43.1.132:59151] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "afb5WThvYFGNwhnPamr0bgAAARQ"]
[Sun May 03 15:29:29.887750 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:61462] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "afb5WThvYFGNwhnPamr0cAAAARY"]
[Sun May 03 15:29:30.316508 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:59178] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/axx.php"] [unique_id "afb5WvR_A42N-LtDyrsS3QAAAA4"]
[Sun May 03 15:29:30.758478 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:59231] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afb5WvR_A42N-LtDyrsS4AAAABQ"]
[Sun May 03 15:29:31.309575 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:64718] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afb5W_R_A42N-LtDyrsS4gAAABI"]
[Sun May 03 15:29:31.823560 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:59141] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afb5W_R_A42N-LtDyrsS5wAAABM"]
[Sun May 03 15:29:32.297312 2026] [:error] [pid 40456:tid 40459] [client 20.43.1.132:61556] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/alfashell.php"] [unique_id "afb5XDSujTvwdzEkjSc22wAAAYE"]
[Sun May 03 15:29:32.775822 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:59176] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afb5XDhvYFGNwhnPamr0cQAAAQs"]
[Sun May 03 15:29:33.206111 2026] [:error] [pid 37127:tid 37198] [client 20.43.1.132:61479] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afb5Xf8khJXb5O5aWVUq7wAAAE0"]
[Sun May 03 15:29:33.692815 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:61453] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afb5XTSujTvwdzEkjSc23AAAAYw"]
[Sun May 03 15:29:34.199877 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:65356] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/gettest.php"] [unique_id "afb5XvR_A42N-LtDyrsS7QAAABY"]
[Sun May 03 15:29:34.663839 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:58570] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "afb5XvR_A42N-LtDyrsS8AAAABA"]
[Sun May 03 15:29:35.140094 2026] [:error] [pid 37126:tid 37163] [client 20.43.1.132:64678] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "afb5X_R_A42N-LtDyrsS8QAAAAo"]
[Sun May 03 15:29:35.663564 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:61553] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "afb5XzSujTvwdzEkjSc23QAAAYo"]
[Sun May 03 15:29:36.290748 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:58598] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/acp.php"] [unique_id "afb5YDSujTvwdzEkjSc23gAAAYQ"]
[Sun May 03 15:29:36.768395 2026] [:error] [pid 37127:tid 37185] [client 20.43.1.132:64721] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "afb5YP8khJXb5O5aWVUq8gAAAEE"]
[Sun May 03 15:29:37.275773 2026] [:error] [pid 37246:tid 37274] [client 20.43.1.132:59233] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "afb5YThvYFGNwhnPamr0dgAAARg"]
[Sun May 03 15:29:37.879193 2026] [:error] [pid 37126:tid 37176] [client 20.43.1.132:59142] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "afb5YfR_A42N-LtDyrsS9gAAABc"]
[Sun May 03 15:29:38.401878 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:61533] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file48.php"] [unique_id "afb5YkHBbBLrXh6PBusg8wAAAUQ"]
[Sun May 03 15:29:38.999057 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:61468] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "afb5YkHBbBLrXh6PBusg9gAAAVU"]
[Sun May 03 15:29:39.487254 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:59254] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "afb5YzhvYFGNwhnPamr0eAAAAQ4"]
[Sun May 03 15:29:40.145489 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:59155] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "afb5ZDhvYFGNwhnPamr0egAAAQ8"]
[Sun May 03 15:29:40.830923 2026] [:error] [pid 37130:tid 37223] [client 20.43.1.132:61517] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/g.php"] [unique_id "afb5ZKIu7bmXKXicRk9y_wAAAIo"]
[Sun May 03 15:29:41.380141 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:61472] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5ZUHBbBLrXh6PBusg_QAAAUs"]
[Sun May 03 15:29:42.081851 2026] [:error] [pid 34432:tid 34442] [client 20.43.1.132:59222] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5Zp73JKVQ0wlof4Ie6wAAAcg"]
[Sun May 03 15:29:42.764331 2026] [:error] [pid 40456:tid 40458] [client 20.43.1.132:61481] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5ZjSujTvwdzEkjSc24gAAAYA"]
[Sun May 03 15:29:43.334878 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:59221] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-content/"] [unique_id "afb5Z0HBbBLrXh6PBushBAAAAUM"]
[Sun May 03 15:29:44.015664 2026] [:error] [pid 37127:tid 37200] [client 20.43.1.132:65374] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "afb5aP8khJXb5O5aWVUq-gAAAE8"]
[Sun May 03 15:29:44.554133 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:58620] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "afb5aEHBbBLrXh6PBushBgAAAU4"]
[Sun May 03 15:29:44.989923 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:59197] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "afb5aEHBbBLrXh6PBushBwAAAU0"]
[Sun May 03 15:29:45.425915 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:64715] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/simple.php"] [unique_id "afb5aTSujTvwdzEkjSc25gAAAZQ"]
[Sun May 03 15:29:45.859129 2026] [:error] [pid 37126:tid 37157] [client 20.43.1.132:59223] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "afb5afR_A42N-LtDyrsS-gAAAAQ"]
[Sun May 03 15:29:46.305500 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:59154] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "afb5avR_A42N-LtDyrsS_AAAABQ"]
[Sun May 03 15:29:46.725876 2026] [:error] [pid 40456:tid 40466] [client 20.43.1.132:59169] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "afb5ajSujTvwdzEkjSc26AAAAYg"]
[Sun May 03 15:29:47.154708 2026] [:error] [pid 40422:tid 40441] [client 20.43.1.132:59258] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/ew.php"] [unique_id "afb5a0HBbBLrXh6PBushCwAAAU8"]
[Sun May 03 15:29:47.628967 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:61560] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "afb5a_R_A42N-LtDyrsS_wAAAA4"]
[Sun May 03 15:29:48.103030 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:61522] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "afb5bPR_A42N-LtDyrsTAQAAAAw"]
[Sun May 03 15:29:48.551084 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:59224] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "afb5bPR_A42N-LtDyrsTAwAAABA"]
[Sun May 03 15:29:49.190737 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:58615] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file21.php"] [unique_id "afb5bfR_A42N-LtDyrsTBgAAAAg"]
[Sun May 03 15:29:49.712630 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:59243] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afb5bfR_A42N-LtDyrsTCAAAAA8"]
[Sun May 03 15:29:50.174420 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:59214] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afb5bvR_A42N-LtDyrsTCwAAAAA"]
[Sun May 03 15:29:50.658278 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:64666] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afb5bkHBbBLrXh6PBushEwAAAUw"]
[Sun May 03 15:29:51.087176 2026] [:error] [pid 40422:tid 40445] [client 20.43.1.132:59201] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hypo.php"] [unique_id "afb5b0HBbBLrXh6PBushFAAAAVM"]
[Sun May 03 15:29:51.528722 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:59160] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "afb5b0HBbBLrXh6PBushFgAAAUM"]
[Sun May 03 15:29:51.979860 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:61500] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "afb5bzSujTvwdzEkjSc26wAAAZM"]
[Sun May 03 15:29:52.419143 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:59170] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "afb5cEHBbBLrXh6PBushGgAAAU4"]
[Sun May 03 15:29:52.872963 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:58585] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/file18.php"] [unique_id "afb5cEHBbBLrXh6PBushGwAAAVQ"]
[Sun May 03 15:29:53.343321 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:59259] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afb5cUHBbBLrXh6PBushHgAAAVU"]
[Sun May 03 15:29:54.432497 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:58593] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afb5cv8khJXb5O5aWVUrAgAAAEY"]
[Sun May 03 15:29:55.240751 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:61495] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afb5c_R_A42N-LtDyrsTDwAAAAI"]
[Sun May 03 15:29:55.656815 2026] [:error] [pid 37126:tid 37157] [client 20.43.1.132:64702] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/xwx1.php"] [unique_id "afb5c_R_A42N-LtDyrsTFAAAAAQ"]
[Sun May 03 15:29:56.108020 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:59225] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afb5dPR_A42N-LtDyrsTFwAAABI"]
[Sun May 03 15:29:56.569541 2026] [:error] [pid 37246:tid 37252] [client 20.43.1.132:61463] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afb5dDhvYFGNwhnPamr0fwAAAQQ"]
[Sun May 03 15:29:57.057229 2026] [:error] [pid 37130:tid 37229] [client 20.43.1.132:59136] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afb5daIu7bmXKXicRk9zAAAAAJA"]
[Sun May 03 15:29:57.565547 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:59147] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afb5dUHBbBLrXh6PBushJAAAAVE"]
[Sun May 03 15:29:58.001874 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:64714] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afb5dvR_A42N-LtDyrsTGwAAAAI"]
[Sun May 03 15:29:58.764808 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:64699] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afb5dkHBbBLrXh6PBushJwAAAVY"]
[Sun May 03 15:29:59.234201 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:64677] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afb5d0HBbBLrXh6PBushKQAAAUc"]
[Sun May 03 15:29:59.796667 2026] [:error] [pid 34432:tid 34451] [client 20.43.1.132:59248] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/chosen.php"] [unique_id "afb5d573JKVQ0wlof4Ie7AAAAdE"]
[Sun May 03 20:38:51.644859 2026] [:error] [pid 37126:tid 37153] [client 100.26.167.168:42816] [client 100.26.167.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||quarryspec.com.au|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "afdB2_R_A42N-LtDyrtHAQAAAAI"]
[Mon May 04 04:55:20.832442 2026] [proxy_fcgi:error] [pid 57154:tid 57166] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:21.023260 2026] [proxy_fcgi:error] [pid 57154:tid 57174] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:21.448855 2026] [proxy_fcgi:error] [pid 57154:tid 57164] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:21.639656 2026] [proxy_fcgi:error] [pid 57154:tid 57165] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:23.129158 2026] [proxy_fcgi:error] [pid 57154:tid 57177] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:23.322595 2026] [proxy_fcgi:error] [pid 57154:tid 57172] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:23.512509 2026] [proxy_fcgi:error] [pid 57154:tid 57176] [client 52.165.198.204:11535] AH01071: Got error 'Primary script unknown'
[Mon May 04 04:55:23.965595 2026] [:error] [pid 57154:tid 57161] [client 52.165.198.204:11535] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2O_4DAn7umy_ATRzPDwAAAMQ"]
[Mon May 04 04:55:26.028419 2026] [:error] [pid 57046:tid 57082] [client 52.165.198.204:6018] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2PoDA4d1tYGL7mqAangAAABU"]
[Mon May 04 04:55:29.226135 2026] [:error] [pid 57154:tid 57170] [client 52.165.198.204:6088] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2Qf4DAn7umy_ATRzPFAAAAM0"]
[Mon May 04 04:55:36.513559 2026] [:error] [pid 57047:tid 57100] [client 52.165.198.204:5862] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2SFtCAxKLCAMkLV2PpAAAAEo"]
[Mon May 04 05:19:53.457770 2026] [proxy_fcgi:error] [pid 58625:tid 58635] [client 45.86.202.207:24595] AH01071: Got error 'Primary script unknown'
[Mon May 04 15:45:06.487016 2026] [:error] [pid 3341:tid 3363] [client 136.107.232.91:64511] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qXQAAAJM"]
[Mon May 04 15:45:06.936104 2026] [:error] [pid 3341:tid 3344] [client 136.107.232.91:49564] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qcgAAAIA"]
[Mon May 04 15:45:07.366754 2026] [:error] [pid 3341:tid 3355] [client 136.107.232.91:51108] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg09o3_LordU0wW7qhQAAAIs"]
[Mon May 04 19:04:47.623748 2026] [:error] [pid 32471:tid 32495] [client 103.253.146.232:49594] [client 103.253.146.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.146.232, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "afh9T3mjpb9EYq6AqhI8TwAAARU"]
[Mon May 04 19:04:47.636708 2026] [proxy_fcgi:error] [pid 32471:tid 32495] [client 103.253.146.232:49594] AH01071: Got error 'Primary script unknown'
[Mon May 04 20:24:07.832278 2026] [:error] [pid 61150:tid 61175] [client 34.24.211.32:54328] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP5-8QXWVLiwIGVpd_4QAAAVY"]
[Tue May 05 00:53:45.297053 2026] [proxy_fcgi:error] [pid 32471:tid 32474] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:45.507388 2026] [proxy_fcgi:error] [pid 32471:tid 32479] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:45.717667 2026] [proxy_fcgi:error] [pid 32471:tid 32478] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:45.928784 2026] [proxy_fcgi:error] [pid 32471:tid 32483] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:46.139987 2026] [proxy_fcgi:error] [pid 32471:tid 32484] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:46.350662 2026] [proxy_fcgi:error] [pid 32471:tid 32494] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:46.563252 2026] [proxy_fcgi:error] [pid 32471:tid 32485] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:46.773459 2026] [proxy_fcgi:error] [pid 32471:tid 32477] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:46.987515 2026] [proxy_fcgi:error] [pid 32471:tid 32475] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:47.199661 2026] [proxy_fcgi:error] [pid 32471:tid 32490] [client 4.204.197.96:18408] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:53:47.406784 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:18408] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "afjPG3mjpb9EYq6AqhKmeQAAARU"]
[Tue May 05 00:53:47.822335 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18369] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "afjPG09o3_LordU0wW64rwAAAJc"]
[Tue May 05 00:53:48.243166 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:18379] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "afjPHHmjpb9EYq6AqhKmegAAARY"]
[Tue May 05 00:53:48.655926 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:18324] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/new.php"] [unique_id "afjPHE9o3_LordU0wW64sgAAAIs"]
[Tue May 05 00:53:49.089417 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:18395] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "afjPHU9o3_LordU0wW64swAAAJE"]
[Tue May 05 00:53:49.523629 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:18378] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "afjPHUw8w2zZZXI6H1vC-wAAAAA"]
[Tue May 05 00:53:49.940141 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:18376] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "afjPHXmjpb9EYq6AqhKmfQAAAQo"]
[Tue May 05 00:53:50.365288 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18388] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa.php"] [unique_id "afjPHk9o3_LordU0wW64tgAAAJc"]
[Tue May 05 00:53:50.781124 2026] [:error] [pid 61044:tid 61117] [client 4.204.197.96:18251] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "afjPHkw8w2zZZXI6H1vC_gAAAA8"]
[Tue May 05 00:53:51.203327 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18416] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "afjPH3mjpb9EYq6AqhKmgwAAAQc"]
[Tue May 05 00:53:51.622312 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:18407] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "afjPH-8QXWVLiwIGVpezbwAAAVA"]
[Tue May 05 00:53:52.035898 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:18403] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jk.php"] [unique_id "afjPIHmjpb9EYq6AqhKmhwAAARY"]
[Tue May 05 00:53:52.448068 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:18424] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "afjPIEw8w2zZZXI6H1vDAQAAABM"]
[Tue May 05 00:53:52.869202 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:18306] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "afjPIJ8-LwtfURjiAbD2qAAAAE8"]
[Tue May 05 00:53:53.282721 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:18325] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "afjPIe8QXWVLiwIGVpezcQAAAVM"]
[Tue May 05 00:53:53.696105 2026] [:error] [pid 61150:tid 61165] [client 4.204.197.96:18406] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gcqoa.php"] [unique_id "afjPIe8QXWVLiwIGVpezdAAAAUw"]
[Tue May 05 00:53:54.110139 2026] [:error] [pid 61044:tid 61120] [client 4.204.197.96:18370] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "afjPIkw8w2zZZXI6H1vDAgAAABI"]
[Tue May 05 00:53:54.524894 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:18316] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "afjPInmjpb9EYq6AqhKmjQAAAQM"]
[Tue May 05 00:53:54.938366 2026] [:error] [pid 61150:tid 61164] [client 4.204.197.96:18411] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "afjPIu8QXWVLiwIGVpezdQAAAUs"]
[Tue May 05 00:53:55.369895 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:18373] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-editor.php"] [unique_id "afjPI09o3_LordU0wW64twAAAJE"]
[Tue May 05 00:53:55.788252 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:18371] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "afjPI0w8w2zZZXI6H1vDBgAAAAM"]
[Tue May 05 00:53:56.206841 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:18420] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "afjPJJ8-LwtfURjiAbD2qQAAAEg"]
[Tue May 05 00:53:56.626005 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18318] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "afjPJJ8-LwtfURjiAbD2qgAAAEo"]
[Tue May 05 00:53:57.042770 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:18380] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/plugin-install.php"] [unique_id "afjPJXmjpb9EYq6AqhKmjgAAAQE"]
[Tue May 05 00:53:57.467156 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:18385] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "afjPJU9o3_LordU0wW64uwAAAJU"]
[Tue May 05 00:53:57.878612 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:18413] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "afjPJU9o3_LordU0wW64vQAAAI0"]
[Tue May 05 00:53:58.291495 2026] [:error] [pid 61042:tid 61047] [client 4.204.197.96:18398] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "afjPJknAPPS1fjubA9R6hwAAAME"]
[Tue May 05 00:53:58.705295 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18391] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/profile.php"] [unique_id "afjPJp8-LwtfURjiAbD2rAAAAEY"]
[Tue May 05 00:53:59.119362 2026] [:error] [pid 61044:tid 61114] [client 4.204.197.96:18377] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "afjPJ0w8w2zZZXI6H1vDCgAAAAw"]
[Tue May 05 00:53:59.560004 2026] [:error] [pid 32471:tid 32497] [client 4.204.197.96:18431] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "afjPJ3mjpb9EYq6AqhKmkQAAARc"]
[Tue May 05 00:53:59.976715 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:18415] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "afjPJ3mjpb9EYq6AqhKmkwAAAQk"]
[Tue May 05 00:54:00.401571 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:18383] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-t.api.php"] [unique_id "afjPKHmjpb9EYq6AqhKmlAAAARA"]
[Tue May 05 00:54:00.816480 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:18410] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjPKHmjpb9EYq6AqhKmlQAAAQQ"]
[Tue May 05 00:54:01.243541 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:18426] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjPKUw8w2zZZXI6H1vDCwAAAAU"]
[Tue May 05 00:54:01.656772 2026] [:error] [pid 61044:tid 61112] [client 4.204.197.96:18319] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjPKUw8w2zZZXI6H1vDDAAAAAo"]
[Tue May 05 00:54:02.070688 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:18311] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links-opml.php"] [unique_id "afjPKkw8w2zZZXI6H1vDDQAAAAI"]
[Tue May 05 00:54:02.483279 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:18421] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "afjPKkw8w2zZZXI6H1vDDgAAAAM"]
[Tue May 05 00:54:02.893763 2026] [:error] [pid 61044:tid 61111] [client 4.204.197.96:18372] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "afjPKkw8w2zZZXI6H1vDEAAAAAk"]
[Tue May 05 00:54:03.313259 2026] [:error] [pid 61042:tid 61053] [client 4.204.197.96:18343] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "afjPK0nAPPS1fjubA9R6igAAAMc"]
[Tue May 05 00:54:03.727616 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:18419] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-api.php"] [unique_id "afjPK3mjpb9EYq6AqhKmmQAAARM"]
[Tue May 05 00:54:04.139446 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:18339] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjPLEw8w2zZZXI6H1vDFQAAAA4"]
[Tue May 05 00:54:04.565483 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:18429] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjPLE9o3_LordU0wW64wQAAAIY"]
[Tue May 05 00:54:04.979653 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:18342] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjPLEw8w2zZZXI6H1vDGAAAAAY"]
[Tue May 05 00:54:05.416529 2026] [:error] [pid 61044:tid 61113] [client 4.204.197.96:18330] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-class-atom.php"] [unique_id "afjPLUw8w2zZZXI6H1vDGQAAAAs"]
[Tue May 05 00:54:05.834103 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:18265] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "afjPLZ8-LwtfURjiAbD2sQAAAFI"]
[Tue May 05 00:54:06.251022 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:18405] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "afjPLkw8w2zZZXI6H1vDGgAAABA"]
[Tue May 05 00:54:06.669814 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:18309] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "afjPLkw8w2zZZXI6H1vDGwAAAAU"]
[Tue May 05 00:54:07.093173 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:18244] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-block.php"] [unique_id "afjPL58-LwtfURjiAbD2tAAAAFc"]
[Tue May 05 00:54:07.513091 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:18317] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signup.php"] [unique_id "afjPL58-LwtfURjiAbD2tQAAAEg"]
[Tue May 05 00:54:07.936197 2026] [:error] [pid 61044:tid 61106] [client 4.204.197.96:18348] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signup.php"] [unique_id "afjPL0w8w2zZZXI6H1vDHQAAAAQ"]
[Tue May 05 00:54:08.351091 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:18326] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signup.php"] [unique_id "afjPMEw8w2zZZXI6H1vDHgAAAAI"]
[Tue May 05 00:54:08.777690 2026] [:error] [pid 61042:tid 61059] [client 4.204.197.96:18331] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signup.php"] [unique_id "afjPMEnAPPS1fjubA9R6kAAAAM0"]
[Tue May 05 00:54:09.189783 2026] [:error] [pid 61042:tid 61049] [client 4.204.197.96:18393] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjPMUnAPPS1fjubA9R6kQAAAMM"]
[Tue May 05 00:54:09.609533 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:18418] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjPMXmjpb9EYq6AqhKmngAAAQU"]
[Tue May 05 00:54:10.023477 2026] [:error] [pid 61042:tid 61061] [client 4.204.197.96:18338] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjPMknAPPS1fjubA9R6kwAAAM8"]
[Tue May 05 00:54:10.443899 2026] [:error] [pid 61042:tid 61047] [client 4.204.197.96:18404] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xmlsia.php"] [unique_id "afjPMknAPPS1fjubA9R6lAAAAME"]
[Tue May 05 00:54:10.870153 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:18321] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-inic3.php"] [unique_id "afjPMu8QXWVLiwIGVpezewAAAUg"]
[Tue May 05 00:54:11.299783 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:18304] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-inic3.php"] [unique_id "afjPM58-LwtfURjiAbD2ugAAAEM"]
[Tue May 05 00:54:11.716202 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18344] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-inic3.php"] [unique_id "afjPM3mjpb9EYq6AqhKmoAAAAQY"]
[Tue May 05 00:54:12.137313 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:18313] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-inic3.php"] [unique_id "afjPNE9o3_LordU0wW64xQAAAIE"]
[Tue May 05 00:54:12.554239 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:18365] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "afjPNHmjpb9EYq6AqhKmogAAARQ"]
[Tue May 05 00:54:12.979416 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:18430] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "afjPNE9o3_LordU0wW64xgAAAIo"]
[Tue May 05 00:54:13.393465 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:18422] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "afjPNU9o3_LordU0wW64xwAAAIg"]
[Tue May 05 00:54:13.823885 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18322] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ftde.php"] [unique_id "afjPNXmjpb9EYq6AqhKmpQAAAQ0"]
[Tue May 05 00:54:14.251144 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18192] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afjPNk9o3_LordU0wW64yAAAAIQ"]
[Tue May 05 00:54:14.663415 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:18350] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afjPNk9o3_LordU0wW64yQAAAJQ"]
[Tue May 05 00:54:15.079159 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:18390] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afjPN09o3_LordU0wW64zAAAAIM"]
[Tue May 05 00:54:15.493491 2026] [:error] [pid 61044:tid 61110] [client 4.204.197.96:18333] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bthil.php"] [unique_id "afjPN0w8w2zZZXI6H1vDIgAAAAg"]
[Tue May 05 00:54:15.918943 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:18414] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "afjPN-8QXWVLiwIGVpezggAAAVI"]
[Tue May 05 00:54:16.335585 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:18341] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "afjPOEw8w2zZZXI6H1vDJAAAAAU"]
[Tue May 05 00:54:16.752361 2026] [:error] [pid 32471:tid 32497] [client 4.204.197.96:18409] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "afjPOHmjpb9EYq6AqhKmpwAAARc"]
[Tue May 05 00:54:17.170497 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:18259] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "afjPOUw8w2zZZXI6H1vDJQAAABg"]
[Tue May 05 00:54:17.587268 2026] [:error] [pid 61150:tid 61170] [client 4.204.197.96:18270] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "afjPOe8QXWVLiwIGVpezhAAAAVE"]
[Tue May 05 00:54:18.014673 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18387] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "afjPOnmjpb9EYq6AqhKmqQAAAQg"]
[Tue May 05 00:54:18.435392 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:18335] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "afjPOnmjpb9EYq6AqhKmqwAAAQQ"]
[Tue May 05 00:54:18.851383 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:18423] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "afjPOkw8w2zZZXI6H1vDKAAAAAI"]
[Tue May 05 00:54:19.272834 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:18320] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "afjPO-8QXWVLiwIGVpezhQAAAU8"]
[Tue May 05 00:54:19.695983 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:18384] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "afjPO3mjpb9EYq6AqhKmsgAAAQI"]
[Tue May 05 00:54:20.109936 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:18328] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "afjPPJ8-LwtfURjiAbD2vQAAAE8"]
[Tue May 05 00:54:20.525633 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:18255] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "afjPPHmjpb9EYq6AqhKmswAAAQs"]
[Tue May 05 00:54:20.939814 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18362] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "afjPPHmjpb9EYq6AqhKmtwAAAQg"]
[Tue May 05 00:54:21.362757 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:18336] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "afjPPUw8w2zZZXI6H1vDKgAAAAA"]
[Tue May 05 00:54:21.816582 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18375] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "afjPPZ8-LwtfURjiAbD2vgAAAEo"]
[Tue May 05 00:54:22.229533 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:18346] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "afjPPnmjpb9EYq6AqhKmugAAARE"]
[Tue May 05 00:54:22.646386 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:18307] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "afjPPnmjpb9EYq6AqhKmuwAAAQ4"]
[Tue May 05 00:54:23.068374 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:18347] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "afjPP3mjpb9EYq6AqhKmvAAAAQo"]
[Tue May 05 00:54:23.481406 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:18334] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "afjPP3mjpb9EYq6AqhKmvgAAAQA"]
[Tue May 05 00:54:23.895973 2026] [:error] [pid 61042:tid 61066] [client 4.204.197.96:18345] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "afjPP0nAPPS1fjubA9R6mgAAANQ"]
[Tue May 05 00:54:24.319305 2026] [:error] [pid 61044:tid 61110] [client 4.204.197.96:18332] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "afjPQEw8w2zZZXI6H1vDLwAAAAg"]
[Tue May 05 00:54:24.751259 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18314] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "afjPQE9o3_LordU0wW641gAAAIQ"]
[Tue May 05 00:54:25.177565 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18400] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "afjPQZ8-LwtfURjiAbD2wgAAAEY"]
[Tue May 05 00:54:25.603104 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:18392] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aevly.php"] [unique_id "afjPQUw8w2zZZXI6H1vDMQAAABg"]
[Tue May 05 00:54:26.024164 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:18368] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "afjPQnmjpb9EYq6AqhKmwAAAAQM"]
[Tue May 05 00:54:26.439055 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:18357] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "afjPQnmjpb9EYq6AqhKmwwAAAQ4"]
[Tue May 05 00:54:26.858498 2026] [:error] [pid 61150:tid 61158] [client 4.204.197.96:18310] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "afjPQu8QXWVLiwIGVpeziQAAAUU"]
[Tue May 05 00:54:27.275089 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:18402] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "afjPQ0nAPPS1fjubA9R6nQAAAMY"]
[Tue May 05 00:54:27.692740 2026] [:error] [pid 61042:tid 61054] [client 4.204.197.96:18412] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-slss.php"] [unique_id "afjPQ0nAPPS1fjubA9R6ngAAAMg"]
[Tue May 05 00:54:28.108350 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:18298] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-slss.php"] [unique_id "afjPREnAPPS1fjubA9R6oAAAAM4"]
[Tue May 05 00:54:28.526605 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:18267] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-slss.php"] [unique_id "afjPRO8QXWVLiwIGVpeziwAAAU4"]
[Tue May 05 00:54:28.949888 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:18363] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-slss.php"] [unique_id "afjPREw8w2zZZXI6H1vDMwAAAAI"]
[Tue May 05 00:54:29.366595 2026] [:error] [pid 61150:tid 61155] [client 4.204.197.96:18356] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "afjPRe8QXWVLiwIGVpezjAAAAUI"]
[Tue May 05 00:54:29.781040 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:18284] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "afjPRUnAPPS1fjubA9R6pAAAAMs"]
[Tue May 05 00:54:30.231620 2026] [:error] [pid 61042:tid 61048] [client 4.204.197.96:18427] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "afjPRknAPPS1fjubA9R6pQAAAMI"]
[Tue May 05 00:54:30.648400 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:18269] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "afjPRu8QXWVLiwIGVpezjwAAAVM"]
[Tue May 05 00:54:31.064969 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:18417] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "afjPR3mjpb9EYq6AqhKmyAAAAQs"]
[Tue May 05 00:54:31.478481 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18250] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "afjPR09o3_LordU0wW642QAAAJc"]
[Tue May 05 00:54:31.899222 2026] [:error] [pid 32471:tid 32489] [client 4.204.197.96:18308] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "afjPR3mjpb9EYq6AqhKmyQAAAQ8"]
[Tue May 05 00:54:32.321863 2026] [:error] [pid 61042:tid 61068] [client 4.204.197.96:18428] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "afjPSEnAPPS1fjubA9R6pwAAANY"]
[Tue May 05 00:54:32.735322 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:18272] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "afjPSO8QXWVLiwIGVpezkwAAAUA"]
[Tue May 05 00:54:33.147726 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:18278] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "afjPSUw8w2zZZXI6H1vDOAAAAAY"]
[Tue May 05 00:54:33.577200 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:18367] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "afjPSUnAPPS1fjubA9R6qgAAAMY"]
[Tue May 05 00:54:34.005841 2026] [:error] [pid 61042:tid 61046] [client 4.204.197.96:18271] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file59.php"] [unique_id "afjPSknAPPS1fjubA9R6rQAAAMA"]
[Tue May 05 00:54:34.425730 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:18249] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-at.php"] [unique_id "afjPSknAPPS1fjubA9R6rwAAAMU"]
[Tue May 05 00:54:34.839086 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:18197] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-at.php"] [unique_id "afjPSnmjpb9EYq6AqhKm0gAAAQw"]
[Tue May 05 00:54:35.265865 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18358] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-at.php"] [unique_id "afjPS58-LwtfURjiAbD2xgAAAEo"]
[Tue May 05 00:54:35.678725 2026] [:error] [pid 61044:tid 61119] [client 4.204.197.96:18349] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-at.php"] [unique_id "afjPS0w8w2zZZXI6H1vDOgAAABE"]
[Tue May 05 00:54:36.101778 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:18382] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjPTJ8-LwtfURjiAbD2xwAAAEs"]
[Tue May 05 00:54:36.520689 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:18240] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjPTJ8-LwtfURjiAbD2yAAAAFc"]
[Tue May 05 00:54:36.941931 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18379] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjPTE9o3_LordU0wW643gAAAIQ"]
[Tue May 05 00:54:37.370035 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18241] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjPTZ8-LwtfURjiAbD2yQAAAEY"]
[Tue May 05 00:54:37.787374 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:18289] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "afjPTZ8-LwtfURjiAbD2ygAAAEc"]
[Tue May 05 00:54:38.203314 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:18252] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "afjPTk9o3_LordU0wW644QAAAIM"]
[Tue May 05 00:54:38.631087 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:18246] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "afjPTk9o3_LordU0wW645AAAAIs"]
[Tue May 05 00:54:39.054366 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18425] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/333.php"] [unique_id "afjPT09o3_LordU0wW645gAAAI8"]
[Tue May 05 00:54:39.473976 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18300] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "afjPT09o3_LordU0wW646gAAAJc"]
[Tue May 05 00:54:39.894948 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:18292] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "afjPT09o3_LordU0wW647QAAAIE"]
[Tue May 05 00:54:40.313326 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:18315] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "afjPUHmjpb9EYq6AqhKm4QAAAQw"]
[Tue May 05 00:54:40.728982 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:18264] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "afjPUHmjpb9EYq6AqhKm4wAAAQs"]
[Tue May 05 00:54:41.148786 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:18184] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "afjPUXmjpb9EYq6AqhKm5gAAARg"]
[Tue May 05 00:54:41.575943 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:18290] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "afjPUU9o3_LordU0wW649AAAAIo"]
[Tue May 05 00:54:41.998289 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:18183] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "afjPUU9o3_LordU0wW649QAAAJg"]
[Tue May 05 00:54:42.412831 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18281] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ff1.php"] [unique_id "afjPUk9o3_LordU0wW64-AAAAIA"]
[Tue May 05 00:54:42.833001 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:18352] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ton.php"] [unique_id "afjPUk9o3_LordU0wW64-gAAAIw"]
[Tue May 05 00:54:43.279432 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18288] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ton.php"] [unique_id "afjPU09o3_LordU0wW64_AAAAIQ"]
[Tue May 05 00:54:43.691541 2026] [:error] [pid 61044:tid 61103] [client 4.204.197.96:18195] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ton.php"] [unique_id "afjPU0w8w2zZZXI6H1vDPQAAAAE"]
[Tue May 05 00:54:44.118447 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:18297] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ton.php"] [unique_id "afjPVEw8w2zZZXI6H1vDPgAAAAA"]
[Tue May 05 00:54:44.540040 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:18254] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asas.php"] [unique_id "afjPVO8QXWVLiwIGVpezlAAAAVI"]
[Tue May 05 00:54:44.966014 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:18337] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asas.php"] [unique_id "afjPVHmjpb9EYq6AqhKm8AAAARY"]
[Tue May 05 00:54:45.388793 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:18360] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asas.php"] [unique_id "afjPVXmjpb9EYq6AqhKm9QAAAQA"]
[Tue May 05 00:54:45.801786 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:18305] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/asas.php"] [unique_id "afjPVXmjpb9EYq6AqhKm_wAAARA"]
[Tue May 05 00:54:46.229476 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:18399] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afjPVnmjpb9EYq6AqhKnBwAAAQ4"]
[Tue May 05 00:54:46.647040 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18287] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/kikikoko.php"] [unique_id "afjPVnmjpb9EYq6AqhKnEQAAAQc"]
[Tue May 05 00:54:47.084512 2026] [proxy_fcgi:error] [pid 3341:tid 3359] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:47.294800 2026] [proxy_fcgi:error] [pid 3341:tid 3352] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:47.504483 2026] [proxy_fcgi:error] [pid 3341:tid 3345] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:47.714776 2026] [proxy_fcgi:error] [pid 3341:tid 3353] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:47.925326 2026] [proxy_fcgi:error] [pid 3341:tid 3358] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:48.141262 2026] [proxy_fcgi:error] [pid 3341:tid 3365] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:48.351091 2026] [proxy_fcgi:error] [pid 3341:tid 3359] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:48.561314 2026] [proxy_fcgi:error] [pid 3341:tid 3367] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:48.771993 2026] [proxy_fcgi:error] [pid 3341:tid 3345] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:48.982645 2026] [proxy_fcgi:error] [pid 3341:tid 3358] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:49.193288 2026] [proxy_fcgi:error] [pid 3341:tid 3350] [client 4.204.197.96:18394] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:54:49.399129 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:18394] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "afjPWU9o3_LordU0wW65FwAAAJQ"]
[Tue May 05 00:54:49.817114 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:18212] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "afjPWZ8-LwtfURjiAbD20wAAAEA"]
[Tue May 05 00:54:50.231068 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:18282] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "afjPWnmjpb9EYq6AqhKnHgAAAQw"]
[Tue May 05 00:54:50.666529 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:18248] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/iov.php"] [unique_id "afjPWp8-LwtfURjiAbD21AAAAFU"]
[Tue May 05 00:54:51.085059 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:18286] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "afjPW58-LwtfURjiAbD21gAAAEg"]
[Tue May 05 00:54:51.501035 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18381] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "afjPW58-LwtfURjiAbD22AAAAEo"]
[Tue May 05 00:54:51.916044 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:18292] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "afjPW3mjpb9EYq6AqhKnIgAAAQQ"]
[Tue May 05 00:54:52.329766 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:18329] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/Sanskrit.php"] [unique_id "afjPXJ8-LwtfURjiAbD22wAAAE0"]
[Tue May 05 00:54:52.746789 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:18294] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "afjPXE9o3_LordU0wW65GwAAAIs"]
[Tue May 05 00:54:53.160386 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:18340] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "afjPXUw8w2zZZXI6H1vDQQAAABY"]
[Tue May 05 00:54:53.576952 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:18285] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "afjPXU9o3_LordU0wW65HgAAAJQ"]
[Tue May 05 00:54:53.992698 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:18178] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ffile.php"] [unique_id "afjPXZ8-LwtfURjiAbD23QAAAEc"]
[Tue May 05 00:54:54.406721 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:18185] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "afjPXp8-LwtfURjiAbD23gAAAFE"]
[Tue May 05 00:54:54.822612 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:18386] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "afjPXp8-LwtfURjiAbD23wAAAFM"]
[Tue May 05 00:54:55.236843 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:18206] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "afjPX58-LwtfURjiAbD24AAAAEQ"]
[Tue May 05 00:54:55.666000 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:18353] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/layout.php"] [unique_id "afjPX09o3_LordU0wW65JAAAAIs"]
[Tue May 05 00:54:56.082052 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:18187] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "afjPYJ8-LwtfURjiAbD25AAAAFI"]
[Tue May 05 00:54:56.497736 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:18293] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "afjPYE9o3_LordU0wW65JgAAAJg"]
[Tue May 05 00:54:56.921103 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:18135] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "afjPYE9o3_LordU0wW65JwAAAIc"]
[Tue May 05 00:54:57.340005 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:18274] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "afjPYU9o3_LordU0wW65KQAAAIU"]
[Tue May 05 00:54:57.766524 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18258] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "afjPYXmjpb9EYq6AqhKnMgAAAQg"]
[Tue May 05 00:54:58.179469 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18351] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "afjPYk9o3_LordU0wW65LAAAAI8"]
[Tue May 05 00:54:58.594049 2026] [:error] [pid 3341:tid 3361] [client 4.204.197.96:18256] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "afjPYk9o3_LordU0wW65LQAAAJE"]
[Tue May 05 00:54:59.009232 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:18189] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "afjPY-8QXWVLiwIGVpezqQAAAVA"]
[Tue May 05 00:54:59.420920 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:18257] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "afjPY58-LwtfURjiAbD25gAAAE8"]
[Tue May 05 00:54:59.833399 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:18382] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "afjPY0nAPPS1fjubA9R6uQAAAMY"]
[Tue May 05 00:55:00.246906 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:18397] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "afjPZJ8-LwtfURjiAbD25wAAAFc"]
[Tue May 05 00:55:00.663115 2026] [:error] [pid 61150:tid 61175] [client 4.204.197.96:18279] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xozx.php"] [unique_id "afjPZO8QXWVLiwIGVpezrAAAAVY"]
[Tue May 05 00:55:01.077525 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18268] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "afjPZZ8-LwtfURjiAbD26gAAAEY"]
[Tue May 05 00:55:01.494181 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:18202] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "afjPZU9o3_LordU0wW65MgAAAII"]
[Tue May 05 00:55:01.917742 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:18194] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "afjPZUw8w2zZZXI6H1vDQgAAABM"]
[Tue May 05 00:55:02.335252 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:18389] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/less.php"] [unique_id "afjPZu8QXWVLiwIGVpezsAAAAU8"]
[Tue May 05 00:55:02.771355 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:18273] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afjPZp8-LwtfURjiAbD26wAAAEc"]
[Tue May 05 00:55:03.186595 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:18182] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afjPZ3mjpb9EYq6AqhKnOwAAARI"]
[Tue May 05 00:55:03.604377 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:18139] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afjPZ58-LwtfURjiAbD27AAAAFE"]
[Tue May 05 00:55:04.026314 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18364] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/acp.php"] [unique_id "afjPaHmjpb9EYq6AqhKnPgAAAQg"]
[Tue May 05 00:55:04.437892 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:18217] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "afjPaHmjpb9EYq6AqhKnQAAAAQM"]
[Tue May 05 00:55:04.855543 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:18260] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "afjPaJ8-LwtfURjiAbD27QAAAEQ"]
[Tue May 05 00:55:05.280476 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18179] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "afjPaXmjpb9EYq6AqhKnQQAAAQ0"]
[Tue May 05 00:55:05.695688 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:18301] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "afjPaZ8-LwtfURjiAbD27wAAAEM"]
[Tue May 05 00:55:06.127902 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:18302] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "afjPap8-LwtfURjiAbD28gAAAFU"]
[Tue May 05 00:55:06.544947 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:18199] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "afjPak9o3_LordU0wW65NwAAAIY"]
[Tue May 05 00:55:06.963023 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18119] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "afjPak9o3_LordU0wW65OAAAAIA"]
[Tue May 05 00:55:07.374312 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:18396] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/popo.php"] [unique_id "afjPa09o3_LordU0wW65OQAAAIg"]
[Tue May 05 00:55:07.785920 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18261] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "afjPa09o3_LordU0wW65PAAAAJc"]
[Tue May 05 00:55:08.214416 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18276] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "afjPbHmjpb9EYq6AqhKnRQAAAQY"]
[Tue May 05 00:55:08.647937 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:18361] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "afjPbHmjpb9EYq6AqhKnRgAAAQ4"]
[Tue May 05 00:55:09.065102 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:18401] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wander.php"] [unique_id "afjPbXmjpb9EYq6AqhKnSAAAARg"]
[Tue May 05 00:55:09.504802 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18213] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "afjPbXmjpb9EYq6AqhKnSwAAAQc"]
[Tue May 05 00:55:09.926373 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "afjPbZ8-LwtfURjiAbD29gAAAEY"]
[Tue May 05 00:55:10.343118 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:18201] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "afjPbknAPPS1fjubA9R6vAAAAMQ"]
[Tue May 05 00:55:10.770631 2026] [:error] [pid 32471:tid 32497] [client 4.204.197.96:18262] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-db.php"] [unique_id "afjPbnmjpb9EYq6AqhKnTwAAARc"]
[Tue May 05 00:55:11.187815 2026] [:error] [pid 61150:tid 61158] [client 4.204.197.96:18327] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "afjPb-8QXWVLiwIGVpezswAAAUU"]
[Tue May 05 00:55:11.600061 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:18366] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "afjPb-8QXWVLiwIGVpeztAAAAU4"]
[Tue May 05 00:55:12.014297 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:18266] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "afjPcE9o3_LordU0wW65PgAAAIk"]
[Tue May 05 00:55:12.431818 2026] [:error] [pid 61042:tid 61064] [client 4.204.197.96:18193] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/domains.php"] [unique_id "afjPcEnAPPS1fjubA9R6vwAAANI"]
[Tue May 05 00:55:12.850014 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:18323] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "afjPcE9o3_LordU0wW65PwAAAJA"]
[Tue May 05 00:55:13.272030 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18283] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "afjPcU9o3_LordU0wW65QAAAAIA"]
[Tue May 05 00:55:13.684839 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:18191] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "afjPcXmjpb9EYq6AqhKnVgAAAQw"]
[Tue May 05 00:55:14.100435 2026] [:error] [pid 61150:tid 61155] [client 4.204.197.96:18295] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "afjPcu8QXWVLiwIGVpeztgAAAUI"]
[Tue May 05 00:55:14.517010 2026] [:error] [pid 61150:tid 61154] [client 4.204.197.96:18245] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ouh.php"] [unique_id "afjPcu8QXWVLiwIGVpezuAAAAUE"]
[Tue May 05 00:55:14.931999 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:18132] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ouh.php"] [unique_id "afjPcnmjpb9EYq6AqhKnWgAAAQQ"]
[Tue May 05 00:55:15.346975 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18140] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ouh.php"] [unique_id "afjPc09o3_LordU0wW65RAAAAI8"]
[Tue May 05 00:55:15.767790 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18215] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ouh.php"] [unique_id "afjPc09o3_LordU0wW65RwAAAJc"]
[Tue May 05 00:55:16.189100 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:18216] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "afjPdE9o3_LordU0wW65SwAAAIM"]
[Tue May 05 00:55:16.608836 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:18180] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "afjPdO8QXWVLiwIGVpezvgAAAUA"]
[Tue May 05 00:55:17.023173 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:18190] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "afjPdU9o3_LordU0wW65TQAAAJU"]
[Tue May 05 00:55:17.444369 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:18243] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fone1.php"] [unique_id "afjPdZ8-LwtfURjiAbD2-AAAAEA"]
[Tue May 05 00:55:17.858872 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18218] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "afjPdXmjpb9EYq6AqhKnXwAAAQg"]
[Tue May 05 00:55:18.276909 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18200] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "afjPdp8-LwtfURjiAbD2-QAAAEo"]
[Tue May 05 00:55:18.688860 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:18151] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "afjPdnmjpb9EYq6AqhKnZQAAAQQ"]
[Tue May 05 00:55:19.101373 2026] [:error] [pid 61042:tid 61065] [client 4.204.197.96:18219] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sko.php"] [unique_id "afjPd0nAPPS1fjubA9R6wAAAANM"]
[Tue May 05 00:55:19.519654 2026] [:error] [pid 61042:tid 61066] [client 4.204.197.96:18157] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "afjPd0nAPPS1fjubA9R6wQAAANQ"]
[Tue May 05 00:55:19.935305 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18303] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "afjPd3mjpb9EYq6AqhKnaQAAAQc"]
[Tue May 05 00:55:20.369894 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:18128] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "afjPeHmjpb9EYq6AqhKnawAAAQA"]
[Tue May 05 00:55:20.784765 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:18229] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cilus.php"] [unique_id "afjPeHmjpb9EYq6AqhKnbAAAARU"]
[Tue May 05 00:55:21.205351 2026] [:error] [pid 61042:tid 61061] [client 4.204.197.96:18121] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "afjPeUnAPPS1fjubA9R6wgAAAM8"]
[Tue May 05 00:55:21.632452 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:18211] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "afjPeUw8w2zZZXI6H1vDUQAAABA"]
[Tue May 05 00:55:22.055902 2026] [:error] [pid 61044:tid 61113] [client 4.204.197.96:18359] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "afjPekw8w2zZZXI6H1vDUgAAAAs"]
[Tue May 05 00:55:22.478112 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:18116] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-cliner.php"] [unique_id "afjPek9o3_LordU0wW65VQAAAIE"]
[Tue May 05 00:55:22.909017 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:18225] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "afjPekw8w2zZZXI6H1vDVQAAAAc"]
[Tue May 05 00:55:23.333038 2026] [:error] [pid 61042:tid 61056] [client 4.204.197.96:18227] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "afjPe0nAPPS1fjubA9R6xAAAAMo"]
[Tue May 05 00:55:23.751164 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:18224] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "afjPe58-LwtfURjiAbD2_QAAAEw"]
[Tue May 05 00:55:24.163707 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:18065] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-sx10.php"] [unique_id "afjPfEnAPPS1fjubA9R6xwAAAM4"]
[Tue May 05 00:55:24.578070 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:18198] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "afjPfJ8-LwtfURjiAbD3AAAAAFM"]
[Tue May 05 00:55:24.990481 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:18312] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "afjPfEw8w2zZZXI6H1vDVgAAAAA"]
[Tue May 05 00:55:25.407486 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:18204] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "afjPfe8QXWVLiwIGVpezxAAAAVU"]
[Tue May 05 00:55:25.824163 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:18253] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/packed.php"] [unique_id "afjPfXmjpb9EYq6AqhKnbwAAARU"]
[Tue May 05 00:55:26.238140 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:18048] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "afjPfk9o3_LordU0wW65WwAAAIo"]
[Tue May 05 00:55:26.657903 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:18222] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "afjPfknAPPS1fjubA9R6ygAAAMU"]
[Tue May 05 00:55:27.077022 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18277] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "afjPf09o3_LordU0wW65XgAAAIA"]
[Tue May 05 00:55:27.494631 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:18176] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "afjPf3mjpb9EYq6AqhKncAAAARE"]
[Tue May 05 00:55:27.912719 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:18355] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "afjPf3mjpb9EYq6AqhKncgAAAQM"]
[Tue May 05 00:55:28.360850 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:18133] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "afjPgO8QXWVLiwIGVpezxgAAAUQ"]
[Tue May 05 00:55:28.773876 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:18263] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "afjPgHmjpb9EYq6AqhKndwAAARQ"]
[Tue May 05 00:55:29.196096 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18231] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cc13.php"] [unique_id "afjPgXmjpb9EYq6AqhKnegAAAQ0"]
[Tue May 05 00:55:29.647302 2026] [:error] [pid 32471:tid 32489] [client 4.204.197.96:18209] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "afjPgXmjpb9EYq6AqhKnewAAAQ8"]
[Tue May 05 00:55:30.063844 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:18203] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "afjPgnmjpb9EYq6AqhKnfQAAAQo"]
[Tue May 05 00:55:30.480096 2026] [:error] [pid 61044:tid 61122] [client 4.204.197.96:18196] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "afjPgkw8w2zZZXI6H1vDWAAAABQ"]
[Tue May 05 00:55:30.895367 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:18058] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fileas.php"] [unique_id "afjPgnmjpb9EYq6AqhKnggAAAQU"]
[Tue May 05 00:55:31.309428 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18232] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "afjPg3mjpb9EYq6AqhKnhAAAAQY"]
[Tue May 05 00:55:31.724244 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:18234] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "afjPg3mjpb9EYq6AqhKnhQAAAQs"]
[Tue May 05 00:55:32.152975 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18220] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "afjPhJ8-LwtfURjiAbD3BwAAAEY"]
[Tue May 05 00:55:32.566915 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:18291] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "afjPhO8QXWVLiwIGVpezyQAAAU4"]
[Tue May 05 00:55:32.991313 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:18104] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "afjPhE9o3_LordU0wW65ZgAAAIo"]
[Tue May 05 00:55:33.405669 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:18275] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "afjPhZ8-LwtfURjiAbD3CwAAAE4"]
[Tue May 05 00:55:33.823296 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:18237] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "afjPhXmjpb9EYq6AqhKnhwAAAQA"]
[Tue May 05 00:55:34.242991 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18091] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/v3.php"] [unique_id "afjPhnmjpb9EYq6AqhKniQAAAQc"]
[Tue May 05 00:55:34.671896 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:18208] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "afjPhnmjpb9EYq6AqhKniwAAARU"]
[Tue May 05 00:55:35.091159 2026] [:error] [pid 61043:tid 61095] [client 4.204.197.96:18113] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "afjPh58-LwtfURjiAbD3DgAAAFQ"]
[Tue May 05 00:55:35.535732 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18136] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "afjPh3mjpb9EYq6AqhKnjgAAAQY"]
[Tue May 05 00:55:35.959030 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:18162] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/06.php"] [unique_id "afjPh58-LwtfURjiAbD3EwAAAEg"]
[Tue May 05 00:55:36.374413 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:18080] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "afjPiHmjpb9EYq6AqhKnjwAAAQs"]
[Tue May 05 00:55:36.825396 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:18354] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "afjPiHmjpb9EYq6AqhKnkAAAAQI"]
[Tue May 05 00:55:37.240338 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18142] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "afjPiXmjpb9EYq6AqhKnlAAAAQ0"]
[Tue May 05 00:55:37.667703 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:18124] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wkdec.php"] [unique_id "afjPie8QXWVLiwIGVpezywAAAVQ"]
[Tue May 05 00:55:38.089168 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:18221] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afjPik9o3_LordU0wW65agAAAJg"]
[Tue May 05 00:55:38.509702 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:18138] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afjPiu8QXWVLiwIGVpezzQAAAVM"]
[Tue May 05 00:55:38.949510 2026] [:error] [pid 61150:tid 61177] [client 4.204.197.96:18159] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afjPiu8QXWVLiwIGVpezzwAAAVg"]
[Tue May 05 00:55:39.362188 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:18170] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "afjPi-8QXWVLiwIGVpez0QAAAVU"]
[Tue May 05 00:55:39.776325 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:18122] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afjPi-8QXWVLiwIGVpez0wAAAUo"]
[Tue May 05 00:55:40.199608 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:18242] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afjPjJ8-LwtfURjiAbD3FgAAAE4"]
[Tue May 05 00:55:40.619197 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:18153] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afjPjEw8w2zZZXI6H1vDXAAAAAI"]
[Tue May 05 00:55:41.043263 2026] [:error] [pid 61043:tid 61084] [client 4.204.197.96:18078] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "afjPjZ8-LwtfURjiAbD3FwAAAEk"]
[Tue May 05 00:55:41.465054 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:18131] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "afjPjZ8-LwtfURjiAbD3GAAAAFU"]
[Tue May 05 00:55:41.904981 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:18127] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "afjPjXmjpb9EYq6AqhKnlgAAAQU"]
[Tue May 05 00:55:42.323805 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18130] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "afjPjk9o3_LordU0wW65bgAAAIA"]
[Tue May 05 00:55:42.752963 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:18120] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xy.php"] [unique_id "afjPju8QXWVLiwIGVpez1gAAAVI"]
[Tue May 05 00:55:43.166498 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:18233] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "afjPj3mjpb9EYq6AqhKnmgAAAQc"]
[Tue May 05 00:55:43.578741 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:18188] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "afjPj3mjpb9EYq6AqhKnmwAAARU"]
[Tue May 05 00:55:43.997034 2026] [:error] [pid 61044:tid 61123] [client 4.204.197.96:18112] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "afjPj0w8w2zZZXI6H1vDYAAAABU"]
[Tue May 05 00:55:44.413642 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:18238] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/opts.php"] [unique_id "afjPkHmjpb9EYq6AqhKnngAAARE"]
[Tue May 05 00:55:44.831428 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:18144] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "afjPkEw8w2zZZXI6H1vDYQAAAA4"]
[Tue May 05 00:55:45.246415 2026] [:error] [pid 61150:tid 61177] [client 4.204.197.96:18296] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "afjPke8QXWVLiwIGVpez2gAAAVg"]
[Tue May 05 00:55:45.658349 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:18101] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "afjPkU9o3_LordU0wW65cQAAAIU"]
[Tue May 05 00:55:46.087864 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:18066] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "afjPknmjpb9EYq6AqhKnnwAAARI"]
[Tue May 05 00:55:46.505808 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:18207] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "afjPkkw8w2zZZXI6H1vDYgAAABY"]
[Tue May 05 00:55:46.921605 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18166] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "afjPknmjpb9EYq6AqhKnoAAAAQY"]
[Tue May 05 00:55:47.340971 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:18129] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "afjPk3mjpb9EYq6AqhKnogAAARg"]
[Tue May 05 00:55:47.751388 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:18280] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hook.php"] [unique_id "afjPk0nAPPS1fjubA9R6zgAAAM4"]
[Tue May 05 00:55:48.170014 2026] [:error] [pid 61042:tid 61049] [client 4.204.197.96:18155] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/racs3.php"] [unique_id "afjPlEnAPPS1fjubA9R6zwAAAMM"]
[Tue May 05 00:55:48.584866 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18156] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/racs3.php"] [unique_id "afjPlHmjpb9EYq6AqhKnpAAAAQ0"]
[Tue May 05 00:55:49.015266 2026] [proxy_fcgi:error] [pid 61044:tid 61125] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:49.225627 2026] [proxy_fcgi:error] [pid 61044:tid 61106] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:49.435106 2026] [proxy_fcgi:error] [pid 61044:tid 61105] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:49.644383 2026] [proxy_fcgi:error] [pid 61044:tid 61113] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:49.854093 2026] [proxy_fcgi:error] [pid 61044:tid 61109] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:50.063975 2026] [proxy_fcgi:error] [pid 61044:tid 61104] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:50.274249 2026] [proxy_fcgi:error] [pid 61044:tid 61103] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:50.484692 2026] [proxy_fcgi:error] [pid 61044:tid 61102] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:50.696967 2026] [proxy_fcgi:error] [pid 61044:tid 61107] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:52.229815 2026] [proxy_fcgi:error] [pid 61044:tid 61117] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:52.451950 2026] [proxy_fcgi:error] [pid 61044:tid 61108] [client 4.204.197.96:18141] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:55:52.657720 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:18141] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/do.php"] [unique_id "afjPmEw8w2zZZXI6H1vDdAAAABM"]
[Tue May 05 00:55:53.073210 2026] [:error] [pid 61150:tid 61154] [client 4.204.197.96:18057] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/do.php"] [unique_id "afjPme8QXWVLiwIGVpez3gAAAUE"]
[Tue May 05 00:55:53.492661 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18228] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/do.php"] [unique_id "afjPmXmjpb9EYq6AqhKnrQAAAQ0"]
[Tue May 05 00:55:53.912033 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:18061] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/do.php"] [unique_id "afjPmZ8-LwtfURjiAbD3IQAAAFI"]
[Tue May 05 00:55:54.334759 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:18084] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "afjPmp8-LwtfURjiAbD3IgAAAE8"]
[Tue May 05 00:55:54.755494 2026] [:error] [pid 61043:tid 61077] [client 4.204.197.96:18114] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "afjPmp8-LwtfURjiAbD3IwAAAEI"]
[Tue May 05 00:55:55.172516 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:18285] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "afjPm0nAPPS1fjubA9R60QAAAMs"]
[Tue May 05 00:55:55.590206 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:18147] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/myfile.php"] [unique_id "afjPm-8QXWVLiwIGVpez4gAAAVU"]
[Tue May 05 00:55:56.008356 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:18173] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "afjPnEw8w2zZZXI6H1vDdwAAAAM"]
[Tue May 05 00:55:56.428952 2026] [:error] [pid 61042:tid 61046] [client 4.204.197.96:18125] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "afjPnEnAPPS1fjubA9R61AAAAMA"]
[Tue May 05 00:55:56.842229 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:18052] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "afjPnJ8-LwtfURjiAbD3JwAAAEs"]
[Tue May 05 00:55:57.275961 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:18123] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/system.php"] [unique_id "afjPnUw8w2zZZXI6H1vDewAAAA0"]
[Tue May 05 00:55:57.691681 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:18146] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasfu.php"] [unique_id "afjPnZ8-LwtfURjiAbD3LAAAAEY"]
[Tue May 05 00:55:58.114176 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:18389] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasfu.php"] [unique_id "afjPnp8-LwtfURjiAbD3LgAAAFM"]
[Tue May 05 00:55:58.538835 2026] [:error] [pid 61043:tid 61091] [client 4.204.197.96:18177] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasfu.php"] [unique_id "afjPnp8-LwtfURjiAbD3LwAAAFA"]
[Tue May 05 00:55:58.964814 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18053] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yasfu.php"] [unique_id "afjPnk9o3_LordU0wW65dwAAAIQ"]
[Tue May 05 00:55:59.390984 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:18167] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "afjPn09o3_LordU0wW65eAAAAJQ"]
[Tue May 05 00:55:59.811736 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:18099] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "afjPn58-LwtfURjiAbD3MQAAAEM"]
[Tue May 05 00:56:00.245432 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:18230] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "afjPoEw8w2zZZXI6H1vDhAAAAAU"]
[Tue May 05 00:56:00.663510 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:18374] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sid3.php"] [unique_id "afjPoJ8-LwtfURjiAbD3NQAAAE0"]
[Tue May 05 00:56:01.077972 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:18056] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "afjPoZ8-LwtfURjiAbD3NwAAAEA"]
[Tue May 05 00:56:01.493813 2026] [:error] [pid 61044:tid 61114] [client 4.204.197.96:18067] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "afjPoUw8w2zZZXI6H1vDhQAAAAw"]
[Tue May 05 00:56:01.909282 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:18214] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "afjPoZ8-LwtfURjiAbD3OQAAAFM"]
[Tue May 05 00:56:02.323674 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:18072] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-update.php"] [unique_id "afjPop8-LwtfURjiAbD3OgAAAFY"]
[Tue May 05 00:56:02.737140 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:18205] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "afjPokw8w2zZZXI6H1vDiQAAAA4"]
[Tue May 05 00:56:03.193292 2026] [:error] [pid 61044:tid 61106] [client 4.204.197.96:17994] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "afjPo0w8w2zZZXI6H1vDigAAAAQ"]
[Tue May 05 00:56:03.609827 2026] [:error] [pid 61042:tid 61059] [client 4.204.197.96:18154] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "afjPo0nAPPS1fjubA9R61QAAAM0"]
[Tue May 05 00:56:04.031580 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:18089] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "afjPpEw8w2zZZXI6H1vDjQAAABA"]
[Tue May 05 00:56:04.460489 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:18235] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "afjPpE9o3_LordU0wW65fAAAAJg"]
[Tue May 05 00:56:04.877498 2026] [:error] [pid 61042:tid 61066] [client 4.204.197.96:18100] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "afjPpEnAPPS1fjubA9R61wAAANQ"]
[Tue May 05 00:56:05.313030 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:18158] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "afjPpUw8w2zZZXI6H1vDjwAAABM"]
[Tue May 05 00:56:05.737039 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:17985] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lala.php"] [unique_id "afjPpXmjpb9EYq6AqhKnugAAAQ4"]
[Tue May 05 00:56:06.150634 2026] [:error] [pid 61043:tid 61085] [client 4.204.197.96:18051] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "afjPpp8-LwtfURjiAbD3QAAAAEo"]
[Tue May 05 00:56:06.579583 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:18064] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "afjPpp8-LwtfURjiAbD3RAAAAEQ"]
[Tue May 05 00:56:06.990310 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:18087] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "afjPpkw8w2zZZXI6H1vDkQAAAA4"]
[Tue May 05 00:56:07.406043 2026] [:error] [pid 61044:tid 61120] [client 4.204.197.96:18082] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "afjPp0w8w2zZZXI6H1vDkgAAABI"]
[Tue May 05 00:56:07.818720 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:18074] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "afjPp-8QXWVLiwIGVpez5QAAAVc"]
[Tue May 05 00:56:08.236071 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18055] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "afjPqE9o3_LordU0wW65nAAAAIQ"]
[Tue May 05 00:56:08.656051 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18049] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "afjPqE9o3_LordU0wW65ngAAAIA"]
[Tue May 05 00:56:09.073881 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:18004] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clirp.php"] [unique_id "afjPqZ8-LwtfURjiAbD3RwAAAEg"]
[Tue May 05 00:56:09.488709 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:18153] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "afjPqU9o3_LordU0wW65nwAAAI4"]
[Tue May 05 00:56:09.912040 2026] [:error] [pid 61042:tid 61070] [client 4.204.197.96:18077] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "afjPqUnAPPS1fjubA9R62AAAANg"]
[Tue May 05 00:56:10.327126 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:18239] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "afjPqu8QXWVLiwIGVpez6gAAAVM"]
[Tue May 05 00:56:10.755020 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:18149] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/rendi59.php"] [unique_id "afjPqk9o3_LordU0wW65ogAAAJI"]
[Tue May 05 00:56:11.172874 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:18062] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "afjPq0w8w2zZZXI6H1vDlAAAAAc"]
[Tue May 05 00:56:11.599155 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:18143] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "afjPq58-LwtfURjiAbD3SAAAAEU"]
[Tue May 05 00:56:12.015618 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:18360] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "afjPrO8QXWVLiwIGVpez7QAAAUA"]
[Tue May 05 00:56:12.430902 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:18165] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gptsh.php"] [unique_id "afjPrEw8w2zZZXI6H1vDlQAAAAA"]
[Tue May 05 00:56:12.847738 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18050] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "afjPrHmjpb9EYq6AqhKn3gAAAQg"]
[Tue May 05 00:56:13.264898 2026] [:error] [pid 61150:tid 61164] [client 4.204.197.96:18163] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "afjPre8QXWVLiwIGVpez8AAAAUs"]
[Tue May 05 00:56:13.679398 2026] [:error] [pid 61044:tid 61114] [client 4.204.197.96:18148] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "afjPrUw8w2zZZXI6H1vDlgAAAAw"]
[Tue May 05 00:56:14.102154 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18134] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tox.php"] [unique_id "afjPrk9o3_LordU0wW65qAAAAI8"]
[Tue May 05 00:56:14.524607 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18076] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "afjPrk9o3_LordU0wW65qwAAAIA"]
[Tue May 05 00:56:14.952817 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:17996] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "afjPrnmjpb9EYq6AqhKn6wAAARU"]
[Tue May 05 00:56:15.384209 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:18043] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "afjPr3mjpb9EYq6AqhKn7gAAARA"]
[Tue May 05 00:56:15.813625 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:18092] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file9.php"] [unique_id "afjPr3mjpb9EYq6AqhKn8gAAAQg"]
[Tue May 05 00:56:16.228610 2026] [:error] [pid 61043:tid 61091] [client 4.204.197.96:18118] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "afjPsJ8-LwtfURjiAbD3SwAAAFA"]
[Tue May 05 00:56:16.648790 2026] [:error] [pid 61043:tid 61077] [client 4.204.197.96:18073] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "afjPsJ8-LwtfURjiAbD3TAAAAEI"]
[Tue May 05 00:56:17.059630 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:18007] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "afjPsZ8-LwtfURjiAbD3TgAAAEc"]
[Tue May 05 00:56:17.473966 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:17993] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccu.php"] [unique_id "afjPsXmjpb9EYq6AqhKn_wAAARU"]
[Tue May 05 00:56:17.901348 2026] [:error] [pid 61150:tid 61170] [client 4.204.197.96:18168] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-x7.php"] [unique_id "afjPse8QXWVLiwIGVpez8QAAAVE"]
[Tue May 05 00:56:18.325733 2026] [:error] [pid 61150:tid 61174] [client 4.204.197.96:18299] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-x7.php"] [unique_id "afjPsu8QXWVLiwIGVpez8wAAAVU"]
[Tue May 05 00:56:18.745842 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:17988] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-x7.php"] [unique_id "afjPsknAPPS1fjubA9R62gAAAMU"]
[Tue May 05 00:56:19.176787 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:18096] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-x7.php"] [unique_id "afjPs09o3_LordU0wW65sAAAAJU"]
[Tue May 05 00:56:19.628775 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:18038] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "afjPs09o3_LordU0wW65sQAAAIo"]
[Tue May 05 00:56:20.056133 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:17984] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "afjPtE9o3_LordU0wW65swAAAIU"]
[Tue May 05 00:56:20.472837 2026] [:error] [pid 61150:tid 61164] [client 4.204.197.96:18055] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "afjPtO8QXWVLiwIGVpez9wAAAUs"]
[Tue May 05 00:56:20.896799 2026] [:error] [pid 61150:tid 61166] [client 4.204.197.96:18171] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-aaa.php"] [unique_id "afjPtO8QXWVLiwIGVpez-AAAAU0"]
[Tue May 05 00:56:21.322600 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:18236] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjPtUw8w2zZZXI6H1vDmQAAABM"]
[Tue May 05 00:56:21.750956 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:18033] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjPte8QXWVLiwIGVpez-QAAAUg"]
[Tue May 05 00:56:22.175745 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:18098] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjPtk9o3_LordU0wW65uQAAAIA"]
[Tue May 05 00:56:22.595907 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18110] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afjPtk9o3_LordU0wW65uwAAAIQ"]
[Tue May 05 00:56:23.018503 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:18126] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "afjPt09o3_LordU0wW65vQAAAIU"]
[Tue May 05 00:56:23.434913 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:18013] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "afjPt09o3_LordU0wW65vgAAAIY"]
[Tue May 05 00:56:23.851179 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:17987] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "afjPt09o3_LordU0wW65wgAAAI4"]
[Tue May 05 00:56:24.296346 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:18175] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "afjPuJ8-LwtfURjiAbD3UgAAAEU"]
[Tue May 05 00:56:24.718053 2026] [:error] [pid 61043:tid 61095] [client 4.204.197.96:18210] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "afjPuJ8-LwtfURjiAbD3UwAAAFQ"]
[Tue May 05 00:56:25.129368 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:17928] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "afjPuZ8-LwtfURjiAbD3VAAAAEs"]
[Tue May 05 00:56:25.553174 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18075] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "afjPuU9o3_LordU0wW65xQAAAJc"]
[Tue May 05 00:56:25.981512 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:17998] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xrm.php"] [unique_id "afjPuU9o3_LordU0wW65xgAAAIg"]
[Tue May 05 00:56:26.394427 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18011] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "afjPuk9o3_LordU0wW65xwAAAI8"]
[Tue May 05 00:56:26.818155 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:18083] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "afjPuknAPPS1fjubA9R63AAAAMQ"]
[Tue May 05 00:56:27.232721 2026] [:error] [pid 61042:tid 61067] [client 4.204.197.96:18150] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "afjPu0nAPPS1fjubA9R63QAAANU"]
[Tue May 05 00:56:27.649549 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:18152] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-asudo.php"] [unique_id "afjPu09o3_LordU0wW65yQAAAIY"]
[Tue May 05 00:56:28.070388 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:18070] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "afjPvE9o3_LordU0wW65zAAAAI0"]
[Tue May 05 00:56:28.483937 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:18111] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "afjPvE9o3_LordU0wW65zQAAAJU"]
[Tue May 05 00:56:28.901063 2026] [:error] [pid 61150:tid 61160] [client 4.204.197.96:18107] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "afjPvO8QXWVLiwIGVpe0EgAAAUc"]
[Tue May 05 00:56:29.324587 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18117] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file3.php"] [unique_id "afjPvU9o3_LordU0wW650AAAAI8"]
[Tue May 05 00:56:29.737612 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:18003] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "afjPvUw8w2zZZXI6H1vDoAAAAA0"]
[Tue May 05 00:56:30.174524 2026] [:error] [pid 61150:tid 61165] [client 4.204.197.96:17978] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "afjPvu8QXWVLiwIGVpe0GwAAAUw"]
[Tue May 05 00:56:30.593977 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:18164] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "afjPvu8QXWVLiwIGVpe0HgAAAVI"]
[Tue May 05 00:56:31.022293 2026] [:error] [pid 61042:tid 61046] [client 4.204.197.96:17992] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/G-In.php"] [unique_id "afjPv0nAPPS1fjubA9R63wAAAMA"]
[Tue May 05 00:56:31.452952 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:18021] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "afjPv-8QXWVLiwIGVpe0IwAAAUQ"]
[Tue May 05 00:56:31.880964 2026] [:error] [pid 61150:tid 61159] [client 4.204.197.96:18106] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "afjPv-8QXWVLiwIGVpe0JgAAAUY"]
[Tue May 05 00:56:32.293606 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:18059] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "afjPwO8QXWVLiwIGVpe0KQAAAVQ"]
[Tue May 05 00:56:32.711096 2026] [:error] [pid 61044:tid 61122] [client 4.204.197.96:17986] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-gr.php"] [unique_id "afjPwEw8w2zZZXI6H1vDpgAAABQ"]
[Tue May 05 00:56:33.149509 2026] [:error] [pid 61042:tid 61063] [client 4.204.197.96:18223] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "afjPwUnAPPS1fjubA9R64QAAANE"]
[Tue May 05 00:56:33.568880 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:18095] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "afjPwU9o3_LordU0wW651AAAAJI"]
[Tue May 05 00:56:33.989510 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:18054] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "afjPwU9o3_LordU0wW651gAAAJc"]
[Tue May 05 00:56:34.406703 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:18109] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mans.php"] [unique_id "afjPwkw8w2zZZXI6H1vDqgAAABc"]
[Tue May 05 00:56:34.832390 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:17991] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "afjPwp8-LwtfURjiAbD3XgAAAEA"]
[Tue May 05 00:56:35.253629 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:18005] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "afjPw09o3_LordU0wW651wAAAI8"]
[Tue May 05 00:56:35.667170 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:18034] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "afjPw09o3_LordU0wW652AAAAIs"]
[Tue May 05 00:56:36.090591 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18030] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-2019.php"] [unique_id "afjPxE9o3_LordU0wW652QAAAIQ"]
[Tue May 05 00:56:36.508407 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:18027] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "afjPxE9o3_LordU0wW653AAAAJg"]
[Tue May 05 00:56:36.925863 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:18031] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "afjPxE9o3_LordU0wW653gAAAI0"]
[Tue May 05 00:56:37.350932 2026] [:error] [pid 61044:tid 61114] [client 4.204.197.96:17989] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "afjPxUw8w2zZZXI6H1vDrQAAAAw"]
[Tue May 05 00:56:37.768626 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:18186] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "afjPxU9o3_LordU0wW654gAAAII"]
[Tue May 05 00:56:38.188763 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:18105] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "afjPxnmjpb9EYq6AqhKoJgAAAQo"]
[Tue May 05 00:56:38.600398 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:18098] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "afjPxk9o3_LordU0wW655QAAAIc"]
[Tue May 05 00:56:39.031825 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:18035] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "afjPx3mjpb9EYq6AqhKoJwAAAQY"]
[Tue May 05 00:56:39.444895 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:18160] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-acc.php"] [unique_id "afjPx09o3_LordU0wW656AAAAI4"]
[Tue May 05 00:56:39.858406 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:18097] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "afjPx-8QXWVLiwIGVpe0MgAAAU4"]
[Tue May 05 00:56:40.284688 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:18006] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "afjPyE9o3_LordU0wW657wAAAII"]
[Tue May 05 00:56:40.696724 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:18108] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "afjPyHmjpb9EYq6AqhKoKAAAARI"]
[Tue May 05 00:56:41.126217 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:18032] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-trackback.php"] [unique_id "afjPyXmjpb9EYq6AqhKoKgAAAQA"]
[Tue May 05 00:56:41.550749 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:18145] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "afjPyZ8-LwtfURjiAbD3ZgAAAEs"]
[Tue May 05 00:56:41.969200 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:18069] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "afjPyZ8-LwtfURjiAbD3ZwAAAFI"]
[Tue May 05 00:56:42.381855 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:18000] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "afjPynmjpb9EYq6AqhKoLgAAAQk"]
[Tue May 05 00:56:42.794133 2026] [:error] [pid 61042:tid 61063] [client 4.204.197.96:17926] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-xx.php"] [unique_id "afjPyknAPPS1fjubA9R66wAAANE"]
[Tue May 05 00:56:43.212799 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:18060] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "afjPy0w8w2zZZXI6H1vDsQAAAAM"]
[Tue May 05 00:56:43.627929 2026] [:error] [pid 61044:tid 61119] [client 4.204.197.96:18015] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "afjPy0w8w2zZZXI6H1vDswAAABE"]
[Tue May 05 00:56:44.038008 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:18063] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "afjPzHmjpb9EYq6AqhKoNQAAARY"]
[Tue May 05 00:56:44.454817 2026] [:error] [pid 61042:tid 61070] [client 4.204.197.96:18000] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/555.php"] [unique_id "afjPzEnAPPS1fjubA9R68gAAANg"]
[Tue May 05 00:56:44.867010 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:18002] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "afjPzEw8w2zZZXI6H1vDtQAAAAY"]
[Tue May 05 00:56:45.282791 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:18012] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "afjPzXmjpb9EYq6AqhKoPgAAAQ0"]
[Tue May 05 00:56:45.699619 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:18044] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "afjPzU9o3_LordU0wW65-gAAAIQ"]
[Tue May 05 00:56:46.111641 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:18010] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-conflg.php"] [unique_id "afjPzp8-LwtfURjiAbD3agAAAE8"]
[Tue May 05 00:56:46.540134 2026] [:error] [pid 61150:tid 61166] [client 4.204.197.96:18047] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjPzu8QXWVLiwIGVpe0NwAAAU0"]
[Tue May 05 00:56:46.962558 2026] [:error] [pid 61044:tid 61120] [client 4.204.197.96:18172] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjPzkw8w2zZZXI6H1vDuwAAABI"]
[Tue May 05 00:56:47.387577 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:17922] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjPz3mjpb9EYq6AqhKoRgAAAQ4"]
[Tue May 05 00:56:47.798846 2026] [:error] [pid 32471:tid 32489] [client 4.204.197.96:18181] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-Blogs.php"] [unique_id "afjPz3mjpb9EYq6AqhKoSAAAAQ8"]
[Tue May 05 00:56:48.221242 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:18169] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "afjP0E9o3_LordU0wW65_gAAAIw"]
[Tue May 05 00:56:48.641263 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:17977] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "afjP0Hmjpb9EYq6AqhKoSwAAARI"]
[Tue May 05 00:56:49.056718 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:18020] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "afjP0Z8-LwtfURjiAbD3cAAAAFY"]
[Tue May 05 00:56:49.475629 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:17969] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp_ok.php"] [unique_id "afjP0Xmjpb9EYq6AqhKoTwAAAQQ"]
[Tue May 05 00:56:49.892279 2026] [:error] [pid 61044:tid 61103] [client 4.204.197.96:18022] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjP0Uw8w2zZZXI6H1vDwAAAAAE"]
[Tue May 05 00:56:50.331270 2026] [:error] [pid 61042:tid 61066] [client 4.204.197.96:18079] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjP0knAPPS1fjubA9R6-QAAANQ"]
[Tue May 05 00:56:50.752941 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:17920] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjP0kw8w2zZZXI6H1vDwwAAAAY"]
[Tue May 05 00:56:51.172453 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:17950] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjP058-LwtfURjiAbD3dAAAAEY"]
[Tue May 05 00:56:51.595785 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:17951] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file88.php"] [unique_id "afjP0-8QXWVLiwIGVpe0PQAAAVc"]
[Tue May 05 00:56:52.024527 2026] [proxy_fcgi:error] [pid 61043:tid 61097] [client 4.204.197.96:17934] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:56:52.238917 2026] [proxy_fcgi:error] [pid 61043:tid 61081] [client 4.204.197.96:17934] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:56:52.450914 2026] [proxy_fcgi:error] [pid 61043:tid 61086] [client 4.204.197.96:17934] AH01071: Got error 'Primary script unknown'
[Tue May 05 00:56:52.663754 2026] [proxy_fcgi:error] [pid 61043:tid 61094] [client 4.204.197.96:17934] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:04.039524 2026] [:error] [pid 61043:tid 61081] [client 89.163.146.197:62179] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/txets.php"] [unique_id "afjepJ8-LwtfURjiAbAFkAAAAEY"], referer: www.google.com
[Tue May 05 22:15:54.867189 2026] [:error] [pid 25743:tid 25758] [client 194.62.107.187:21667] [client 194.62.107.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "afn7mm-PCMRhF5DdUnMChwAAAAs"]
[Wed May 06 19:26:14.908373 2026] [:error] [pid 9789:tid 9799] [client 51.102.182.165:52142] [client 51.102.182.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "afslVj_YStPJSCHPkUWDqQAAAEg"]
[Wed May 06 23:40:27.482005 2026] [:error] [pid 9664:tid 9764] [client 34.50.163.111:53034] [client 34.50.163.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aftg6wH4OZbrg1SjsBNfAQAAAII"]
[Thu May 07 08:11:56.352049 2026] [:error] [pid 4539:tid 4553] [client 173.239.214.10:40079] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afvYzIPEZE1565sDGnyB3QAAAQw"]
[Thu May 07 12:48:26.625521 2026] [:error] [pid 1143:tid 1146] [client 195.178.110.241:58778] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "afwZmpb7qeI8X5VYRr6ECQAAAQE"]
[Thu May 07 15:48:57.928446 2026] [:error] [pid 15631:tid 15692] [client 18.191.202.63:62040] [client 18.191.202.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.191.202.63, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "afxD6XvP1GkPUuuLfqUSTwAAAMU"]
[Thu May 07 15:48:57.940196 2026] [proxy_fcgi:error] [pid 15631:tid 15692] [client 18.191.202.63:62040] AH01071: Got error 'Primary script unknown'
[Thu May 07 15:51:33.784355 2026] [:error] [pid 28098:tid 28120] [client 34.132.41.18:55958] [client 34.132.41.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.41.18, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "afxEhcvhwfljlt8trSqVxAAAAFQ"]
[Thu May 07 15:51:33.795513 2026] [proxy_fcgi:error] [pid 28098:tid 28120] [client 34.132.41.18:55958] AH01071: Got error 'Primary script unknown'
[Thu May 07 15:51:36.346791 2026] [:error] [pid 28098:tid 28105] [client 34.132.41.18:55958] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxEiMvhwfljlt8trSqV1gAAAEU"]
[Thu May 07 15:51:37.318457 2026] [:error] [pid 15715:tid 15740] [client 34.132.41.18:58428] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxEiSY4dZsLOttMkcdmjgAAARQ"]
[Thu May 07 15:51:38.577771 2026] [:error] [pid 15629:tid 15652] [client 34.132.41.18:64649] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxEivrIJCALdUrO43lcMgAAABM"]
[Thu May 07 15:51:39.733846 2026] [:error] [pid 28098:tid 28123] [client 34.132.41.18:55352] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxEi8vhwfljlt8trSqWAwAAAFc"]
[Thu May 07 15:51:40.252961 2026] [:error] [pid 28098:tid 28114] [client 34.132.41.18:62422] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxEjMvhwfljlt8trSqWBQAAAE4"]
[Thu May 07 15:51:40.986049 2026] [:error] [pid 28098:tid 28121] [client 34.132.41.18:60265] [client 34.132.41.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxEjMvhwfljlt8trSqWBwAAAFU"]
[Thu May 07 18:05:25.601332 2026] [:error] [pid 28098:tid 28110] [client 140.245.50.113:58792] [client 140.245.50.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "afxj5cvhwfljlt8trSrEzwAAAEo"]
[Thu May 07 21:41:30.246850 2026] [:error] [pid 15631:tid 15691] [client 5.230.54.27:51488] [client 5.230.54.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "afyWinvP1GkPUuuLfqVOQAAAAMQ"]
[Fri May 08 09:24:35.584898 2026] [:error] [pid 61356:tid 61399] [client 34.176.127.220:54026] [client 34.176.127.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "af07U4x3vpB8oWhUq2O91AAAAcs"]
[Fri May 08 09:32:45.821109 2026] [:error] [pid 61356:tid 61403] [client 34.17.23.42:42158] [client 34.17.23.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "af09PYx3vpB8oWhUq2PARQAAAc8"]
[Fri May 08 15:16:30.136411 2026] [:error] [pid 51009:tid 51086] [client 34.136.120.138:55781] [client 34.136.120.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.120.138, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "af2NzuB0GbUWhxgzX9X2ewAAAIo"]
[Fri May 08 15:16:30.145973 2026] [proxy_fcgi:error] [pid 51009:tid 51086] [client 34.136.120.138:55781] AH01071: Got error 'Primary script unknown'
[Fri May 08 15:16:33.031573 2026] [:error] [pid 51009:tid 51098] [client 34.136.120.138:55781] [client 34.136.120.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af2N0eB0GbUWhxgzX9X2igAAAJY"]
[Fri May 08 15:16:35.096534 2026] [:error] [pid 61355:tid 61378] [client 34.136.120.138:54198] [client 34.136.120.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af2N0_khJTi30CBXmMlcAQAAAZE"]
[Fri May 08 15:16:35.534579 2026] [:error] [pid 61355:tid 61380] [client 34.136.120.138:59864] [client 34.136.120.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af2N0_khJTi30CBXmMlcAgAAAZM"]
[Fri May 08 15:28:56.669984 2026] [:error] [pid 51009:tid 51083] [client 34.122.144.100:54048] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuOB0GbUWhxgzX9X4kgAAAIc"]
[Fri May 08 16:40:45.103516 2026] [proxy_fcgi:error] [pid 61355:tid 61385] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:45.296672 2026] [proxy_fcgi:error] [pid 61355:tid 61382] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:45.499209 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:45.772567 2026] [proxy_fcgi:error] [pid 61355:tid 61380] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:45.965565 2026] [proxy_fcgi:error] [pid 61355:tid 61376] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:46.158115 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:46.363378 2026] [proxy_fcgi:error] [pid 61355:tid 61364] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:46.785928 2026] [proxy_fcgi:error] [pid 61355:tid 61377] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:46.977011 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:47.544309 2026] [proxy_fcgi:error] [pid 61355:tid 61378] [client 20.12.217.215:37852] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:40:47.739173 2026] [:error] [pid 61355:tid 61366] [client 20.12.217.215:37852] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "af2hj_khJTi30CBXmMlqzAAAAYU"]
[Fri May 08 16:40:50.533584 2026] [:error] [pid 61355:tid 61381] [client 20.12.217.215:5824] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "af2hkvkhJTi30CBXmMlqzQAAAZQ"]
[Fri May 08 16:40:53.985636 2026] [:error] [pid 61355:tid 61375] [client 20.12.217.215:35882] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "af2hlfkhJTi30CBXmMlq0gAAAY4"]
[Fri May 08 16:40:55.608598 2026] [:error] [pid 61355:tid 61374] [client 20.12.217.215:48758] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "af2hl_khJTi30CBXmMlq1gAAAY0"]
[Fri May 08 16:40:59.541618 2026] [:error] [pid 61356:tid 61398] [client 20.12.217.215:43180] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "af2hm4x3vpB8oWhUq2NHcgAAAco"]
[Fri May 08 16:41:00.869512 2026] [:error] [pid 61317:tid 61343] [client 20.12.217.215:40744] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "af2hnM-fFk_CedOCOYucvwAAAVc"]
[Fri May 08 16:41:02.555116 2026] [:error] [pid 61356:tid 61398] [client 20.12.217.215:39514] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "af2hnox3vpB8oWhUq2NHewAAAco"]
[Fri May 08 16:41:03.473888 2026] [:error] [pid 61356:tid 61399] [client 20.12.217.215:48641] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "af2hn4x3vpB8oWhUq2NHfAAAAcs"]
[Fri May 08 16:41:07.824637 2026] [:error] [pid 51008:tid 51063] [client 20.12.217.215:48366] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "af2ho3B58C2Y1tgLtuJ7DgAAAE4"]
[Fri May 08 16:41:10.907452 2026] [:error] [pid 61356:tid 61401] [client 20.12.217.215:34381] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "af2hpox3vpB8oWhUq2NHfwAAAc0"]
[Fri May 08 16:41:13.708128 2026] [:error] [pid 61355:tid 61379] [client 20.12.217.215:5280] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "af2hqfkhJTi30CBXmMlq5QAAAZI"]
[Fri May 08 16:41:14.386650 2026] [:error] [pid 51007:tid 51029] [client 20.12.217.215:29595] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "af2hqlMagSGstWKyzzXNowAAAAc"]
[Fri May 08 16:41:15.442477 2026] [:error] [pid 61355:tid 61384] [client 20.12.217.215:40672] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "af2hq_khJTi30CBXmMlq6gAAAZc"]
[Fri May 08 16:41:19.544224 2026] [:error] [pid 34318:tid 34326] [client 20.12.217.215:38127] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "af2hr8r3guirgJiKhzDAuAAAAQY"]
[Fri May 08 16:41:22.642187 2026] [:error] [pid 61356:tid 61404] [client 20.12.217.215:29678] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "af2hsox3vpB8oWhUq2NHkAAAAdA"]
[Fri May 08 16:41:28.490895 2026] [:error] [pid 61356:tid 61391] [client 20.12.217.215:42695] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "af2huIx3vpB8oWhUq2NHnAAAAcM"]
[Fri May 08 16:41:39.478737 2026] [:error] [pid 51008:tid 51063] [client 20.12.217.215:34564] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "af2hw3B58C2Y1tgLtuJ7IAAAAE4"]
[Fri May 08 16:41:41.413716 2026] [:error] [pid 34318:tid 34341] [client 20.12.217.215:36710] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "af2hxcr3guirgJiKhzDAxwAAARU"]
[Fri May 08 16:41:42.520117 2026] [:error] [pid 51009:tid 51096] [client 20.12.217.215:33571] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "af2hxuB0GbUWhxgzX9UC5AAAAJQ"]
[Fri May 08 16:41:44.464605 2026] [:error] [pid 51007:tid 51036] [client 20.12.217.215:40241] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "af2hyFMagSGstWKyzzXNsAAAAA4"]
[Fri May 08 16:41:45.455963 2026] [:error] [pid 61356:tid 61402] [client 20.12.217.215:28558] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "af2hyYx3vpB8oWhUq2NHvQAAAc4"]
[Fri May 08 16:41:48.726488 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:48.934701 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:49.126958 2026] [proxy_fcgi:error] [pid 61356:tid 61393] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:49.318352 2026] [proxy_fcgi:error] [pid 61356:tid 61399] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:49.517360 2026] [proxy_fcgi:error] [pid 61356:tid 61390] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:49.707040 2026] [proxy_fcgi:error] [pid 61356:tid 61400] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:50.024262 2026] [proxy_fcgi:error] [pid 61356:tid 61406] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:50.279261 2026] [proxy_fcgi:error] [pid 61356:tid 61395] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:50.470288 2026] [proxy_fcgi:error] [pid 61356:tid 61397] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:50.672536 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:50.899761 2026] [proxy_fcgi:error] [pid 61356:tid 61393] [client 20.12.217.215:36693] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:41:51.087410 2026] [:error] [pid 61356:tid 61401] [client 20.12.217.215:36693] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "af2hz4x3vpB8oWhUq2NH1AAAAc0"]
[Fri May 08 16:41:52.295065 2026] [:error] [pid 51009:tid 51079] [client 20.12.217.215:39562] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "af2h0OB0GbUWhxgzX9UC7gAAAIM"]
[Fri May 08 16:41:53.417854 2026] [:error] [pid 61356:tid 61408] [client 20.12.217.215:40203] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "af2h0Yx3vpB8oWhUq2NH2QAAAdQ"]
[Fri May 08 16:41:55.168810 2026] [:error] [pid 61355:tid 61383] [client 20.12.217.215:39020] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "af2h0_khJTi30CBXmMlrdwAAAZY"]
[Fri May 08 16:41:55.962301 2026] [:error] [pid 61355:tid 61363] [client 20.12.217.215:39585] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "af2h0_khJTi30CBXmMlreQAAAYI"]
[Fri May 08 16:41:58.849030 2026] [:error] [pid 61317:tid 61330] [client 20.12.217.215:40202] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "af2h1s-fFk_CedOCOYudFQAAAUo"]
[Fri May 08 16:42:00.209863 2026] [:error] [pid 61356:tid 61402] [client 20.12.217.215:28573] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "af2h2Ix3vpB8oWhUq2NH5AAAAc4"]
[Fri May 08 16:42:01.817429 2026] [:error] [pid 61356:tid 61412] [client 20.12.217.215:39506] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "af2h2Yx3vpB8oWhUq2NH5QAAAdg"]
[Fri May 08 16:42:03.811580 2026] [:error] [pid 61355:tid 61365] [client 20.12.217.215:39510] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "af2h2_khJTi30CBXmMlriQAAAYQ"]
[Fri May 08 16:42:04.632810 2026] [:error] [pid 51008:tid 51063] [client 20.12.217.215:6129] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "af2h3HB58C2Y1tgLtuJ7JwAAAE4"]
[Fri May 08 16:42:06.357736 2026] [:error] [pid 61356:tid 61405] [client 20.12.217.215:6119] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "af2h3ox3vpB8oWhUq2NH8QAAAdE"]
[Fri May 08 16:42:07.782604 2026] [:error] [pid 61356:tid 61392] [client 20.12.217.215:63948] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "af2h34x3vpB8oWhUq2NH9QAAAcQ"]
[Fri May 08 16:42:09.599145 2026] [:error] [pid 61356:tid 61408] [client 20.12.217.215:48642] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "af2h4Yx3vpB8oWhUq2NH_wAAAdQ"]
[Fri May 08 16:42:16.836177 2026] [:error] [pid 61355:tid 61381] [client 20.12.217.215:6378] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "af2h6PkhJTi30CBXmMlriwAAAZQ"]
[Fri May 08 16:42:18.415853 2026] [:error] [pid 61356:tid 61401] [client 20.12.217.215:37781] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "af2h6ox3vpB8oWhUq2NIGgAAAc0"]
[Fri May 08 16:42:20.399533 2026] [:error] [pid 61355:tid 61374] [client 20.12.217.215:30819] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "af2h7PkhJTi30CBXmMlrjwAAAY0"]
[Fri May 08 16:42:23.195444 2026] [:error] [pid 61355:tid 61376] [client 20.12.217.215:49165] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fun.php"] [unique_id "af2h7_khJTi30CBXmMlrlAAAAY8"]
[Fri May 08 16:42:39.134319 2026] [:error] [pid 51009:tid 51096] [client 20.12.217.215:30818] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af2h_-B0GbUWhxgzX9UDHQAAAJQ"]
[Fri May 08 16:42:40.819009 2026] [:error] [pid 34318:tid 34335] [client 20.12.217.215:37568] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af2iAMr3guirgJiKhzDA4AAAAQ8"]
[Fri May 08 16:42:46.931904 2026] [:error] [pid 61356:tid 61390] [client 20.12.217.215:37597] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af2iBox3vpB8oWhUq2NIMQAAAcI"]
[Fri May 08 16:42:48.235112 2026] [:error] [pid 61355:tid 61370] [client 20.12.217.215:5602] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af2iCPkhJTi30CBXmMlrvQAAAYk"]
[Fri May 08 16:42:51.343143 2026] [proxy_fcgi:error] [pid 61356:tid 61392] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:51.722751 2026] [proxy_fcgi:error] [pid 61356:tid 61403] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:51.913131 2026] [proxy_fcgi:error] [pid 61356:tid 61388] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:52.105596 2026] [proxy_fcgi:error] [pid 61356:tid 61405] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:52.294757 2026] [proxy_fcgi:error] [pid 61356:tid 61400] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:52.485225 2026] [proxy_fcgi:error] [pid 61356:tid 61401] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:53.236682 2026] [proxy_fcgi:error] [pid 61356:tid 61393] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:53.427742 2026] [proxy_fcgi:error] [pid 61356:tid 61398] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:53.633172 2026] [proxy_fcgi:error] [pid 61356:tid 61411] [client 20.12.217.215:64204] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:42:53.828475 2026] [:error] [pid 61356:tid 61394] [client 20.12.217.215:64204] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "af2iDYx3vpB8oWhUq2NIRAAAAcY"]
[Fri May 08 16:42:56.634379 2026] [:error] [pid 51113:tid 51130] [client 20.12.217.215:52450] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "af2iEEQfs7sWtqkpQIdh1wAAAM8"]
[Fri May 08 16:43:00.842546 2026] [:error] [pid 61356:tid 61400] [client 20.12.217.215:10467] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "af2iFIx3vpB8oWhUq2NIVAAAAcw"]
[Fri May 08 16:43:02.947479 2026] [:error] [pid 61356:tid 61403] [client 20.12.217.215:48419] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "af2iFox3vpB8oWhUq2NIXAAAAc8"]
[Fri May 08 16:43:10.855038 2026] [:error] [pid 61356:tid 61400] [client 20.12.217.215:43184] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "af2iHox3vpB8oWhUq2NIcAAAAcw"]
[Fri May 08 16:43:13.655366 2026] [:error] [pid 34318:tid 34332] [client 20.12.217.215:36999] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "af2iIcr3guirgJiKhzDA6QAAAQw"]
[Fri May 08 16:43:15.267649 2026] [:error] [pid 34318:tid 34341] [client 20.12.217.215:48438] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "af2iI8r3guirgJiKhzDA6gAAARU"]
[Fri May 08 16:43:17.524951 2026] [:error] [pid 61356:tid 61392] [client 20.12.217.215:43160] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "af2iJYx3vpB8oWhUq2NIgQAAAcQ"]
[Fri May 08 16:43:20.177604 2026] [:error] [pid 51008:tid 51049] [client 20.12.217.215:64318] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "af2iKHB58C2Y1tgLtuJ7WwAAAEA"]
[Fri May 08 16:43:21.456506 2026] [:error] [pid 61356:tid 61393] [client 20.12.217.215:34323] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "af2iKYx3vpB8oWhUq2NIiAAAAcU"]
[Fri May 08 16:43:23.941475 2026] [:error] [pid 61356:tid 61409] [client 20.12.217.215:39341] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "af2iK4x3vpB8oWhUq2NIjAAAAdU"]
[Fri May 08 16:43:25.618765 2026] [:error] [pid 61355:tid 61381] [client 20.12.217.215:33153] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "af2iLfkhJTi30CBXmMlr2gAAAZQ"]
[Fri May 08 16:43:26.425986 2026] [:error] [pid 61356:tid 61401] [client 20.12.217.215:34349] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "af2iLox3vpB8oWhUq2NIjwAAAc0"]
[Fri May 08 16:43:28.904891 2026] [:error] [pid 51008:tid 51058] [client 20.12.217.215:39088] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "af2iMHB58C2Y1tgLtuJ7XQAAAEk"]
[Fri May 08 16:43:30.625579 2026] [:error] [pid 34318:tid 34328] [client 20.12.217.215:5763] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "af2iMsr3guirgJiKhzDA7QAAAQg"]
[Fri May 08 16:43:31.267979 2026] [:error] [pid 61356:tid 61395] [client 20.12.217.215:5432] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "af2iM4x3vpB8oWhUq2NImgAAAcc"]
[Fri May 08 16:43:38.236749 2026] [:error] [pid 61356:tid 61389] [client 20.12.217.215:33163] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "af2iOox3vpB8oWhUq2NIrwAAAcE"]
[Fri May 08 16:43:39.885171 2026] [:error] [pid 61356:tid 61400] [client 20.12.217.215:34630] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "af2iO4x3vpB8oWhUq2NIsQAAAcw"]
[Fri May 08 16:43:41.238058 2026] [:error] [pid 51009:tid 51081] [client 20.12.217.215:5906] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "af2iPeB0GbUWhxgzX9UDPgAAAIU"]
[Fri May 08 16:43:43.027496 2026] [:error] [pid 51008:tid 51067] [client 20.12.217.215:28633] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "af2iP3B58C2Y1tgLtuJ7cwAAAFI"]
[Fri May 08 16:43:44.685194 2026] [:error] [pid 51008:tid 51064] [client 20.12.217.215:28663] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "af2iQHB58C2Y1tgLtuJ7dAAAAE8"]
[Fri May 08 16:43:51.817730 2026] [:error] [pid 51009:tid 51093] [client 20.12.217.215:43094] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "af2iR-B0GbUWhxgzX9UDWAAAAJE"]
[Fri May 08 16:43:54.396594 2026] [proxy_fcgi:error] [pid 51009:tid 51089] [client 20.12.217.215:5428] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:43:54.603449 2026] [proxy_fcgi:error] [pid 51009:tid 51094] [client 20.12.217.215:5428] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:43:54.792922 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 20.12.217.215:5428] AH01071: Got error 'Primary script unknown'
[Fri May 08 16:43:54.981930 2026] [proxy_fcgi:error] [pid 51009:tid 51087] [client 20.12.217.215:5428] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:24.138456 2026] [:error] [pid 61356:tid 61388] [client 3.112.233.69:36194] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "af4XmIx3vpB8oWhUq2MXjAAAAcA"]
[Sat May 09 01:04:24.842896 2026] [:error] [pid 51113:tid 51122] [client 3.112.233.69:60676] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4XmEQfs7sWtqkpQIeW0wAAAMc"]
[Sat May 09 01:04:25.411087 2026] [proxy_fcgi:error] [pid 51009:tid 51081] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:25.554158 2026] [proxy_fcgi:error] [pid 51009:tid 51096] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:25.697520 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:25.842724 2026] [proxy_fcgi:error] [pid 51009:tid 51092] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:25.985867 2026] [proxy_fcgi:error] [pid 51009:tid 51088] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:26.130893 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:26.274212 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:26.560161 2026] [proxy_fcgi:error] [pid 51009:tid 51097] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:26.703581 2026] [proxy_fcgi:error] [pid 51009:tid 51090] [client 3.112.233.69:60692] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:04:26.987348 2026] [:error] [pid 51009:tid 51089] [client 3.112.233.69:60692] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4XmuB0GbUWhxgzX9WDyAAAAI0"]
[Sat May 09 01:04:27.553098 2026] [:error] [pid 51008:tid 51063] [client 3.112.233.69:60718] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4Xm3B58C2Y1tgLtuLQsgAAAE4"]
[Sat May 09 01:04:28.132466 2026] [:error] [pid 51009:tid 51096] [client 3.112.233.69:60730] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4XnOB0GbUWhxgzX9WDzAAAAJQ"]
[Sat May 09 01:04:28.700616 2026] [:error] [pid 61356:tid 61389] [client 3.112.233.69:60738] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4XnIx3vpB8oWhUq2MXlwAAAcE"]
[Sat May 09 01:04:29.262634 2026] [:error] [pid 61355:tid 61377] [client 3.112.233.69:60742] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4XnfkhJTi30CBXmMkYMgAAAZA"]
[Sat May 09 01:04:29.821344 2026] [:error] [pid 61355:tid 61361] [client 3.112.233.69:60752] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/info"] [unique_id "af4XnfkhJTi30CBXmMkYNQAAAYA"]
[Sat May 09 01:04:30.379458 2026] [:error] [pid 61317:tid 61342] [client 3.112.233.69:60768] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/php-info.php"] [unique_id "af4Xns-fFk_CedOCOYsA4AAAAVY"]
[Sat May 09 01:04:30.935171 2026] [:error] [pid 61317:tid 61324] [client 3.112.233.69:60782] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "af4Xns-fFk_CedOCOYsA4QAAAUQ"]
[Sat May 09 01:04:31.492644 2026] [:error] [pid 61317:tid 61326] [client 3.112.233.69:60792] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/_phpinfo.php"] [unique_id "af4Xn8-fFk_CedOCOYsA5AAAAUY"]
[Sat May 09 01:04:32.060932 2026] [:error] [pid 34318:tid 34322] [client 3.112.233.69:60802] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4XoMr3guirgJiKhzD9zAAAAQI"]
[Sat May 09 01:04:32.620371 2026] [:error] [pid 61356:tid 61391] [client 3.112.233.69:60814] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/server-info.php"] [unique_id "af4XoIx3vpB8oWhUq2MXpgAAAcM"]
[Sat May 09 01:04:33.178052 2026] [:error] [pid 51009:tid 51098] [client 3.112.233.69:60818] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/server-status.php"] [unique_id "af4XoeB0GbUWhxgzX9WD0gAAAJY"]
[Sat May 09 01:04:33.737564 2026] [:error] [pid 61355:tid 61383] [client 3.112.233.69:60828] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4XofkhJTi30CBXmMkYPwAAAZY"]
[Sat May 09 01:04:34.294592 2026] [:error] [pid 51009:tid 51080] [client 3.112.233.69:60840] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/_environment"] [unique_id "af4XouB0GbUWhxgzX9WD1gAAAIQ"]
[Sat May 09 01:04:34.855819 2026] [:error] [pid 61356:tid 61392] [client 3.112.233.69:38660] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4Xoox3vpB8oWhUq2MXqQAAAcQ"]
[Sat May 09 01:04:35.415611 2026] [:error] [pid 51009:tid 51093] [client 3.112.233.69:38690] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4Xo-B0GbUWhxgzX9WD2gAAAJE"]
[Sat May 09 01:04:35.970688 2026] [:error] [pid 34318:tid 34328] [client 3.112.233.69:38712] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4Xo8r3guirgJiKhzD90gAAAQg"]
[Sat May 09 01:04:36.524322 2026] [:error] [pid 61356:tid 61399] [client 3.112.233.69:38742] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4XpIx3vpB8oWhUq2MXqwAAAcs"]
[Sat May 09 01:04:37.079991 2026] [:error] [pid 51113:tid 51120] [client 3.112.233.69:38760] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4XpUQfs7sWtqkpQIeW2AAAAMU"]
[Sat May 09 01:04:37.635026 2026] [:error] [pid 51113:tid 51118] [client 3.112.233.69:38786] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4XpUQfs7sWtqkpQIeW2wAAAMM"]
[Sat May 09 01:04:38.189997 2026] [:error] [pid 51009:tid 51076] [client 3.112.233.69:38796] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4XpuB0GbUWhxgzX9WD2wAAAIA"]
[Sat May 09 01:04:38.744859 2026] [:error] [pid 61355:tid 61373] [client 3.112.233.69:38814] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4XpvkhJTi30CBXmMkYSAAAAYw"]
[Sat May 09 01:04:39.304014 2026] [:error] [pid 34318:tid 34337] [client 3.112.233.69:38834] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/phpinfo.php~"] [unique_id "af4Xp8r3guirgJiKhzD92AAAARE"]
[Sat May 09 01:04:39.861456 2026] [:error] [pid 61356:tid 61389] [client 3.112.233.69:38848] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/info.php.bak"] [unique_id "af4Xp4x3vpB8oWhUq2MXsAAAAcE"]
[Sat May 09 01:04:40.418662 2026] [:error] [pid 51009:tid 51083] [client 3.112.233.69:38866] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4XqOB0GbUWhxgzX9WD3wAAAIc"]
[Sat May 09 01:04:40.973777 2026] [:error] [pid 51009:tid 51080] [client 3.112.233.69:38884] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4XqOB0GbUWhxgzX9WD4AAAAIQ"]
[Sat May 09 01:04:41.531915 2026] [:error] [pid 61356:tid 61394] [client 3.112.233.69:38898] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4XqYx3vpB8oWhUq2MXtgAAAcY"]
[Sat May 09 01:04:42.093914 2026] [:error] [pid 61356:tid 61409] [client 3.112.233.69:38914] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4Xqox3vpB8oWhUq2MXuQAAAdU"]
[Sat May 09 01:04:42.649905 2026] [:error] [pid 61356:tid 61405] [client 3.112.233.69:38928] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4Xqox3vpB8oWhUq2MXuwAAAdE"]
[Sat May 09 01:04:43.207296 2026] [:error] [pid 61355:tid 61384] [client 3.112.233.69:38938] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4Xq_khJTi30CBXmMkYTwAAAZc"]
[Sat May 09 01:04:43.779921 2026] [:error] [pid 61317:tid 61338] [client 3.112.233.69:38956] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4Xq8-fFk_CedOCOYsA9AAAAVI"]
[Sat May 09 01:04:44.338474 2026] [:error] [pid 61356:tid 61396] [client 3.112.233.69:38976] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4XrIx3vpB8oWhUq2MXwAAAAcg"]
[Sat May 09 01:04:44.900412 2026] [:error] [pid 51009:tid 51086] [client 3.112.233.69:33720] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4XrOB0GbUWhxgzX9WD5wAAAIo"]
[Sat May 09 01:04:45.463629 2026] [:error] [pid 51009:tid 51099] [client 3.112.233.69:33740] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4XreB0GbUWhxgzX9WD6AAAAJc"]
[Sat May 09 01:04:46.030770 2026] [:error] [pid 61355:tid 61383] [client 3.112.233.69:33748] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4XrvkhJTi30CBXmMkYVwAAAZY"]
[Sat May 09 01:04:46.587717 2026] [:error] [pid 61355:tid 61366] [client 3.112.233.69:33762] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4XrvkhJTi30CBXmMkYYAAAAYU"]
[Sat May 09 01:04:47.146587 2026] [:error] [pid 34318:tid 34326] [client 3.112.233.69:33782] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4Xr8r3guirgJiKhzD93AAAAQY"]
[Sat May 09 01:04:47.703303 2026] [:error] [pid 51008:tid 51069] [client 3.112.233.69:33810] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4Xr3B58C2Y1tgLtuLQugAAAFQ"]
[Sat May 09 01:04:48.264760 2026] [:error] [pid 61355:tid 61383] [client 3.112.233.69:33822] [client 3.112.233.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4XsPkhJTi30CBXmMkYawAAAZY"]
[Sat May 09 01:45:55.041160 2026] [:error] [pid 61317:tid 61331] [client 3.8.151.177:41032] [client 3.8.151.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "af4hU8-fFk_CedOCOYsQVQAAAUs"]
[Sat May 09 01:45:56.267214 2026] [:error] [pid 61356:tid 61397] [client 3.8.151.177:41050] [client 3.8.151.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4hVIx3vpB8oWhUq2MvKgAAAck"]
[Sat May 09 01:45:57.261283 2026] [proxy_fcgi:error] [pid 61317:tid 61333] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:57.509382 2026] [proxy_fcgi:error] [pid 61317:tid 61334] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:57.759902 2026] [proxy_fcgi:error] [pid 61317:tid 61338] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:58.007664 2026] [proxy_fcgi:error] [pid 61317:tid 61344] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:58.258862 2026] [proxy_fcgi:error] [pid 61317:tid 61340] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:58.509501 2026] [proxy_fcgi:error] [pid 61317:tid 61337] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:58.757965 2026] [proxy_fcgi:error] [pid 61317:tid 61343] [client 3.8.151.177:41066] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:45:59.251127 2026] [:error] [pid 61317:tid 61339] [client 3.8.151.177:41066] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "af4hV8-fFk_CedOCOYsQbQAAAVM"]
[Sat May 09 01:46:00.234636 2026] [:error] [pid 61356:tid 61408] [client 3.8.151.177:55316] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/debug.php"] [unique_id "af4hWIx3vpB8oWhUq2MvNgAAAdQ"]
[Sat May 09 01:46:01.210684 2026] [:error] [pid 51009:tid 51089] [client 3.8.151.177:55336] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4hWeB0GbUWhxgzX9WY7QAAAI0"]
[Sat May 09 01:46:02.195955 2026] [:error] [pid 51008:tid 51068] [client 3.8.151.177:55350] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4hWnB58C2Y1tgLtuLelwAAAFM"]
[Sat May 09 01:46:03.180947 2026] [:error] [pid 51009:tid 51078] [client 3.8.151.177:55358] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4hW-B0GbUWhxgzX9WY-AAAAII"]
[Sat May 09 01:46:04.163555 2026] [:error] [pid 34318:tid 34340] [client 3.8.151.177:55368] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4hXMr3guirgJiKhzAGngAAARQ"]
[Sat May 09 01:46:05.144686 2026] [:error] [pid 34318:tid 34325] [client 3.8.151.177:55386] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4hXcr3guirgJiKhzAGoAAAAQU"]
[Sat May 09 01:46:06.115508 2026] [:error] [pid 51113:tid 51132] [client 3.8.151.177:55396] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4hXkQfs7sWtqkpQIec2gAAANE"]
[Sat May 09 01:46:07.090136 2026] [:error] [pid 61356:tid 61405] [client 3.8.151.177:55406] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info"] [unique_id "af4hX4x3vpB8oWhUq2MvSQAAAdE"]
[Sat May 09 01:46:08.070612 2026] [:error] [pid 51009:tid 51088] [client 3.8.151.177:56500] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/php-info.php"] [unique_id "af4hYOB0GbUWhxgzX9WZAwAAAIw"]
[Sat May 09 01:46:09.046104 2026] [:error] [pid 61356:tid 61397] [client 3.8.151.177:56526] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpversion.php"] [unique_id "af4hYYx3vpB8oWhUq2MvVwAAAck"]
[Sat May 09 01:46:10.021129 2026] [:error] [pid 61356:tid 61408] [client 3.8.151.177:56544] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/_phpinfo.php"] [unique_id "af4hYox3vpB8oWhUq2MvYgAAAdQ"]
[Sat May 09 01:46:11.006680 2026] [:error] [pid 61356:tid 61393] [client 3.8.151.177:56566] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4hY4x3vpB8oWhUq2MvbQAAAcU"]
[Sat May 09 01:46:11.988527 2026] [:error] [pid 61355:tid 61366] [client 3.8.151.177:56594] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server-info.php"] [unique_id "af4hY_khJTi30CBXmMk-KAAAAYU"]
[Sat May 09 01:46:12.971186 2026] [:error] [pid 51008:tid 51065] [client 3.8.151.177:56602] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/server-status.php"] [unique_id "af4hZHB58C2Y1tgLtuLeqQAAAFA"]
[Sat May 09 01:46:13.949552 2026] [:error] [pid 61355:tid 61378] [client 3.8.151.177:56626] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4hZfkhJTi30CBXmMk-NQAAAZE"]
[Sat May 09 01:46:14.925107 2026] [:error] [pid 61356:tid 61390] [client 3.8.151.177:56638] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/_environment"] [unique_id "af4hZox3vpB8oWhUq2MvewAAAcI"]
[Sat May 09 01:46:15.905610 2026] [:error] [pid 61356:tid 61391] [client 3.8.151.177:56656] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4hZ4x3vpB8oWhUq2MvfQAAAcM"]
[Sat May 09 01:46:16.889063 2026] [:error] [pid 61317:tid 61334] [client 3.8.151.177:56676] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4haM-fFk_CedOCOYsQsQAAAU4"]
[Sat May 09 01:46:17.861872 2026] [:error] [pid 51113:tid 51128] [client 3.8.151.177:60692] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4haUQfs7sWtqkpQIec5QAAAM0"]
[Sat May 09 01:46:18.838481 2026] [:error] [pid 51113:tid 51129] [client 3.8.151.177:60714] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4hakQfs7sWtqkpQIec7AAAAM4"]
[Sat May 09 01:46:19.810698 2026] [:error] [pid 51113:tid 51135] [client 3.8.151.177:60732] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4ha0Qfs7sWtqkpQIec7QAAANQ"]
[Sat May 09 01:46:20.784991 2026] [:error] [pid 51007:tid 51030] [client 3.8.151.177:60756] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4hbFMagSGstWKyzzUeKwAAAAg"]
[Sat May 09 01:46:21.765980 2026] [:error] [pid 61355:tid 61363] [client 3.8.151.177:60770] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4hbfkhJTi30CBXmMk-RgAAAYI"]
[Sat May 09 01:46:22.750435 2026] [:error] [pid 51008:tid 51060] [client 3.8.151.177:60786] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4hbnB58C2Y1tgLtuLetQAAAEs"]
[Sat May 09 01:46:23.738132 2026] [:error] [pid 61356:tid 61402] [client 3.8.151.177:60804] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpinfo.php~"] [unique_id "af4hb4x3vpB8oWhUq2MvlwAAAc4"]
[Sat May 09 01:46:24.724586 2026] [:error] [pid 51009:tid 51099] [client 3.8.151.177:60816] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/info.php.bak"] [unique_id "af4hcOB0GbUWhxgzX9WZPgAAAJc"]
[Sat May 09 01:46:25.753695 2026] [:error] [pid 61355:tid 61374] [client 3.8.151.177:60826] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4hcfkhJTi30CBXmMk-XQAAAY0"]
[Sat May 09 01:46:26.783163 2026] [:error] [pid 61355:tid 61375] [client 3.8.151.177:60856] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4hcvkhJTi30CBXmMk-ZQAAAY4"]
[Sat May 09 01:46:27.782736 2026] [:error] [pid 61317:tid 61325] [client 3.8.151.177:50122] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4hc8-fFk_CedOCOYsQ5wAAAUU"]
[Sat May 09 01:46:28.785750 2026] [:error] [pid 61355:tid 61376] [client 3.8.151.177:50140] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4hdPkhJTi30CBXmMk-bQAAAY8"]
[Sat May 09 01:46:29.785868 2026] [:error] [pid 61356:tid 61409] [client 3.8.151.177:50154] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4hdYx3vpB8oWhUq2MvogAAAdU"]
[Sat May 09 01:46:30.769796 2026] [:error] [pid 61355:tid 61380] [client 3.8.151.177:50172] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4hdvkhJTi30CBXmMk-dAAAAZM"]
[Sat May 09 01:46:31.745077 2026] [:error] [pid 61317:tid 61332] [client 3.8.151.177:50198] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4hd8-fFk_CedOCOYsRBwAAAUw"]
[Sat May 09 01:46:32.721533 2026] [:error] [pid 51007:tid 51031] [client 3.8.151.177:50224] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4heFMagSGstWKyzzUeNQAAAAk"]
[Sat May 09 01:46:33.718783 2026] [:error] [pid 61356:tid 61388] [client 3.8.151.177:50248] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4heYx3vpB8oWhUq2MvuQAAAcA"]
[Sat May 09 01:46:34.704848 2026] [:error] [pid 61355:tid 61380] [client 3.8.151.177:50274] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4hevkhJTi30CBXmMk-hQAAAZM"]
[Sat May 09 01:46:35.681797 2026] [:error] [pid 51007:tid 51039] [client 3.8.151.177:50296] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4he1MagSGstWKyzzUeOgAAABE"]
[Sat May 09 01:46:36.660606 2026] [:error] [pid 51007:tid 51030] [client 3.8.151.177:50308] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4hfFMagSGstWKyzzUePQAAAAg"]
[Sat May 09 01:46:37.644001 2026] [:error] [pid 51008:tid 51066] [client 3.8.151.177:50320] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4hfXB58C2Y1tgLtuLe1gAAAFE"]
[Sat May 09 01:46:38.625337 2026] [:error] [pid 61356:tid 61404] [client 3.8.151.177:55586] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4hfox3vpB8oWhUq2Mv7AAAAdA"]
[Sat May 09 01:46:39.611858 2026] [:error] [pid 51007:tid 51036] [client 3.8.151.177:55594] [client 3.8.151.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4hf1MagSGstWKyzzUeQQAAAA4"]
[Sat May 09 02:46:20.164567 2026] [:error] [pid 61355:tid 61381] [client 3.112.233.69:51470] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "af4vfPkhJTi30CBXmMll-QAAAZQ"]
[Sat May 09 02:46:20.870877 2026] [:error] [pid 61356:tid 61412] [client 3.112.233.69:51490] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env"] [unique_id "af4vfIx3vpB8oWhUq2NPSAAAAdg"]
[Sat May 09 02:46:21.428770 2026] [:error] [pid 51009:tid 51080] [client 3.112.233.69:51498] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.local"] [unique_id "af4vfeB0GbUWhxgzX9Wu-QAAAIQ"]
[Sat May 09 02:46:21.989087 2026] [:error] [pid 51113:tid 51125] [client 3.112.233.69:51504] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.production"] [unique_id "af4vfUQfs7sWtqkpQIel1wAAAMo"]
[Sat May 09 02:46:22.548803 2026] [:error] [pid 51007:tid 51039] [client 3.112.233.69:51520] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.staging"] [unique_id "af4vflMagSGstWKyzzUqBQAAABE"]
[Sat May 09 02:46:23.106528 2026] [:error] [pid 51007:tid 51033] [client 3.112.233.69:51546] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.development"] [unique_id "af4vf1MagSGstWKyzzUqCAAAAAs"]
[Sat May 09 02:46:23.671703 2026] [:error] [pid 51113:tid 51138] [client 3.112.233.69:51576] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.test"] [unique_id "af4vf0Qfs7sWtqkpQIel2wAAANc"]
[Sat May 09 02:46:24.229015 2026] [:error] [pid 61356:tid 61405] [client 3.112.233.69:51592] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.remote"] [unique_id "af4vgIx3vpB8oWhUq2NPWAAAAdE"]
[Sat May 09 02:46:24.785506 2026] [:error] [pid 61356:tid 61409] [client 3.112.233.69:60384] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.bak"] [unique_id "af4vgIx3vpB8oWhUq2NPXwAAAdU"]
[Sat May 09 02:46:25.347099 2026] [:error] [pid 51007:tid 51026] [client 3.112.233.69:60396] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.backup"] [unique_id "af4vgVMagSGstWKyzzUqCQAAAAQ"]
[Sat May 09 02:46:25.904040 2026] [:error] [pid 51113:tid 51132] [client 3.112.233.69:60416] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.save"] [unique_id "af4vgUQfs7sWtqkpQIel3wAAANE"]
[Sat May 09 02:46:26.467409 2026] [:error] [pid 51009:tid 51083] [client 3.112.233.69:60436] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.old"] [unique_id "af4vguB0GbUWhxgzX9WvDgAAAIc"]
[Sat May 09 02:46:27.025050 2026] [:error] [pid 34318:tid 34340] [client 3.112.233.69:60450] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.sample"] [unique_id "af4vg8r3guirgJiKhzAQ0QAAARQ"]
[Sat May 09 02:46:27.585924 2026] [:error] [pid 61317:tid 61326] [client 3.112.233.69:60460] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.example"] [unique_id "af4vg8-fFk_CedOCOYsgzQAAAUY"]
[Sat May 09 02:46:28.144116 2026] [:error] [pid 51008:tid 51058] [client 3.112.233.69:60480] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.dev"] [unique_id "af4vhHB58C2Y1tgLtuLubwAAAEk"]
[Sat May 09 02:46:28.741677 2026] [:error] [pid 61355:tid 61374] [client 3.112.233.69:60496] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.prod"] [unique_id "af4vhPkhJTi30CBXmMlmAAAAAY0"]
[Sat May 09 02:46:29.301800 2026] [:error] [pid 61355:tid 61367] [client 3.112.233.69:60522] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.stage"] [unique_id "af4vhfkhJTi30CBXmMlmBAAAAYY"]
[Sat May 09 02:46:29.865886 2026] [:error] [pid 34318:tid 34342] [client 3.112.233.69:60544] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.ci"] [unique_id "af4vhcr3guirgJiKhzAQ0gAAARY"]
[Sat May 09 02:46:30.423174 2026] [:error] [pid 51009:tid 51099] [client 3.112.233.69:60562] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.docker"] [unique_id "af4vhuB0GbUWhxgzX9WvGAAAAJc"]
[Sat May 09 02:46:30.982918 2026] [:error] [pid 61355:tid 61375] [client 3.112.233.69:60580] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.live"] [unique_id "af4vhvkhJTi30CBXmMlmFQAAAY4"]
[Sat May 09 02:46:31.538986 2026] [:error] [pid 61355:tid 61384] [client 3.112.233.69:60600] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.preprod"] [unique_id "af4vh_khJTi30CBXmMlmHQAAAZc"]
[Sat May 09 02:46:32.097144 2026] [:error] [pid 61355:tid 61363] [client 3.112.233.69:60622] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.uat"] [unique_id "af4viPkhJTi30CBXmMlmJAAAAYI"]
[Sat May 09 02:46:32.660597 2026] [:error] [pid 61317:tid 61332] [client 3.112.233.69:60642] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.dist"] [unique_id "af4viM-fFk_CedOCOYsg4QAAAUw"]
[Sat May 09 02:46:33.216737 2026] [:error] [pid 61317:tid 61327] [client 3.112.233.69:60660] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.swp"] [unique_id "af4vic-fFk_CedOCOYsg5gAAAUc"]
[Sat May 09 02:46:33.772389 2026] [:error] [pid 34318:tid 34320] [client 3.112.233.69:60686] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env~"] [unique_id "af4vicr3guirgJiKhzAQ2QAAAQA"]
[Sat May 09 02:46:34.331186 2026] [:error] [pid 61356:tid 61396] [client 3.112.233.69:60712] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env1"] [unique_id "af4viox3vpB8oWhUq2NPaAAAAcg"]
[Sat May 09 02:46:34.888617 2026] [:error] [pid 51113:tid 51137] [client 3.112.233.69:49586] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env2"] [unique_id "af4vikQfs7sWtqkpQIel8AAAANY"]
[Sat May 09 02:46:35.449016 2026] [:error] [pid 34318:tid 34335] [client 3.112.233.69:49598] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env_copy"] [unique_id "af4vi8r3guirgJiKhzAQ2wAAAQ8"]
[Sat May 09 02:46:36.008404 2026] [:error] [pid 61355:tid 61382] [client 3.112.233.69:49616] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.txt"] [unique_id "af4vjPkhJTi30CBXmMlmNgAAAZU"]
[Sat May 09 02:46:36.562587 2026] [:error] [pid 51009:tid 51092] [client 3.112.233.69:49630] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.json"] [unique_id "af4vjOB0GbUWhxgzX9WvKAAAAJA"]
[Sat May 09 02:46:37.120788 2026] [:error] [pid 51009:tid 51093] [client 3.112.233.69:49652] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.yaml"] [unique_id "af4vjeB0GbUWhxgzX9WvLQAAAJE"]
[Sat May 09 02:46:37.674166 2026] [:error] [pid 61356:tid 61410] [client 3.112.233.69:49670] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.yml"] [unique_id "af4vjYx3vpB8oWhUq2NPdAAAAdY"]
[Sat May 09 02:46:38.233035 2026] [:error] [pid 61356:tid 61405] [client 3.112.233.69:49678] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/app/.env"] [unique_id "af4vjox3vpB8oWhUq2NPegAAAdE"]
[Sat May 09 02:46:38.789792 2026] [:error] [pid 51009:tid 51080] [client 3.112.233.69:49704] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/apps/.env"] [unique_id "af4vjuB0GbUWhxgzX9WvMAAAAIQ"]
[Sat May 09 02:46:39.345930 2026] [:error] [pid 61355:tid 61373] [client 3.112.233.69:49714] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/api/.env"] [unique_id "af4vj_khJTi30CBXmMlmTQAAAYw"]
[Sat May 09 02:46:39.902574 2026] [:error] [pid 51008:tid 51069] [client 3.112.233.69:49728] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/web/.env"] [unique_id "af4vj3B58C2Y1tgLtuLudgAAAFQ"]
[Sat May 09 02:46:40.459536 2026] [:error] [pid 61355:tid 61361] [client 3.112.233.69:49742] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/site/.env"] [unique_id "af4vkPkhJTi30CBXmMlmWQAAAYA"]
[Sat May 09 02:46:41.018163 2026] [:error] [pid 61355:tid 61372] [client 3.112.233.69:49758] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/public/.env"] [unique_id "af4vkfkhJTi30CBXmMlmYQAAAYs"]
[Sat May 09 02:46:41.578401 2026] [:error] [pid 51008:tid 51064] [client 3.112.233.69:49776] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/admin/.env"] [unique_id "af4vkXB58C2Y1tgLtuLuegAAAE8"]
[Sat May 09 02:46:42.138408 2026] [:error] [pid 61356:tid 61398] [client 3.112.233.69:49800] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/backend/.env"] [unique_id "af4vkox3vpB8oWhUq2NPhwAAAco"]
[Sat May 09 02:46:42.695211 2026] [:error] [pid 61355:tid 61362] [client 3.112.233.69:49810] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/server/.env"] [unique_id "af4vkvkhJTi30CBXmMlmagAAAYE"]
[Sat May 09 02:46:43.250225 2026] [:error] [pid 61317:tid 61326] [client 3.112.233.69:49834] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/frontend/.env"] [unique_id "af4vk8-fFk_CedOCOYsg8QAAAUY"]
[Sat May 09 02:46:43.805275 2026] [:error] [pid 34318:tid 34343] [client 3.112.233.69:49840] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/src/.env"] [unique_id "af4vk8r3guirgJiKhzAQ4AAAARc"]
[Sat May 09 02:46:44.364809 2026] [:error] [pid 61356:tid 61410] [client 3.112.233.69:49860] [client 3.112.233.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/core/.env"] [unique_id "af4vlIx3vpB8oWhUq2NPnAAAAdY"]
[Sat May 09 02:50:16.764157 2026] [proxy_fcgi:error] [pid 61317:tid 61337] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:17.111821 2026] [proxy_fcgi:error] [pid 61317:tid 61338] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:17.435434 2026] [proxy_fcgi:error] [pid 61317:tid 61323] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:17.779744 2026] [proxy_fcgi:error] [pid 61317:tid 61339] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:18.103678 2026] [proxy_fcgi:error] [pid 61317:tid 61341] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:18.964069 2026] [proxy_fcgi:error] [pid 61317:tid 61324] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:19.298292 2026] [proxy_fcgi:error] [pid 61317:tid 61328] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:19.637357 2026] [proxy_fcgi:error] [pid 61317:tid 61327] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:21.171005 2026] [proxy_fcgi:error] [pid 61317:tid 61326] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:21.494346 2026] [proxy_fcgi:error] [pid 61317:tid 61333] [client 20.226.1.243:10121] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:50:21.823606 2026] [:error] [pid 61317:tid 61334] [client 20.226.1.243:10121] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unvouc.php"] [unique_id "af4wbc-fFk_CedOCOYsiKAAAAU4"]
[Sat May 09 02:50:22.983440 2026] [:error] [pid 51113:tid 51130] [client 20.226.1.243:10220] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unvouc.php"] [unique_id "af4wbkQfs7sWtqkpQIenEQAAAM8"]
[Sat May 09 02:50:25.641920 2026] [:error] [pid 61356:tid 61389] [client 20.226.1.243:10114] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unvouc.php"] [unique_id "af4wcYx3vpB8oWhUq2NR3gAAAcE"]
[Sat May 09 02:50:27.124137 2026] [:error] [pid 61355:tid 61368] [client 20.226.1.243:10233] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/unvouc.php"] [unique_id "af4wc_khJTi30CBXmMloxgAAAYc"]
[Sat May 09 02:50:28.421641 2026] [:error] [pid 51009:tid 51095] [client 20.226.1.243:10214] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signin.php"] [unique_id "af4wdOB0GbUWhxgzX9Ww3wAAAJM"]
[Sat May 09 02:50:29.469822 2026] [:error] [pid 51007:tid 51029] [client 20.226.1.243:10226] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signin.php"] [unique_id "af4wdVMagSGstWKyzzUrHQAAAAc"]
[Sat May 09 02:50:31.035358 2026] [:error] [pid 51113:tid 51129] [client 20.226.1.243:10187] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signin.php"] [unique_id "af4wd0Qfs7sWtqkpQIenFwAAAM4"]
[Sat May 09 02:50:32.388949 2026] [:error] [pid 61356:tid 61402] [client 20.226.1.243:10113] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-signin.php"] [unique_id "af4weIx3vpB8oWhUq2NR6wAAAc4"]
[Sat May 09 02:50:33.250127 2026] [:error] [pid 61355:tid 61374] [client 20.226.1.243:10132] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af4wefkhJTi30CBXmMloyAAAAY0"]
[Sat May 09 02:50:34.838972 2026] [:error] [pid 61356:tid 61401] [client 20.226.1.243:10182] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af4weox3vpB8oWhUq2NR9AAAAc0"]
[Sat May 09 02:50:36.035139 2026] [:error] [pid 34318:tid 34334] [client 20.226.1.243:10123] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af4wfMr3guirgJiKhzARrQAAAQ4"]
[Sat May 09 02:50:37.565005 2026] [:error] [pid 61356:tid 61408] [client 20.226.1.243:10180] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af4wfYx3vpB8oWhUq2NR_wAAAdQ"]
[Sat May 09 02:50:39.037032 2026] [:error] [pid 61317:tid 61344] [client 20.226.1.243:10129] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4wf8-fFk_CedOCOYsiQAAAAVg"]
[Sat May 09 02:50:40.494184 2026] [:error] [pid 61355:tid 61367] [client 20.226.1.243:10130] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4wgPkhJTi30CBXmMlo0AAAAYY"]
[Sat May 09 02:50:41.819668 2026] [:error] [pid 61355:tid 61366] [client 20.226.1.243:10228] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4wgfkhJTi30CBXmMlo1QAAAYU"]
[Sat May 09 02:50:42.776911 2026] [:error] [pid 51008:tid 51059] [client 20.226.1.243:10217] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4wgnB58C2Y1tgLtuLvggAAAEo"]
[Sat May 09 02:50:44.654723 2026] [:error] [pid 61317:tid 61336] [client 20.226.1.243:10149] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links.php"] [unique_id "af4whM-fFk_CedOCOYsiRQAAAVA"]
[Sat May 09 02:50:45.976681 2026] [:error] [pid 34318:tid 34324] [client 20.226.1.243:10200] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links.php"] [unique_id "af4whcr3guirgJiKhzARwQAAAQQ"]
[Sat May 09 02:50:47.928654 2026] [:error] [pid 61355:tid 61366] [client 20.226.1.243:10224] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links.php"] [unique_id "af4wh_khJTi30CBXmMlo3gAAAYU"]
[Sat May 09 02:50:50.067128 2026] [:error] [pid 51007:tid 51035] [client 20.226.1.243:10116] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-links.php"] [unique_id "af4wilMagSGstWKyzzUrNwAAAA0"]
[Sat May 09 02:50:51.056425 2026] [:error] [pid 34318:tid 34334] [client 20.226.1.243:10170] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload/wp-info.php"] [unique_id "af4wi8r3guirgJiKhzAR6gAAAQ4"]
[Sat May 09 02:50:53.075168 2026] [:error] [pid 61317:tid 61330] [client 20.226.1.243:10131] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload/wp-info.php"] [unique_id "af4wjc-fFk_CedOCOYsiSwAAAUo"]
[Sat May 09 02:50:54.303500 2026] [:error] [pid 51009:tid 51089] [client 20.226.1.243:10190] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload/wp-info.php"] [unique_id "af4wjuB0GbUWhxgzX9WxBQAAAI0"]
[Sat May 09 02:50:55.166741 2026] [:error] [pid 51009:tid 51095] [client 20.226.1.243:10231] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/upload/wp-info.php"] [unique_id "af4wj-B0GbUWhxgzX9WxCAAAAJM"]
[Sat May 09 02:50:56.744508 2026] [:error] [pid 51009:tid 51086] [client 20.226.1.243:10122] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "af4wkOB0GbUWhxgzX9WxEwAAAIo"]
[Sat May 09 02:50:58.130830 2026] [:error] [pid 61317:tid 61335] [client 20.226.1.243:10050] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "af4wks-fFk_CedOCOYsiXQAAAU8"]
[Sat May 09 02:50:59.447137 2026] [:error] [pid 51008:tid 51068] [client 20.226.1.243:10126] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "af4wk3B58C2Y1tgLtuLvhgAAAFM"]
[Sat May 09 02:51:00.682421 2026] [:error] [pid 61355:tid 61373] [client 20.226.1.243:10159] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "af4wlPkhJTi30CBXmMlo6AAAAYw"]
[Sat May 09 02:51:02.326291 2026] [:error] [pid 51113:tid 51127] [client 20.226.1.243:10204] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "af4wlkQfs7sWtqkpQIenUgAAAMw"]
[Sat May 09 02:51:03.851688 2026] [:error] [pid 51009:tid 51084] [client 20.226.1.243:10051] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "af4wl-B0GbUWhxgzX9WxGQAAAIg"]
[Sat May 09 02:51:05.418773 2026] [:error] [pid 51007:tid 51034] [client 20.226.1.243:10138] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "af4wmVMagSGstWKyzzUrXwAAAAw"]
[Sat May 09 02:51:06.960792 2026] [:error] [pid 51007:tid 51036] [client 20.226.1.243:10191] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "af4wmlMagSGstWKyzzUrYAAAAA4"]
[Sat May 09 02:51:08.562257 2026] [:error] [pid 61355:tid 61370] [client 20.226.1.243:10188] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "af4wnPkhJTi30CBXmMlo_QAAAYk"]
[Sat May 09 02:51:10.050355 2026] [:error] [pid 51113:tid 51124] [client 20.226.1.243:10112] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "af4wnkQfs7sWtqkpQIenXQAAAMk"]
[Sat May 09 02:51:11.302422 2026] [:error] [pid 51008:tid 51069] [client 20.226.1.243:10213] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "af4wn3B58C2Y1tgLtuLvjAAAAFQ"]
[Sat May 09 02:51:12.839129 2026] [:error] [pid 61355:tid 61384] [client 20.226.1.243:10236] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "af4woPkhJTi30CBXmMlpBQAAAZc"]
[Sat May 09 02:51:13.915170 2026] [:error] [pid 61356:tid 61405] [client 20.226.1.243:10164] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "af4woYx3vpB8oWhUq2NSBAAAAdE"]
[Sat May 09 02:51:17.182154 2026] [:error] [pid 61355:tid 61363] [client 20.226.1.243:10061] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "af4wpfkhJTi30CBXmMlpFAAAAYI"]
[Sat May 09 02:51:19.540553 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10196] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "af4wp-B0GbUWhxgzX9WxZQAAAIc"]
[Sat May 09 02:51:22.383981 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:22.711610 2026] [proxy_fcgi:error] [pid 61355:tid 61362] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:23.381592 2026] [proxy_fcgi:error] [pid 61355:tid 61380] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:23.727646 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:24.056276 2026] [proxy_fcgi:error] [pid 61355:tid 61379] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:24.536083 2026] [proxy_fcgi:error] [pid 61355:tid 61378] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:24.880860 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 20.226.1.243:10146] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:25.654327 2026] [:error] [pid 61355:tid 61364] [client 20.226.1.243:10146] [client 20.226.1.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "af4wrfkhJTi30CBXmMlpSwAAAYM"]
[Sat May 09 02:51:28.953577 2026] [proxy_fcgi:error] [pid 34318:tid 34332] [client 20.226.1.243:10127] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:29.297739 2026] [proxy_fcgi:error] [pid 34318:tid 34337] [client 20.226.1.243:10127] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:51:29.638426 2026] [:error] [pid 34318:tid 34324] [client 20.226.1.243:10127] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "af4wscr3guirgJiKhzASlQAAAQQ"]
[Sat May 09 02:51:30.781754 2026] [:error] [pid 61355:tid 61379] [client 20.226.1.243:10230] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "af4wsvkhJTi30CBXmMlpXQAAAZI"]
[Sat May 09 02:51:32.173686 2026] [:error] [pid 51009:tid 51076] [client 20.226.1.243:10195] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "af4wtOB0GbUWhxgzX9WxegAAAIA"]
[Sat May 09 02:51:34.044176 2026] [:error] [pid 51009:tid 51085] [client 20.226.1.243:10194] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "af4wtuB0GbUWhxgzX9WxggAAAIk"]
[Sat May 09 02:51:35.079197 2026] [:error] [pid 51007:tid 51037] [client 20.226.1.243:10199] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/spawns.php"] [unique_id "af4wt1MagSGstWKyzzUrewAAAA8"]
[Sat May 09 02:51:36.351514 2026] [:error] [pid 34318:tid 34336] [client 20.226.1.243:10210] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/spawns.php"] [unique_id "af4wuMr3guirgJiKhzASnAAAARA"]
[Sat May 09 02:51:38.328674 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10150] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/spawns.php"] [unique_id "af4wuuB0GbUWhxgzX9WxjgAAAIc"]
[Sat May 09 02:51:40.027286 2026] [:error] [pid 34318:tid 34343] [client 20.226.1.243:10140] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/spawns.php"] [unique_id "af4wvMr3guirgJiKhzASqgAAARc"]
[Sat May 09 02:51:42.599309 2026] [:error] [pid 51008:tid 51061] [client 20.226.1.243:10133] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "af4wvnB58C2Y1tgLtuLvsQAAAEw"]
[Sat May 09 02:51:43.738979 2026] [:error] [pid 51009:tid 51091] [client 20.226.1.243:10205] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "af4wv-B0GbUWhxgzX9WxqAAAAI8"]
[Sat May 09 02:51:45.003752 2026] [:error] [pid 51008:tid 51070] [client 20.226.1.243:10201] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "af4wwXB58C2Y1tgLtuLvtQAAAFU"]
[Sat May 09 02:51:47.928594 2026] [:error] [pid 61356:tid 61408] [client 20.226.1.243:10193] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "af4ww4x3vpB8oWhUq2NSNQAAAdQ"]
[Sat May 09 02:51:49.673887 2026] [:error] [pid 34318:tid 34334] [client 20.226.1.243:10209] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "af4wxcr3guirgJiKhzASrwAAAQ4"]
[Sat May 09 02:51:52.660045 2026] [:error] [pid 61355:tid 61369] [client 20.226.1.243:10056] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "af4wyPkhJTi30CBXmMlpgAAAAYg"]
[Sat May 09 02:51:55.380869 2026] [:error] [pid 51113:tid 51117] [client 20.226.1.243:10074] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "af4wy0Qfs7sWtqkpQIendwAAAMI"]
[Sat May 09 02:52:00.094280 2026] [:error] [pid 51008:tid 51066] [client 20.226.1.243:10238] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "af4w0HB58C2Y1tgLtuLvwgAAAFE"]
[Sat May 09 02:52:01.546746 2026] [:error] [pid 61317:tid 61333] [client 20.226.1.243:10218] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "af4w0c-fFk_CedOCOYsilQAAAU0"]
[Sat May 09 02:52:06.099273 2026] [:error] [pid 61356:tid 61400] [client 20.226.1.243:10197] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "af4w1ox3vpB8oWhUq2NSQgAAAcw"]
[Sat May 09 02:52:07.268878 2026] [:error] [pid 51009:tid 51090] [client 20.226.1.243:10211] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "af4w1-B0GbUWhxgzX9WxwwAAAI4"]
[Sat May 09 02:52:10.005880 2026] [:error] [pid 51007:tid 51025] [client 20.226.1.243:10119] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "af4w2lMagSGstWKyzzUrigAAAAM"]
[Sat May 09 02:52:11.130998 2026] [:error] [pid 61356:tid 61406] [client 20.226.1.243:10221] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "af4w24x3vpB8oWhUq2NSQwAAAdI"]
[Sat May 09 02:52:12.797603 2026] [:error] [pid 51009:tid 51088] [client 20.226.1.243:10208] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "af4w3OB0GbUWhxgzX9WxygAAAIw"]
[Sat May 09 02:52:15.172882 2026] [:error] [pid 51009:tid 51084] [client 20.226.1.243:10076] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "af4w3-B0GbUWhxgzX9Wx0wAAAIg"]
[Sat May 09 02:52:17.276887 2026] [:error] [pid 61355:tid 61380] [client 20.226.1.243:10219] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "af4w4fkhJTi30CBXmMlpmQAAAZM"]
[Sat May 09 02:52:20.981323 2026] [:error] [pid 61317:tid 61329] [client 20.226.1.243:10098] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "af4w5M-fFk_CedOCOYsirgAAAUk"]
[Sat May 09 02:52:22.270744 2026] [:error] [pid 61317:tid 61320] [client 20.226.1.243:10097] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "af4w5s-fFk_CedOCOYsisQAAAUA"]
[Sat May 09 02:52:23.542929 2026] [:error] [pid 51009:tid 51099] [client 20.226.1.243:10167] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "af4w5-B0GbUWhxgzX9Wx3QAAAJc"]
[Sat May 09 02:52:24.914159 2026] [:error] [pid 51008:tid 51061] [client 20.226.1.243:10052] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/configuration.php"] [unique_id "af4w6HB58C2Y1tgLtuLv0AAAAEw"]
[Sat May 09 02:52:26.879908 2026] [:error] [pid 61317:tid 61344] [client 20.226.1.243:10175] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4w6s-fFk_CedOCOYsiuAAAAVg"]
[Sat May 09 02:52:28.718049 2026] [:error] [pid 51113:tid 51120] [client 20.226.1.243:10117] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "af4w7EQfs7sWtqkpQIenngAAAMU"]
[Sat May 09 02:52:30.000364 2026] [proxy_fcgi:error] [pid 51009:tid 51089] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:30.803515 2026] [proxy_fcgi:error] [pid 51009:tid 51082] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:31.130403 2026] [proxy_fcgi:error] [pid 51009:tid 51080] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:31.457288 2026] [proxy_fcgi:error] [pid 51009:tid 51087] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:31.793644 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:32.120677 2026] [proxy_fcgi:error] [pid 51009:tid 51085] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:32.462184 2026] [proxy_fcgi:error] [pid 51009:tid 51099] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:32.802829 2026] [proxy_fcgi:error] [pid 51009:tid 51083] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:33.155074 2026] [proxy_fcgi:error] [pid 51009:tid 51077] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:33.482302 2026] [proxy_fcgi:error] [pid 51009:tid 51094] [client 20.226.1.243:10001] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:52:33.805735 2026] [:error] [pid 51009:tid 51093] [client 20.226.1.243:10001] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "af4w8eB0GbUWhxgzX9WyDwAAAJE"]
[Sat May 09 02:52:34.811664 2026] [:error] [pid 51009:tid 51080] [client 20.226.1.243:10223] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "af4w8uB0GbUWhxgzX9WyFAAAAIQ"]
[Sat May 09 02:52:36.555092 2026] [:error] [pid 51009:tid 51097] [client 20.226.1.243:10189] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "af4w9OB0GbUWhxgzX9WyIgAAAJU"]
[Sat May 09 02:52:38.436994 2026] [:error] [pid 61317:tid 61335] [client 20.226.1.243:10137] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bgymj.php"] [unique_id "af4w9s-fFk_CedOCOYsiwAAAAU8"]
[Sat May 09 02:52:41.229008 2026] [:error] [pid 51009:tid 51099] [client 20.226.1.243:10058] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "af4w-eB0GbUWhxgzX9WyKwAAAJc"]
[Sat May 09 02:52:43.465066 2026] [:error] [pid 61355:tid 61369] [client 20.226.1.243:10162] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "af4w-_khJTi30CBXmMlpuQAAAYg"]
[Sat May 09 02:52:51.398302 2026] [:error] [pid 61355:tid 61379] [client 20.226.1.243:10057] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "af4xA_khJTi30CBXmMlpxwAAAZI"]
[Sat May 09 02:52:52.695446 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10108] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pucci.php"] [unique_id "af4xBOB0GbUWhxgzX9WyNQAAAIc"]
[Sat May 09 02:52:56.578442 2026] [:error] [pid 51009:tid 51077] [client 20.226.1.243:10055] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af4xCOB0GbUWhxgzX9WyOQAAAIE"]
[Sat May 09 02:52:57.786927 2026] [:error] [pid 61355:tid 61365] [client 20.226.1.243:10124] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af4xCfkhJTi30CBXmMlp3gAAAYQ"]
[Sat May 09 02:52:59.604523 2026] [:error] [pid 61317:tid 61330] [client 20.226.1.243:10070] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af4xC8-fFk_CedOCOYsi0gAAAUo"]
[Sat May 09 02:53:00.817459 2026] [:error] [pid 51007:tid 51037] [client 20.226.1.243:10227] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af4xDFMagSGstWKyzzUrkAAAAA8"]
[Sat May 09 02:53:01.696318 2026] [:error] [pid 51007:tid 51041] [client 20.226.1.243:10136] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "af4xDVMagSGstWKyzzUrkwAAABM"]
[Sat May 09 02:53:02.746516 2026] [:error] [pid 61317:tid 61334] [client 20.226.1.243:10156] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "af4xDs-fFk_CedOCOYsi1QAAAU4"]
[Sat May 09 02:53:04.234648 2026] [:error] [pid 51007:tid 51030] [client 20.226.1.243:10174] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "af4xEFMagSGstWKyzzUrlQAAAAg"]
[Sat May 09 02:53:05.368335 2026] [:error] [pid 61356:tid 61406] [client 20.226.1.243:10177] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.dj/index.php"] [unique_id "af4xEYx3vpB8oWhUq2NS4gAAAdI"]
[Sat May 09 02:53:06.303327 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10134] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "af4xEuB0GbUWhxgzX9WyQAAAAIc"]
[Sat May 09 02:53:08.837610 2026] [:error] [pid 61317:tid 61339] [client 20.226.1.243:10077] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "af4xFM-fFk_CedOCOYsi2gAAAVM"]
[Sat May 09 02:53:10.862744 2026] [:error] [pid 61356:tid 61400] [client 20.226.1.243:10234] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "af4xFox3vpB8oWhUq2NS7wAAAcw"]
[Sat May 09 02:53:12.406387 2026] [:error] [pid 51009:tid 51100] [client 20.226.1.243:10128] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "af4xGOB0GbUWhxgzX9WyVAAAAJg"]
[Sat May 09 02:53:13.653381 2026] [:error] [pid 61356:tid 61411] [client 20.226.1.243:10085] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "af4xGYx3vpB8oWhUq2NS8QAAAdc"]
[Sat May 09 02:53:14.925197 2026] [:error] [pid 61356:tid 61409] [client 20.226.1.243:10203] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "af4xGox3vpB8oWhUq2NS8gAAAdU"]
[Sat May 09 02:53:16.935251 2026] [:error] [pid 34318:tid 34337] [client 20.226.1.243:10135] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "af4xHMr3guirgJiKhzAS2gAAARE"]
[Sat May 09 02:53:18.323688 2026] [:error] [pid 34318:tid 34320] [client 20.226.1.243:10071] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.tmb/"] [unique_id "af4xHsr3guirgJiKhzAS2wAAAQA"]
[Sat May 09 02:53:20.762385 2026] [:error] [pid 34318:tid 34325] [client 20.226.1.243:10216] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "af4xIMr3guirgJiKhzAS3gAAAQU"]
[Sat May 09 02:53:22.397461 2026] [:error] [pid 61356:tid 61397] [client 20.226.1.243:10239] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "af4xIox3vpB8oWhUq2NTCgAAAck"]
[Sat May 09 02:53:25.088193 2026] [:error] [pid 51008:tid 51069] [client 20.226.1.243:10237] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "af4xJXB58C2Y1tgLtuLv8wAAAFQ"]
[Sat May 09 02:53:26.794683 2026] [:error] [pid 51113:tid 51137] [client 20.226.1.243:10157] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/one.php"] [unique_id "af4xJkQfs7sWtqkpQIenugAAANY"]
[Sat May 09 02:53:30.802277 2026] [:error] [pid 51007:tid 51046] [client 20.226.1.243:10101] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no20.php"] [unique_id "af4xKlMagSGstWKyzzUrpgAAABg"]
[Sat May 09 02:53:33.160803 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:33.487335 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:33.814124 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:34.145293 2026] [proxy_fcgi:error] [pid 61355:tid 61385] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:34.836465 2026] [proxy_fcgi:error] [pid 61355:tid 61365] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:35.345780 2026] [proxy_fcgi:error] [pid 61355:tid 61376] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:35.671655 2026] [proxy_fcgi:error] [pid 61355:tid 61368] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:36.011695 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:36.343830 2026] [proxy_fcgi:error] [pid 61355:tid 61366] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:36.705857 2026] [proxy_fcgi:error] [pid 61355:tid 61381] [client 20.226.1.243:10141] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:53:37.028457 2026] [:error] [pid 61355:tid 61362] [client 20.226.1.243:10141] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af4xMfkhJTi30CBXmMlqPQAAAYE"]
[Sat May 09 02:53:38.754444 2026] [:error] [pid 61356:tid 61395] [client 20.226.1.243:10059] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af4xMox3vpB8oWhUq2NTGwAAAcc"]
[Sat May 09 02:53:40.045342 2026] [:error] [pid 61356:tid 61406] [client 20.226.1.243:10093] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af4xNIx3vpB8oWhUq2NTHwAAAdI"]
[Sat May 09 02:53:41.223943 2026] [:error] [pid 51113:tid 51121] [client 20.226.1.243:10222] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "af4xNUQfs7sWtqkpQIenzQAAAMY"]
[Sat May 09 02:53:43.666388 2026] [:error] [pid 51009:tid 51085] [client 20.226.1.243:10072] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xN-B0GbUWhxgzX9WybwAAAIk"]
[Sat May 09 02:53:46.469483 2026] [:error] [pid 51007:tid 51042] [client 20.226.1.243:10198] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xOlMagSGstWKyzzUrsAAAABQ"]
[Sat May 09 02:53:47.992718 2026] [:error] [pid 51007:tid 51029] [client 20.226.1.243:9923] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xO1MagSGstWKyzzUrswAAAAc"]
[Sat May 09 02:53:49.327782 2026] [:error] [pid 51007:tid 51044] [client 20.226.1.243:10062] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xPVMagSGstWKyzzUrtgAAABY"]
[Sat May 09 02:53:50.575002 2026] [:error] [pid 61355:tid 61376] [client 20.226.1.243:10165] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "af4xPvkhJTi30CBXmMlqQwAAAY8"]
[Sat May 09 02:53:52.583601 2026] [:error] [pid 34318:tid 34323] [client 20.226.1.243:10235] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "af4xQMr3guirgJiKhzATAgAAAQM"]
[Sat May 09 02:53:53.943992 2026] [:error] [pid 51113:tid 51118] [client 20.226.1.243:10091] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "af4xQUQfs7sWtqkpQIen5QAAAMM"]
[Sat May 09 02:53:55.174133 2026] [:error] [pid 34318:tid 34344] [client 20.226.1.243:10212] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/amdin.php"] [unique_id "af4xQ8r3guirgJiKhzATBwAAARg"]
[Sat May 09 02:53:58.150778 2026] [:error] [pid 61355:tid 61374] [client 20.226.1.243:10115] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "af4xRvkhJTi30CBXmMlqSQAAAY0"]
[Sat May 09 02:54:00.427642 2026] [:error] [pid 61317:tid 61320] [client 20.226.1.243:10021] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "af4xSM-fFk_CedOCOYsi8AAAAUA"]
[Sat May 09 02:54:02.047286 2026] [:error] [pid 61356:tid 61398] [client 20.226.1.243:10232] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "af4xSox3vpB8oWhUq2NTMwAAAco"]
[Sat May 09 02:54:03.766814 2026] [:error] [pid 51113:tid 51115] [client 20.226.1.243:10094] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/huya.php"] [unique_id "af4xS0Qfs7sWtqkpQIen7AAAAMA"]
[Sat May 09 02:54:05.431404 2026] [:error] [pid 61355:tid 61379] [client 20.226.1.243:10185] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "af4xTfkhJTi30CBXmMlqVwAAAZI"]
[Sat May 09 02:54:07.042820 2026] [:error] [pid 61355:tid 61364] [client 20.226.1.243:10092] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "af4xT_khJTi30CBXmMlqXAAAAYM"]
[Sat May 09 02:54:08.574996 2026] [:error] [pid 61356:tid 61411] [client 20.226.1.243:10089] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "af4xUIx3vpB8oWhUq2NTPQAAAdc"]
[Sat May 09 02:54:09.531622 2026] [:error] [pid 51008:tid 51071] [client 20.226.1.243:10078] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "af4xUXB58C2Y1tgLtuLwDAAAAFY"]
[Sat May 09 02:54:10.579334 2026] [:error] [pid 61355:tid 61364] [client 20.226.1.243:10000] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "af4xUvkhJTi30CBXmMlqaQAAAYM"]
[Sat May 09 02:54:11.819566 2026] [:error] [pid 61355:tid 61362] [client 20.226.1.243:10151] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "af4xU_khJTi30CBXmMlqcgAAAYE"]
[Sat May 09 02:54:12.765582 2026] [:error] [pid 34318:tid 34341] [client 20.226.1.243:9996] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "af4xVMr3guirgJiKhzATEwAAARU"]
[Sat May 09 02:54:14.184344 2026] [:error] [pid 51008:tid 51062] [client 20.226.1.243:10065] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "af4xVnB58C2Y1tgLtuLwEQAAAE0"]
[Sat May 09 02:54:15.412116 2026] [:error] [pid 61356:tid 61395] [client 20.226.1.243:10178] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "af4xV4x3vpB8oWhUq2NTRgAAAcc"]
[Sat May 09 02:54:16.219560 2026] [:error] [pid 61356:tid 61392] [client 20.226.1.243:10027] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "af4xWIx3vpB8oWhUq2NTSAAAAcQ"]
[Sat May 09 02:54:17.623482 2026] [:error] [pid 51007:tid 51023] [client 20.226.1.243:9989] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "af4xWVMagSGstWKyzzUr2gAAAAE"]
[Sat May 09 02:54:20.120602 2026] [:error] [pid 61355:tid 61377] [client 20.226.1.243:10066] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ewp.php"] [unique_id "af4xXPkhJTi30CBXmMlqiQAAAZA"]
[Sat May 09 02:54:22.194183 2026] [:error] [pid 61355:tid 61383] [client 20.226.1.243:10109] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xXvkhJTi30CBXmMlqjwAAAZY"]
[Sat May 09 02:54:23.185425 2026] [:error] [pid 61317:tid 61337] [client 20.226.1.243:10171] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xX8-fFk_CedOCOYsi_AAAAVE"]
[Sat May 09 02:54:25.328886 2026] [:error] [pid 61355:tid 61374] [client 20.226.1.243:10008] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xYfkhJTi30CBXmMlqlwAAAY0"]
[Sat May 09 02:54:27.886803 2026] [:error] [pid 61355:tid 61379] [client 20.226.1.243:10172] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "af4xY_khJTi30CBXmMlqmgAAAZI"]
[Sat May 09 02:54:29.068901 2026] [:error] [pid 51008:tid 51057] [client 20.226.1.243:10104] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "af4xZXB58C2Y1tgLtuLwHAAAAEg"]
[Sat May 09 02:54:29.829530 2026] [:error] [pid 61317:tid 61335] [client 20.226.1.243:10121] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "af4xZc-fFk_CedOCOYsjAQAAAU8"]
[Sat May 09 02:54:32.481846 2026] [:error] [pid 61317:tid 61333] [client 20.226.1.243:10125] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "af4xaM-fFk_CedOCOYsjCgAAAU0"]
[Sat May 09 02:54:33.366942 2026] [:error] [pid 51113:tid 51137] [client 20.226.1.243:10035] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xff.php"] [unique_id "af4xaUQfs7sWtqkpQIen_QAAANY"]
[Sat May 09 02:54:34.207551 2026] [:error] [pid 61317:tid 61337] [client 20.226.1.243:10063] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "af4xas-fFk_CedOCOYsjDQAAAVE"]
[Sat May 09 02:54:35.265296 2026] [:error] [pid 51113:tid 51134] [client 20.226.1.243:10153] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lupo.php"] [unique_id "af4xa0Qfs7sWtqkpQIeoAAAAANM"]
[Sat May 09 02:54:36.239639 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:36.746047 2026] [proxy_fcgi:error] [pid 61355:tid 61363] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:37.169535 2026] [proxy_fcgi:error] [pid 61355:tid 61383] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:37.703615 2026] [proxy_fcgi:error] [pid 61355:tid 61372] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:38.443225 2026] [proxy_fcgi:error] [pid 61355:tid 61366] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:38.769479 2026] [proxy_fcgi:error] [pid 61355:tid 61374] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:39.115225 2026] [proxy_fcgi:error] [pid 61355:tid 61368] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:39.439914 2026] [proxy_fcgi:error] [pid 61355:tid 61367] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:40.092119 2026] [proxy_fcgi:error] [pid 61355:tid 61364] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:40.422554 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 20.226.1.243:10145] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:54:40.755742 2026] [:error] [pid 61355:tid 61371] [client 20.226.1.243:10145] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "af4xcPkhJTi30CBXmMlqrwAAAYo"]
[Sat May 09 02:54:42.609086 2026] [:error] [pid 34318:tid 34327] [client 20.226.1.243:9994] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "af4xcsr3guirgJiKhzATGwAAAQc"]
[Sat May 09 02:54:43.451961 2026] [:error] [pid 51113:tid 51138] [client 20.226.1.243:10186] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "af4xc0Qfs7sWtqkpQIeoBAAAANc"]
[Sat May 09 02:54:44.572731 2026] [:error] [pid 34318:tid 34344] [client 20.226.1.243:10096] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/seo.php"] [unique_id "af4xdMr3guirgJiKhzATHQAAARg"]
[Sat May 09 02:54:45.809360 2026] [:error] [pid 51113:tid 51123] [client 20.226.1.243:10110] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "af4xdUQfs7sWtqkpQIeoBgAAAMg"]
[Sat May 09 02:54:47.864516 2026] [:error] [pid 51113:tid 51133] [client 20.226.1.243:10142] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "af4xd0Qfs7sWtqkpQIeoCQAAANI"]
[Sat May 09 02:54:50.390591 2026] [:error] [pid 51008:tid 51059] [client 20.226.1.243:10183] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "af4xenB58C2Y1tgLtuLwQwAAAEo"]
[Sat May 09 02:54:51.754251 2026] [:error] [pid 34318:tid 34332] [client 20.226.1.243:10003] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/7.php"] [unique_id "af4xe8r3guirgJiKhzATKQAAAQw"]
[Sat May 09 02:54:52.807664 2026] [:error] [pid 51008:tid 51058] [client 20.226.1.243:10192] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "af4xfHB58C2Y1tgLtuLwSgAAAEk"]
[Sat May 09 02:54:54.007874 2026] [:error] [pid 61317:tid 61322] [client 20.226.1.243:10095] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "af4xfs-fFk_CedOCOYsjKgAAAUI"]
[Sat May 09 02:54:55.004731 2026] [:error] [pid 61355:tid 61374] [client 20.226.1.243:10087] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "af4xf_khJTi30CBXmMlqswAAAY0"]
[Sat May 09 02:54:55.948644 2026] [:error] [pid 61355:tid 61369] [client 20.226.1.243:10226] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/8.php"] [unique_id "af4xf_khJTi30CBXmMlqtwAAAYg"]
[Sat May 09 02:54:58.130060 2026] [:error] [pid 61356:tid 61388] [client 20.226.1.243:10129] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "af4xgox3vpB8oWhUq2NTbQAAAcA"]
[Sat May 09 02:54:59.371949 2026] [:error] [pid 34318:tid 34330] [client 20.226.1.243:10170] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "af4xg8r3guirgJiKhzATLgAAAQo"]
[Sat May 09 02:55:00.505481 2026] [:error] [pid 61356:tid 61402] [client 20.226.1.243:10214] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "af4xhIx3vpB8oWhUq2NTcAAAAc4"]
[Sat May 09 02:55:02.613948 2026] [:error] [pid 51113:tid 51139] [client 20.226.1.243:10123] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1.php"] [unique_id "af4xhkQfs7sWtqkpQIeoJwAAANg"]
[Sat May 09 02:55:04.051488 2026] [:error] [pid 61317:tid 61340] [client 20.226.1.243:10012] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "af4xiM-fFk_CedOCOYsjNQAAAVQ"]
[Sat May 09 02:55:05.958461 2026] [:error] [pid 61356:tid 61394] [client 20.226.1.243:10229] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "af4xiYx3vpB8oWhUq2NTeAAAAcY"]
[Sat May 09 02:55:07.993999 2026] [:error] [pid 61356:tid 61406] [client 20.226.1.243:10161] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "af4xi4x3vpB8oWhUq2NTfQAAAdI"]
[Sat May 09 02:55:09.531281 2026] [:error] [pid 61356:tid 61404] [client 20.226.1.243:10205] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2.php"] [unique_id "af4xjYx3vpB8oWhUq2NTgAAAAdA"]
[Sat May 09 02:55:11.402707 2026] [:error] [pid 51113:tid 51137] [client 20.226.1.243:10114] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "af4xj0Qfs7sWtqkpQIeoMAAAANY"]
[Sat May 09 02:55:12.974060 2026] [:error] [pid 51007:tid 51028] [client 20.226.1.243:9985] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "af4xkFMagSGstWKyzzUr5gAAAAY"]
[Sat May 09 02:55:14.766895 2026] [:error] [pid 51009:tid 51084] [client 20.226.1.243:10139] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "af4xkuB0GbUWhxgzX9WyqAAAAIg"]
[Sat May 09 02:55:15.933380 2026] [:error] [pid 51008:tid 51054] [client 20.226.1.243:10050] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/3.php"] [unique_id "af4xk3B58C2Y1tgLtuLwbAAAAEU"]
[Sat May 09 02:55:17.573102 2026] [:error] [pid 51113:tid 51119] [client 20.226.1.243:10053] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "af4xlUQfs7sWtqkpQIeoNgAAAMQ"]
[Sat May 09 02:55:19.943499 2026] [:error] [pid 61356:tid 61410] [client 20.226.1.243:10131] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "af4xl4x3vpB8oWhUq2NTqAAAAdY"]
[Sat May 09 02:55:21.036536 2026] [:error] [pid 61356:tid 61407] [client 20.226.1.243:10067] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "af4xmYx3vpB8oWhUq2NTrAAAAdM"]
[Sat May 09 02:55:22.288812 2026] [:error] [pid 61356:tid 61397] [client 20.226.1.243:10082] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4.php"] [unique_id "af4xmox3vpB8oWhUq2NTrQAAAck"]
[Sat May 09 02:55:24.003092 2026] [:error] [pid 61356:tid 61409] [client 20.226.1.243:10130] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "af4xnIx3vpB8oWhUq2NTsQAAAdU"]
[Sat May 09 02:55:25.356492 2026] [:error] [pid 51007:tid 51041] [client 20.226.1.243:10187] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "af4xnVMagSGstWKyzzUr8gAAABM"]
[Sat May 09 02:55:26.954098 2026] [:error] [pid 61355:tid 61372] [client 20.226.1.243:10200] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "af4xnvkhJTi30CBXmMlqyQAAAYs"]
[Sat May 09 02:55:28.618001 2026] [:error] [pid 61355:tid 61371] [client 20.226.1.243:10202] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5.php"] [unique_id "af4xoPkhJTi30CBXmMlq0wAAAYo"]
[Sat May 09 02:55:29.853508 2026] [:error] [pid 61356:tid 61402] [client 20.226.1.243:10168] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "af4xoYx3vpB8oWhUq2NTxwAAAc4"]
[Sat May 09 02:55:30.802857 2026] [:error] [pid 51113:tid 51134] [client 20.226.1.243:10176] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "af4xokQfs7sWtqkpQIeoOgAAANM"]
[Sat May 09 02:55:32.955344 2026] [:error] [pid 61356:tid 61394] [client 20.226.1.243:9986] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "af4xpIx3vpB8oWhUq2NT0QAAAcY"]
[Sat May 09 02:55:35.181787 2026] [:error] [pid 61355:tid 61373] [client 20.226.1.243:10182] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/6.php"] [unique_id "af4xp_khJTi30CBXmMlq3QAAAYw"]
[Sat May 09 02:55:37.572697 2026] [:error] [pid 61317:tid 61340] [client 20.226.1.243:10231] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "af4xqc-fFk_CedOCOYsjSgAAAVQ"]
[Sat May 09 02:55:39.294347 2026] [:error] [pid 61317:tid 61337] [client 20.226.1.243:10036] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class.php"] [unique_id "af4xq8-fFk_CedOCOYsjUwAAAVE"]
[Sat May 09 02:55:40.561085 2026] [proxy_fcgi:error] [pid 61317:tid 61327] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:40.888292 2026] [proxy_fcgi:error] [pid 61317:tid 61340] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:42.207814 2026] [proxy_fcgi:error] [pid 61317:tid 61322] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:42.537587 2026] [proxy_fcgi:error] [pid 61317:tid 61336] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:43.052039 2026] [proxy_fcgi:error] [pid 61317:tid 61326] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:43.382103 2026] [proxy_fcgi:error] [pid 61317:tid 61343] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:43.725681 2026] [proxy_fcgi:error] [pid 61317:tid 61340] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:44.051457 2026] [proxy_fcgi:error] [pid 61317:tid 61321] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:44.395614 2026] [proxy_fcgi:error] [pid 61317:tid 61332] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:44.862987 2026] [proxy_fcgi:error] [pid 61317:tid 61341] [client 20.226.1.243:10120] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:55:45.184465 2026] [:error] [pid 61317:tid 61326] [client 20.226.1.243:10120] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "af4xsc-fFk_CedOCOYsjbAAAAUY"]
[Sat May 09 02:55:46.767218 2026] [:error] [pid 61355:tid 61382] [client 20.226.1.243:10044] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "af4xsvkhJTi30CBXmMlrDQAAAZU"]
[Sat May 09 02:55:47.970897 2026] [:error] [pid 51008:tid 51067] [client 20.226.1.243:10069] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "af4xs3B58C2Y1tgLtuLwgQAAAFI"]
[Sat May 09 02:55:49.107284 2026] [:error] [pid 61355:tid 61369] [client 20.226.1.243:10127] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fvvff.php"] [unique_id "af4xtfkhJTi30CBXmMlrFgAAAYg"]
[Sat May 09 02:55:51.435021 2026] [:error] [pid 34318:tid 34332] [client 20.226.1.243:10090] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "af4xt8r3guirgJiKhzATPwAAAQw"]
[Sat May 09 02:55:52.691988 2026] [:error] [pid 61317:tid 61338] [client 20.226.1.243:10179] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "af4xuM-fFk_CedOCOYsjgAAAAVI"]
[Sat May 09 02:55:55.636114 2026] [:error] [pid 51008:tid 51054] [client 20.226.1.243:10064] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "af4xu3B58C2Y1tgLtuLwgwAAAEU"]
[Sat May 09 02:55:56.693989 2026] [:error] [pid 51007:tid 51024] [client 20.226.1.243:10220] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "af4xvFMagSGstWKyzzUsEAAAAAI"]
[Sat May 09 02:55:58.592378 2026] [:error] [pid 61355:tid 61370] [client 20.226.1.243:10023] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "af4xvvkhJTi30CBXmMlrKgAAAYk"]
[Sat May 09 02:56:00.993529 2026] [:error] [pid 51009:tid 51090] [client 20.226.1.243:10111] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "af4xwOB0GbUWhxgzX9WywAAAAI4"]
[Sat May 09 02:56:02.575429 2026] [:error] [pid 34318:tid 34324] [client 20.226.1.243:10236] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "af4xwsr3guirgJiKhzATRgAAAQQ"]
[Sat May 09 02:56:05.442784 2026] [:error] [pid 51009:tid 51099] [client 20.226.1.243:10207] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/admin.php"] [unique_id "af4xxeB0GbUWhxgzX9WyxgAAAJc"]
[Sat May 09 02:56:06.464931 2026] [:error] [pid 51008:tid 51061] [client 20.226.1.243:10017] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "af4xxnB58C2Y1tgLtuLwkgAAAEw"]
[Sat May 09 02:56:07.556743 2026] [:error] [pid 51009:tid 51093] [client 20.226.1.243:10199] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "af4xx-B0GbUWhxgzX9WyygAAAJE"]
[Sat May 09 02:56:09.011443 2026] [:error] [pid 61317:tid 61338] [client 20.226.1.243:10122] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "af4xyc-fFk_CedOCOYsjlAAAAVI"]
[Sat May 09 02:56:10.526329 2026] [:error] [pid 61355:tid 61362] [client 20.226.1.243:10188] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "af4xyvkhJTi30CBXmMlrMAAAAYE"]
[Sat May 09 02:56:12.865897 2026] [:error] [pid 61355:tid 61377] [client 20.226.1.243:10005] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "af4xzPkhJTi30CBXmMlrOAAAAZA"]
[Sat May 09 02:56:14.508928 2026] [:error] [pid 51007:tid 51040] [client 20.226.1.243:10210] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "af4xzlMagSGstWKyzzUsGQAAABI"]
[Sat May 09 02:56:15.568680 2026] [:error] [pid 61317:tid 61334] [client 20.226.1.243:10213] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "af4xz8-fFk_CedOCOYsjnQAAAU4"]
[Sat May 09 02:56:16.451988 2026] [:error] [pid 51009:tid 51086] [client 20.226.1.243:10184] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "af4x0OB0GbUWhxgzX9Wy6gAAAIo"]
[Sat May 09 02:56:17.587949 2026] [:error] [pid 34318:tid 34330] [client 20.226.1.243:10039] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "af4x0cr3guirgJiKhzATUwAAAQo"]
[Sat May 09 02:56:18.987613 2026] [:error] [pid 51008:tid 51069] [client 20.226.1.243:10181] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "af4x0nB58C2Y1tgLtuLwnQAAAFQ"]
[Sat May 09 02:56:19.951821 2026] [:error] [pid 51009:tid 51094] [client 20.226.1.243:9955] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "af4x0-B0GbUWhxgzX9Wy7wAAAJI"]
[Sat May 09 02:56:21.483366 2026] [:error] [pid 61355:tid 61369] [client 20.226.1.243:10013] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f6.php"] [unique_id "af4x1fkhJTi30CBXmMlrRwAAAYg"]
[Sat May 09 02:56:23.058408 2026] [:error] [pid 51009:tid 51086] [client 20.226.1.243:10118] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "af4x1-B0GbUWhxgzX9Wy8wAAAIo"]
[Sat May 09 02:56:24.778569 2026] [:error] [pid 61317:tid 61330] [client 20.226.1.243:10195] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "af4x2M-fFk_CedOCOYsjqwAAAUo"]
[Sat May 09 02:56:26.771654 2026] [:error] [pid 51008:tid 51057] [client 20.226.1.243:10034] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "af4x2nB58C2Y1tgLtuLwoQAAAEg"]
[Sat May 09 02:56:28.373673 2026] [:error] [pid 61355:tid 61368] [client 20.226.1.243:10149] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "af4x3PkhJTi30CBXmMlrXAAAAYc"]
[Sat May 09 02:56:32.021837 2026] [:error] [pid 61355:tid 61372] [client 20.226.1.243:10150] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "af4x4PkhJTi30CBXmMlrYwAAAYs"]
[Sat May 09 02:56:33.772214 2026] [:error] [pid 34318:tid 34330] [client 20.226.1.243:10180] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "af4x4cr3guirgJiKhzATYAAAAQo"]
[Sat May 09 02:56:36.820557 2026] [:error] [pid 61317:tid 61341] [client 20.226.1.243:10230] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "af4x5M-fFk_CedOCOYsjswAAAVU"]
[Sat May 09 02:56:38.161825 2026] [:error] [pid 51007:tid 51030] [client 20.226.1.243:10206] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "af4x5lMagSGstWKyzzUsJQAAAAg"]
[Sat May 09 02:56:39.884495 2026] [:error] [pid 61317:tid 61342] [client 20.226.1.243:10075] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af4x58-fFk_CedOCOYsjvQAAAVY"]
[Sat May 09 02:56:41.329590 2026] [:error] [pid 61317:tid 61335] [client 20.226.1.243:10196] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "af4x6c-fFk_CedOCOYsjxAAAAU8"]
[Sat May 09 02:56:44.807943 2026] [proxy_fcgi:error] [pid 51007:tid 51028] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:45.133384 2026] [proxy_fcgi:error] [pid 51007:tid 51026] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:45.783345 2026] [proxy_fcgi:error] [pid 51007:tid 51038] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:46.108154 2026] [proxy_fcgi:error] [pid 51007:tid 51022] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:47.111231 2026] [proxy_fcgi:error] [pid 51007:tid 51043] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:47.435886 2026] [proxy_fcgi:error] [pid 51007:tid 51042] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:47.763487 2026] [proxy_fcgi:error] [pid 51007:tid 51034] [client 20.226.1.243:10132] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:56:48.108299 2026] [:error] [pid 51007:tid 51028] [client 20.226.1.243:10132] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "af4x8FMagSGstWKyzzUsQwAAAAY"]
[Sat May 09 02:56:51.007490 2026] [:error] [pid 61355:tid 61380] [client 20.226.1.243:10190] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "af4x8_khJTi30CBXmMlrhwAAAZM"]
[Sat May 09 02:56:52.589903 2026] [:error] [pid 34318:tid 34344] [client 20.226.1.243:10211] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "af4x9Mr3guirgJiKhzATcAAAARg"]
[Sat May 09 02:56:54.906994 2026] [:error] [pid 34318:tid 34330] [client 20.226.1.243:10068] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "af4x9sr3guirgJiKhzATcwAAAQo"]
[Sat May 09 02:56:56.769134 2026] [:error] [pid 61355:tid 61375] [client 20.226.1.243:10019] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "af4x-PkhJTi30CBXmMlrlgAAAY4"]
[Sat May 09 02:56:58.934359 2026] [:error] [pid 61355:tid 61374] [client 20.226.1.243:10148] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "af4x-vkhJTi30CBXmMlrmgAAAY0"]
[Sat May 09 02:57:00.312963 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10194] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "af4x_OB0GbUWhxgzX9WzFAAAAIc"]
[Sat May 09 02:57:02.868534 2026] [:error] [pid 51007:tid 51028] [client 20.226.1.243:10219] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "af4x_lMagSGstWKyzzUsSQAAAAY"]
[Sat May 09 02:57:04.262828 2026] [:error] [pid 51007:tid 51026] [client 20.226.1.243:10137] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "af4yAFMagSGstWKyzzUsSwAAAAQ"]
[Sat May 09 02:57:06.303553 2026] [:error] [pid 51113:tid 51123] [client 20.226.1.243:10238] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "af4yAkQfs7sWtqkpQIeoggAAAMg"]
[Sat May 09 02:57:07.967018 2026] [:error] [pid 51009:tid 51095] [client 20.226.1.243:10233] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "af4yA-B0GbUWhxgzX9WzGwAAAJM"]
[Sat May 09 02:57:09.089076 2026] [:error] [pid 51009:tid 51097] [client 20.226.1.243:10193] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fff.php"] [unique_id "af4yBeB0GbUWhxgzX9WzHwAAAJU"]
[Sat May 09 02:57:11.204137 2026] [:error] [pid 51113:tid 51115] [client 20.226.1.243:10228] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "af4yB0Qfs7sWtqkpQIeogwAAAMA"]
[Sat May 09 02:57:12.710884 2026] [:error] [pid 34318:tid 34321] [client 20.226.1.243:10169] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "af4yCMr3guirgJiKhzATkgAAAQE"]
[Sat May 09 02:57:13.654145 2026] [:error] [pid 34318:tid 34325] [client 20.226.1.243:10037] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "af4yCcr3guirgJiKhzATmAAAAQU"]
[Sat May 09 02:57:14.979661 2026] [:error] [pid 34318:tid 34334] [client 20.226.1.243:10147] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/makeasmtp.php"] [unique_id "af4yCsr3guirgJiKhzATowAAAQ4"]
[Sat May 09 02:57:16.530981 2026] [:error] [pid 51009:tid 51084] [client 20.226.1.243:10208] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "af4yDOB0GbUWhxgzX9WzOQAAAIg"]
[Sat May 09 02:57:17.546198 2026] [:error] [pid 51009:tid 51093] [client 20.226.1.243:10173] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "af4yDeB0GbUWhxgzX9WzPAAAAJE"]
[Sat May 09 02:57:20.550716 2026] [:error] [pid 61356:tid 61407] [client 20.226.1.243:10189] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "af4yEIx3vpB8oWhUq2NUNAAAAdM"]
[Sat May 09 02:57:22.477753 2026] [:error] [pid 34318:tid 34331] [client 20.226.1.243:10138] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "af4yEsr3guirgJiKhzATuAAAAQs"]
[Sat May 09 02:57:23.678167 2026] [:error] [pid 51007:tid 51023] [client 20.226.1.243:10116] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "af4yE1MagSGstWKyzzUsZgAAAAE"]
[Sat May 09 02:57:25.486337 2026] [:error] [pid 51007:tid 51042] [client 20.226.1.243:10175] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "af4yFVMagSGstWKyzzUsaAAAABQ"]
[Sat May 09 02:57:26.452375 2026] [:error] [pid 34318:tid 34323] [client 20.226.1.243:10191] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "af4yFsr3guirgJiKhzATwwAAAQM"]
[Sat May 09 02:57:28.066308 2026] [:error] [pid 51113:tid 51126] [client 20.226.1.243:10119] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "af4yGEQfs7sWtqkpQIeoogAAAMs"]
[Sat May 09 02:57:29.096527 2026] [:error] [pid 51007:tid 51026] [client 20.226.1.243:10128] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af4yGVMagSGstWKyzzUsbAAAAAQ"]
[Sat May 09 02:57:30.075478 2026] [:error] [pid 51007:tid 51044] [client 20.226.1.243:10010] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af4yGlMagSGstWKyzzUsbwAAABY"]
[Sat May 09 02:57:31.051920 2026] [:error] [pid 51008:tid 51064] [client 20.226.1.243:10162] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af4yG3B58C2Y1tgLtuLwyQAAAE8"]
[Sat May 09 02:57:31.878933 2026] [:error] [pid 34318:tid 34325] [client 20.226.1.243:10204] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af4yG8r3guirgJiKhzAT2AAAAQU"]
[Sat May 09 02:57:32.723129 2026] [:error] [pid 61317:tid 61341] [client 20.226.1.243:10074] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "af4yHM-fFk_CedOCOYskCQAAAVU"]
[Sat May 09 02:57:33.951456 2026] [:error] [pid 34318:tid 34333] [client 20.226.1.243:10218] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "af4yHcr3guirgJiKhzAT4QAAAQ0"]
[Sat May 09 02:57:35.050555 2026] [:error] [pid 61356:tid 61392] [client 20.226.1.243:10135] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "af4yH4x3vpB8oWhUq2NUQQAAAcQ"]
[Sat May 09 02:57:36.254574 2026] [:error] [pid 51009:tid 51083] [client 20.226.1.243:10167] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "af4yIOB0GbUWhxgzX9WzYQAAAIc"]
[Sat May 09 02:57:38.448268 2026] [:error] [pid 51009:tid 51085] [client 20.226.1.243:10158] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "af4yIuB0GbUWhxgzX9WzYgAAAIk"]
[Sat May 09 02:57:39.847807 2026] [:error] [pid 61317:tid 61325] [client 20.226.1.243:10079] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "af4yI8-fFk_CedOCOYskDAAAAUU"]
[Sat May 09 02:57:40.833998 2026] [:error] [pid 61356:tid 61393] [client 20.226.1.243:10156] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "af4yJIx3vpB8oWhUq2NUTwAAAcU"]
[Sat May 09 02:57:42.069096 2026] [:error] [pid 51007:tid 51027] [client 20.226.1.243:10154] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "af4yJlMagSGstWKyzzUsdgAAAAU"]
[Sat May 09 02:57:43.137565 2026] [:error] [pid 61356:tid 61405] [client 20.226.1.243:10140] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af4yJ4x3vpB8oWhUq2NUUQAAAdE"]
[Sat May 09 02:57:45.178534 2026] [:error] [pid 61356:tid 61400] [client 20.226.1.243:10117] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af4yKYx3vpB8oWhUq2NUWQAAAcw"]
[Sat May 09 02:57:46.264195 2026] [:error] [pid 51009:tid 51081] [client 20.226.1.243:10136] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "af4yKuB0GbUWhxgzX9WzcgAAAIU"]
[Sat May 09 02:57:48.536709 2026] [proxy_fcgi:error] [pid 51009:tid 51086] [client 20.226.1.243:10225] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:57:48.882616 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 20.226.1.243:10225] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:57:49.242991 2026] [proxy_fcgi:error] [pid 51009:tid 51085] [client 20.226.1.243:10225] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:57:49.911479 2026] [:error] [pid 51009:tid 51095] [client 20.226.1.243:10225] [client 20.226.1.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "af4yLeB0GbUWhxgzX9WzewAAAJM"]
[Sat May 09 02:57:51.555068 2026] [proxy_fcgi:error] [pid 51008:tid 51065] [client 20.226.1.243:10215] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:57:52.728580 2026] [proxy_fcgi:error] [pid 51008:tid 51061] [client 20.226.1.243:10215] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:57:53.377507 2026] [:error] [pid 51008:tid 51053] [client 20.226.1.243:10215] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "af4yMXB58C2Y1tgLtuLw5QAAAEQ"]
[Sat May 09 02:57:54.527379 2026] [:error] [pid 51009:tid 51090] [client 20.226.1.243:10112] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "af4yMuB0GbUWhxgzX9WzfgAAAI4"]
[Sat May 09 02:57:55.769598 2026] [:error] [pid 51008:tid 51070] [client 20.226.1.243:9868] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "af4yM3B58C2Y1tgLtuLw5wAAAFU"]
[Sat May 09 02:57:57.261494 2026] [:error] [pid 61355:tid 61367] [client 20.226.1.243:10002] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bs1.php"] [unique_id "af4yNfkhJTi30CBXmMlrywAAAYY"]
[Sat May 09 02:57:59.074756 2026] [:error] [pid 51113:tid 51120] [client 20.226.1.243:10038] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "af4yN0Qfs7sWtqkpQIeorgAAAMU"]
[Sat May 09 02:58:01.450680 2026] [:error] [pid 61356:tid 61404] [client 20.226.1.243:10051] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "af4yOYx3vpB8oWhUq2NUcwAAAdA"]
[Sat May 09 02:58:03.599992 2026] [:error] [pid 61356:tid 61410] [client 20.226.1.243:10073] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "af4yO4x3vpB8oWhUq2NUeAAAAdY"]
[Sat May 09 02:58:04.608633 2026] [:error] [pid 61356:tid 61388] [client 20.226.1.243:10217] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "af4yPIx3vpB8oWhUq2NUewAAAcA"]
[Sat May 09 02:58:05.950476 2026] [:error] [pid 61317:tid 61344] [client 20.226.1.243:10216] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "af4yPc-fFk_CedOCOYskJwAAAVg"]
[Sat May 09 02:58:06.877526 2026] [:error] [pid 51113:tid 51124] [client 20.226.1.243:9922] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "af4yPkQfs7sWtqkpQIeouQAAAMk"]
[Sat May 09 02:58:08.538185 2026] [:error] [pid 61356:tid 61405] [client 20.226.1.243:10198] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "af4yQIx3vpB8oWhUq2NUfgAAAdE"]
[Sat May 09 02:58:09.870052 2026] [:error] [pid 61356:tid 61395] [client 20.226.1.243:10058] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gettest.php"] [unique_id "af4yQYx3vpB8oWhUq2NUgwAAAcc"]
[Sat May 09 02:58:11.090957 2026] [:error] [pid 51008:tid 51060] [client 20.226.1.243:10235] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af4yQ3B58C2Y1tgLtuLw9AAAAEs"]
[Sat May 09 02:58:12.559372 2026] [:error] [pid 61317:tid 61337] [client 20.226.1.243:10155] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af4yRM-fFk_CedOCOYskMgAAAVE"]
[Sat May 09 02:58:13.613536 2026] [:error] [pid 51009:tid 51093] [client 20.226.1.243:10070] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af4yReB0GbUWhxgzX9WzjAAAAJE"]
[Sat May 09 02:58:14.858364 2026] [:error] [pid 34318:tid 34333] [client 20.226.1.243:10134] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "af4yRsr3guirgJiKhzAUFAAAAQ0"]
[Sat May 09 02:58:15.944780 2026] [:error] [pid 61355:tid 61365] [client 20.226.1.243:10049] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "af4yR_khJTi30CBXmMlr2AAAAYQ"]
[Sat May 09 02:58:17.259210 2026] [:error] [pid 51008:tid 51056] [client 20.226.1.243:10059] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "af4ySXB58C2Y1tgLtuLw_QAAAEc"]
[Sat May 09 02:58:18.819020 2026] [:error] [pid 61355:tid 61372] [client 20.226.1.243:10080] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "af4ySvkhJTi30CBXmMlr4gAAAYs"]
[Sat May 09 02:58:20.096775 2026] [:error] [pid 51007:tid 51043] [client 20.226.1.243:10209] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/"] [unique_id "af4yTFMagSGstWKyzzUshgAAABU"]
[Sat May 09 02:58:21.472404 2026] [:error] [pid 34318:tid 34342] [client 20.226.1.243:10105] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "af4yTcr3guirgJiKhzAUGwAAARY"]
[Sat May 09 02:58:23.202652 2026] [:error] [pid 51009:tid 51084] [client 20.226.1.243:9956] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "af4yT-B0GbUWhxgzX9WzkwAAAIg"]
[Sat May 09 02:58:24.101698 2026] [:error] [pid 51009:tid 51094] [client 20.226.1.243:10159] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "af4yUOB0GbUWhxgzX9WzlwAAAJI"]
[Sat May 09 02:58:26.797510 2026] [:error] [pid 51009:tid 51077] [client 20.226.1.243:10085] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/simple.php"] [unique_id "af4yUuB0GbUWhxgzX9WzpwAAAIE"]
[Sat May 09 02:58:28.334073 2026] [:error] [pid 61356:tid 61401] [client 20.226.1.243:10163] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buy.php"] [unique_id "af4yVIx3vpB8oWhUq2NUmwAAAc0"]
[Sat May 09 02:58:31.585431 2026] [:error] [pid 51007:tid 51030] [client 20.226.1.243:10065] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buy.php"] [unique_id "af4yV1MagSGstWKyzzUslgAAAAg"]
[Sat May 09 02:58:33.068813 2026] [:error] [pid 51009:tid 51100] [client 20.226.1.243:10113] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buy.php"] [unique_id "af4yWeB0GbUWhxgzX9WzsAAAAJg"]
[Sat May 09 02:58:34.865499 2026] [:error] [pid 51008:tid 51052] [client 20.226.1.243:10234] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/buy.php"] [unique_id "af4yWnB58C2Y1tgLtuLxCgAAAEM"]
[Sat May 09 02:58:35.937667 2026] [:error] [pid 61355:tid 61372] [client 20.226.1.243:9988] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "af4yW_khJTi30CBXmMlr-QAAAYs"]
[Sat May 09 02:58:37.468614 2026] [:error] [pid 51009:tid 51099] [client 20.226.1.243:10018] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "af4yXeB0GbUWhxgzX9WzsQAAAJc"]
[Sat May 09 02:58:38.417285 2026] [:error] [pid 51007:tid 51040] [client 20.226.1.243:10177] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "af4yXlMagSGstWKyzzUsnwAAABI"]
[Sat May 09 02:58:40.328951 2026] [:error] [pid 51007:tid 51034] [client 20.226.1.243:10171] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xxx.php"] [unique_id "af4yYFMagSGstWKyzzUsoQAAAAw"]
[Sat May 09 02:58:41.591505 2026] [:error] [pid 61356:tid 61406] [client 20.226.1.243:10115] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "af4yYYx3vpB8oWhUq2NUsAAAAdI"]
[Sat May 09 02:58:45.769141 2026] [:error] [pid 51009:tid 51077] [client 20.226.1.243:10174] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "af4yZeB0GbUWhxgzX9WzuAAAAIE"]
[Sat May 09 02:58:47.129899 2026] [:error] [pid 51007:tid 51027] [client 20.226.1.243:10172] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "af4yZ1MagSGstWKyzzUspwAAAAU"]
[Sat May 09 02:58:48.669893 2026] [:error] [pid 61356:tid 61395] [client 20.226.1.243:10143] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/hypo.php"] [unique_id "af4yaIx3vpB8oWhUq2NUwAAAAcc"]
[Sat May 09 02:58:49.663968 2026] [:error] [pid 51009:tid 51095] [client 20.226.1.243:9989] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "af4yaeB0GbUWhxgzX9WzwAAAAJM"]
[Sat May 09 02:58:50.555245 2026] [:error] [pid 51009:tid 51092] [client 20.226.1.243:10062] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "af4yauB0GbUWhxgzX9WzxQAAAJA"]
[Sat May 09 02:58:52.648262 2026] [:error] [pid 51009:tid 51082] [client 20.226.1.243:10124] [client 20.226.1.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "af4ybOB0GbUWhxgzX9WzzAAAAIY"]
[Sat May 09 02:58:54.103998 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 20.226.1.243:10232] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:58:54.755471 2026] [proxy_fcgi:error] [pid 61355:tid 61365] [client 20.226.1.243:10232] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:00:22.132950 2026] [:error] [pid 9187:tid 9257] [client 45.130.83.114:50433] [client 45.130.83.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.114, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af5A1hC7An6gkXsRsaG4qgAAAIQ"]
[Sat May 09 04:00:22.164112 2026] [proxy_fcgi:error] [pid 9187:tid 9257] [client 45.130.83.114:50433] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:28:06.345033 2026] [:error] [pid 9920:tid 9924] [client 209.87.169.151:28823] [client 209.87.169.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.151, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af5HVkxitGYhlzgZb5ZDewAAAcI"], referer: https://t.co/
[Sat May 09 04:28:06.355312 2026] [proxy_fcgi:error] [pid 9920:tid 9924] [client 209.87.169.151:28823] AH01071: Got error 'Primary script unknown', referer: https://t.co/
[Sat May 09 04:28:11.499743 2026] [:error] [pid 9186:tid 9245] [client 45.131.195.127:55577] [client 45.131.195.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.127, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af5HWxW4eFOEw1mKOgJneQAAAFM"]
[Sat May 09 04:28:11.505607 2026] [proxy_fcgi:error] [pid 9186:tid 9245] [client 45.131.195.127:55577] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:04.486388 2026] [proxy_fcgi:error] [pid 9833:tid 9850] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:04.964297 2026] [proxy_fcgi:error] [pid 9833:tid 9848] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:05.386628 2026] [proxy_fcgi:error] [pid 9833:tid 9854] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:05.597566 2026] [proxy_fcgi:error] [pid 9833:tid 9840] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:06.014590 2026] [proxy_fcgi:error] [pid 9833:tid 9847] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:06.224045 2026] [proxy_fcgi:error] [pid 9833:tid 9858] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:06.432432 2026] [proxy_fcgi:error] [pid 9833:tid 9861] [client 20.220.146.147:12127] AH01071: Got error 'Primary script unknown'
[Sat May 09 05:22:06.847027 2026] [:error] [pid 9833:tid 9845] [client 20.220.146.147:12127] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5T_iM9JmxIS0KGZUAvOAAAAYc"]
[Sat May 09 05:22:07.669136 2026] [:error] [pid 9293:tid 9313] [client 20.220.146.147:12101] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5T_5R__qEzV5O6Z2O74QAAANA"]
[Sat May 09 05:22:08.522138 2026] [:error] [pid 9833:tid 9839] [client 20.220.146.147:12043] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5UACM9JmxIS0KGZUAvOwAAAYE"]
[Sat May 09 05:22:09.358833 2026] [:error] [pid 9184:tid 9201] [client 20.220.146.147:12061] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5UAYjfODqb_i0Fm99XiQAAAAQ"]
[Sat May 09 14:13:07.566819 2026] [:error] [pid 9760:tid 9781] [client 34.19.44.124:57436] [client 34.19.44.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.44.124, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "af7Qc2IkCp-C_fh0s7I8VgAAAU8"]
[Sat May 09 14:13:07.579408 2026] [proxy_fcgi:error] [pid 9760:tid 9781] [client 34.19.44.124:57436] AH01071: Got error 'Primary script unknown'
[Sat May 09 14:13:10.398023 2026] [:error] [pid 9760:tid 9782] [client 34.19.44.124:57436] [client 34.19.44.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af7QdmIkCp-C_fh0s7I8aAAAAVA"]
[Sat May 09 14:13:11.057532 2026] [:error] [pid 9187:tid 9271] [client 34.19.44.124:49819] [client 34.19.44.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af7QdxC7An6gkXsRsaF9owAAAJI"]
[Sat May 09 14:13:11.503327 2026] [:error] [pid 9920:tid 9932] [client 34.19.44.124:55521] [client 34.19.44.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af7Qd0xitGYhlzgZb5bSWwAAAco"]
[Sun May 10 03:55:46.472418 2026] [:error] [pid 62803:tid 62865] [client 104.234.53.177:34469] [client 104.234.53.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.177, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af-RQk5oy4jU7eVtNaXf3wAAAIE"]
[Sun May 10 03:55:46.503312 2026] [proxy_fcgi:error] [pid 62803:tid 62865] [client 104.234.53.177:34469] AH01071: Got error 'Primary script unknown'
[Sun May 10 04:38:10.852918 2026] [:error] [pid 62910:tid 62919] [client 157.245.151.95:53774] [client 157.245.151.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.151.95, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af-bMt5YAy_h5VqgWqhOEwAAAMc"]
[Sun May 10 04:38:10.863350 2026] [proxy_fcgi:error] [pid 62910:tid 62919] [client 157.245.151.95:53774] AH01071: Got error 'Primary script unknown'
[Sun May 10 04:38:12.952137 2026] [:error] [pid 62910:tid 62914] [client 157.245.151.95:53766] [client 157.245.151.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.151.95, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "af-bNN5YAy_h5VqgWqhOHgAAAMI"]
[Sun May 10 04:38:12.955878 2026] [proxy_fcgi:error] [pid 62910:tid 62914] [client 157.245.151.95:53766] AH01071: Got error 'Primary script unknown'
[Sun May 10 07:23:44.842527 2026] [:error] [pid 62802:tid 62837] [client 34.17.129.224:57858] [client 34.17.129.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "af_CAKt9wnaRe0v-MkbQBgAAAEA"]
[Sun May 10 07:49:52.061903 2026] [:error] [pid 46331:tid 46370] [client 34.18.12.184:36472] [client 34.18.12.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "af_IIAP02hpYETwsZpgPFwAAAIY"]
[Mon May 11 03:27:25.420367 2026] [:error] [pid 16038:tid 16068] [client 185.169.4.152:59732] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "agDcHU4hf5Tcsfa2scKRJgAAAYA"], referer: binance.com
[Tue May 12 00:09:21.128392 2026] [:error] [pid 58616:tid 58647] [client 34.118.104.12:55010] [client 34.118.104.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agH_MdnsbeF5ioCAecj9LQAAAME"]
[Tue May 12 00:59:03.791412 2026] [:error] [pid 58616:tid 58668] [client 34.116.172.191:44168] [client 34.116.172.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agIK19nsbeF5ioCAecgBJAAAANY"]
[Tue May 12 00:59:16.466420 2026] [:error] [pid 4685:tid 4690] [client 34.118.123.171:54374] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.local"] [unique_id "agIK5HwrjbU4NZilCZ85ggAAAQI"]
[Tue May 12 00:59:16.502493 2026] [:error] [pid 4685:tid 4703] [client 34.118.123.171:54386] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env"] [unique_id "agIK5HwrjbU4NZilCZ85gwAAAQ8"]
[Tue May 12 00:59:16.505732 2026] [:error] [pid 58750:tid 58761] [client 34.118.123.171:54400] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/admin/.env"] [unique_id "agIK5DBVaNG3wJtPBU_HEAAAAUk"]
[Tue May 12 00:59:16.506700 2026] [:error] [pid 58616:tid 58650] [client 34.118.123.171:54380] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.development.local"] [unique_id "agIK5NnsbeF5ioCAecgBLQAAAMQ"]
[Tue May 12 00:59:16.518616 2026] [:error] [pid 4645:tid 4670] [client 34.118.123.171:54408] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.dev.local"] [unique_id "agIK5Hy4dxn8-Cx5vOXk2gAAAFY"]
[Tue May 12 00:59:16.534603 2026] [:error] [pid 58677:tid 58711] [client 34.118.123.171:54418] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.dev"] [unique_id "agIK5BasRhyteIXf1RWI9wAAAJc"]
[Tue May 12 00:59:16.818821 2026] [:error] [pid 4645:tid 4672] [client 34.118.123.171:54428] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.env.docker"] [unique_id "agIK5Hy4dxn8-Cx5vOXk2wAAAFg"]
[Tue May 12 00:59:16.992432 2026] [:error] [pid 4685:tid 4695] [client 34.118.123.171:54434] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/app/.env"] [unique_id "agIK5HwrjbU4NZilCZ85hAAAAQc"]
[Tue May 12 00:59:17.129805 2026] [:error] [pid 4685:tid 4691] [client 34.118.123.171:54448] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/api/.env"] [unique_id "agIK5XwrjbU4NZilCZ85hQAAAQM"]
[Tue May 12 00:59:17.146130 2026] [:error] [pid 4645:tid 4654] [client 34.118.123.171:54454] [client 34.118.123.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/app/.env.local"] [unique_id "agIK5Xy4dxn8-Cx5vOXk3AAAAEY"]
[Tue May 12 02:20:21.440608 2026] [:error] [pid 4685:tid 4706] [client 8.228.107.206:46992] [client 8.228.107.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agId5XwrjbU4NZilCZ9InQAAARI"]
[Tue May 12 03:27:16.378658 2026] [:error] [pid 39956:tid 39978] [client 34.17.22.243:39238] [client 34.17.22.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agItlI2K3wZDsNji3My4hwAAAA0"]
[Tue May 12 05:09:02.749853 2026] [:error] [pid 39956:tid 39985] [client 176.65.139.231:48318] [client 176.65.139.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "agJFbo2K3wZDsNji3MzAhgAAABQ"]
[Wed May 13 08:50:16.162140 2026] [proxy_fcgi:error] [pid 23787:tid 23853] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:16.478048 2026] [proxy_fcgi:error] [pid 23787:tid 23861] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:16.794290 2026] [proxy_fcgi:error] [pid 23787:tid 23867] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:17.110772 2026] [proxy_fcgi:error] [pid 23787:tid 23866] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:17.428996 2026] [proxy_fcgi:error] [pid 23787:tid 23871] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:17.750469 2026] [proxy_fcgi:error] [pid 23787:tid 23860] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:18.068026 2026] [proxy_fcgi:error] [pid 23787:tid 23858] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:18.387186 2026] [proxy_fcgi:error] [pid 23787:tid 23865] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:18.722711 2026] [proxy_fcgi:error] [pid 23787:tid 23851] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:19.041013 2026] [proxy_fcgi:error] [pid 23787:tid 23872] [client 20.195.185.204:18617] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:50:19.357783 2026] [:error] [pid 23787:tid 23862] [client 20.195.185.204:18617] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "agPKyx1cs5wE7VT6wiq3-wAAAI4"]
[Wed May 13 08:50:20.017944 2026] [:error] [pid 23887:tid 23901] [client 20.195.185.204:46860] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "agPKzNSKmvZJZkXBFDAfeAAAAMY"]
[Wed May 13 08:50:20.720431 2026] [:error] [pid 23787:tid 23867] [client 20.195.185.204:46856] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "agPKzB1cs5wE7VT6wiq3_gAAAJM"]
[Wed May 13 08:50:21.383084 2026] [:error] [pid 23787:tid 23850] [client 20.195.185.204:46889] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/albin.php"] [unique_id "agPKzR1cs5wE7VT6wiq4AAAAAII"]
[Wed May 13 08:50:22.033365 2026] [:error] [pid 23887:tid 23904] [client 20.195.185.204:18619] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "agPKztSKmvZJZkXBFDAfewAAAMk"]
[Wed May 13 08:50:22.660723 2026] [:error] [pid 23782:tid 23823] [client 20.195.185.204:18621] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "agPKziBrKFYHXUGnR-qMdwAAAEI"]
[Wed May 13 08:50:23.301983 2026] [:error] [pid 23782:tid 23833] [client 20.195.185.204:24406] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "agPKzyBrKFYHXUGnR-qMeQAAAEw"]
[Wed May 13 08:50:23.928862 2026] [:error] [pid 23887:tid 23918] [client 20.195.185.204:49659] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sbhu.php"] [unique_id "agPKz9SKmvZJZkXBFDAffgAAANc"]
[Wed May 13 08:50:24.582551 2026] [:error] [pid 23887:tid 23907] [client 20.195.185.204:46237] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "agPK0NSKmvZJZkXBFDAfgwAAAMw"]
[Wed May 13 08:50:25.228661 2026] [:error] [pid 23787:tid 23859] [client 20.195.185.204:49636] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "agPK0R1cs5wE7VT6wiq4BAAAAIs"]
[Wed May 13 08:50:25.859797 2026] [:error] [pid 23787:tid 23868] [client 20.195.185.204:46220] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "agPK0R1cs5wE7VT6wiq4BQAAAJQ"]
[Wed May 13 08:50:26.495708 2026] [:error] [pid 23887:tid 23902] [client 20.195.185.204:49606] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xda.php"] [unique_id "agPK0tSKmvZJZkXBFDAfiAAAAMc"]
[Wed May 13 08:50:27.142320 2026] [:error] [pid 23887:tid 23906] [client 20.195.185.204:24418] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "agPK09SKmvZJZkXBFDAfiQAAAMs"]
[Wed May 13 08:50:27.770507 2026] [:error] [pid 23782:tid 23829] [client 20.195.185.204:24448] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "agPK0yBrKFYHXUGnR-qMfgAAAEg"]
[Wed May 13 08:50:28.413570 2026] [:error] [pid 23887:tid 23900] [client 20.195.185.204:18595] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "agPK1NSKmvZJZkXBFDAfjgAAAMU"]
[Wed May 13 08:50:29.046593 2026] [:error] [pid 23782:tid 23834] [client 20.195.185.204:18614] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yellow.php"] [unique_id "agPK1SBrKFYHXUGnR-qMhQAAAE0"]
[Wed May 13 08:50:29.696298 2026] [:error] [pid 23887:tid 23907] [client 20.195.185.204:18604] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "agPK1dSKmvZJZkXBFDAfkQAAAMw"]
[Wed May 13 08:50:30.494468 2026] [:error] [pid 23787:tid 23857] [client 20.195.185.204:46878] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "agPK1h1cs5wE7VT6wiq4CQAAAIk"]
[Wed May 13 08:50:31.165501 2026] [:error] [pid 3259:tid 3263] [client 20.195.185.204:18591] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "agPK1-WJB4YwcPVLeAqqAwAAAQI"]
[Wed May 13 08:50:31.826059 2026] [:error] [pid 23887:tid 23917] [client 20.195.185.204:46222] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lib.php"] [unique_id "agPK19SKmvZJZkXBFDAfmQAAANY"]
[Wed May 13 08:50:32.497680 2026] [:error] [pid 3259:tid 3261] [client 20.195.185.204:46212] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "agPK2OWJB4YwcPVLeAqqCAAAAQA"]
[Wed May 13 08:50:33.191279 2026] [:error] [pid 23887:tid 23898] [client 20.195.185.204:18572] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "agPK2dSKmvZJZkXBFDAfngAAAMM"]
[Wed May 13 08:50:33.858035 2026] [:error] [pid 23787:tid 23871] [client 20.195.185.204:18600] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "agPK2R1cs5wE7VT6wiq4DQAAAJc"]
[Wed May 13 08:50:34.494774 2026] [:error] [pid 23782:tid 23831] [client 20.195.185.204:47369] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ah25.php"] [unique_id "agPK2iBrKFYHXUGnR-qMiAAAAEo"]
[Wed May 13 08:50:35.223527 2026] [:error] [pid 23887:tid 23903] [client 20.195.185.204:18587] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "agPK29SKmvZJZkXBFDAfrgAAAMg"]
[Wed May 13 08:50:35.881678 2026] [:error] [pid 23887:tid 23918] [client 20.195.185.204:24435] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "agPK29SKmvZJZkXBFDAfsgAAANc"]
[Wed May 13 08:50:36.535489 2026] [:error] [pid 3259:tid 3271] [client 20.195.185.204:46210] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "agPK3OWJB4YwcPVLeAqqDQAAAQo"]
[Wed May 13 08:50:37.169946 2026] [:error] [pid 3259:tid 3266] [client 20.195.185.204:18611] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/revealability.php"] [unique_id "agPK3eWJB4YwcPVLeAqqDgAAAQU"]
[Wed May 13 08:50:37.809837 2026] [:error] [pid 23887:tid 23906] [client 20.195.185.204:24388] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "agPK3dSKmvZJZkXBFDAfuQAAAMs"]
[Wed May 13 08:50:38.435674 2026] [:error] [pid 23887:tid 23915] [client 20.195.185.204:46271] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "agPK3tSKmvZJZkXBFDAfuwAAANQ"]
[Wed May 13 08:50:39.118522 2026] [:error] [pid 23887:tid 23917] [client 20.195.185.204:18623] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "agPK39SKmvZJZkXBFDAfvgAAANY"]
[Wed May 13 08:50:39.777822 2026] [:error] [pid 3259:tid 3285] [client 20.195.185.204:46853] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file4.php"] [unique_id "agPK3-WJB4YwcPVLeAqqFAAAARg"]
[Wed May 13 08:50:40.421815 2026] [:error] [pid 23787:tid 23870] [client 20.195.185.204:47388] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "agPK4B1cs5wE7VT6wiq4FQAAAJY"]
[Wed May 13 08:50:41.088372 2026] [:error] [pid 23787:tid 23857] [client 20.195.185.204:46230] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "agPK4R1cs5wE7VT6wiq4FwAAAIk"]
[Wed May 13 08:50:41.729663 2026] [:error] [pid 23887:tid 23905] [client 20.195.185.204:49649] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "agPK4dSKmvZJZkXBFDAfyQAAAMo"]
[Wed May 13 08:50:42.392355 2026] [:error] [pid 3259:tid 3268] [client 20.195.185.204:46228] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/atomlib.php"] [unique_id "agPK4uWJB4YwcPVLeAqqGwAAAQc"]
[Wed May 13 08:50:43.097033 2026] [:error] [pid 3259:tid 3266] [client 20.195.185.204:46909] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "agPK4-WJB4YwcPVLeAqqHQAAAQU"]
[Wed May 13 08:50:43.749416 2026] [:error] [pid 3259:tid 3278] [client 20.195.185.204:18584] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "agPK4-WJB4YwcPVLeAqqHgAAARE"]
[Wed May 13 08:50:44.419465 2026] [:error] [pid 23787:tid 23859] [client 20.195.185.204:49604] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "agPK5B1cs5wE7VT6wiq4HgAAAIs"]
[Wed May 13 08:50:45.131329 2026] [:error] [pid 3259:tid 3272] [client 20.195.185.204:18612] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file30.php"] [unique_id "agPK5eWJB4YwcPVLeAqqHwAAAQs"]
[Wed May 13 08:50:45.809367 2026] [:error] [pid 3259:tid 3263] [client 20.195.185.204:46269] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "agPK5eWJB4YwcPVLeAqqIwAAAQI"]
[Wed May 13 08:50:46.516869 2026] [:error] [pid 23787:tid 23860] [client 20.195.185.204:46231] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "agPK5h1cs5wE7VT6wiq4IAAAAIw"]
[Wed May 13 08:50:47.287060 2026] [:error] [pid 23780:tid 23816] [client 20.195.185.204:49602] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "agPK53XgOibPjrXgeTBRagAAABY"]
[Wed May 13 08:50:48.179821 2026] [:error] [pid 23782:tid 23836] [client 20.195.185.204:18618] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/forbidals.php"] [unique_id "agPK6CBrKFYHXUGnR-qMkgAAAE8"]
[Wed May 13 08:50:48.860062 2026] [:error] [pid 23887:tid 23916] [client 20.195.185.204:46850] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "agPK6NSKmvZJZkXBFDAf7AAAANU"]
[Wed May 13 08:50:50.141699 2026] [:error] [pid 23787:tid 23848] [client 20.195.185.204:46859] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "agPK6h1cs5wE7VT6wiq4IwAAAIA"]
[Wed May 13 08:50:50.835217 2026] [:error] [pid 23887:tid 23903] [client 20.195.185.204:24408] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "agPK6tSKmvZJZkXBFDAf8QAAAMg"]
[Wed May 13 08:50:51.583529 2026] [:error] [pid 3259:tid 3276] [client 20.195.185.204:46880] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-firewall.php"] [unique_id "agPK6-WJB4YwcPVLeAqqLAAAAQ8"]
[Wed May 13 08:50:52.335788 2026] [:error] [pid 23887:tid 23913] [client 20.195.185.204:46249] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "agPK7NSKmvZJZkXBFDAf9AAAANI"]
[Wed May 13 08:50:53.101542 2026] [:error] [pid 23787:tid 23859] [client 20.195.185.204:46874] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "agPK7R1cs5wE7VT6wiq4KgAAAIs"]
[Wed May 13 08:50:53.859970 2026] [:error] [pid 3259:tid 3283] [client 20.195.185.204:46256] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "agPK7eWJB4YwcPVLeAqqMAAAARY"]
[Wed May 13 08:50:54.522772 2026] [:error] [pid 23887:tid 23912] [client 20.195.185.204:49626] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/shell20211028.php"] [unique_id "agPK7tSKmvZJZkXBFDAf-AAAANE"]
[Wed May 13 08:50:55.164620 2026] [:error] [pid 23887:tid 23900] [client 20.195.185.204:18583] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "agPK79SKmvZJZkXBFDAf-wAAAMU"]
[Wed May 13 08:50:55.863653 2026] [:error] [pid 23887:tid 23918] [client 20.195.185.204:46865] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "agPK79SKmvZJZkXBFDAf_wAAANc"]
[Wed May 13 08:50:56.539742 2026] [:error] [pid 3259:tid 3271] [client 20.195.185.204:46234] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "agPK8OWJB4YwcPVLeAqqOgAAAQo"]
[Wed May 13 08:50:57.213943 2026] [:error] [pid 3259:tid 3279] [client 20.195.185.204:47365] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wuasr.php"] [unique_id "agPK8eWJB4YwcPVLeAqqPgAAARI"]
[Wed May 13 08:50:57.838990 2026] [:error] [pid 23887:tid 23913] [client 20.195.185.204:47360] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "agPK8dSKmvZJZkXBFDAgAgAAANI"]
[Wed May 13 08:50:58.483842 2026] [:error] [pid 23887:tid 23902] [client 20.195.185.204:46251] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "agPK8tSKmvZJZkXBFDAgBgAAAMc"]
[Wed May 13 08:50:59.131488 2026] [:error] [pid 23887:tid 23912] [client 20.195.185.204:24429] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "agPK89SKmvZJZkXBFDAgCQAAANE"]
[Wed May 13 08:50:59.824472 2026] [:error] [pid 3259:tid 3285] [client 20.195.185.204:49650] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/1index.php"] [unique_id "agPK8-WJB4YwcPVLeAqqRAAAARg"]
[Wed May 13 08:51:00.468621 2026] [:error] [pid 3259:tid 3280] [client 20.195.185.204:46886] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/png.php"] [unique_id "agPK9OWJB4YwcPVLeAqqRwAAARM"]
[Wed May 13 08:51:01.100917 2026] [:error] [pid 3259:tid 3262] [client 20.195.185.204:46223] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/png.php"] [unique_id "agPK9eWJB4YwcPVLeAqqSAAAAQE"]
[Wed May 13 08:51:01.750708 2026] [:error] [pid 23782:tid 23837] [client 20.195.185.204:24410] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/png.php"] [unique_id "agPK9SBrKFYHXUGnR-qMpwAAAFA"]
[Wed May 13 08:51:02.379938 2026] [:error] [pid 23787:tid 23869] [client 20.195.185.204:46873] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/png.php"] [unique_id "agPK9h1cs5wE7VT6wiq4OwAAAJU"]
[Wed May 13 08:51:03.022278 2026] [:error] [pid 23787:tid 23857] [client 20.195.185.204:49587] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "agPK9x1cs5wE7VT6wiq4PQAAAIk"]
[Wed May 13 08:51:03.694484 2026] [:error] [pid 23887:tid 23899] [client 20.195.185.204:49619] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "agPK99SKmvZJZkXBFDAgDQAAAMQ"]
[Wed May 13 08:51:04.359716 2026] [:error] [pid 23782:tid 23839] [client 20.195.185.204:49656] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "agPK-CBrKFYHXUGnR-qMqAAAAFI"]
[Wed May 13 08:51:05.027602 2026] [:error] [pid 23887:tid 23898] [client 20.195.185.204:24422] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x.php"] [unique_id "agPK-dSKmvZJZkXBFDAgEgAAAMM"]
[Wed May 13 08:51:05.716912 2026] [:error] [pid 23887:tid 23919] [client 20.195.185.204:46901] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "agPK-dSKmvZJZkXBFDAgEwAAANg"]
[Wed May 13 08:51:06.396928 2026] [:error] [pid 3259:tid 3263] [client 20.195.185.204:46266] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "agPK-uWJB4YwcPVLeAqqUAAAAQI"]
[Wed May 13 08:51:07.160311 2026] [:error] [pid 23782:tid 23824] [client 20.195.185.204:46851] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "agPK-yBrKFYHXUGnR-qMrgAAAEM"]
[Wed May 13 08:51:07.832867 2026] [:error] [pid 23887:tid 23907] [client 20.195.185.204:49623] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/yas.php"] [unique_id "agPK-9SKmvZJZkXBFDAgHgAAAMw"]
[Wed May 13 08:51:08.496780 2026] [:error] [pid 23887:tid 23917] [client 20.195.185.204:46242] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "agPK_NSKmvZJZkXBFDAgIQAAANY"]
[Wed May 13 08:51:09.193314 2026] [:error] [pid 3259:tid 3261] [client 20.195.185.204:1809] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "agPK_eWJB4YwcPVLeAqqVAAAAQA"]
[Wed May 13 08:51:09.845062 2026] [:error] [pid 23787:tid 23870] [client 20.195.185.204:46246] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "agPK_R1cs5wE7VT6wiq4SQAAAJY"]
[Wed May 13 08:51:10.493013 2026] [:error] [pid 23887:tid 23897] [client 20.195.185.204:24398] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "agPK_tSKmvZJZkXBFDAgJAAAAMI"]
[Wed May 13 08:51:11.150671 2026] [:error] [pid 23887:tid 23899] [client 20.195.185.204:49609] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "agPK_9SKmvZJZkXBFDAgJQAAAMQ"]
[Wed May 13 08:51:11.806875 2026] [:error] [pid 3259:tid 3278] [client 20.195.185.204:47406] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "agPK_-WJB4YwcPVLeAqqWgAAARE"]
[Wed May 13 08:51:12.428643 2026] [:error] [pid 23780:tid 23796] [client 20.195.185.204:47404] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "agPLAHXgOibPjrXgeTBRbAAAAAI"]
[Wed May 13 08:51:13.113076 2026] [:error] [pid 23780:tid 23799] [client 20.195.185.204:46858] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-access.php"] [unique_id "agPLAXXgOibPjrXgeTBRbQAAAAU"]
[Wed May 13 08:51:13.742660 2026] [:error] [pid 3259:tid 3284] [client 20.195.185.204:24395] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fun.php"] [unique_id "agPLAeWJB4YwcPVLeAqqXAAAARc"]
[Wed May 13 08:51:14.394624 2026] [:error] [pid 23780:tid 23808] [client 20.195.185.204:46240] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fun.php"] [unique_id "agPLAnXgOibPjrXgeTBRbwAAAA4"]
[Wed May 13 08:51:15.054308 2026] [:error] [pid 23780:tid 23806] [client 20.195.185.204:47393] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fun.php"] [unique_id "agPLA3XgOibPjrXgeTBRcQAAAAw"]
[Wed May 13 08:51:15.707941 2026] [:error] [pid 23782:tid 23837] [client 20.195.185.204:49634] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fun.php"] [unique_id "agPLAyBrKFYHXUGnR-qMtwAAAFA"]
[Wed May 13 08:51:16.395940 2026] [:error] [pid 23782:tid 23827] [client 20.195.185.204:24425] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agPLBCBrKFYHXUGnR-qMugAAAEY"]
[Wed May 13 08:51:17.072321 2026] [:error] [pid 3259:tid 3264] [client 20.195.185.204:49635] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agPLBeWJB4YwcPVLeAqqZQAAAQM"]
[Wed May 13 08:51:17.721719 2026] [:error] [pid 23787:tid 23852] [client 20.195.185.204:48682] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agPLBR1cs5wE7VT6wiq4TwAAAIQ"]
[Wed May 13 08:51:18.406369 2026] [:error] [pid 23887:tid 23919] [client 20.195.185.204:46908] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "agPLBtSKmvZJZkXBFDAgKAAAANg"]
[Wed May 13 08:51:19.402749 2026] [proxy_fcgi:error] [pid 23887:tid 23908] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:20.037009 2026] [proxy_fcgi:error] [pid 23887:tid 23910] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:20.354677 2026] [proxy_fcgi:error] [pid 23887:tid 23899] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:20.669939 2026] [proxy_fcgi:error] [pid 23887:tid 23916] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:20.984977 2026] [proxy_fcgi:error] [pid 23887:tid 23918] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:21.302968 2026] [proxy_fcgi:error] [pid 23887:tid 23896] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:21.619990 2026] [proxy_fcgi:error] [pid 23887:tid 23909] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:23.229958 2026] [proxy_fcgi:error] [pid 23887:tid 23919] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:23.545712 2026] [proxy_fcgi:error] [pid 23887:tid 23906] [client 20.195.185.204:47420] AH01071: Got error 'Primary script unknown'
[Wed May 13 08:51:23.857351 2026] [:error] [pid 23887:tid 23904] [client 20.195.185.204:47420] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "agPLC9SKmvZJZkXBFDAgPQAAAMk"]
[Wed May 13 08:51:24.478352 2026] [:error] [pid 3259:tid 3276] [client 20.195.185.204:18596] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "agPLDOWJB4YwcPVLeAqqbgAAAQ8"]
[Wed May 13 08:51:25.101354 2026] [:error] [pid 23787:tid 23861] [client 20.195.185.204:46211] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "agPLDR1cs5wE7VT6wiq4XAAAAI0"]
[Wed May 13 08:51:25.756106 2026] [:error] [pid 3259:tid 3279] [client 20.195.185.204:46879] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sys.php"] [unique_id "agPLDeWJB4YwcPVLeAqqcQAAARI"]
[Wed May 13 08:51:26.398450 2026] [:error] [pid 3259:tid 3266] [client 20.195.185.204:49576] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "agPLDuWJB4YwcPVLeAqqcgAAAQU"]
[Wed May 13 08:51:27.044506 2026] [:error] [pid 23780:tid 23816] [client 20.195.185.204:46861] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "agPLD3XgOibPjrXgeTBRegAAABY"]
[Wed May 13 08:51:27.690169 2026] [:error] [pid 23787:tid 23856] [client 20.195.185.204:24424] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "agPLDx1cs5wE7VT6wiq4YAAAAIg"]
[Wed May 13 08:51:28.355632 2026] [:error] [pid 3259:tid 3263] [client 20.195.185.204:24444] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lv.php"] [unique_id "agPLEOWJB4YwcPVLeAqqdQAAAQI"]
[Wed May 13 08:51:29.010183 2026] [:error] [pid 3259:tid 3280] [client 20.195.185.204:59171] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "agPLEeWJB4YwcPVLeAqqeAAAARM"]
[Wed May 13 08:51:29.656254 2026] [:error] [pid 23780:tid 23796] [client 20.195.185.204:49627] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "agPLEXXgOibPjrXgeTBRfAAAAAI"]
[Wed May 13 08:51:30.320867 2026] [:error] [pid 23782:tid 23837] [client 20.195.185.204:48699] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "agPLEiBrKFYHXUGnR-qMxgAAAFA"]
[Wed May 13 08:51:30.952153 2026] [:error] [pid 3259:tid 3271] [client 20.195.185.204:49622] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-good.php"] [unique_id "agPLEuWJB4YwcPVLeAqqfAAAAQo"]
[Wed May 13 08:51:31.594525 2026] [:error] [pid 23780:tid 23798] [client 20.195.185.204:49644] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "agPLE3XgOibPjrXgeTBRfwAAAAQ"]
[Wed May 13 08:51:32.243591 2026] [:error] [pid 3259:tid 3267] [client 20.195.185.204:46862] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "agPLFOWJB4YwcPVLeAqqfwAAAQY"]
[Wed May 13 08:51:32.889881 2026] [:error] [pid 23780:tid 23805] [client 20.195.185.204:49625] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "agPLFHXgOibPjrXgeTBRhAAAAAs"]
[Wed May 13 08:51:33.527567 2026] [:error] [pid 23780:tid 23809] [client 20.195.185.204:47368] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/db.php"] [unique_id "agPLFXXgOibPjrXgeTBRhQAAAA8"]
[Wed May 13 08:51:34.169170 2026] [:error] [pid 23782:tid 23824] [client 20.195.185.204:24431] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "agPLFiBrKFYHXUGnR-qMzAAAAEM"]
[Wed May 13 08:51:34.812819 2026] [:error] [pid 23787:tid 23864] [client 20.195.185.204:46232] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "agPLFh1cs5wE7VT6wiq4awAAAJA"]
[Wed May 13 08:51:35.478531 2026] [:error] [pid 23787:tid 23856] [client 20.195.185.204:49652] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "agPLFx1cs5wE7VT6wiq4cAAAAIg"]
[Wed May 13 08:51:36.122865 2026] [:error] [pid 3259:tid 3263] [client 20.195.185.204:48701] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/z.php"] [unique_id "agPLGOWJB4YwcPVLeAqqggAAAQI"]
[Wed May 13 08:51:36.766943 2026] [:error] [pid 23887:tid 23909] [client 20.195.185.204:46885] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "agPLGNSKmvZJZkXBFDAgQwAAAM4"]
[Wed May 13 08:51:37.412356 2026] [:error] [pid 3259:tid 3270] [client 20.195.185.204:46210] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "agPLGeWJB4YwcPVLeAqqgwAAAQk"]
[Wed May 13 08:51:38.039288 2026] [:error] [pid 23787:tid 23869] [client 20.195.185.204:24432] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "agPLGh1cs5wE7VT6wiq4cwAAAJU"]
[Wed May 13 08:51:38.690676 2026] [:error] [pid 23780:tid 23818] [client 20.195.185.204:47395] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-the.php"] [unique_id "agPLGnXgOibPjrXgeTBRhgAAABg"]
[Wed May 13 08:51:39.315680 2026] [:error] [pid 23887:tid 23916] [client 20.195.185.204:49607] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "agPLG9SKmvZJZkXBFDAgSgAAANU"]
[Wed May 13 08:51:39.947935 2026] [:error] [pid 23887:tid 23901] [client 20.195.185.204:49653] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "agPLG9SKmvZJZkXBFDAgTAAAAMY"]
[Wed May 13 08:51:40.576342 2026] [:error] [pid 23887:tid 23907] [client 20.195.185.204:18615] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "agPLHNSKmvZJZkXBFDAgTQAAAMw"]
[Wed May 13 08:51:41.233213 2026] [:error] [pid 23780:tid 23801] [client 20.195.185.204:46907] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ok.php"] [unique_id "agPLHXXgOibPjrXgeTBRiQAAAAc"]
[Wed May 13 08:51:41.877008 2026] [:error] [pid 23782:tid 23831] [client 20.195.185.204:18574] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "agPLHSBrKFYHXUGnR-qM0wAAAEo"]
[Wed May 13 08:51:42.520494 2026] [:error] [pid 23887:tid 23912] [client 20.195.185.204:49639] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "agPLHtSKmvZJZkXBFDAgUgAAANE"]
[Wed May 13 08:51:43.164649 2026] [:error] [pid 23887:tid 23909] [client 20.195.185.204:46253] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "agPLH9SKmvZJZkXBFDAgVQAAAM4"]
[Wed May 13 08:51:43.814282 2026] [:error] [pid 23887:tid 23906] [client 20.195.185.204:48685] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/samll.php"] [unique_id "agPLH9SKmvZJZkXBFDAgVwAAAMs"]
[Wed May 13 08:51:44.469627 2026] [:error] [pid 23787:tid 23851] [client 20.195.185.204:24385] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "agPLIB1cs5wE7VT6wiq4dgAAAIM"]
[Wed May 13 08:51:45.137075 2026] [:error] [pid 23780:tid 23800] [client 20.195.185.204:24421] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "agPLIXXgOibPjrXgeTBRiwAAAAY"]
[Wed May 13 08:51:45.773585 2026] [:error] [pid 23887:tid 23907] [client 20.195.185.204:49614] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "agPLIdSKmvZJZkXBFDAgXAAAAMw"]
[Wed May 13 08:51:46.430686 2026] [:error] [pid 23887:tid 23912] [client 20.195.185.204:24451] [client 20.195.185.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/edit.php"] [unique_id "agPLItSKmvZJZkXBFDAgYAAAANE"]
[Wed May 13 20:02:03.825030 2026] [:error] [pid 55745:tid 55780] [client 160.30.179.130:43568] [client 160.30.179.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "agRoOwzqD9WDZdTELeIYnAAAAsU"]
[Thu May 14 03:34:18.143193 2026] [proxy_fcgi:error] [pid 8086:tid 8165] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:18.472413 2026] [proxy_fcgi:error] [pid 8086:tid 8167] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:18.799380 2026] [proxy_fcgi:error] [pid 8086:tid 8164] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:19.148710 2026] [proxy_fcgi:error] [pid 8086:tid 8168] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:19.477891 2026] [proxy_fcgi:error] [pid 8086:tid 8169] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:19.812282 2026] [proxy_fcgi:error] [pid 8086:tid 8172] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:20.140761 2026] [proxy_fcgi:error] [pid 8086:tid 8175] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:20.794287 2026] [proxy_fcgi:error] [pid 8086:tid 8176] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:21.146836 2026] [proxy_fcgi:error] [pid 8086:tid 8174] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:21.475961 2026] [proxy_fcgi:error] [pid 8086:tid 8178] [client 191.235.100.20:2063] AH01071: Got error 'Primary script unknown'
[Thu May 14 03:34:21.828004 2026] [:error] [pid 8086:tid 8181] [client 191.235.100.20:2063] [client 191.235.100.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agTSPcP1PI2lRkcl6MPaMwAAAJc"]
[Thu May 14 03:34:23.119986 2026] [:error] [pid 8085:tid 8149] [client 191.235.100.20:2876] [client 191.235.100.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agTSP_sVqN1IJycChEw1TgAAAFI"]
[Thu May 14 03:34:24.427048 2026] [:error] [pid 8084:tid 8119] [client 191.235.100.20:2515] [client 191.235.100.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agTSQLp6Y6ytND2Qo0h8bAAAAA8"]
[Thu May 14 03:34:26.117585 2026] [:error] [pid 8085:tid 8146] [client 191.235.100.20:2937] [client 191.235.100.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agTSQvsVqN1IJycChEw1TwAAAE8"]
[Fri May 15 06:49:42.816483 2026] [:error] [pid 1188:tid 1209] [client 20.55.47.18:1471] [client 20.55.47.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.55.47.18, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agZRhtY68iW8yuNkNzPSfgAAAAw"]
[Fri May 15 12:25:49.372077 2026] [:error] [pid 1189:tid 1236] [client 34.116.142.206:57216] [client 34.116.142.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agagTQe36qIGegR4kcmh2wAAAEs"]
[Fri May 15 14:05:44.769225 2026] [:error] [pid 30272:tid 30279] [client 34.146.79.193:47930] [client 34.146.79.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aga3uHvc_jSFaQ_7_weUtQAAAYU"]
[Fri May 15 14:10:21.769031 2026] [:error] [pid 9305:tid 9352] [client 34.125.15.126:58612] [client 34.125.15.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aga4zd5FZyBmdCM8GsF0rAAAAE4"]
[Fri May 15 14:10:24.697439 2026] [:error] [pid 9305:tid 9344] [client 34.125.15.126:57426] [client 34.125.15.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "aga40N5FZyBmdCM8GsF0rwAAAEY"]
[Fri May 15 14:28:29.372518 2026] [:error] [pid 30208:tid 30225] [client 34.158.41.207:59708] [client 34.158.41.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "aga9DZmLMCJujX-JTvgUDgAAAI8"]
[Fri May 15 16:45:22.352749 2026] [:error] [pid 9305:tid 9362] [client 34.148.204.23:49044] [client 34.148.204.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agbdIt5FZyBmdCM8GsGCXQAAAFg"]
[Fri May 15 17:29:24.365012 2026] [:error] [pid 30240:tid 30244] [client 35.237.241.121:49138] [client 35.237.241.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agbndK8ckHvaA6bpewtV2gAAAUI"]
[Fri May 15 18:30:36.027754 2026] [:error] [pid 9392:tid 9410] [client 34.131.154.234:47928] [client 34.131.154.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agb1zNBWJIjH1U9zGfbGiAAAARA"]
[Fri May 15 18:56:15.795399 2026] [:error] [pid 30208:tid 30229] [client 34.53.76.132:53100] [client 34.53.76.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agb7z5mLMCJujX-JTvguTAAAAJM"]
[Sat May 16 01:59:20.711792 2026] [:error] [pid 9307:tid 9389] [client 158.173.67.25:33357] [client 158.173.67.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.25, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "agde-CC43jY1IRzK5VZyrwAAANg"]
[Sat May 16 01:59:20.727765 2026] [proxy_fcgi:error] [pid 9307:tid 9389] [client 158.173.67.25:33357] AH01071: Got error 'Primary script unknown'
[Sat May 16 13:45:24.454293 2026] [proxy_fcgi:error] [pid 61411:tid 61422] [client 213.202.253.4:59589] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:45:29.250464 2026] [proxy_fcgi:error] [pid 24874:tid 24948] [client 213.202.253.4:56319] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:45:57.845967 2026] [proxy_fcgi:error] [pid 24979:tid 25000] [client 213.202.253.4:57485] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:46:03.538342 2026] [proxy_fcgi:error] [pid 61361:tid 61378] [client 213.202.253.4:55113] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:46:09.691931 2026] [proxy_fcgi:error] [pid 24979:tid 24994] [client 213.202.253.4:55945] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:46:15.753842 2026] [proxy_fcgi:error] [pid 61361:tid 61387] [client 213.202.253.4:52745] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:46:21.545949 2026] [proxy_fcgi:error] [pid 61361:tid 61363] [client 213.202.253.4:55566] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Sat May 16 13:46:27.149862 2026] [:error] [pid 24979:tid 24982] [client 213.202.253.4:52521] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/gdftps.php"] [unique_id "aggEs7vSFUQiwLaOL2p82AAAAME"], referer: www.google.com
[Sun May 17 02:18:08.215548 2026] [:error] [pid 61463:tid 61476] [client 92.118.39.29:48600] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agi04DXdL1WU7nYXPmQHKAAAAcs"]
[Sun May 17 02:23:06.749186 2026] [:error] [pid 61411:tid 61423] [client 92.118.39.29:33826] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agi2CmVkiEwGnPL_dvFGQAAAAYo"]
[Sun May 17 06:19:12.918602 2026] [:error] [pid 59061:tid 59107] [client 34.63.52.158:52376] [client 34.63.52.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agjtYIYS410zAmsYkoL13AAAAEs"]
[Sun May 17 13:03:23.105085 2026] [:error] [pid 17234:tid 17243] [client 192.96.159.129:63791] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "aglMG9J4QOrYRCeDR2g_XgAAAUc"]
[Sun May 17 16:13:01.529226 2026] [:error] [pid 59062:tid 59143] [client 209.112.91.75:49764] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "agl4jT4V9GkVWmCFmGb57gAAAJQ"]
[Sun May 17 16:13:01.555486 2026] [:error] [pid 10835:tid 10877] [client 209.112.91.75:49776] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agl4jUk8lW0-dtknLl8HbwAAAgQ"]
[Sun May 17 16:13:01.755148 2026] [:error] [pid 10834:tid 10867] [client 209.112.91.75:49774] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "agl4jRISNQ_Nf83-VpqWLgAAAdU"]
[Sun May 17 16:13:02.595174 2026] [:error] [pid 11079:tid 11122] [client 209.112.91.75:49882] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "agl4jmeR3-DrxhvUqxHEPAAAAlI"]
[Sun May 17 16:13:02.595889 2026] [:error] [pid 10835:tid 10892] [client 209.112.91.75:49818] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "agl4jkk8lW0-dtknLl8HcQAAAhM"]
[Sun May 17 16:13:02.595889 2026] [:error] [pid 59062:tid 59129] [client 209.112.91.75:49898] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "agl4jj4V9GkVWmCFmGb57wAAAIY"]
[Sun May 17 16:13:02.606693 2026] [:error] [pid 11079:tid 11123] [client 209.112.91.75:49908] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "agl4jmeR3-DrxhvUqxHEPgAAAlM"]
[Sun May 17 16:13:02.614184 2026] [:error] [pid 10835:tid 10882] [client 209.112.91.75:49922] [client 209.112.91.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "agl4jkk8lW0-dtknLl8HcgAAAgk"]
[Sun May 17 22:06:40.833034 2026] [:error] [pid 36652:tid 36674] [client 34.84.165.29:44774] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "agnLcDZrzQadnZADvj9eLgAAARQ"]
[Sun May 17 22:06:41.845686 2026] [:error] [pid 11079:tid 11124] [client 34.84.165.29:56122] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "agnLcWeR3-DrxhvUqxEGwwAAAlQ"]
[Sun May 17 22:06:42.574467 2026] [:error] [pid 10835:tid 10881] [client 34.84.165.29:56146] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "agnLckk8lW0-dtknLl8z1gAAAgg"]
[Sun May 17 22:06:43.204972 2026] [:error] [pid 59060:tid 59073] [client 34.84.165.29:56162] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "agnLc_vwvq3bndkPE4n5KAAAAAQ"]
[Sun May 17 22:06:43.862139 2026] [:error] [pid 10835:tid 10874] [client 34.84.165.29:56172] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "agnLc0k8lW0-dtknLl8z2gAAAgE"]
[Sun May 17 22:06:44.457002 2026] [:error] [pid 10784:tid 10819] [client 34.84.165.29:56188] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "agnLdGBWRlKsFkSZGxBRYAAAAZM"]
[Sun May 17 22:06:44.962249 2026] [:error] [pid 10835:tid 10890] [client 34.84.165.29:56206] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "agnLdEk8lW0-dtknLl8z3QAAAhE"]
[Sun May 17 22:06:45.567529 2026] [:error] [pid 10784:tid 10805] [client 34.84.165.29:56238] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.remote"] [unique_id "agnLdWBWRlKsFkSZGxBRYQAAAYY"]
[Sun May 17 22:06:46.093274 2026] [:error] [pid 59166:tid 59183] [client 34.84.165.29:56256] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "agnLdk_puQ1I47_0Urj0TgAAAM8"]
[Sun May 17 22:06:46.585656 2026] [:error] [pid 36652:tid 36675] [client 34.84.165.29:56280] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "agnLdjZrzQadnZADvj9eLwAAARU"]
[Sun May 17 22:06:47.081384 2026] [:error] [pid 10784:tid 10799] [client 34.84.165.29:56294] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "agnLd2BWRlKsFkSZGxBRYgAAAYA"]
[Sun May 17 22:06:47.574513 2026] [:error] [pid 10834:tid 10852] [client 34.84.165.29:56306] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "agnLdxISNQ_Nf83-Vpq3KAAAAcY"]
[Sun May 17 22:06:48.082141 2026] [:error] [pid 10834:tid 10858] [client 34.84.165.29:56332] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.sample"] [unique_id "agnLeBISNQ_Nf83-Vpq3KgAAAcw"]
[Sun May 17 22:06:48.605085 2026] [:error] [pid 59166:tid 59182] [client 34.84.165.29:56350] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.example"] [unique_id "agnLeE_puQ1I47_0Urj0TwAAAM4"]
[Sun May 17 22:06:49.242167 2026] [:error] [pid 59060:tid 59093] [client 34.84.165.29:56370] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "agnLefvwvq3bndkPE4n5LQAAABg"]
[Sun May 17 22:06:49.737231 2026] [:error] [pid 11079:tid 11121] [client 34.84.165.29:56398] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "agnLeWeR3-DrxhvUqxEGxgAAAlE"]
[Sun May 17 22:06:50.232144 2026] [:error] [pid 36652:tid 36660] [client 34.84.165.29:56406] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.stage"] [unique_id "agnLejZrzQadnZADvj9eMgAAAQY"]
[Sun May 17 22:06:50.835190 2026] [:error] [pid 59166:tid 59187] [client 34.84.165.29:50986] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.ci"] [unique_id "agnLek_puQ1I47_0Urj0UQAAANM"]
[Sun May 17 22:06:51.333634 2026] [:error] [pid 17234:tid 17243] [client 34.84.165.29:50992] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.docker"] [unique_id "agnLe9J4QOrYRCeDR2hi5gAAAUc"]
[Sun May 17 22:06:51.831699 2026] [:error] [pid 36652:tid 36654] [client 34.84.165.29:51012] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.live"] [unique_id "agnLezZrzQadnZADvj9eNQAAAQA"]
[Sun May 17 22:06:52.350464 2026] [:error] [pid 59166:tid 59173] [client 34.84.165.29:51036] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.preprod"] [unique_id "agnLfE_puQ1I47_0Urj0UgAAAMU"]
[Sun May 17 22:06:52.944398 2026] [:error] [pid 10835:tid 10893] [client 34.84.165.29:51048] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.uat"] [unique_id "agnLfEk8lW0-dtknLl8z5QAAAhQ"]
[Sun May 17 22:06:53.463368 2026] [:error] [pid 10835:tid 10897] [client 34.84.165.29:51060] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dist"] [unique_id "agnLfUk8lW0-dtknLl8z5gAAAhg"]
[Sun May 17 22:06:53.959792 2026] [:error] [pid 11079:tid 11100] [client 34.84.165.29:51074] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.swp"] [unique_id "agnLfWeR3-DrxhvUqxEGygAAAkA"]
[Sun May 17 22:06:54.586459 2026] [:error] [pid 10834:tid 10870] [client 34.84.165.29:51088] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "agnLfhISNQ_Nf83-Vpq3KwAAAdg"]
[Sun May 17 22:06:55.350126 2026] [:error] [pid 59062:tid 59132] [client 34.84.165.29:51104] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "agnLfz4V9GkVWmCFmGY26AAAAIk"]
[Sun May 17 22:06:55.953148 2026] [:error] [pid 10784:tid 10818] [client 34.84.165.29:51122] [client 34.84.165.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/apps/.env"] [unique_id "agnLf2BWRlKsFkSZGxBRZwAAAZI"]
[Sun May 17 22:11:03.220647 2026] [:error] [pid 59061:tid 59103] [client 34.182.138.214:51726] [client 34.182.138.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.138.214, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "agnMd4YS410zAmsYkoIzNQAAAEc"]
[Sun May 17 22:11:03.229874 2026] [proxy_fcgi:error] [pid 59061:tid 59103] [client 34.182.138.214:51726] AH01071: Got error 'Primary script unknown'
[Sun May 17 22:11:06.353397 2026] [:error] [pid 59061:tid 59107] [client 34.182.138.214:51726] [client 34.182.138.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agnMeoYS410zAmsYkoIzRAAAAEs"]
[Sun May 17 22:11:06.844746 2026] [:error] [pid 36652:tid 36672] [client 34.182.138.214:59245] [client 34.182.138.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agnMejZrzQadnZADvj9eUAAAARI"]
[Sun May 17 22:11:07.471134 2026] [:error] [pid 11079:tid 11102] [client 34.182.138.214:56646] [client 34.182.138.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agnMe2eR3-DrxhvUqxEHcgAAAkI"]
[Sun May 17 22:11:07.960347 2026] [:error] [pid 11079:tid 11104] [client 34.182.138.214:53782] [client 34.182.138.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agnMe2eR3-DrxhvUqxEHdQAAAkQ"]
[Sun May 17 22:11:08.486085 2026] [:error] [pid 10784:tid 10803] [client 34.182.138.214:65300] [client 34.182.138.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agnMfGBWRlKsFkSZGxBR-gAAAYQ"]
[Mon May 18 11:37:40.970535 2026] [:error] [pid 36491:tid 36509] [client 194.62.107.171:42469] [client 194.62.107.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "agqJhE555B9CZb6D60l6oQAAAU4"]
[Mon May 18 12:38:56.593709 2026] [proxy_fcgi:error] [pid 36491:tid 36512] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:56.966211 2026] [proxy_fcgi:error] [pid 36491:tid 36514] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:57.476572 2026] [proxy_fcgi:error] [pid 36491:tid 36515] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:57.846838 2026] [proxy_fcgi:error] [pid 36491:tid 36501] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:58.216151 2026] [proxy_fcgi:error] [pid 36491:tid 36504] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:59.523650 2026] [proxy_fcgi:error] [pid 36491:tid 36518] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:38:59.966244 2026] [proxy_fcgi:error] [pid 36491:tid 36500] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:39:00.708829 2026] [proxy_fcgi:error] [pid 36491:tid 36506] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:39:01.081466 2026] [proxy_fcgi:error] [pid 36491:tid 36499] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:39:01.570769 2026] [proxy_fcgi:error] [pid 36491:tid 36509] [client 20.226.33.48:7199] AH01071: Got error 'Primary script unknown'
[Mon May 18 12:39:01.936475 2026] [:error] [pid 36491:tid 36503] [client 20.226.33.48:7199] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agqX5U555B9CZb6D60mGFQAAAUg"]
[Mon May 18 12:39:05.416144 2026] [:error] [pid 44010:tid 44030] [client 20.226.33.48:32903] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agqX6TcFUuogD3-74-ZebwAAANI"]
[Mon May 18 12:39:11.057982 2026] [:error] [pid 36492:tid 36544] [client 20.226.33.48:32925] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agqX72CVlogrkn9m2w6CjAAAABY"]
[Mon May 18 12:39:13.110657 2026] [:error] [pid 36491:tid 36501] [client 20.226.33.48:7187] [client 20.226.33.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agqX8U555B9CZb6D60mGGQAAAUY"]
[Mon May 18 21:53:18.617935 2026] [:error] [pid 36493:tid 36566] [client 35.188.169.204:44204] [client 35.188.169.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "agsZzgynkzQB5nM668rPHAAAARE"]
[Tue May 19 04:50:26.180650 2026] [:error] [pid 38814:tid 38822] [client 103.65.237.216:54870] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "agt7kgvkKuBwP0epzWdFHAAAAMY"]
[Tue May 19 04:50:26.449442 2026] [:error] [pid 38699:tid 38750] [client 103.65.237.216:54987] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.vscode/sftp.json"] [unique_id "agt7kr--Adsw_P-dthYhSwAAAEg"]
[Tue May 19 09:52:18.929582 2026] [:error] [pid 46896:tid 46907] [client 52.57.215.214:43174] [client 52.57.215.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "agvCUqCHyzL3Ci9LGE0IggAAAYk"]
[Wed May 20 04:48:39.098060 2026] [:error] [pid 59246:tid 59321] [client 194.62.107.162:41177] [client 194.62.107.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "agzMp2XuF32eb0pGiHwR7QAAAI4"]
[Wed May 20 05:38:00.927570 2026] [proxy_fcgi:error] [pid 59244:tid 59271] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:02.531882 2026] [proxy_fcgi:error] [pid 59244:tid 59263] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:02.749175 2026] [proxy_fcgi:error] [pid 59244:tid 59265] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:02.966972 2026] [proxy_fcgi:error] [pid 59244:tid 59268] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:03.184635 2026] [proxy_fcgi:error] [pid 59244:tid 59254] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:03.402500 2026] [proxy_fcgi:error] [pid 59244:tid 59262] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:03.653290 2026] [proxy_fcgi:error] [pid 59244:tid 59269] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:04.127316 2026] [proxy_fcgi:error] [pid 59244:tid 59266] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:05.680303 2026] [proxy_fcgi:error] [pid 59244:tid 59257] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:05.921484 2026] [proxy_fcgi:error] [pid 59244:tid 59264] [client 20.220.236.34:38964] AH01071: Got error 'Primary script unknown'
[Wed May 20 05:38:06.163464 2026] [:error] [pid 59244:tid 59261] [client 20.220.236.34:38964] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agzYPrxU0SdQQE7pLs21jQAAAAg"]
[Wed May 20 05:38:07.259417 2026] [:error] [pid 57834:tid 57906] [client 20.220.236.34:13126] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agzYP3TOfwZ09EhqoYD8CAAAAo8"]
[Wed May 20 05:38:08.433159 2026] [:error] [pid 57834:tid 57907] [client 20.220.236.34:13927] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agzYQHTOfwZ09EhqoYD8CwAAApA"]
[Wed May 20 05:38:09.537825 2026] [:error] [pid 59349:tid 59368] [client 20.220.236.34:23856] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "agzYQTvvxTUy-ppKSZWM_gAAANE"]
[Wed May 20 08:17:38.793130 2026] [:error] [pid 44059:tid 44073] [client 52.237.143.49:43008] [client 52.237.143.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.237.143.49, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agz9ohfFs-oSOOcyjyxHqwAAAQw"]
[Wed May 20 14:34:01.306286 2026] [:error] [pid 41279:tid 41337] [client 34.46.57.55:52395] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ag1V2bEFyfaehGZbt4xzPQAAAME"]
[Wed May 20 14:34:01.695645 2026] [:error] [pid 41364:tid 41374] [client 34.46.57.55:54036] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ag1V2RKTmyvxtNXrN-iUyAAAAIg"]
[Wed May 20 14:34:02.084535 2026] [:error] [pid 41364:tid 41386] [client 34.46.57.55:62534] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2hKTmyvxtNXrN-iU0AAAAJQ"]
[Wed May 20 22:09:01.685411 2026] [:error] [pid 41279:tid 41357] [client 34.139.56.51:50958] [client 34.139.56.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.56.51, incrementing ddos counter"] [hostname "quarryspec.com.au"] [uri "/xmlrpc.php"] [unique_id "ag3AfbEFyfaehGZbt4ymTAAAANU"]
[Wed May 20 22:09:01.695127 2026] [proxy_fcgi:error] [pid 41279:tid 41357] [client 34.139.56.51:50958] AH01071: Got error 'Primary script unknown'
[Wed May 20 22:09:05.040285 2026] [:error] [pid 41279:tid 41351] [client 34.139.56.51:50958] [client 34.139.56.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag3AgbEFyfaehGZbt4ymWQAAAM8"]
[Wed May 20 22:09:05.628703 2026] [:error] [pid 41364:tid 41387] [client 34.139.56.51:50533] [client 34.139.56.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag3AgRKTmyvxtNXrN-jrJAAAAJU"]
[Wed May 20 22:09:06.387601 2026] [:error] [pid 44059:tid 44081] [client 34.139.56.51:50535] [client 34.139.56.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag3AghfFs-oSOOcyjyw4fQAAARQ"]
[Wed May 20 22:09:06.952892 2026] [:error] [pid 7731:tid 7755] [client 34.139.56.51:50081] [client 34.139.56.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag3Agn9qQlHXbkl2nEsxpAAAAZY"]
[Wed May 20 22:09:07.524120 2026] [:error] [pid 7731:tid 7746] [client 34.139.56.51:58178] [client 34.139.56.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag3Ag39qQlHXbkl2nEsxpwAAAY0"]
[Thu May 21 23:24:09.787835 2026] [:error] [pid 9189:tid 9219] [client 34.150.255.112:58147] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ag8jmZvTDh1NbYizKVzVSQAAAgA"]
[Thu May 21 23:24:10.217650 2026] [:error] [pid 49884:tid 49967] [client 34.150.255.112:53815] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXhgAAAJQ"]
[Thu May 21 23:24:10.648317 2026] [:error] [pid 49884:tid 49958] [client 34.150.255.112:62951] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmq5MPpsTNNHWS6gX8wAAAIs"]
[Fri May 22 08:46:19.439552 2026] [proxy_fcgi:error] [pid 15585:tid 15670] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:19.715316 2026] [proxy_fcgi:error] [pid 15585:tid 15654] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:19.956928 2026] [proxy_fcgi:error] [pid 15585:tid 15666] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:20.156417 2026] [proxy_fcgi:error] [pid 15585:tid 15658] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:20.349732 2026] [proxy_fcgi:error] [pid 15585:tid 15659] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:20.648639 2026] [proxy_fcgi:error] [pid 15585:tid 15649] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:20.928049 2026] [proxy_fcgi:error] [pid 15585:tid 15662] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:21.439659 2026] [proxy_fcgi:error] [pid 15585:tid 15668] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:21.632927 2026] [proxy_fcgi:error] [pid 15585:tid 15663] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:21.893012 2026] [proxy_fcgi:error] [pid 15585:tid 15652] [client 52.242.199.195:10600] AH01071: Got error 'Primary script unknown'
[Fri May 22 08:46:22.081091 2026] [:error] [pid 15585:tid 15653] [client 52.242.199.195:10600] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ag-nXiKb-vB41AF-LC1_TgAAAIY"]
[Fri May 22 08:46:23.473856 2026] [:error] [pid 15679:tid 15692] [client 52.242.199.195:10596] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ag-nXyh8tgGc38WJ-GyYKwAAAMs"]
[Fri May 22 08:46:26.112318 2026] [:error] [pid 15679:tid 15702] [client 52.242.199.195:31579] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ag-nYih8tgGc38WJ-GyYNAAAANU"]
[Fri May 22 08:46:28.038966 2026] [:error] [pid 15585:tid 15664] [client 52.242.199.195:10573] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ag-nZCKb-vB41AF-LC1_WAAAAJE"]
[Fri May 22 17:11:08.398202 2026] [:error] [pid 15585:tid 15663] [client 34.93.63.75:62333] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ahAdrCKb-vB41AF-LC1JVwAAAJA"]
[Fri May 22 17:11:08.690220 2026] [:error] [pid 15583:tid 15595] [client 34.93.63.75:63820] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrHnaOncRcIm17YX1QgAAAAc"]
[Fri May 22 17:11:08.991875 2026] [:error] [pid 15583:tid 15609] [client 34.93.63.75:65469] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feed/"] [unique_id "ahAdrHnaOncRcIm17YX1UwAAABU"]
[Fri May 22 17:19:15.922330 2026] [:error] [pid 15583:tid 15590] [client 194.163.157.206:60096] [client 194.163.157.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/sftp-config.json"] [unique_id "ahAfk3naOncRcIm17YX23gAAAAI"]
[Sun May 24 08:17:18.296149 2026] [:error] [pid 58918:tid 58932] [client 20.63.100.211:64207] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahJDjqT5tvv40jh4HYY2tQAAAYw"]
[Sun May 24 08:17:18.794948 2026] [:error] [pid 58521:tid 58546] [client 20.63.100.211:65440] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahJDjmu03QVCX-cF2G_sIAAAARc"]
[Sun May 24 08:17:19.221350 2026] [:error] [pid 58918:tid 58937] [client 20.63.100.211:64909] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahJDj6T5tvv40jh4HYY2uAAAAZE"]
[Sun May 24 08:17:19.641574 2026] [:error] [pid 58918:tid 58922] [client 20.63.100.211:65415] [client 20.63.100.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahJDj6T5tvv40jh4HYY2uQAAAYI"]
[Sun May 24 09:53:47.632942 2026] [:error] [pid 49744:tid 49746] [client 54.252.143.203:56006] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/config"] [unique_id "ahJaKzsE5kPdFpUbbHFmvQAAAMA"]
[Sun May 24 09:53:48.025087 2026] [:error] [pid 49744:tid 49747] [client 54.252.143.203:56016] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.git/credentials"] [unique_id "ahJaLDsE5kPdFpUbbHFmwAAAAME"]
[Sun May 24 09:53:48.420595 2026] [:error] [pid 49688:tid 49710] [client 54.252.143.203:56028] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env"] [unique_id "ahJaLGYoQ9V6a_4pBshgswAAAFM"]
[Sun May 24 09:53:48.697366 2026] [:error] [pid 49688:tid 49700] [client 54.252.143.203:56038] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.local"] [unique_id "ahJaLGYoQ9V6a_4pBshgtAAAAEk"]
[Sun May 24 09:53:48.869592 2026] [:error] [pid 49689:tid 49734] [client 54.252.143.203:56046] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.production"] [unique_id "ahJaLAaxiY3NxLUD97UaIgAAAJA"]
[Sun May 24 09:53:49.085998 2026] [:error] [pid 49689:tid 49735] [client 54.252.143.203:56060] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.staging"] [unique_id "ahJaLQaxiY3NxLUD97UaIwAAAJE"]
[Sun May 24 09:53:49.327958 2026] [:error] [pid 49689:tid 49741] [client 54.252.143.203:56064] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.development"] [unique_id "ahJaLQaxiY3NxLUD97UaJQAAAJc"]
[Sun May 24 09:53:49.498780 2026] [:error] [pid 49688:tid 49692] [client 54.252.143.203:56074] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.test"] [unique_id "ahJaLWYoQ9V6a_4pBshgtgAAAEE"]
[Sun May 24 09:53:49.699813 2026] [:error] [pid 49689:tid 49742] [client 54.252.143.203:56082] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.remote"] [unique_id "ahJaLQaxiY3NxLUD97UaJwAAAJg"]
[Sun May 24 09:53:49.895975 2026] [:error] [pid 49689:tid 49728] [client 54.252.143.203:56084] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.bak"] [unique_id "ahJaLQaxiY3NxLUD97UaKAAAAIo"]
[Sun May 24 09:53:50.142263 2026] [:error] [pid 49689:tid 49720] [client 54.252.143.203:56094] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.backup"] [unique_id "ahJaLgaxiY3NxLUD97UaKgAAAII"]
[Sun May 24 09:53:50.554174 2026] [:error] [pid 49689:tid 49730] [client 54.252.143.203:56096] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.save"] [unique_id "ahJaLgaxiY3NxLUD97UaLAAAAIw"]
[Sun May 24 09:53:50.884147 2026] [:error] [pid 49688:tid 49706] [client 54.252.143.203:56098] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.old"] [unique_id "ahJaLmYoQ9V6a_4pBshguAAAAE8"]
[Sun May 24 09:53:51.237108 2026] [:error] [pid 49688:tid 49707] [client 54.252.143.203:44484] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.sample"] [unique_id "ahJaL2YoQ9V6a_4pBshguQAAAFA"]
[Sun May 24 09:53:51.575950 2026] [:error] [pid 49689:tid 49722] [client 54.252.143.203:44496] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.example"] [unique_id "ahJaLwaxiY3NxLUD97UaLgAAAIQ"]
[Sun May 24 09:53:51.937295 2026] [:error] [pid 49688:tid 49715] [client 54.252.143.203:44506] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dev"] [unique_id "ahJaL2YoQ9V6a_4pBshgvAAAAFg"]
[Sun May 24 09:53:52.441038 2026] [:error] [pid 49688:tid 49695] [client 54.252.143.203:44522] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.prod"] [unique_id "ahJaMGYoQ9V6a_4pBshgvgAAAEQ"]
[Sun May 24 09:53:52.941310 2026] [:error] [pid 49689:tid 49741] [client 54.252.143.203:44530] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.stage"] [unique_id "ahJaMAaxiY3NxLUD97UaMAAAAJc"]
[Sun May 24 09:53:53.318730 2026] [:error] [pid 49744:tid 49767] [client 54.252.143.203:44532] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.ci"] [unique_id "ahJaMTsE5kPdFpUbbHFmzgAAANU"]
[Sun May 24 09:53:53.729929 2026] [:error] [pid 49688:tid 49711] [client 54.252.143.203:44546] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.docker"] [unique_id "ahJaMWYoQ9V6a_4pBshgwwAAAFQ"]
[Sun May 24 09:53:54.312359 2026] [:error] [pid 49775:tid 49793] [client 54.252.143.203:44556] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.live"] [unique_id "ahJaMovZb8G6T8WpI1gdwwAAABA"]
[Sun May 24 09:53:54.568599 2026] [:error] [pid 49744:tid 49766] [client 54.252.143.203:44562] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.preprod"] [unique_id "ahJaMjsE5kPdFpUbbHFm0gAAANQ"]
[Sun May 24 09:53:55.062656 2026] [:error] [pid 49744:tid 49770] [client 54.252.143.203:44578] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.uat"] [unique_id "ahJaMzsE5kPdFpUbbHFm1AAAANg"]
[Sun May 24 09:53:55.327465 2026] [:error] [pid 49744:tid 49751] [client 54.252.143.203:44592] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.dist"] [unique_id "ahJaMzsE5kPdFpUbbHFm1gAAAMU"]
[Sun May 24 09:53:55.748549 2026] [:error] [pid 49744:tid 49767] [client 54.252.143.203:44600] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.swp"] [unique_id "ahJaMzsE5kPdFpUbbHFm2QAAANU"]
[Sun May 24 09:53:56.198874 2026] [:error] [pid 49688:tid 49697] [client 54.252.143.203:44612] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env~"] [unique_id "ahJaNGYoQ9V6a_4pBshgxwAAAEY"]
[Sun May 24 09:53:56.547195 2026] [:error] [pid 49689:tid 49723] [client 54.252.143.203:44616] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env1"] [unique_id "ahJaNAaxiY3NxLUD97UaMwAAAIU"]
[Sun May 24 09:53:56.948845 2026] [:error] [pid 49689:tid 49729] [client 54.252.143.203:44624] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env2"] [unique_id "ahJaNAaxiY3NxLUD97UaNAAAAIs"]
[Sun May 24 09:53:57.342739 2026] [:error] [pid 49744:tid 49767] [client 54.252.143.203:44634] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env_copy"] [unique_id "ahJaNTsE5kPdFpUbbHFm5wAAANU"]
[Sun May 24 09:53:57.597201 2026] [:error] [pid 49689:tid 49724] [client 54.252.143.203:44648] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.txt"] [unique_id "ahJaNQaxiY3NxLUD97UaNQAAAIY"]
[Sun May 24 09:53:59.101685 2026] [:error] [pid 49775:tid 49790] [client 54.252.143.203:44664] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.json"] [unique_id "ahJaN4vZb8G6T8WpI1gdxgAAAA0"]
[Sun May 24 09:53:59.740815 2026] [:error] [pid 49689:tid 49725] [client 54.252.143.203:44666] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.yaml"] [unique_id "ahJaNwaxiY3NxLUD97UaOQAAAIc"]
[Sun May 24 09:54:00.085692 2026] [:error] [pid 49689:tid 49740] [client 54.252.143.203:44682] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/.env.yml"] [unique_id "ahJaOAaxiY3NxLUD97UaOwAAAJY"]
[Sun May 24 09:54:00.302300 2026] [:error] [pid 49689:tid 49730] [client 54.252.143.203:44696] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/app/.env"] [unique_id "ahJaOAaxiY3NxLUD97UaPAAAAIw"]
[Sun May 24 09:54:00.761873 2026] [:error] [pid 49744:tid 49760] [client 54.252.143.203:44700] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/apps/.env"] [unique_id "ahJaODsE5kPdFpUbbHFm9QAAAM4"]
[Sun May 24 09:54:01.075824 2026] [:error] [pid 49689:tid 49727] [client 54.252.143.203:45208] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/api/.env"] [unique_id "ahJaOQaxiY3NxLUD97UaPgAAAIk"]
[Sun May 24 09:54:01.354040 2026] [:error] [pid 49689:tid 49739] [client 54.252.143.203:45216] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/web/.env"] [unique_id "ahJaOQaxiY3NxLUD97UaPwAAAJU"]
[Sun May 24 09:54:01.776132 2026] [:error] [pid 49689:tid 49729] [client 54.252.143.203:45224] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/site/.env"] [unique_id "ahJaOQaxiY3NxLUD97UaQQAAAIs"]
[Sun May 24 09:54:02.089684 2026] [:error] [pid 49775:tid 49783] [client 54.252.143.203:45238] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/public/.env"] [unique_id "ahJaOovZb8G6T8WpI1gdzAAAAAY"]
[Sun May 24 09:54:02.477949 2026] [:error] [pid 49775:tid 49800] [client 54.252.143.203:45254] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/admin/.env"] [unique_id "ahJaOovZb8G6T8WpI1gdzQAAABc"]
[Sun May 24 09:54:03.090459 2026] [:error] [pid 49775:tid 49792] [client 54.252.143.203:45256] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/backend/.env"] [unique_id "ahJaO4vZb8G6T8WpI1gdzwAAAA8"]
[Sun May 24 09:54:03.861227 2026] [:error] [pid 49775:tid 49777] [client 54.252.143.203:45266] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/server/.env"] [unique_id "ahJaO4vZb8G6T8WpI1gd0QAAAAA"]
[Sun May 24 09:54:04.392524 2026] [:error] [pid 49775:tid 49790] [client 54.252.143.203:45274] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/frontend/.env"] [unique_id "ahJaPIvZb8G6T8WpI1gd1AAAAA0"]
[Sun May 24 09:54:04.846301 2026] [:error] [pid 49775:tid 49789] [client 54.252.143.203:45290] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/src/.env"] [unique_id "ahJaPIvZb8G6T8WpI1gd1gAAAAw"]
[Sun May 24 09:54:05.555665 2026] [:error] [pid 49688:tid 49713] [client 54.252.143.203:45300] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/core/.env"] [unique_id "ahJaPWYoQ9V6a_4pBshg0QAAAFY"]
[Sun May 24 09:54:06.881961 2026] [:error] [pid 49689:tid 49732] [client 54.252.143.203:45306] [client 54.252.143.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quarryspec.com.au"] [uri "/core/app/.env"] [unique_id "ahJaPgaxiY3NxLUD97UaSgAAAI4"]
[Sun May 24 10:27:45.302965 2026] [:error] [pid 49689:tid 49734] [client 165.227.33.231:50926] [client 165.227.33.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.33.231, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ahJiIQaxiY3NxLUD97UlMwAAAJA"]
[Sun May 24 10:27:45.312356 2026] [proxy_fcgi:error] [pid 49689:tid 49734] [client 165.227.33.231:50926] AH01071: Got error 'Primary script unknown'
[Sun May 24 11:51:22.574652 2026] [:error] [pid 2639:tid 2647] [client 146.190.23.255:56018] [client 146.190.23.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.23.255, incrementing brute counter"] [hostname "quarryspec.com.au"] [uri "/wp-login.php"] [unique_id "ahJ1ukzQncQTd0Z0Oe8LVQAAAQY"]
[Sun May 24 11:51:22.583651 2026] [proxy_fcgi:error] [pid 2639:tid 2647] [client 146.190.23.255:56018] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:45:12.150669 2026] [:error] [pid 11282:tid 11360] [client 88.151.33.24:45222] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/config"] [unique_id "ahMrGO0bPyN3C7HZ1R_QSwAAANQ"]
[Mon May 25 00:45:12.325756 2026] [:error] [pid 15835:tid 15855] [client 88.151.33.24:45240] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quarryspec.com.au"] [uri "/.git/HEAD"] [unique_id "ahMrGGWbknYlUM9P0qMquQAAABI"]
[Mon May 25 00:49:01.466078 2026] [proxy_fcgi:error] [pid 11368:tid 11371] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:01.700425 2026] [proxy_fcgi:error] [pid 11368:tid 11380] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:01.937368 2026] [proxy_fcgi:error] [pid 11368:tid 11379] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:02.192718 2026] [proxy_fcgi:error] [pid 11368:tid 11383] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:02.385767 2026] [proxy_fcgi:error] [pid 11368:tid 11377] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:02.578292 2026] [proxy_fcgi:error] [pid 11368:tid 11382] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:02.770963 2026] [proxy_fcgi:error] [pid 11368:tid 11389] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:03.198632 2026] [proxy_fcgi:error] [pid 11368:tid 11378] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:03.391347 2026] [proxy_fcgi:error] [pid 11368:tid 11390] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:03.584370 2026] [proxy_fcgi:error] [pid 11368:tid 11391] [client 20.9.45.132:13216] AH01071: Got error 'Primary script unknown'
[Mon May 25 00:49:03.772206 2026] [:error] [pid 11368:tid 11387] [client 20.9.45.132:13216] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ahMr_4fq_sTmmtTKm1Vq6QAAARE"]
[Mon May 25 00:49:04.786058 2026] [:error] [pid 11280:tid 11287] [client 20.9.45.132:12807] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ahMsAIRn5s7laoSxy1Q4dwAAAEI"]
[Mon May 25 00:49:06.158448 2026] [:error] [pid 11368:tid 11371] [client 20.9.45.132:12641] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ahMsAofq_sTmmtTKm1Vq7QAAAQE"]
[Mon May 25 00:49:14.113507 2026] [:error] [pid 11280:tid 11303] [client 20.9.45.132:12848] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/about.php"] [unique_id "ahMsCoRn5s7laoSxy1Q4fwAAAFI"]
[Mon May 25 03:12:29.462166 2026] [proxy_fcgi:error] [pid 4037:tid 4098] [client 172.212.217.152:23697] AH01071: Got error 'Primary script unknown'
[Mon May 25 03:12:29.663270 2026] [proxy_fcgi:error] [pid 4037:tid 4097] [client 172.212.217.152:23697] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:18.541183 2026] [proxy_fcgi:error] [pid 9303:tid 9343] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:18.732039 2026] [proxy_fcgi:error] [pid 9303:tid 9354] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:18.922133 2026] [proxy_fcgi:error] [pid 9303:tid 9338] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:19.136430 2026] [proxy_fcgi:error] [pid 9303:tid 9349] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:19.325880 2026] [proxy_fcgi:error] [pid 9303:tid 9348] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:19.517837 2026] [proxy_fcgi:error] [pid 9303:tid 9345] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:20.025095 2026] [proxy_fcgi:error] [pid 9303:tid 9357] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:20.310889 2026] [proxy_fcgi:error] [pid 9303:tid 9353] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:20.538909 2026] [proxy_fcgi:error] [pid 9303:tid 9354] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:20.732096 2026] [proxy_fcgi:error] [pid 9303:tid 9344] [client 172.212.181.218:9373] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:11:20.918383 2026] [:error] [pid 9303:tid 9349] [client 172.212.181.218:9373] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koala.php"] [unique_id "ahNbaH3bQScbssitjPQU-wAAAE8"]
[Mon May 25 04:11:21.573624 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:10722] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koala.php"] [unique_id "ahNbaaJWO7En4nKEQ3ju4gAAAQ8"]
[Mon May 25 04:11:22.080710 2026] [:error] [pid 9303:tid 9357] [client 172.212.181.218:8148] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koala.php"] [unique_id "ahNban3bQScbssitjPQU_QAAAFc"]
[Mon May 25 04:11:22.643223 2026] [:error] [pid 9303:tid 9354] [client 172.212.181.218:10257] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/koala.php"] [unique_id "ahNban3bQScbssitjPQU_wAAAFQ"]
[Mon May 25 04:11:23.373480 2026] [:error] [pid 9303:tid 9341] [client 172.212.181.218:5597] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mac.php"] [unique_id "ahNba33bQScbssitjPQVBAAAAEc"]
[Mon May 25 04:11:23.828166 2026] [:error] [pid 9303:tid 9348] [client 172.212.181.218:10742] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mac.php"] [unique_id "ahNba33bQScbssitjPQVBgAAAE4"]
[Mon May 25 04:11:24.497628 2026] [:error] [pid 9398:tid 9401] [client 172.212.181.218:9353] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mac.php"] [unique_id "ahNbbOhIu7KstzsCua96QwAAAME"]
[Mon May 25 04:11:24.957999 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:5573] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/mac.php"] [unique_id "ahNbbH3bQScbssitjPQVCgAAAEY"]
[Mon May 25 04:11:25.584665 2026] [:error] [pid 9304:tid 9374] [client 172.212.181.218:8088] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahNbbeVEV2qpMC_1UzRT4AAAAI0"]
[Mon May 25 04:11:26.245136 2026] [:error] [pid 9303:tid 9344] [client 172.212.181.218:10247] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahNbbn3bQScbssitjPQVEAAAAEo"]
[Mon May 25 04:11:26.844414 2026] [:error] [pid 9303:tid 9338] [client 172.212.181.218:11025] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahNbbn3bQScbssitjPQVEQAAAEQ"]
[Mon May 25 04:11:27.235629 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:5629] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahNbb6JWO7En4nKEQ3ju6wAAAQI"]
[Mon May 25 04:11:27.964577 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:10251] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wefile.php"] [unique_id "ahNbb-hIu7KstzsCua96RwAAAMc"]
[Mon May 25 04:11:28.464236 2026] [:error] [pid 50423:tid 50447] [client 172.212.181.218:10701] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wefile.php"] [unique_id "ahNbcKJWO7En4nKEQ3ju7wAAARY"]
[Mon May 25 04:11:28.879732 2026] [:error] [pid 9398:tid 9420] [client 172.212.181.218:8091] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wefile.php"] [unique_id "ahNbcOhIu7KstzsCua96SwAAANA"]
[Mon May 25 04:11:29.398746 2026] [:error] [pid 50423:tid 50443] [client 172.212.181.218:9197] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wefile.php"] [unique_id "ahNbcaJWO7En4nKEQ3ju8gAAARI"]
[Mon May 25 04:11:29.807098 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:8092] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp3.php"] [unique_id "ahNbcX3bQScbssitjPQVGAAAAEY"]
[Mon May 25 04:11:30.330859 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:9176] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp3.php"] [unique_id "ahNbcuhIu7KstzsCua96TQAAANI"]
[Mon May 25 04:11:30.810191 2026] [:error] [pid 9398:tid 9415] [client 172.212.181.218:11009] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp3.php"] [unique_id "ahNbcuhIu7KstzsCua96TgAAAMs"]
[Mon May 25 04:11:31.287449 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:8151] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/casp3.php"] [unique_id "ahNbc-hIu7KstzsCua96UAAAAMg"]
[Mon May 25 04:11:31.813922 2026] [:error] [pid 9398:tid 9401] [client 172.212.181.218:8169] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahNbc-hIu7KstzsCua96VAAAAME"]
[Mon May 25 04:11:32.524910 2026] [:error] [pid 9304:tid 9380] [client 172.212.181.218:9212] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahNbdOVEV2qpMC_1UzRT4QAAAJM"]
[Mon May 25 04:11:32.932324 2026] [:error] [pid 50423:tid 50433] [client 172.212.181.218:10733] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahNbdKJWO7En4nKEQ3ju-wAAAQg"]
[Mon May 25 04:11:33.435277 2026] [:error] [pid 9302:tid 9327] [client 172.212.181.218:9200] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahNbdS1RaFfTSnDQnqEyHAAAABQ"]
[Mon May 25 04:11:34.094093 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:11019] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "ahNbduhIu7KstzsCua96WQAAAMU"]
[Mon May 25 04:11:34.557177 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:10706] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "ahNbduhIu7KstzsCua96WwAAANI"]
[Mon May 25 04:11:35.137443 2026] [:error] [pid 9303:tid 9335] [client 172.212.181.218:11027] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "ahNbd33bQScbssitjPQVGQAAAEE"]
[Mon May 25 04:11:35.616172 2026] [:error] [pid 50423:tid 50439] [client 172.212.181.218:9164] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/"] [unique_id "ahNbd6JWO7En4nKEQ3jvAQAAAQ4"]
[Mon May 25 04:11:36.046906 2026] [:error] [pid 9398:tid 9402] [client 172.212.181.218:10712] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahNbeOhIu7KstzsCua96XAAAAMI"]
[Mon May 25 04:11:36.692841 2026] [:error] [pid 9398:tid 9425] [client 172.212.181.218:11044] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahNbeOhIu7KstzsCua96XQAAANU"]
[Mon May 25 04:11:37.081133 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:10255] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahNbeaJWO7En4nKEQ3jvBQAAAQ8"]
[Mon May 25 04:11:37.676548 2026] [:error] [pid 50423:tid 50436] [client 172.212.181.218:10283] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahNbeaJWO7En4nKEQ3jvBgAAAQs"]
[Mon May 25 04:11:38.302709 2026] [:error] [pid 9302:tid 9309] [client 172.212.181.218:8067] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "ahNbei1RaFfTSnDQnqEyHwAAAAI"]
[Mon May 25 04:11:38.840612 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:8102] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "ahNbei1RaFfTSnDQnqEyIQAAABU"]
[Mon May 25 04:11:39.320959 2026] [:error] [pid 50423:tid 50449] [client 172.212.181.218:9389] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "ahNbe6JWO7En4nKEQ3jvDQAAARg"]
[Mon May 25 04:11:39.864370 2026] [:error] [pid 9303:tid 9356] [client 172.212.181.218:10299] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/half.php"] [unique_id "ahNbe33bQScbssitjPQVHgAAAFY"]
[Mon May 25 04:11:40.373729 2026] [:error] [pid 9303:tid 9350] [client 172.212.181.218:9399] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "ahNbfH3bQScbssitjPQVIgAAAFA"]
[Mon May 25 04:11:40.891436 2026] [:error] [pid 9303:tid 9347] [client 172.212.181.218:5575] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "ahNbfH3bQScbssitjPQVJAAAAE0"]
[Mon May 25 04:11:41.401401 2026] [:error] [pid 9303:tid 9336] [client 172.212.181.218:11008] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "ahNbfX3bQScbssitjPQVJQAAAEI"]
[Mon May 25 04:11:41.888323 2026] [:error] [pid 9302:tid 9320] [client 172.212.181.218:8146] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/2P.php"] [unique_id "ahNbfS1RaFfTSnDQnqEyJgAAAA0"]
[Mon May 25 04:11:42.454248 2026] [:error] [pid 9304:tid 9383] [client 172.212.181.218:9182] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "ahNbfuVEV2qpMC_1UzRT5gAAAJY"]
[Mon May 25 04:11:43.017968 2026] [:error] [pid 9303:tid 9338] [client 172.212.181.218:10700] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "ahNbf33bQScbssitjPQVLAAAAEQ"]
[Mon May 25 04:11:43.522075 2026] [:error] [pid 9303:tid 9339] [client 172.212.181.218:9371] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "ahNbf33bQScbssitjPQVLQAAAEU"]
[Mon May 25 04:11:43.978055 2026] [:error] [pid 9303:tid 9348] [client 172.212.181.218:8069] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/tires.php"] [unique_id "ahNbf33bQScbssitjPQVLwAAAE4"]
[Mon May 25 04:11:44.385715 2026] [:error] [pid 9303:tid 9345] [client 172.212.181.218:8129] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahNbgH3bQScbssitjPQVMAAAAEs"]
[Mon May 25 04:11:44.785588 2026] [:error] [pid 9303:tid 9334] [client 172.212.181.218:8131] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahNbgH3bQScbssitjPQVMgAAAEA"]
[Mon May 25 04:11:45.353844 2026] [:error] [pid 9303:tid 9352] [client 172.212.181.218:9160] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahNbgX3bQScbssitjPQVNAAAAFI"]
[Mon May 25 04:11:45.923652 2026] [:error] [pid 9303:tid 9342] [client 172.212.181.218:8115] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahNbgX3bQScbssitjPQVNwAAAEg"]
[Mon May 25 04:11:46.440297 2026] [:error] [pid 9304:tid 9370] [client 172.212.181.218:9385] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/like.php"] [unique_id "ahNbguVEV2qpMC_1UzRT7AAAAIk"]
[Mon May 25 04:11:47.207220 2026] [:error] [pid 9398:tid 9420] [client 172.212.181.218:10745] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/like.php"] [unique_id "ahNbg-hIu7KstzsCua96ZgAAANA"]
[Mon May 25 04:11:47.922167 2026] [:error] [pid 9302:tid 9331] [client 172.212.181.218:9171] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/like.php"] [unique_id "ahNbgy1RaFfTSnDQnqEyKAAAABg"]
[Mon May 25 04:11:48.324218 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:8074] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/like.php"] [unique_id "ahNbhC1RaFfTSnDQnqEyKgAAABU"]
[Mon May 25 04:11:48.837517 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:5623] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/about.php"] [unique_id "ahNbhOVEV2qpMC_1UzRT7wAAAJc"]
[Mon May 25 04:11:49.581860 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:8174] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/about.php"] [unique_id "ahNbhehIu7KstzsCua96aQAAAMg"]
[Mon May 25 04:11:50.285970 2026] [:error] [pid 9398:tid 9426] [client 172.212.181.218:10281] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/about.php"] [unique_id "ahNbhuhIu7KstzsCua96awAAANY"]
[Mon May 25 04:11:51.232446 2026] [:error] [pid 9398:tid 9425] [client 172.212.181.218:12284] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/about.php"] [unique_id "ahNbh-hIu7KstzsCua96bwAAANU"]
[Mon May 25 04:11:52.169330 2026] [:error] [pid 50423:tid 50447] [client 172.212.181.218:5580] [client 172.212.181.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ahNbiKJWO7En4nKEQ3jvFwAAARY"]
[Mon May 25 04:11:53.076894 2026] [:error] [pid 9302:tid 9330] [client 172.212.181.218:5608] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "ahNbiS1RaFfTSnDQnqEyMgAAABc"]
[Mon May 25 04:11:54.309803 2026] [:error] [pid 9302:tid 9322] [client 172.212.181.218:7866] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "ahNbii1RaFfTSnDQnqEyNAAAAA8"]
[Mon May 25 04:11:54.789320 2026] [:error] [pid 50423:tid 50441] [client 172.212.181.218:11050] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "ahNbiqJWO7En4nKEQ3jvGgAAARA"]
[Mon May 25 04:11:56.361328 2026] [:error] [pid 9304:tid 9376] [client 172.212.181.218:10271] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bob.php"] [unique_id "ahNbjOVEV2qpMC_1UzRT9QAAAI8"]
[Mon May 25 04:11:57.620345 2026] [:error] [pid 9304:tid 9366] [client 172.212.181.218:11017] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "ahNbjeVEV2qpMC_1UzRT-gAAAIU"]
[Mon May 25 04:11:59.115815 2026] [:error] [pid 50423:tid 50446] [client 172.212.181.218:11042] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "ahNbj6JWO7En4nKEQ3jvHwAAARU"]
[Mon May 25 04:12:00.176888 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:7838] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "ahNbkOhIu7KstzsCua96cQAAAMg"]
[Mon May 25 04:12:01.942859 2026] [:error] [pid 9398:tid 9423] [client 172.212.181.218:10728] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/t3s.php"] [unique_id "ahNbkehIu7KstzsCua96eQAAANM"]
[Mon May 25 04:12:03.695901 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:8142] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "ahNbk-hIu7KstzsCua96fQAAAMU"]
[Mon May 25 04:12:04.706580 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:9188] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "ahNblKJWO7En4nKEQ3jvKAAAAQI"]
[Mon May 25 04:12:06.112978 2026] [:error] [pid 9304:tid 9379] [client 172.212.181.218:5730] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "ahNbluVEV2qpMC_1UzRUDwAAAJI"]
[Mon May 25 04:12:07.432384 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:10735] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/"] [unique_id "ahNbl-VEV2qpMC_1UzRUFwAAAJg"]
[Mon May 25 04:12:08.539329 2026] [:error] [pid 9304:tid 9363] [client 172.212.181.218:7848] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "ahNbmOVEV2qpMC_1UzRUIQAAAII"]
[Mon May 25 04:12:09.699801 2026] [:error] [pid 50423:tid 50444] [client 172.212.181.218:5740] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "ahNbmaJWO7En4nKEQ3jvMgAAARM"]
[Mon May 25 04:12:10.342364 2026] [:error] [pid 50423:tid 50448] [client 172.212.181.218:5304] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "ahNbmqJWO7En4nKEQ3jvNAAAARc"]
[Mon May 25 04:12:11.031720 2026] [:error] [pid 9304:tid 9378] [client 172.212.181.218:5714] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/x/"] [unique_id "ahNbm-VEV2qpMC_1UzRULwAAAJE"]
[Mon May 25 04:12:11.835756 2026] [:error] [pid 9304:tid 9383] [client 172.212.181.218:5301] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahNbm-VEV2qpMC_1UzRUNQAAAJY"]
[Mon May 25 04:12:13.467831 2026] [:error] [pid 9304:tid 9377] [client 172.212.181.218:13615] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahNbneVEV2qpMC_1UzRUQQAAAJA"]
[Mon May 25 04:12:14.421159 2026] [:error] [pid 50423:tid 50428] [client 172.212.181.218:13595] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahNbnqJWO7En4nKEQ3jvPQAAAQM"]
[Mon May 25 04:12:15.318549 2026] [:error] [pid 50423:tid 50449] [client 172.212.181.218:10859] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahNbn6JWO7En4nKEQ3jvQAAAARg"]
[Mon May 25 04:12:16.191768 2026] [:error] [pid 50423:tid 50444] [client 172.212.181.218:13603] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "ahNboKJWO7En4nKEQ3jvRQAAARM"]
[Mon May 25 04:12:17.220514 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:10110] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "ahNboehIu7KstzsCua96iQAAAMU"]
[Mon May 25 04:12:17.788823 2026] [:error] [pid 50423:tid 50448] [client 172.212.181.218:5463] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "ahNboaJWO7En4nKEQ3jvSAAAARc"]
[Mon May 25 04:12:18.632304 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:5493] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwu.php"] [unique_id "ahNboi1RaFfTSnDQnqEyQgAAABU"]
[Mon May 25 04:12:19.272324 2026] [:error] [pid 9304:tid 9373] [client 172.212.181.218:5679] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwa.php"] [unique_id "ahNbo-VEV2qpMC_1UzRUUwAAAIw"]
[Mon May 25 04:12:19.946573 2026] [:error] [pid 9398:tid 9419] [client 172.212.181.218:11001] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/uwa.php"] [unique_id "ahNbo-hIu7KstzsCua96jQAAAM8"]
[Mon May 25 04:12:20.625496 2026] [proxy_fcgi:error] [pid 9302:tid 9329] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:20.818513 2026] [proxy_fcgi:error] [pid 9302:tid 9312] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:21.009864 2026] [proxy_fcgi:error] [pid 9302:tid 9331] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:21.270884 2026] [proxy_fcgi:error] [pid 9302:tid 9309] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:22.125683 2026] [proxy_fcgi:error] [pid 9302:tid 9317] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:22.339844 2026] [proxy_fcgi:error] [pid 9302:tid 9314] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:22.802503 2026] [proxy_fcgi:error] [pid 9302:tid 9319] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:22.994730 2026] [proxy_fcgi:error] [pid 9302:tid 9330] [client 172.212.181.218:8201] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:12:23.182391 2026] [:error] [pid 9302:tid 9320] [client 172.212.181.218:8201] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahNbpy1RaFfTSnDQnqEyTwAAAA0"]
[Mon May 25 04:12:24.363541 2026] [:error] [pid 9304:tid 9363] [client 172.212.181.218:12202] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahNbqOVEV2qpMC_1UzRUXgAAAII"]
[Mon May 25 04:12:25.596731 2026] [:error] [pid 9398:tid 9426] [client 172.212.181.218:8320] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahNbqehIu7KstzsCua96lQAAANY"]
[Mon May 25 04:12:26.818640 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:5881] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahNbqqJWO7En4nKEQ3jvUwAAAQI"]
[Mon May 25 04:12:33.013139 2026] [:error] [pid 50423:tid 50433] [client 172.212.181.218:5857] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbsaJWO7En4nKEQ3jvVwAAAQg"]
[Mon May 25 04:12:38.229923 2026] [:error] [pid 9398:tid 9406] [client 172.212.181.218:7888] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbtuhIu7KstzsCua96nAAAAMY"]
[Mon May 25 04:12:38.960175 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:8768] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbtuhIu7KstzsCua96nQAAAMU"]
[Mon May 25 04:12:40.402139 2026] [:error] [pid 50423:tid 50431] [client 172.212.181.218:5180] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbuKJWO7En4nKEQ3jvXgAAAQY"]
[Mon May 25 04:12:41.329562 2026] [:error] [pid 9302:tid 9312] [client 172.212.181.218:7878] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "ahNbuS1RaFfTSnDQnqEyVQAAAAU"]
[Mon May 25 04:12:44.650897 2026] [:error] [pid 9398:tid 9427] [client 172.212.181.218:9434] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "ahNbvOhIu7KstzsCua96oAAAANc"]
[Mon May 25 04:12:46.735484 2026] [:error] [pid 50423:tid 50430] [client 172.212.181.218:6161] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "ahNbvqJWO7En4nKEQ3jvaAAAAQU"]
[Mon May 25 04:12:48.021316 2026] [:error] [pid 9302:tid 9313] [client 172.212.181.218:9466] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/puc.php"] [unique_id "ahNbwC1RaFfTSnDQnqEyXgAAAAY"]
[Mon May 25 04:12:50.305768 2026] [:error] [pid 9304:tid 9362] [client 172.212.181.218:8580] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ahNbwuVEV2qpMC_1UzRUgAAAAIE"]
[Mon May 25 04:12:51.984520 2026] [:error] [pid 9303:tid 9350] [client 172.212.181.218:8604] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ahNbw33bQScbssitjPQVYQAAAFA"]
[Mon May 25 04:12:52.760701 2026] [:error] [pid 9303:tid 9337] [client 172.212.181.218:8827] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ahNbxH3bQScbssitjPQVZgAAAEM"]
[Mon May 25 04:12:53.728134 2026] [:error] [pid 9304:tid 9377] [client 172.212.181.218:6194] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/themes.php"] [unique_id "ahNbxeVEV2qpMC_1UzRUhAAAAJA"]
[Mon May 25 04:12:54.656624 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:9496] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbxqJWO7En4nKEQ3jvcAAAAQ8"]
[Mon May 25 04:12:56.792338 2026] [:error] [pid 9304:tid 9382] [client 172.212.181.218:9761] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbyOVEV2qpMC_1UzRUiAAAAJU"]
[Mon May 25 04:12:57.509994 2026] [:error] [pid 9302:tid 9327] [client 172.212.181.218:6190] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbyS1RaFfTSnDQnqEyaAAAABQ"]
[Mon May 25 04:13:00.854331 2026] [:error] [pid 50423:tid 50431] [client 172.212.181.218:8812] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dx.php"] [unique_id "ahNbzKJWO7En4nKEQ3jvfAAAAQY"]
[Mon May 25 04:13:01.834090 2026] [:error] [pid 50423:tid 50436] [client 172.212.181.218:5780] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ahNbzaJWO7En4nKEQ3jvhQAAAQs"]
[Mon May 25 04:13:04.533504 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:8603] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ahNb0OVEV2qpMC_1UzRUjgAAAJc"]
[Mon May 25 04:13:05.554710 2026] [:error] [pid 50423:tid 50445] [client 172.212.181.218:8775] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ahNb0aJWO7En4nKEQ3jvlgAAARQ"]
[Mon May 25 04:13:07.026918 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:8777] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/11.php"] [unique_id "ahNb06JWO7En4nKEQ3jvmAAAAQc"]
[Mon May 25 04:13:07.795309 2026] [:error] [pid 50423:tid 50441] [client 172.212.181.218:6192] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ahNb06JWO7En4nKEQ3jvmwAAARA"]
[Mon May 25 04:13:10.381647 2026] [:error] [pid 50423:tid 50436] [client 172.212.181.218:9524] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ahNb1qJWO7En4nKEQ3jvnwAAAQs"]
[Mon May 25 04:13:12.370666 2026] [:error] [pid 9302:tid 9317] [client 172.212.181.218:9531] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ahNb2C1RaFfTSnDQnqEyewAAAAo"]
[Mon May 25 04:13:13.836919 2026] [:error] [pid 9303:tid 9349] [client 172.212.181.218:7348] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/p.php"] [unique_id "ahNb2X3bQScbssitjPQVrQAAAE8"]
[Mon May 25 04:13:14.634201 2026] [:error] [pid 9303:tid 9351] [client 172.212.181.218:6198] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahNb2n3bQScbssitjPQVsQAAAFE"]
[Mon May 25 04:13:16.498755 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:5764] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahNb3KJWO7En4nKEQ3jvpAAAAQ8"]
[Mon May 25 04:13:21.633272 2026] [:error] [pid 9398:tid 9413] [client 172.212.181.218:9469] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahNb4ehIu7KstzsCua96sQAAAMk"]
[Mon May 25 04:13:23.898542 2026] [proxy_fcgi:error] [pid 9398:tid 9418] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:24.089497 2026] [proxy_fcgi:error] [pid 9398:tid 9416] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:24.495141 2026] [proxy_fcgi:error] [pid 9398:tid 9412] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:24.684445 2026] [proxy_fcgi:error] [pid 9398:tid 9414] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:26.228771 2026] [proxy_fcgi:error] [pid 9398:tid 9426] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:26.420317 2026] [proxy_fcgi:error] [pid 9398:tid 9401] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:26.621849 2026] [proxy_fcgi:error] [pid 9398:tid 9406] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:26.831600 2026] [proxy_fcgi:error] [pid 9398:tid 9405] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:27.228616 2026] [proxy_fcgi:error] [pid 9398:tid 9413] [client 172.212.181.218:9440] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:13:27.424306 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:9440] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ahNb5-hIu7KstzsCua96xQAAANE"]
[Mon May 25 04:13:30.982555 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:9486] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ahNb6qJWO7En4nKEQ3jvtwAAAQc"]
[Mon May 25 04:13:31.886089 2026] [:error] [pid 9303:tid 9341] [client 172.212.181.218:9437] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ahNb633bQScbssitjPQV0wAAAEc"]
[Mon May 25 04:13:32.482023 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:9518] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/inputs.php"] [unique_id "ahNb7KJWO7En4nKEQ3jvugAAAQI"]
[Mon May 25 04:13:33.312842 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:8622] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ahNb7X3bQScbssitjPQV1AAAAEY"]
[Mon May 25 04:13:33.944989 2026] [:error] [pid 50423:tid 50446] [client 172.212.181.218:9477] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ahNb7aJWO7En4nKEQ3jvvQAAARU"]
[Mon May 25 04:13:34.516169 2026] [:error] [pid 50423:tid 50436] [client 172.212.181.218:5857] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ahNb7qJWO7En4nKEQ3jvvgAAAQs"]
[Mon May 25 04:13:36.215553 2026] [:error] [pid 9302:tid 9330] [client 172.212.181.218:9776] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/av.php"] [unique_id "ahNb8C1RaFfTSnDQnqEyjwAAABc"]
[Mon May 25 04:13:36.784031 2026] [:error] [pid 9302:tid 9313] [client 172.212.181.218:9738] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ahNb8C1RaFfTSnDQnqEykAAAAAY"]
[Mon May 25 04:13:37.728618 2026] [:error] [pid 9303:tid 9335] [client 172.212.181.218:6185] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ahNb8X3bQScbssitjPQV2AAAAEE"]
[Mon May 25 04:13:39.494794 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:9427] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ahNb8-hIu7KstzsCua96zwAAANE"]
[Mon May 25 04:13:42.837980 2026] [:error] [pid 9302:tid 9320] [client 172.212.181.218:9791] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/classwithtostring.php"] [unique_id "ahNb9i1RaFfTSnDQnqEylAAAAA0"]
[Mon May 25 04:13:43.652995 2026] [:error] [pid 9303:tid 9348] [client 172.212.181.218:9456] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ahNb933bQScbssitjPQV6AAAAE4"]
[Mon May 25 04:13:44.718516 2026] [:error] [pid 50423:tid 50447] [client 172.212.181.218:8830] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ahNb-KJWO7En4nKEQ3jv4AAAARY"]
[Mon May 25 04:13:45.334197 2026] [:error] [pid 9303:tid 9355] [client 172.212.181.218:9762] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ahNb-X3bQScbssitjPQV6wAAAFU"]
[Mon May 25 04:13:45.846047 2026] [:error] [pid 9303:tid 9352] [client 172.212.181.218:9749] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ahNb-X3bQScbssitjPQV7wAAAFI"]
[Mon May 25 04:13:46.345147 2026] [:error] [pid 9302:tid 9329] [client 172.212.181.218:8625] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ahNb-i1RaFfTSnDQnqEylgAAABY"]
[Mon May 25 04:13:46.873651 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:8791] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ahNb-n3bQScbssitjPQV8QAAAEY"]
[Mon May 25 04:13:47.693084 2026] [:error] [pid 50423:tid 50430] [client 172.212.181.218:5795] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ahNb-6JWO7En4nKEQ3jv5QAAAQU"]
[Mon May 25 04:13:48.322910 2026] [:error] [pid 9304:tid 9364] [client 172.212.181.218:8611] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-blog.php"] [unique_id "ahNb_OVEV2qpMC_1UzRU1AAAAIM"]
[Mon May 25 04:13:48.895351 2026] [:error] [pid 9398:tid 9428] [client 172.212.181.218:6193] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ahNb_OhIu7KstzsCua960AAAANg"]
[Mon May 25 04:13:49.471607 2026] [:error] [pid 9304:tid 9367] [client 172.212.181.218:8615] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ahNb_eVEV2qpMC_1UzRU1QAAAIY"]
[Mon May 25 04:13:50.135852 2026] [:error] [pid 9302:tid 9325] [client 172.212.181.218:8782] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ahNb_i1RaFfTSnDQnqEyoQAAABI"]
[Mon May 25 04:13:50.882855 2026] [:error] [pid 9302:tid 9320] [client 172.212.181.218:6180] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ahNb_i1RaFfTSnDQnqEyowAAAA0"]
[Mon May 25 04:13:51.342659 2026] [:error] [pid 9398:tid 9423] [client 172.212.181.218:7310] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahNb_-hIu7KstzsCua960gAAANM"]
[Mon May 25 04:13:52.086356 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:9484] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahNcAOVEV2qpMC_1UzRU2AAAAJc"]
[Mon May 25 04:13:52.708878 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:9472] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahNcAOhIu7KstzsCua961gAAAMA"]
[Mon May 25 04:13:53.344931 2026] [:error] [pid 9304:tid 9379] [client 172.212.181.218:9459] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahNcAeVEV2qpMC_1UzRU2wAAAJI"]
[Mon May 25 04:13:54.593879 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:6205] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ahNcAqJWO7En4nKEQ3jv7wAAAQc"]
[Mon May 25 04:13:55.126434 2026] [:error] [pid 9304:tid 9374] [client 172.212.181.218:8582] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ahNcA-VEV2qpMC_1UzRU4QAAAI0"]
[Mon May 25 04:13:56.041026 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:5771] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ahNcBOVEV2qpMC_1UzRU5AAAAJg"]
[Mon May 25 04:13:56.535617 2026] [:error] [pid 50423:tid 50437] [client 172.212.181.218:8639] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/adminfuns.php"] [unique_id "ahNcBKJWO7En4nKEQ3jv9AAAAQw"]
[Mon May 25 04:13:57.184950 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:9465] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ahNcBaJWO7En4nKEQ3jv9wAAAQI"]
[Mon May 25 04:13:58.126097 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:9770] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ahNcBuVEV2qpMC_1UzRU6AAAAJc"]
[Mon May 25 04:13:58.707630 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:5809] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ahNcBqJWO7En4nKEQ3jwAwAAAQA"]
[Mon May 25 04:13:59.452774 2026] [:error] [pid 50423:tid 50446] [client 172.212.181.218:9447] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/goods.php"] [unique_id "ahNcB6JWO7En4nKEQ3jwCwAAARU"]
[Mon May 25 04:14:00.327866 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:5803] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ahNcCC1RaFfTSnDQnqEyqQAAABU"]
[Mon May 25 04:14:00.972123 2026] [:error] [pid 9398:tid 9404] [client 172.212.181.218:8809] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ahNcCOhIu7KstzsCua964AAAAMQ"]
[Mon May 25 04:14:02.071610 2026] [:error] [pid 9302:tid 9316] [client 172.212.181.218:9520] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ahNcCi1RaFfTSnDQnqEysAAAAAk"]
[Mon May 25 04:14:02.657724 2026] [:error] [pid 9302:tid 9318] [client 172.212.181.218:8601] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ms-edit.php"] [unique_id "ahNcCi1RaFfTSnDQnqEysgAAAAs"]
[Mon May 25 04:14:03.322838 2026] [:error] [pid 9398:tid 9418] [client 172.212.181.218:9415] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ahNcC-hIu7KstzsCua965gAAAM4"]
[Mon May 25 04:14:04.106684 2026] [:error] [pid 9398:tid 9427] [client 172.212.181.218:8811] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ahNcDOhIu7KstzsCua966AAAANc"]
[Mon May 25 04:14:04.695531 2026] [:error] [pid 9398:tid 9426] [client 172.212.181.218:6155] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ahNcDOhIu7KstzsCua967AAAANY"]
[Mon May 25 04:14:05.106833 2026] [:error] [pid 9398:tid 9404] [client 172.212.181.218:8597] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/222.php"] [unique_id "ahNcDehIu7KstzsCua967QAAAMQ"]
[Mon May 25 04:14:06.138303 2026] [:error] [pid 9302:tid 9326] [client 172.212.181.218:11096] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahNcDi1RaFfTSnDQnqEytgAAABM"]
[Mon May 25 04:14:06.713440 2026] [:error] [pid 9302:tid 9308] [client 172.212.181.218:5770] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahNcDi1RaFfTSnDQnqEytwAAAAE"]
[Mon May 25 04:14:07.534616 2026] [:error] [pid 9304:tid 9364] [client 172.212.181.218:9453] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahNcD-VEV2qpMC_1UzRU6QAAAIM"]
[Mon May 25 04:14:08.172551 2026] [:error] [pid 9304:tid 9361] [client 172.212.181.218:9464] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahNcEOVEV2qpMC_1UzRU6gAAAIA"]
[Mon May 25 04:14:08.792347 2026] [:error] [pid 9398:tid 9402] [client 172.212.181.218:7356] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahNcEOhIu7KstzsCua969wAAAMI"]
[Mon May 25 04:14:09.300376 2026] [:error] [pid 9398:tid 9427] [client 172.212.181.218:9458] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahNcEehIu7KstzsCua96_QAAANc"]
[Mon May 25 04:14:09.871596 2026] [:error] [pid 9303:tid 9342] [client 172.212.181.218:7329] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahNcEX3bQScbssitjPQWAAAAAEg"]
[Mon May 25 04:14:10.484414 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:9767] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahNcEuhIu7KstzsCua97AwAAAMA"]
[Mon May 25 04:14:11.683923 2026] [:error] [pid 9302:tid 9315] [client 172.212.181.218:6165] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahNcEy1RaFfTSnDQnqEyvAAAAAg"]
[Mon May 25 04:14:12.592194 2026] [:error] [pid 9302:tid 9316] [client 172.212.181.218:9424] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahNcFC1RaFfTSnDQnqEyvwAAAAk"]
[Mon May 25 04:14:13.135110 2026] [:error] [pid 9303:tid 9334] [client 172.212.181.218:6176] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahNcFX3bQScbssitjPQWAgAAAEA"]
[Mon May 25 04:14:13.681200 2026] [:error] [pid 9398:tid 9414] [client 172.212.181.218:7346] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahNcFehIu7KstzsCua97DAAAAMo"]
[Mon May 25 04:14:14.359590 2026] [:error] [pid 50423:tid 50439] [client 172.212.181.218:5799] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahNcFqJWO7En4nKEQ3jwDwAAAQ4"]
[Mon May 25 04:14:15.292546 2026] [:error] [pid 50423:tid 50429] [client 172.212.181.218:5818] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahNcF6JWO7En4nKEQ3jwEwAAAQQ"]
[Mon May 25 04:14:16.070808 2026] [:error] [pid 9302:tid 9317] [client 172.212.181.218:5788] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahNcGC1RaFfTSnDQnqEywQAAAAo"]
[Mon May 25 04:14:16.602630 2026] [:error] [pid 50423:tid 50437] [client 172.212.181.218:7569] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahNcGKJWO7En4nKEQ3jwFgAAAQw"]
[Mon May 25 04:14:17.284911 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:9490] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahNcGehIu7KstzsCua97EgAAAMA"]
[Mon May 25 04:14:17.999281 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:6172] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahNcGehIu7KstzsCua97FQAAAMc"]
[Mon May 25 04:14:18.637204 2026] [:error] [pid 9398:tid 9401] [client 172.212.181.218:9412] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahNcGuhIu7KstzsCua97GAAAAME"]
[Mon May 25 04:14:19.370998 2026] [:error] [pid 9304:tid 9376] [client 172.212.181.218:5157] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahNcG-VEV2qpMC_1UzRU8wAAAI8"]
[Mon May 25 04:14:20.047580 2026] [:error] [pid 9303:tid 9358] [client 172.212.181.218:9461] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ahNcHH3bQScbssitjPQWDQAAAFg"]
[Mon May 25 04:14:20.712644 2026] [:error] [pid 9304:tid 9368] [client 172.212.181.218:6199] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ahNcHOVEV2qpMC_1UzRU9AAAAIc"]
[Mon May 25 04:14:21.284981 2026] [:error] [pid 9303:tid 9334] [client 172.212.181.218:9501] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ahNcHX3bQScbssitjPQWDgAAAEA"]
[Mon May 25 04:14:22.020510 2026] [:error] [pid 9302:tid 9330] [client 172.212.181.218:7315] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp.php"] [unique_id "ahNcHi1RaFfTSnDQnqEyygAAABc"]
[Mon May 25 04:14:22.849331 2026] [:error] [pid 9302:tid 9318] [client 172.212.181.218:8606] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ahNcHi1RaFfTSnDQnqEyzQAAAAs"]
[Mon May 25 04:14:23.835635 2026] [:error] [pid 9304:tid 9375] [client 172.212.181.218:7312] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ahNcH-VEV2qpMC_1UzRU-QAAAI4"]
[Mon May 25 04:14:24.351575 2026] [:error] [pid 9302:tid 9313] [client 172.212.181.218:8607] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ahNcIC1RaFfTSnDQnqEy0wAAAAY"]
[Mon May 25 04:14:24.828636 2026] [:error] [pid 50423:tid 50427] [client 172.212.181.218:9479] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/abcd.php"] [unique_id "ahNcIKJWO7En4nKEQ3jwJAAAAQI"]
[Mon May 25 04:14:25.287094 2026] [:error] [pid 9398:tid 9403] [client 172.212.181.218:9771] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ahNcIehIu7KstzsCua97IwAAAMM"]
[Mon May 25 04:14:25.830615 2026] [:error] [pid 9302:tid 9323] [client 172.212.181.218:8771] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ahNcIS1RaFfTSnDQnqEy1QAAABA"]
[Mon May 25 04:14:26.533891 2026] [:error] [pid 9304:tid 9363] [client 172.212.181.218:8624] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a1.php"] [unique_id "ahNcIuVEV2qpMC_1UzRU_AAAAII"]
[Mon May 25 04:14:27.028572 2026] [proxy_fcgi:error] [pid 50423:tid 50434] [client 172.212.181.218:6178] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:27.299934 2026] [:error] [pid 50423:tid 50439] [client 172.212.181.218:6178] [client 172.212.181.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "quarryspec.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ahNcI6JWO7En4nKEQ3jwKQAAAQ4"]
[Mon May 25 04:14:27.863291 2026] [proxy_fcgi:error] [pid 50423:tid 50447] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:29.150419 2026] [proxy_fcgi:error] [pid 50423:tid 50433] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:29.731032 2026] [proxy_fcgi:error] [pid 50423:tid 50431] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:29.934927 2026] [proxy_fcgi:error] [pid 50423:tid 50429] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:30.131125 2026] [proxy_fcgi:error] [pid 50423:tid 50442] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:30.328568 2026] [proxy_fcgi:error] [pid 50423:tid 50437] [client 172.212.181.218:8577] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:14:30.723038 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:8577] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ahNcJqJWO7En4nKEQ3jwQgAAAQA"]
[Mon May 25 04:14:31.328524 2026] [:error] [pid 50423:tid 50433] [client 172.212.181.218:11098] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ahNcJ6JWO7En4nKEQ3jwRQAAAQg"]
[Mon May 25 04:14:31.786750 2026] [:error] [pid 9303:tid 9339] [client 172.212.181.218:9445] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ahNcJ33bQScbssitjPQWFgAAAEU"]
[Mon May 25 04:14:32.249297 2026] [:error] [pid 9302:tid 9307] [client 172.212.181.218:8630] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/chosen.php"] [unique_id "ahNcKC1RaFfTSnDQnqEy_gAAAAA"]
[Mon May 25 04:14:32.713995 2026] [:error] [pid 9398:tid 9414] [client 172.212.181.218:9506] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ahNcKOhIu7KstzsCua97LgAAAMo"]
[Mon May 25 04:14:33.183468 2026] [:error] [pid 9304:tid 9367] [client 172.212.181.218:8796] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ahNcKeVEV2qpMC_1UzRVAQAAAIY"]
[Mon May 25 04:14:33.600887 2026] [:error] [pid 9303:tid 9334] [client 172.212.181.218:9781] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ahNcKX3bQScbssitjPQWGAAAAEA"]
[Mon May 25 04:14:34.308082 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:9786] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "ahNcKuhIu7KstzsCua97MAAAANI"]
[Mon May 25 04:14:34.759063 2026] [:error] [pid 50423:tid 50438] [client 172.212.181.218:8636] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/00.php"] [unique_id "ahNcKqJWO7En4nKEQ3jwTwAAAQ0"]
[Mon May 25 04:14:35.212962 2026] [:error] [pid 9398:tid 9404] [client 172.212.181.218:9462] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/00.php"] [unique_id "ahNcK-hIu7KstzsCua97MQAAAMQ"]
[Mon May 25 04:14:35.724852 2026] [:error] [pid 50423:tid 50434] [client 172.212.181.218:8632] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/00.php"] [unique_id "ahNcK6JWO7En4nKEQ3jwUQAAAQk"]
[Mon May 25 04:14:36.187840 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:9731] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/00.php"] [unique_id "ahNcLKJWO7En4nKEQ3jwUwAAAQ8"]
[Mon May 25 04:14:36.663902 2026] [:error] [pid 9398:tid 9417] [client 172.212.181.218:8831] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/als.php"] [unique_id "ahNcLOhIu7KstzsCua97MgAAAM0"]
[Mon May 25 04:14:37.128293 2026] [:error] [pid 9304:tid 9369] [client 172.212.181.218:7895] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/als.php"] [unique_id "ahNcLeVEV2qpMC_1UzRVBgAAAIg"]
[Mon May 25 04:14:37.655121 2026] [:error] [pid 9303:tid 9336] [client 172.212.181.218:8610] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/als.php"] [unique_id "ahNcLX3bQScbssitjPQWHgAAAEI"]
[Mon May 25 04:14:38.206103 2026] [:error] [pid 9304:tid 9383] [client 172.212.181.218:5815] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/als.php"] [unique_id "ahNcLuVEV2qpMC_1UzRVCwAAAJY"]
[Mon May 25 04:14:38.654308 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:5810] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pol.php"] [unique_id "ahNcLuhIu7KstzsCua97NAAAAMg"]
[Mon May 25 04:14:39.260463 2026] [:error] [pid 9398:tid 9415] [client 172.212.181.218:7454] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pol.php"] [unique_id "ahNcL-hIu7KstzsCua97NgAAAMs"]
[Mon May 25 04:14:39.812145 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:8578] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pol.php"] [unique_id "ahNcL-VEV2qpMC_1UzRVDQAAAJg"]
[Mon May 25 04:14:40.327374 2026] [:error] [pid 9398:tid 9413] [client 172.212.181.218:5768] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/pol.php"] [unique_id "ahNcMOhIu7KstzsCua97OQAAAMk"]
[Mon May 25 04:14:41.006710 2026] [:error] [pid 9302:tid 9325] [client 172.212.181.218:8617] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "ahNcMS1RaFfTSnDQnqEzCwAAABI"]
[Mon May 25 04:14:41.434179 2026] [:error] [pid 50423:tid 50444] [client 172.212.181.218:7336] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "ahNcMaJWO7En4nKEQ3jwXAAAARM"]
[Mon May 25 04:14:41.868466 2026] [:error] [pid 9304:tid 9364] [client 172.212.181.218:9772] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "ahNcMeVEV2qpMC_1UzRVEQAAAIM"]
[Mon May 25 04:14:42.701686 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:9474] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ll.php"] [unique_id "ahNcMuVEV2qpMC_1UzRVEwAAAJc"]
[Mon May 25 04:14:43.200910 2026] [:error] [pid 50423:tid 50437] [client 172.212.181.218:9436] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ahNcM6JWO7En4nKEQ3jwXgAAAQw"]
[Mon May 25 04:14:43.703296 2026] [:error] [pid 50423:tid 50438] [client 172.212.181.218:6151] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ahNcM6JWO7En4nKEQ3jwYAAAAQ0"]
[Mon May 25 04:14:44.313616 2026] [:error] [pid 50423:tid 50447] [client 172.212.181.218:9468] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ahNcNKJWO7En4nKEQ3jwZAAAARY"]
[Mon May 25 04:14:44.827447 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:8614] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/sf.php"] [unique_id "ahNcNKJWO7En4nKEQ3jwZwAAAQc"]
[Mon May 25 04:14:45.390703 2026] [:error] [pid 50423:tid 50431] [client 172.212.181.218:9442] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ahNcNaJWO7En4nKEQ3jwaQAAAQY"]
[Mon May 25 04:14:45.800093 2026] [:error] [pid 9302:tid 9327] [client 172.212.181.218:8613] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ahNcNS1RaFfTSnDQnqEzDQAAABQ"]
[Mon May 25 04:14:46.708944 2026] [:error] [pid 50423:tid 50447] [client 172.212.181.218:9783] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ahNcNqJWO7En4nKEQ3jwbwAAARY"]
[Mon May 25 04:14:47.295290 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:5812] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file5.php"] [unique_id "ahNcN-VEV2qpMC_1UzRVGwAAAJg"]
[Mon May 25 04:14:47.817652 2026] [:error] [pid 9398:tid 9402] [client 172.212.181.218:9492] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ahNcN-hIu7KstzsCua97SQAAAMI"]
[Mon May 25 04:14:48.543132 2026] [:error] [pid 9302:tid 9323] [client 172.212.181.218:6163] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ahNcOC1RaFfTSnDQnqEzEgAAABA"]
[Mon May 25 04:14:49.428727 2026] [:error] [pid 9398:tid 9419] [client 172.212.181.218:7590] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ahNcOehIu7KstzsCua97UAAAAM8"]
[Mon May 25 04:14:49.983272 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:6145] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/fs.php"] [unique_id "ahNcOaJWO7En4nKEQ3jweQAAAQA"]
[Mon May 25 04:14:50.498345 2026] [:error] [pid 50423:tid 50426] [client 172.212.181.218:9463] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahNcOqJWO7En4nKEQ3jwewAAAQE"]
[Mon May 25 04:14:51.066667 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:5821] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahNcO6JWO7En4nKEQ3jwgAAAAQ8"]
[Mon May 25 04:14:51.524276 2026] [:error] [pid 9398:tid 9428] [client 172.212.181.218:7321] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahNcO-hIu7KstzsCua97VAAAANg"]
[Mon May 25 04:14:51.985230 2026] [:error] [pid 50423:tid 50449] [client 172.212.181.218:6174] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahNcO6JWO7En4nKEQ3jwhAAAARg"]
[Mon May 25 04:14:52.660391 2026] [:error] [pid 9302:tid 9329] [client 172.212.181.218:7306] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "ahNcPC1RaFfTSnDQnqEzGgAAABY"]
[Mon May 25 04:14:53.682175 2026] [:error] [pid 50423:tid 50448] [client 172.212.181.218:9416] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "ahNcPaJWO7En4nKEQ3jwjgAAARc"]
[Mon May 25 04:14:54.278982 2026] [:error] [pid 9303:tid 9351] [client 172.212.181.218:8813] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "ahNcPn3bQScbssitjPQWMQAAAFE"]
[Mon May 25 04:14:54.739073 2026] [:error] [pid 9398:tid 9417] [client 172.212.181.218:8588] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file.php"] [unique_id "ahNcPuhIu7KstzsCua97VgAAAM0"]
[Mon May 25 04:14:55.327745 2026] [:error] [pid 9304:tid 9374] [client 172.212.181.218:5763] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cfile.php"] [unique_id "ahNcP-VEV2qpMC_1UzRVIAAAAI0"]
[Mon May 25 04:14:55.978627 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:9756] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cfile.php"] [unique_id "ahNcP-VEV2qpMC_1UzRVIwAAAJg"]
[Mon May 25 04:14:56.467066 2026] [:error] [pid 9304:tid 9366] [client 172.212.181.218:5819] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cfile.php"] [unique_id "ahNcQOVEV2qpMC_1UzRVJgAAAIU"]
[Mon May 25 04:14:56.982132 2026] [:error] [pid 9302:tid 9310] [client 172.212.181.218:7335] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cfile.php"] [unique_id "ahNcQC1RaFfTSnDQnqEzHQAAAAM"]
[Mon May 25 04:14:57.519106 2026] [:error] [pid 9302:tid 9321] [client 172.212.181.218:5785] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ahNcQS1RaFfTSnDQnqEzHgAAAA4"]
[Mon May 25 04:14:58.009847 2026] [:error] [pid 9302:tid 9330] [client 172.212.181.218:7334] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ahNcQi1RaFfTSnDQnqEzHwAAABc"]
[Mon May 25 04:14:58.534516 2026] [:error] [pid 9304:tid 9364] [client 172.212.181.218:9513] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ahNcQuVEV2qpMC_1UzRVKQAAAIM"]
[Mon May 25 04:14:58.962331 2026] [:error] [pid 9398:tid 9420] [client 172.212.181.218:5778] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/class-wp.php"] [unique_id "ahNcQuhIu7KstzsCua97WwAAANA"]
[Mon May 25 04:14:59.427571 2026] [:error] [pid 9398:tid 9406] [client 172.212.181.218:6146] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "ahNcQ-hIu7KstzsCua97XgAAAMY"]
[Mon May 25 04:14:59.862293 2026] [:error] [pid 9303:tid 9338] [client 172.212.181.218:5796] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "ahNcQ33bQScbssitjPQWNgAAAEQ"]
[Mon May 25 04:15:00.473571 2026] [:error] [pid 9398:tid 9423] [client 172.212.181.218:6157] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "ahNcROhIu7KstzsCua97YAAAANM"]
[Mon May 25 04:15:00.928825 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:7323] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ahax.php"] [unique_id "ahNcROhIu7KstzsCua97YwAAANE"]
[Mon May 25 04:15:01.457738 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:6147] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa2.php"] [unique_id "ahNcRehIu7KstzsCua97aAAAAMg"]
[Mon May 25 04:15:02.068926 2026] [:error] [pid 9304:tid 9365] [client 172.212.181.218:13840] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa2.php"] [unique_id "ahNcRuVEV2qpMC_1UzRVLAAAAIQ"]
[Mon May 25 04:15:02.528246 2026] [:error] [pid 9303:tid 9346] [client 172.212.181.218:7304] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa2.php"] [unique_id "ahNcRn3bQScbssitjPQWOQAAAEw"]
[Mon May 25 04:15:03.164046 2026] [:error] [pid 50423:tid 50442] [client 172.212.181.218:6158] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/aa2.php"] [unique_id "ahNcR6JWO7En4nKEQ3jwpwAAARE"]
[Mon May 25 04:15:03.700426 2026] [:error] [pid 9398:tid 9406] [client 172.212.181.218:6154] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ahNcR-hIu7KstzsCua97awAAAMY"]
[Mon May 25 04:15:04.774884 2026] [:error] [pid 9304:tid 9366] [client 172.212.181.218:6200] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ahNcSOVEV2qpMC_1UzRVLwAAAIU"]
[Mon May 25 04:15:05.292208 2026] [:error] [pid 9302:tid 9316] [client 172.212.181.218:5136] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ahNcSS1RaFfTSnDQnqEzKQAAAAk"]
[Mon May 25 04:15:05.900108 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:7349] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccou.php"] [unique_id "ahNcSehIu7KstzsCua97cgAAAMc"]
[Mon May 25 04:15:06.357369 2026] [:error] [pid 9398:tid 9402] [client 172.212.181.218:7320] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/login8.php"] [unique_id "ahNcSuhIu7KstzsCua97dgAAAMI"]
[Mon May 25 04:15:06.851707 2026] [:error] [pid 9302:tid 9320] [client 172.212.181.218:6166] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/login8.php"] [unique_id "ahNcSi1RaFfTSnDQnqEzKwAAAA0"]
[Mon May 25 04:15:07.476952 2026] [:error] [pid 9303:tid 9356] [client 172.212.181.218:9729] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/login8.php"] [unique_id "ahNcS33bQScbssitjPQWSwAAAFY"]
[Mon May 25 04:15:07.992885 2026] [:error] [pid 9303:tid 9346] [client 172.212.181.218:8609] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/login8.php"] [unique_id "ahNcS33bQScbssitjPQWTAAAAEw"]
[Mon May 25 04:15:08.611339 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:9410] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nx.php"] [unique_id "ahNcTKJWO7En4nKEQ3jwsAAAAQc"]
[Mon May 25 04:15:09.324444 2026] [:error] [pid 9398:tid 9401] [client 172.212.181.218:9757] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nx.php"] [unique_id "ahNcTehIu7KstzsCua97fAAAAME"]
[Mon May 25 04:15:09.952863 2026] [:error] [pid 9398:tid 9403] [client 172.212.181.218:9760] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nx.php"] [unique_id "ahNcTehIu7KstzsCua97fQAAAMM"]
[Mon May 25 04:15:10.580712 2026] [:error] [pid 50423:tid 50428] [client 172.212.181.218:5133] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/nx.php"] [unique_id "ahNcTqJWO7En4nKEQ3jwswAAAQM"]
[Mon May 25 04:15:11.297844 2026] [:error] [pid 9304:tid 9361] [client 172.212.181.218:8825] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dr.php"] [unique_id "ahNcT-VEV2qpMC_1UzRVMQAAAIA"]
[Mon May 25 04:15:11.856353 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:9426] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dr.php"] [unique_id "ahNcT-hIu7KstzsCua97ggAAANE"]
[Mon May 25 04:15:12.438016 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:9782] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dr.php"] [unique_id "ahNcUOhIu7KstzsCua97hQAAAMU"]
[Mon May 25 04:15:13.165119 2026] [:error] [pid 9398:tid 9424] [client 172.212.181.218:5761] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dr.php"] [unique_id "ahNcUehIu7KstzsCua97iAAAANQ"]
[Mon May 25 04:15:13.886884 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:7305] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xamp.php"] [unique_id "ahNcUehIu7KstzsCua97igAAAMg"]
[Mon May 25 04:15:14.618984 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:8634] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xamp.php"] [unique_id "ahNcUuhIu7KstzsCua97jgAAAMc"]
[Mon May 25 04:15:15.186780 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:7308] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xamp.php"] [unique_id "ahNcU-hIu7KstzsCua97kAAAAMU"]
[Mon May 25 04:15:15.664746 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:9507] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xamp.php"] [unique_id "ahNcUy1RaFfTSnDQnqEzLgAAABU"]
[Mon May 25 04:15:16.079312 2026] [:error] [pid 50423:tid 50437] [client 172.212.181.218:8627] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahNcVKJWO7En4nKEQ3jwtgAAAQw"]
[Mon May 25 04:15:16.522120 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:6191] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahNcVH3bQScbssitjPQWWAAAAEY"]
[Mon May 25 04:15:17.001915 2026] [:error] [pid 50423:tid 50433] [client 172.212.181.218:8634] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahNcVaJWO7En4nKEQ3jwuAAAAQg"]
[Mon May 25 04:15:17.433393 2026] [:error] [pid 50423:tid 50448] [client 172.212.181.218:8774] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahNcVaJWO7En4nKEQ3jwuQAAARc"]
[Mon May 25 04:15:17.835137 2026] [:error] [pid 50423:tid 50435] [client 172.212.181.218:6159] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clas11.php"] [unique_id "ahNcVaJWO7En4nKEQ3jwvAAAAQo"]
[Mon May 25 04:15:18.355872 2026] [:error] [pid 9304:tid 9370] [client 172.212.181.218:8800] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clas11.php"] [unique_id "ahNcVuVEV2qpMC_1UzRVOAAAAIk"]
[Mon May 25 04:15:18.868390 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:9732] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clas11.php"] [unique_id "ahNcVqJWO7En4nKEQ3jwwgAAAQA"]
[Mon May 25 04:15:19.322941 2026] [:error] [pid 9304:tid 9365] [client 172.212.181.218:7317] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/clas11.php"] [unique_id "ahNcV-VEV2qpMC_1UzRVOgAAAIQ"]
[Mon May 25 04:15:19.854034 2026] [:error] [pid 9302:tid 9316] [client 172.212.181.218:8591] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxl.php"] [unique_id "ahNcVy1RaFfTSnDQnqEzMQAAAAk"]
[Mon May 25 04:15:20.323477 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:8818] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxl.php"] [unique_id "ahNcWOhIu7KstzsCua97lQAAAMc"]
[Mon May 25 04:15:20.848361 2026] [:error] [pid 50423:tid 50443] [client 172.212.181.218:7595] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxl.php"] [unique_id "ahNcWKJWO7En4nKEQ3jwxgAAARI"]
[Mon May 25 04:15:21.267236 2026] [:error] [pid 50423:tid 50438] [client 172.212.181.218:9534] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cxl.php"] [unique_id "ahNcWaJWO7En4nKEQ3jwxwAAAQ0"]
[Mon May 25 04:15:21.789150 2026] [:error] [pid 50423:tid 50433] [client 172.212.181.218:7606] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "ahNcWaJWO7En4nKEQ3jwyQAAAQg"]
[Mon May 25 04:15:22.245206 2026] [:error] [pid 9304:tid 9374] [client 172.212.181.218:7318] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "ahNcWuVEV2qpMC_1UzRVPAAAAI0"]
[Mon May 25 04:15:22.781401 2026] [:error] [pid 50423:tid 50434] [client 172.212.181.218:5816] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "ahNcWqJWO7En4nKEQ3jwzAAAAQk"]
[Mon May 25 04:15:23.391150 2026] [:error] [pid 9302:tid 9329] [client 172.212.181.218:9522] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/bb.php"] [unique_id "ahNcWy1RaFfTSnDQnqEzMgAAABY"]
[Mon May 25 04:15:23.896820 2026] [:error] [pid 9302:tid 9315] [client 172.212.181.218:9451] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtox.php"] [unique_id "ahNcWy1RaFfTSnDQnqEzMwAAAAg"]
[Mon May 25 04:15:25.225986 2026] [:error] [pid 9302:tid 9324] [client 172.212.181.218:6149] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtox.php"] [unique_id "ahNcXS1RaFfTSnDQnqEzNwAAABE"]
[Mon May 25 04:15:25.924969 2026] [:error] [pid 9302:tid 9318] [client 172.212.181.218:5777] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtox.php"] [unique_id "ahNcXS1RaFfTSnDQnqEzOQAAAAs"]
[Mon May 25 04:15:26.420568 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:8826] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dtox.php"] [unique_id "ahNcXqJWO7En4nKEQ3jw1AAAAQc"]
[Mon May 25 04:15:27.200982 2026] [:error] [pid 9302:tid 9326] [client 172.212.181.218:9525] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ahNcXy1RaFfTSnDQnqEzPQAAABM"]
[Mon May 25 04:15:27.875079 2026] [:error] [pid 50423:tid 50446] [client 172.212.181.218:5762] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ahNcX6JWO7En4nKEQ3jw1gAAARU"]
[Mon May 25 04:15:28.782203 2026] [:error] [pid 9304:tid 9378] [client 172.212.181.218:5135] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ahNcYOVEV2qpMC_1UzRVPgAAAJE"]
[Mon May 25 04:15:29.296769 2026] [:error] [pid 9304:tid 9363] [client 172.212.181.218:11118] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/eee.php"] [unique_id "ahNcYeVEV2qpMC_1UzRVQAAAAII"]
[Mon May 25 04:15:29.952197 2026] [:error] [pid 9304:tid 9373] [client 172.212.181.218:8608] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/5BltUjE9CrY.php"] [unique_id "ahNcYeVEV2qpMC_1UzRVQwAAAIw"]
[Mon May 25 04:15:30.760927 2026] [proxy_fcgi:error] [pid 9302:tid 9329] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:30.953222 2026] [proxy_fcgi:error] [pid 9302:tid 9330] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:31.145003 2026] [proxy_fcgi:error] [pid 9302:tid 9317] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:31.336752 2026] [proxy_fcgi:error] [pid 9302:tid 9324] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:31.528134 2026] [proxy_fcgi:error] [pid 9302:tid 9327] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:31.724417 2026] [proxy_fcgi:error] [pid 9302:tid 9322] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:31.916205 2026] [proxy_fcgi:error] [pid 9302:tid 9325] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:32.116578 2026] [proxy_fcgi:error] [pid 9302:tid 9313] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:32.308388 2026] [proxy_fcgi:error] [pid 9302:tid 9328] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:32.499174 2026] [proxy_fcgi:error] [pid 9302:tid 9307] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:32.742065 2026] [proxy_fcgi:error] [pid 9302:tid 9312] [client 172.212.181.218:7307] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:15:32.936754 2026] [:error] [pid 9302:tid 9321] [client 172.212.181.218:7307] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "ahNcZC1RaFfTSnDQnqEzUQAAAA4"]
[Mon May 25 04:15:33.703016 2026] [:error] [pid 9304:tid 9371] [client 172.212.181.218:7358] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "ahNcZeVEV2qpMC_1UzRVTAAAAIo"]
[Mon May 25 04:15:34.310769 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:6189] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "ahNcZuhIu7KstzsCua97nQAAANE"]
[Mon May 25 04:15:34.856430 2026] [:error] [pid 9304:tid 9361] [client 172.212.181.218:8783] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/build.php"] [unique_id "ahNcZuVEV2qpMC_1UzRVTgAAAIA"]
[Mon May 25 04:15:35.539809 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:8623] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file6.php"] [unique_id "ahNcZ-hIu7KstzsCua97oQAAAMU"]
[Mon May 25 04:15:36.117024 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:7585] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file6.php"] [unique_id "ahNcaOhIu7KstzsCua97owAAANI"]
[Mon May 25 04:15:36.758772 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:7462] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file6.php"] [unique_id "ahNcaOhIu7KstzsCua97pwAAAMA"]
[Mon May 25 04:15:37.473305 2026] [:error] [pid 9398:tid 9417] [client 172.212.181.218:9455] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file6.php"] [unique_id "ahNcaehIu7KstzsCua97qgAAAM0"]
[Mon May 25 04:15:37.931941 2026] [:error] [pid 9398:tid 9415] [client 172.212.181.218:9435] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ahNcaehIu7KstzsCua97qwAAAMs"]
[Mon May 25 04:15:38.575650 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:9460] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ahNcauhIu7KstzsCua97rwAAAMc"]
[Mon May 25 04:15:39.105121 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:6175] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ahNca6JWO7En4nKEQ3jw3QAAAQ8"]
[Mon May 25 04:15:39.935339 2026] [:error] [pid 50423:tid 50426] [client 172.212.181.218:7880] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/cabs.php"] [unique_id "ahNca6JWO7En4nKEQ3jw3wAAAQE"]
[Mon May 25 04:15:40.650671 2026] [:error] [pid 50423:tid 50434] [client 172.212.181.218:8579] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file15.php"] [unique_id "ahNcbKJWO7En4nKEQ3jw5QAAAQk"]
[Mon May 25 04:15:41.183471 2026] [:error] [pid 50423:tid 50448] [client 172.212.181.218:9737] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file15.php"] [unique_id "ahNcbaJWO7En4nKEQ3jw6AAAARc"]
[Mon May 25 04:15:41.816623 2026] [:error] [pid 50423:tid 50446] [client 172.212.181.218:6173] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file15.php"] [unique_id "ahNcbaJWO7En4nKEQ3jw6gAAARU"]
[Mon May 25 04:15:42.316211 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:9476] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/file15.php"] [unique_id "ahNcbqJWO7En4nKEQ3jw7AAAAQA"]
[Mon May 25 04:15:42.939173 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:9535] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "ahNcbqJWO7En4nKEQ3jw7gAAAQ8"]
[Mon May 25 04:15:43.843133 2026] [:error] [pid 9398:tid 9423] [client 172.212.181.218:13595] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "ahNcb-hIu7KstzsCua97tAAAANM"]
[Mon May 25 04:15:44.596091 2026] [:error] [pid 9304:tid 9380] [client 172.212.181.218:5172] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "ahNccOVEV2qpMC_1UzRVXAAAAJM"]
[Mon May 25 04:15:45.257409 2026] [:error] [pid 9398:tid 9413] [client 172.212.181.218:11083] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/lock360.php"] [unique_id "ahNccehIu7KstzsCua97twAAAMk"]
[Mon May 25 04:15:45.810541 2026] [:error] [pid 9304:tid 9385] [client 172.212.181.218:8626] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "ahNcceVEV2qpMC_1UzRVYgAAAJg"]
[Mon May 25 04:15:46.398119 2026] [:error] [pid 9302:tid 9317] [client 172.212.181.218:7302] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "ahNcci1RaFfTSnDQnqEzVwAAAAo"]
[Mon May 25 04:15:46.860778 2026] [:error] [pid 50423:tid 50439] [client 172.212.181.218:6156] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "ahNccqJWO7En4nKEQ3jw7wAAAQ4"]
[Mon May 25 04:15:47.315817 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:5801] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/security.php"] [unique_id "ahNcc6JWO7En4nKEQ3jw8AAAAQA"]
[Mon May 25 04:15:47.803937 2026] [:error] [pid 50423:tid 50440] [client 172.212.181.218:5142] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/title.php"] [unique_id "ahNcc6JWO7En4nKEQ3jw8gAAAQ8"]
[Mon May 25 04:15:48.239338 2026] [:error] [pid 50423:tid 50442] [client 172.212.181.218:5174] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/title.php"] [unique_id "ahNcdKJWO7En4nKEQ3jw9QAAARE"]
[Mon May 25 04:15:48.899714 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:5786] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/title.php"] [unique_id "ahNcdKJWO7En4nKEQ3jw-QAAAQc"]
[Mon May 25 04:15:49.642831 2026] [:error] [pid 50423:tid 50449] [client 172.212.181.218:5800] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/title.php"] [unique_id "ahNcdaJWO7En4nKEQ3jw_AAAARg"]
[Mon May 25 04:15:50.379187 2026] [:error] [pid 9302:tid 9318] [client 172.212.181.218:9431] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/N1.php"] [unique_id "ahNcdi1RaFfTSnDQnqEzWQAAAAs"]
[Mon May 25 04:15:51.218842 2026] [:error] [pid 9302:tid 9322] [client 172.212.181.218:6177] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/N1.php"] [unique_id "ahNcdy1RaFfTSnDQnqEzXAAAAA8"]
[Mon May 25 04:15:51.843885 2026] [:error] [pid 9303:tid 9354] [client 172.212.181.218:7890] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/N1.php"] [unique_id "ahNcd33bQScbssitjPQWdQAAAFQ"]
[Mon May 25 04:15:52.331428 2026] [:error] [pid 9303:tid 9352] [client 172.212.181.218:5767] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/N1.php"] [unique_id "ahNceH3bQScbssitjPQWdgAAAFI"]
[Mon May 25 04:15:52.850456 2026] [:error] [pid 9303:tid 9345] [client 172.212.181.218:9526] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ahNceH3bQScbssitjPQWewAAAEs"]
[Mon May 25 04:15:53.472957 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:7354] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ahNceehIu7KstzsCua97uwAAANE"]
[Mon May 25 04:15:54.097845 2026] [:error] [pid 9398:tid 9418] [client 172.212.181.218:7479] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ahNceuhIu7KstzsCua97vAAAAM4"]
[Mon May 25 04:15:54.747316 2026] [:error] [pid 9398:tid 9417] [client 172.212.181.218:10043] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ahNceuhIu7KstzsCua97vQAAAM0"]
[Mon May 25 04:15:55.546547 2026] [:error] [pid 9304:tid 9367] [client 172.212.181.218:10002] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ahNce-VEV2qpMC_1UzRVagAAAIY"]
[Mon May 25 04:15:56.413177 2026] [:error] [pid 9304:tid 9384] [client 172.212.181.218:8824] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ahNcfOVEV2qpMC_1UzRVbAAAAJc"]
[Mon May 25 04:15:57.107198 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:8804] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ahNcfehIu7KstzsCua97xgAAANI"]
[Mon May 25 04:15:57.626383 2026] [:error] [pid 9304:tid 9369] [client 172.212.181.218:7881] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/no1.php"] [unique_id "ahNcfeVEV2qpMC_1UzRVbwAAAIg"]
[Mon May 25 04:15:58.961613 2026] [:error] [pid 9303:tid 9348] [client 172.212.181.218:5792] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ahNcfn3bQScbssitjPQWgAAAAE4"]
[Mon May 25 04:15:59.575448 2026] [:error] [pid 50423:tid 50442] [client 172.212.181.218:6168] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ahNcf6JWO7En4nKEQ3jxBAAAARE"]
[Mon May 25 04:16:00.290568 2026] [:error] [pid 9302:tid 9327] [client 172.212.181.218:9494] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ahNcgC1RaFfTSnDQnqEzYgAAABQ"]
[Mon May 25 04:16:01.343832 2026] [:error] [pid 9303:tid 9339] [client 172.212.181.218:5817] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/.sghb.php"] [unique_id "ahNcgX3bQScbssitjPQWhQAAAEU"]
[Mon May 25 04:16:01.988067 2026] [:error] [pid 9303:tid 9340] [client 172.212.181.218:9444] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ahNcgX3bQScbssitjPQWiAAAAEY"]
[Mon May 25 04:16:02.491615 2026] [:error] [pid 9302:tid 9313] [client 172.212.181.218:8774] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ahNcgi1RaFfTSnDQnqEzZgAAAAY"]
[Mon May 25 04:16:03.028817 2026] [:error] [pid 9302:tid 9328] [client 172.212.181.218:8612] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ahNcgy1RaFfTSnDQnqEzZwAAABU"]
[Mon May 25 04:16:03.489618 2026] [:error] [pid 9304:tid 9381] [client 172.212.181.218:8584] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jp.php"] [unique_id "ahNcg-VEV2qpMC_1UzRVcQAAAJQ"]
[Mon May 25 04:16:04.131008 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:7563] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ahNchOhIu7KstzsCua976gAAANE"]
[Mon May 25 04:16:04.823807 2026] [:error] [pid 9398:tid 9407] [client 172.212.181.218:6168] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ahNchOhIu7KstzsCua978wAAAMc"]
[Mon May 25 04:16:05.481228 2026] [:error] [pid 50423:tid 50444] [client 172.212.181.218:7304] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ahNchaJWO7En4nKEQ3jxBgAAARM"]
[Mon May 25 04:16:06.178042 2026] [:error] [pid 9398:tid 9427] [client 172.212.181.218:5823] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/f35.php"] [unique_id "ahNchuhIu7KstzsCua97_QAAANc"]
[Mon May 25 04:16:06.863257 2026] [:error] [pid 9304:tid 9376] [client 172.212.181.218:7296] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ahNchuVEV2qpMC_1UzRVdQAAAI8"]
[Mon May 25 04:16:07.455876 2026] [:error] [pid 9302:tid 9310] [client 172.212.181.218:7915] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ahNchy1RaFfTSnDQnqEzbQAAAAM"]
[Mon May 25 04:16:08.177562 2026] [:error] [pid 9302:tid 9319] [client 172.212.181.218:9452] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ahNciC1RaFfTSnDQnqEzbgAAAAw"]
[Mon May 25 04:16:08.810038 2026] [:error] [pid 9302:tid 9318] [client 172.212.181.218:8631] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xa.php"] [unique_id "ahNciC1RaFfTSnDQnqEzcAAAAAs"]
[Mon May 25 04:16:09.317892 2026] [:error] [pid 9303:tid 9347] [client 172.212.181.218:5152] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ahNciX3bQScbssitjPQWkAAAAE0"]
[Mon May 25 04:16:10.088092 2026] [:error] [pid 9398:tid 9419] [client 172.212.181.218:8823] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ahNciuhIu7KstzsCua98CAAAAM8"]
[Mon May 25 04:16:10.806527 2026] [:error] [pid 9302:tid 9313] [client 172.212.181.218:8618] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ahNcii1RaFfTSnDQnqEzdAAAAAY"]
[Mon May 25 04:16:11.656680 2026] [:error] [pid 9303:tid 9337] [client 172.212.181.218:7303] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-load.php"] [unique_id "ahNci33bQScbssitjPQWlAAAAEM"]
[Mon May 25 04:16:12.300418 2026] [:error] [pid 9303:tid 9341] [client 172.212.181.218:7351] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ahNcjH3bQScbssitjPQWlgAAAEc"]
[Mon May 25 04:16:12.791081 2026] [:error] [pid 9303:tid 9358] [client 172.212.181.218:8807] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ahNcjH3bQScbssitjPQWlwAAAFg"]
[Mon May 25 04:16:13.435967 2026] [:error] [pid 9398:tid 9420] [client 172.212.181.218:13870] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ahNcjehIu7KstzsCua98EAAAANA"]
[Mon May 25 04:16:13.951215 2026] [:error] [pid 9398:tid 9404] [client 172.212.181.218:9483] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/xwpg.php"] [unique_id "ahNcjehIu7KstzsCua98EQAAAMQ"]
[Mon May 25 04:16:14.724760 2026] [:error] [pid 50423:tid 50449] [client 172.212.181.218:7328] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ahNcjqJWO7En4nKEQ3jxCwAAARg"]
[Mon May 25 04:16:15.264656 2026] [:error] [pid 9304:tid 9364] [client 172.212.181.218:7470] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ahNcj-VEV2qpMC_1UzRVfAAAAIM"]
[Mon May 25 04:16:16.128296 2026] [:error] [pid 9398:tid 9405] [client 172.212.181.218:5782] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ahNckOhIu7KstzsCua98FwAAAMU"]
[Mon May 25 04:16:16.572250 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:6206] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/a5.php"] [unique_id "ahNckOhIu7KstzsCua98GQAAAMg"]
[Mon May 25 04:16:17.011422 2026] [:error] [pid 9398:tid 9422] [client 172.212.181.218:10013] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahNckehIu7KstzsCua98GgAAANI"]
[Mon May 25 04:16:17.464388 2026] [:error] [pid 9398:tid 9421] [client 172.212.181.218:7359] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahNckehIu7KstzsCua98HgAAANE"]
[Mon May 25 04:16:17.944220 2026] [:error] [pid 9304:tid 9376] [client 172.212.181.218:7297] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahNckeVEV2qpMC_1UzRVfQAAAI8"]
[Mon May 25 04:16:18.373959 2026] [:error] [pid 9398:tid 9427] [client 172.212.181.218:8770] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahNckuhIu7KstzsCua98IAAAANc"]
[Mon May 25 04:16:18.765955 2026] [:error] [pid 9303:tid 9354] [client 172.212.181.218:9529] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "ahNckn3bQScbssitjPQWmwAAAFQ"]
[Mon May 25 04:16:19.461807 2026] [:error] [pid 9398:tid 9412] [client 172.212.181.218:5765] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "ahNck-hIu7KstzsCua98JQAAAMg"]
[Mon May 25 04:16:19.892425 2026] [:error] [pid 50423:tid 50436] [client 172.212.181.218:6170] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "ahNck6JWO7En4nKEQ3jxEQAAAQs"]
[Mon May 25 04:16:20.621646 2026] [:error] [pid 9398:tid 9420] [client 172.212.181.218:9500] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/dropdown.php"] [unique_id "ahNclOhIu7KstzsCua98KAAAANA"]
[Mon May 25 04:16:21.278003 2026] [:error] [pid 50423:tid 50435] [client 172.212.181.218:8632] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "ahNclaJWO7En4nKEQ3jxFAAAAQo"]
[Mon May 25 04:16:21.944519 2026] [:error] [pid 50423:tid 50425] [client 172.212.181.218:9748] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "ahNclaJWO7En4nKEQ3jxFQAAAQA"]
[Mon May 25 04:16:22.486148 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:6179] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "ahNcluhIu7KstzsCua98LQAAAMA"]
[Mon May 25 04:16:22.956913 2026] [:error] [pid 9302:tid 9317] [client 172.212.181.218:5774] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ddd.php"] [unique_id "ahNcli1RaFfTSnDQnqEzdwAAAAo"]
[Mon May 25 04:16:23.436062 2026] [:error] [pid 9398:tid 9402] [client 172.212.181.218:7921] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahNcl-hIu7KstzsCua98LgAAAMI"]
[Mon May 25 04:16:23.979515 2026] [:error] [pid 9304:tid 9379] [client 172.212.181.218:9735] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahNcl-VEV2qpMC_1UzRVfgAAAJI"]
[Mon May 25 04:16:24.598108 2026] [:error] [pid 9302:tid 9315] [client 172.212.181.218:11127] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahNcmC1RaFfTSnDQnqEzewAAAAg"]
[Mon May 25 04:16:25.120611 2026] [:error] [pid 9304:tid 9383] [client 172.212.181.218:9777] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahNcmeVEV2qpMC_1UzRVgAAAAJY"]
[Mon May 25 04:16:25.605897 2026] [:error] [pid 50423:tid 50430] [client 172.212.181.218:5121] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jj.php"] [unique_id "ahNcmaJWO7En4nKEQ3jxGwAAAQU"]
[Mon May 25 04:16:26.050470 2026] [:error] [pid 50423:tid 50432] [client 172.212.181.218:7441] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jj.php"] [unique_id "ahNcmqJWO7En4nKEQ3jxHgAAAQc"]
[Mon May 25 04:16:27.294894 2026] [:error] [pid 50423:tid 50434] [client 172.212.181.218:9785] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jj.php"] [unique_id "ahNcm6JWO7En4nKEQ3jxJAAAAQk"]
[Mon May 25 04:16:27.709719 2026] [:error] [pid 9398:tid 9400] [client 172.212.181.218:9450] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/jj.php"] [unique_id "ahNcm-hIu7KstzsCua98MQAAAMA"]
[Mon May 25 04:16:28.130398 2026] [:error] [pid 9303:tid 9335] [client 172.212.181.218:9497] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccc.php"] [unique_id "ahNcnH3bQScbssitjPQWpQAAAEE"]
[Mon May 25 04:16:28.771128 2026] [:error] [pid 9303:tid 9342] [client 172.212.181.218:7466] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccc.php"] [unique_id "ahNcnH3bQScbssitjPQWpgAAAEg"]
[Mon May 25 04:16:29.834580 2026] [:error] [pid 9303:tid 9344] [client 172.212.181.218:7438] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccc.php"] [unique_id "ahNcnX3bQScbssitjPQWqQAAAEo"]
[Mon May 25 04:16:30.322506 2026] [:error] [pid 50423:tid 50434] [client 172.212.181.218:9779] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/ccc.php"] [unique_id "ahNcnqJWO7En4nKEQ3jxMgAAAQk"]
[Mon May 25 04:16:31.309782 2026] [:error] [pid 9304:tid 9378] [client 172.212.181.218:7584] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNcn-VEV2qpMC_1UzRVhAAAAJE"]
[Mon May 25 04:16:31.989159 2026] [:error] [pid 9398:tid 9418] [client 172.212.181.218:8794] [client 172.212.181.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNcn-hIu7KstzsCua98NAAAAM4"]
[Mon May 25 04:16:32.501362 2026] [proxy_fcgi:error] [pid 9302:tid 9318] [client 172.212.181.218:8802] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:16:32.696591 2026] [proxy_fcgi:error] [pid 9302:tid 9329] [client 172.212.181.218:8802] AH01071: Got error 'Primary script unknown'
[Mon May 25 04:16:32.960785 2026] [proxy_fcgi:error] [pid 9302:tid 9325] [client 172.212.181.218:8802] AH01071: Got error 'Primary script unknown'
[Tue May 26 01:32:14.956570 2026] [:error] [pid 62722:tid 62744] [client 170.64.238.42:36712] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSHnqM6ssnLWYf6CVBwdQAAAFQ"]
[Tue May 26 01:32:14.966665 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:36688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSHnhig0_XsOwmnrv-PRwAAANQ"]
[Tue May 26 01:32:14.970293 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:36698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSHnhig0_XsOwmnrv-PSAAAANc"]
[Tue May 26 01:32:15.037190 2026] [:error] [pid 62426:tid 62441] [client 170.64.238.42:36720] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.quarryspec.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSHn0j3D3Mo8ANpTRBjxAAAAAs"]
[Tue May 26 17:05:08.891280 2026] [:error] [pid 55988:tid 56009] [client 34.11.17.55:58704] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/"] [unique_id "ahViRP3kVIz2sql52sdh2AAAARI"]
[Tue May 26 17:05:09.355124 2026] [:error] [pid 20024:tid 20039] [client 34.11.17.55:50703] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRVdk7QtxEB93NpeBwQAAAAE"]
[Tue May 26 17:05:09.825509 2026] [:error] [pid 20024:tid 20059] [client 34.11.17.55:57500] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "quarryspec.com.au"] [uri "/feed/"] [unique_id "ahViRVdk7QtxEB93NpeBxwAAABU"]